From jesper@cisco.com Tue Jan 5 04:55:59 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0504528C0E4 for ; Tue, 5 Jan 2010 04:55:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I6-eulJQt+RD for ; Tue, 5 Jan 2010 04:55:58 -0800 (PST) Received: from ams-iport-2.cisco.com (ams-iport-2.cisco.com [144.254.224.141]) by core3.amsl.com (Postfix) with ESMTP id 5747328C0DE for ; Tue, 5 Jan 2010 04:55:57 -0800 (PST) Authentication-Results: ams-iport-2.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-AV: E=Sophos;i="4.47,505,1257120000"; d="scan'208";a="2167856" Received: from ams-core-1.cisco.com ([144.254.224.150]) by ams-iport-2.cisco.com with ESMTP; 05 Jan 2010 12:27:35 +0000 Received: from [127.0.0.1] (mrwint.cisco.com [64.103.71.48]) by ams-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id o05CtrYU025351; Tue, 5 Jan 2010 12:55:54 GMT Mime-Version: 1.0 (Apple Message framework v1077) Content-Type: text/plain; charset=us-ascii From: Jesper Skriver In-Reply-To: Date: Tue, 5 Jan 2010 14:55:53 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <7B792216-CD0C-403F-A5E0-8D1FE9D8CE12@cisco.com> References: <4BC1F224-C987-45F7-BAAA-DD0EF8F011DB@cisco.com> To: "Templin, Fred L" X-Mailer: Apple Mail (2.1077) Cc: "lisp@ietf.org" Subject: Re: [lisp] Design discussion -06-(1) -> DF=1 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jan 2010 12:55:59 -0000 On 4 Jan 2010, at 21:06, Templin, Fred L wrote: > Jesper, >=20 >> -----Original Message----- >> From: Templin, Fred L >> Sent: Monday, January 04, 2010 7:06 AM >> To: 'Jesper Skriver' >> Cc: Dino Farinacci; lisp@ietf.org >> Subject: RE: [lisp] Design discussion -06-(1) -> DF=3D1 >>=20 >> Hi Jesper, >>=20 >>> -----Original Message----- >>> From: Jesper Skriver [mailto:jesper@cisco.com] >>> Sent: Monday, December 28, 2009 12:42 AM >>> To: Templin, Fred L >>> Cc: Dino Farinacci; lisp@ietf.org >>> Subject: Re: [lisp] Design discussion -06-(1) -> DF=3D1 >>>=20 >>> Fred, >>>=20 >>> On 22 Dec 2009, at 18:24, Templin, Fred L wrote: >>>=20 >>>> Dino, >>>>=20 >>>>> -----Original Message----- >>>>> From: lisp-bounces@ietf.org [mailto:lisp-bounces@ietf.org] On = Behalf Of Dino Farinacci >>>>> Sent: Monday, December 21, 2009 6:36 PM >>>>> To: lisp@ietf.org >>>>> Subject: [lisp] Design discussion -06-(1) -> DF=3D1 >>>>>=20 >>>>> A description of the design issue: >>>>>=20 >>>>> (1) Use stronger language to have the outer IPv4 header set DF=3D1 = so we >>>>> can avoid fragment reassembly in an ETR or PETR. This will = also >>>>> make IPv4 and IPv6 encapsulation have consistent behavior. >>>>>=20 >>>>> Right now the spec does not recommend a preference on the DF = setting >>>>> of an outer IPv4 header. If a LISP encapsulator (a ITR or = PITR/PTR) >>>>> sets DF=3D0 an intermediate router could fragment the packet to = the >>>>> tunnel destination endpoint. That would be a ETR or PETR. We don't >>>>> want to force ETRs and PETRs to reassemble packets if we can be >>>>> practical. We want Path MTU discovery to be used on the path. >>>>>=20 >>>>> Do people have objections to recommending this? >>>>=20 >>>> The two dangers of doing this are that the ITR might not >>>> receive legitimate ICMP "Packet Too Big" (PTB) messages, >>>> and that it might receive spoofed PTBs. The ITR could >>>> simply ignore all PTBs, but then there is danger of a >>>> path MTU black-hole. >>>=20 >>> True, but the same is true for any other traffic sent with DF=3D1, = which is a significant part of all >>> traffic today. Also practical experience with deployment of IPsec = based VPNs shows that path mtu >>> discovery works well in practice. >>=20 >> RFC2923 among others shows that classical path MTU discovery >> can have problems especially in the presence of encapsulation >> when the effective MTU is reduced. That RFC deals with interactions between TCP and path MTU discovery, = which isn't relevant for this discussion, as LISP uses UDP for = transport. LISP using path MTU discovery between ITR and ETR, is independent from = the hosts using path MTU discovery. That said, path MTU discovery isn't fault free, but it is the best we = got, and practical experience shows it to be working well - also it is = mandated for IPv6, so why make LISP over IPv4 and IPv6 behave = differently ? >>> Indicating in the spec that path MTU discovery should be used, will = ensure that it will be a rare >>> event that an ETR or P-ETR will have to do reassembly prior to = decap. Yet at the same time allow an >>> ITR, which has problems receiving ICMP packet too big messages, to = disable path MTU discovery for >>> packets generated by it. >>>=20 >>> As it is the ITR which both controls if it sets DF=3D1 and it is the = ITR which can have problems >>> receiving ICMP packet too big messages, the control for solving any = problem seen lies with the one >>> that experience the problem, and thus we do not have a case where = someone experiencing problems need >>> to coordinate with a large number of other parties. >>>=20 >>> On the other hand, if we encourage packets to be sent with DF=3D0, = and an ETR is connected via a lower >>> MTU link that the typical ITR, then packets destined to that ETR = with DF=3D0 will be typically be >>> fragmented in the network before reaching the ETR. Forcing the ETR = to do reassembly, without any way >>> of preventing it, short of contacting the admin of any ITR which = will be sending it traffic - >>> something which clearly is not practical. >>=20 >> You are assuming that DF=3D0 means that the ETR will need to >> reassemble if an MTU restriction is encountered - I am not. >> I am proposing that the ITR sets DF=3D0 always, and that the >> ETR listens for IP fragments. When the ETR receives an IP >> first-fragment of a LISP packet, it sends a "packet too >> big" message back to the ITR then systematically discards >> all IP fragments of LISP packets that required fragmentation >> *without performing reassembly*. The ETR would only be able to identify the first fragment, as being a = LISP packet, any subsequent fragments would not be identifiable, and as = the ETR still needs to do reassembly for other IPv4 packets, these = non-initial fragments would have to go into the fragmentation buffers, = awaiting the initial fragment to arrive - which it never will. I don't see this being practically implementable. >> Upon receiving the "packet >> too big", the ITR will reduce the size of the packets it >> sends, and the IP fragmentation will be tuned out. >=20 > Responding to my own proposal, rather than inserting any > complicated machinery to discard fragmented LISP packets > while reassembling others, the simplest solution would be > to just set the ETR's reassembly buffer size to 576. >=20 > That way, any fragmented LISP packets would be discarded > (since the unfragmented packet would almost certainly be > larger than 576 bytes), yet RFC1812 which requires a 576 > byte minimum reassembly capability would be honored. That would also break re-assembly of any other fragmented IPv4 packet = received by the ETR, which I do not believe would be acceptable. /Jesper >=20 > Fred > fred.l.templin@boeing.com=20 >=20 >> Fred >> fred.l.templin@boeing.com >>=20 >>> /Jesper >>>=20 >>>=20 >>>=20 >>>>=20 >>>> Fred >>>> fred.l.templin@boeing.com >>>>=20 >>>>> Thanks, >>>>> Dino/Darrel >>>>> _______________________________________________ >>>>> lisp mailing list >>>>> lisp@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/lisp >>>> _______________________________________________ >>>> lisp mailing list >>>> lisp@ietf.org >>>> https://www.ietf.org/mailman/listinfo/lisp >>>=20 >>> /Jesper >>>=20 >>>=20 >>>=20 /Jesper From Fred.L.Templin@boeing.com Tue Jan 5 09:53:45 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E468C28C149 for ; Tue, 5 Jan 2010 09:53:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.979 X-Spam-Level: X-Spam-Status: No, score=-5.979 tagged_above=-999 required=5 tests=[AWL=-0.620, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, SARE_LWSHORTT=1.24] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qsuB+CsdLsQG for ; Tue, 5 Jan 2010 09:53:44 -0800 (PST) Received: from stl-smtpout-01.boeing.com (stl-smtpout-01.boeing.com [130.76.96.56]) by core3.amsl.com (Postfix) with ESMTP id 92A4128C177 for ; Tue, 5 Jan 2010 09:53:41 -0800 (PST) Received: from blv-av-01.boeing.com (blv-av-01.boeing.com [130.247.48.231]) by stl-smtpout-01.ns.cs.boeing.com (8.14.0/8.14.0/8.14.0/SMTPOUT) with ESMTP id o05HrURC024476 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Tue, 5 Jan 2010 11:53:31 -0600 (CST) Received: from blv-av-01.boeing.com (localhost [127.0.0.1]) by blv-av-01.boeing.com (8.14.0/8.14.0/DOWNSTREAM_RELAY) with ESMTP id o05HrUfC010407; Tue, 5 Jan 2010 09:53:30 -0800 (PST) Received: from XCH-NWHT-05.nw.nos.boeing.com (xch-nwht-05.nw.nos.boeing.com [130.247.25.109]) by blv-av-01.boeing.com (8.14.0/8.14.0/UPSTREAM_RELAY) with ESMTP id o05HrUJH010404 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=OK); Tue, 5 Jan 2010 09:53:30 -0800 (PST) Received: from XCH-NW-01V.nw.nos.boeing.com ([130.247.64.97]) by XCH-NWHT-05.nw.nos.boeing.com ([130.247.25.109]) with mapi; Tue, 5 Jan 2010 09:53:30 -0800 From: "Templin, Fred L" To: Jesper Skriver Date: Tue, 5 Jan 2010 09:53:28 -0800 Thread-Topic: [lisp] Design discussion -06-(1) -> DF=1 Thread-Index: AcqOBm3JkTE8QiP+QjCserS6TpyYbQAIkgLA Message-ID: References: <4BC1F224-C987-45F7-BAAA-DD0EF8F011DB@cisco.com> <7B792216-CD0C-403F-A5E0-8D1FE9D8CE12@cisco.com> In-Reply-To: <7B792216-CD0C-403F-A5E0-8D1FE9D8CE12@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "lisp@ietf.org" Subject: Re: [lisp] Design discussion -06-(1) -> DF=1 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jan 2010 17:53:46 -0000 Jesper - see below: > -----Original Message----- > From: Jesper Skriver [mailto:jesper@cisco.com] > Sent: Tuesday, January 05, 2010 4:56 AM > To: Templin, Fred L > Cc: Dino Farinacci; lisp@ietf.org > Subject: Re: [lisp] Design discussion -06-(1) -> DF=3D1 >=20 >=20 > On 4 Jan 2010, at 21:06, Templin, Fred L wrote: >=20 > > Jesper, > > > >> -----Original Message----- > >> From: Templin, Fred L > >> Sent: Monday, January 04, 2010 7:06 AM > >> To: 'Jesper Skriver' > >> Cc: Dino Farinacci; lisp@ietf.org > >> Subject: RE: [lisp] Design discussion -06-(1) -> DF=3D1 > >> > >> Hi Jesper, > >> > >>> -----Original Message----- > >>> From: Jesper Skriver [mailto:jesper@cisco.com] > >>> Sent: Monday, December 28, 2009 12:42 AM > >>> To: Templin, Fred L > >>> Cc: Dino Farinacci; lisp@ietf.org > >>> Subject: Re: [lisp] Design discussion -06-(1) -> DF=3D1 > >>> > >>> Fred, > >>> > >>> On 22 Dec 2009, at 18:24, Templin, Fred L wrote: > >>> > >>>> Dino, > >>>> > >>>>> -----Original Message----- > >>>>> From: lisp-bounces@ietf.org [mailto:lisp-bounces@ietf.org] On Behal= f Of Dino Farinacci > >>>>> Sent: Monday, December 21, 2009 6:36 PM > >>>>> To: lisp@ietf.org > >>>>> Subject: [lisp] Design discussion -06-(1) -> DF=3D1 > >>>>> > >>>>> A description of the design issue: > >>>>> > >>>>> (1) Use stronger language to have the outer IPv4 header set DF=3D1 = so we > >>>>> can avoid fragment reassembly in an ETR or PETR. This will also > >>>>> make IPv4 and IPv6 encapsulation have consistent behavior. > >>>>> > >>>>> Right now the spec does not recommend a preference on the DF settin= g > >>>>> of an outer IPv4 header. If a LISP encapsulator (a ITR or PITR/PTR) > >>>>> sets DF=3D0 an intermediate router could fragment the packet to the > >>>>> tunnel destination endpoint. That would be a ETR or PETR. We don't > >>>>> want to force ETRs and PETRs to reassemble packets if we can be > >>>>> practical. We want Path MTU discovery to be used on the path. > >>>>> > >>>>> Do people have objections to recommending this? > >>>> > >>>> The two dangers of doing this are that the ITR might not > >>>> receive legitimate ICMP "Packet Too Big" (PTB) messages, > >>>> and that it might receive spoofed PTBs. The ITR could > >>>> simply ignore all PTBs, but then there is danger of a > >>>> path MTU black-hole. > >>> > >>> True, but the same is true for any other traffic sent with DF=3D1, wh= ich is a significant part of > all > >>> traffic today. Also practical experience with deployment of IPsec bas= ed VPNs shows that path mtu > >>> discovery works well in practice. > >> > >> RFC2923 among others shows that classical path MTU discovery > >> can have problems especially in the presence of encapsulation > >> when the effective MTU is reduced. >=20 > That RFC deals with interactions between TCP and path MTU discovery, whic= h isn't relevant for this > discussion, as LISP uses UDP for transport. While the title of the document includes "TCP" and analyzes the issues within the context of TCP, the issues are really an IP-layer consideration and hence apply for any IP protocol including UDP. Also, I did not intend the citation of RFC2923 as being the only such reference. There have been numerous other discussions of path MTU-related operational issues that are readily available through a google search - especially wrt interactions with encapsulation.=20 > LISP using path MTU discovery between ITR and ETR, is independent from th= e hosts using path MTU > discovery. I think it may be more correct to say that the two are interdependent. Yes, the LISP ITR discovers MTU restrictions that occur within the tunnel. But, then it must relay information regarding the restrictions back to the original hosts. So, if the LISP ITR does not get path MTU feedback then the original sources don't get it either. > That said, path MTU discovery isn't fault free, but it is the best we got= , What I am suggesting is much better, however, and also simple to implement. > and practical experience > shows it to be working well - also it is mandated for IPv6, so why make L= ISP over IPv4 and IPv6 > behave differently ? IPv6 fixes some of the issues in that the ICMP PTB messages are mandated to contain enough information for the ITR to correlate the PTB message with the actual data packet that triggered it. With IPv4, Fragmentation Needed messages need only contain 8 bytes beyond the original packet header which may not be enough for correlation or translation. But, with both IPv6 and IPv4 path MTU discovery there is a reliance on anonymous routers within the tunnel generating correct ICMP messages and a reliance on the messages arriving at the ITR without being dropped by a packet filter. What I am suggesting avoids these dependencies because the ETR is the only party that can generate the PTB messages; none of the routers in the "black box" between the ITR and ETR participate in the MTU discovery other than to perform the mandatory IP fragmentation that is required of them. Also, the PTB messages generated by the ETR simply look like ordinary LISP packets so they should not be dropped by any packet filters.=20 > >>> Indicating in the spec that path MTU discovery should be used, will e= nsure that it will be a rare > >>> event that an ETR or P-ETR will have to do reassembly prior to decap.= Yet at the same time allow > an > >>> ITR, which has problems receiving ICMP packet too big messages, to di= sable path MTU discovery for > >>> packets generated by it. > >>> > >>> As it is the ITR which both controls if it sets DF=3D1 and it is the = ITR which can have problems > >>> receiving ICMP packet too big messages, the control for solving any p= roblem seen lies with the > one > >>> that experience the problem, and thus we do not have a case where som= eone experiencing problems > need > >>> to coordinate with a large number of other parties. > >>> > >>> On the other hand, if we encourage packets to be sent with DF=3D0, an= d an ETR is connected via a > lower > >>> MTU link that the typical ITR, then packets destined to that ETR with= DF=3D0 will be typically be > >>> fragmented in the network before reaching the ETR. Forcing the ETR to= do reassembly, without any > way > >>> of preventing it, short of contacting the admin of any ITR which will= be sending it traffic - > >>> something which clearly is not practical. > >> > >> You are assuming that DF=3D0 means that the ETR will need to > >> reassemble if an MTU restriction is encountered - I am not. > >> I am proposing that the ITR sets DF=3D0 always, and that the > >> ETR listens for IP fragments. When the ETR receives an IP > >> first-fragment of a LISP packet, it sends a "packet too > >> big" message back to the ITR then systematically discards > >> all IP fragments of LISP packets that required fragmentation > >> *without performing reassembly*. >=20 > The ETR would only be able to identify the first fragment, as being a LIS= P packet, any subsequent > fragments would not be identifiable, and as the ETR still needs to do rea= ssembly for other IPv4 > packets, these non-initial fragments would have to go into the fragmentat= ion buffers, awaiting the > initial fragment to arrive - which it never will. >=20 > I don't see this being practically implementable. I agree, hence my follow-up message. But, see more below: > >> Upon receiving the "packet > >> too big", the ITR will reduce the size of the packets it > >> sends, and the IP fragmentation will be tuned out. > > > > Responding to my own proposal, rather than inserting any > > complicated machinery to discard fragmented LISP packets > > while reassembling others, the simplest solution would be > > to just set the ETR's reassembly buffer size to 576. > > > > That way, any fragmented LISP packets would be discarded > > (since the unfragmented packet would almost certainly be > > larger than 576 bytes), yet RFC1812 which requires a 576 > > byte minimum reassembly capability would be honored. >=20 > That would also break re-assembly of any other fragmented IPv4 packet rec= eived by the ETR, which I do > not believe would be acceptable. OK, then let's not have the ETR mess with the reassembly buffer size at all and just perform normal IP reassembly. That way, if LISP packets from an ITR are being fragmented the ETR may need to reassemble for a very short term while its "Packet Too Big" messages are traveling back to the ITR. But, once the ITR gets the PTB it will reduce the size of the packets it is sending until the ETR no longer receives any fragmented LISP packets. However, the ETR should drop any LISP packets that arrived as multiple IP fragments following reassembly. Otherwise, packets that are too large to traverse the tunnel in one piece may wind up making it through to the final destination which may be confused into thinking that the path MTU is larger than it actually is. Fred fred.l.tempin@boeing.com >=20 > /Jesper >=20 > > > > Fred > > fred.l.templin@boeing.com > > > >> Fred > >> fred.l.templin@boeing.com > >> > >>> /Jesper > >>> > >>> > >>> > >>>> > >>>> Fred > >>>> fred.l.templin@boeing.com > >>>> > >>>>> Thanks, > >>>>> Dino/Darrel > >>>>> _______________________________________________ > >>>>> lisp mailing list > >>>>> lisp@ietf.org > >>>>> https://www.ietf.org/mailman/listinfo/lisp > >>>> _______________________________________________ > >>>> lisp mailing list > >>>> lisp@ietf.org > >>>> https://www.ietf.org/mailman/listinfo/lisp > >>> > >>> /Jesper > >>> > >>> > >>> >=20 > /Jesper >=20 >=20 >=20 From darlewis@cisco.com Tue Jan 5 12:16:53 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BB07A3A689F for ; Tue, 5 Jan 2010 12:16:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gj7DwnbM8nHD for ; Tue, 5 Jan 2010 12:16:52 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id D59733A68DA for ; Tue, 5 Jan 2010 12:16:52 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAEYtQ0urR7Hu/2dsb2JhbAC/DZRKhDAE X-IronPort-AV: E=Sophos;i="4.49,224,1262563200"; d="scan'208";a="461867310" Received: from sj-core-5.cisco.com ([171.71.177.238]) by sj-iport-6.cisco.com with ESMTP; 05 Jan 2010 20:16:51 +0000 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id o05KGpp2020788 for ; Tue, 5 Jan 2010 20:16:51 GMT Received: from xmb-sjc-213.amer.cisco.com ([171.70.151.153]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 5 Jan 2010 12:16:51 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Tue, 5 Jan 2010 12:16:50 -0800 Message-ID: In-Reply-To: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Design discussion -06-(3) -> return all overlapping prefixes Thread-Index: AcqCr8IgIXSt+o9NTCSjJ4K9+itAhQLk9BJw References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> From: "Darrel Lewis (darlewis)" To: "Dino Farinacci (dino)" , X-OriginalArrivalTime: 05 Jan 2010 20:16:51.0675 (UTC) FILETIME=[046E7AB0:01CA8E44] Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jan 2010 20:16:53 -0000 > A description of the design issue: >=20 > (3) Add text in section 6.1.5 about returning all EID-prefixes in a > Map-Reply sent by an ETR when there are overlapping EID-prefixes > configure. >=20 > If a LISP site is configured with EID-prefixes that overlay, that is =20 > say it is configured with an EID-prefix of 10.1.0.0/16 and also =20 > 10.1.0.0/24 we need better language in the spec to indicate how this =20 > is dealt with. Because if a Map-Request is sent for 10.1.1.1, and if =20 > the ETR only returns a Map-Reply for 10.1.0.0/16, then a Map-Request =20 > for 10.1.0.1 will use the locator-set from the 10.1.0.0/16 map-cache =20 > entry and not for the 10.1.0.0/24 entry which could have a different =20 > locator-set. So we want to write language in the spec to have an ETR =20 > return all EID-prefixes in the Map-Reply. >=20 > Any objections to this? >=20 Thinking of this further I would suggest that all the overlapping EID-prefixes returned in the map-reply should have the same TTL. Later in this thread, you suggested only returning the more specific matches, but would encourage the ETR to return all mappings, because the presence of the covering aggregate in an ITR's map-cache will suppress further queries to these (other) more specifics. -Darrel From luigi@net.t-labs.tu-berlin.de Wed Jan 6 04:37:26 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 667493A6853 for ; Wed, 6 Jan 2010 04:37:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.248 X-Spam-Level: X-Spam-Status: No, score=-2.248 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qHklZDes7gb7 for ; Wed, 6 Jan 2010 04:37:25 -0800 (PST) Received: from mail.net.t-labs.tu-berlin.de (mail.net.t-labs.tu-berlin.de [130.149.220.252]) by core3.amsl.com (Postfix) with ESMTP id CBE453A6847 for ; Wed, 6 Jan 2010 04:37:24 -0800 (PST) Received: from dyn100.net.t-labs.tu-berlin.de (dyn100.net.t-labs.tu-berlin.de [130.149.220.100]) by mail.net.t-labs.tu-berlin.de (Postfix) with ESMTP id BDF5C700DD59; Wed, 6 Jan 2010 13:37:22 +0100 (CET) Mime-Version: 1.0 (Apple Message framework v1077) Content-Type: multipart/alternative; boundary=Apple-Mail-31-1006399312 From: Luigi Iannone In-Reply-To: Date: Wed, 6 Jan 2010 13:37:20 +0100 Message-Id: References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> To: Darrel Lewis (darlewis) X-Mailer: Apple Mail (2.1077) Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jan 2010 12:37:26 -0000 --Apple-Mail-31-1006399312 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Darrel, On Jan 5, 2010, at 21:16 , Darrel Lewis (darlewis) wrote: >=20 > Thinking of this further I would suggest that all the overlapping > EID-prefixes returned in the map-reply should have the same TTL. >=20 Is there a specific reason for this suggestion? Wouldn't having different TTL values be an interesting feature? For instance, a more specific can be used for a specific purpose that = needs shorter TTL compared to the less specific that covers the whole = site and is (most probably) more stable. Luigi > Later in this thread, you suggested only returning the more specific > matches, but would encourage the ETR to return all mappings, because = the > presence of the covering aggregate in an ITR's map-cache will suppress > further queries to these (other) more specifics. >=20 > -Darrel > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp --Apple-Mail-31-1006399312 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Hi = Darrel,

On Jan 5, 2010, at 21:16 , Darrel Lewis = (darlewis) wrote:

Thinking of this = further I would suggest that all the overlapping
EID-prefixes = returned in the map-reply should have the same = TTL.


Is there a specific = reason for this suggestion?

Wouldn't having = different TTL values be an interesting feature?
For instance, = a more specific can be used for a specific purpose that needs shorter = TTL compared to the less specific that covers the whole site and is = (most probably) more = stable.

Luigi


Later in this thread, you suggested only returning = the more specific
matches, but would encourage the ETR to return all = mappings, because the
presence of the covering aggregate in an ITR's = map-cache will suppress
further queries to these (other) more = specifics.

-Darrel
_____________________________________________= __
lisp mailing list
lisp@ietf.org
https://www.ietf.org/ma= ilman/listinfo/lisp

= --Apple-Mail-31-1006399312-- From jmh@joelhalpern.com Wed Jan 6 08:14:50 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BCB473A68EB for ; Wed, 6 Jan 2010 08:14:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.949 X-Spam-Level: X-Spam-Status: No, score=-2.949 tagged_above=-999 required=5 tests=[AWL=0.650, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Paxq6b7MBvym for ; Wed, 6 Jan 2010 08:14:49 -0800 (PST) Received: from hermes.mail.tigertech.net (hermes.mail.tigertech.net [64.62.209.72]) by core3.amsl.com (Postfix) with ESMTP id F3CE83A6896 for ; Wed, 6 Jan 2010 08:14:48 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hermes.tigertech.net (Postfix) with ESMTP id 0D29F4303C4 for ; Wed, 6 Jan 2010 08:14:48 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at hermes.tigertech.net Received: from [10.10.10.102] (pool-71-161-51-192.clppva.btas.verizon.net [71.161.51.192]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hermes.tigertech.net (Postfix) with ESMTP id 885414303BA for ; Wed, 6 Jan 2010 08:14:47 -0800 (PST) Message-ID: <4B44B6F5.5060107@joelhalpern.com> Date: Wed, 06 Jan 2010 11:14:45 -0500 From: "Joel M. Halpern" User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: lisp@ietf.org References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jan 2010 16:14:50 -0000 Wouldn't it be much simpler just to not use overlapping prefixes? Then we don't have to figure out if there is a TTL relationship. We don't have to figure out if aresponse to one block should include other related blocks. And we don't have to examine the result for failing corner-cases. I would be interested to hear why we would want to allow overlapping prefixes, personally. Yours, Joel Luigi Iannone wrote: > Hi Darrel, > > On Jan 5, 2010, at 21:16 , Darrel Lewis (darlewis) wrote: >> >> Thinking of this further I would suggest that all the overlapping >> EID-prefixes returned in the map-reply should have the same TTL. >> > > Is there a specific reason for this suggestion? > > Wouldn't having different TTL values be an interesting feature? > For instance, a more specific can be used for a specific purpose that > needs shorter TTL compared to the less specific that covers the whole > site and is (most probably) more stable. > > Luigi > > >> Later in this thread, you suggested only returning the more specific >> matches, but would encourage the ETR to return all mappings, because the >> presence of the covering aggregate in an ITR's map-cache will suppress >> further queries to these (other) more specifics. >> >> -Darrel >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp > > > ------------------------------------------------------------------------ > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From darlewis@cisco.com Wed Jan 6 10:18:57 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 75F903A6921 for ; Wed, 6 Jan 2010 10:18:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OtD+Q+7Nxjmy for ; Wed, 6 Jan 2010 10:18:56 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 71AD63A6905 for ; Wed, 6 Jan 2010 10:18:56 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAONiREurR7H+/2dsb2JhbAC/FJNghDAE X-IronPort-AV: E=Sophos;i="4.49,230,1262563200"; d="scan'208,217";a="462542618" Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-6.cisco.com with ESMTP; 06 Jan 2010 18:18:55 +0000 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id o06IIskm010555; Wed, 6 Jan 2010 18:18:55 GMT Received: from xmb-sjc-213.amer.cisco.com ([171.70.151.153]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 6 Jan 2010 10:18:55 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CA8EFC.B46AC36B" Date: Wed, 6 Jan 2010 10:18:53 -0800 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Design discussion -06-(3) -> return all overlapping prefixes Thread-Index: AcqOzQFe/zTLdJNjS0WsZV35GwOT6QAL0Njg References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> From: "Darrel Lewis (darlewis)" To: "Luigi Iannone" X-OriginalArrivalTime: 06 Jan 2010 18:18:55.0102 (UTC) FILETIME=[B4E0E1E0:01CA8EFC] Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jan 2010 18:18:57 -0000 This is a multi-part message in MIME format. ------_=_NextPart_001_01CA8EFC.B46AC36B Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Luigi, =20 The main reason I can think of that you want consistent TTL is that if a sub (more specific) prefix's TTL times out, the ITR will not know to look for the more specific. So while I agree that its intuitive for the main prefix to have a longer TTL, I think it could have undesirable side effects. =20 -Darrel =20 ________________________________ From: Luigi Iannone [mailto:luigi@net.t-labs.tu-berlin.de]=20 Sent: Wednesday, January 06, 2010 4:37 AM To: Darrel Lewis (darlewis) Cc: Dino Farinacci (dino); lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes =09 =09 Hi Darrel,=20 On Jan 5, 2010, at 21:16 , Darrel Lewis (darlewis) wrote: =09 Thinking of this further I would suggest that all the overlapping EID-prefixes returned in the map-reply should have the same TTL. =09 =09 Is there a specific reason for this suggestion? Wouldn't having different TTL values be an interesting feature? For instance, a more specific can be used for a specific purpose that needs shorter TTL compared to the less specific that covers the whole site and is (most probably) more stable. Luigi Later in this thread, you suggested only returning the more specific matches, but would encourage the ETR to return all mappings, because the presence of the covering aggregate in an ITR's map-cache will suppress further queries to these (other) more specifics. =09 -Darrel _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp =09 ------_=_NextPart_001_01CA8EFC.B46AC36B Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Luigi,
 
The main reason I can think of that you want = consistent TTL=20 is that if a sub (more specific) prefix's TTL times out, the ITR will = not know=20 to look for the more specific.   So while I agree that its = intuitive=20 for the main prefix to have a longer TTL, I think it could have = undesirable side=20 effects.
 
-Darrel
 

From: Luigi Iannone=20 [mailto:luigi@net.t-labs.tu-berlin.de]
Sent: Wednesday, = January 06,=20 2010 4:37 AM
To: Darrel Lewis (darlewis)
Cc: Dino=20 Farinacci (dino); lisp@ietf.org
Subject: Re: [lisp] Design=20 discussion -06-(3) -> return all overlapping = prefixes

Hi Darrel,

On Jan 5, 2010, at 21:16 , Darrel Lewis (darlewis) wrote:

Thinking of this=20 further I would suggest that all the overlapping
EID-prefixes = returned in=20 the map-reply should have the same TTL.


Is there a specific reason for this suggestion?

Wouldn't having different TTL values be an interesting = feature?
For instance, a more specific can be used for a specific purpose = that=20 needs shorter TTL compared to the less specific that covers the whole = site and=20 is (most probably) more stable.

Luigi


Later in this thread, you suggested only returning the more=20 specific
matches, but would encourage the ETR to return all = mappings,=20 because the
presence of the covering aggregate in an ITR's = map-cache will=20 suppress
further queries to these (other) more=20 = specifics.

-Darrel
____________________________________________= ___
lisp=20 mailing list
lisp@ietf.org
https://www.ietf.org/m= ailman/listinfo/lisp

<= /BODY> ------_=_NextPart_001_01CA8EFC.B46AC36B-- From dino@cisco.com Wed Jan 6 10:32:05 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B88343A6805 for ; Wed, 6 Jan 2010 10:32:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wfqwR7dKNrjG for ; Wed, 6 Jan 2010 10:32:04 -0800 (PST) Received: from sj-iport-1.cisco.com (sj-iport-1.cisco.com [171.71.176.70]) by core3.amsl.com (Postfix) with ESMTP id E05173A684F for ; Wed, 6 Jan 2010 10:32:04 -0800 (PST) Authentication-Results: sj-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAD9mREurR7Ht/2dsb2JhbAC/EZNghDAE X-IronPort-AV: E=Sophos;i="4.49,230,1262563200"; d="scan'208";a="285504835" Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-1.cisco.com with ESMTP; 06 Jan 2010 18:31:01 +0000 Received: from xbh-sjc-221.amer.cisco.com (xbh-sjc-221.cisco.com [128.107.191.63]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id o06IV1Zn029742; Wed, 6 Jan 2010 18:31:01 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-221.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 6 Jan 2010 10:31:01 -0800 Received: from [192.168.5.30] ([10.21.90.204]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 6 Jan 2010 10:31:01 -0800 Message-Id: <1AAC3E13-D357-4290-86D2-445170A25A52@cisco.com> From: Dino Farinacci To: "Joel M. Halpern" In-Reply-To: <4B44B6F5.5060107@joelhalpern.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) Date: Wed, 6 Jan 2010 10:30:59 -0800 References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> <4B44B6F5.5060107@joelhalpern.com> X-Mailer: Apple Mail (2.936) X-OriginalArrivalTime: 06 Jan 2010 18:31:01.0286 (UTC) FILETIME=[65B7C460:01CA8EFE] Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jan 2010 18:32:05 -0000 > Wouldn't it be much simpler just to not use overlapping prefixes? > Then we don't have to figure out if there is a TTL relationship. We > don't have to figure out if aresponse to one block should include > other related blocks. And we don't have to examine the result for > failing corner-cases. Joel, I too would prefer to go this route. But could we specify in the spec that if this rare case happens, that what is returned is all more specifics? > I would be interested to hear why we would want to allow overlapping > prefixes, personally. There are policy reasons for returning more specifics with a different locator-set than the coarse prefix. That is if you wanted to regionalize your LISP site where the more-specifics are branches, with a locator-set for that region and the coarse prefix is for the main hub sites (with all locators included perhaps). And for the LISP-MN case, we day the /32 EIDs for MNs don't come out of an EID-prefix that is used in the mapping system for another site. As you had mentioned in early email. We need to drive consensus on this before making progress on the spec. Any suggestions? Dino > > Yours, > Joel > > Luigi Iannone wrote: >> Hi Darrel, >> On Jan 5, 2010, at 21:16 , Darrel Lewis (darlewis) wrote: >>> >>> Thinking of this further I would suggest that all the overlapping >>> EID-prefixes returned in the map-reply should have the same TTL. >>> >> Is there a specific reason for this suggestion? >> Wouldn't having different TTL values be an interesting feature? >> For instance, a more specific can be used for a specific purpose >> that needs shorter TTL compared to the less specific that covers >> the whole site and is (most probably) more stable. >> Luigi >>> Later in this thread, you suggested only returning the more specific >>> matches, but would encourage the ETR to return all mappings, >>> because the >>> presence of the covering aggregate in an ITR's map-cache will >>> suppress >>> further queries to these (other) more specifics. >>> >>> -Darrel >>> _______________________________________________ >>> lisp mailing list >>> lisp@ietf.org >>> https://www.ietf.org/mailman/listinfo/lisp >> ------------------------------------------------------------------------ >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From darlewis@cisco.com Wed Jan 6 10:51:31 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 38CA43A6936 for ; Wed, 6 Jan 2010 10:51:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1kg7vzEn9-Ki for ; Wed, 6 Jan 2010 10:51:30 -0800 (PST) Received: from sj-iport-2.cisco.com (sj-iport-2.cisco.com [171.71.176.71]) by core3.amsl.com (Postfix) with ESMTP id E61F43A6932 for ; Wed, 6 Jan 2010 10:51:29 -0800 (PST) Authentication-Results: sj-iport-2.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAPRpREurR7Hu/2dsb2JhbAC/KJNihDAE X-IronPort-AV: E=Sophos;i="4.49,230,1262563200"; d="scan'208";a="231105458" Received: from sj-core-5.cisco.com ([171.71.177.238]) by sj-iport-2.cisco.com with ESMTP; 06 Jan 2010 18:51:28 +0000 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id o06IpSEB001170; Wed, 6 Jan 2010 18:51:28 GMT Received: from xmb-sjc-213.amer.cisco.com ([171.70.151.153]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 6 Jan 2010 10:51:28 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Wed, 6 Jan 2010 10:51:27 -0800 Message-ID: In-Reply-To: <4B44B6F5.5060107@joelhalpern.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Design discussion -06-(3) -> return alloverlapping prefixes Thread-Index: AcqO63iznk5NINW4QDqsnip0p9QzzwAEVnLQ References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> <4B44B6F5.5060107@joelhalpern.com> From: "Darrel Lewis (darlewis)" To: "Joel M. Halpern" , X-OriginalArrivalTime: 06 Jan 2010 18:51:28.0706 (UTC) FILETIME=[41513220:01CA8F01] Subject: Re: [lisp] Design discussion -06-(3) -> return alloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jan 2010 18:51:31 -0000 =20 > I would be interested to hear why we would want to allow overlapping=20 > prefixes, personally. >=20 Hi Joel, An example use case I have in mind is on-demand pushback: Lets say you are an enterprise with the eid 240.1.0.0/24 as an EID. You have a server, 240.1.1.100/32 that comes under a DDoS attack. This DDoS attack is filling your access link's bandwidth. Now as the site's operator you can add a more specific mapping for 240.1.1.100/32 with the action of Drop. Remote cache's then (once they are updated, with this cache coherency (Dave Meyer's term) issue being a separate topic) traffic to this /32 will be dropped at the ITR (or Proxy ITR)!!! Now your access bandwidth is freed up and the DDoS attack is being dropped by the source of the attack. IMO this is a fundamental change to the security capabilities of your site, and something that could really be a deployment incentive for LISP. While it does add some complexity to the design, I think it is worth it. There are obviously other use cases for TE, but this one I think deserves special consideration. -Darrel From jmh@joelhalpern.com Wed Jan 6 11:39:33 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B8EDE3A685B for ; Wed, 6 Jan 2010 11:39:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.174 X-Spam-Level: X-Spam-Status: No, score=-3.174 tagged_above=-999 required=5 tests=[AWL=0.425, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id THeeRAh2ESiy for ; Wed, 6 Jan 2010 11:39:33 -0800 (PST) Received: from hermes.mail.tigertech.net (hermes.mail.tigertech.net [64.62.209.72]) by core3.amsl.com (Postfix) with ESMTP id 08DE93A6814 for ; Wed, 6 Jan 2010 11:39:33 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hermes.tigertech.net (Postfix) with ESMTP id DAC404303E6; Wed, 6 Jan 2010 11:39:31 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at hermes.tigertech.net Received: from [10.10.10.102] (pool-71-161-51-192.clppva.btas.verizon.net [71.161.51.192]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hermes.tigertech.net (Postfix) with ESMTP id 482E44303CF; Wed, 6 Jan 2010 11:39:31 -0800 (PST) Message-ID: <4B44E6F1.7030208@joelhalpern.com> Date: Wed, 06 Jan 2010 14:39:29 -0500 From: "Joel M. Halpern" User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: "Darrel Lewis (darlewis)" References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> <4B44B6F5.5060107@joelhalpern.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return alloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jan 2010 19:39:33 -0000 Does this assume use of a header bit in the data packet to trigger control revalidation? (Without that, I just can't see how this case would work, even if we allowed it.) Yours, Joel Darrel Lewis (darlewis) wrote: > >> I would be interested to hear why we would want to allow overlapping >> prefixes, personally. >> > > Hi Joel, > > An example use case I have in mind is on-demand pushback: > > Lets say you are an enterprise with the eid 240.1.0.0/24 as an EID. You > have a server, 240.1.1.100/32 that comes under a DDoS attack. This DDoS > attack is filling your access link's bandwidth. > > Now as the site's operator you can add a more specific mapping for > 240.1.1.100/32 with the action of Drop. > > Remote cache's then (once they are updated, with this cache coherency > (Dave Meyer's term) issue being a separate topic) traffic to this /32 > will be dropped at the ITR (or Proxy ITR)!!! Now your access bandwidth > is freed up and the DDoS attack is being dropped by the source of the > attack. > > IMO this is a fundamental change to the security capabilities of your > site, and something that could really be a deployment incentive for > LISP. While it does add some complexity to the design, I think it is > worth it. There are obviously other use cases for TE, but this one I > think deserves special consideration. > > -Darrel > From darlewis@cisco.com Wed Jan 6 11:43:48 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C0B823A693C for ; Wed, 6 Jan 2010 11:43:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qg8zn3QP0JEm for ; Wed, 6 Jan 2010 11:43:48 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id E55BD3A6814 for ; Wed, 6 Jan 2010 11:43:47 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAM92REurR7Ht/2dsb2JhbAC/WZNmhDAE X-IronPort-AV: E=Sophos;i="4.49,231,1262563200"; d="scan'208";a="462603014" Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-6.cisco.com with ESMTP; 06 Jan 2010 19:43:41 +0000 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id o06Jhf64003029; Wed, 6 Jan 2010 19:43:41 GMT Received: from xmb-sjc-213.amer.cisco.com ([171.70.151.153]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 6 Jan 2010 11:43:41 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Wed, 6 Jan 2010 11:43:41 -0800 Message-ID: In-Reply-To: <4B44E6F1.7030208@joelhalpern.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Design discussion -06-(3) -> return alloverlapping prefixes Thread-Index: AcqPB/4rU7hT0qC+TH+ZcHa76gtPwQAAFGEQ References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> <4B44B6F5.5060107@joelhalpern.com> <4B44E6F1.7030208@joelhalpern.com> From: "Darrel Lewis (darlewis)" To: "Joel M. Halpern" X-OriginalArrivalTime: 06 Jan 2010 19:43:41.0882 (UTC) FILETIME=[8CD5E9A0:01CA8F08] Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return alloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jan 2010 19:43:48 -0000 > Does this assume use of a header bit in the data packet to trigger=20 > control revalidation? (Without that, I just can't see how this case=20 > would work, even if we allowed it.) >=20 I don't follow, you mean, the action bit of drop for the /32 below? This case seems straightforward to me. Let me know how if I need to explain it in more detail. -Darrel > Yours, > Joel >=20 > Darrel Lewis (darlewis) wrote: > > =20 > >> I would be interested to hear why we would want to allow=20 > overlapping=20 > >> prefixes, personally. > >> > >=20 > > Hi Joel, > >=20 > > An example use case I have in mind is on-demand pushback: > >=20 > > Lets say you are an enterprise with the eid 240.1.0.0/24 as=20 > an EID. You > > have a server, 240.1.1.100/32 that comes under a DDoS=20 > attack. This DDoS > > attack is filling your access link's bandwidth. > >=20 > > Now as the site's operator you can add a more specific mapping for > > 240.1.1.100/32 with the action of Drop. > >=20 > > Remote cache's then (once they are updated, with this cache=20 > coherency > > (Dave Meyer's term) issue being a separate topic) traffic=20 > to this /32 > > will be dropped at the ITR (or Proxy ITR)!!! Now your=20 > access bandwidth > > is freed up and the DDoS attack is being dropped by the=20 > source of the > > attack. > >=20 > > IMO this is a fundamental change to the security=20 > capabilities of your > > site, and something that could really be a deployment incentive for > > LISP. While it does add some complexity to the design, I=20 > think it is > > worth it. There are obviously other use cases for TE, but=20 > this one I > > think deserves special consideration. > >=20 > > -Darrel > >=20 >=20 From darlewis@cisco.com Wed Jan 6 12:53:53 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 989793A6961 for ; Wed, 6 Jan 2010 12:53:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fQX6VhKFN2O1 for ; Wed, 6 Jan 2010 12:53:52 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id B48ED3A6962 for ; Wed, 6 Jan 2010 12:53:52 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEADaHREurR7H+/2dsb2JhbAC/e5NihDAE X-IronPort-AV: E=Sophos;i="4.49,231,1262563200"; d="scan'208";a="462640868" Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-6.cisco.com with ESMTP; 06 Jan 2010 20:53:51 +0000 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id o06KrpXR015453; Wed, 6 Jan 2010 20:53:51 GMT Received: from xmb-sjc-213.amer.cisco.com ([171.70.151.153]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 6 Jan 2010 12:53:51 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Wed, 6 Jan 2010 12:53:50 -0800 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes Thread-Index: AcqPB/4rU7hT0qC+TH+ZcHa76gtPwQAAFGEQAAIa5RA= References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> <4B44B6F5.5060107@joelhalpern.com><4B44E6F1.7030208@joelhalpern.com> From: "Darrel Lewis (darlewis)" To: "Darrel Lewis (darlewis)" , "Joel M. Halpern" X-OriginalArrivalTime: 06 Jan 2010 20:53:51.0532 (UTC) FILETIME=[59FB86C0:01CA8F12] Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jan 2010 20:53:53 -0000 >=20 >=20 > > Does this assume use of a header bit in the data packet to trigger=20 > > control revalidation? (Without that, I just can't see how=20 > this case=20 > > would work, even if we allowed it.) > >=20 >=20 Joel and I had an off list conversation where we got sorted, so here is the results. In my first message, I tried to keep the cache-coherency issue separate from the sub-prefixes issue. But they are inter-related, and I will try to give a detailed example that includes them. So I'll rewrite the example below with more detail on how caches get updated. Comments welcome. More Specific Pefixes used as a DoS Pushback: -------------------- Lets say you are an enterprise with the eid 240.1.0.0/24 as an EID. You have a server, 240.1.1.100/32 that comes under a DDoS attack. This DDoS attack is filling your access link's bandwidth. Also, lets consider what happens if your /24 mapping has a 24 hour TTL when the DDoS attack starts. Obviously you don't want to wait 24 hours to push back/drop the attack traffic. Now as the site's operator you can add a more specific mapping for 240.1.1.100/32 with the action of Drop, and changes both the /24 and the /32 TTL to 10 minutes. The site's xTR will now set SMR bit in data packets it sends to other sites, letting them know that the mapping for the /24 has changed. ITRs you are not sending data to currently will learn this new mapping by probing (probing is all Proxy ITRs can do) and learning that the mapping has changed.=20 So over a period of time (likely several minutes due to the probe interval), remote ITR's (and Proxy ITRs) caches will be updated. =20 Your site's access bandwidth is freed up and the DDoS attack is being dropped by the source of the attack. IMO this is a fundamental change to the security capabilities of your site, and something that could really be a deployment incentive for LISP. While it does add some complexity to the design, I think it is worth it. There are obviously other use cases for TE, but this one I think deserves special consideration. -Darrel From pfrejborg@gmail.com Wed Jan 6 23:03:39 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5A19A3A6821 for ; Wed, 6 Jan 2010 23:03:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Per0jTByZrZG for ; Wed, 6 Jan 2010 23:03:38 -0800 (PST) Received: from mail-yx0-f174.google.com (mail-yx0-f174.google.com [209.85.210.174]) by core3.amsl.com (Postfix) with ESMTP id 096BF3A67EE for ; Wed, 6 Jan 2010 23:03:37 -0800 (PST) Received: by yxe4 with SMTP id 4so16541165yxe.32 for ; Wed, 06 Jan 2010 23:03:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=lLjfZSlDj/v9OJb3OQQGOc94FGO+CL6qT954uQrKHKE=; b=BEuSGyDMvwOcge0obJ0c1yrsfyUvul/2iWX8TTyIc3IICCmZFIKPI3F7+I41FE9aqu 5AlnUpTEM50Paaa1E9mWRJ+G2SJgPKvTEDpLhhHSfeT9aP+eEG1U2T+y7dYOzCcgzMZA hvZpAsSNFmLeB+LPR1Ehgl9ftBKryhCEzpOPg= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=bxRWHmOFNTPWHVj/u5WYSq0HsbYMeO91swCxjN6gM1j+9SMCAX1p2iOay5A1lghh5Z BuT7mbzd+z0bCAsi1QEEFE7T6tbEncr9VI2BLZxkwZovc3hfMvFApt4eJr62pwhI4dtz XIC7fBTb21Tl/GZ7gbDZEcS/sQbxLZy0F9L0A= MIME-Version: 1.0 Received: by 10.100.76.9 with SMTP id y9mr37282815ana.53.1262847813968; Wed, 06 Jan 2010 23:03:33 -0800 (PST) In-Reply-To: <4B44B6F5.5060107@joelhalpern.com> References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> <4B44B6F5.5060107@joelhalpern.com> Date: Thu, 7 Jan 2010 09:03:33 +0200 Message-ID: <5bc37fd41001062303m1affb72etfd14f6932f5cc910@mail.gmail.com> From: Patrick Frejborg To: "Joel M. Halpern" Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jan 2010 07:03:39 -0000 Joel, it would be interesting to have a look on how much overlapping prefixes there is today in the DFZ and if that needs to be purged into non-overlapping prefixes what would then be the amount of prefixes in DFZ? Or perhaps a uni-class caching approach might be interesting, as discussed in section 2.1 at http://www.cs.princeton.edu/~chkim/papers/routecaching_pam09.pdf -- patte On Wed, Jan 6, 2010 at 6:14 PM, Joel M. Halpern wrote= : > Wouldn't it be much simpler just to not use overlapping prefixes? =A0Then= we > don't have to figure out if there is a TTL relationship. =A0We don't have= to > figure out if =A0aresponse to one block should include other related bloc= ks. > =A0And we don't have to examine the result for failing corner-cases. > > I would be interested to hear why we would want to allow overlapping > prefixes, personally. > > Yours, > Joel > > Luigi Iannone wrote: >> >> Hi Darrel, >> >> On Jan 5, 2010, at 21:16 , Darrel Lewis (darlewis) wrote: >>> >>> Thinking of this further I would suggest that all the overlapping >>> EID-prefixes returned in the map-reply should have the same TTL. >>> >> >> Is there a specific reason for this suggestion? >> >> Wouldn't having different TTL values be an interesting feature? >> For instance, a more specific can be used for a specific purpose that >> needs shorter TTL compared to the less specific that covers the whole si= te >> and is (most probably) more stable. >> >> Luigi >> >> >>> Later in this thread, you suggested only returning the more specific >>> matches, but would encourage the ETR to return all mappings, because th= e >>> presence of the covering aggregate in an ITR's map-cache will suppress >>> further queries to these (other) more specifics. >>> >>> -Darrel >>> _______________________________________________ >>> lisp mailing list >>> lisp@ietf.org >>> https://www.ietf.org/mailman/listinfo/lisp >> >> >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > From terry.manderson@icann.org Wed Jan 6 23:26:51 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 86A4B3A67EE for ; Wed, 6 Jan 2010 23:26:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AAhYO1W5CWcV for ; Wed, 6 Jan 2010 23:26:50 -0800 (PST) Received: from EXPFE100-2.exc.icann.org (expfe100-2.exc.icann.org [64.78.22.237]) by core3.amsl.com (Postfix) with ESMTP id 4F8F33A67A4 for ; Wed, 6 Jan 2010 23:26:50 -0800 (PST) Received: from EXVPMBX100-1.exc.icann.org ([64.78.22.232]) by EXPFE100-2.exc.icann.org ([64.78.22.237]) with mapi; Wed, 6 Jan 2010 23:26:49 -0800 From: Terry Manderson To: Patrick Frejborg , "Joel M. Halpern" Date: Wed, 6 Jan 2010 23:26:46 -0800 Thread-Topic: [lisp] Design discussion -06-(3) -> return all overlapping prefixes Thread-Index: AcqPZ5d6X68Y5c6mR2iTuksCe+nE4AAAy0Nu Message-ID: In-Reply-To: <5bc37fd41001062303m1affb72etfd14f6932f5cc910@mail.gmail.com> Accept-Language: en, en-US Content-Language: en X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en, en-US Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "lisp@ietf.org" Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jan 2010 07:26:51 -0000 co-chair hat off. Patrick, What I see from the ICANN ASN is summarized here: http://stats.research.icann.org/bgp/ of most interest might be the origin maps, which puts all prefixes underneath their least specific in terms of sub-allocated (more specific announced by a different ASN) and deaggregated (more specific announced by = a different ASN). Cheers Terry On 7/01/10 5:03 PM, "Patrick Frejborg" wrote: > Joel, >=20 > it would be interesting to have a look on how much overlapping > prefixes there is today in the DFZ and if that needs to be purged into > non-overlapping prefixes what would then be the amount of prefixes in > DFZ? > Or perhaps a uni-class caching approach might be interesting, as > discussed in section 2.1 at > http://www.cs.princeton.edu/~chkim/papers/routecaching_pam09.pdf >=20 > -- patte > On Wed, Jan 6, 2010 at 6:14 PM, Joel M. Halpern wro= te: >> Wouldn't it be much simpler just to not use overlapping prefixes? =A0The= n we >> don't have to figure out if there is a TTL relationship. =A0We don't hav= e to >> figure out if =A0aresponse to one block should include other related blo= cks. >> =A0And we don't have to examine the result for failing corner-cases. >>=20 >> I would be interested to hear why we would want to allow overlapping >> prefixes, personally. >>=20 >> Yours, >> Joel >>=20 >> Luigi Iannone wrote: >>>=20 >>> Hi Darrel, >>>=20 >>> On Jan 5, 2010, at 21:16 , Darrel Lewis (darlewis) wrote: >>>>=20 >>>> Thinking of this further I would suggest that all the overlapping >>>> EID-prefixes returned in the map-reply should have the same TTL. >>>>=20 >>>=20 >>> Is there a specific reason for this suggestion? >>>=20 >>> Wouldn't having different TTL values be an interesting feature? >>> For instance, a more specific can be used for a specific purpose that >>> needs shorter TTL compared to the less specific that covers the whole s= ite >>> and is (most probably) more stable. >>>=20 >>> Luigi >>>=20 >>>=20 >>>> Later in this thread, you suggested only returning the more specific >>>> matches, but would encourage the ETR to return all mappings, because t= he >>>> presence of the covering aggregate in an ITR's map-cache will suppress >>>> further queries to these (other) more specifics. >>>>=20 >>>> -Darrel >>>> _______________________________________________ >>>> lisp mailing list >>>> lisp@ietf.org >>>> https://www.ietf.org/mailman/listinfo/lisp >>>=20 >>>=20 >>> -----------------------------------------------------------------------= - >>>=20 >>> _______________________________________________ >>> lisp mailing list >>> lisp@ietf.org >>> https://www.ietf.org/mailman/listinfo/lisp >>=20 >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp >>=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From damien.saucez@uclouvain.be Thu Jan 7 00:18:27 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A36803A6998 for ; Thu, 7 Jan 2010 00:18:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z+pD6BLem0xo for ; Thu, 7 Jan 2010 00:18:26 -0800 (PST) Received: from smtp4.sgsi.ucl.ac.be (smtp.sgsi.ucl.ac.be [130.104.5.67]) by core3.amsl.com (Postfix) with ESMTP id 462A83A6993 for ; Thu, 7 Jan 2010 00:18:26 -0800 (PST) Received: from sleipnier.dhcp.info.ucl.ac.be (sleipnier.dhcp.info.ucl.ac.be [130.104.228.23]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: dsaucez@smtp4.sgsi.ucl.ac.be) by smtp4.sgsi.ucl.ac.be (Postfix) with ESMTPSA id 45B51F2701; Thu, 7 Jan 2010 09:18:10 +0100 (CET) X-DKIM: Sendmail DKIM Filter v2.8.2 smtp4.sgsi.ucl.ac.be 45B51F2701 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=uclouvain.be; s=selucl; t=1262852290; bh=TKmOIVSlO1XTdu8NMiFjvF6ba/vBaBbZFu6wbL5SIJ4=; h=Subject:Mime-Version:Content-Type:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=PLsUhYa4K8HJmISejpbwaOc/8m51m2AGHuGPYvjOwoNEWmjg/+qf42ot/8H/IugUk /JV0AqZN6ozstH0hM9wbesRJroEuJqogxt3rU0oEQxkFZ3CaHAAp/wtjmcI5U74Tfe xp7tShpRvCX0O54NeG0eO8T1n5z2xkHIw0ywCuWY= Mime-Version: 1.0 (Apple Message framework v1077) Content-Type: text/plain; charset=us-ascii From: Damien Saucez In-Reply-To: Date: Thu, 7 Jan 2010 09:18:09 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <9B3E5B1A-D785-4721-A7E0-36FF398DE0FB@uclouvain.be> References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> <4B44B6F5.5060107@joelhalpern.com> <4B44E6F1.7030208@joelhalpern.com> To: Darrel Lewis (darlewis) X-Mailer: Apple Mail (2.1077) X-Virus-Scanned: clamav-milter 0.95.2 at smtp-4.sipr-dc.ucl.ac.be X-Virus-Status: Clean X-Sgsi-Spamcheck: SASL authenticated, X-SGSI-MailScanner-ID: 45B51F2701.00000 X-SGSI-MailScanner: Found to be clean X-SGSI-From: damien.saucez@uclouvain.be X-SGSI-Spam-Status: No Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jan 2010 08:18:27 -0000 Darrel, Tell me if I am wrong: when a DDoS attack is detected, you create a = more-specific entry for the destination under attack with a short TTL = and a special (set of) RLOC(s). You thus need to inform the sources of = traffic that their is a change in the mapping and then use the SMR bit. = The sources will then send Map-Requests and receive the new mappings. If I understood correctly, this counter-measure can be used to generate = even bigger DDoS! Indeed, every time you see this kind of attack, you = generate a more-specific mapping to isolate the attacked server. This = mapping has a short TTL and every body needs to know the mapping. So = when the new mapping is generated, every body will ask for the new = mapping, and this will be done every 10min in your example, meaning that = we effectively reduce the traffic to the destination but we increase the = load on the mapping system. Basically, instead of having sometime a = query, we have queries all the time (especially if we set the same TTL , = e.g., 10 min, to all the mappings as you recommended in a previous = mail). Additionally, if we just drop the packet, how to know that the = DDoS is finished? We do not receive traffic anymore! Finally, if you = move all the traffic to a black-hole, you also drop the correct traffic, = making the attack more efficient than without the protection. Finally, if an attacker knows how the system will behave (add a more = specific entry with small TTL), he can perform 3 kinds of DDoS at the = same time. First, the original DDoS (no traffic to the target as the = mapping redirect traffic to a black-hole). Second, a DDoS on the mapping = system, if you attack a lot of targets the system generates a lot of = short-lives mappings and thus a lot of traffic on the mapping system, = globally. Third, if you know that the map cache size at the sites you = are attacking from, then you can calculate the number of targets you = need to fill the cache and drop some completely unrelated traffic.=20 IMO, to make this counter-measure a bit better, we need: 1. Detect the origin of the attack 2. Push the more-specific mapping only to the origin of the attack (do = not change mappings for the other sources of traffic) But even with these changes, the counter-measure can have very bad side = effects. And if you combine this attack with a spoof attack, you can = isolate a perfectly innocent site. Regards, Damien Saucez On 06 Jan 2010, at 21:53, Darrel Lewis (darlewis) wrote: >=20 >>=20 >>=20 >>> Does this assume use of a header bit in the data packet to trigger=20= >>> control revalidation? (Without that, I just can't see how=20 >> this case=20 >>> would work, even if we allowed it.) >>>=20 >>=20 >=20 > Joel and I had an off list conversation where we got sorted, so here = is > the results. In my first message, I tried to keep the cache-coherency > issue separate from the sub-prefixes issue. But they are = inter-related, > and I will try to give a detailed example that includes them. So I'll > rewrite the example below with more detail on how caches get updated. > Comments welcome. >=20 > More Specific Pefixes used as a DoS Pushback: > -------------------- >=20 > Lets say you are an enterprise with the eid 240.1.0.0/24 as an EID. = You > have a server, 240.1.1.100/32 that comes under a DDoS attack. This = DDoS > attack is filling your access link's bandwidth. Also, lets consider > what happens if your /24 mapping has a 24 hour TTL when the DDoS = attack > starts. Obviously you don't want to wait 24 hours to push back/drop = the > attack traffic. >=20 > Now as the site's operator you can add a more specific mapping for > 240.1.1.100/32 with the action of Drop, and changes both the /24 and = the > /32 TTL to 10 minutes. >=20 > The site's xTR will now set SMR bit in data packets it sends to other > sites, letting them know that the mapping for the /24 has changed. > ITRs you are not sending data to currently will learn this new mapping > by probing (probing is all Proxy ITRs can do) and learning that the > mapping has changed.=20 >=20 > So over a period of time (likely several minutes due to the probe > interval), remote ITR's (and Proxy ITRs) caches will be updated. =20 >=20 > Your site's access bandwidth is freed up and the DDoS attack is being > dropped by the source of the > attack. >=20 > IMO this is a fundamental change to the security capabilities of your > site, and something that could really be a deployment incentive for > LISP. While it does add some complexity to the design, I think it is > worth it. There are obviously other use cases for TE, but this one I > think deserves special consideration. >=20 > -Darrel > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From jmh@joelhalpern.com Thu Jan 7 04:45:16 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AF9713A68A5 for ; Thu, 7 Jan 2010 04:45:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.249 X-Spam-Level: X-Spam-Status: No, score=-3.249 tagged_above=-999 required=5 tests=[AWL=0.350, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wb8m8sZ65Zy9 for ; Thu, 7 Jan 2010 04:45:15 -0800 (PST) Received: from hermes.mail.tigertech.net (hermes.mail.tigertech.net [64.62.209.72]) by core3.amsl.com (Postfix) with ESMTP id BF47A3A6897 for ; Thu, 7 Jan 2010 04:45:15 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hermes.tigertech.net (Postfix) with ESMTP id A3B234300A0; Thu, 7 Jan 2010 04:45:14 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at hermes.tigertech.net Received: from [10.10.10.102] (pool-71-161-51-192.clppva.btas.verizon.net [71.161.51.192]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hermes.tigertech.net (Postfix) with ESMTP id CD17843009D; Thu, 7 Jan 2010 04:45:13 -0800 (PST) Message-ID: <4B45D759.1080403@joelhalpern.com> Date: Thu, 07 Jan 2010 07:45:13 -0500 From: "Joel M. Halpern" User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Patrick Frejborg References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> <4B44B6F5.5060107@joelhalpern.com> <5bc37fd41001062303m1affb72etfd14f6932f5cc910@mail.gmail.com> In-Reply-To: <5bc37fd41001062303m1affb72etfd14f6932f5cc910@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jan 2010 12:45:16 -0000 [For clarity, this is all personal. As chair, I just have to wait and see what folks think..] We are talking about overlapping EIDs, not overlapping locators. There are LOTs of overlapping addresses in the current tables. There are multiple reasons for these. It is not clear to me that any of them apply to EIDs. Patrick, you seem to see a parallel I am missing. Can you elucidate? Darrel has raised an interesting idea for how one might use overlapping EIDs if they are allowed. That usage clearly has value. Is that value more than the complexity required for allowing overlapping EIDs? Particularly if, as appears to be the case, we would need to indicate that any request for a block that has nested EIDs needs to return all those nested EID mappings as well? I don't know what the right tradeoff is. I would be interested in hearing from other folks who have looked at this as to where the value is. Thanks, Joel Patrick Frejborg wrote: > Joel, > > it would be interesting to have a look on how much overlapping > prefixes there is today in the DFZ and if that needs to be purged into > non-overlapping prefixes what would then be the amount of prefixes in > DFZ? > Or perhaps a uni-class caching approach might be interesting, as > discussed in section 2.1 at > http://www.cs.princeton.edu/~chkim/papers/routecaching_pam09.pdf > > -- patte > On Wed, Jan 6, 2010 at 6:14 PM, Joel M. Halpern wrote: >> Wouldn't it be much simpler just to not use overlapping prefixes? Then we >> don't have to figure out if there is a TTL relationship. We don't have to >> figure out if aresponse to one block should include other related blocks. >> And we don't have to examine the result for failing corner-cases. >> >> I would be interested to hear why we would want to allow overlapping >> prefixes, personally. >> >> Yours, >> Joel >> >> Luigi Iannone wrote: >>> Hi Darrel, >>> >>> On Jan 5, 2010, at 21:16 , Darrel Lewis (darlewis) wrote: >>>> Thinking of this further I would suggest that all the overlapping >>>> EID-prefixes returned in the map-reply should have the same TTL. >>>> >>> Is there a specific reason for this suggestion? >>> >>> Wouldn't having different TTL values be an interesting feature? >>> For instance, a more specific can be used for a specific purpose that >>> needs shorter TTL compared to the less specific that covers the whole site >>> and is (most probably) more stable. >>> >>> Luigi >>> >>> >>>> Later in this thread, you suggested only returning the more specific >>>> matches, but would encourage the ETR to return all mappings, because the >>>> presence of the covering aggregate in an ITR's map-cache will suppress >>>> further queries to these (other) more specifics. >>>> >>>> -Darrel >>>> _______________________________________________ >>>> lisp mailing list >>>> lisp@ietf.org >>>> https://www.ietf.org/mailman/listinfo/lisp >>> >>> ------------------------------------------------------------------------ >>> >>> _______________________________________________ >>> lisp mailing list >>> lisp@ietf.org >>> https://www.ietf.org/mailman/listinfo/lisp >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp >> > From jnc@mercury.lcs.mit.edu Thu Jan 7 07:47:01 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9E7C63A6857 for ; Thu, 7 Jan 2010 07:47:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bmtXF1P27gCV for ; Thu, 7 Jan 2010 07:47:00 -0800 (PST) Received: from mercury.lcs.mit.edu (mercury.lcs.mit.edu [18.26.0.122]) by core3.amsl.com (Postfix) with ESMTP id A0E1C3A6838 for ; Thu, 7 Jan 2010 07:47:00 -0800 (PST) Received: by mercury.lcs.mit.edu (Postfix, from userid 11178) id 648546BE58D; Thu, 7 Jan 2010 10:46:58 -0500 (EST) To: lisp@ietf.org Message-Id: <20100107154658.648546BE58D@mercury.lcs.mit.edu> Date: Thu, 7 Jan 2010 10:46:58 -0500 (EST) From: jnc@mercury.lcs.mit.edu (Noel Chiappa) Cc: jnc@mercury.lcs.mit.edu Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jan 2010 15:47:01 -0000 > From: "Joel M. Halpern" Been meaning to say something on this topic for a while (I've been thinking about it since I first heard about it a while back), but I've been having a hard time wrapping my mind around it all, getting my thoughts well-organized. Anyway, time to jump into the cold water, maybe it will warm up if I swim around some... :-) > [For clarity, this is all personal. As chair, I just have to wait > and see what folks think..] Understood. But the personal input is highly valued too... :-) > We are talking about overlapping EIDs, not overlapping locators. > There are LOTs of overlapping addresses in the current tables. > There are multiple reasons for these. > It is not clear to me that any of them apply to EIDs. Good point. A list of uses for overlapping EIDs would be a good input to the decision below, but... > an interesting idea for how one might use overlapping EIDs if they > are allowed. That usage clearly has value. Is that value more than > the complexity required for allowing overlapping EIDs? This is one facet of the nub of the problem. Allowing overlapping mappings (i.e. not just one mapping with multiple outputs, or even partner-specific mappings - i.e. different mappings returned to different enquirers) is an _architectural_ change, not just an engineering one. Since it is an architectural change, my favourite dictum ("The test of great architecture is not how well it does things it was designed to do, but how well it does things it was never expected to handle.") applies; or rather, it does so in a corollary form, which is that 'You cannot make architectural decisions based on a pure low-level cost/benefit analysis, since you'll never be able to completely enumerate them all'. But I agree, understanding the complexity _is_ a key input to that decision. > Particularly if, as appears to be the case, we would need to > indicate that any request for a block that has nested EIDs needs to > return all those nested EID mappings as well? This is the other main facet, a thorough understanding of the engineering implications (and choices) - and it's the one I most don't understand well yet. I think what I need to do is sit down and compose an extended 'meditation' on the implications of overlapping mappings, and list all the engineering approaches to handling the engineering issues that come from allowing overlapping mappings. I'll do that now (warning: lengthy message is likely to result....) > I would be interested in hearing from other folks who have looked at > this as to where the value is. Yes, this would be useful. Darrel has mentioned one good one. If people can brainstorm, to see how broadly useful this proposed feature is, that would give us a good sense of how much flexibility/adaptability (which is really what you need to balance complexity against, when making an architectural go/no-go decision) this proposed feature has. I've heard another (having to do with controlling which xTR is used by traffic entering a distributed site), but that one was hard to really understand - in part since it also involved, IIRC, partner-specific mappings, i.e. different mappings returned to different enquirers. (It was trying to fully understand that one that caused my brain to seize up the last time I thought about this... :-) Noel From jnc@mercury.lcs.mit.edu Thu Jan 7 08:24:29 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5A72A3A68C2 for ; Thu, 7 Jan 2010 08:24:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CR0tmnpmp-Ds for ; Thu, 7 Jan 2010 08:24:28 -0800 (PST) Received: from mercury.lcs.mit.edu (mercury.lcs.mit.edu [18.26.0.122]) by core3.amsl.com (Postfix) with ESMTP id E73F13A6809 for ; Thu, 7 Jan 2010 08:24:27 -0800 (PST) Received: by mercury.lcs.mit.edu (Postfix, from userid 11178) id 9D6B26BE58D; Thu, 7 Jan 2010 11:24:25 -0500 (EST) To: lisp@ietf.org Message-Id: <20100107162425.9D6B26BE58D@mercury.lcs.mit.edu> Date: Thu, 7 Jan 2010 11:24:25 -0500 (EST) From: jnc@mercury.lcs.mit.edu (Noel Chiappa) Cc: jnc@mercury.lcs.mit.edu Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jan 2010 16:24:29 -0000 > From: Damien Saucez > every time you see this kind of attack, you generate a more-specific > mapping to isolate the attacked server. This mapping has a short TTL > and every body needs to know the mapping. Not necessarily... the mapping could be source-specific (now that I think about it, maybe that term better than 'partner-specific' - although I can see good points to each, since 'source' could be ambiguous, it could refer to either the traffic, or the mapping itself), so that only the ITR(s) which are the source of the traffic get it. (I see that later in the message you suggest basically this... I guess source-specific mappings aren't well-disussed yet, that's an area we need to improve.) I don't think it would be too hard to figure out either the traffic source, or the source ITR for that source, and make sure the source ITR gets the updated mapping. > So when the new mapping is generated, every body will ask for the > new mapping, and this will be done every 10min in your example, > meaning that we effectively reduce the traffic to the destination > but we increase the load on the mapping system. Well, true, but that load is many orders of magnitude less than most DDoS attacks, which can run to something on the order of (I don't know the current operational state in detail) tens of thousands of packets per second. > Finally, if you move all the traffic to a black-hole, you also drop > the correct traffic, making the attack more efficient than without > the protection. Yes, but the closer the block is to the source(s) of the DDoS is, the less 'real' traffic will be affected. And as to the 'real' sources which happen to be co-located with the attack sources, they are stuck anyway, since their traffic will be lost in the flood no matter what. I gather that this proposal is very similar in its effects to what is done for DDoS attacks now, it just uses a different mechanism (I think they use explicit filters at the moment). > if you combine this attack with a spoof attack, you can isolate a > perfectly innocent site. Spoofing is a real problem, but LISP cannot really solve it - it's a flaw in the basic internetwork layer that spoofed traffic is possible.a (Probably no router should forward a packet from a source for which the reverse path is not out the interface the packet came in on - that would kill all spoofing, except for neighbours on the same physical network, right at the source. Although it would probably screw up when the round-trip path has cycles in it, which I gather is common, so maybe this isn't such a hot solution.) As to LISP, ITRs could refuse to forward traffic from sources they are not supposed to handle, but the problem is 'how do they know what sources they are supposed to be handling'? If they are also an ETR, they know, but the design does allow of exit-only (i.e. ITR-only) boxes; handling those would mean more configuration (bad). Noel From pfrejborg@gmail.com Thu Jan 7 09:39:08 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B5B4E3A68EA for ; Thu, 7 Jan 2010 09:39:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 99l4YSjlHAli for ; Thu, 7 Jan 2010 09:39:07 -0800 (PST) Received: from mail-yw0-f196.google.com (mail-yw0-f196.google.com [209.85.211.196]) by core3.amsl.com (Postfix) with ESMTP id 7D9653A68E6 for ; Thu, 7 Jan 2010 09:39:07 -0800 (PST) Received: by ywh34 with SMTP id 34so12032557ywh.31 for ; Thu, 07 Jan 2010 09:39:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=P4NkiVOXe2xCmKiP+nt2CuWDzumZGAnrbmlH56cZd7A=; b=SrzClhsAuOWffTkN3WWlsYFKewyTIW+C3qdpesVR7ZeMr1UwHUv/xJDYdJU43iDZwl dyn3zjRfdzQUfppesEevSkqzmgiNwhwiMVkhnzWWzrdFc3SCsT5O8d6hlZ0hZsdVCK9P uORXrJFjqsaHFPg5c1uaqyGWCzgBuC/+gJjU4= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=pt3erM1Ah9vIX8/hTVXEjgFRE+KaZB4hTuzy1rBFgE5BE9bqEav1jDvQoiUlRFBE4i zhYdpvI2raUmTU4DcZkh32g7UQFzJ0UUzvo8KyoqRiff4YEJzfOzRxs3vDKA1jrL0heO 20KuY+t7ieglbGQO6lTx9M8ypBvM3HoaB7hQs= MIME-Version: 1.0 Received: by 10.101.10.24 with SMTP id n24mr11391623ani.78.1262885943018; Thu, 07 Jan 2010 09:39:03 -0800 (PST) In-Reply-To: <4B45D759.1080403@joelhalpern.com> References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> <4B44B6F5.5060107@joelhalpern.com> <5bc37fd41001062303m1affb72etfd14f6932f5cc910@mail.gmail.com> <4B45D759.1080403@joelhalpern.com> Date: Thu, 7 Jan 2010 19:39:02 +0200 Message-ID: <5bc37fd41001070939y1ef0e19u456d192027692b5a@mail.gmail.com> From: Patrick Frejborg To: "Joel M. Halpern" Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jan 2010 17:39:08 -0000 Joel, I think you can drop my previous questions....my head had a slow start this morning, probably due to the holidays, cold and snow... Only situation when a cache-hiding could occur is if an ETR-1 advertise an aggregate e.g. /20 and an ETR-2 advertise a /24 from the the same space. An ITR setting up a connection first to ETR-1 can not setup a "longest match" connection to ETR-2 until the cache entry /20 has expired on the affected ITR. But this can be avoided as long there is no aggregate behind the ETR, the cache-hiding situation shouldn't occur. And there should be no reason to aggregate EIDs...thus my previous concerns are not valid, drop that. "No-aggeragtes-behind-ETR" have some implications for the ETR though - cache entries at ETR are no longer aggregated as today the FIB of a multi-homed ASBR is. Then for how many cache entries should an ETR be designed for? Especially if the ETR is in front of a popular site, the current DFZ aggregated entries gets de-aggregated in the ETR cache - could the needed size of the cache become larger than the current FIB in the DFZ? Think it depends on the popularity of the site...but a site might become suddenly popular due to some event, e.g. natural catastrophe, accidents etc... If the cache gets much larger, will the ETR node become more expensive than the current DFZ FIB node? Are there any studies around ETR in front of popular sites and the expected cache size of the ETR? Perhaps I haven't yet recovered from the holidays and missing something obv= ious? -- patte On Thu, Jan 7, 2010 at 2:45 PM, Joel M. Halpern wrote= : > [For clarity, this is all personal. =A0As chair, I just have to wait and = see > what folks think..] > > We are talking about overlapping EIDs, not overlapping locators. > There are LOTs of overlapping addresses in the current tables. > There are multiple reasons for these. > It is not clear to me that any of them apply to EIDs. > Patrick, you seem to see a parallel I am missing. =A0Can you elucidate? > > Darrel has raised an interesting idea for how one might use overlapping E= IDs > if they are allowed. =A0That usage clearly has value. =A0Is that value mo= re than > the complexity required for allowing overlapping EIDs? Particularly if, a= s > appears to be the case, we would need to indicate that any request for a > block that has nested EIDs needs to return all those nested EID mappings = as > well? =A0I don't know what the right tradeoff is. > > I would be interested in hearing from other folks who have looked at this= as > to where the value is. > > Thanks, > Joel > > Patrick Frejborg wrote: >> >> Joel, >> >> it would be interesting to have a look on how much overlapping >> prefixes there is today in the DFZ and if that needs to be purged into >> non-overlapping prefixes what would then be the amount of prefixes in >> DFZ? >> Or perhaps a uni-class caching approach might be interesting, as >> discussed in section 2.1 at >> http://www.cs.princeton.edu/~chkim/papers/routecaching_pam09.pdf >> >> -- patte >> On Wed, Jan 6, 2010 at 6:14 PM, Joel M. Halpern >> wrote: >>> >>> Wouldn't it be much simpler just to not use overlapping prefixes? =A0Th= en >>> we >>> don't have to figure out if there is a TTL relationship. =A0We don't ha= ve >>> to >>> figure out if =A0aresponse to one block should include other related >>> blocks. >>> =A0And we don't have to examine the result for failing corner-cases. >>> >>> I would be interested to hear why we would want to allow overlapping >>> prefixes, personally. >>> >>> Yours, >>> Joel >>> >>> Luigi Iannone wrote: >>>> >>>> Hi Darrel, >>>> >>>> On Jan 5, 2010, at 21:16 , Darrel Lewis (darlewis) wrote: >>>>> >>>>> Thinking of this further I would suggest that all the overlapping >>>>> EID-prefixes returned in the map-reply should have the same TTL. >>>>> >>>> Is there a specific reason for this suggestion? >>>> >>>> Wouldn't having different TTL values be an interesting feature? >>>> For instance, a more specific can be used for a specific purpose that >>>> needs shorter TTL compared to the less specific that covers the whole >>>> site >>>> and is (most probably) more stable. >>>> >>>> Luigi >>>> >>>> >>>>> Later in this thread, you suggested only returning the more specific >>>>> matches, but would encourage the ETR to return all mappings, because >>>>> the >>>>> presence of the covering aggregate in an ITR's map-cache will suppres= s >>>>> further queries to these (other) more specifics. >>>>> >>>>> -Darrel >>>>> _______________________________________________ >>>>> lisp mailing list >>>>> lisp@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/lisp >>>> >>>> ----------------------------------------------------------------------= -- >>>> >>>> _______________________________________________ >>>> lisp mailing list >>>> lisp@ietf.org >>>> https://www.ietf.org/mailman/listinfo/lisp >>> >>> _______________________________________________ >>> lisp mailing list >>> lisp@ietf.org >>> https://www.ietf.org/mailman/listinfo/lisp >>> >> > From darlewis@cisco.com Thu Jan 7 09:54:25 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C85583A681E for ; Thu, 7 Jan 2010 09:54:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yFDYExjNBPRN for ; Thu, 7 Jan 2010 09:54:25 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 164E33A67F8 for ; Thu, 7 Jan 2010 09:54:25 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAIauRUurR7H+/2dsb2JhbADBFZN9hDAE X-IronPort-AV: E=Sophos;i="4.49,236,1262563200"; d="scan'208";a="463172963" Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-6.cisco.com with ESMTP; 07 Jan 2010 17:54:23 +0000 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id o07HsN3t007687; Thu, 7 Jan 2010 17:54:23 GMT Received: from xmb-sjc-213.amer.cisco.com ([171.70.151.153]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 7 Jan 2010 09:54:23 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Thu, 7 Jan 2010 09:54:23 -0800 Message-ID: In-Reply-To: <9B3E5B1A-D785-4721-A7E0-36FF398DE0FB@uclouvain.be> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes Thread-Index: AcqPchn++GxowHIIRdGdlHiRcDR6KQATswjg References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> <4B44B6F5.5060107@joelhalpern.com> <4B44E6F1.7030208@joelhalpern.com> <9B3E5B1A-D785-4721-A7E0-36FF398DE0FB@uclouvain.be> From: "Darrel Lewis (darlewis)" To: "Damien Saucez" X-OriginalArrivalTime: 07 Jan 2010 17:54:23.0846 (UTC) FILETIME=[725AC860:01CA8FC2] Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jan 2010 17:54:25 -0000 =20 > -----Original Message----- > From: Damien Saucez [mailto:damien.saucez@uclouvain.be]=20 > Sent: Thursday, January 07, 2010 12:18 AM > To: Darrel Lewis (darlewis) > Cc: Joel M. Halpern; lisp@ietf.org > Subject: Re: [lisp] Design discussion -06-(3) ->=20 > returnalloverlapping prefixes >=20 > Darrel, >=20 > Tell me if I am wrong: when a DDoS attack is detected, you=20 > create a more-specific entry for the destination under attack=20 > with a short TTL and a special (set of) RLOC(s). You thus=20 > need to inform the sources of traffic that their is a change=20 > in the mapping and then use the SMR bit. The sources will=20 > then send Map-Requests and receive the new mappings. >=20 Blackholing is not a solution to DDoS, but it's a tool for a site's toolbox to sacrifice one host in order to keep the site up. But lets not make this a discussion about DDoS, since that's a wider topic that isn't LISP specific. But it's a hobby of mine for the last 10 years or so and I'd love to talk off-list about it. (for further reading, check out flowspec and remote triggered black holing in bgp) I personally don't consider a site performing mapping updates to be a DoS. And the ALT must have the capcity to handle sites who use any valid TTL. -Darrel From luigi@net.t-labs.tu-berlin.de Thu Jan 7 11:05:28 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0159528C174 for ; Thu, 7 Jan 2010 11:05:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.248 X-Spam-Level: X-Spam-Status: No, score=-2.248 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aZbLm15a1OEb for ; Thu, 7 Jan 2010 11:05:27 -0800 (PST) Received: from mail.net.t-labs.tu-berlin.de (mail.net.t-labs.tu-berlin.de [130.149.220.252]) by core3.amsl.com (Postfix) with ESMTP id E8B3A28C171 for ; Thu, 7 Jan 2010 11:05:26 -0800 (PST) Received: from dyn100.net.t-labs.tu-berlin.de (dyn100.net.t-labs.tu-berlin.de [130.149.220.100]) by mail.net.t-labs.tu-berlin.de (Postfix) with ESMTP id 6ECA5700D2A0; Thu, 7 Jan 2010 20:05:24 +0100 (CET) Mime-Version: 1.0 (Apple Message framework v1077) Content-Type: multipart/alternative; boundary=Apple-Mail-1--1031401206 From: Luigi Iannone In-Reply-To: <20100107162425.9D6B26BE58D@mercury.lcs.mit.edu> Date: Thu, 7 Jan 2010 20:05:23 +0100 Message-Id: <098F66D4-56C3-42E5-8CDE-FF3C7AAEEF57@net.t-labs.tu-berlin.de> References: <20100107162425.9D6B26BE58D@mercury.lcs.mit.edu> To: Noel Chiappa X-Mailer: Apple Mail (2.1077) Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jan 2010 19:05:28 -0000 --Apple-Mail-1--1031401206 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Noel, On Jan 7, 2010, at 17:24 , Noel Chiappa wrote: [snip] >=20 > As to LISP, ITRs could refuse to forward traffic from sources they are = not > supposed to handle, but the problem is 'how do they know what sources = they > are supposed to be handling'? Can't they just check the lisp database?=20 > If they are also an ETR, they know, Isn't the contrary? Current spec do not mandate a mapping for the source = address of a packet in the ETR (unless it is also an ITR and there is = bidirectional traffic). If the ETR has a mapping for the source address in its cache, then it do = some sanity checks and eventually drop the packet. .. or am I wrong somewhere? Luigi > but the > design does allow of exit-only (i.e. ITR-only) boxes; handling those = would > mean more configuration (bad). >=20 > Noel > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp --Apple-Mail-1--1031401206 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Hi = Noel,

On Jan 7, 2010, at 17:24 , Noel Chiappa = wrote:

[snip]


As to LISP, ITRs could refuse to forward = traffic from sources they are not
supposed to handle, but the problem = is 'how do they know what sources they
are supposed to be handling'? =

Can't they just check the lisp = database? 

If = they are also an ETR, they know, =

Isn't the contrary? Current spec = do not mandate a mapping for the source address of a packet in the ETR = (unless it is also an ITR and there is bidirectional = traffic).

If the ETR has a mapping for the = source address in its cache, then it do some sanity checks and = eventually drop the packet.

.. or am I wrong = somewhere?


Luigi

but the
design does allow of exit-only (i.e. = ITR-only) boxes; handling those would
mean more configuration = (bad).

= Noel
_______________________________________________
lisp = mailing list
lisp@ietf.org
https://www.ietf.org/ma= ilman/listinfo/lisp

= --Apple-Mail-1--1031401206-- From luigi@net.t-labs.tu-berlin.de Thu Jan 7 11:14:35 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6A66628C13D for ; Thu, 7 Jan 2010 11:14:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.248 X-Spam-Level: X-Spam-Status: No, score=-2.248 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yt247D0kufxj for ; Thu, 7 Jan 2010 11:14:34 -0800 (PST) Received: from mail.net.t-labs.tu-berlin.de (mail.net.t-labs.tu-berlin.de [130.149.220.252]) by core3.amsl.com (Postfix) with ESMTP id 84C0B3A6452 for ; Thu, 7 Jan 2010 11:14:33 -0800 (PST) Received: from dyn100.net.t-labs.tu-berlin.de (dyn100.net.t-labs.tu-berlin.de [130.149.220.100]) by mail.net.t-labs.tu-berlin.de (Postfix) with ESMTP id A4781700D2A0; Thu, 7 Jan 2010 20:14:31 +0100 (CET) Mime-Version: 1.0 (Apple Message framework v1077) Content-Type: multipart/alternative; boundary=Apple-Mail-2--1030853774 From: Luigi Iannone In-Reply-To: Date: Thu, 7 Jan 2010 20:14:31 +0100 Message-Id: <081839CE-C19D-4522-8030-1107D409C905@net.t-labs.tu-berlin.de> References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> To: Darrel Lewis (darlewis) X-Mailer: Apple Mail (2.1077) Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jan 2010 19:14:35 -0000 --Apple-Mail-2--1030853774 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Darrel, On Jan 6, 2010, at 19:18 , Darrel Lewis (darlewis) wrote: > Luigi, > =20 > The main reason I can think of that you want consistent TTL is that if = a sub (more specific) prefix's TTL times out, the ITR will not know to = look for the more specific. =20 Thanks, I got your point.=20 Nevertheless, I think this is exactly the main problem that overlapping = EID-prefixess have: How does an ITR having a less specific become aware = that a new more-specific mapping exists? In this case map-versioning can help (here it goes again ;-) ), but I am = sure there are still corner cases that we are not aware of. =20 Generally speaking I think that overlapping EID-prefixes has potential, = but of course it adds complexity (TANSTAAFL). Luigi > So while I agree that its intuitive for the main prefix to have a = longer TTL, I think it could have undesirable side effects. > =20 > -Darrel > =20 >=20 > From: Luigi Iannone [mailto:luigi@net.t-labs.tu-berlin.de]=20 > Sent: Wednesday, January 06, 2010 4:37 AM > To: Darrel Lewis (darlewis) > Cc: Dino Farinacci (dino); lisp@ietf.org > Subject: Re: [lisp] Design discussion -06-(3) -> return all = overlapping prefixes >=20 > Hi Darrel, >=20 > On Jan 5, 2010, at 21:16 , Darrel Lewis (darlewis) wrote: >>=20 >> Thinking of this further I would suggest that all the overlapping >> EID-prefixes returned in the map-reply should have the same TTL. >>=20 >=20 > Is there a specific reason for this suggestion? >=20 > Wouldn't having different TTL values be an interesting feature? > For instance, a more specific can be used for a specific purpose that = needs shorter TTL compared to the less specific that covers the whole = site and is (most probably) more stable. >=20 > Luigi >=20 >=20 >> Later in this thread, you suggested only returning the more specific >> matches, but would encourage the ETR to return all mappings, because = the >> presence of the covering aggregate in an ITR's map-cache will = suppress >> further queries to these (other) more specifics. >>=20 >> -Darrel >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp >=20 --Apple-Mail-2--1030853774 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii
Luigi,
 
The main reason I can think = of that you want consistent TTL=20 is that if a sub (more specific) prefix's TTL times out, the ITR will = not know=20 to look for the more specific.   =

Thanks, I got = your point. 

Nevertheless, I think this is = exactly the main  problem that overlapping EID-prefixess have: How = does an ITR having a less specific become aware that a new more-specific = mapping exists?

Generally speaking I think = that overlapping EID-prefixes has potential, but of course it adds = complexity (TANSTAAFL).

 Luigi


So while I agree that its intuitive=20 for the main prefix to have a longer TTL, I think it could have = undesirable side=20 effects.
 
-Darrel
 

=
From: Luigi Iannone=20 [mailto:luigi@net.t-labs.tu-berlin.de]
Sent: Wednesday, = January 06,=20 2010 4:37 AM
To: Darrel Lewis (darlewis)
Cc: Dino=20= Farinacci (dino); lisp@ietf.org
Subject: Re: = [lisp] Design=20 discussion -06-(3) -> return all overlapping = prefixes

Hi Darrel,

On Jan 5, 2010, at 21:16 , Darrel Lewis (darlewis) wrote:

Thinking of this=20 further I would suggest that all the overlapping
EID-prefixes = returned in=20 the map-reply should have the same TTL.


Is there a specific reason for this suggestion?

Wouldn't having different TTL values be an interesting = feature?
For instance, a more specific can be used for a specific purpose = that=20 needs shorter TTL compared to the less specific that covers the whole = site and=20 is (most probably) more stable.

Luigi


Later in this thread, you suggested only returning the more=20 specific
matches, but would encourage the ETR to return all = mappings,=20 because the
presence of the covering aggregate in an ITR's = map-cache will=20 suppress
further queries to these (other) more=20 = specifics.

-Darrel
_____________________________________________= __
lisp=20 mailing list
lisp@ietf.org
https://www.ietf.org/m= ailman/listinfo/lisp


= --Apple-Mail-2--1030853774-- From jzwiebel@cisco.com Fri Jan 8 12:36:31 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 26F523A684F for ; Fri, 8 Jan 2010 12:36:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7Y8WS-mtf+6d for ; Fri, 8 Jan 2010 12:36:30 -0800 (PST) Received: from sj-iport-5.cisco.com (sj-iport-5.cisco.com [171.68.10.87]) by core3.amsl.com (Postfix) with ESMTP id 673403A67C0 for ; Fri, 8 Jan 2010 12:36:30 -0800 (PST) Authentication-Results: sj-iport-5.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EAMIlR0urRN+K/2dsb2JhbACCFb8glAeELwQ X-IronPort-AV: E=Sophos;i="4.49,244,1262563200"; d="scan'208,217";a="130556476" Received: from sj-core-4.cisco.com ([171.68.223.138]) by sj-iport-5.cisco.com with ESMTP; 08 Jan 2010 20:36:28 +0000 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-4.cisco.com (8.13.8/8.14.3) with ESMTP id o08KaPtI005858; Fri, 8 Jan 2010 20:36:28 GMT Received: from xmb-sjc-22c.amer.cisco.com ([128.107.191.47]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 8 Jan 2010 12:36:27 -0800 Received: from [10.0.1.5] ([10.21.64.61]) by xmb-sjc-22c.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 8 Jan 2010 12:36:26 -0800 In-Reply-To: <081839CE-C19D-4522-8030-1107D409C905@net.t-labs.tu-berlin.de> References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> <081839CE-C19D-4522-8030-1107D409C905@net.t-labs.tu-berlin.de> Mime-Version: 1.0 (Apple Message framework v753.1) Content-Type: multipart/alternative; boundary=Apple-Mail-10--939579449 Message-Id: <1500E100-9683-40FF-93D5-15A4FCEB2EDD@cisco.com> From: John Zwiebel Date: Fri, 8 Jan 2010 10:35:45 -1000 To: Luigi Iannone X-Mailer: Apple Mail (2.753.1) X-OriginalArrivalTime: 08 Jan 2010 20:36:26.0387 (UTC) FILETIME=[3FDA8E30:01CA90A2] Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jan 2010 20:36:31 -0000 --Apple-Mail-10--939579449 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed On Jan 7, 2010, at 9:14 AM, Luigi Iannone wrote: > > Nevertheless, I think this is exactly the main problem that > overlapping EID-prefixess have: How does an ITR having a less > specific become aware that a new more-specific mapping exists? > In this case map-versioning can help (here it goes again ;-) ), but > I am sure there are still corner cases that we are not aware of. > FWIW: Isn't a given EID prefix under the control of a single administrator? So it is up to that administrator to determine how he wants to allocate more specific prefixes Every ITR under his control should have configuration for all the other ITRs for the same prefix --Apple-Mail-10--939579449 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=US-ASCII
On Jan 7, 2010, at 9:14 AM, Luigi Iannone wrote:


Nevertheless, I think this is = exactly the main  problem that overlapping EID-prefixess have: How = does an ITR having a less specific become aware that a new more-specific = mapping exists?

FWIW:
Isn't a given EID prefix under the control of a = single administrator?
So it is up to that administrator to = determine how he wants to allocate more specific = prefixes
Every ITR under his control should have configuration = for all the other ITRs for the same = prefix


= --Apple-Mail-10--939579449-- From jzwiebel@cisco.com Fri Jan 8 12:55:04 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6BA1D3A6859 for ; Fri, 8 Jan 2010 12:55:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tK-LgfBI2m7N for ; Fri, 8 Jan 2010 12:55:03 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 96BFD3A67C0 for ; Fri, 8 Jan 2010 12:55:03 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEADcqR0urR7H+/2dsb2JhbADBMJQHhC8E X-IronPort-AV: E=Sophos;i="4.49,244,1262563200"; d="scan'208,217";a="463868617" Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-6.cisco.com with ESMTP; 08 Jan 2010 20:55:02 +0000 Received: from xbh-sjc-221.amer.cisco.com (xbh-sjc-221.cisco.com [128.107.191.63]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id o08Kt2jb029442; Fri, 8 Jan 2010 20:55:02 GMT Received: from xmb-sjc-22c.amer.cisco.com ([128.107.191.47]) by xbh-sjc-221.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 8 Jan 2010 12:55:02 -0800 Received: from [10.0.1.5] ([10.21.64.61]) by xmb-sjc-22c.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 8 Jan 2010 12:55:01 -0800 In-Reply-To: <098F66D4-56C3-42E5-8CDE-FF3C7AAEEF57@net.t-labs.tu-berlin.de> References: <20100107162425.9D6B26BE58D@mercury.lcs.mit.edu> <098F66D4-56C3-42E5-8CDE-FF3C7AAEEF57@net.t-labs.tu-berlin.de> Mime-Version: 1.0 (Apple Message framework v753.1) Content-Type: multipart/alternative; boundary=Apple-Mail-14--938464119 Message-Id: From: John Zwiebel Date: Fri, 8 Jan 2010 10:54:20 -1000 To: Luigi Iannone X-Mailer: Apple Mail (2.753.1) X-OriginalArrivalTime: 08 Jan 2010 20:55:01.0684 (UTC) FILETIME=[D89F5F40:01CA90A4] Cc: Noel Chiappa , lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jan 2010 20:55:04 -0000 --Apple-Mail-14--938464119 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed On Jan 7, 2010, at 9:05 AM, Luigi Iannone wrote: >> >> >> As to LISP, ITRs could refuse to forward traffic from sources they >> are not >> supposed to handle, but the problem is 'how do they know what >> sources they >> are supposed to be handling'? > > Can't they just check the lisp database? > >> If they are also an ETR, they know, > > Isn't the contrary? Current spec do not mandate a mapping for the > source address of a packet in the ETR (unless it is also an ITR and > there is bidirectional traffic). > > If the ETR has a mapping for the source address in its cache, then > it do some sanity checks and eventually drop the packet. > > .. or am I wrong somewhere? > FWIW: NXOS requires a lisp-database command on both the ITR and ETR and checks that database to determine if the ITR is suppose to encap packets for a given EID. --Apple-Mail-14--938464119 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=US-ASCII
On Jan 7, 2010, at 9:05 AM, Luigi Iannone wrote:



As to LISP, ITRs could = refuse to forward traffic from sources they are not
supposed to = handle, but the problem is 'how do they know what sources they
are = supposed to be handling'?

Can't = they just check the lisp database? 

If they are also an ETR, they = know,

Isn't the contrary? Current = spec do not mandate a mapping for the source address of a packet in the = ETR (unless it is also an ITR and there is bidirectional = traffic).

If the ETR has a mapping for the = source address in its cache, then it do some sanity checks and = eventually drop the packet.

.. or am I wrong = somewhere?


FWIW:
NXOS requires a lisp-database command on both the ITR and = ETR 
and checks that database to determine if the ITR is = suppose to encap 
packets for a given = EID.
= --Apple-Mail-14--938464119-- From vaf@cisco.com Fri Jan 8 14:53:20 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DDC903A67B3 for ; Fri, 8 Jan 2010 14:53:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.332 X-Spam-Level: X-Spam-Status: No, score=-8.332 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_43=0.6, RCVD_IN_DNSWL_HI=-8, SARE_HTML_SINGLETS=1.666] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P3BneBtrOhdQ for ; Fri, 8 Jan 2010 14:53:14 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 25DCD3A67A2 for ; Fri, 8 Jan 2010 14:53:13 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: rfcdiff-alt-01-to-02.html, draft-ietf-lisp-alt-02.txt : 53343, 48035 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAGFGR0urR7Hu/2dsb2JhbADCEIkBiw2COYF2BA X-IronPort-AV: E=Sophos;i="4.49,244,1262563200"; d="txt'?html'217?scan'217,208,217";a="463926807" Received: from sj-core-5.cisco.com ([171.71.177.238]) by sj-iport-6.cisco.com with ESMTP; 08 Jan 2010 22:53:11 +0000 Received: from vaf-lnx1 (vaf-lnx1.cisco.com [128.107.165.254]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id o08MrBQN024596 for ; Fri, 8 Jan 2010 22:53:11 GMT Received: by vaf-lnx1 (Postfix, from userid 113818) id 601452077F; Fri, 8 Jan 2010 14:51:26 -0800 (PST) Date: Fri, 8 Jan 2010 14:51:26 -0800 From: Vince Fuller To: lisp@ietf.org Message-ID: <20100108225126.GA16683@vaf-lnx1.cisco.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="u3/rZRmxL6MmkK24" Content-Disposition: inline User-Agent: Mutt/1.5.20 (2009-06-14) Subject: [lisp] proposed draft-ietf-lisp-alt-02 draft X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jan 2010 22:53:21 -0000 --u3/rZRmxL6MmkK24 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Here is an updated version of the LISP+ALT specification that I'd like to publish to the Internet Drafts repository. Changes reflect comments from this list and elsewhere through the end of 2009. There are no modifications to the protocol only clarifications and editorial changes. Both html diffs and the full text of the new draft are attached. Comments appreciated. I'd like to get this posted within two weeks (by Friday, January 22nd). --Vince (for the other ALT authors: Dino, Dave, and Darrel) --u3/rZRmxL6MmkK24 Content-Type: text/html; charset=us-ascii Content-Disposition: attachment; filename="rfcdiff-alt-01-to-02.html" wdiff draft-ietf-lisp-alt-01.txt draft-ietf-lisp-alt-02.txt 

Network Working Group                                          V. Fuller
Internet-Draft                                              D. Farinacci
Intended status: Experimental                                   D. Meyer
Expires: November 27, 2009 July 9, 2010                                           D. Lewis
                                                                   Cisco
                                                            May 26, 2009
                                                         January 5, 2010

                  LISP Alternative Topology (LISP+ALT)
                       draft-ietf-lisp-alt-01.txt
                       draft-ietf-lisp-alt-02.txt

Abstract

   This document describes a method of building an alternative, logical
   topology for managing Endpoint Identifier to Routing Locator mappings
   using the Locator/ID Separation Protocol.  The logical network is
   built as an overlay on the public Internet using existing
   technologies and tools, specifically the Border Gateway Protocol and
   the Generic Routing Encapsulation.  An important design goal for
   LISP+ALT is to allow for the relatively easy deployment of an
   efficient mapping system while minimizing changes to existing
   hardware and software.

Status of this Memo

   This Internet-Draft is submitted to IETF in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF), its areas, and its working groups.  Note that
   other groups may also distribute working documents as Internet-
   Drafts.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   The list of current Internet-Drafts can be accessed at
   http://www.ietf.org/ietf/1id-abstracts.txt.

   The list of Internet-Draft Shadow Directories can be accessed at
   http://www.ietf.org/shadow.html.

   This Internet-Draft will expire on November 27, 2009. July 9, 2010.

Copyright Notice
   Copyright (c) 2009 2010 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document (http://trustee.ietf.org/license-info). document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.

Abstract

   This  Code Components extracted from this document describes a method of building an alternative, logical
   topology for managing Endpoint Identifier to Routing Locator mappings
   using the Locator/ID Separation Protocol.  The logical network is
   built must
   include Simplified BSD License text as an overlay on the public Internet using existing
   technologies and tools, specifically described in Section 4.e of
   the Border Gateway Protocol Trust Legal Provisions and are provided without warranty as
   described in the Generic Routing Encapsulation.  An important design goal for
   LISP+ALT is to allow for the relatively easy deployment of an
   efficient mapping system while minimizing changes to existing
   hardware and software. BSD License.

Table of Contents

   1.  Requirements Notation  . . . . . . . . . . . . . . . . . . . .  4
   2.  Introduction . . . . . . . . . . . . . . . . . . . . . . . . .  5
   3.  Definition of Terms  . . . . . . . . . . . . . . . . . . . . .  6
   4.  The LISP 1.5 model . . . . . . . . . . . . . . . . . . . . . .  8
     4.1.  Routeability of EIDs . . . . . . . . . . . . . . . . . . .  8
     4.2.  Connectivity to non-LISP sites . . . . . . . . . . . . . .  8
     4.2.  9
     4.3.  Caveats on the use of Data Probes  . . . . . . . . . . . .  9
   5.  LISP+ALT: Overview . . . . . . . . . . . . . . . . . . . . . . 10
     5.1.  ITR traffic handling . . . . . . . . . . . . . . . . . . . 10 11
     5.2.  EID Assignment - Hierarchy and Topology  . . . . . . . . . 11
     5.3.  LISP+ALT Router  . . . . . . . . . . . . . (or ALT router for short)  . . . . . . . . 12
     5.4.  ITR and ETR in a LISP+ALT Environment  . . . . . . . . . . 12 13
     5.5.  Use of GRE and BGP between LISP+ALT Routers  . . . . . . . 13
   6.  EID Prefix Propagation and Map-Request Forwarding  . . . . . . 14
     6.1.  Changes to ITR behavior with LISP+ALT  . . . . . . . . . . 14
     6.2.  Changes to ETR behavior with LISP+ALT  . . . . . . . . . . 14
   7.  BGP configuration and protocol considerations  . . . . . . . . 16
     7.1.  Autonomous System Numbers (ASNs) in LISP+ALT . . . . . . . 16
     7.2.  Sub-Address Family Identifier (SAFI) for LISP+ALT  . . . . 16
   8.  EID-Prefix Aggregation . . . . . . . . . . . . . . . . . . . . 17
     8.1.  Traffic engineering with LISP and LISP+ALT . . . . . . . . 17
     8.2.  Edge aggregation and dampening . . . . . . . . . . . . . . 18
   9.  Connecting sites to the ALT network  . . . . . . . . . . . . . 19
     9.1.  ETRs originating information into the ALT  . . . . . . . . 19
     9.2.  ITRs Using the ALT . . . . . . . . . . . . . . . . . . . . 19
   10. IANA Considerations  . . . . . . . . . . . . . . . . . . . . . 21
   11. Security Considerations  . . . . . . . . . . . . . . . . . . . 22
     11.1. Apparent LISP+ALT Vulnerabilities  . . . . . . . . . . . . 22
     11.2. Survey of LISP+ALT Security Mechanisms . . . . . . . . . . 23
     11.3. Using existing BGP Security mechanisms . . . . . . . . . . 23
   12. Acknowledgments  . . . . . . . . . . . . . . . . . . . . . . . 24
   13. References . . . . . . . . . . . . . . . . . . . . . . . . . . 25
     13.1. Normative References . . . . . . . . . . . . . . . . . . . 25
     13.2. Informative References . . . . . . . . . . . . . . . . . . 25
   Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 26

1.  Requirements Notation

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
   document are to be interpreted as described in [RFC2119].

2.  Introduction

   This document describes a method of building an alternative logical
   topology for managing Endpoint identifier to Routing Locator mappings
   using the Locator/ID Separation Protocol [LISP].  This logical
   topology uses existing technology and tools, specifically the Border
   Gateway Protocol [RFC4271] and its multi-protocol extension
   [RFC2858], along with the Generic Routing Encapsulation [RFC2784]
   protocol to construct an overlay network of devices that advertise
   EID-prefixes only.  These Endpoint Identifier Prefix Aggregators hold
   hierarchically-assigned pieces of the Endpoint Identifier space
   (i.e., prefixes) and their next hops toward the network element which
   is authoritative for Endpoint Identifier-to-Routing Locator mapping
   for that prefix.  Tunnel routers can use this overlay to make queries
   against and respond to mapping requests made against the distributed
   Endpoint Identifier-to-Routing Locator mapping database.  Note the
   database is distributed (as described in [LISP]) and is stored in the
   ETRs.

   Note that an important design goal of LISP+ALT is to minimize the
   number of changes to existing hardware and/or software that are
   required to deploy the mapping system.  It is envisioned that in most
   cases existing technology can be used to implement and deploy LISP+
   ALT.  Since the deployment of LISP+ALT adds new devices to the
   network, existing devices not need changes or upgrades.  They can
   function as they are to realize an underlying and robust physical
   topology.

   The remainder of this document is organized as follows: Section 3
   provides the definitions of terms used in this document.  Section 4
   outlines the basic LISP 1.5 model.  Section 5 provides a basic
   overview of the LISP Alternate Topology architecture, and Section 6
   describes how the ALT uses BGP to propagate Endpoint Identifier
   reachability over the overlay network.  Section 8 describes the
   construction of the ALT aggregation hierarchy, and Section 9
   discusses how LISP+ALT elements are connected to form the overlay
   network.

3.  Definition of Terms

   LISP+ALT operates on two name spaces and introduces a new network
   element, the LISP+ALT Router (see below).  This section provides
   high-level definitions of the LISP+ALT name spaces, network elements,
   and message types.

   The Alternative Logical Topology (ALT):  The virtual overlay network
      made up of tunnels between EID Prefix Aggregators.  The Border
      Gateway Protocol (BGP) runs between LISP+ALT ALT routers and is used to
      carry reachability information for EID prefixes.

   Legacy Internet:  The portion of the Internet which does not run LISP
      and does not participate in LISP+ALT.

   LISP+ALT Router:  The devices which run on the ALT.  The ALT is a
      static network built using tunnels between LISP+ALT routers.
      These routers are deployed in a hierarchy in which routers at each
      level in the this hierarchy are responsible for aggregating all
      EID prefixes learned from those logically "below" them and
      advertising summary prefixes to the routers logically "above"
      them.  All prefix learning and propagation between levels is done
      using BGP.  A LISP+ALT routers router at the lowest level, or "edge", "edge" of
      the ALT learn ALT, learns EID prefixes either over from its "client" ETRs.  See
      Section 4.1 for a BGP session to ETRs or
      through static routes (in description of how EID prefixes are learned at
      the case "edge" of the "low-opex ETR"). ALT.  See also Section 7 for details on how BGP
      is configured between the different network elements.

      The primary function of LISP+ALT routers is to provide a
      lightweight forwarding infrastructure for LISP control-plane
      messages (Map-Request and Map-Reply), and to transport data
      packets when the packet has the same destination address in both
      the inner (encapsulating) destination and outer destination
      addresses ((i.e., a Data Probe packet).

    Endpoint ID (EID):  A 32-bit (for IPv4) or 128-bit (for ipv6) value
      used in the source and destination address fields of the first
      (most inner) LISP header of a packet.  A packet that is emitted by
      a system contains EIDs in its headers and LISP headers are
      prepended only when the packet reaches an Ingress Tunnel Router
      (ITR) on the data path to the destination EID.

      In LISP+ALT, EID-prefixes MUST BE assigned in a hierarchical
      manner (in power-of-two) such that they can be aggregated by LISP+
      ALT routers.  In addition, a site may have site-local structure in
      how EIDs are topologically organized (subnetting) for routing
      within the site; this structure is not visible to the global
      routing system.

   EID-Prefix Aggregate:  A set of EID-prefixes said to be aggregatable
      in the [RFC4632] sense.  That is, an EID-Prefix aggregate is
      defined to be a single contiguous power-of-two EID-prefix block.
      Such a block is characterized by a prefix and a length.

   Routing Locator (RLOC):  An IP address of an egress tunnel router
      (ETR).  It is the output of a EID-to-RLOC mapping lookup.  An EID
      maps to one or more RLOCs.  Typically, RLOCs are numbered from
      topologically-aggregatable blocks that are assigned to a site at
      each point to which it attaches to the global Internet; where the
      topology is defined by the connectivity of provider networks,
      RLOCs can be thought of as Provider Aggregatable (PA) addresses.
      Note that in LISP+ALT, RLOCs are not carried by LISP+ALT routers.

    EID-to-RLOC Mapping:  A binding between an EID and the RLOC-set that
      can be used to reach the EID.  The term "mapping" refers to an
      EID-to-RLOC mapping.

    EID Prefix Reachability:  An EID prefix is said to be "reachable" if
      one or more of its locators are reachable.  That is, an EID prefix
      is reachable if the ETR (or its proxy) that is authoritative for a
      given EID-to-RLOC mapping is reachable.

    Default Mapping:  A Default Mapping is a mapping entry for EID-
      prefix 0.0.0.0/0. 0.0.0.0/0 (0::/0 for ipv6).  It maps to a locator-set used
      for all EIDs in the Internet.  If there is a more specific EID-prefix EID-
      prefix in the mapping cache it overrides the Default Mapping
      entry.  The Default Mapping route can be learned by configuration
      or from a Map-Reply message.

    Default Route:  A Default Route in the context of LISP+ALT is a EID-
      prefix value of 0.0.0.0/0 (or 0::/0 for ipv6) which is advertised
      by BGP on top of the ALT.  The Default Route is used to realize create a
      forwarding path for Data Probe
      or Map-Request packets. a packet to be sent into the ALT (and ALT
      datagram) on a router which does not have a full ALT forwarding
      database.

4.  The LISP 1.5 model

   As documented in [LISP], the LISP 1.5 model uses the same basic
   query/response protocol machinery as LISP 1.0.  In particular, LISP+
   ALT provides two mechanisms for an ITR to obtain EID-to-RLOC mappings
   (both of these techniques are described in more detail in
   Section 9.2):

   Data Probe:  An ITR may send the first few data packets into the ALT
      to minimize packet loss and to probe for the mapping; the
      authoritative ETR will respond to the ITR with a Map-Reply message
      when it receives the data packet over the ALT.  Note that in this
      case, the inner Destination Address (DA), which is an EID, is
      copied to the outer DA and is routed over the ALT.

   Map-Request:  An ITR may also send a Map-Request message into the ALT
      to request the mapping.  As in the Data Probe case, the
      authoritative ETR will respond to the ITR with a Map-Reply
      message.  In this case,  Since the ALT only forwards on EID destinations, the DA
      of the Map-Request sent in to the ALT MUST be an EID.  See [LISP]
      for the format of Map-Request and Map-Reply packets.

   ALT datagram:  A Map-Request or Data Probe to be sent into or
      forwarded on the ALT.

4.1.  Routeability of EIDs

   As with LISP 1.0, EIDs are routable and can be used, unaltered, as
   the source and destination addresses in IP datagrams.  Unlike in LISP
   1.0, LISP 1.5 EIDs are not routable on the public Internet; instead,
   they are only routed over a separate, virtual topology referred to as
   the LISP Alternative Virtual Network.  This network is built as an
   overlay on the public Internet using tunnels to interconnect LISP+ALT
   routers.  BGP is run over these tunnels to propagate the information
   needed to route Data Probes and Map-Request/Replies. ALT datagrams.  Importantly, while the ETRs are the
   source(s) of the unaggregated EID prefix data, LISP+ALT uses existing
   BGP mechanisms to aggressively aggregate this information.  Note that ETRs are
   an ETR is not required to participate (or prevented from
   participating) in LISP+ALT; they an ETR may choose to communicate their its
   mappings to their its serving LISP+ALT router(s) at using subscription time via configuration.  ITRs are also not required to
   participate
   static configuration or through a dynamic mechanism such as that
   described in (nor prevented from [LISP-MS].  An ITR may similarly use a static EID
   "default route" or other configuration as described in [LISP-MS] to
   avoid the complexity of participating in) LISP+ALT.

4.1. in the ALT.

4.2.  Connectivity to non-LISP sites

   As stated above, EIDs used as IP addresses by LISP sites are not
   routable on the public Internet.  This implies that, absent a
   mechanism for communication between LISP and non-LISP sites,
   connectivity between them is not possible.  To resolve this problem,
   an "interworking" technology has been defined; see [Interworking] for
   details.

4.2.

4.3.  Caveats on the use of Data Probes

   It is worth noting that there has been a great deal of discussion and
   controversy about whether Data Probes are a good idea.  On the one
   hand, using them offers a method of avoiding the "first packet drop"
   problem when an ITR does not have a mapping for a particular EID-
   prefix.  On the other hand, forwarding data packets on the ALT would
   require that it either be engineered to support relatively high
   traffic rates, which is not generally feasible for a tunneled
   network, or that it be carefully designed to aggressively rate- limit
   traffic to avoid congestion or DoS attacks.  There are also other
   issues involving latency or other differences between the ALT path
   that initial a Data Probe would take and the path that subsequent
   packets on the same flow would take once a mapping were in place on
   an ITR.  For these and other reasons use of Data Probes should be
   considered experimental and should be disabled by default in all ITR
   implementations.

5.  LISP+ALT: Overview

   LISP+ALT is a hybrid push/pull architecture.  Aggregated EID prefixes
   are "pushed" among the LISP+ALT routers and, optionally, out to ITRs
   (which may elect to receive the aggregated information, as opposed to
   simply using a default mapping).  Specific EID-to-RLOC mappings are
   "pulled" by ITRs when they either send explicit LISP requests or data
   packets on the alternate topology that result in triggered replies
   being generated by ETRs.

   The basic idea embodied in LISP+ALT is to use BGP, running over
   tunneled overlay network, to establish reachability required to route
   Data Probes and Map-Requests
   ALT datagrams over an alternate logical topology (ALT).  The ALT
   BGPRoute Information Base (RIB) is comprised of EID prefixes and
   associated next hops.  LISP+ALT routers interconnect using eBGP and
   propagate EID prefix updates, which are learned over eBGP connections
   to authoritative ETRs, or by static configuration.  ITRs may also
   eBGP peer with one or more LISP+ALT to learn the best ALT router to
   use to forward a Data Proble or Map-Request an ALT datagram for a particular prefix; in most
   cases, an ITR will have a default EID mapping pointing to one or more
   LISP+ALT routers.

   Note that while this document specifies the use of Generic Routing
   Encapsulation (GRE) as a tunneling mechanism, there is no reason that
   an ALT cannot be built using other tunneling technologies.  In cases
   where GRE does not meet security, management, or other operational
   requirements, it is reasonable to use another tunneling technology
   that does.  References to "GRE tunnel" in later sections of this
   document should therefore not be taken as prohibiting or precluding
   the use of other, available tunneling mechanisms.  Note also that two
   LISP+ALT routers that are directly adjacent (with no layer-3 router
   hops between them) need not use a tunnel between them; in this case,
   BGP may be configured across the interfaces that connect to their
   common subnet and that subnet is considered to be part of the ALT
   topology.  Use of techniques, such as "eBGP multihop", to forward ALT
   datagrams through routers that do not participate in ALT routing, is
   not recommended.

   In summary, LISP+ALT uses BGP to propagate EID-prefix update
   information to facilitate forwarding a Map-Reqeusts or Data Probe an ALT datagram to the ETR that
   holds the EID-to-RLOC mapping for that EID-prefix.  This reachability
   is carried as IPv4 or IPv6 NLRI without modification (since an EID
   prefix has the same syntax as IPv4 or IPv6 address prefix).  LISP+ALT
   routers eBGP peer with one another, forming the ALT.  A LISP+ALT
   router near the edge learns near the edge learns EID prefixes originated by authoritative
   ETRs.  This may be via eBGP with the ETRs, by static configuration,
   or through some other dynamic mechanism such as that defined in
   [LISP-MS].  A LISP+ALT router may also be configured to aggregate EID
   prefixes originated
   by authoritative ETRs, either by eBGP peering with them received from ETRs or by
   configuration. from other LISP+ALT routers aggregate EID prefixes, and forward
   Data Probes and Map-Requests. that are
   topologically "downstream" from it.

5.1.  ITR traffic handling

   When an ITR receives a packet originated by an end system within its
   site (i.e. a host for which the ITR is the exit path out of the site)
   and the destination for that packet is not known in the ITR's mapping
   cache, the ITR encapsulates the packet in a LISP header, copying the
   inner destination address (EID) to the outer destination address
   (RLOC), and transmits it through a GRE tunnel to a LISP+ALT router in
   the ALT. ALT (see also [LISP-MS] for non-ALT-connected ITRs, noting that
   an ITR cannot send Data Probes to a Map-Server).  This "first hop"
   LISP+ALT router uses EID-prefix routing information learned from
   other LISP+ALT routers via BGP to guide the packet to the ETR which
   "owns" the prefix.  Upon receipt by the ETR, normal LISP processing
   occurs: the ETR responds to the ITR with a LISP Map-Reply that lists
   the RLOCs (and, thus, the ETRs to use) for the EID prefix.  The ETR
   also de-encapsulates the packet and transmits it toward its
   destination.

   Upon receipt of the Map-Reply, the ITR installs the RLOC information
   for a given prefix into a local mapping database.  With these mapping
   entries stored, additional packets destined to the given EID prefix
   are routed directly to a viable ETR without use of the ALT, until
   either the entry's TTL has expired, or the ITR can otherwise find no
   reachable ETR.  Note that a valid mapping (not timed-out) may exist
   that contains no reachable RLOCs (i.e. all paths to that ETR are
   down); in this case, packets destined to the EID prefix are dropped,
   not routed through the ALT.

   Traffic routed over the ALT therefore consists of:

   o  EID prefix Map-Requests, and

   o  data packets destined for those EID prefixes while the ITR awaits
      map replies

5.2.  EID Assignment - Hierarchy and Topology

   EID-prefixes will be allocated to a LISP site by Internet Registries.
   Multiple allocations may not be in power-of-2 blocks.  But when they
   are, they will be aggregated into a single, advertised EID-prefix.
   The ALT network is built in a tree-structured hierarchy to allow
   aggregation at merge points in the tree.  Building such a structure
   should minimize the number of EID-prefixes carried by LISP+ALT nodes
   near the top of the hierarchy.

   Since the ALT will not need to change due to subscription or policy
   reasons, the topology can remain relatively static and aggregation
   can be sustained.  Because routing on the ALT uses BGP, the same
   rules apply for generating aggregates; in particular, a LISP+ALT
   router should only be configured to generate an aggregate if it is
   configured with BGP sessions to all of the originators of components
   (more-specifics prefixes) of that aggregae; aggregate; not all of the
   components of need to be present for the aggregate to be originated
   (some may be holes in the covering prefix and some may be down) but
   the aggregating router must be configured to learn the state of all
   of the components.

   As an example, consider ETRs that are originating EID prefixes for
   10.1.0.0/24, 10.1.64.0/24, 10.1.128.0/24, and 10.1.192.0/24.  An ALT
   router should only be configured to generate an aggregate for
   10.1.0.0/16 if it has BGP sessions configured with all of these ETRs,
   in other words, only if it has sufficient knowledge about the state
   of those prefixes to summarize them.

   Under what circumstances the ALT router actually generates the
   aggregate is a matter of local policy: in some cases, it will be
   statically configured to do so at all times with a "static discard"
   route.  In other cases, it may be configured to only generate the
   aggregate prefix if at least one of the components of the aggregate
   is learned via BGP.

   This implies that two ALTs ALT routers that share an overlapping set of
   prefixes must exchange those prefixes if either is to generate and
   export a covering aggregate for those prefixes.  It also implies that
   an ETR
   that originates a prefix which connects to the ALT using BGP must maintain BGP sessions
   with all of the ALT routers that are configured to originate an
   aggregate which covers that prefix.  See also [LISP-MS] for an
   example of other ways that prefix origin consistency and aggregation
   are maintained.

   Note: much is currently uncertain about the best way to build the ALT
   network; as testing and prototype deployment proceeds, a guide to how
   to best build the ALT network will be developed.

5.3.  LISP+ALT Router (or ALT router for short)

   A LISP+ALT Router has the following functionality:

   1.  It runs, at a minimum, the eBGP part of the BGP protocol.

   2.  It supports a separate RIB which uses next-hop GRE tunnel
       interfaces for forwarding Data Probes and Map-Requests. ALT datagrams.

   3.  It can act as a "proxy-ITR" to support non-LISP sites.

   4.  It can act as an ETR, or as a recursive or re-encapsulating ITR
       to reduce mapping tables in site-based LISP routers.

5.4.  ITR and ETR in a LISP+ALT Environment

   An ITR using LISP+ALT may have additional functionality as follows:

   1.  If it is also acting as a LISP+ALT Router, it sends Data Probes
       or Map-Requests ALT datagrams
       on the BGP best path computed GRE tunnel for each EID prefix.

   2.  When acting solely as a ITR, it sends Data Probes or Map-Requests ALT datagrams directly to a
       configured LISP+ALT router.

   An ETR using LISP+ALT may also behave slightly differently:

   1.  If it is also acting as a LISP+ALT router, it advertises its
       configured EID-prefixes into BGP for distribution through the
       ALT.

   2.  It receives Data Probes and Map-Requests ALT datagrams only from its "upstream" LISP+ALT
       routers over the GRE tunnel(s) configured to its "upstream" LISP+ALT router(s) and it/them.  It
       responds with Map-
       Replies Map-Replies for the EID prefixes that it "owns".

5.5.  Use of GRE and BGP between LISP+ALT Routers

   The ALT network is built using GRE tunnels between LISP+ALT routers.
   eBGP sessions are configured over those tunnels, with each LISP+ALT
   router acting as a separate AS "hop" in a Path Vector for BGP.  For
   the purposes of LISP+ALT, the AS-path is used solely as a shortest-
   path determination and loop-avoidance mechanism.  Because all next-
   hops are on tunnel interfaces, no IGP is required to resolve those
   next-hops to exit interfaces.

   LISP+ALT's use of GRE and BGP reduces provider Operational Expense
   (OPEX) because no new protocols need to be either defined or used on
   the overlay topology.  Also, since tunnel IP addresses are local in
   scope, no coordination is needed for their assignment; any addressing
   scheme (including private addressing) can be used for tunnel
   addressing.

6.  EID Prefix Propagation and Map-Request Forwarding

   As described in Section 9.2, an ITR may send either a Map-Request or
   a data probe to find a given EID-to-RLOC mapping.  The ALT provides
   the infrastructure that allows these requests to reach the
   authoritative ETR.

   Note that, under normal circumstances, Map-Replies are not sent over
   the ALT - an ETR sends a Map-Reply to the source RLOC learned from
   the original Map-Request.  There may be scenarios, perhaps to
   encourage caching of EID-to-RLOC mappings by ALT routers, where Map-
   Replies could be sent over the ALT or where a "first-hop" ALT router
   might modify the originating RLOC on a Map-Request received from an
   ITR to force the Map-Reply to be sent to it; these cases will not be
   supported by initial LISP+ALT implementations but may be subject to
   future experimentation.

   LISP+ALT routers propagate mapping information for use by ITRs (when
   making Map-Requests or
   sending Data Probes) ALT datagrams) using eBGP [RFC4271]. eBGP is run on the
   inter-LISP+ALT router links, and and possibly between an edge ("last
   hop") LISP+ALT router and an ETR or between an edge ("first hop")
   LISP+ALT router and an ITR.  The ALT eBGP RIB consists of aggregated
   EID prefixes and their next hops toward the authoritative ETR for
   that EID prefix.

6.1.  Changes to ITR behavior with LISP+ALT

   When using LISP+ALT, an ITR always sends either Data Probes or Map-
   Requests ALT datagrams to one of its
   "upstream" LISP+ALT routers. routers; these are sent only to obtain new EID-
   to-RLOC mappings - RLOC probe and cache TTL refresh Map-Requests are
   not sent on the ALT.  As in basic LISP, it should use one of its
   RLOCs as the source address of these queries; it should explicitly
   not use a tunnel interface as the source address as doing so will
   cause replies to be forwarded over the tunneled topology and may be
   problematic if the tunnel interface address is not explicitly routed
   throughout the ALT.  If the ITR is running BGP with the LISP+ALT
   router(s), it selects the appropriate LISP+ALT router based on the
   BGP information received.  If it is not running BGP, it uses static
   configuration to select a LISP+ALT router; in the general case, this
   will effectively be an "EID-prefix default route".

6.2.  Changes to ETR behavior with LISP+ALT

   If an ETR connects using BGP to one or more LISP+ALT router(s), it
   simply announces its EID-prefix to those LISP+ALT routers.  In the
   "low-opex" case, where the ETR does not use BGP, it will still have a
   GRE tunnel to one or more LISP+ALT routers; these LISP+ALT router(s)
   the ETR must route Map-Requests and Data Probes to the ETR and
   contain configuration (in effect, static routes) for the ETR's EID-
   prefixes.  Note that in either case,
   when an ETR generates a Map-
   Reply Map-Reply message to return to a querying
   ITR, it sends it to the ITR's source-RLOC (i.e., on the underlying
   Internet topology, not on the ALT; this avoids any latency penalty
   (or "stretch") that might be incurred by routing over the ALT).

   See also Section 9 for more details about the "low-opex" ETR and ITR
   configurations.

7.  BGP configuration and protocol considerations

7.1.  Autonomous System Numbers (ASNs) in LISP+ALT

   The primary use of BGP today is to define the global Internet routing
   topology in terms of its participants, known as Autonomous Systems.
   LISP+ALT specifies the use of BGP to create a global EID-to-RLOC
   mapping database which, while related to the global routing database,
   serves a very different purpose and is organized into a very
   different hierarchy.  Because LISP+ALT does use BGP, however, it uses
   ASNs in the paths that are propagated among LISP+ALT routers.  To
   avoid confusion, it needs to be stressed that that these LISP+ALT
   ASNs use a new numbering space that is unrelated to the ASNs used by
   the global routing system.  Exactly how this new space will be
   assigned and managed will be determined during experimental
   deployment of LISP+ALT.

   Note that the LISP+ALT routers that make up the "core" of the ALT
   will not be associated with any existing core-Internet ASN because
   topology, hierarchy, and aggregation boundaries are completely
   separate from and independent of the global Internet routing system.

7.2.  Sub-Address Family Identifier (SAFI) for LISP+ALT

   As defined by this document, LISP+ALT may be implemented using BGP
   without modification.  Given the fundamental operational difference
   between propagating global Internet routing information (the current,
   dominant use of BGP) and managing the global EID-to-RLOC database
   (the use of BGP proposed by this document), it may be desirable to
   assign a new SAFI [RFC2858] to prevent operational confusion and
   difficulties, including the inadvertent leaking of information from
   one domain to the other.  At present, this document does not require
   the assignment of a new SAFI but the authors anticipate that
   experimentation may suggest the need for one in the future.

8.  EID-Prefix Aggregation

   The ALT BGP peering topology should be arranged in a tree-like
   fashion (with some meshiness), with redundancy to deal with node and
   link failures.  A basic assumption is that as long as the routers are
   up and running, the underlying topology will provide alternative
   routes to maintain BGP connectivity among LISP+ALT routers.

   Note that, as mentioned in Section 5.2, the use of BGP by LISP+ALT
   requires that information can only be aggregated where all active
   more-specific prefixes of a generated aggregate prefix are known.
   This implies, for example, that if a given set of prefixes is used by
   multiple, ALT networks, those networks must interconnect and share
   information about all of the prefixes if either were to generate an
   aggregate prefix that covered all of them.  This is no different than
   the way that BGP route aggregation works in the existing global
   routing system: a service provider only generates an aggregate route
   if it is configured to learn to all prefixes that make up that
   aggregate.

8.1.  Traffic engineering with LISP and LISP+ALT

   It is worth noting that LISP+ALT does not directly propagate EID-to-
   RLOC mappings.  What it does is provide a mechanism for a LISP ITR to
   find the ETR that holds the mapping for a particular EID prefix.
   This distinction is important for several reasons.  First, it means
   that the reachability of RLOCs is learned through the LISP ITR-ETR
   exchange so "flapping" of state information through BGP is not likely
   nor can mapping information become "stale" by slow propagation
   through the ALT BGP mesh.  Second, by deferring EID-to-RLOC mapping
   to an ITR-ETR exchange, it is possible to perform site-to-site
   traffic engineering through a combination of setting the preference
   and weight fields and by returning more-specific EID-to-RLOC
   information in LISP Map-Reply messages.  This is a powerful mechanism
   that can conceivably replace the traditional practice of routing
   prefix deaggregation for traffic engineering purposes.  Rather than
   propagating more-specific information into the global routing system
   for local- or regional-optimization of traffic flows, such more-
   specific information can be exchanged, through LISP (not LISP+ALT),
   on an as-needed basis between only those ITRs/ETRs (and, thus, site
   pairs) that need it; should a receiving ITR decide that it does not
   wish to store such more-specific information, it has the option of
   discarding it as long as a shorter, covering EID prefix exists.  Not
   only does this greatly improve the scalability of the global routing
   system but it also allows improved traffic engineering techniques by
   allowing richer and more fine-grained policies to be applied.

8.2.  Edge aggregation and dampening

   Note also that normal BGP best common practices apply to the ALT
   network.  In particular, first-hop ALT routers will aggregate EID
   prefixes and dampen changes to them in the face of excessive updates.
   Since EID prefix assignments are not expected to change with anywhere
   as frequently BGP prefix reachability on the Internet, such dampening
   should be very rare and might be worthy of logging as an exceptional
   event.  It is again worth noting that the ALT carries only EID
   prefixes, along with BGP-generated paths to the ETRs that source
   those prefixes as advertisements travel over the logical topology;
   this set of information is considerablly less volitile volatile than the
   actual EID-to-RLOC mappings.

9.  Connecting sites to the ALT network

9.1.  ETRs originating information into the ALT

   EID prefix information is originated into the ALT by two different
   mechanisms:

   eBGP:  An ETR may participate usually participates in the LISP+ALT overlay network by
      running eBGP to one or more LISP+ALT router(s) over GRE tunnel(s).
      In this case, the
      The ETR advertises reachability for its EID prefixes over these
      eBGP connection(s).  The LISP+ALT router(s) that receive(s) these
      prefixes then propagate(s) them into the ALT.  Here the ETR is
      simply an eBGP peer of LISP+ALT router(s) at the edge of the ALT.
      Where possible, a LISP+ALT router that receives EID prefixes from
      an ETR via eBGP should aggregate that information.

   Configuration:  One or more LISP+ALT router(s) may be configured to
      originate an EID prefix on behalf of the non-BGP-speaking ETR that
      is authoritative for a prefix.  As in the case above, the ETR is
      connected to LISP+ALT router(s) using GRE tunnel(s) but rather
      than BGP being used, the LISP+ALT router(s) are configured with
      what are in effect "static routes" for the EID prefixes "owned" by
      the ETR.  The GRE tunnel is used to route Map-Requests to the ETR.
      Note that the LISP+ALT router could also serve as a proxy for its
      TCP-connected ETRs.

   Note:  in both cases, an ETR may have connections to to multiple
      LISP+ALT routers for the following reasons:

      *  redundancy, so that a particular ETR is still reachable through
         the ALT even if one path or tunnel is unavailable.

      *  to connect to different parts of the ALT hierarchy if the ETR
         "owns" multiple EID-to-RLOC mappings for EID prefixes that
         cannot be aggregated by the same LISP+ALT router (i.e. are not
         topologically "close" to each other in the ALT).

9.2.  ITRs Using the ALT

   In order to source Map-Requests to the ALT or to route a Data Probe
   packet over the ALT, each ITR participating in the ALT establishes a
   connection to one or more LISP+ALT routers.  These connections can be
   either eBGP or TCP (as described above).

   In the case in which the ITR is running eBGP, the peer LISP+ALT
   routers use these connections to advertise highly aggregated EID-
   prefixes to the peer ITRs.  The ITR then installs the received
   prefixes into a forwarding table that is used to to send LISP Map-
   Requests to the appropriate LISP+ALT router.  In most cases, a LISP+
   ALT router will send a default mapping to its client ITRs so that
   they can send request for any EID prefix into the ALT.

   In the case in which the ITR is connected to some set of LISP+ALT
   routers without eBGP, the ITR sends Map-Requests to any of its
   connected LISP+ALT routers.

   An ITR may also choose to send the first few data packets over the
   ALT to minimize packet loss and reduce mapping latency.  In this
   case, the data packet serves as a mapping probe (Data Probe) and the
   ETR which receives the data packet (over the ALT) responds with a
   Map-Reply is sent to the ITR's source-RLOC using the underlying
   topology.  Note that the use of Data Probes is discouraged at this
   time (see Section 4.2). 4.3).

   In general, an ITR will establish connections only to LISP+ALT
   routers at the "edge" of the ALT (typically two for redundancy) but
   there may also be situations where an ITR would connect to other
   LISP+ALT routers to receive additional, shorter path information
   about a portion of the ALT of interest to it.  This can be
   accomplished by establishing GRE tunnels between the ITR and the set
   of LISP+ALT routers with the additional information.  This is a
   purely local policy issue between the ITR and the LISP+ALT routers in
   question.

10.  IANA Considerations

   This document makes no request of the IANA.

11.  Security Considerations

   LISP+ALT shares many of the security characteristics of BGP.  Its
   security mechanisms are comprised of existing technologies in wide
   operational use today.  Securing LISP+ALT is much simpler than
   securing BGP.

   Compared to BGP, LISP+ALT routers are not topologically bound,
   allowing them to be put in locations away from the vulnerable AS
   border (unlike eBGP speakers).

11.1.  Apparent LISP+ALT Vulnerabilities

   This section briefly lists of the apparent vulnerabilities of LISP+
   ALT.

   Mapping Integrity:  Can an attacker insert bogus mappings to black-
      hole (create a DoS) or intercept LISP data-plane packets?

   LISP+ALT router Availability:  Can an attacker DoS the LISP+ALT
      routers connected to a given ETR? without access to its mappings,
      a site is essentially unavailable.

   ITR Mapping/Resources:  Can an attacker force an ITR or LISP+ALT
      router to drop legitimate mapping requests by flooding it with
      random destinations that it will have to query for.  Further study
      is required to see the impact of admission control on the overlay
      network.

   EID Map-Request Exploits for Reconnaissance:  Can an attacker learn
      about a LISP destination sites' TE policy by sending legitimate
      mapping requests messages and then observing the RLOC mapping
      replies?  Is this information useful in attacking or subverting
      peer relationships?  Note that LISP 1.0 has a similar data-plane
      reconnaissance issue.

   Scaling of LISP+ALT router Resources:  Paths through the ALT may be
      of lesser bandwidth than more "direct" paths; this may make them
      more prone to high-volume denial-of-service attacks.  For this
      reason, all components of the ALT (ETRs and ALT routers) should be
      prepared to rate-limit traffic (ALT datagrams) that could be
      received across the
      ALT (Map-Requests and Data Probes). ALT.

   UDP Map-Reply from ETR:  Since Map-Replies packets are sent directly
      from the ETR to the ITR's RLOC, the ITR's RLOC may be vulnerable
      to various types of DoS attacks.

11.2.  Survey of LISP+ALT Security Mechanisms

   Explicit peering:  The devices themselves can both prioritize
      incoming packets as well as potentially do key checks in hardware
      to protect the control plane.

   Use of TCP to connect elements:  This makes it difficult for third
      parties to inject packets.

   Use of HMAC Protected TCP Connections:  HMAC is used to verify
      message integrity and authenticity, making it nearly impossible
      for third party devices to either insert or modify messages.

   Message Sequence Numbers and Nonce Values in Messages:  This allows
      for devices to verify that the mapping-reply packet was in
      response to the mapping-request that they sent.

11.3.  Using existing BGP Security mechanisms

   LISP+ALT's use of BGP allows for the ALT to take advantage of BGP
   security features designed for existing Internet BGP use.

   For example, should either sBGP [I-D.murphy-bgp-secr] or soBGP
   [I-D.white-sobgparchitecture] become widely deployed it expected that
   LISP+ALT could use these mechanisms to provide authentication of EID-
   to-RLOC mappings, and EID origination.

12.  Acknowledgments

   Many of the ideas described in this document were developed during
   detailed discussions with Scott Brim and Darrel Lewis, who made many
   insightful comments on earlier versions of this document.  Aditional
   thanks are due to Hannu Flinck and Amit Jain who offered many helpful
   suggestions for the -02 version.

13.  References

13.1.  Normative References

   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
              Requirement Levels", BCP 14, RFC 2119, March 1997.

   [RFC2784]  Farinacci, D., Li, T., Hanks, S., Meyer, D., and P.
              Traina, "Generic Routing Encapsulation (GRE)", RFC 2784,
              March 2000.

   [RFC2858]  Bates, T., Rekhter, Y., Chandra, R., and D. Katz,
              "Multiprotocol Extensions for BGP-4", RFC 2858, June 2000.

   [RFC4271]  Rekhter, Y., Li, T., and S. Hares, "A Border Gateway
              Protocol 4 (BGP-4)", RFC 4271, January 2006.

   [RFC4632]  Fuller, V. and T. Li, "Classless Inter-domain Routing
              (CIDR): The Internet Address Assignment and Aggregation
              Plan", BCP 122, RFC 4632, August 2006.

13.2.  Informative References

   [I-D.murphy-bgp-secr]
              Murphy, S., "BGP Security Analysis",
              draft-murphy-bgp-secr-04 (work in progress),
              November 2001.

   [I-D.white-sobgparchitecture]
              White, R., "Architecture and Deployment Considerations for
              Secure Origin BGP (soBGP)",
              draft-white-sobgparchitecture-00 (work in progress),
              May 2004.

   [Interworking]
              Lewis, D., Meyer, D., Farinacci, D., and V. Fuller,
              "Interworking LISP with IPv4 and ipv6",
              draft-ietf-lisp-interworking-00.txt
              draft-ietf-lisp-interworking-01.txt (work in progress),
              May 2009.
              January 2010.

   [LISP]     Farinacci, D., Fuller, V., Meyer, D., and D. Lewis,
              "Locator/ID Separation Protocol (LISP)",
              draft-ietf-lisp-00.txt
              draft-ietf-lisp-06.txt (work in progress), May January 2010.

   [LISP-MS]  Fuller, V. and D. Farinacci, "LISP Map Server",
              draft-ietf-lisp-ms-04.txt (work in progress),
              October 2009.

Authors' Addresses

   Vince Fuller
   Cisco
   Tasman Drive
   San Jose, CA  95134
   USA

   Email: vaf@cisco.com

   Dino Farinacci
   Cisco
   Tasman Drive
   San Jose, CA  95134
   USA

   Email: dino@cisco.com

   Dave Meyer
   Cisco
   Tasman Drive
   San Jose, CA  95134
   USA

   Email: dmm@cisco.com

   Darrel Lewis
   Cisco
   Tasman Drive
   San Jose, CA  95134
   USA

   Email: darlewis@cisco.com
--u3/rZRmxL6MmkK24 Content-Type: text/plain; charset=us-ascii Content-Disposition: attachment; filename="draft-ietf-lisp-alt-02.txt" Network Working Group V. Fuller Internet-Draft D. Farinacci Intended status: Experimental D. Meyer Expires: July 9, 2010 D. Lewis Cisco January 5, 2010 LISP Alternative Topology (LISP+ALT) draft-ietf-lisp-alt-02.txt Abstract This document describes a method of building an alternative, logical topology for managing Endpoint Identifier to Routing Locator mappings using the Locator/ID Separation Protocol. The logical network is built as an overlay on the public Internet using existing technologies and tools, specifically the Border Gateway Protocol and the Generic Routing Encapsulation. An important design goal for LISP+ALT is to allow for the relatively easy deployment of an efficient mapping system while minimizing changes to existing hardware and software. Status of this Memo This Internet-Draft is submitted to IETF in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet- Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt. The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. This Internet-Draft will expire on July 9, 2010. Copyright Notice Fuller, et al. Expires July 9, 2010 [Page 1] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 Copyright (c) 2010 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the BSD License. Fuller, et al. Expires July 9, 2010 [Page 2] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 Table of Contents 1. Requirements Notation . . . . . . . . . . . . . . . . . . . . 4 2. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 5 3. Definition of Terms . . . . . . . . . . . . . . . . . . . . . 6 4. The LISP 1.5 model . . . . . . . . . . . . . . . . . . . . . . 8 4.1. Routeability of EIDs . . . . . . . . . . . . . . . . . . . 8 4.2. Connectivity to non-LISP sites . . . . . . . . . . . . . . 9 4.3. Caveats on the use of Data Probes . . . . . . . . . . . . 9 5. LISP+ALT: Overview . . . . . . . . . . . . . . . . . . . . . . 10 5.1. ITR traffic handling . . . . . . . . . . . . . . . . . . . 11 5.2. EID Assignment - Hierarchy and Topology . . . . . . . . . 11 5.3. LISP+ALT Router (or ALT router for short) . . . . . . . . 12 5.4. ITR and ETR in a LISP+ALT Environment . . . . . . . . . . 13 5.5. Use of GRE and BGP between LISP+ALT Routers . . . . . . . 13 6. EID Prefix Propagation and Map-Request Forwarding . . . . . . 14 6.1. Changes to ITR behavior with LISP+ALT . . . . . . . . . . 14 6.2. Changes to ETR behavior with LISP+ALT . . . . . . . . . . 14 7. BGP configuration and protocol considerations . . . . . . . . 16 7.1. Autonomous System Numbers (ASNs) in LISP+ALT . . . . . . . 16 7.2. Sub-Address Family Identifier (SAFI) for LISP+ALT . . . . 16 8. EID-Prefix Aggregation . . . . . . . . . . . . . . . . . . . . 17 8.1. Traffic engineering with LISP and LISP+ALT . . . . . . . . 17 8.2. Edge aggregation and dampening . . . . . . . . . . . . . . 18 9. Connecting sites to the ALT network . . . . . . . . . . . . . 19 9.1. ETRs originating information into the ALT . . . . . . . . 19 9.2. ITRs Using the ALT . . . . . . . . . . . . . . . . . . . . 19 10. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 21 11. Security Considerations . . . . . . . . . . . . . . . . . . . 22 11.1. Apparent LISP+ALT Vulnerabilities . . . . . . . . . . . . 22 11.2. Survey of LISP+ALT Security Mechanisms . . . . . . . . . . 23 11.3. Using existing BGP Security mechanisms . . . . . . . . . . 23 12. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . 24 13. References . . . . . . . . . . . . . . . . . . . . . . . . . . 25 13.1. Normative References . . . . . . . . . . . . . . . . . . . 25 13.2. Informative References . . . . . . . . . . . . . . . . . . 25 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 26 Fuller, et al. Expires July 9, 2010 [Page 3] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 1. Requirements Notation The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [RFC2119]. Fuller, et al. Expires July 9, 2010 [Page 4] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 2. Introduction This document describes a method of building an alternative logical topology for managing Endpoint identifier to Routing Locator mappings using the Locator/ID Separation Protocol [LISP]. This logical topology uses existing technology and tools, specifically the Border Gateway Protocol [RFC4271] and its multi-protocol extension [RFC2858], along with the Generic Routing Encapsulation [RFC2784] protocol to construct an overlay network of devices that advertise EID-prefixes only. These Endpoint Identifier Prefix Aggregators hold hierarchically-assigned pieces of the Endpoint Identifier space (i.e., prefixes) and their next hops toward the network element which is authoritative for Endpoint Identifier-to-Routing Locator mapping for that prefix. Tunnel routers can use this overlay to make queries against and respond to mapping requests made against the distributed Endpoint Identifier-to-Routing Locator mapping database. Note the database is distributed (as described in [LISP]) and is stored in the ETRs. Note that an important design goal of LISP+ALT is to minimize the number of changes to existing hardware and/or software that are required to deploy the mapping system. It is envisioned that in most cases existing technology can be used to implement and deploy LISP+ ALT. Since the deployment of LISP+ALT adds new devices to the network, existing devices not need changes or upgrades. They can function as they are to realize an underlying and robust physical topology. The remainder of this document is organized as follows: Section 3 provides the definitions of terms used in this document. Section 4 outlines the basic LISP 1.5 model. Section 5 provides a basic overview of the LISP Alternate Topology architecture, and Section 6 describes how the ALT uses BGP to propagate Endpoint Identifier reachability over the overlay network. Section 8 describes the construction of the ALT aggregation hierarchy, and Section 9 discusses how LISP+ALT elements are connected to form the overlay network. Fuller, et al. Expires July 9, 2010 [Page 5] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 3. Definition of Terms LISP+ALT operates on two name spaces and introduces a new network element, the LISP+ALT Router (see below). This section provides high-level definitions of the LISP+ALT name spaces, network elements, and message types. The Alternative Logical Topology (ALT): The virtual overlay network made up of tunnels between EID Prefix Aggregators. The Border Gateway Protocol (BGP) runs between ALT routers and is used to carry reachability information for EID prefixes. Legacy Internet: The portion of the Internet which does not run LISP and does not participate in LISP+ALT. LISP+ALT Router: The devices which run on the ALT. The ALT is a static network built using tunnels between LISP+ALT routers. These routers are deployed in a hierarchy in which routers at each level in the this hierarchy are responsible for aggregating all EID prefixes learned from those logically "below" them and advertising summary prefixes to the routers logically "above" them. All prefix learning and propagation between levels is done using BGP. A LISP+ALT router at the lowest level, or "edge" of the ALT, learns EID prefixes from its "client" ETRs. See Section 4.1 for a description of how EID prefixes are learned at the "edge" of the ALT. See also Section 7 for details on how BGP is configured between the different network elements. The primary function of LISP+ALT routers is to provide a lightweight forwarding infrastructure for LISP control-plane messages (Map-Request and Map-Reply), and to transport data packets when the packet has the same destination address in both the inner (encapsulating) destination and outer destination addresses ((i.e., a Data Probe packet). Endpoint ID (EID): A 32-bit (for IPv4) or 128-bit (for ipv6) value used in the source and destination address fields of the first (most inner) LISP header of a packet. A packet that is emitted by a system contains EIDs in its headers and LISP headers are prepended only when the packet reaches an Ingress Tunnel Router (ITR) on the data path to the destination EID. In LISP+ALT, EID-prefixes MUST BE assigned in a hierarchical manner (in power-of-two) such that they can be aggregated by LISP+ ALT routers. In addition, a site may have site-local structure in how EIDs are topologically organized (subnetting) for routing within the site; this structure is not visible to the global routing system. Fuller, et al. Expires July 9, 2010 [Page 6] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 EID-Prefix Aggregate: A set of EID-prefixes said to be aggregatable in the [RFC4632] sense. That is, an EID-Prefix aggregate is defined to be a single contiguous power-of-two EID-prefix block. Such a block is characterized by a prefix and a length. Routing Locator (RLOC): An IP address of an egress tunnel router (ETR). It is the output of a EID-to-RLOC mapping lookup. An EID maps to one or more RLOCs. Typically, RLOCs are numbered from topologically-aggregatable blocks that are assigned to a site at each point to which it attaches to the global Internet; where the topology is defined by the connectivity of provider networks, RLOCs can be thought of as Provider Aggregatable (PA) addresses. Note that in LISP+ALT, RLOCs are not carried by LISP+ALT routers. EID-to-RLOC Mapping: A binding between an EID and the RLOC-set that can be used to reach the EID. The term "mapping" refers to an EID-to-RLOC mapping. EID Prefix Reachability: An EID prefix is said to be "reachable" if one or more of its locators are reachable. That is, an EID prefix is reachable if the ETR (or its proxy) that is authoritative for a given EID-to-RLOC mapping is reachable. Default Mapping: A Default Mapping is a mapping entry for EID- prefix 0.0.0.0/0 (0::/0 for ipv6). It maps to a locator-set used for all EIDs in the Internet. If there is a more specific EID- prefix in the mapping cache it overrides the Default Mapping entry. The Default Mapping route can be learned by configuration or from a Map-Reply message. Default Route: A Default Route in the context of LISP+ALT is a EID- prefix value of 0.0.0.0/0 (or 0::/0 for ipv6) which is advertised by BGP on top of the ALT. The Default Route is used to create a forwarding path for a packet to be sent into the ALT (and ALT datagram) on a router which does not have a full ALT forwarding database. Fuller, et al. Expires July 9, 2010 [Page 7] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 4. The LISP 1.5 model As documented in [LISP], the LISP 1.5 model uses the same basic query/response protocol machinery as LISP 1.0. In particular, LISP+ ALT provides two mechanisms for an ITR to obtain EID-to-RLOC mappings (both of these techniques are described in more detail in Section 9.2): Data Probe: An ITR may send the first few data packets into the ALT to minimize packet loss and to probe for the mapping; the authoritative ETR will respond to the ITR with a Map-Reply message when it receives the data packet over the ALT. Note that in this case, the inner Destination Address (DA), which is an EID, is copied to the outer DA and is routed over the ALT. Map-Request: An ITR may also send a Map-Request message into the ALT to request the mapping. As in the Data Probe case, the authoritative ETR will respond to the ITR with a Map-Reply message. Since the ALT only forwards on EID destinations, the DA of the Map-Request sent in to the ALT MUST be an EID. See [LISP] for the format of Map-Request and Map-Reply packets. ALT datagram: A Map-Request or Data Probe to be sent into or forwarded on the ALT. 4.1. Routeability of EIDs As with LISP 1.0, EIDs are routable and can be used, unaltered, as the source and destination addresses in IP datagrams. Unlike in LISP 1.0, LISP 1.5 EIDs are not routable on the public Internet; instead, they are only routed over a separate, virtual topology referred to as the LISP Alternative Virtual Network. This network is built as an overlay on the public Internet using tunnels to interconnect LISP+ALT routers. BGP is run over these tunnels to propagate the information needed to route ALT datagrams. Importantly, while the ETRs are the source(s) of the unaggregated EID prefix data, LISP+ALT uses existing BGP mechanisms to aggressively aggregate this information. Note that an ETR is not required to participate (or prevented from participating) in LISP+ALT; an ETR may choose to communicate its mappings to its serving LISP+ALT router(s) using subscription time static configuration or through a dynamic mechanism such as that described in [LISP-MS]. An ITR may similarly use a static EID "default route" or other configuration as described in [LISP-MS] to avoid the complexity of participating in the ALT. Fuller, et al. Expires July 9, 2010 [Page 8] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 4.2. Connectivity to non-LISP sites As stated above, EIDs used as IP addresses by LISP sites are not routable on the public Internet. This implies that, absent a mechanism for communication between LISP and non-LISP sites, connectivity between them is not possible. To resolve this problem, an "interworking" technology has been defined; see [Interworking] for details. 4.3. Caveats on the use of Data Probes It is worth noting that there has been a great deal of discussion and controversy about whether Data Probes are a good idea. On the one hand, using them offers a method of avoiding the "first packet drop" problem when an ITR does not have a mapping for a particular EID- prefix. On the other hand, forwarding data packets on the ALT would require that it either be engineered to support relatively high traffic rates, which is not generally feasible for a tunneled network, or that it be carefully designed to aggressively rate- limit traffic to avoid congestion or DoS attacks. There are also other issues involving latency or other differences between the ALT path that initial a Data Probe would take and the path that subsequent packets on the same flow would take once a mapping were in place on an ITR. For these and other reasons use of Data Probes should be considered experimental and should be disabled by default in all ITR implementations. Fuller, et al. Expires July 9, 2010 [Page 9] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 5. LISP+ALT: Overview LISP+ALT is a hybrid push/pull architecture. Aggregated EID prefixes are "pushed" among the LISP+ALT routers and, optionally, out to ITRs (which may elect to receive the aggregated information, as opposed to simply using a default mapping). Specific EID-to-RLOC mappings are "pulled" by ITRs when they either send explicit LISP requests or data packets on the alternate topology that result in triggered replies being generated by ETRs. The basic idea embodied in LISP+ALT is to use BGP, running over tunneled overlay network, to establish reachability required to route ALT datagrams over an alternate logical topology (ALT). The ALT BGPRoute Information Base (RIB) is comprised of EID prefixes and associated next hops. LISP+ALT routers interconnect using eBGP and propagate EID prefix updates, which are learned over eBGP connections to authoritative ETRs, or by static configuration. ITRs may also eBGP peer with one or more LISP+ALT to learn the best ALT router to use to forward an ALT datagram for a particular prefix; in most cases, an ITR will have a default EID mapping pointing to one or more LISP+ALT routers. Note that while this document specifies the use of Generic Routing Encapsulation (GRE) as a tunneling mechanism, there is no reason that an ALT cannot be built using other tunneling technologies. In cases where GRE does not meet security, management, or other operational requirements, it is reasonable to use another tunneling technology that does. References to "GRE tunnel" in later sections of this document should therefore not be taken as prohibiting or precluding the use of other, available tunneling mechanisms. Note also that two LISP+ALT routers that are directly adjacent (with no layer-3 router hops between them) need not use a tunnel between them; in this case, BGP may be configured across the interfaces that connect to their common subnet and that subnet is considered to be part of the ALT topology. Use of techniques, such as "eBGP multihop", to forward ALT datagrams through routers that do not participate in ALT routing, is not recommended. In summary, LISP+ALT uses BGP to propagate EID-prefix update information to facilitate forwarding an ALT datagram to the ETR that holds the EID-to-RLOC mapping for that EID-prefix. This reachability is carried as IPv4 or IPv6 NLRI without modification (since an EID prefix has the same syntax as IPv4 or IPv6 address prefix). LISP+ALT routers eBGP peer with one another, forming the ALT. A LISP+ALT router near the edge learns EID prefixes originated by authoritative ETRs. This may be via eBGP with the ETRs, by static configuration, or through some other dynamic mechanism such as that defined in [LISP-MS]. A LISP+ALT router may also be configured to aggregate EID Fuller, et al. Expires July 9, 2010 [Page 10] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 prefixes received from ETRs or from other LISP+ALT routers that are topologically "downstream" from it. 5.1. ITR traffic handling When an ITR receives a packet originated by an end system within its site (i.e. a host for which the ITR is the exit path out of the site) and the destination for that packet is not known in the ITR's mapping cache, the ITR encapsulates the packet in a LISP header, copying the inner destination address (EID) to the outer destination address (RLOC), and transmits it through a GRE tunnel to a LISP+ALT router in the ALT (see also [LISP-MS] for non-ALT-connected ITRs, noting that an ITR cannot send Data Probes to a Map-Server). This "first hop" LISP+ALT router uses EID-prefix routing information learned from other LISP+ALT routers via BGP to guide the packet to the ETR which "owns" the prefix. Upon receipt by the ETR, normal LISP processing occurs: the ETR responds to the ITR with a LISP Map-Reply that lists the RLOCs (and, thus, the ETRs to use) for the EID prefix. The ETR also de-encapsulates the packet and transmits it toward its destination. Upon receipt of the Map-Reply, the ITR installs the RLOC information for a given prefix into a local mapping database. With these mapping entries stored, additional packets destined to the given EID prefix are routed directly to a viable ETR without use of the ALT, until either the entry's TTL has expired, or the ITR can otherwise find no reachable ETR. Note that a valid mapping (not timed-out) may exist that contains no reachable RLOCs (i.e. all paths to that ETR are down); in this case, packets destined to the EID prefix are dropped, not routed through the ALT. Traffic routed over the ALT therefore consists of: o EID prefix Map-Requests, and o data packets destined for those EID prefixes while the ITR awaits map replies 5.2. EID Assignment - Hierarchy and Topology EID-prefixes will be allocated to a LISP site by Internet Registries. Multiple allocations may not be in power-of-2 blocks. But when they are, they will be aggregated into a single, advertised EID-prefix. The ALT network is built in a tree-structured hierarchy to allow aggregation at merge points in the tree. Building such a structure should minimize the number of EID-prefixes carried by LISP+ALT nodes near the top of the hierarchy. Fuller, et al. Expires July 9, 2010 [Page 11] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 Since the ALT will not need to change due to subscription or policy reasons, the topology can remain relatively static and aggregation can be sustained. Because routing on the ALT uses BGP, the same rules apply for generating aggregates; in particular, a LISP+ALT router should only be configured to generate an aggregate if it is configured with BGP sessions to all of the originators of components (more-specifics prefixes) of that aggregate; not all of the components of need to be present for the aggregate to be originated (some may be holes in the covering prefix and some may be down) but the aggregating router must be configured to learn the state of all of the components. As an example, consider ETRs that are originating EID prefixes for 10.1.0.0/24, 10.1.64.0/24, 10.1.128.0/24, and 10.1.192.0/24. An ALT router should only be configured to generate an aggregate for 10.1.0.0/16 if it has BGP sessions configured with all of these ETRs, in other words, only if it has sufficient knowledge about the state of those prefixes to summarize them. Under what circumstances the ALT router actually generates the aggregate is a matter of local policy: in some cases, it will be statically configured to do so at all times with a "static discard" route. In other cases, it may be configured to only generate the aggregate prefix if at least one of the components of the aggregate is learned via BGP. This implies that two ALT routers that share an overlapping set of prefixes must exchange those prefixes if either is to generate and export a covering aggregate for those prefixes. It also implies that an ETR which connects to the ALT using BGP must maintain BGP sessions with all of the ALT routers that are configured to originate an aggregate which covers that prefix. See also [LISP-MS] for an example of other ways that prefix origin consistency and aggregation are maintained. Note: much is currently uncertain about the best way to build the ALT network; as testing and prototype deployment proceeds, a guide to how to best build the ALT network will be developed. 5.3. LISP+ALT Router (or ALT router for short) A LISP+ALT Router has the following functionality: 1. It runs, at a minimum, the eBGP part of the BGP protocol. 2. It supports a separate RIB which uses next-hop GRE tunnel interfaces for forwarding ALT datagrams. Fuller, et al. Expires July 9, 2010 [Page 12] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 3. It can act as a "proxy-ITR" to support non-LISP sites. 4. It can act as an ETR, or as a recursive or re-encapsulating ITR to reduce mapping tables in site-based LISP routers. 5.4. ITR and ETR in a LISP+ALT Environment An ITR using LISP+ALT may have additional functionality as follows: 1. If it is also acting as a LISP+ALT Router, it sends ALT datagrams on the BGP best path computed GRE tunnel for each EID prefix. 2. When acting solely as a ITR, it sends ALT datagrams directly to a configured LISP+ALT router. An ETR using LISP+ALT may also behave slightly differently: 1. If it is also acting as a LISP+ALT router, it advertises its configured EID-prefixes into BGP for distribution through the ALT. 2. It receives ALT datagrams only from its "upstream" LISP+ALT routers over the GRE tunnel(s) configured to it/them. It responds with Map-Replies for the EID prefixes that it "owns". 5.5. Use of GRE and BGP between LISP+ALT Routers The ALT network is built using GRE tunnels between LISP+ALT routers. eBGP sessions are configured over those tunnels, with each LISP+ALT router acting as a separate AS "hop" in a Path Vector for BGP. For the purposes of LISP+ALT, the AS-path is used solely as a shortest- path determination and loop-avoidance mechanism. Because all next- hops are on tunnel interfaces, no IGP is required to resolve those next-hops to exit interfaces. LISP+ALT's use of GRE and BGP reduces provider Operational Expense (OPEX) because no new protocols need to be either defined or used on the overlay topology. Also, since tunnel IP addresses are local in scope, no coordination is needed for their assignment; any addressing scheme (including private addressing) can be used for tunnel addressing. Fuller, et al. Expires July 9, 2010 [Page 13] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 6. EID Prefix Propagation and Map-Request Forwarding As described in Section 9.2, an ITR may send either a Map-Request or a data probe to find a given EID-to-RLOC mapping. The ALT provides the infrastructure that allows these requests to reach the authoritative ETR. Note that, under normal circumstances, Map-Replies are not sent over the ALT - an ETR sends a Map-Reply to the source RLOC learned from the original Map-Request. There may be scenarios, perhaps to encourage caching of EID-to-RLOC mappings by ALT routers, where Map- Replies could be sent over the ALT or where a "first-hop" ALT router might modify the originating RLOC on a Map-Request received from an ITR to force the Map-Reply to be sent to it; these cases will not be supported by initial LISP+ALT implementations but may be subject to future experimentation. LISP+ALT routers propagate mapping information for use by ITRs (when sending ALT datagrams) using eBGP [RFC4271]. eBGP is run on the inter-LISP+ALT router links, and possibly between an edge ("last hop") LISP+ALT router and an ETR or between an edge ("first hop") LISP+ALT router and an ITR. The ALT eBGP RIB consists of aggregated EID prefixes and their next hops toward the authoritative ETR for that EID prefix. 6.1. Changes to ITR behavior with LISP+ALT When using LISP+ALT, an ITR sends ALT datagrams to one of its "upstream" LISP+ALT routers; these are sent only to obtain new EID- to-RLOC mappings - RLOC probe and cache TTL refresh Map-Requests are not sent on the ALT. As in basic LISP, it should use one of its RLOCs as the source address of these queries; it should explicitly not use a tunnel interface as the source address as doing so will cause replies to be forwarded over the tunneled topology and may be problematic if the tunnel interface address is not explicitly routed throughout the ALT. If the ITR is running BGP with the LISP+ALT router(s), it selects the appropriate LISP+ALT router based on the BGP information received. If it is not running BGP, it uses static configuration to select a LISP+ALT router; in the general case, this will effectively be an "EID-prefix default route". 6.2. Changes to ETR behavior with LISP+ALT If an ETR connects using BGP to one or more LISP+ALT router(s), it simply announces its EID-prefix to those LISP+ALT routers. Note that when an ETR generates a Map-Reply message to return to a querying ITR, it sends it to the ITR's source-RLOC (i.e., on the underlying Internet topology, not on the ALT; this avoids any latency penalty Fuller, et al. Expires July 9, 2010 [Page 14] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 (or "stretch") that might be incurred by routing over the ALT). Fuller, et al. Expires July 9, 2010 [Page 15] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 7. BGP configuration and protocol considerations 7.1. Autonomous System Numbers (ASNs) in LISP+ALT The primary use of BGP today is to define the global Internet routing topology in terms of its participants, known as Autonomous Systems. LISP+ALT specifies the use of BGP to create a global EID-to-RLOC mapping database which, while related to the global routing database, serves a very different purpose and is organized into a very different hierarchy. Because LISP+ALT does use BGP, however, it uses ASNs in the paths that are propagated among LISP+ALT routers. To avoid confusion, it needs to be stressed that that these LISP+ALT ASNs use a new numbering space that is unrelated to the ASNs used by the global routing system. Exactly how this new space will be assigned and managed will be determined during experimental deployment of LISP+ALT. Note that the LISP+ALT routers that make up the "core" of the ALT will not be associated with any existing core-Internet ASN because topology, hierarchy, and aggregation boundaries are completely separate from and independent of the global Internet routing system. 7.2. Sub-Address Family Identifier (SAFI) for LISP+ALT As defined by this document, LISP+ALT may be implemented using BGP without modification. Given the fundamental operational difference between propagating global Internet routing information (the current, dominant use of BGP) and managing the global EID-to-RLOC database (the use of BGP proposed by this document), it may be desirable to assign a new SAFI [RFC2858] to prevent operational confusion and difficulties, including the inadvertent leaking of information from one domain to the other. At present, this document does not require the assignment of a new SAFI but the authors anticipate that experimentation may suggest the need for one in the future. Fuller, et al. Expires July 9, 2010 [Page 16] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 8. EID-Prefix Aggregation The ALT BGP peering topology should be arranged in a tree-like fashion (with some meshiness), with redundancy to deal with node and link failures. A basic assumption is that as long as the routers are up and running, the underlying topology will provide alternative routes to maintain BGP connectivity among LISP+ALT routers. Note that, as mentioned in Section 5.2, the use of BGP by LISP+ALT requires that information can only be aggregated where all active more-specific prefixes of a generated aggregate prefix are known. This implies, for example, that if a given set of prefixes is used by multiple, ALT networks, those networks must interconnect and share information about all of the prefixes if either were to generate an aggregate prefix that covered all of them. This is no different than the way that BGP route aggregation works in the existing global routing system: a service provider only generates an aggregate route if it is configured to learn to all prefixes that make up that aggregate. 8.1. Traffic engineering with LISP and LISP+ALT It is worth noting that LISP+ALT does not directly propagate EID-to- RLOC mappings. What it does is provide a mechanism for a LISP ITR to find the ETR that holds the mapping for a particular EID prefix. This distinction is important for several reasons. First, it means that the reachability of RLOCs is learned through the LISP ITR-ETR exchange so "flapping" of state information through BGP is not likely nor can mapping information become "stale" by slow propagation through the ALT BGP mesh. Second, by deferring EID-to-RLOC mapping to an ITR-ETR exchange, it is possible to perform site-to-site traffic engineering through a combination of setting the preference and weight fields and by returning more-specific EID-to-RLOC information in LISP Map-Reply messages. This is a powerful mechanism that can conceivably replace the traditional practice of routing prefix deaggregation for traffic engineering purposes. Rather than propagating more-specific information into the global routing system for local- or regional-optimization of traffic flows, such more- specific information can be exchanged, through LISP (not LISP+ALT), on an as-needed basis between only those ITRs/ETRs (and, thus, site pairs) that need it; should a receiving ITR decide that it does not wish to store such more-specific information, it has the option of discarding it as long as a shorter, covering EID prefix exists. Not only does this greatly improve the scalability of the global routing system but it also allows improved traffic engineering techniques by allowing richer and more fine-grained policies to be applied. Fuller, et al. Expires July 9, 2010 [Page 17] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 8.2. Edge aggregation and dampening Note also that normal BGP best common practices apply to the ALT network. In particular, first-hop ALT routers will aggregate EID prefixes and dampen changes to them in the face of excessive updates. Since EID prefix assignments are not expected to change with anywhere as frequently BGP prefix reachability on the Internet, such dampening should be very rare and might be worthy of logging as an exceptional event. It is again worth noting that the ALT carries only EID prefixes, along with BGP-generated paths to the ETRs that source those prefixes as advertisements travel over the logical topology; this set of information is considerablly less volatile than the actual EID-to-RLOC mappings. Fuller, et al. Expires July 9, 2010 [Page 18] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 9. Connecting sites to the ALT network 9.1. ETRs originating information into the ALT EID prefix information is originated into the ALT by two different mechanisms: eBGP: An ETR usually participates in the LISP+ALT overlay network by running eBGP to one or more LISP+ALT router(s) over tunnel(s). The ETR advertises reachability for its EID prefixes over these eBGP connection(s). The LISP+ALT router(s) that receive(s) these prefixes then propagate(s) them into the ALT. Here the ETR is simply an eBGP peer of LISP+ALT router(s) at the edge of the ALT. Where possible, a LISP+ALT router that receives EID prefixes from an ETR via eBGP should aggregate that information. Configuration: One or more LISP+ALT router(s) may be configured to originate an EID prefix on behalf of the non-BGP-speaking ETR that is authoritative for a prefix. As in the case above, the ETR is connected to LISP+ALT router(s) using GRE tunnel(s) but rather than BGP being used, the LISP+ALT router(s) are configured with what are in effect "static routes" for the EID prefixes "owned" by the ETR. The GRE tunnel is used to route Map-Requests to the ETR. Note that the LISP+ALT router could also serve as a proxy for its TCP-connected ETRs. Note: in both cases, an ETR may have connections to to multiple LISP+ALT routers for the following reasons: * redundancy, so that a particular ETR is still reachable through the ALT even if one path or tunnel is unavailable. * to connect to different parts of the ALT hierarchy if the ETR "owns" multiple EID-to-RLOC mappings for EID prefixes that cannot be aggregated by the same LISP+ALT router (i.e. are not topologically "close" to each other in the ALT). 9.2. ITRs Using the ALT In order to source Map-Requests to the ALT or to route a Data Probe packet over the ALT, each ITR participating in the ALT establishes a connection to one or more LISP+ALT routers. These connections can be either eBGP or TCP (as described above). In the case in which the ITR is running eBGP, the peer LISP+ALT routers use these connections to advertise highly aggregated EID- prefixes to the peer ITRs. The ITR then installs the received prefixes into a forwarding table that is used to to send LISP Map- Fuller, et al. Expires July 9, 2010 [Page 19] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 Requests to the appropriate LISP+ALT router. In most cases, a LISP+ ALT router will send a default mapping to its client ITRs so that they can send request for any EID prefix into the ALT. In the case in which the ITR is connected to some set of LISP+ALT routers without eBGP, the ITR sends Map-Requests to any of its connected LISP+ALT routers. An ITR may also choose to send the first few data packets over the ALT to minimize packet loss and reduce mapping latency. In this case, the data packet serves as a mapping probe (Data Probe) and the ETR which receives the data packet (over the ALT) responds with a Map-Reply is sent to the ITR's source-RLOC using the underlying topology. Note that the use of Data Probes is discouraged at this time (see Section 4.3). In general, an ITR will establish connections only to LISP+ALT routers at the "edge" of the ALT (typically two for redundancy) but there may also be situations where an ITR would connect to other LISP+ALT routers to receive additional, shorter path information about a portion of the ALT of interest to it. This can be accomplished by establishing GRE tunnels between the ITR and the set of LISP+ALT routers with the additional information. This is a purely local policy issue between the ITR and the LISP+ALT routers in question. Fuller, et al. Expires July 9, 2010 [Page 20] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 10. IANA Considerations This document makes no request of the IANA. Fuller, et al. Expires July 9, 2010 [Page 21] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 11. Security Considerations LISP+ALT shares many of the security characteristics of BGP. Its security mechanisms are comprised of existing technologies in wide operational use today. Securing LISP+ALT is much simpler than securing BGP. Compared to BGP, LISP+ALT routers are not topologically bound, allowing them to be put in locations away from the vulnerable AS border (unlike eBGP speakers). 11.1. Apparent LISP+ALT Vulnerabilities This section briefly lists of the apparent vulnerabilities of LISP+ ALT. Mapping Integrity: Can an attacker insert bogus mappings to black- hole (create a DoS) or intercept LISP data-plane packets? LISP+ALT router Availability: Can an attacker DoS the LISP+ALT routers connected to a given ETR? without access to its mappings, a site is essentially unavailable. ITR Mapping/Resources: Can an attacker force an ITR or LISP+ALT router to drop legitimate mapping requests by flooding it with random destinations that it will have to query for. Further study is required to see the impact of admission control on the overlay network. EID Map-Request Exploits for Reconnaissance: Can an attacker learn about a LISP destination sites' TE policy by sending legitimate mapping requests messages and then observing the RLOC mapping replies? Is this information useful in attacking or subverting peer relationships? Note that LISP 1.0 has a similar data-plane reconnaissance issue. Scaling of LISP+ALT router Resources: Paths through the ALT may be of lesser bandwidth than more "direct" paths; this may make them more prone to high-volume denial-of-service attacks. For this reason, all components of the ALT (ETRs and ALT routers) should be prepared to rate-limit traffic (ALT datagrams) that could be received across the ALT. UDP Map-Reply from ETR: Since Map-Replies packets are sent directly from the ETR to the ITR's RLOC, the ITR's RLOC may be vulnerable to various types of DoS attacks. Fuller, et al. Expires July 9, 2010 [Page 22] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 11.2. Survey of LISP+ALT Security Mechanisms Explicit peering: The devices themselves can both prioritize incoming packets as well as potentially do key checks in hardware to protect the control plane. Use of TCP to connect elements: This makes it difficult for third parties to inject packets. Use of HMAC Protected TCP Connections: HMAC is used to verify message integrity and authenticity, making it nearly impossible for third party devices to either insert or modify messages. Message Sequence Numbers and Nonce Values in Messages: This allows for devices to verify that the mapping-reply packet was in response to the mapping-request that they sent. 11.3. Using existing BGP Security mechanisms LISP+ALT's use of BGP allows for the ALT to take advantage of BGP security features designed for existing Internet BGP use. For example, should either sBGP [I-D.murphy-bgp-secr] or soBGP [I-D.white-sobgparchitecture] become widely deployed it expected that LISP+ALT could use these mechanisms to provide authentication of EID- to-RLOC mappings, and EID origination. Fuller, et al. Expires July 9, 2010 [Page 23] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 12. Acknowledgments Many of the ideas described in this document were developed during detailed discussions with Scott Brim and Darrel Lewis, who made many insightful comments on earlier versions of this document. Aditional thanks are due to Hannu Flinck and Amit Jain who offered many helpful suggestions for the -02 version. Fuller, et al. Expires July 9, 2010 [Page 24] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 13. References 13.1. Normative References [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. [RFC2784] Farinacci, D., Li, T., Hanks, S., Meyer, D., and P. Traina, "Generic Routing Encapsulation (GRE)", RFC 2784, March 2000. [RFC2858] Bates, T., Rekhter, Y., Chandra, R., and D. Katz, "Multiprotocol Extensions for BGP-4", RFC 2858, June 2000. [RFC4271] Rekhter, Y., Li, T., and S. Hares, "A Border Gateway Protocol 4 (BGP-4)", RFC 4271, January 2006. [RFC4632] Fuller, V. and T. Li, "Classless Inter-domain Routing (CIDR): The Internet Address Assignment and Aggregation Plan", BCP 122, RFC 4632, August 2006. 13.2. Informative References [I-D.murphy-bgp-secr] Murphy, S., "BGP Security Analysis", draft-murphy-bgp-secr-04 (work in progress), November 2001. [I-D.white-sobgparchitecture] White, R., "Architecture and Deployment Considerations for Secure Origin BGP (soBGP)", draft-white-sobgparchitecture-00 (work in progress), May 2004. [Interworking] Lewis, D., Meyer, D., Farinacci, D., and V. Fuller, "Interworking LISP with IPv4 and ipv6", draft-ietf-lisp-interworking-01.txt (work in progress), January 2010. [LISP] Farinacci, D., Fuller, V., Meyer, D., and D. Lewis, "Locator/ID Separation Protocol (LISP)", draft-ietf-lisp-06.txt (work in progress), January 2010. [LISP-MS] Fuller, V. and D. Farinacci, "LISP Map Server", draft-ietf-lisp-ms-04.txt (work in progress), October 2009. Fuller, et al. Expires July 9, 2010 [Page 25] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 Authors' Addresses Vince Fuller Cisco Tasman Drive San Jose, CA 95134 USA Email: vaf@cisco.com Dino Farinacci Cisco Tasman Drive San Jose, CA 95134 USA Email: dino@cisco.com Dave Meyer Cisco Tasman Drive San Jose, CA 95134 USA Email: dmm@cisco.com Darrel Lewis Cisco Tasman Drive San Jose, CA 95134 USA Email: darlewis@cisco.com Fuller, et al. Expires July 9, 2010 [Page 26] --u3/rZRmxL6MmkK24-- From darlewis@cisco.com Fri Jan 8 15:37:15 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3D94E3A6778 for ; Fri, 8 Jan 2010 15:37:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BM2hYTg8GlNC for ; Fri, 8 Jan 2010 15:37:14 -0800 (PST) Received: from sj-iport-3.cisco.com (sj-iport-3.cisco.com [171.71.176.72]) by core3.amsl.com (Postfix) with ESMTP id 7B6873A6407 for ; Fri, 8 Jan 2010 15:37:14 -0800 (PST) Authentication-Results: sj-iport-3.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAGpQR0urR7H+/2dsb2JhbADCE5QMhC8E X-IronPort-AV: E=Sophos;i="4.49,244,1262563200"; d="scan'208";a="206944885" Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-3.cisco.com with ESMTP; 08 Jan 2010 23:37:13 +0000 Received: from xbh-sjc-221.amer.cisco.com (xbh-sjc-221.cisco.com [128.107.191.63]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id o08NbCN3013849 for ; Fri, 8 Jan 2010 23:37:13 GMT Received: from xmb-sjc-213.amer.cisco.com ([171.70.151.153]) by xbh-sjc-221.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 8 Jan 2010 15:37:12 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Fri, 8 Jan 2010 15:37:12 -0800 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: LISP Interworking: Proxy Egress Tunnel Routers Thread-Index: AcqQu4B8rBztSUh3SJqcib5eFKCTeQ== From: "Darrel Lewis (darlewis)" To: X-OriginalArrivalTime: 08 Jan 2010 23:37:12.0919 (UTC) FILETIME=[80E3FE70:01CA90BB] Subject: [lisp] LISP Interworking: Proxy Egress Tunnel Routers X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jan 2010 23:37:15 -0000 LISPers, The WG chairs have asked me reopen discussion on Proxy Egress Tunnel Routers. We have discussed them on the WG list, and they were also talked about during the presentation around "LISP Deployment" by Margaret and Myself. To review, a Proxy Egress Tunnel Router is a LISP Network Element that would decapsulate traffic destined to non-LISP sites on behalf of a given LISP site. Proxy Egress Tunnel Routers are not directly related to Proxy Ingress Tunnel Routers. Instead, they allow an particular ITR to encapsulate packets it normally would forward un-encapsulated. These packets would normally be forwarded by the ITR un-encapsulated. There are two primary reasons why sites would want to utilize a PETR: Avoiding strict uRPF failures: Some provider's access networks require the source of the packets emitted to be within the addressing scope of the access networks. Traversing a different IP Protocol: A LISP site may want to transmit packets to a non-LISP site where the some of the intermediate network does not support an IP protocol (v4 or v6). PETRs can allow this LISP site's data to 'hop over' this by utilizing LISP's support for mixed protocol encapsulation. Are there any objections to including text for Proxy Egress Tunnel Routers to the Interworking Draft? Both of these cases are evident in the existing LISP beta network, and we have implementation experience showing that they are both possible and fairly straightforward to deploy. -Darrel From menth@informatik.uni-wuerzburg.de Fri Jan 8 15:54:46 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 226363A6407 for ; Fri, 8 Jan 2010 15:54:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.249 X-Spam-Level: X-Spam-Status: No, score=-2.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oF+x26xCSmUl for ; Fri, 8 Jan 2010 15:54:45 -0800 (PST) Received: from mailrelay.rz.uni-wuerzburg.de (mailrelay.rz.uni-wuerzburg.de [132.187.3.28]) by core3.amsl.com (Postfix) with ESMTP id CED803A6405 for ; Fri, 8 Jan 2010 15:54:44 -0800 (PST) Received: from virusscan.mail (localhost [127.0.0.1]) by mailrelay.mail (Postfix) with ESMTP id 5CA5D5ADAA; Sat, 9 Jan 2010 00:54:42 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by virusscan.mail (Postfix) with ESMTP id 5A98A5AD8F; Sat, 9 Jan 2010 00:54:42 +0100 (CET) X-Virus-Scanned: by amavisd-new at uni-wuerzburg.de Received: from [192.168.1.2] (f051055104.adsl.alicedsl.de [78.51.55.104]) by mailmaster.uni-wuerzburg.de (Postfix) with ESMTPSA id 1CB655CE2D; Sat, 9 Jan 2010 00:54:42 +0100 (CET) Message-ID: <4B47C5AD.6020204@informatik.uni-wuerzburg.de> Date: Sat, 09 Jan 2010 00:54:21 +0100 From: Michael Menth Organization: University of Wuerzburg User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: "Darrel Lewis (darlewis)" References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: lisp@ietf.org Subject: Re: [lisp] LISP Interworking: Proxy Egress Tunnel Routers X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: menth@informatik.uni-wuerzburg.de List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jan 2010 23:54:46 -0000 Hi Darrel, Darrel Lewis (darlewis) schrieb: > LISPers, > > The WG chairs have asked me reopen discussion on Proxy Egress Tunnel > Routers. We have discussed them on the WG list, and they were also > talked about during the presentation around "LISP Deployment" by > Margaret and Myself. > > To review, a Proxy Egress Tunnel Router is a LISP Network Element that > would decapsulate traffic destined to non-LISP sites on behalf of a > given LISP site. Proxy Egress Tunnel Routers are not directly related > to Proxy Ingress Tunnel Routers. Instead, they allow an particular ITR > to encapsulate packets it normally would forward un-encapsulated. These > packets would normally be forwarded by the ITR un-encapsulated. > > There are two primary reasons why sites would want to utilize a PETR: > > Avoiding strict uRPF failures: Some provider's access networks > require the source of the packets emitted to be within the > addressing scope of the access networks. > > Traversing a different IP Protocol: A LISP site may want to transmit > packets to a non-LISP site where the some of the intermediate > network does not support an IP protocol (v4 or v6). PETRs can > allow this LISP site's data to 'hop over' this by utilizing LISP's > support for mixed protocol encapsulation. > I do not understand the two application scenarios and how PETRs can help. Could you explain that in more detail, please? Regards, Michael > Are there any objections to including text for Proxy Egress Tunnel > Routers to the Interworking Draft? Both of these cases are evident in > the existing LISP beta network, and we have implementation experience > showing that they are both possible and fairly straightforward to > deploy. > > -Darrel > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > -- Dr. Michael Menth, Assistant Professor University of Wuerzburg, Institute of Computer Science Am Hubland, D-97074 Wuerzburg, Germany, room B206 phone: (+49)-931/31-86644 (new), fax: (+49)-931/888-6632 mailto:menth@informatik.uni-wuerzburg.de http://www3.informatik.uni-wuerzburg.de/research/ngn From charriesun@gmail.com Fri Jan 8 16:23:38 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 29E713A67D4 for ; Fri, 8 Jan 2010 16:23:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_43=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xjCEzfek-xkj for ; Fri, 8 Jan 2010 16:23:37 -0800 (PST) Received: from mail-qy0-f203.google.com (mail-qy0-f203.google.com [209.85.221.203]) by core3.amsl.com (Postfix) with ESMTP id 457CA3A6407 for ; Fri, 8 Jan 2010 16:23:37 -0800 (PST) Received: by qyk41 with SMTP id 41so9291941qyk.29 for ; Fri, 08 Jan 2010 16:23:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type; bh=JAUosYv7tWi6HhPL1g1cPQZMGIHLBS5tLAAZQsFZWUM=; b=AZlbT9iryVGxJlc1rxk+4Ej7KeFm9KoVDrfsCZXTbWi0A7/eJZIvDX7WpB5n5dzXSl b6iayU6ZuG0Fm8oAI50fM7g2Kd2cqB5iMObtVQqbBv5RbJRsAsUrzcmX8bnYEBZ9H0N0 qtnDyyrFwi6RVtLzQojKYC5jz6+aj+GfDYnfk= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=C9cRvomMQ/TvMxLlsQ9fBE92W381beYWzOVZFLXnJ/oF45E1yx6fH2hhWcsXk0dB8g 8tYT6XWPQwYJbXWVF2rLnMxYrDsMHLtC/tZxKi0gXzxvWjXOhApg3alGrjjo6UBk8eGb zFk9qPRDuYr4xcTttDku0jB8ekvHQ9xUUGYks= MIME-Version: 1.0 Received: by 10.220.49.86 with SMTP id u22mr176839vcf.53.1262996612444; Fri, 08 Jan 2010 16:23:32 -0800 (PST) In-Reply-To: <20100108225126.GA16683@vaf-lnx1.cisco.com> References: <20100108225126.GA16683@vaf-lnx1.cisco.com> Date: Sat, 9 Jan 2010 08:23:32 +0800 Message-ID: <4eb512451001081623n74b5ac3btb82a0767b94435f1@mail.gmail.com> From: Charrie Sun To: Vince Fuller , lisp Content-Type: multipart/alternative; boundary=0016e64807c06ff0fe047cb05024 Subject: Re: [lisp] proposed draft-ietf-lisp-alt-02 draft X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Jan 2010 00:23:38 -0000 --0016e64807c06ff0fe047cb05024 Content-Type: text/plain; charset=ISO-8859-1 Hello all, I still wonder how ALT builds such a hiararchy, exclusively voluntarily? How does an ALT router knows which is his parent and which is the child? Who would like to run ALT routers, and who would like to be at certain level, aggregating certain range of EIDs? Is the question trivial? Besides, a misspelling in "Acknowledgments", aditional->additional. :) Best wishes, Letong 2010/1/9 Vince Fuller > Here is an updated version of the LISP+ALT specification that I'd like to > publish to the Internet Drafts repository. > > Changes reflect comments from this list and elsewhere through the end of > 2009. There are no modifications to the protocol only clarifications and > editorial changes. > > Both html diffs and the full text of the new draft are attached. > > Comments appreciated. I'd like to get this posted within two weeks (by > Friday, January 22nd). > > --Vince > (for the other ALT authors: Dino, Dave, and Darrel) > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > > --0016e64807c06ff0fe047cb05024 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
Hello all,
=A0=A0=A0 I still wonder how ALT builds such a hiararchy,=A0exclusivel= y voluntarily? How does an ALT router knows which is his parent and which i= s the child? Who would like to run ALT routers, and who would like to be at= certain level, aggregating certain range of EIDs?=A0Is the question trivia= l?
=A0=A0=A0 Besides, a misspelling in=A0"Acknowledgments", adi= tional->additional. :)
=A0
Best wishes,
Letong
2010/1/9 Vince Fuller <vaf@cisco.com>
Here is an updated version of th= e LISP+ALT specification that I'd like to
publish to the Internet Dr= afts repository.

Changes reflect comments from this list and elsewhere through the end o= f
2009. There are no modifications to the protocol only clarifications a= nd
editorial changes.

Both html diffs and the full text of the ne= w draft are attached.

Comments appreciated. I'd like to get this posted within two weeks = (by
Friday, January 22nd).

=A0 =A0 =A0 =A0--Vince
=A0 =A0 =A0 = =A0(for the other ALT authors: Dino, Dave, and Darrel)

_____________= __________________________________
lisp mailing list
lisp@ietf.org
= ht= tps://www.ietf.org/mailman/listinfo/lisp


--0016e64807c06ff0fe047cb05024-- From jnc@mercury.lcs.mit.edu Fri Jan 8 19:12:01 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 638703A6954 for ; Fri, 8 Jan 2010 19:12:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qmB38fn2JrXB for ; Fri, 8 Jan 2010 19:12:00 -0800 (PST) Received: from mercury.lcs.mit.edu (mercury.lcs.mit.edu [18.26.0.122]) by core3.amsl.com (Postfix) with ESMTP id 750A83A696B for ; Fri, 8 Jan 2010 19:12:00 -0800 (PST) Received: by mercury.lcs.mit.edu (Postfix, from userid 11178) id ADCDB6BE595; Fri, 8 Jan 2010 22:11:57 -0500 (EST) To: lisp@ietf.org Message-Id: <20100109031157.ADCDB6BE595@mercury.lcs.mit.edu> Date: Fri, 8 Jan 2010 22:11:57 -0500 (EST) From: jnc@mercury.lcs.mit.edu (Noel Chiappa) Cc: jnc@mercury.lcs.mit.edu Subject: Re: [lisp] proposed draft-ietf-lisp-alt-02 draft X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Jan 2010 03:12:01 -0000 > From: Charrie Sun > How does an ALT router knows which is his parent and which is the child? I'd like to remind everyone that in discussing this point, it's important to remember that the _protocol_ knows nothing of 'parent' and 'child' nodes: BGP is an equal peer-peer protocol, and any 'hierarchy' that exists in the ALT connectivity mesh is principally in the minds of the people looking at it. Yes, to the extent that the mesh is _not_ hierarchically arranged, we will not get the _maximum_ amount of aggregation of advertisements of mappings (i.e. minimizing the distribution tree table size overhead - if not the path lengths :-). So there is a point to the hierarchy... And apologies to all to whom this was all already obvious - just wanted to make sure that was well understood by everyone... :-) > I still wonder how ALT builds such a hiararchy, exclusively > voluntarily? > ... > Who would like to run ALT routers, and who would like to be at certain > level, aggregating certain range of EIDs? Is the question trivial? No, it's a significant question, but do remember that these questions are not questions about the protocol, but almost entirely are about the use and operation of the system. So it falls under 'operation and management'. Yes, IETF protocols/designs do have to have feasible operation+management (and also economics, a point that has sometimes been overlooked in some past designs... :-), but the IETF can only go so far in mandating how people who deploy things actually operate on the O+M front... This is not an answer to your question, I know; I suspect the real answer is something like 'only the ISPs, etc, can tell us whether the framework that LISP provides is operationally and economically viable'... So perhaps someone from that part of the world can opine on your points? Noel From vaf@cisco.com Fri Jan 8 20:54:15 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 078513A6935 for ; Fri, 8 Jan 2010 20:54:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.166 X-Spam-Level: X-Spam-Status: No, score=-9.166 tagged_above=-999 required=5 tests=[AWL=0.833, BAYES_00=-2.599, J_CHICKENPOX_43=0.6, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MwbKmv7xtoB4 for ; Fri, 8 Jan 2010 20:54:14 -0800 (PST) Received: from sj-iport-5.cisco.com (sj-iport-5.cisco.com [171.68.10.87]) by core3.amsl.com (Postfix) with ESMTP id 5C35C3A67A6 for ; Fri, 8 Jan 2010 20:54:14 -0800 (PST) Authentication-Results: sj-iport-5.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAPOaR0urR7Ht/2dsb2JhbAC/YZQChC8EjTI X-IronPort-AV: E=Sophos;i="4.49,246,1262563200"; d="scan'208";a="130710353" Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-5.cisco.com with ESMTP; 09 Jan 2010 04:54:11 +0000 Received: from vaf-lnx1 (vaf-lnx1.cisco.com [128.107.165.254]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id o094sBtO024130; Sat, 9 Jan 2010 04:54:11 GMT Received: by vaf-lnx1 (Postfix, from userid 113818) id A712320D5B; Fri, 8 Jan 2010 20:52:26 -0800 (PST) Date: Fri, 8 Jan 2010 20:52:26 -0800 From: Vince Fuller To: Noel Chiappa Message-ID: <20100109045226.GA19362@vaf-lnx1.cisco.com> References: <20100109031157.ADCDB6BE595@mercury.lcs.mit.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20100109031157.ADCDB6BE595@mercury.lcs.mit.edu> User-Agent: Mutt/1.5.20 (2009-06-14) Cc: lisp@ietf.org Subject: Re: [lisp] proposed draft-ietf-lisp-alt-02 draft X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Jan 2010 04:54:15 -0000 > > I still wonder how ALT builds such a hiararchy, exclusively > > voluntarily? > > ... > > Who would like to run ALT routers, and who would like to be at certain > > level, aggregating certain range of EIDs? Is the question trivial? > > No, it's a significant question, but do remember that these questions are not > questions about the protocol, but almost entirely are about the use and > operation of the system. So it falls under 'operation and management'. > > Yes, IETF protocols/designs do have to have feasible operation+management > (and also economics, a point that has sometimes been overlooked in some past > designs... :-), but the IETF can only go so far in mandating how people > who deploy things actually operate on the O+M front... And, more importantly, these questions are greatly influenced by business decisions which are explicitly outside of the purview of the IETF. We can decide whether a protocol provides the necessary mechanisms to implement needed policy and infrastructure (the LISP+ALT authors obviously think that LISP+ALT does so); we can't specify how those mechanisms are used to create organizations or businesses. --Vince From charriesun@gmail.com Fri Jan 8 22:26:08 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4AA0C28B23E for ; Fri, 8 Jan 2010 22:26:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_43=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JDWKQF2KVHKN for ; Fri, 8 Jan 2010 22:26:07 -0800 (PST) Received: from mail-qy0-f191.google.com (mail-qy0-f191.google.com [209.85.221.191]) by core3.amsl.com (Postfix) with ESMTP id CB8BA3A6869 for ; Fri, 8 Jan 2010 22:26:06 -0800 (PST) Received: by qyk29 with SMTP id 29so8362752qyk.32 for ; Fri, 08 Jan 2010 22:26:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type; bh=6p55bElE3afQlUgFCBvuew37DtTsM3a/Y+CjOajvehs=; b=WrT9grTEZiX/lEwi/DgtuheavAnMglybL+qnkj60vDO/km07NR6Guduoj2DNEsOtAh 3Sv8JZgXTcL5seh4B6n6iDTqWwD73+SLtRE2Mo1JwDk7bAP2wNxCK3FyMFw+zfpX7j1v AxM4+8m4tofqmHSRPk1aPw7HGaA/eCCwB9u8A= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=mhoLrlF4qGUdVayp/SnhBdt8Oksm3hkZGpILcOtJytCjQyx/Qf1f7w9S8iHmyRevRu fTCabt6+I/FW6bkAvp50CL6QKmqrUxBXsU8H4CX9HckekUAZ9fEUrAbthC+K0d9ycrB6 huuExafEHScrSODzCtSyUrI5IHGhuiemYPBOo= MIME-Version: 1.0 Received: by 10.220.88.165 with SMTP id a37mr2509701vcm.21.1263018361472; Fri, 08 Jan 2010 22:26:01 -0800 (PST) In-Reply-To: <4eb512451001082206k1f427964p5087110fd1af4b47@mail.gmail.com> References: <20100109031157.ADCDB6BE595@mercury.lcs.mit.edu> <20100109045226.GA19362@vaf-lnx1.cisco.com> <4eb512451001082206k1f427964p5087110fd1af4b47@mail.gmail.com> Date: Sat, 9 Jan 2010 14:26:01 +0800 Message-ID: <4eb512451001082226i5eb55026r8c5e41768ddf7d35@mail.gmail.com> From: Charrie Sun To: lisp Content-Type: multipart/alternative; boundary=0016363b7a1ec7c5bd047cb56044 Subject: [lisp] Fwd: proposed draft-ietf-lisp-alt-02 draft X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Jan 2010 06:26:08 -0000 --0016363b7a1ec7c5bd047cb56044 Content-Type: text/plain; charset=ISO-8859-1 ---------- Forwarded message ---------- From: Charrie Sun Date: 2010/1/9 Subject: Re: [lisp] proposed draft-ietf-lisp-alt-02 draft To: Vince Fuller 2010/1/9 Vince Fuller > > > I still wonder how ALT builds such a hiararchy, exclusively > > > > voluntarily? > > > ... > > > Who would like to run ALT routers, and who would like to be at > certain > > > level, aggregating certain range of EIDs? Is the question trivial? > > > > No, it's a significant question, but do remember that these questions are > not > > questions about the protocol, but almost entirely are about the use and > > operation of the system. So it falls under 'operation and management'. > > > > Yes, IETF protocols/designs do have to have feasible operation+management > > (and also economics, a point that has sometimes been overlooked in some > past > > designs... :-), but the IETF can only go so far in mandating how people > > who deploy things actually operate on the O+M front... > > And, more importantly, these questions are greatly influenced by business > decisions which are explicitly outside of the purview of the IETF. We can > decide whether a protocol provides the necessary mechanisms to implement > needed policy and infrastructure (the LISP+ALT authors obviously think that > LISP+ALT does so); > So, who would run ALT routers, ISPs? Without an implementation model or just an analysis, how to persuade people to follow the idea? > we can't specify how those mechanisms are used to create > organizations or businesses. > > --Vince > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > --0016363b7a1ec7c5bd047cb56044 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable

---------- Forwarded message ----------
From:= Charrie Sun <charriesun@gmail.com>
Da= te: 2010/1/9
Subject: Re: [lisp] proposed draft-ietf-lisp-alt-02 draft
To: Vince Full= er <vaf@cisco.com>



2010/1/9 Vince Fuller <vaf@cisco.com>
> =A0 =A0 > I still wonder how ALT builds such a hiararchy, excl= usively=20

> =A0 =A0 > voluntarily?
> =A0 =A0 > .= ..
> =A0 =A0 > Who would like to run ALT routers, and who would li= ke to be at certain
> =A0 =A0 > level, aggregating certain range o= f EIDs? Is the question trivial?
>
> No, it's a significant question, but do remember that thes= e questions are not
> questions about the protocol, but almost entire= ly are about the use and
> operation of the system. So it falls under= 'operation and management'.
>
> Yes, IETF protocols/designs do have to have feasible operation= +management
> (and also economics, a point that has sometimes been ov= erlooked in some past
> designs... :-), but the IETF can only go so f= ar in mandating how people
> who deploy things actually operate on the O+M front...

And, more importantly, these questions are greatly influe= nced by business
decisions which are explicitly outside of the purview o= f the IETF. We can
decide whether a protocol provides the necessary mech= anisms to implement
needed policy and infrastructure (the LISP+ALT authors obviously think that=
LISP+ALT does so);
=A0
So, who would run ALT routers, ISPs? Without an implementation model o= r just an analysis, how to persuade people to=A0follow the idea?
=A0
we can't specify how those m= echanisms are used to create
organizations or businesses.

=A0 =A0 =A0 =A0--Vince
_______________________________________________
lisp mailing listlisp@ietf.org
<= a href=3D"https://www.ietf.org/mailman/listinfo/lisp" target=3D"_blank">htt= ps://www.ietf.org/mailman/listinfo/lisp


--0016363b7a1ec7c5bd047cb56044-- From luigi@net.t-labs.tu-berlin.de Mon Jan 11 02:13:26 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E2CC23A69AC for ; Mon, 11 Jan 2010 02:13:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.504 X-Spam-Level: X-Spam-Status: No, score=-1.504 tagged_above=-999 required=5 tests=[AWL=-0.744, BAYES_05=-1.11, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PcQU-CXKXnVx for ; Mon, 11 Jan 2010 02:13:26 -0800 (PST) Received: from mail.net.t-labs.tu-berlin.de (mail.net.t-labs.tu-berlin.de [130.149.220.252]) by core3.amsl.com (Postfix) with ESMTP id A35103A69EA for ; Mon, 11 Jan 2010 02:13:20 -0800 (PST) Received: from dyn100.net.t-labs.tu-berlin.de (dyn100.net.t-labs.tu-berlin.de [130.149.220.100]) by mail.net.t-labs.tu-berlin.de (Postfix) with ESMTP id 22FD1700DD4E; Mon, 11 Jan 2010 11:13:15 +0100 (CET) Mime-Version: 1.0 (Apple Message framework v1077) Content-Type: multipart/alternative; boundary=Apple-Mail-10--717730449 From: Luigi Iannone In-Reply-To: <1500E100-9683-40FF-93D5-15A4FCEB2EDD@cisco.com> Date: Mon, 11 Jan 2010 11:13:14 +0100 Message-Id: <6018756A-C929-4894-BA34-307919273D5F@net.t-labs.tu-berlin.de> References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> <081839CE-C19D-4522-8030-1107D409C905@net.t-labs.tu-berlin.de> <1500E100-9683-40FF-93D5-15A4FCEB2EDD@cisco.com> To: John Zwiebel X-Mailer: Apple Mail (2.1077) Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jan 2010 10:13:27 -0000 --Apple-Mail-10--717730449 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii On Jan 8, 2010, at 21:35 , John Zwiebel wrote: >=20 > On Jan 7, 2010, at 9:14 AM, Luigi Iannone wrote: >=20 >>=20 >> Nevertheless, I think this is exactly the main problem that = overlapping EID-prefixess have: How does an ITR having a less specific = become aware that a new more-specific mapping exists? >> In this case map-versioning can help (here it goes again ;-) ), but I = am sure there are still corner cases that we are not aware of. =20 >>=20 >=20 > FWIW: > Isn't a given EID prefix under the control of a single administrator? Yes. > So it is up to that administrator to determine how he wants to = allocate more specific prefixes > Every ITR under his control should have configuration for all the = other ITRs for the same prefix >=20 No, the ITR will request the mapping through the mapping system and the = ETR will provide such a mapping. The scenario here is assume that your ITR is encapsulating traffic with = destination 1.2.3.4 using a mapping with EID prefix 1.2/16. At some = point the administrator of the prefix setup a new more specific mapping = 1.2.3/24. How does you ITR knows that the new mapping is available? Hope I clarified the scenario. Luigi =20 >=20 --Apple-Mail-10--717730449 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii

On Jan 7, 2010, at 9:14 AM, Luigi Iannone wrote:


Nevertheless, I think this is = exactly the main  problem that overlapping EID-prefixess have: How = does an ITR having a less specific become aware that a new more-specific = mapping exists?

FWIW:
Isn't a given EID prefix under the control of a = single = administrator?

Yes.

<= blockquote type=3D"cite">

On Jan 7, 2010, at 9:05 AM, Luigi Iannone wrote:



As to LISP, ITRs could = refuse to forward traffic from sources they are not
supposed to = handle, but the problem is 'how do they know what sources they
are = supposed to be handling'?

Can't = they just check the lisp database? 

If they are also an ETR, they = know,

Isn't the contrary? Current = spec do not mandate a mapping for the source address of a packet in the = ETR (unless it is also an ITR and there is bidirectional = traffic).

If the ETR has a mapping for the = source address in its cache, then it do some sanity checks and = eventually drop the packet.

.. or am I wrong = somewhere?


FWIW:
NXOS requires a lisp-database command on both the ITR and = ETR 
and checks that database to determine if the ITR is = suppose to encap 
packets for a given = EID.

Same as OpenLISP = ;-)

Luigi

= --Apple-Mail-11--717638507-- From fcoras@ac.upc.edu Mon Jan 11 02:34:40 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 764A13A6903 for ; Mon, 11 Jan 2010 02:34:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.74 X-Spam-Level: X-Spam-Status: No, score=-0.74 tagged_above=-999 required=5 tests=[BAYES_20=-0.74] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lN5UgmLWRhPJ for ; Mon, 11 Jan 2010 02:34:39 -0800 (PST) Received: from gw.ac.upc.edu (gw.ac.upc.edu [147.83.30.3]) by core3.amsl.com (Postfix) with ESMTP id 88D793A672F for ; Mon, 11 Jan 2010 02:34:39 -0800 (PST) Received: from [192.168.0.14] (81.184.58.60.dyn.user.ono.com [81.184.58.60]) by gw.ac.upc.edu (Postfix) with ESMTP id E668B6B02E4; Mon, 11 Jan 2010 11:34:34 +0100 (CET) Message-ID: <4B4AFEB4.8010605@ac.upc.edu> Date: Mon, 11 Jan 2010 11:34:28 +0100 From: Florin Coras User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: Luigi Iannone References: <20100107162425.9D6B26BE58D@mercury.lcs.mit.edu> <098F66D4-56C3-42E5-8CDE-FF3C7AAEEF57@net.t-labs.tu-berlin.de> In-Reply-To: <098F66D4-56C3-42E5-8CDE-FF3C7AAEEF57@net.t-labs.tu-berlin.de> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: Noel Chiappa , lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jan 2010 10:34:40 -0000 Hello Luigi, Luigi Iannone wrote: > Hi Noel, > > On Jan 7, 2010, at 17:24 , Noel Chiappa wrote: > > [snip] > > >> As to LISP, ITRs could refuse to forward traffic from sources they are not >> supposed to handle, but the problem is 'how do they know what sources they >> are supposed to be handling'? >> > > Can't they just check the lisp database? > > >> If they are also an ETR, they know, >> > > Isn't the contrary? Current spec do not mandate a mapping for the source address of a packet in the ETR (unless it is also an ITR and there is bidirectional traffic). > > If the ETR has a mapping for the source address in its cache, then it do some sanity checks and eventually drop the packet. > > .. or am I wrong somewhere? > > > I might be the one confused but isn't Noel speaking here about some sort of uRPF? Meaning the ITR should not forward packets from within its domain if the source EID of the packet is not from the domains EID-prefix. But the boxes that are simple ITRs don't know the domain's EID-prefix, only the ETRs know it (they use it in registrations at Map-Servers). .. or maybe I'm wrong :) Florin > Luigi > > >> but the >> design does allow of exit-only (i.e. ITR-only) boxes; handling those would >> mean more configuration (bad). >> >> Noel >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp >> > > From kotikalapudi.sriram@nist.gov Thu Jan 7 12:57:42 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2E5553A68C5 for ; Thu, 7 Jan 2010 12:57:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QtC33ukalJx1 for ; Thu, 7 Jan 2010 12:57:41 -0800 (PST) Received: from smtp.nist.gov (rimp2.nist.gov [129.6.16.227]) by core3.amsl.com (Postfix) with ESMTP id F29EE3A67B3 for ; Thu, 7 Jan 2010 12:57:40 -0800 (PST) Received: from WSXGHUB1.xchange.nist.gov (wsxghub1.nist.gov [129.6.18.96]) by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id o07KvUZO010296; Thu, 7 Jan 2010 15:57:30 -0500 Received: from MBCLUSTER.xchange.nist.gov ([fe80::d479:3188:aec0:cb66]) by WSXGHUB1.xchange.nist.gov ([2002:8106:1260::8106:1260]) with mapi; Thu, 7 Jan 2010 15:57:30 -0500 From: "Sriram, Kotikalapudi" To: "jnc@mercury.lcs.mit.edu" , "jmh@joelhalpern.com" Date: Thu, 7 Jan 2010 15:57:20 -0500 Thread-Topic: lisp Digest, Vol 14, Issue 5 Thread-Index: AcqPzdaAChDwLv/fTVSTUUwHgw50awAB9Dbg Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-NIST-MailScanner: Found to be clean X-NIST-MailScanner-From: kotikalapudi.sriram@nist.gov X-Mailman-Approved-At: Mon, 11 Jan 2010 11:32:35 -0800 Cc: "lisp@ietf.org" Subject: Re: [lisp] lisp Digest, Vol 14, Issue 5 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jan 2010 20:57:42 -0000 Some comments inline below. Sriram http://www.antd.nist.gov/~ksriram/=20 >=20 > Message: 1 > Date: Thu, 7 Jan 2010 10:46:58 -0500 (EST) > From: jnc@mercury.lcs.mit.edu (Noel Chiappa) > Subject: Re: [lisp] Design discussion -06-(3) -> return all > overlapping prefixes > To: lisp@ietf.org > Cc: jnc@mercury.lcs.mit.edu > Message-ID: <20100107154658.648546BE58D@mercury.lcs.mit.edu> >=20 > > From: "Joel M. Halpern" --- snip ----------- > > We are talking about overlapping EIDs, not overlapping locators. > > There are LOTs of overlapping addresses in the current tables. > > There are multiple reasons for these. > > It is not clear to me that any of them apply to EIDs. >=20 > Good point. A list of uses for overlapping EIDs would be a good input to > the decision below, but... >=20 >=20 > > an interesting idea for how one might use overlapping EIDs if they > > are allowed. That usage clearly has value. Is that value more than > > the complexity required for allowing overlapping EIDs? The proposal summary document that I submitted to the RRG list recently identifies some use cases for overlapping EIDs. http://www.ietf.org/mail-archive/web/rrg/current/msg05541.html=20 (We may have come at this from a different angle though -- trying to preserve EID aggregation and reducing processing and memory requirements related to mapping distribution.) For more details, please take a look at the cited document/slides:=20 http://www.antd.nist.gov/~ksriram/NGRA_map_mgmt.pdf http://www.antd.nist.gov/~ksriram/MDP_Dublin_KS_Slides.pdf (Presented at the Dublin RRG meeting in 2008) --- snip ----------- >=20 > > Particularly if, as appears to be the case, we would need to > > indicate that any request for a block that has nested EIDs needs to > > return all those nested EID mappings as well? >=20 > This is the other main facet, a thorough understanding of the engineering > implications (and choices) - and it's the one I most don't understand wel= l > yet. >=20 We grappled with this issue as well in the documents cited above -- how to manage/optimize mapping messages when you have nested EIDs.=20 --- snip ----------- From darlewis@cisco.com Mon Jan 11 12:32:21 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C01DD3A6951 for ; Mon, 11 Jan 2010 12:32:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xR-b9lvv9lFB for ; Mon, 11 Jan 2010 12:32:21 -0800 (PST) Received: from sj-iport-2.cisco.com (sj-iport-2.cisco.com [171.71.176.71]) by core3.amsl.com (Postfix) with ESMTP id ED85A3A6926 for ; Mon, 11 Jan 2010 12:32:20 -0800 (PST) Authentication-Results: sj-iport-2.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEABsZS0urR7H+/2dsb2JhbADDHJQEhC8E X-IronPort-AV: E=Sophos;i="4.49,258,1262563200"; d="scan'208";a="231972477" Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-2.cisco.com with ESMTP; 11 Jan 2010 20:32:18 +0000 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id o0BKWIKp013194; Mon, 11 Jan 2010 20:32:18 GMT Received: from xmb-sjc-213.amer.cisco.com ([171.70.151.153]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 11 Jan 2010 12:32:18 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Mon, 11 Jan 2010 12:32:18 -0800 Message-ID: In-Reply-To: <4B47C5AD.6020204@informatik.uni-wuerzburg.de> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] LISP Interworking: Proxy Egress Tunnel Routers Thread-Index: AcqQvfPcv7cADXebQCGrbD8d0pFoEQCOBobQ References: <4B47C5AD.6020204@informatik.uni-wuerzburg.de> From: "Darrel Lewis (darlewis)" To: X-OriginalArrivalTime: 11 Jan 2010 20:32:18.0858 (UTC) FILETIME=[2B8DE0A0:01CA92FD] Cc: lisp@ietf.org Subject: Re: [lisp] LISP Interworking: Proxy Egress Tunnel Routers X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jan 2010 20:32:21 -0000 >=20 > I do not understand the two application scenarios and how PETRs can=20 > help. Could you explain that in more detail, please? >=20 Michael, Today when an ITR receives a packet on its local interface with the destination address of a non-lisp site, today it forwards it without encapsulation. To be specific, an ITR has a map-cache that contains both 'positive' and 'negative' cache entries. When a packet's destination address matches a positive entry, it is encapsulated to the locators in the mapping. When a packet's destination address matches a negative entry, the packet is forwarded natively without encapsulation (to the next hop). However, there are a couple of cases where this non-encapsulated packet will get dropped. First, the Provider Edge router may be doing some sort of strict filtering on the source address of packets sent by the CE device (the ITR). Thus packets with the source of an EID may be dropped because the PE router does not have an route to the EID out the interface. =20 Second, the Provider Edge router may only support IPv4. So an ITR sending a IPv6 packet will obviously fail. The Proxy ETR allows an ITR to encapsulate packets that match 'negative' map-cache entries to a destination that can bypass both the above situations. In the first case, the encapsulated packet's outer header has a correct source address. In the second case, the encapsulated outer header would be an IPv4 packet. Of course, this implies that the Proxy ETR has dual stack external connectivity (post decapsulation) the Proxy ETR's upstream router(s) use loose mode uRPF. Hope this helps explain the situation a little bit more clearly. -Darrel From hartmans@mit.edu Mon Jan 11 15:22:15 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7C1753A68D0 for ; Mon, 11 Jan 2010 15:22:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.885 X-Spam-Level: X-Spam-Status: No, score=-1.885 tagged_above=-999 required=5 tests=[AWL=0.380, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S1g1QRxcx56K for ; Mon, 11 Jan 2010 15:22:14 -0800 (PST) Received: from mail.suchdamage.org (permutation-city.suchdamage.org [69.25.196.28]) by core3.amsl.com (Postfix) with ESMTP id B3CA23A6896 for ; Mon, 11 Jan 2010 15:22:14 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.suchdamage.org (Postfix) with ESMTPS id 1074620C24; Mon, 11 Jan 2010 18:22:12 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id BF7AE43F3; Mon, 11 Jan 2010 18:21:48 -0500 (EST) From: Sam Hartman To: Dino Farinacci References: Date: Mon, 11 Jan 2010 18:21:48 -0500 In-Reply-To: (Dino Farinacci's message of "Mon, 21 Dec 2009 18:35:37 -0800") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(1) -> DF=1 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jan 2010 23:22:15 -0000 >>>>> "Dino" == Dino Farinacci writes: Dino> A description of the design issue: (1) Use stronger language Dino> to have the outer IPv4 header set DF=1 so we can avoid Dino> fragment reassembly in an ETR or PETR. This will also make Dino> IPv4 and IPv6 encapsulation have consistent behavior. Dino> Right now the spec does not recommend a preference on the DF Dino> setting of an outer IPv4 header. If a LISP encapsulator (a ITR Dino> or PITR/PTR) sets DF=0 an intermediate router could fragment Dino> the packet to the tunnel destination endpoint. That would be a Dino> ETR or PETR. We don't want to force ETRs and PETRs to Dino> reassemble packets if we can be practical. We want Path MTU Dino> discovery to be used on the path. I support recomminding/requiring the DF bit be set in the V4 header. Based on our discussion of deployment model I think that we're really going to have to take a look at PMTU issues. I think this recommendation will be consistent with our eventual results in this space, but I don't think it will get us all the way there. Fred and others have implied that PMTU discovery depends on getting ICMP packet too big messages. I'd like to remind people that the current standards-track state of the art in this area (RFC 4821) actually deals with lost ICMP messages. The current LISP architecture is not rich enough to support RFC 4821 between the ITR and ETR because it does not have the right kind of probe packet support, although that would be a relatively easy enhancement. I'm surprised to find that RFC 5405 (particularly section 3.2) gives us very little guidance in this area. From hartmans@mit.edu Mon Jan 11 15:32:35 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3A9573A6819 for ; Mon, 11 Jan 2010 15:32:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.948 X-Spam-Level: X-Spam-Status: No, score=-1.948 tagged_above=-999 required=5 tests=[AWL=0.317, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bOCWOk-cZuae for ; Mon, 11 Jan 2010 15:32:34 -0800 (PST) Received: from mail.suchdamage.org (permutation-city.suchdamage.org [69.25.196.28]) by core3.amsl.com (Postfix) with ESMTP id 6C1433A67F5 for ; Mon, 11 Jan 2010 15:32:34 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.suchdamage.org (Postfix) with ESMTPS id 2957020BDC; Mon, 11 Jan 2010 18:32:32 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 2FA3143F3; Mon, 11 Jan 2010 18:32:10 -0500 (EST) From: Sam Hartman To: "Joel M. Halpern" References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> <4B308324.20008@ac.upc.edu> <4B30FB81.6040006@joelhalpern.com> Date: Mon, 11 Jan 2010 18:32:10 -0500 In-Reply-To: <4B30FB81.6040006@joelhalpern.com> (Joel M. Halpern's message of "Tue, 22 Dec 2009 12:01:53 -0500") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jan 2010 23:32:35 -0000 >>>>> "Joel" == Joel M Halpern writes: Joel> (speaking personally) The problem below is why this approach Joel> makes me very nervous. Joel> If we allow overlapping EID blocks, and if we ever allow Joel> mobile-LISP, then the number of EIDs in a prefix could be VERY Joel> large. Returning all of them in response to any request for a Joel> non-mobile EID in the larger block is clearly the wrong Joel> answer. Joel, I think that my gut inclination is to support overlapping Joel> prefixes, although I don't have a strong argument for doing it Joel> and if the WG has or does reach the decision that we don't want overlapping Joel> prefixes I'm OK ith that. It seems that you have a couple of options when your reply set would be too large (and I believe a MNblock is one case where you get a large reply set): 1) return a more specific mapping than you otherwise could. 2) Return less specific mappings with the MN prefix/the prefix that has a lot of specific entries covered by a negative record saying that no information is returned. Remember that there are a number of negative record types. One of them is to discard packets. However I think there is at least one record type that basically says "I don't have an answer for you now." I.E ask again. Such a record could cover parts of a prefix that are high-churn or that have too much data. --Sam From hartmans@mit.edu Mon Jan 11 15:34:12 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B3C893A6873 for ; Mon, 11 Jan 2010 15:34:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.994 X-Spam-Level: X-Spam-Status: No, score=-1.994 tagged_above=-999 required=5 tests=[AWL=0.271, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9IBiD5uBfs60 for ; Mon, 11 Jan 2010 15:34:12 -0800 (PST) Received: from mail.suchdamage.org (permutation-city.suchdamage.org [69.25.196.28]) by core3.amsl.com (Postfix) with ESMTP id F022F3A6835 for ; Mon, 11 Jan 2010 15:34:11 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.suchdamage.org (Postfix) with ESMTPS id B4AB220BC8; Mon, 11 Jan 2010 18:34:09 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id EB30343F3; Mon, 11 Jan 2010 18:33:47 -0500 (EST) From: Sam Hartman To: "Darrel Lewis \(darlewis\)" References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> Date: Mon, 11 Jan 2010 18:33:47 -0500 In-Reply-To: (Darrel Lewis's message of "Tue, 5 Jan 2010 12:16:50 -0800") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jan 2010 23:34:12 -0000 >>>>> "Darrel" == Darrel Lewis (darlewis) writes: Thinking of this further I would suggest that all the overlapping Darrel> EID-prefixes returned in the map-reply should have the same Darrel> TTL. Why is this? Won't you want lover TTLs for your MN entries than fixed node entries? From jmh@joelhalpern.com Mon Jan 11 18:54:19 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 48DEC3A6965 for ; Mon, 11 Jan 2010 18:54:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.329 X-Spam-Level: X-Spam-Status: No, score=-3.329 tagged_above=-999 required=5 tests=[AWL=0.270, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ERzWJjdNX0Es for ; Mon, 11 Jan 2010 18:54:18 -0800 (PST) Received: from hermes.mail.tigertech.net (hermes.mail.tigertech.net [64.62.209.72]) by core3.amsl.com (Postfix) with ESMTP id 89CF23A6946 for ; Mon, 11 Jan 2010 18:54:18 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hermes.tigertech.net (Postfix) with ESMTP id 76CC343B319; Mon, 11 Jan 2010 18:54:16 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at hermes.tigertech.net Received: from [10.10.10.102] (pool-71-161-51-192.clppva.btas.verizon.net [71.161.51.192]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hermes.tigertech.net (Postfix) with ESMTP id 9D93243B317; Mon, 11 Jan 2010 18:54:15 -0800 (PST) Message-ID: <4B4BE458.40405@joelhalpern.com> Date: Mon, 11 Jan 2010 21:54:16 -0500 From: "Joel M. Halpern" User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Sam Hartman References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> <4B308324.20008@ac.upc.edu> <4B30FB81.6040006@joelhalpern.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 02:54:19 -0000 Can you elucidate the advantages that lead you to want to support overlapping (nested, generally) EID prefixes? Your point about the "ask later" (ACT code 2) answer is a good way to cope with excess sub-blocks, if they are organized reasonably. Should we say that in the document? (If so, where? Once we get past "the protocol does / does not permit nested EID prefixes", this starts to get into recommended policy, which is not protocol.) Yours, Joel Sam Hartman wrote: >>>>>> "Joel" == Joel M Halpern writes: > > Joel> (speaking personally) The problem below is why this approach > Joel> makes me very nervous. > > Joel> If we allow overlapping EID blocks, and if we ever allow > Joel> mobile-LISP, then the number of EIDs in a prefix could be VERY > Joel> large. Returning all of them in response to any request for a > Joel> non-mobile EID in the larger block is clearly the wrong > Joel> answer. > Joel, I think that my gut inclination is to support overlapping > Joel> prefixes, although I don't have a strong argument for doing it > Joel> and > if the WG has or does reach the decision that we don't want overlapping > Joel> prefixes I'm OK ith that. > > It seems that you have a couple of options when your reply set would be > too large (and I believe a MNblock is one case where you get a large > reply set): > > 1) return a more specific mapping than you otherwise could. > > 2) Return less specific mappings with the MN prefix/the prefix that has > a lot of specific entries covered by a negative record saying that no > information is returned. > > Remember that there are a number of negative record types. One of them > is to discard packets. However I think there is at least one record > type that basically says "I don't have an answer for you now." I.E ask > again. Such a record could cover parts of a prefix that are high-churn > or that have too much data. > > --Sam > From jmh@joelhalpern.com Mon Jan 11 19:01:22 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5CAAA3A6970 for ; Mon, 11 Jan 2010 19:01:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.35 X-Spam-Level: X-Spam-Status: No, score=-3.35 tagged_above=-999 required=5 tests=[AWL=0.249, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ks19-O-6XPhS for ; Mon, 11 Jan 2010 19:01:21 -0800 (PST) Received: from hermes.mail.tigertech.net (hermes.mail.tigertech.net [64.62.209.72]) by core3.amsl.com (Postfix) with ESMTP id B63743A696E for ; Mon, 11 Jan 2010 19:01:21 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hermes.tigertech.net (Postfix) with ESMTP id 429AD4306FF for ; Mon, 11 Jan 2010 19:01:18 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at hermes.tigertech.net Received: from [10.10.10.102] (pool-71-161-51-192.clppva.btas.verizon.net [71.161.51.192]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hermes.tigertech.net (Postfix) with ESMTP id A0B1A430702 for ; Mon, 11 Jan 2010 19:01:17 -0800 (PST) Message-ID: <4B4BE5FD.9040402@joelhalpern.com> Date: Mon, 11 Jan 2010 22:01:17 -0500 From: "Joel M. Halpern" User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: "lisp@ietf.org" Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: [lisp] Data Probes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 03:01:22 -0000 [speaking personally:] The current Lisp ALT draft, as with the last many versions, describes LISP data probes, and then says "use of Data Probes should be considered experimental and should be disabled by default in all ITR implementations." I am wondering if we should simply remove the data probe from the ALT infrastructure entirely. It is present as an option to experiment with ways to reduce first packet (between source ITR and dest EID prefix) latency. It is subject to abuse, and shifts the design focus for the ALT, as it turns the pure control plane ALT into a data plane engine as well. (Each query would likely be coupled to one or more data packets if this feature were used.) Does anyone else have an opinion? Yours, Joel From vaf@cisco.com Tue Jan 12 00:04:02 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D2D403A67A3 for ; Tue, 12 Jan 2010 00:04:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.425 X-Spam-Level: X-Spam-Status: No, score=-9.425 tagged_above=-999 required=5 tests=[AWL=0.259, BAYES_00=-2.599, J_CHICKENPOX_43=0.6, RCVD_IN_DNSWL_HI=-8, SARE_MILLIONSOF=0.315] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fOyXXBdq-031 for ; Tue, 12 Jan 2010 00:04:02 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 0C2A03A6765 for ; Tue, 12 Jan 2010 00:04:02 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAMK7S0urR7Hu/2dsb2JhbADBQZRahDAE X-IronPort-AV: E=Sophos;i="4.49,261,1262563200"; d="scan'208";a="465291054" Received: from sj-core-5.cisco.com ([171.71.177.238]) by sj-iport-6.cisco.com with ESMTP; 12 Jan 2010 08:03:44 +0000 Received: from vaf-lnx1 (vaf-lnx1.cisco.com [128.107.165.254]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id o0C83ieA029066; Tue, 12 Jan 2010 08:03:44 GMT Received: by vaf-lnx1 (Postfix, from userid 113818) id DBEFE20773; Tue, 12 Jan 2010 00:01:51 -0800 (PST) Date: Tue, 12 Jan 2010 00:01:51 -0800 From: Vince Fuller To: "Joel M. Halpern" Message-ID: <20100112080151.GB18314@vaf-lnx1.cisco.com> References: <4B4BE5FD.9040402@joelhalpern.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4B4BE5FD.9040402@joelhalpern.com> User-Agent: Mutt/1.5.20 (2009-06-14) Cc: "lisp@ietf.org" Subject: Re: [lisp] Data Probes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 08:04:02 -0000 On Mon, Jan 11, 2010 at 10:01:17PM -0500, Joel M. Halpern wrote: > [speaking personally:] > The current Lisp ALT draft, as with the last many versions, > describes LISP data probes, and then says "use of Data Probes should > be considered experimental and should be disabled by default in all > ITR implementations." > > I am wondering if we should simply remove the data probe from the > ALT infrastructure entirely. It is present as an option to > experiment with ways to reduce first packet (between source ITR and > dest EID prefix) latency. It is subject to abuse, and shifts the > design focus for the ALT, as it turns the pure control plane ALT > into a data plane engine as well. (Each query would likely be > coupled to one or more data packets if this feature were used.) > > Does anyone else have an opinion? [speaking as one of the LISP+ALT authors but not for all of them] IMHO, the intended RFC publication status of the LISP drafts is experimental so I feel that is it quite appropriate to facilitate experiments with methods of reducing first packet latency; enabling Data Probes is one such mechanism. I'll also note that the generation and forwarding of Data Probes really doesn't create a new form of abuse: a misbehaving system generating millions of Map-Reqeusts will roughly the same negative impact on the ALT as one generating millions of Data Probes. Furthermore, similar techniques for mitigating control plane flooding attacks will apply to either sort of ALT-routed datagram. For these reasons, I am in favor of leaving intact the existing text regarding Data Probes in the LISP drafts intended for publication as Experimental RFCs. Should LISP eventually wind up on the standards track, then I wholeheartedly agree that Data Probes will need to either be demonstrated viable through experimental deployment or they will need to be removed entirely from the LISP specifications. --Vince From menth@informatik.uni-wuerzburg.de Tue Jan 12 00:32:44 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 836FA3A686C for ; Tue, 12 Jan 2010 00:32:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.249 X-Spam-Level: X-Spam-Status: No, score=-2.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TQ3084iuKvZr for ; Tue, 12 Jan 2010 00:32:43 -0800 (PST) Received: from mailrelay.rz.uni-wuerzburg.de (mailrelay.rz.uni-wuerzburg.de [132.187.3.28]) by core3.amsl.com (Postfix) with ESMTP id 386003A6765 for ; Tue, 12 Jan 2010 00:32:43 -0800 (PST) Received: from virusscan.mail (localhost [127.0.0.1]) by mailrelay.mail (Postfix) with ESMTP id 2B53A5ACE0; Tue, 12 Jan 2010 09:32:40 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by virusscan.mail (Postfix) with ESMTP id 282B65ACAA; Tue, 12 Jan 2010 09:32:40 +0100 (CET) X-Virus-Scanned: by amavisd-new at uni-wuerzburg.de Received: from [132.187.12.151] (win3151.informatik.uni-wuerzburg.de [132.187.12.151]) by mailmaster.uni-wuerzburg.de (Postfix) with ESMTPSA id 7BB555CE80; Tue, 12 Jan 2010 09:32:38 +0100 (CET) Message-ID: <4B4C33A1.4030801@informatik.uni-wuerzburg.de> Date: Tue, 12 Jan 2010 09:32:33 +0100 From: Michael Menth Organization: University of Wuerzburg User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: "Darrel Lewis (darlewis)" References: <4B47C5AD.6020204@informatik.uni-wuerzburg.de> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: lisp@ietf.org Subject: Re: [lisp] LISP Interworking: Proxy Egress Tunnel Routers X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: menth@informatik.uni-wuerzburg.de List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 08:32:44 -0000 Hi Darrel, thanks for this clear explanation. One more question that was not addressed in your previous email. I guess that the ITR is configured with the address of some PETR outside the source LISP domain and uses this PETR if needed, right? I mean the PETR is usually independent of the destination EID? Regards, Michael Darrel Lewis (darlewis) schrieb: > > > >> I do not understand the two application scenarios and how PETRs can >> help. Could you explain that in more detail, please? >> >> > > > Michael, > > Today when an ITR receives a packet on its local interface with the > destination address of a non-lisp site, today it forwards it without > encapsulation. To be specific, an ITR has a map-cache that contains > both 'positive' and 'negative' cache entries. When a packet's > destination address matches a positive entry, it is encapsulated to the > locators in the mapping. When a packet's destination address matches a > negative entry, the packet is forwarded natively without encapsulation > (to the next hop). > > However, there are a couple of cases where this non-encapsulated packet > will get dropped. > > First, the Provider Edge router may be doing some sort of strict > filtering on the source address of packets sent by the CE device (the > ITR). Thus packets with the source of an EID may be dropped because the > PE router does not have an route to the EID out the interface. > > Second, the Provider Edge router may only support IPv4. So an ITR > sending a IPv6 packet will obviously fail. > > The Proxy ETR allows an ITR to encapsulate packets that match 'negative' > map-cache entries to a destination that can bypass both the above > situations. In the first case, the encapsulated packet's outer header > has a correct source address. In the second case, the encapsulated > outer header would be an IPv4 packet. Of course, this implies that the > Proxy ETR has dual stack external connectivity (post decapsulation) the > Proxy ETR's upstream router(s) use loose mode uRPF. > > Hope this helps explain the situation a little bit more clearly. > > -Darrel > -- Dr. Michael Menth, Assistant Professor University of Wuerzburg, Institute of Computer Science Am Hubland, D-97074 Wuerzburg, Germany, room B206 phone: (+49)-931/31-86644 (new), fax: (+49)-931/888-6632 mailto:menth@informatik.uni-wuerzburg.de http://www3.informatik.uni-wuerzburg.de/research/ngn From olivier.bonaventure@uclouvain.be Tue Jan 12 00:41:37 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 89E373A68B4 for ; Tue, 12 Jan 2010 00:41:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gLP5ufgT96v0 for ; Tue, 12 Jan 2010 00:41:33 -0800 (PST) Received: from smtp2.sgsi.ucl.ac.be (smtp.sgsi.ucl.ac.be [130.104.5.67]) by core3.amsl.com (Postfix) with ESMTP id A6BEE3A68A8 for ; Tue, 12 Jan 2010 00:41:33 -0800 (PST) Received: from mbpobo.dhcp.info.ucl.ac.be (mbpobo.dhcp.info.ucl.ac.be [130.104.228.70]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: obonaventure@smtp2.sgsi.ucl.ac.be) by smtp2.sgsi.ucl.ac.be (Postfix) with ESMTPSA id BBACCEC988; Tue, 12 Jan 2010 09:41:20 +0100 (CET) X-DKIM: Sendmail DKIM Filter v2.8.2 smtp2.sgsi.ucl.ac.be BBACCEC988 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=uclouvain.be; s=selucl; t=1263285680; bh=wgN28ErjtSj2g+TmfM1QL3n0kWUFJikschHfcwsc1IA=; h=Message-ID:Date:From:Reply-To:MIME-Version:To:CC:Subject: References:In-Reply-To:Content-Type:Content-Transfer-Encoding; b=lswRaOzvzaq+JwpRFhO2KaUcU+vLk+UkjCz5jfns9bZ7nVyOPSer+bPC+2aZhgSYG Idaj2hUsq9x3gz36OfBsZuTu2JBZ6Hz8tLvIGCksJ62Vc5WRPwWyQhIRdooNTctBy3 HEggspxSEsCtLooXNZ2CGLQ6H1Ags9tP1lMsT7hg= Message-ID: <4B4C35B0.5090003@uclouvain.be> Date: Tue, 12 Jan 2010 09:41:20 +0100 From: Olivier Bonaventure User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.1.5) Gecko/20091204 Lightning/1.0b2pre Thunderbird/3.0 MIME-Version: 1.0 To: "Joel M. Halpern" References: <4B4BE5FD.9040402@joelhalpern.com> In-Reply-To: <4B4BE5FD.9040402@joelhalpern.com> X-Enigmail-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: clamav-milter 0.95.2 at smtp-2.sipr-dc.ucl.ac.be X-Virus-Status: Clean X-Sgsi-Spamcheck: SASL authenticated, X-SGSI-MailScanner-ID: BBACCEC988.00000 X-SGSI-MailScanner: Found to be clean X-SGSI-From: olivier.bonaventure@uclouvain.be X-SGSI-Spam-Status: No Cc: "lisp@ietf.org" Subject: Re: [lisp] Data Probes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: Olivier.Bonaventure@uclouvain.be List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 08:41:37 -0000 Joel, > The current Lisp ALT draft, as with the last many versions, describes > LISP data probes, and then says "use of Data Probes should be considered > experimental and should be disabled by default in all ITR implementations." > > I am wondering if we should simply remove the data probe from the ALT > infrastructure entirely. It is present as an option to experiment with > ways to reduce first packet (between source ITR and dest EID prefix) > latency. It is subject to abuse, and shifts the design focus for the > ALT, as it turns the pure control plane ALT into a data plane engine as > well. (Each query would likely be coupled to one or more data packets > if this feature were used.) I completely agree with you. Data probes have more drawbacks than advantages. I don't think that the support of data probes should be a design goal for a LISP mapping system. Olivier -- http://inl.info.ucl.ac.be , UCLouvain, Belgium From luigi@net.t-labs.tu-berlin.de Tue Jan 12 01:07:38 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0EEFE3A6816 for ; Tue, 12 Jan 2010 01:07:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.1 X-Spam-Level: X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[AWL=0.149, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EY6B6zyI0AcE for ; Tue, 12 Jan 2010 01:07:37 -0800 (PST) Received: from mail.net.t-labs.tu-berlin.de (mail.net.t-labs.tu-berlin.de [130.149.220.252]) by core3.amsl.com (Postfix) with ESMTP id AE9163A6864 for ; Tue, 12 Jan 2010 01:07:33 -0800 (PST) Received: from dyn100.net.t-labs.tu-berlin.de (dyn100.net.t-labs.tu-berlin.de [130.149.220.100]) by mail.net.t-labs.tu-berlin.de (Postfix) with ESMTP id 6EA01700DD49; Tue, 12 Jan 2010 10:07:25 +0100 (CET) Mime-Version: 1.0 (Apple Message framework v1077) Content-Type: text/plain; charset=us-ascii From: Luigi Iannone In-Reply-To: <4B4AFEB4.8010605@ac.upc.edu> Date: Tue, 12 Jan 2010 10:07:25 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <4BF0F799-6ACE-482F-BBB2-09BC8397F537@net.t-labs.tu-berlin.de> References: <20100107162425.9D6B26BE58D@mercury.lcs.mit.edu> <098F66D4-56C3-42E5-8CDE-FF3C7AAEEF57@net.t-labs.tu-berlin.de> <4B4AFEB4.8010605@ac.upc.edu> To: Florin Coras X-Mailer: Apple Mail (2.1077) Cc: Noel Chiappa , lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 09:07:38 -0000 Hi Florin, On Jan 11, 2010, at 11:34 , Florin Coras wrote: > Hello Luigi, >=20 > Luigi Iannone wrote: >> Hi Noel, >>=20 >> On Jan 7, 2010, at 17:24 , Noel Chiappa wrote: >>=20 >> [snip] >>=20 >>=20 >>> As to LISP, ITRs could refuse to forward traffic from sources they = are not >>> supposed to handle, but the problem is 'how do they know what = sources they >>> are supposed to be handling'? >>>=20 >>=20 >> Can't they just check the lisp database?=20 >>=20 >>=20 >>> If they are also an ETR, they know, >>>=20 >>=20 >> Isn't the contrary? Current spec do not mandate a mapping for the = source address of a packet in the ETR (unless it is also an ITR and = there is bidirectional traffic). >>=20 >> If the ETR has a mapping for the source address in its cache, then it = do some sanity checks and eventually drop the packet. >>=20 >> .. or am I wrong somewhere? >>=20 >>=20 >>=20 >=20 > I might be the one confused but isn't Noel speaking here about some = sort > of uRPF? Oh, I see... I misunderstood. > Meaning the ITR should not forward packets from within its > domain if the source EID of the packet is not from the domains > EID-prefix. But the boxes that are simple ITRs don't know the domain's > EID-prefix, only the ETRs know it (they use it in registrations at > Map-Servers). AFAIK the Cisco and the OpenLISP implementations do the check on the = ITRs. Further, even if the ITRs are not authoritative in replying to = Map-Request, they still have the knowledge, since they have to have an = entry in the LISP Database, otherwise how would an ITR select which RLOC = to use as a source RLOC? Or I am mistaken again?=20 Luigi >=20 > .. or maybe I'm wrong :) >=20 > Florin >=20 >> Luigi >>=20 >>=20 >>> but the >>> design does allow of exit-only (i.e. ITR-only) boxes; handling those = would >>> mean more configuration (bad). >>>=20 >>> Noel >>> _______________________________________________ >>> lisp mailing list >>> lisp@ietf.org >>> https://www.ietf.org/mailman/listinfo/lisp >>>=20 >>=20 >>=20 >=20 From luigi@net.t-labs.tu-berlin.de Tue Jan 12 01:22:57 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0DB223A67BE for ; Tue, 12 Jan 2010 01:22:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.125 X-Spam-Level: X-Spam-Status: No, score=-2.125 tagged_above=-999 required=5 tests=[AWL=0.125, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FaXIplEmvG6y for ; Tue, 12 Jan 2010 01:22:56 -0800 (PST) Received: from mail.net.t-labs.tu-berlin.de (mail.net.t-labs.tu-berlin.de [130.149.220.252]) by core3.amsl.com (Postfix) with ESMTP id EEC863A68B4 for ; Tue, 12 Jan 2010 01:22:55 -0800 (PST) Received: from dyn100.net.t-labs.tu-berlin.de (dyn100.net.t-labs.tu-berlin.de [130.149.220.100]) by mail.net.t-labs.tu-berlin.de (Postfix) with ESMTP id 0155A700DD49; Tue, 12 Jan 2010 10:22:52 +0100 (CET) Mime-Version: 1.0 (Apple Message framework v1077) Content-Type: text/plain; charset=us-ascii From: Luigi Iannone In-Reply-To: <4B4C35B0.5090003@uclouvain.be> Date: Tue, 12 Jan 2010 10:22:52 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <19C4443E-5558-447B-B89F-3CF968BFD477@net.t-labs.tu-berlin.de> References: <4B4BE5FD.9040402@joelhalpern.com> <4B4C35B0.5090003@uclouvain.be> To: Olivier.Bonaventure@uclouvain.be X-Mailer: Apple Mail (2.1077) Cc: lisp@ietf.org Subject: Re: [lisp] Data Probes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 09:22:57 -0000 Hi, On Jan 12, 2010, at 9:41 , Olivier Bonaventure wrote: > Joel, >=20 >> The current Lisp ALT draft, as with the last many versions, describes >> LISP data probes, and then says "use of Data Probes should be = considered >> experimental and should be disabled by default in all ITR = implementations." >>=20 >> I am wondering if we should simply remove the data probe from the ALT >> infrastructure entirely. It is present as an option to experiment = with >> ways to reduce first packet (between source ITR and dest EID prefix) >> latency. It is subject to abuse, and shifts the design focus for the >> ALT, as it turns the pure control plane ALT into a data plane engine = as >> well. (Each query would likely be coupled to one or more data = packets >> if this feature were used.) >=20 > I completely agree with you. Data probes have more drawbacks than > advantages. I don't think that the support of data probes should be a > design goal for a LISP mapping system. >=20 >=20 IMHO, the mapping system should be designed for low latency and with = high security, not optimized for data probing forwarding. Hence I agree = with Olivier. Nevertheless, in the context of ALT, may be worth to do some = experimentation with the data probing, just to shed light on wether they = are really useful or not. IMO it fit with the "experimental" nature of = the WG. So, for the specific case of ALT I agree with the reply of Vince = (http://www.ietf.org/mail-archive/web/lisp/current/msg01925.html). Luigi=20 > Olivier >=20 >=20 > --=20 > http://inl.info.ucl.ac.be , UCLouvain, Belgium > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From fcoras@ac.upc.edu Tue Jan 12 01:55:50 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 551363A68FC for ; Tue, 12 Jan 2010 01:55:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.67 X-Spam-Level: X-Spam-Status: No, score=-1.67 tagged_above=-999 required=5 tests=[AWL=0.930, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5E5-1UVGMjU3 for ; Tue, 12 Jan 2010 01:55:49 -0800 (PST) Received: from gw.ac.upc.edu (gw.ac.upc.es [147.83.30.3]) by core3.amsl.com (Postfix) with ESMTP id 33E223A68F3 for ; Tue, 12 Jan 2010 01:55:49 -0800 (PST) Received: from [192.168.0.14] (81.184.58.60.dyn.user.ono.com [81.184.58.60]) by gw.ac.upc.edu (Postfix) with ESMTP id D58DC6B02E4; Tue, 12 Jan 2010 10:55:44 +0100 (CET) Message-ID: <4B4C471C.8000408@ac.upc.edu> Date: Tue, 12 Jan 2010 10:55:40 +0100 From: Florin Coras User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: Luigi Iannone References: <20100107162425.9D6B26BE58D@mercury.lcs.mit.edu> <098F66D4-56C3-42E5-8CDE-FF3C7AAEEF57@net.t-labs.tu-berlin.de> <4B4AFEB4.8010605@ac.upc.edu> <4BF0F799-6ACE-482F-BBB2-09BC8397F537@net.t-labs.tu-berlin.de> In-Reply-To: <4BF0F799-6ACE-482F-BBB2-09BC8397F537@net.t-labs.tu-berlin.de> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: Noel Chiappa , lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 09:55:50 -0000 Hi Luigi, Luigi Iannone wrote: > Hi Florin, > > On Jan 11, 2010, at 11:34 , Florin Coras wrote: > > >> Hello Luigi, >> >> Luigi Iannone wrote: >> >>> Hi Noel, >>> >>> On Jan 7, 2010, at 17:24 , Noel Chiappa wrote: >>> >>> [snip] >>> >>> >>> >>>> As to LISP, ITRs could refuse to forward traffic from sources they are not >>>> supposed to handle, but the problem is 'how do they know what sources they >>>> are supposed to be handling'? >>>> >>>> >>> Can't they just check the lisp database? >>> >>> >>> >>>> If they are also an ETR, they know, >>>> >>>> >>> Isn't the contrary? Current spec do not mandate a mapping for the source address of a packet in the ETR (unless it is also an ITR and there is bidirectional traffic). >>> >>> If the ETR has a mapping for the source address in its cache, then it do some sanity checks and eventually drop the packet. >>> >>> .. or am I wrong somewhere? >>> >>> >>> >>> >> I might be the one confused but isn't Noel speaking here about some sort >> of uRPF? >> > > Oh, I see... I misunderstood. > > >> Meaning the ITR should not forward packets from within its >> domain if the source EID of the packet is not from the domains >> EID-prefix. But the boxes that are simple ITRs don't know the domain's >> EID-prefix, only the ETRs know it (they use it in registrations at >> Map-Servers). >> > > AFAIK the Cisco and the OpenLISP implementations do the check on the ITRs. > Further, even if the ITRs are not authoritative in replying to Map-Request, they still have the knowledge, since they have to have an entry in the LISP Database, otherwise how would an ITR select which RLOC to use as a source RLOC? > > Good point. I managed to miss this due to the restricted model I was considering. > Or I am mistaken again? > No, on the contrary :) Florin > Luigi > > > >> .. or maybe I'm wrong :) >> >> Florin >> >> >>> Luigi >>> >>> >>> >>>> but the >>>> design does allow of exit-only (i.e. ITR-only) boxes; handling those would >>>> mean more configuration (bad). >>>> >>>> Noel >>>> _______________________________________________ >>>> lisp mailing list >>>> lisp@ietf.org >>>> https://www.ietf.org/mailman/listinfo/lisp >>>> >>>> >>> > > From dino@cisco.com Tue Jan 12 10:10:36 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3099E3A68E6 for ; Tue, 12 Jan 2010 10:10:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2a9kUMrOSZ5C for ; Tue, 12 Jan 2010 10:10:28 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id E53893A68FA for ; Tue, 12 Jan 2010 10:10:27 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAIpJTEurR7Hu/2dsb2JhbADBPpRvhDAE X-IronPort-AV: E=Sophos;i="4.49,263,1262563200"; d="scan'208";a="465587025" Received: from sj-core-5.cisco.com ([171.71.177.238]) by sj-iport-6.cisco.com with ESMTP; 12 Jan 2010 18:10:05 +0000 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id o0CIA5Ht020499; Tue, 12 Jan 2010 18:10:05 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 12 Jan 2010 10:10:05 -0800 Received: from [192.168.5.140] ([10.21.75.161]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 12 Jan 2010 10:10:05 -0800 Message-Id: <08094C15-C812-4FF6-B824-A50B3301B88B@cisco.com> From: Dino Farinacci To: Luigi Iannone In-Reply-To: <4BF0F799-6ACE-482F-BBB2-09BC8397F537@net.t-labs.tu-berlin.de> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) Date: Tue, 12 Jan 2010 10:10:04 -0800 References: <20100107162425.9D6B26BE58D@mercury.lcs.mit.edu> <098F66D4-56C3-42E5-8CDE-FF3C7AAEEF57@net.t-labs.tu-berlin.de> <4B4AFEB4.8010605@ac.upc.edu> <4BF0F799-6ACE-482F-BBB2-09BC8397F537@net.t-labs.tu-berlin.de> X-Mailer: Apple Mail (2.936) X-OriginalArrivalTime: 12 Jan 2010 18:10:05.0147 (UTC) FILETIME=[777AAAB0:01CA93B2] Cc: Noel Chiappa , lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 18:10:37 -0000 >> Meaning the ITR should not forward packets from within its >> domain if the source EID of the packet is not from the domains >> EID-prefix. But the boxes that are simple ITRs don't know the >> domain's >> EID-prefix, only the ETRs know it (they use it in registrations at >> Map-Servers). > > AFAIK the Cisco and the OpenLISP implementations do the check on the > ITRs. > Further, even if the ITRs are not authoritative in replying to Map- > Request, they still have the knowledge, since they have to have an > entry in the LISP Database, otherwise how would an ITR select which > RLOC to use as a source RLOC? On the cisco implementation(s) we have a "database-mapping" command that is configured in both ITRs and ETRs. It configures the EID-prefix for this site as well as the local RLOCs used for the site. In an ITR- only system, we need the database-mapping command to know which packets are candidates for encapsulation (as Luigi refers to above). The ITRs also use the "database-mapping" command for setting locator- status-bits for packets they encapsulate. Dino From darlewis@cisco.com Tue Jan 12 10:53:13 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A0E2C3A6A61 for ; Tue, 12 Jan 2010 10:53:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cghCxcKPoLdT for ; Tue, 12 Jan 2010 10:53:13 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 0BD353A67E7 for ; Tue, 12 Jan 2010 10:53:13 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAC9UTEurR7Ht/2dsb2JhbADBXpRthDAE X-IronPort-AV: E=Sophos;i="4.49,263,1262563200"; d="scan'208";a="465616736" Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-6.cisco.com with ESMTP; 12 Jan 2010 18:53:10 +0000 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id o0CIrAt9010976; Tue, 12 Jan 2010 18:53:10 GMT Received: from xmb-sjc-213.amer.cisco.com ([171.70.151.153]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 12 Jan 2010 10:53:10 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Tue, 12 Jan 2010 10:53:09 -0800 Message-ID: In-Reply-To: <4B4C33A1.4030801@informatik.uni-wuerzburg.de> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] LISP Interworking: Proxy Egress Tunnel Routers Thread-Index: AcqTYgBRDANNWscWStiw+T8VEFWUVAAVkp4A References: <4B47C5AD.6020204@informatik.uni-wuerzburg.de> <4B4C33A1.4030801@informatik.uni-wuerzburg.de> From: "Darrel Lewis (darlewis)" To: X-OriginalArrivalTime: 12 Jan 2010 18:53:10.0705 (UTC) FILETIME=[7C978210:01CA93B8] Cc: lisp@ietf.org Subject: Re: [lisp] LISP Interworking: Proxy Egress Tunnel Routers X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 18:53:13 -0000 > Hi Darrel, >=20 > thanks for this clear explanation.=20 My Pleasure. >One more question that was not=20 > addressed in your previous email. I guess that the ITR is configured=20 > with the address of some PETR outside the source LISP domain and uses=20 > this PETR if needed, right? I mean the PETR is usually independent of=20 > the destination EID? > Correct. The Proxy ETR is only used for non-LISP destinations, and is a tool for the source (the ITR) to use. -Darrel From jnc@mercury.lcs.mit.edu Tue Jan 12 14:05:29 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3BC913A6886 for ; Tue, 12 Jan 2010 14:05:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mLL3o3rpmp4P for ; Tue, 12 Jan 2010 14:05:28 -0800 (PST) Received: from mercury.lcs.mit.edu (mercury.lcs.mit.edu [18.26.0.122]) by core3.amsl.com (Postfix) with ESMTP id 4FA8B3A68C2 for ; Tue, 12 Jan 2010 14:04:52 -0800 (PST) Received: by mercury.lcs.mit.edu (Postfix, from userid 11178) id 0BEB66BE597; Tue, 12 Jan 2010 17:04:48 -0500 (EST) To: lisp@ietf.org Message-Id: <20100112220449.0BEB66BE597@mercury.lcs.mit.edu> Date: Tue, 12 Jan 2010 17:04:48 -0500 (EST) From: jnc@mercury.lcs.mit.edu (Noel Chiappa) Cc: jnc@mercury.lcs.mit.edu Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 22:05:29 -0000 > From: Luigi Iannone >>>> ITRs could refuse to forward traffic from sources they are not >>>> supposed to handle, but the problem is 'how do they know what >>>> sources they are supposed to be handling'? Well, you all may understand this, but I'm still sort of confused. :-) So let me try this again. (Although, to be brutally honest, I have now forgotten what the basic point was here! Was it something about DoS attacks, maybe?) > AFAIK the Cisco and the OpenLISP implementations do the check on the > ITRs. Yes, _if_ your ITR is configured with the EID ranges it should accept/process/encapsulate traffic for, for whatever reason it has that configuration (perhaps it's also an ETR), then yes, you can do such a check. However, I'm still not sure I understand why a box which is just an ITR would _have_ to have such information configured - and if it is a requirement, we need to document that in the spec at some point. I mean, I can imagine an ITR which is only configured with 'this is the local, non-LISP-encapsulated interface', 'this is the external, LISP-encapsulated interface', along with appropriate initial configuration (e.g. the address(es) of Map-Resolvers, etc). That configuration might even be implicit, as it is with the small NAT/router boxes that are sold today, which come wiht a 'WAN interface' port and 'LAN interface' ports. > Further, even if the ITRs are not authoritative in replying to > Map-Request Umm, ITRs don't reply to Map-Requests? > they still have the knowledge, since they have to have an entry in > the LISP Database Why/where does an ITR appear in any LISP database? > otherwise how would an ITR select which RLOC to use as a source RLOC? A simple ITR would just use its WAN interface address as its RLOC, no? Yes, more complicated configurations (e.g. an ITR supports a number of a different sites, and has some reason to use different RLOCs for each site) would need something more complicated, but that's just gratuitous complexity... Noel From jnc@mercury.lcs.mit.edu Tue Jan 12 14:07:31 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0A2D63A67F8 for ; Tue, 12 Jan 2010 14:07:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eRB23qfsuU6Y for ; Tue, 12 Jan 2010 14:07:30 -0800 (PST) Received: from mercury.lcs.mit.edu (mercury.lcs.mit.edu [18.26.0.122]) by core3.amsl.com (Postfix) with ESMTP id 44CB93A67B0 for ; Tue, 12 Jan 2010 14:07:30 -0800 (PST) Received: by mercury.lcs.mit.edu (Postfix, from userid 11178) id 7CF6A6BE597; Tue, 12 Jan 2010 17:07:27 -0500 (EST) To: lisp@ietf.org Message-Id: <20100112220727.7CF6A6BE597@mercury.lcs.mit.edu> Date: Tue, 12 Jan 2010 17:07:27 -0500 (EST) From: jnc@mercury.lcs.mit.edu (Noel Chiappa) Cc: jnc@mercury.lcs.mit.edu Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 22:07:31 -0000 > From: Dino Farinacci > In an ITR-only system, we need the database-mapping command to know > which packets are candidates for encapsulation I suspect that that is, in part, because you're working with an operational model where your xTRs are immersed in a sea of 'normal' Internet around them, and the LISP 'backbone' is totally virtual. I.e. there is no such thing as '_the_ interface to the LISP backbone'. I am really hoping that we soon get to the point where there really _is_ a 'LISP backbone', on which the only routes that circulate at for RLOCs, etc. But I digress... > The ITRs also use the "database-mapping" command for setting > locator-status-bits for packets they encapsulate. Yeah, that I can understand - although presumably they have to have some mechanism to monitor their neighbour xTRs so they can make sure the Locator-Status-bits are filled in with good, up-to-date, info. Noel From jmh@joelhalpern.com Tue Jan 12 14:19:21 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5890B3A68AF for ; Tue, 12 Jan 2010 14:19:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.383 X-Spam-Level: X-Spam-Status: No, score=-3.383 tagged_above=-999 required=5 tests=[AWL=0.216, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dmvoxm9ZlCxV for ; Tue, 12 Jan 2010 14:19:20 -0800 (PST) Received: from hermes.mail.tigertech.net (hermes.mail.tigertech.net [64.62.209.72]) by core3.amsl.com (Postfix) with ESMTP id 83AA73A686A for ; Tue, 12 Jan 2010 14:19:20 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hermes.tigertech.net (Postfix) with ESMTP id 717C2430254 for ; Tue, 12 Jan 2010 14:19:18 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at hermes.tigertech.net Received: from [10.10.10.102] (pool-71-161-51-192.clppva.btas.verizon.net [71.161.51.192]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hermes.tigertech.net (Postfix) with ESMTP id EC7A84302BD for ; Tue, 12 Jan 2010 14:19:17 -0800 (PST) Message-ID: <4B4CF565.60405@joelhalpern.com> Date: Tue, 12 Jan 2010 17:19:17 -0500 From: "Joel M. Halpern" User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: lisp@ietf.org References: <20100112220727.7CF6A6BE597@mercury.lcs.mit.edu> In-Reply-To: <20100112220727.7CF6A6BE597@mercury.lcs.mit.edu> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 22:19:21 -0000 I thought we could use the appropriate negative response from the ALT to determine that there was no such EID, and therefore the ITR would know to send the packet(s) normally for that destination address from then on? (This does mean that packets to the regular Internet incur a higher probability of needing a query, unless we can somehow generate negative blocks (which we can't in the current format, as the negative has no block as I udnerstand it.) Thanks, Joel Noel Chiappa wrote: > > From: Dino Farinacci > > > In an ITR-only system, we need the database-mapping command to know > > which packets are candidates for encapsulation > > I suspect that that is, in part, because you're working with an > operational model where your xTRs are immersed in a sea of 'normal' > Internet around them, and the LISP 'backbone' is totally virtual. I.e. > there is no such thing as '_the_ interface to the LISP backbone'. > > I am really hoping that we soon get to the point where there really _is_ a > 'LISP backbone', on which the only routes that circulate at for RLOCs, > etc. But I digress... > > > The ITRs also use the "database-mapping" command for setting > > locator-status-bits for packets they encapsulate. > > Yeah, that I can understand - although presumably they have to have some > mechanism to monitor their neighbour xTRs so they can make sure the > Locator-Status-bits are filled in with good, up-to-date, info. > > Noel > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > From dino@cisco.com Tue Jan 12 14:31:13 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EACFF3A67F3 for ; Tue, 12 Jan 2010 14:31:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R5y7ft52RCRj for ; Tue, 12 Jan 2010 14:31:13 -0800 (PST) Received: from sj-iport-3.cisco.com (sj-iport-3.cisco.com [171.71.176.72]) by core3.amsl.com (Postfix) with ESMTP id E47CB3A68A2 for ; Tue, 12 Jan 2010 14:31:08 -0800 (PST) Authentication-Results: sj-iport-3.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: Picture 3.png : 18972 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAG2HTEurR7Hu/2dsb2JhbADBcZR5hDAE X-IronPort-AV: E=Sophos;i="4.49,264,1262563200"; d="png'150?scan'150,208,150";a="207371562" Received: from sj-core-5.cisco.com ([171.71.177.238]) by sj-iport-3.cisco.com with ESMTP; 12 Jan 2010 22:31:06 +0000 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id o0CMV54N019651 for ; Tue, 12 Jan 2010 22:31:06 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 12 Jan 2010 14:30:56 -0800 Received: from [192.168.5.8] ([10.21.112.149]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 12 Jan 2010 14:30:55 -0800 Message-Id: <323E033D-4571-4F59-B92C-4028B0A30D10@cisco.com> From: Dino Farinacci To: Dino Farinacci In-Reply-To: Content-Type: multipart/mixed; boundary=Apple-Mail-27--587070765 Mime-Version: 1.0 (Apple Message framework v936) Date: Tue, 12 Jan 2010 14:30:54 -0800 References: X-Mailer: Apple Mail (2.936) X-OriginalArrivalTime: 12 Jan 2010 22:30:55.0827 (UTC) FILETIME=[E802EA30:01CA93D6] Cc: lisp@ietf.org Subject: [lisp] Design discussion -06-(1) -> DF=1: proposed text enclosed X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 22:31:14 -0000 --Apple-Mail-27--587070765 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Here is proposed text to deal with this issue. Darrel will be posting to the list an entire diff file as well as the ID shortly. --Apple-Mail-27--587070765 Content-Disposition: inline; filename="Picture 3.png" Content-Type: image/png; x-mac-hide-extension=yes; x-unix-mode=0644; name="Picture 3.png" Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAkQAAABSCAIAAAA6klyiAAAPU2lDQ1BJQ0MgUHJvZmlsZQAAeAGt WHk4lFHbP8+s1rGEhDSEEBGyluzZyr4mwszYGWOXLRFRhCxFopRKlnZUiIwkJVtJkbVIkiVjne8Z 6n3f7/uu93r/ec91zXN+5z6/+z73Ofcz5557AOASciWTfREAAD//YIrlIR28vYMjHvsRQAAF2AES IF3dg8ja5uamMOXftN+9MBtuXbIMWySzn/RDw6xOMfqfr+W5LLX8G6W/YhwFXhAASAYW8HhsYi0G dtvE1gwcFkwOhjmeDOzu6UqAcRSMZSjWlrowvgljnMcmrmZgt038koFD3T0Yuh8AwHD7E7z8AcBO wViTQAxyh6cZ6xIIQe5+MD4PAELTzy8Ats/ZAcsl3ckUWJeTBmMxxrnAPdyIgQCo7wWAOeefMm94 D5UUAASW/inbxQoAXxgAFf/Cm7PcOCuI720QSVFhwxzEpgMAeoBOn5OAfcsEYC2DTl+5SqevXQMA +QmABl/3EEroBhfeCNQOwH8ab+75jwYSDg4jwCKAAqageMQ+JIRcQ4thvLFvmF1Y0Wy9uBecjdyf eGa3Km4jCJZun8TvFqWIlUoMSXHsVpc9JKe8d7siVmlauVP1nvrZ/Q6aIgfHtQt1LfXWDC4bqhi9 MnEw7T5iY9ZooWB50WrFxsG21h7n4OJYdXT+mJIzxeXG8QE3LncDQhDxMqnRY9yLxVvKx8DX2S/U /1xAEbkysJ7SETQU/CsUhOHChSPkI5VPbDsxHdUYnRMTGGsYJxq3dvJj/JNThQlxiV6nrZIOJsud EUnhS2U/iz5LP7eWtp5Oz4AykVmYC5gLK9nDOdTcsrzMi2GX3PItCjQvyxYKX+EsQhXRiqeufrnW U9JyvfZGVenlm+duRd32LbO7o1UuWcFRsV4F7mLvsd7HPWB/yPaI9TH2Mb16vmaiduBJx9Pnz6rq rtSnNIQ9JzXaNOm92NcsTuVvYX+JeElrnXjV0Jb82rQd1/72zfm3Zh24jtZ3CZ0HO5e6KrtJPdt7 unpT3+u8p30o73P7yP/xbf/pTwc+zX+uGiAOsg1e/CL2pXxIbYg6bD08MhIyih3NG5MZaxi3Gh// GvGN7duVCYWJF5NWkyPfg6fQU1k/RH5UTmtMN/+0/Pllxntm7lfkLGL27BzfXNG85HzFgsLCw99y v68usi+SFutorDR9WgytmvZribA0sNy9Gr2eSqfD8RcDURACOo/QQvIg19E7MU7YGmYNlk62VJw7 pzG3Oo8OnyN/tECxUIvwtIjwThNxwq4EqQu7g2TF9ryUD1QQUGzc56WCU72trqPx8YCf5qpWsg67 bqo+2iDq0FcjW+OHpjyH/Y80mfNZeFves1q0OWAbaldpP+K45aiek9+xfOcml3FXjJuYuy7BhRhO SvO47vnU6633kM+cH5O/cIAC2TjQiRIadD64OCQ5lBi2P3xr+EJEV+TdExlR5GjbGPVY4ThU3NTJ 3viGU2UJOYnxp/2THJMNz6ikiKdyp9LPfj/Xk1affu18UoZvpmWWyoUd2SzZczkDua/yHl0suZSR H1vge9mhUP+KQtGOYpbiefhtaC95cD3/RkKp503HW6TbJ8qS71wqL6kor3xW1Xz39b0399896H34 4VHf477q/poPtX1PBp4OPRuv+1m/8Bw0sjcJvpBulqNupy61vH1Z0hr5yqJN6jV43dt+582pt44d cu+Q7953lnXFdlv1iPfM99a/P/fBsU+ib+ZjdX/8J8PP2M+PBgiDXIMNXwKGdgy1D0eOSI28Hz01 tmesdzz6q9jX1m/+E1wTVZMWk7++p01JT1F/uP5Ymc74KfmzccZ+ZupX7Cz37M05zbnOebf5Xwsn f3P+LlwUWyyg8dOKlvYudS9nrHisuq8lrOfT8XR7ejq9ZSP+vMAYXIQgKBBaQKQh96MAqh/dheln AswyLGGsLeziuBSOZa5A7jEeB962rar8JQIsgh5CdcKsO8zxeSKDO3eJeYvfkhiRFJQyk47ZXSbT Kftbjk9eYa+Jgq2ihxJ5X5hylEqUaqRahDpFw3M/8QBBk3SQpOWi7ahjqWuqp62vaCByiNMQGE4b 9Rk3mVSY5h2OO0IyMzNXtRCzxFkuWY1ad9jU2ZbYRdobO/A6DDvePRrnZHZM6Nikc63LmeO2ruKu 826N7hmE40QZ4hKJ6pHh6eIl40XzbvI552vrJ+jX4386QD6gjxwfKBHYTgkJEgiqDyaGMIdUhtqE LocVhxuFz0bkRxpGLpy4FmUVjYmujfGLFYvtj8s+aRXPEf/6VEqCXiJIrDt9IkklaS658oxfinTK 19SSs27nhM/1p+WnO54XPN+fkZ/pnCWSNXrhZrZPjlIuIvdd3pWLAZe08rfkjxU8vpxa6HZFrYir aLK4+WrxtfgSwnX9G7tKmUt/3Oy6VXu7GH7LgsudK4wqVap23uW4B+7N3h950Pew/VHT48fVD2rK aq8/KXqa/yyvLrc+q+Hc85TGpKbTL+KaI6ghLeSXpFbSq8i2rNel7Y/e1L593vH8XUNna1dP9+ee ufcCH4z7Tn18+Unxc8Wg8RB6eHx0+avbJMcPuZmvC5kr1xnx38x98D0AMMoAZBsAYPsWAMtbAGQc gVMdJwC8xwEwZwfAWg0gPkkCxM0FAAUpgr/5gx8ogMOABGJADqgAVPAZzENskCikDplDnlAslAtV QFRoEKIhOBGSCB2EEyIUcR5RhqAihhF0pCBSFWmDDEZmIe8ju5BzKF6UCsoRFY26hmpFzaKF0IfQ Qegr6NfoJYwkxg6ThKnGTGCFsObY09hn2HkmGSYS01WmAWYh5qPMBcyDLDtZvFiqWJZYdVkzWYfY 5NkS2T6yy7OfYR/FaeOKcOscxzmonLKcF7gAF5lriNuau32L3pZ6nv08NbwavPV8h/g6tx7b+p0/ ehvXtlsCugIDgtFCIkLN232FuYWf7vDA8+KbRYJFxUWHd1LF7okXS6TsipD0kLKT1tstL4OXZZX9 vWdI7pX8/b0FCqcU/ZRs9mkoi6qwqMyrDqi1qddptOzvPzB9ENLapi2lo6Z7WM9Fn2KQeCjPsMKo 2fizycrhbUf2mTmbJ1pUWX605rIxtE20e2E/7kA/infSPubpnO3ScHzGTcKdQCghjnns9gz1avbh 8w3waw4QIAcHtgVJBMeFvA+TDz8TMXKCEr0zZjjuerx/gsZp3qSFMz2p1HPV6ZUZN7KKs0tzyy/e za++3HSlqXiwJLP06G3+O12VcfeUHgw+vlhr/YynfrDxafP5lzFt5Dcn3oV0Z7x/8vHzAHLIaLT0 2+kfOQshS0rL71d+rPat3Vgv3rg/+MBeYLIR/1xQBV6CL4AGcUFSkDbkAN8pKdA16BnUC80gWBBi CE2EAyIYjv4dRCtiHIlCiiK1kC7IWGQhsgE5jEKhdqGMUQGoHFQD6id6B9oCnYB+jP6OwWNsMWcx LzCrWGVsILYCO8UkzeTNVMY0zbyXOZT5GQuaxYwln+UbqzJrMms/2x6202yD7GrsOewLOBtcNYcA x0mO75y2nI1cSlyl3ELc2Vs4t6TysPGk8uJ4s/mE+cq2qm19yX+Uf2bbGYGdAnWCToLrQsXb9bdP CKftUNkxgE8VURIZFE3d6Sx2UFxSAicxv2tAskXqgXTB7mSZUFn3PRZyWvJye0UVeBSZlSClxX0/ lSdVvqlOqE2rz+9HH+DX3H1QS8te20fnpO4lvbv6rw3GDCGjHcYHTVxNkw/fOdJrjrJQtDxulWvd actqd9g+3CHBMetomVPdsU/Oq8f5XNXdjrunEZ4RJz2EPC29UrwbfSE/Tf+wgPvkGYpkkAecF/vC uMNNIhIjB6Pcohdj00/uiq9PsE9cSso/o5EydDYtbX/6j4yiLLvsbTljeRWXYgpsChWKcMXrJZI3 XG5m3m4uhyp17p663/FIrjrzCeJZRAO28UKzcsvAq8x2lw7hztWe8Q8v+ssHaoaoo4Pf0r/3TRfM fJ3tng9aoC0+2Ii/ODAD4aAItMC/IrkhZcgJioOuQ23QLwQ/4iDCA5GOqEGMIjmRmkhf5GXkGxQC /ob7o26iRtCiaHf0dfQ3jCwmCPMEi8ZaYouxs0z6TPlMc8yHmctYWFn8WbpZ97PeYRNkS2fHsMex r+PiOBAcKZxbOa9yyXLVcB/i/rQlkIeV5zqvPu83voytGlvH+XO3mQhAArWCoUIqQrTtT4Sjd+jh WfG9IldEfXYeETsgriQhvUtUcruUkPT23cIyu2T37FGXM5J32EtWSFa8odS0b1SFRVVJzV09X2Px gJfmFy2C9pguRR8yyDGUMaKauJguH0k3l7R4amVi/cU2wG7dIfEot1ORs6pLm6u7G51QTNLyGPFK 8VH0HfZPJasFjgXlheiHLoTfjDwWhYouiTWOm47PTFBK/JR06oxYCvWsTxp7enmGYebQhZgc4dwn F20u/SpIK9x9pbHY9epKSfYN5dLOWx5l6DsXKxQr2+563aM9yH4k8/hFzbHa+aepdZL1rc89mrAv SqhmLUuthW2m7Yg3lzsE3xV2SXfX93p8YOqr6ff5jBuo+GI3NDXiNzo6bvW1ZoJn0vz7qanyH9Tp dz+7Z6i/Hs6en/Odl5n/vlD42/D37GIyTYhWuSS3dHtZbLlwBbFCWnm1umc1afXdmuAaca1ybXn9 8HoNXYKeyYj/Zr3EyB+ARTfAN4CCN9XV2xj+9x5+viFwTbbRuOEnm7/bETO4Z+Bv5GBzRi3IB3+W g0Kt9OEezlkQJ8nLwOgPxhNc9UxgLATL5SM9deG8BthgbEqiGFjCGLYD2Xu7GpvDGAdjb6K/jdUf eTjZd6PGZXBSyME6DD4/jAuIQfp/OQ8iPa3t/uhSKSGWNjAWgzndPgEmDD5jLRqBqPfHNwTK3/eI KSyHfUbweAUbMfzngbE0MACucDXmAYhAFpgCXaD354mH5Xh4HADPEkEQzBvd4P1l2W6Mvf6Plix8 KzPshW7o+IBxGPu5eMVTYFub1luBOyxzBf5/JfJl8hPyq39HGyv6bqz6V8MEHv1vyaalTe82Z7wA AWb9lbv/1WCs7HePFJoXEKFu64mSQCmg9qF0UAdQmig1gEfxoQSALEoJpYrSRh1EacBzam+mHk/9 w5fNs3H7xx5NYD+IIAT2nwj7//ck/t+qwAv+D2OjdodPGWDgd6MggYGasmlxjP5fWzAxHK7rAdAN IEdQvDw8g/Ha8D8XRBm8kb/7Hhm8gvxeefA/b9l40O7w+lMAAAAJcEhZcwAACxMAAAsTAQCanBgA ACAASURBVHgB7X0NXFNXmvfDCkjQUIFRrB+vMmoX3BI6sF2ZtloDThf6YXy3unY09i3baeDtdPmY 3eKEXZk29jWDW0fg51qga7EK9AM6Y6xd3JkSFGwHxobW0BG6QoFRqMBAKLEmhri8z7k3Cfm4JxCN bbHn/PiRc899znOe5/+c73vveQImJiaABYYAQ4AhwBBgCMxkBP5iJgvPZGcIMAQYAgwBhgBBgA1m rB4wBBgCDAGGwIxHgA1mM96ETAGGAEOAIcAQYIMZqwMMAYYAQ4AhMOMRYIPZjDchU4AhwBBgCDAE 2GDG6gBDgCHAEGAIzHgE2GA2403IFGAIMAQYAgwBNpixOsAQYAgwBBgCMx4BNpjNeBMyBb5VCFjN ZrP1WyURE4Yh8J1AYNYLL7xwSxU1tNXm//LV3uDYv46ed0sLcmP+TZXrJobfL2+FXv3asoKSX+tH 5q6JW/IdnN30asteLPl1Y2N9Z8DKm66lxlcT5/5Qf/fPH1sd6HfbM4bOCFj7jx95dzR8+ZJ5s52T 3eNttfDLVyE4FvzY/2jLoOTXMDIX4pa4F3ej1/0d1erfvlHfZZDErJ5zo0yc83EMj33Y8V/nRhes +V9Rzrdu17if+i5zR258QHx8QEDAjlYzWDsOYywew47D5tCIq0VFBz+6fCsRHNodEHC4y+xcRODX Ua5zgc5xAXmcb99M/FboFTQvsrtIvbOwxXgzks3YvEFzIu+MXmhqVk+7lnqzr1gC0iURbCTzqA7G 6h3YK2C3kJyczPUUh9uQpqs2F9P4FIzsyC1p6XVpyB58bAkdb++UpW9XvHWeRmBLD42AoiLwb/8z LxKK1FDYMkXRvtwe7nxbfUGtPnfwc5Mv2ei0lwnDgoLz6uzGBgOd7Ha646fBLGSx9BGJXi+pqM9b HQKByx/SNdZE6/VJaYl3rkjOLZVCSCiiZjQKVFOzEYPgvoxVkF4AfevlBoCxqy53xDdergsfxwXZ Pprm/pGQPA4+dH0JyZSbVDeslxkLpsg/P2FzcZUMYLZzF3yTck5DX2H7milSepHfUZZTxIryC9Yq JxpbdNGazXlZWRlbpQBBnncFyvVmX/G2oxPaXcnOSPI86fVHGAdPSbymUPWl2JFKTytFAAcb6TTl F8Vtr6mqqdouaWgYTuYiC5FBxA/+rjgnsqFBUlFTU1X8SGVRdtJyVe+UljO2PLtdr5BBZIiAyVxU WJEM9v4HhPof7JVAsKaYjUBpL5CwGbj24lIQjQ9PZMY5vgu520XcoxXFczFtcShYjaMGz47SbDIY TB7J182G0aGhUYMn74RHj03k6bBVwxzXdi3Ixy6N1TQ0JIiSnWCKX7o82LehqB4KTMHPt9t40LBf gklfDJLS8YmJ5lJlcf3gxES7DCSNY4S3vlQGUoVCwgmmKO0x2Qo09TTmYAfCB3lxO0c8pq+QgESe o7LRy4sd9IJyjrQ3VpUqkYdMWarB9lBVox9EKUjwqVw+i+D/sc56h5wSRXH7CKHqrMkBkFa1ozKd SlRNIimu78N0L/II6jthaleg9BJZla5doyJ1Dy80XnX2Va8RXZUDZqmyCm3DB1Nfc6GC3JHlqIiC 0lLOAhP+klOQjxf7OtPLFTKJvIKXR1B+fQXCJlVVVKnkvArF+hGb3XsaKxz6omWKdYQNzV52MCZ0 xVJJoc5xiRHBcr3Zt72CGE8iyalqd+YjWH+84OCc1xH3Ir+gvpjRGU+wty9Mp9E7ynKLCOLgq/wO nu2lUkmx3nGJkfH2UoBSvldAtmjW5rGxKoVEIpXiKlfTN95ZRWyNF/IKW8Z6JUiKm/UVMjeTObOd jJfKJqSKCQngkeoTitIJe/+DQExIuURMlxdP8LUNs+mqCCX/p6ya5NPXPKGQkvQcFckoLbXdEuRj aieUEtmErn1CJeO4SSa8teuximKAF+x/exTNBlt9Nl2uz3nZnl6s0tnSx3WnlBIH/csq/VWbOCN/ qlO+IpPskeW8LicMi+3tWpCPtV35skSyR5Lzfn39+zm8AMVtjk5iUvupYsLy9HykQubSl+UKm3aT ek3F0Of7flqZAQSGLQd9nX6o40CmOjv3DYN5HCB6jmPa1NCcsL+9R6+RlWceOTuEbR4MLU8sX9eN dXXMZBrB6pwdG7a7H0Ac+8iuHKgsKvir/foefZ2sMrvsQ0ymBtPQxbNnyFZD9/nWc62tZ8+2Dl11 mqZMu1xqAUPaB1amnEuqaB8cGexs3jyQHRuR22WFZQ/uUEDDpauo5uLn3mpU6PWHPiVbqVR5KPpC yPL89kYlaLYnxu66lNasayxVPR0V6jmzdxXQF71MX0Fqqaa9Z7BPrxlWb3+jldtNNLQ8vDhp59VN jTrdP8RcKmoACOOK8JecFD5U+6I8y9cVLS5sbu9pb64xlmv0+jHekILyxz6SkSNpKEjfPvJATnOj JvpctiTip21Es96idemranA4GUd9owH4KTHNXq6wulwJlku1L6AlH2lv1+9M1msvOe0SUOoPFQcX ESYv6PIL60trXzR8JkvyiAni4Kv8Dq5Xr6FJsNVMBtP4NeBnura0YewG0nILoxsa9IpnpYsClz2W qwRcvJX+i2wVklh7a1PU0spn1wSNjU1y8R5raIb97aDXQHkm2PsfWL4Ox0oYM8FIO0A2hO228fgK x1YN9AwSevV2sLcXWJwEVzeBTgcxl8CpvQjzCVkO7Y0AGkiMhUtpoGsE1dMwZbtGCcKVqmgpWMqV Z/REnlHtw6UpRRZ5RWq9Zn2h1FCQWPx8hwVvmDo6myOjlDWPN2sSFXClYNfpVkw199dGvJamHtBE h4uLuisJBx5sKh/Rwjmgt+iLzqSknNHKo8g88OwwmsDXICwP7vcg84YrleWQo1yCzO16+cp+OvQ+ D3+0DCadFGQ1mkKpDCfV0tKqQpw78XMdfbEUVM18vjoFSApJfLCxEMWTK4uLCwsLi0uVZE0iaeYy 6HFbQNnI02M3z9PTiuXScRUIpXrHjMtG62u5gkXg7A9ASdZcfBhrxHZXqMPVmalUghFeRROuBaTF jnm9gDxe9EVWmF1WaoPIXhL111e9+pprcmRcb8H9KybCT7S76tVcKMWFNSrjLzm98BG0b2cNzr4V nXalTZ11qsI63qKC8ttAq8BBiwvjerRTYTOqNoIbAWS1qVQVFmOosK/YvNiLcPBcmVHKRVoB+3JC kH9oHeflAr3+4M6BT/WcJr+wvnT8hekd8ntGaDj4KL+NsSfOY3pcmYFUJsO1F7GcymZ3DjoVaXqD 9XinpodfqZhq5NgnYP8wTiptTk2fybaC8ZScpDjWWN+SiLCUmMqvzGTN1yYmrulkL4DsXdKftL/P ra72yFW/KSz8jZJfORWS3SGT/qPSnFdk0pdl0j1k3cbT696VYTznFGkXpr4asnR7mbRrOp+JCate jmQvyPnu13TNvSOliuxyQ1ge0k7JmozXq1lql9Mlq58uAkn18UsIid4q1WyRaQqb+9I+eVayfSco ahwLM8lsW3RxghS+JPFxnI6B5IGku5aBBecZwVn1G/5p3l1iThScqM2zvdEzb6EUzA42FEGNV3GG do3MQELcKHwr1y0zf3kNec8TOW7h2wIYJ5MdosDoKG4C80I7KPDZoIA83vRFVsOQfF+8E4spoj7o NXRycdIWlUY3eHS1GPpUYStxFW2THkQOvULvsJXoLzm98RGy77gFVzNLHfKErEjdlceJRJGf4D8M URH2HIGh9he2wlOVdRr5SM/nl8xfXj5WkJ19+X9N7En2Zi+uHPdKRi1X2L42+Dx/qPWHVFlf6jmt vgnrS8dfmN5TcFuKFxx8k9/Gzx1n8qASW5JSve/pO8b3hUUtXhRua8VxjxdI0xNrWzMfeD9XL6/Z tIzrrMw9mkrQw7qAnTzDhp33th/dFkOVH4ezkmQwvwx5CYSmLBm+5OLa3ZBSC5pCALLMgblzIWge rE2AoZOwIA00OpCuBugDbC+6MUgQQ9kmyEyEiV2EGAPyObgVzmUAjQ8hMkJ8GFSaIM69XyI33QMP jDh0Ft4IxT7FGEhSxvl11Zy7Yu/8Pj51q9lQ0d47tmGx2Nx9SHIiE8JV9bJN866kpWsygaMPCiTd 0Z2RpDWEhC8lnVUQ6XxpfPA+kBJxRZiSyPVkIcHO0po7Pv2w5xosX3FfzDzndC6L0z9z9+uC8thJ bHqF4TUnpz3dn79+22YEEEWuQsmkP1y9KHbD35PYX32f09489OWwfnQQe300UN/gsP6LSxhfEHMv gL73yoL7H9748ENrF8Of3tpXS26Aue8yoef2wox9mPcLPi/JLxzES3H5+sfPeoxGQ0dTbf6OXG0/ blD5Wq4w79hUfDa28+dl2iGz1WzorVamN4B8w+pw1PeuZFBXvNdvNPa2vHmkAYYv2+UUkoeqL3Id 6hvUw+W+HsPQ0JCB01tYFj7VN72sY1cw24ropWIYOfvuITXAl4N9CPPy+zYBFKBe/QYErUyeifsm g6iAv+Sk8qHYN+ZH2wHUz+493m8wGnrbyjLwxbcSxIImPyo1OxrKZemHm9r6e9sO5z5Tjo+rUEtz a3pSWoMlRpGXl7erIAetd/4yV/eo9jIi7vhHauklEuGevnspF4TsS55vD/VjdqyxMDqIEbzAWkiv P77Wc4r8FH2p+FPoaTWOjoOv8oORVG8O5y84nPnXLqzmnr7L2Jq+F7EgavHkSEbkESe8XCzLTlyQ uFNf9cKjtnl3SEzFGIaRvp7OGnxYLaso8TKSES5m4CxCoji6DA7DF5dIlOt/4MoCeHgjPLQW4E+w rxZpgWsvEL0UYATePUQoB/vIf669QJkWDAZoKgOuvRB6Gh+rGYb6cNSFvh4YGoKp2nX/p6/vN2Ax la+dadKeKqvEDcqPD5zsN8b+YAsp/SvdsHVuVAi0dxwpuKAdDwwcv44zAJAE34Ht6Qw+3+Hom4bN kQvvwvSd7zxecvpw7sEkbNVgSH+z00DjYx1u2n1oLxYHhv3P1+TnH6vlHgLhNRdGP4x9JyXtREqr 08a5/Z7LL00eh14HTmm1p17TEDn3Hr84ZS/nwny6F35a4RE2ZOdKyj+071MBqLgXIvrqlLwo+IJH T5XcFud25/qacXfNEaSqKvK+CL/ngKk5dVhbceuJBH5nzIuonXU4w7IFhaqqzzTha7lemPc1T75A AZKcevtTXHwwzu2L2Au2v2uArDzlwUTv+tq55HR63TXxXa+Rqhy7mDIFv9+Yo+lBedpr0Ep8kPCG 4HdK/SLnlPp62ndQR14RswWpoo5/02aCJv8Y7tJJc5S2KiWR45s/WCjuvthSbIxkNfybRdwLHXYg bPe4d0MIH9egaCcmoJVLChGwr3u5yBJfZCDEgvXnBuq5cH1zL3dSX0E7esGHyCoQhHHwXX53nPnK Rt5mcgT7K0iTUow1E+PIqzx2via58S/4TGZxi9UpbTuNWA2q5LY4/3SgucJ2SXYgpRNV/KONkYkc iS1dppiQcXGuvUzUqOz0dgL+yYIgH32pnZh/lyRnwmu71vPbiS+A9PXCwv+QwAu4NQfKj0g7HbxQ I+c2EvlExW/qSLW6qlfa3wqRvJKjKCZZSj/HO+PN9vc4YI+Nj4LbdRTkM/Z5Bc/W/l/Rjvuc9tD3 EdnYlFTVeZWdo6bI49BL8h/uetkL8dtvAHJy1KVvImI1GIyBIrE4JPBmS8eXja0gCpkmI1/LtRoN yD4wPNx1UxELNQFKLyC8sDy+livA2GuSMH+z0WACUbinnNQbwny8Fi1401c+BGfgKoQzOyExzWXx omtvTWTFOBOSOL4EDyEhgO+ko2nCxS4Vy4u93NmQa6Fy7XTC9rXfdf+l1B93sqmuheT3pi+uFz3a l1d6YQG84SCcw2+puHExLp7vakW/McfKQtZMIjG4dRtGXCWJQKi9gAl35Fw7ASIOhY/fJMXvH0j/ IwoVh/C7ghxn3IuC2WJxsEsdJ3csRsM17Jc8YRPmQxHTfPyISNYtqXvuXGokhcQ1mSqPK9ktuvrG B7NbpBdje5sj0HU8f6VMDVK5PAxk+w5uXuHZv9zmCDD1GAK3GAHj4ZKw/Xc2ntuC27AzILDBbAYY iYnoicBQ28nftV0JDrZYrgTHPbIpbr7H5NQzD0thCDAEbl8E2GB2+9qWacYQYAgwBL4zCPjxbcbv DGZMUYYAQ4AhwBD4liFwCwYzi9l8/Vum5TciDsPh64Gd4ewdZ4aPd3xmyl1mx6ks5e8nDZa2HWpJ ZVSNKXOz0Bt+U4nD3TdePFnUdBaC8F20tOdT194wn2kV5kqEb+MEhYY7vy/ket/9ikrvDxzcC/N6 jR4fDrR+CqEJuZs2z/dKOeVN7/hzBXWJgkx3LPpx1v1xU3K7tQR0nG+pnJ529yP+gojdIH86PoKl +DHRcLHp7ea6DhNEhCU8+fDmZcFT8PbVXr7y9yzeSz33tK9n9ptJofGnpcPXbkd0NaV67YOYx3Iy kpfdjKZfZ15/D2bXx8kXhl8NC5zGMW21+j6vKrhQScjnLnzu6xzMjE2yX62DRJ32Ue6wgCkF9kLv DxymLN+ZgHMhgZ8kSmV/u3m+/VgMZ4Lpx73jz7mWwIIAOhfuuD8Ovx7/JgMd51sop5Dd/Yi/IJ43 yJ+Oj2Ap/kq0Dp/EEwId3OJ/aFqGX/x6DT7Z6wb4exZOredC9vXMfuMpNP60dCzp1toRXRotWNpp emrFpI1srqbufOImB7Pek7uXp9XiQWUN6FRFItuc+085T63FN4/R9c/KLVqpFM/cxA++uSDJ0bfs n9ZhKbYM7j/+3mYUJWiy+0b+McP9Renr3Gda+An+6JDRfRPSjC4MuDMabMLFPHh0PLuRfEsZ5OK8 gL9NcYVA5S9MT3i5uySwjnY14HG7gqetCLk28EZPwwERMOH3T87q8moJyOO4IRC5biSgXQd02cDj OaULCXq57uy9409zLeHOxX5tNA4ZTHgUBrracPnsny6Pu10IJw99bezpONPkpNcHwnI6LjAE7T4l /t7Ltanj9OOG25T8hfGk4+PG31Gyz3IK1uervchQtkY/8YsJ/Ns41UiGxL7Zi8ZfqJ06VHOL0Oq5 oH3d8rpf0uonfqro4XKFxp+WTsqi29GzHyP0nDyk1U0nCLk0umFXU24FRsXeKwH9cNLTdXU1j0Rr CtLXPbC3CWnQ9U+pCo+SlpTWYNBoakpl+m5ybPtNBH+uzMwDxx8u3QVzI2H+TzRPbiPj2WhTxivP XZgTDQYNjhOyKKlmAH9z9Hn7r57OUHzcHB2eLDYUVZLT0WQ1T1ZsjrZN9AND57gPh1gtBrTKypQi cjwTfreo0j2pTIDf0/jHiYTo5wX26nZv/G1tZLBkVVBlOX4ZCYrm7H9fMy/QOND6TtMxvO7uqTuu 67aYg3+QsGGFCPGxtp4uSD+lts0f5qr0z+5C5nR6LNcDByIxGLqP//xNWTl3FJwkXFW+/fk1kSE0 ebgcwv86WvZuPbnTPp8B+frOow+uIH4L8Ag2qJRwZ9NAsKL5/xK9aOV2fJAf2/iedMGu/3z6wfLS rYcMDcn3te9/MIYvUhB/w8WT//Ze6XsGSF4s5pZmwuI5Up3tJZ0LDVekujxtgshnHCj60nGmyOks j63+ID7XO/KLtr5ngeS/2f8YvJtypgjlL358MOtu4c1aut2p+AuX64DJI+JM74Qblb9gvUKutHpI 4S/cXjykm0yglGttOX1Q06lFurG+N/bWHFsS9/S2mEWT2TxitHrlLOekvYDGX7id+lrP6fb1kNue QK+fHv0VvZ/xUq6gHb30G5PyzJXLoK/bMrz9oeN5icK7hXiWXd3pOjKJf+P15Z9FXrFA3I9sH7qM Q5j+2IGMQ+Xl2Neg667ijGXcys3c26RMX0f8bGBA10IHs2I8O2s7OCHL1udK4UiCNDU1LjV1XFaW npT5i5ZntGtWrH16y8eZtbMzNm+GoS5D+NoeOPjVdIdfO3fXX/+uzIJXhUcPX2loGOKPXcMjLIOv 4vn/Bg0sIY6zNAOgWIIrrqK6XkOoKBJdA2gGiirn5KhW4QlEmi1H1mtH6doIujD4Hyp/uusEYZcE PR+r0i+QLlo/sFN2Qrbl/bR3+viVhLBrAzo98vDAAdcl3dURR8hIplhVqFoi1RsKkg48wbl2FpbH 1UxOV5bWn5ORTK7Z3t64AY8Nx9HW9dw0VxcStHJFgSJA04wO4yg429Kgt0C30ZWPU5kYpbqWcCWb vOLtdQVk0YXFqxUNZApCThmlyUN1FeFNXwGcqXIK1h8ysfDNBYZXu3Pau+JPr4ccsec/Cm6ThK78 6XhiDgF8bPJ42MVXOenlmrras9WXSFNquKTeeb6grgfrGDX4bi8af+F26ms9n9q+bqrQ6ielvtH4 09K50oTsSHGtMtSxN5b0DxJlYrHCUqm5gk1bD/Zz3t1kx0svLo0IsS+upjyZcynkgGy4xq+5Atf8 nzwZNJzuJssI0/hs9BpWVl2du2Dlqzrrjzt//QP6oEhh7pLsz8EsJCq1LOvNXNviiitGvOZfHsCB Slb8VPFPMD38Jy+lkTOI8eyYuAcLKghlTk/W/l3bjjauxm5Z/+5n3JmeThI6BrcOXQU/Fbj4xUcd hlEuXnR88C4af2H6zw3LErO4cmXNmfv37FBjqaSLBYhLPdb3ODngURrfaPpX01ieKW8lr0lQ3D1b 4+H8wf9SF7WVE1JOJjo9COAAcOGPb2PWnA2dZdvydj2trV9FBndNVz9NHlKQYJjFHw9fKdP8vLLj i/joQsXdq5wIUa89u554GacMvF7Uctc8z+GADgDCn/7fFU4cXKIO/M+3kqeYOevbj2UeNT1T43bI oUse7oLHX7Kq/tiTeVlbyka2V0jnrsYTwanyUOwCdH0FcabJSasPMGtZ1jOVWEdxktn8s3NHM7Um pemofYXqqZcXu3PE7vhTy/VkzaXQcLOTu/On4Yn0gvjQ+PsqJ71c8bbMibEnS1GA4u0juMd4NDXO LrzAr8/2Ahp/4Xa6zMd6PpV9PVSg1E8anjT+tHQsT9COtH7jcs+HmEUle3/Po1llzzWSyW54Rdbd 1JXxorXb9h/9JXYXz+4u3rVnz/79e5L59RdmRIcPqvKM5JhlcRszFVD7+88xbejT0xo8AtrUU/tK ScnR071kwl/rw7nBIWHojMA5zJ4bLJKg34TA+StWhN/cRuHN5XYWyhbnGc52fQWBP/8fZ4rB45zD hdmz8L5tf9SKj9Bm2TwURDhmELPIlhnO1h18qC4MyPAnwJ9Kz49FtiyhpMe3PyQTz7kDr8JC5oXM CgnBjUSTWSwK8eLaQJAeOXBBEAc8OtKmUBCv3+Tjw2m7SJi1XP6AEn1TRMJwc19RgwWKXgsZU2aJ 0ZMGCTY+OMXhXUhwiYLlcjMm4n0DA/ffjgNJ8MCf5lqCEAsFG/42PSF85VPvPG0QB5NjxDH4gANV X75Ud5xpctLrg3cXGHwpLv8pdhfG31u5LlxtFzTciKcUEqZvX56hOz40/u18c/RwNcJzof2n2VEU OBuzcM2cltWWfiP2wvrjwZ/eTn2r5ygWxb4URSj104vdafxp6VzB7na0S+Peb4xz088RdBQA883G AfxBX0l4nOTkqx32nJO/Qi6r+Ls+uJqaZOceI1XBEfrb0XFHRSjpBonrH0mafONma3x7Xxj2WDcb /Lcyu95fjR4EagqO4QryyhEViVf3mzqO/KESH+Qcqj/xZ3w3d6CyVv8pinxQ+3q/rR8vWlm0I//Q ppQLuNaSPbRiEVzvPYx5q3ivBEeU1fm7T2rxfQlhFwb/00njf0e8sOsELy4JxAvvIculj3ftPrE3 Y19A2F5R7YCV5toAtRCkB0EcrsPSlcmYRX0ibXd9bfWxjHXnUV/JhhULvMgjbFvLhfIz6vKrojRp /sGHVIQmmIzPDj5uLiRo5dqYX8kuOFby/G8y8RJdTjQNW2n401xL2Ph4/PD20p9fl3Hs8PEPyhDP iOL1OpPvOFD0peFMk1O4/gQGTuECw0MvTBC0Ow1/WrlCjEkaDTcaf6p9KfWQxt9XOanlgrmpfu/z 7x1BXd7SqvKr849ze0o0fX21F254C/L30k5J0dOu50graF+a/ECpn17wpPEXTqfY0VEf3FyrrIon W19Fp2LjS5JFr24hc8cgzoEhVQFU+Ba60ALryEV0j/Ulvq5m6Gip3bE4DX0gPBETgseB9/V9CfrB zqEhU1TMzS7KOO38d5yVpS1DLeG24RywKfTPbs0+mEK67SjV5qDagkt6ebRC340PFOW6vIP6V8PS DSCPklUOaCThygNbC9biW0/8FxUOHhgJLx3LIq9HDnXW/qxmC/e2CLmtiK97eX2wrJjG/+jSPg/6 Tak99TskZ3B8BcmSwu1QtfMSMbfy0Z495AGp+WTNE2nncRlNgny1pmTLxnBTW/5BiZp760QSlZNk 0ZYb9KVPjmVEo0RC9II4KMvigqHrk7JnNMQPEgnBCs0Tv9wYHd7mTR6e1PW/qTV5b6KNCbkjKZYd z7pnmYOPNLowddxFL8FyMWf/JyWLNdmEB84zyNMjIHot7iFfCpIre7Dhb22pfz6Jez8CgiX4vA1v K9a3l9F35FztJVE+cKAghXw1KCiPQ353u6weFtQX64lAfSM4U+V0lYerP5tSoftw2JF0u6pEp3Zl WcwUH0UJ2P2S3Y6e+AuW62Ui6kpvw+0Cnb8gnnR83NrRpF1cy7Xh40VO4XLBeLg0LH1gEtGc1J79 a7Bx0YJv9hLT+NPbqY/1HOUUsC//yEFAB0p7REo6njT+QumUeg5N1H7MONBSUf/mH60RCRGmTJ3a 0X8KCG9P6jq5d2WazdsputD6xfPb4FT+4jRcRAG67pK1Prt8O+kS0NtOVoK4v+WwPAndOvIBXXe9 mLONvG0vGHprc5dvIS9V8UGhqnlJuRkPUu2o3hHL8STpOZrx/RsDbSQ3/uO/wcw3DDEfawAAGmNJ REFUGazG0c5XDsXutBT25GRFBYdM+ztln1wYoEy+0oPVYjRdRx/MLt4T8GNGYVcLWIAQPR0Mmzzh Ypr16Vltd5CDKSg0aNwybrVaRWK7X94p8lHKRVcR1yEcXWBMM1BdS9Dy28r18EZBkUeAzQ3pS5XT Vq6bKw2BYqdKujG7T7tcGm40saaPJ8+Bxt9XfHwtlyK/n+xFbae+1nMf2jUi4KU9UvGk1R9aOgU4 gWSrsb/XOB4mDh3u+vVWTWZkfLN20xoBOrckH10aeboWcuP39V9+Q4OZpTVencg/PkGdVVtHdsVQ pz5fPyisRIYAQ4AhMEMRaKkJSDo/KXvFkyNP2T95mky9HWPf0GAGhpaW+ovWYPQqZ7HC3ZKHY1wW Qrcj0kwnhgBDgCFw6xEwj3ac+uzTEbMFQhau+cv7Vszz9vLHrRfn6yvhmxrMvj4NWUkMAYYAQ4Ah cNsj4L+3GW97qJiCDAGGAEOAIfBtReDrG8ysZrPZ8QnuzcBhNts+FbsZJiwvQ4AhwBBgCNxGCPht MOvXHs7NzT/ZK3iELgJmPLRGJPppLe32tCE1whoR/LR22vSMkCHAEGAIMARufwT8NpgFzYGiIrV+ GD82Fw5iCUiXRLh+TICuBwIOd/k4wOFJSksihMtgqQwBhgBDgCHwnUTAjy+AmMviRV9WmvKm75HG 2pYcJNmkN2VNPwvVSFY8fgpu/OMtKl92gyHAEGAIMAS+/Qj4bWVGzlqMhLaGN3fvSA4ICNiUW9Zm sD0iM3ccxpT4+Pjc6g4HIuh6oPrQG/gZufaN14/X1lZX17YNTfVIreMwBARAfDw48SEMmzA9CMLC yF38a3Xxm+UokUUYAgwBhgBD4HZFwI+DGcwOg8rsdFNKnl5Xv/pcpiTip23csBKy/JH2dv3OZL32 0qSTkSlcDwjivfwRaNdDsh6c+AD0wrp0qGmHiXHQ8ydRTTUoCjJniQwBhgBDgCEwYxHw4zajsSw5 7MxP2o9uiyFoWDt2BMXGNY/krbEd7dFWkiw3v3wuL8EJq45NAbFpelPGdLYZccnlU5iY8ImcETME GAIMAYbAzEXAnyszRCF0rt1nS6Doe1OiMul6YEpSAByc+L9iKRTqJi8xsbkOaqqgsBBUSsJIWU/u ssAQYAgwBBgC3xkE/DeYmQe/BCiXZVe3dPT3d9Tuzi4CyV9/H0+wtRqG+ocMQ33oYmd0ECN4YdsH FHY9QMPeCkP9YBgCjg+JDKGzGTzhuhWS0sASA3l5sKsAcgDOX6axYOkMAYYAQ4AhcFsi4Ldtxray TZJM/pEVD5SsRl+xOS4czG07RK4uRUDaPKZdwx3U7ul6YBHtIDFzG6BHUpcghTEtBLmly6D9KMRM +xh4F4bsgiHAEGAIMARmJAJ+G8wmtUdXAiYQiUNcPymbvO8e8831gHtuco1ngoSEgNkI+JFbOBvG hCBiaQwBhgBD4LZG4BYMZrc1Xkw5hgBDgCHAEPgWIuC/Z2bfQuWYSAwBhgBDgCHw3UCADWbfDTsz LRkCDAGGwG2NABvMbmvzMuUYAgwBhsB3AwE2mH037My0ZAgwBBgCfkTAYjZf9yM7P7Ca7iuHN1WU tgze7QX8nHpDBiQvuylW37XMhg54+7cw+y6Qp8JN2Mps7D/f9eHZL6O2PbiWve7pXImGOmv3/6EV Qu9+7rFti2Y53/EWNxoNQaHhIdOmR16Gi01vN9d1mCAiLOHJhzcvC/bG/5u6dwN6fVOiTrPcrk8O Hzr/36KIDc+nJrt99WO8eLKo6SwE4QHlac+nrnW7O03+t5rMi/y3umhv/C1tO9SSyqgaU+ZmN9z6 O6oPtHaJgkx3LPpx1v1x3phw93yl98LwJjpIL1zdbs2JhOhrcCwb5slm5mA2BAELoNMEK9wM56an 4xJd2yxY2ml6arr0joyuEfy0LgId58ihIRuOFIM2y/X2dK/6dfmLT6g5auk9f6NFf3BfQ+j6IH9l 43vS4Eh7WcMNlmR9zv6gP+TGntJi+jAMc7ciwTL87PZTGwb+zZk+bE5S5iPK1KW3fOS93FmpvoDf R0plf7tt0TSRMTbJfrUOEnXaR53PZrMrKvRrHT4Z8Vqa4078D03LoqZZlxyZbn3Ed71uvUw3WYL5 j7p09SWAuQuf8xjM+j6vKrhQSQogd7+dg5k3+W8SmpvKfn28D/N/NTwO4FaPL3e+zTUogM6FO+7H D42nCL7Se2F3C7YZ8XsvN5fSazZDVhZslQIEeRHF/ZYnH3cK52t0AePTYfl0euRjdD2q2HqZlDR5 SLJzuUJx62X0BjBGoScet93wEeJB0k4cAJDDb49Cn4aMZ/yxzTRienrEnetUq1UyQhA2XQNcNw6N GnAbwWoaMrpuJhhNRqNpahd0XxqawaJvuNJg/9ODpRshGTf9GUDfYGnQW/TcX4Me9G91dF91pdcM qNNe++cO16IpKpqJqG73rpsNo0OY7mpIQmQ0DhlMJNnIVZi41IpS0uCoyJhNBoOrvtbRLrRvWOB0 sSSlXu3Ff7I1+olfTODfRo+RDHEeMjopQZOfs4unUnDdaOAqrXHU3V6e8hN5SLAiRE5Fwo3oxXNC Xm7y48efHrgRWq96CdQ3ej2k8HfDIWTj0yPEvkFhnhOVmAePjmc3knYRNPvmJ/Vu9coGDE1fctsd f1sWlx9v8vOEwji4MHG68CaPE5lTVLi9ixI02X0j/5jhOdlMePTYRJ6OoDrHBVWanDR6JxGmG/Xr YNZaTTywiMJAFAT51e4iXHNK6D0JAfGQHAD5x7lUI+zAy3jIOEwuBfns3gTJySRXhxV6a0kkPgCO dxF6X13A0Oh7m4hI6EoGe7YdJcAPjh1NcOgNUsobr0NtLVTXgldXNV5c2xi7tLnJAUEiDEHxGSUd 3GlchLNwMIOmHAqfI7uLi6SAM4EPLwgTTpUasih11xblpinnSHY+HS17418KW1AcIXopIGjvgmfP cCDjRln38Qx1QNjesLC9oviS3S3Dzj2hPbP9NyGtonAuznmL+/L66h9tbH5UBdCNDbh7sBKCC9v/ oQ4VgrmF7c/UY70PA4hLq1CRnTeJ5pmxkSerODYDX1rs7Dx+W05mxKvjN5Xm7lCLiKgvbqrt5gG1 tp7Oj39JFFG8ANOD9u1us/uLNQ9oc/cFhP1qQcTeoGQSkbWSW4GzCXPx+Fhr/r745H3x8aVl/Vxx PL1ob0TEXlFAye7WUW4IHGitbDqG97t76o7rjtd+cLKLGxq5HIL/rC2nSwp+W4f3xvre2Fuzu7qD Y3+9A4tDFXLrtdr6XMR5wa9EJZ8OIUQ0+R12Cdq3Y9O+ZMy7t6k2Qx2fXLIp+aWwiF8FbSpNDite EPZSLq+yoPy9ut2YMXnfjoySIIRI9GJGy43pRZUfBMudjl5u9c2hr1u6AP/RJjoOnH0Nx1TVGcnq 5B1HSto4fXlTBYbOceuOm05gvUpOVsfvbmnVYnwfH7c1AUED8/J41CthO9LwF+TMJVLlF8CBzoWG vxd9ae3dPHA8+cV42SH5429WOy8gDBdP5pduildvyq3Zr3GShCYnjd4pq29Rvw5mXwGUaqBnkLhi UW/35lds2f2g1EODCp5/CDpaYSgIXigEnKM/spaIL8jnSSU0NIBkO6wMhGX3gUQPkYUgXeG7CxiK yxhDCyxfB1INjJlgpB0gG8J2E2GGLsKZ8yRyvhVaW+FsK1wVmBkTAi5QXdsMaR9YmXIuqaJ9cGSw s3nzQHZsRG6XN07j0IdreH76HwSLAZxnA/bipv1r79GnzGBp/fnJnXqQa7a3N24oJEOOlawxjd3V EUdk5RZQrCpULZHqDQVJB55oca7LbpxnRSxA2a+cPXTixZQT605b769ZX7g02GpBZsELli9ajgpB EEYW4e8YDtizIpbOISx6Ln7S8vmnJAbR3yPDm3AIFUXiwk4zUFQ5J0e1Sg6g2XJkvZb0U6aOzubI KGXN482aRAVcKdh1upWwGNU+XJpSdAVk0YXFqxUNVzAJx1BHCB249L76Ci4l9ZLIO8ksnqe3yCtS 6zXrC6WGgsTi5zss0POxKp1sS4J+YKfshGzL+2nv9HlBAQlNXe3Z6kskS8Ml9c7zBXU9/P6qaOEc QBWKzqSknNHKowjSZ4fxlrD8Qx17Y4ldJMrEYoWlUnOFLG3x4JuruPw1aGCJAvNrBkCxBOcGRXW9 Bpr8ALMxY8OVynLIUS7BTOXKM3os2ne9KPJTcKPpBZT6Rk0X5P8/wVQcUDcSNOoLF8KChyu7syXF 6dwkhk93/x8sCtVbGhos+hEInQMX9Li1YIE7XNYYrlmo9UrYjjT8XZl6XnnIL4gDffJHw5+mr9f2 HrwqPHoYkRma3MIy99fiRrp6QBMdLi7q5jZvcQsSA0VOKr2n6tNOCSRrqVsUEp07C76MRNjpXFgB RBQ4X4NspculLZMTH/1OCHKw2Alh9viW2MmMiRGTcVqMRl8gg0mJCiBg8oKsk/j5RhH3/IlyMP+i tdv2r03ortSk7S52dm3T9l6JHpR9e54inff8NbuONtaGrXtHX5CXEC4sYwCndUMijqq2UOkUt6dN /lLkmSTgYnwFc0t0uZwVGkWuK2Uao2JedHx04d/dvQqvL/zxbfyfs6Fz//04gci7vzo55YJG09W/ 5h6iED1UFnAzgZDIH2xeSTTd/A9jIyAOuc57UL02DjFv/mxkPBRv8UOCPvvkOp5bzTPqFfQ3LOIe LKg4p0435PRk7cd3itbX9K073/DuZ33Ja6Li7tkaf7bu4H+dBwtnMG7G0KGrwL1Byar6Y9uSkf+O zh8+rvnv0En+5bITpFjV1rFd3MGePD2mXPzio0EYxbw4SBz/vCAv9Vjfkr2L39kpjW/8z8fuHbeA WOT21ICQOgXxtsyJx7rLwo5kFm8fyeJAIHdnLct6pvLsS3hsqbz5Z0fxqNJXLeaQYGRlFpT/cs+H mEkle3/XPfPhwR9c+NW6hvCKrHsf7RmTV54xFj9V3Pbv5Q3wk5fSoPxVDR4lR5U/Mavig53pBllz 5v410NKsTuJbV5yvelHk76j/fxxW7rjFxIgE9QJKfaOlC+s1WPAvDwjjYDeEXJd3NEFkPVn9UNqF yve6fpVw93z7LfLrmFWuSdmvM3Un6jQxC5bfNVsKugbV46ey7qY0UrDhLFSvggT1XUbB31kYobi7 /KEDpD5jcKufMTE0UYXl8dS3kNO39QTpdwTbe0hUalnW+sMlonSn3uR8KxnActa3738wxtwvW/Pq FjJFsuODETc5N3QK03OZbvBfoN+8pQydhAVpoNGBdDXgmiJsJejGIMFpEV+SDOaXYdKfWS8ELIfS QsjEAUkOhQBdW6BsI3jjY4DkCEiqAtN2+HMNHN1sU7rlJFwcgc8vwbVRKFATFzB7SIdFDYL02t2Q UgsalIOb3sydC0HzYG0CYWJshbBE0I9BnJM6VO5If3WMrKPQ1E7d3DVMm0em/HwIwrdiiHduapgw wQ4R3KuDLJTBDMki2KqHjDg7vRFaP4GgFRDnfSyxk5N3STGIQ+lrHRvprOXyB5RowEgYbu4rwmlp 0WshY8os/q4oxKZBEL9ivG7LJPTDUYRXjWf96NjJ30VdORrw4jFdnjZBJCat7XoQB+VsJAoRh3Mw 8Rzlzc/laQ5IcL7Q/sUALFomxJlPs2FnRRlmwTh3FTE7yNz9uuREJoSr6mWb5l1JS9dkAvdwiycA m9wQvvKpd542iAkafLm2cgree+XJmDws1UY/567YO7+PXV3Nhor23rENi4nU4jl34P+wkHkhs0IQ D3yCONV4BiJur2j2rEn7k/L4oTQ8JZHDghvJgCo/192OoMsImG82DuAPjF8zES4YxLZROTh4nKu9 WBBdfr7f5rOEkpHM/vDPZ72E5KeVa+4+JGgXoNQ3MSWdxp9sYwjhQOAh4a6FBPvA8FByMfIVNkZu MJvFW3+2s2ESHvwnqU6T+eYTb+FkKLgwkz6SISubPB71imZHUjwJAvjzNzz+8xK6y0/FwSM/n+BF Hhd95xanO+lLb++BHNtJ3IICSSW+M5LMhEPCl5LOLYi0bpqcQT3C9Bxb7B+Gmpp/NxAS87eJzkOI 7Sbtx3/bjGNk4wail2JVgXcPkfggqV8koLsWm+uWS1ycf9ayDNAzGY5kNTrIqYSdOEP9ISH2wgfC 4WAV2cAsAijcRIgx+OoChkYfcy9uHcGVBfDwRnhoLcCfYF8tDiIkiFEpgM96wGiAplrYkQv9jpkc ueMehFzbxKbmAOz8eZl2yGw1G3qrlekNIN+wmjaNQpYhkK6E7H+GfjO0vgk4DUuNnSyotQIS14Fk MXR4e3DF0VvbWsp21xQcMeBV5a6q3SUftHqT3nKh/Iy6/KooTZp/8CEV4RBM5q1LV5L5gfpE2u76 2upjGbgMwnXOhhULCIFQ6P/09f1YouFt9bE3hsH4e73Wvq1nbqrfnXt4F5mYGY4oj+SWfdKLURs9 VL72yXjukxWYUnBiee7JpqnUK1pZtCP/0KaUCyiP7KEVi8avk91YSfAdYO47o6/T4wbTxweahs2x P9iC6frz6zKOHT7+QVnGvoCI4vU6Exg630wnyMh0eSOlOLZd2blcnXG828DTw1e6YetcfF2jveNI wQXteCBpw+KF95A9vY937T6xF/ngE8TaAS+Ior57n3/vCGZ8S6vKr85H5hi3DjftPrSXA2H/8zX5 +cdq8XEZBpr8q+L/Hu8WnYqNL0kW8dPeIAi0dBz5A/KoPFR/4s8o/EBlrf5TJDuoff2OeKKvp/wO nA+c0mpPvaYhiuw9fpEsi33SiyY/DTeaXkCpb7R0Yf7/00nD4cOz5aQeQoH8SEn1yfykc1hPQLp8 GVzvPYywV/EmOKKszt99UmurbOK1L66W4rIeSVVpcm7Qw0zCgVavaPp6wV+wgC6dsPzCOHD1U5AP TR5C7KRv4SM7eH2p7f16fzXiVlNwDFG9ckRF4tX91yFy4V3Iaec7j5ecPpx7MImgbEh/s5Pajmj0 RB6Att89s+797VtOJL7SSYw3zUAap3/CihTIkYCE691kCpBJIC0WND2wMQIeX0D6YhJkQLboFDBe Rt5reOQnkN0A9yXA3Bwo6oZ7ORipfJYRBjHryX9VPSxySM7NXLYnwnZyhxTR/hgfo/yn0C9KheYK SHLwkULVi/aV1XyoK4Q0iY2hqgoiHKULFjJ/W13hyjRJOXdToaqKiQgMDNnY11wlT0pZkMmlSnLq e9RTzDqSlZDzACzmZo0VOljmVOgd3+O4yMHjvTgPgayffZpZcMmWrOku0IwuTb+fXjL/0u1AwbrX +C1WSXGKjAy5MVmdstnPaDILznC9ZLBC88Qvk+c5ieRa8PAA9ygGNAXnsMPkg5z7Ge+6UFA0wKc0 FHU3yBbsyIBldnoo/6O+OOWp5sT6JF1l0X+fV031zrR8jhGfSEnClQe2FhC/QoFS5VxQD2SnvAOS qBxFuKTcUH5+7OW10RsHt9f8rGZL+bl0zi4S5QMH4kXQ0/d7TpSoO4JFkagnCmYpb+jP23i/jT7z fZv8ivi61ZwpQBSft1rWcF5ToCO35Ks1KVFUHHB46rqwk9cXn5lhO8hZkbExOtw01lVwqZIrWl90 HsdcBX58Nj8YxItp8m8by1xRUf/mH60Rz34/KVPH7XVf7W/m9hHeu9C+OQjrp+bsYBT+6C+d+fO8 o7y+bvL32OwCzT0frQCcYaC+lc2DL23EryB80Ysmf2CUMG5UvUK5l7w96xutHgryn+hXCuPQ1Brc j+Di9Ga4O3t7N0akpbKKjWgvy1j9eTVvAHyaWYSTofBlOfbX99cm50nON+iDVU9PsYsODn3d6lUI xY7zvOBP5HQL1gufHROWH4RxdsvvuKTiH0m2Rdb+6F+JvnOLn7HvUs6ntXfL8Onzar5nQ9zUZFKr +LFsW9w9yubhkaQzRdmnGiCY1EFk+/u+gaceFJZTTKPn9uGXrEyDFmxcsr/2xQuKv0/Nx7UL7miJ nbbXHHAKRtDB5nzsQsyA+fjdJp6Mxqe1DBLrYOwYkEWqPfjqAsYbvRUMRnRgA54ebKxmskJBXzPT DMKubazcu8OB4dM3ErokDYxwAYcXAOXBwdZLLzpNOd3JrPjqfVBo0Lhl3Gq14qagq8J4F5/6BoaL nQ3gzuLWX1uNo52vHIrdaSnsycmKCg5x+34ZP/6F2WJxsCc6NvnFYrHnPSGxbfSiULFbEVaL0XQd RKJp8hHiTU8TlN9q7O81joeJQ4e7fr1VkxkZ36zdtIbOg79DlZ+W0U96CZcrpBdSCtY3WvoN6kW+ XrhqFU35qTt+DGA0fq77N+yXZWt0x1ITaEC5ptv0datXQvq65pv+lbD8wjjTuHqRx2oyWIM9zwGw 8Z9ue7cYDdfADQROGIqcVHryFQfx7DX5VJum02S6vwezSc7+jh3fCzVtUMnNpTSdsHGFvwtg/GYO ApbWeHUiN2MlMqu2juyyzyhnjg4+S9pSE5B0fjJXxZMjT0XjRJAFfyJg7CwJq8p2cKzJHN/sbdnt IGSRbx6BmTOYtWmh7TIEB4PFAnE/gjjvW9nfPLJMgluJgKGlpf6iNRiXXhYr3C15OOaWLJBupQa+ 8zaPdpz67NMRswVCFq75y/tWzHNdM/vOkOXwRMBq7PjP1lZLIHk1yAIRP0pKnu/L4sCTIUv52hCY OYPZ1wYJK4ghwBBgCDAEZhoCfzHTBGbyMgQYAgwBhgBDwB0BNpi5I8KuGQIMAYYAQ2DGIcAGsxln MiYwQ4AhwBBgCLgjwAYzd0TYNUOAIcAQYAjMOATYYDbjTMYEZggwBBgCDAF3BNhg5o4Iu2YIMAQY AgyBGYcAG8xmnMmYwAwBhgBDgCHgjgAbzNwRYdcMAYYAQ4AhMOMQYIPZjDMZE5ghwBBgCDAE3BFg g5k7IuyaIcAQYAgwBGYcAmwwm3EmYwIzBBgCDAGGgDsCbDBzR4RdMwQYAgwBhsCMQ4ANZjPOZExg hgBDgCHAEHBHgA1m7oiwa4YAQ4AhwBCYcQj8f4HXtu21g9iVAAAAAElFTkSuQmCC --Apple-Mail-27--587070765 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Thanks, Dino and Darrel On Dec 21, 2009, at 6:35 PM, Dino Farinacci wrote: > A description of the design issue: > > (1) Use stronger language to have the outer IPv4 header set DF=1 so we > can avoid fragment reassembly in an ETR or PETR. This will also > make IPv4 and IPv6 encapsulation have consistent behavior. > > Right now the spec does not recommend a preference on the DF setting > of an outer IPv4 header. If a LISP encapsulator (a ITR or PITR/PTR) > sets DF=0 an intermediate router could fragment the packet to the > tunnel destination endpoint. That would be a ETR or PETR. We don't > want to force ETRs and PETRs to reassemble packets if we can be > practical. We want Path MTU discovery to be used on the path. > > Do people have objections to recommending this? > > Thanks, > Dino/Darrel --Apple-Mail-27--587070765-- From dino@cisco.com Tue Jan 12 14:31:14 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4576E3A690C for ; Tue, 12 Jan 2010 14:31:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0zXgo4ruN1Zq for ; Tue, 12 Jan 2010 14:31:13 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 64EB93A68F7 for ; Tue, 12 Jan 2010 14:31:13 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: Picture 4.png : 26418 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAHqGTEurR7Hu/2dsb2JhbADCEJR5hDAE X-IronPort-AV: E=Sophos;i="4.49,264,1262563200"; d="png'150?scan'150,208,150";a="465747509" Received: from sj-core-5.cisco.com ([171.71.177.238]) by sj-iport-6.cisco.com with ESMTP; 12 Jan 2010 22:31:08 +0000 Received: from xbh-sjc-221.amer.cisco.com (xbh-sjc-221.cisco.com [128.107.191.63]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id o0CMV8Gm019717 for ; Tue, 12 Jan 2010 22:31:08 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-221.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 12 Jan 2010 14:31:08 -0800 Received: from [192.168.5.8] ([10.21.112.149]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 12 Jan 2010 14:31:07 -0800 Message-Id: From: Dino Farinacci To: Dino Farinacci In-Reply-To: <1E503F58-269F-44CF-8023-2CE96AC65BFA@cisco.com> Content-Type: multipart/mixed; boundary=Apple-Mail-28--587058144 Mime-Version: 1.0 (Apple Message framework v936) Date: Tue, 12 Jan 2010 14:31:06 -0800 References: <1E503F58-269F-44CF-8023-2CE96AC65BFA@cisco.com> X-Mailer: Apple Mail (2.936) X-OriginalArrivalTime: 12 Jan 2010 22:31:07.0562 (UTC) FILETIME=[EF0188A0:01CA93D6] Cc: lisp@ietf.org Subject: [lisp] Design discussion -06-(2) -> no probes in ECMs: proposed text enclosed X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 22:31:14 -0000 --Apple-Mail-28--587058144 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Here is proposed text to deal with this issue. Darrel will be posting to the list an entire diff file as well as the ID shortly. --Apple-Mail-28--587058144 Content-Disposition: inline; filename="Picture 4.png" Content-Type: image/png; x-mac-hide-extension=yes; x-unix-mode=0644; name="Picture 4.png" Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAlAAAAB9CAIAAADiLcrTAAAPU2lDQ1BJQ0MgUHJvZmlsZQAAeAGt WHk4lFHbP8+s1rGEhDSEEBGyluzZyr4mwszYGWOXLRFRhCxFopRKlnZUiIwkJVtJkbVIkiVjne8Z 6n3f7/uu93r/ec91zXN+5z6/+z73Ofcz5557AOASciWTfREAAD//YIrlIR28vYMjHvsRQAAF2AES IF3dg8ja5uamMOXftN+9MBtuXbIMWySzn/RDw6xOMfqfr+W5LLX8G6W/YhwFXhAASAYW8HhsYi0G dtvE1gwcFkwOhjmeDOzu6UqAcRSMZSjWlrowvgljnMcmrmZgt038koFD3T0Yuh8AwHD7E7z8AcBO wViTQAxyh6cZ6xIIQe5+MD4PAELTzy8Ats/ZAcsl3ckUWJeTBmMxxrnAPdyIgQCo7wWAOeefMm94 D5UUAASW/inbxQoAXxgAFf/Cm7PcOCuI720QSVFhwxzEpgMAeoBOn5OAfcsEYC2DTl+5SqevXQMA +QmABl/3EEroBhfeCNQOwH8ab+75jwYSDg4jwCKAAqageMQ+JIRcQ4thvLFvmF1Y0Wy9uBecjdyf eGa3Km4jCJZun8TvFqWIlUoMSXHsVpc9JKe8d7siVmlauVP1nvrZ/Q6aIgfHtQt1LfXWDC4bqhi9 MnEw7T5iY9ZooWB50WrFxsG21h7n4OJYdXT+mJIzxeXG8QE3LncDQhDxMqnRY9yLxVvKx8DX2S/U /1xAEbkysJ7SETQU/CsUhOHChSPkI5VPbDsxHdUYnRMTGGsYJxq3dvJj/JNThQlxiV6nrZIOJsud EUnhS2U/iz5LP7eWtp5Oz4AykVmYC5gLK9nDOdTcsrzMi2GX3PItCjQvyxYKX+EsQhXRiqeufrnW U9JyvfZGVenlm+duRd32LbO7o1UuWcFRsV4F7mLvsd7HPWB/yPaI9TH2Mb16vmaiduBJx9Pnz6rq rtSnNIQ9JzXaNOm92NcsTuVvYX+JeElrnXjV0Jb82rQd1/72zfm3Zh24jtZ3CZ0HO5e6KrtJPdt7 unpT3+u8p30o73P7yP/xbf/pTwc+zX+uGiAOsg1e/CL2pXxIbYg6bD08MhIyih3NG5MZaxi3Gh// GvGN7duVCYWJF5NWkyPfg6fQU1k/RH5UTmtMN/+0/Pllxntm7lfkLGL27BzfXNG85HzFgsLCw99y v68usi+SFutorDR9WgytmvZribA0sNy9Gr2eSqfD8RcDURACOo/QQvIg19E7MU7YGmYNlk62VJw7 pzG3Oo8OnyN/tECxUIvwtIjwThNxwq4EqQu7g2TF9ryUD1QQUGzc56WCU72trqPx8YCf5qpWsg67 bqo+2iDq0FcjW+OHpjyH/Y80mfNZeFves1q0OWAbaldpP+K45aiek9+xfOcml3FXjJuYuy7BhRhO SvO47vnU6633kM+cH5O/cIAC2TjQiRIadD64OCQ5lBi2P3xr+EJEV+TdExlR5GjbGPVY4ThU3NTJ 3viGU2UJOYnxp/2THJMNz6ikiKdyp9LPfj/Xk1affu18UoZvpmWWyoUd2SzZczkDua/yHl0suZSR H1vge9mhUP+KQtGOYpbiefhtaC95cD3/RkKp503HW6TbJ8qS71wqL6kor3xW1Xz39b0399896H34 4VHf477q/poPtX1PBp4OPRuv+1m/8Bw0sjcJvpBulqNupy61vH1Z0hr5yqJN6jV43dt+582pt44d cu+Q7953lnXFdlv1iPfM99a/P/fBsU+ib+ZjdX/8J8PP2M+PBgiDXIMNXwKGdgy1D0eOSI28Hz01 tmesdzz6q9jX1m/+E1wTVZMWk7++p01JT1F/uP5Ymc74KfmzccZ+ZupX7Cz37M05zbnOebf5Xwsn f3P+LlwUWyyg8dOKlvYudS9nrHisuq8lrOfT8XR7ejq9ZSP+vMAYXIQgKBBaQKQh96MAqh/dheln AswyLGGsLeziuBSOZa5A7jEeB962rar8JQIsgh5CdcKsO8zxeSKDO3eJeYvfkhiRFJQyk47ZXSbT Kftbjk9eYa+Jgq2ihxJ5X5hylEqUaqRahDpFw3M/8QBBk3SQpOWi7ahjqWuqp62vaCByiNMQGE4b 9Rk3mVSY5h2OO0IyMzNXtRCzxFkuWY1ad9jU2ZbYRdobO/A6DDvePRrnZHZM6Nikc63LmeO2ruKu 826N7hmE40QZ4hKJ6pHh6eIl40XzbvI552vrJ+jX4386QD6gjxwfKBHYTgkJEgiqDyaGMIdUhtqE LocVhxuFz0bkRxpGLpy4FmUVjYmujfGLFYvtj8s+aRXPEf/6VEqCXiJIrDt9IkklaS658oxfinTK 19SSs27nhM/1p+WnO54XPN+fkZ/pnCWSNXrhZrZPjlIuIvdd3pWLAZe08rfkjxU8vpxa6HZFrYir aLK4+WrxtfgSwnX9G7tKmUt/3Oy6VXu7GH7LgsudK4wqVap23uW4B+7N3h950Pew/VHT48fVD2rK aq8/KXqa/yyvLrc+q+Hc85TGpKbTL+KaI6ghLeSXpFbSq8i2rNel7Y/e1L593vH8XUNna1dP9+ee ufcCH4z7Tn18+Unxc8Wg8RB6eHx0+avbJMcPuZmvC5kr1xnx38x98D0AMMoAZBsAYPsWAMtbAGQc gVMdJwC8xwEwZwfAWg0gPkkCxM0FAAUpgr/5gx8ogMOABGJADqgAVPAZzENskCikDplDnlAslAtV QFRoEKIhOBGSCB2EEyIUcR5RhqAihhF0pCBSFWmDDEZmIe8ju5BzKF6UCsoRFY26hmpFzaKF0IfQ Qegr6NfoJYwkxg6ThKnGTGCFsObY09hn2HkmGSYS01WmAWYh5qPMBcyDLDtZvFiqWJZYdVkzWYfY 5NkS2T6yy7OfYR/FaeOKcOscxzmonLKcF7gAF5lriNuau32L3pZ6nv08NbwavPV8h/g6tx7b+p0/ ehvXtlsCugIDgtFCIkLN232FuYWf7vDA8+KbRYJFxUWHd1LF7okXS6TsipD0kLKT1tstL4OXZZX9 vWdI7pX8/b0FCqcU/ZRs9mkoi6qwqMyrDqi1qddptOzvPzB9ENLapi2lo6Z7WM9Fn2KQeCjPsMKo 2fizycrhbUf2mTmbJ1pUWX605rIxtE20e2E/7kA/infSPubpnO3ScHzGTcKdQCghjnns9gz1avbh 8w3waw4QIAcHtgVJBMeFvA+TDz8TMXKCEr0zZjjuerx/gsZp3qSFMz2p1HPV6ZUZN7KKs0tzyy/e za++3HSlqXiwJLP06G3+O12VcfeUHgw+vlhr/YynfrDxafP5lzFt5Dcn3oV0Z7x/8vHzAHLIaLT0 2+kfOQshS0rL71d+rPat3Vgv3rg/+MBeYLIR/1xQBV6CL4AGcUFSkDbkAN8pKdA16BnUC80gWBBi CE2EAyIYjv4dRCtiHIlCiiK1kC7IWGQhsgE5jEKhdqGMUQGoHFQD6id6B9oCnYB+jP6OwWNsMWcx LzCrWGVsILYCO8UkzeTNVMY0zbyXOZT5GQuaxYwln+UbqzJrMms/2x6202yD7GrsOewLOBtcNYcA x0mO75y2nI1cSlyl3ELc2Vs4t6TysPGk8uJ4s/mE+cq2qm19yX+Uf2bbGYGdAnWCToLrQsXb9bdP CKftUNkxgE8VURIZFE3d6Sx2UFxSAicxv2tAskXqgXTB7mSZUFn3PRZyWvJye0UVeBSZlSClxX0/ lSdVvqlOqE2rz+9HH+DX3H1QS8te20fnpO4lvbv6rw3GDCGjHcYHTVxNkw/fOdJrjrJQtDxulWvd actqd9g+3CHBMetomVPdsU/Oq8f5XNXdjrunEZ4RJz2EPC29UrwbfSE/Tf+wgPvkGYpkkAecF/vC uMNNIhIjB6Pcohdj00/uiq9PsE9cSso/o5EydDYtbX/6j4yiLLvsbTljeRWXYgpsChWKcMXrJZI3 XG5m3m4uhyp17p663/FIrjrzCeJZRAO28UKzcsvAq8x2lw7hztWe8Q8v+ssHaoaoo4Pf0r/3TRfM fJ3tng9aoC0+2Ii/ODAD4aAItMC/IrkhZcgJioOuQ23QLwQ/4iDCA5GOqEGMIjmRmkhf5GXkGxQC /ob7o26iRtCiaHf0dfQ3jCwmCPMEi8ZaYouxs0z6TPlMc8yHmctYWFn8WbpZ97PeYRNkS2fHsMex r+PiOBAcKZxbOa9yyXLVcB/i/rQlkIeV5zqvPu83voytGlvH+XO3mQhAArWCoUIqQrTtT4Sjd+jh WfG9IldEfXYeETsgriQhvUtUcruUkPT23cIyu2T37FGXM5J32EtWSFa8odS0b1SFRVVJzV09X2Px gJfmFy2C9pguRR8yyDGUMaKauJguH0k3l7R4amVi/cU2wG7dIfEot1ORs6pLm6u7G51QTNLyGPFK 8VH0HfZPJasFjgXlheiHLoTfjDwWhYouiTWOm47PTFBK/JR06oxYCvWsTxp7enmGYebQhZgc4dwn F20u/SpIK9x9pbHY9epKSfYN5dLOWx5l6DsXKxQr2+563aM9yH4k8/hFzbHa+aepdZL1rc89mrAv SqhmLUuthW2m7Yg3lzsE3xV2SXfX93p8YOqr6ff5jBuo+GI3NDXiNzo6bvW1ZoJn0vz7qanyH9Tp dz+7Z6i/Hs6en/Odl5n/vlD42/D37GIyTYhWuSS3dHtZbLlwBbFCWnm1umc1afXdmuAaca1ybXn9 8HoNXYKeyYj/Zr3EyB+ARTfAN4CCN9XV2xj+9x5+viFwTbbRuOEnm7/bETO4Z+Bv5GBzRi3IB3+W g0Kt9OEezlkQJ8nLwOgPxhNc9UxgLATL5SM9deG8BthgbEqiGFjCGLYD2Xu7GpvDGAdjb6K/jdUf eTjZd6PGZXBSyME6DD4/jAuIQfp/OQ8iPa3t/uhSKSGWNjAWgzndPgEmDD5jLRqBqPfHNwTK3/eI KSyHfUbweAUbMfzngbE0MACucDXmAYhAFpgCXaD354mH5Xh4HADPEkEQzBvd4P1l2W6Mvf6Plix8 KzPshW7o+IBxGPu5eMVTYFub1luBOyxzBf5/JfJl8hPyq39HGyv6bqz6V8MEHv1vyaalTe82Z7wA AWb9lbv/1WCs7HePFJoXEKFu64mSQCmg9qF0UAdQmig1gEfxoQSALEoJpYrSRh1EacBzam+mHk/9 w5fNs3H7xx5NYD+IIAT2nwj7//ck/t+qwAv+D2OjdodPGWDgd6MggYGasmlxjP5fWzAxHK7rAdAN IEdQvDw8g/Ha8D8XRBm8kb/7Hhm8gvxeefA/b9l40O7w+lMAAAAJcEhZcwAACxMAAAsTAQCanBgA ACAASURBVHgB7b0NWFTXuS++uAIyKigYNdHkKFVTsGFoIXkgMZoM2lSTJmMbbXp0zD8kN8DNyeWj uZGMz5G2mBvOmFoZ/rkpkGPGKtgkQ3ocmxTbBEjQtHDt0DgmQCJEqA5RKIzOGAeZ8fG+a++ZPV/r 3TA4CMLeD8+w99prvR+/9a619l577/ULu3btGpE2CQEJAQkBCQEJgcmOwH+b7A5K/kkISAhICEgI SAhQBKQBT4oDCQEJAQkBCYEpgYA04E2JapaclBCQEJAQkBCQBjwpBiQEJAQkBCQEpgQC0oA3JapZ clJCQEJAQkBCQBrwpBiQEJAQkBCQEJgSCEgD3pSoZslJCQEJAQkBCQFpwJNiQEJAQkBCQEJgSiAg DXhTopolJyUEJAQkBCQEpAFPigEJAQkBCQEJgSmBgDTgTYlqBiedg4ODzqnirOSnhICEABOB8eoH xkuvHwjTfvGLX/glXechODbkJOHhE3QotZys2f4fb3RHJt4dP+c6PeWLW9qPvvGbircOvXe8OzLl 7vjpIREaeiG2N1Jn3Wu666VHV4SHXviNkHidOIe83m+EzyPT0V1f8cuy3zc21nWELQtVVI9M83jm us54GE/T3bp76iuKyn5vGpiVlnT7jeou/fuBnvp9RWXvkMSVy+YE3TEEY7+/XjcGN/p/sDg7j2zP CAtLzsjISA4LC9u6z+ZtsK29LDsjQgZbRBic3gBn+fxhBftOchkHD2/fAOWyXYfehUO839dcRi0E W93GhiVvONw9GD4j7nJp6et/OxcSfc7uw3GJq/d+SeJk5MuWU7YbdAvVtzMsbF/nYFAuRMuJ4va4 oIM6KB1jljlInBn4hLbeQ+Qow85RSI6YOfe2+FvtTSWhiupR2HCDiwQZD6GyLjT1JVgTMWfu6dKS Qk2zTy8qnB6bHb9+IGImKS0tMfXbR6EtKPv99I5CXWiKAFtCUFtXU211eTHoztfq9HUmh6fwQLkC khV6k3mgqzELduXF5mvXehu1nKH5XZBzoE5OD1R1XXZPubHZM2oVRFmsN+g1KrAkX2/QwX+NcQC0 tZUr5FoT7FitDDPsVti83BI1z9FWDlKtrDwOO2yoHHrW+6TDztsC2r2TQbAdknyyXrvmMAHSWhPD eJYh4mmg2F/jcAX8TBeyO64fT5DFxE0EZ0G9ZwfBJ4T1DrqgwvxqijeAaT93KgAfxE6PIzwavmow +dQ7jdG7rNi+SLyx4x+LEyydFbdiBgGeN3W7Q3EQdfpaV7WSyMu9OxAEB1Q+Foe8Xv9+hmGNvVxO NHhngtjjEhRoP0PDMEkB7WKY/Nd1moymNG2oCu+xDoRYjdD1E20THVFgG2iCQVHVBm3V0QYjDWzV HY7eWjXdU+g8XbW1rVpTrCmvdRXjC4fi16iV86Oa0M3ReuUGPFO5kiiysrixl2SVC4Ovvasxn47Z 3KbStnmHIcMke51WnaWCAop8tTo/K0tb28HnsnbUCXLkWdo23jd7G3cRoKw2thmKlZwOueGL45Co UPKHYBOnXqGBCwXYBozVgjkKdXUvn9jWWF1OYVSqyw16fXW13tTr2yNy2bx/7G06yC+Xy/Or27zT uxp1gnwAQ2scxmGmX1aTTk7kqvxiF54q7WjxvMaUDyMLhrO3L8L+AI5PiOr9mnecqLKUcpWOB45p P4YPaiczTjhMmfIFx+EKb/gBz24SiTdvv4hX/GNxgqUz45baae0oz6ehrsjX6DT5EHLFdTTSMb2C a747aDyw8WHiGdJ2h+Hga7bnyG5u0nAtXZlfTDsKhWvAw3DA5Hvn98Qh018ufpB+wAo3Kiqtrph2 ZUSZX24acPUn3vK94wGz3+Oh7x5TL9YufIuG/ijYKU3ABN5/cMDPZd+b4FPH3iZy7da0WC4HiU17 3mR6eRnMoDkv24hCna94590//v6/mvI1+YRYhaKWVv2WwqLCnPUHWkJ8Wz97YfrcQc7OK4TQnUEy Vz5/how3jzQ0pexp6zIZlJU5+4/30URL80+XrD6tMJitdvsA3LjlJcbs7HHlZv4LX3hXesqdMYQs Sk5JWfnAA3ctgn1C+urvX7bmRLqurXegt6Np4/m8xLiCTpjqjFqyva1RTQxbUhN3nF3fZGwsL35m Qexd2dVZDYbTukajLquhsnJ5nalO1VBYc5KiYf+GrCs3tHX1mk2G/pItv+MgsvedOX6sFc6ebm05 0dJy/HhL32WQLrZFLXmkrc1UmGGqP3vZK1936erM5XoYAh0gP54CJCoH8Ss68ZEd+aSqtOg7e0xd plplVV7FXzjYgsUTkU8IgrOXJ967w+Bz/fVuaX54yerSRZqmtq62Jr2t0mAyWSlwiP0YPqidzDiZ EY7J9/Z9+P2oRDTe0PrC4gRLZ8ctIT07Y5blnFhR29iYn/B1ZmEpya9+5r6FN3+7Q3FgVwfEz6L0 wssbGo3GpxPOljYQwnUbOA6IfCwOsfihPRCzHyDTY0hVXqZ9zTaTsW7FiRx53L/R7geLB8x+trc0 lakXaxe4mBCdGc0YajfCHV6T637A0dFY1zbgMMF1gvtSxUcmzaxqNBnggg4u6YxwIyjXCrcSjl6j Vp2fX1xtHuYuxUdkUAeBV74mmO0sbuKF1GYRuYbu9zZqwD6VWqvVaDTacjW9EpW7fUQVOtpgwrbc c8N67ZpJByXV/C0aLWZtBMf5O0u4loVbKmW5SzUv1G7SAiDgvUlD70Bh+BHuRM1N+nwlBxv3o+Vu T7lSbaCjHJ+F4CX7/YLXvncAA3CjSy/p1MUaLWw64crOryB/KOIXrXp1I58NhvTR4SkiHyQH4sw0 0p3Ixick9d6hh3ukLNe9PNRoR22xphYCQMR+Jj6cqWw7mXEiIp/3OjDO3Wj4/MfiDY9/LE6w9GvM uOUv8xvdLR8mgORaOgGL6/Ux2+8gMB5E8RnTdofi4Gczf9jm2z80aRT8lCaOA1s+FoecFoa/gjEB /QB3hyfM/XATcpqmAcwezH5BPrYToPca3i4wGSFIH/1LDBER0F3CZn939ZorTQObpi8iDbWnbNkp 0Xy69695znLFjnzFJys3r5h9lJiOmZ0kgdMcPm+F8smt1oj4haM3xFsRY99lpu8Z+XRX8qIUBblI 9x0OuBOU359+52IyNERIZG7d2hfm3MnwxUcQd697Be4fo4TkK1ZC5rhvJAmBNwqodP6040o/ybgv Wcjr2jFx91ZRc+X0NRQn2AG3NaTvyKL0TcUGY++BFdHEXByzjCbym+0y6LhChXrUuk4F8S92nbrW oBro+urs4MVzh4ry8s79y7VXMlABIn5dIfI5M/mCc25VkMFR4Ski3zWn4IszaighOD7XX++OIbhL vkOo36il63Zs40wRsZ+FDy2D2smKExH5nH5mnHNnAn5Y8YbHPxYnSLpI3BLyDUQ416YsA4TMpobh egPM9kqYSO0OwcHLWu9d2s0QmRA/MzgQIAnHgS0fjUOqjBU/NB3dZsxyWxQuu4XLhdlzFrEfFS1y AmsXIkWu+1TQU5pOm6XP3NtP+s929Vn64M8MCMDwkfDTbSpiSFXubOm22Cw9Rw/Ci4QZ8PqR7TzN fNpMNu6p37NxqfnzE4SYusy0a4fN1lK5JDFVvixuX7srhU8PzS/YCiZe7Dd9fbbPYnMrGKQpF3q5 Qxu4Amdhf37CPWBY96X5Kx9+7OGHVi0i/3h7dw09gW8gvcsMb3teNPf19fT08AoS18GcbeFLFfV9 g85BS/dBdWYDUa1dEQvfwVHgTOScuQuMAnt4wec5Cee52USwykkc8GHD1729TuslyLA0/o5oMnD8 D3tLQE2vG7XoO2C6/fMvumw2eDe7ZvvWgvoekdlIp6Wvh9bTxX5yoRd24IDmHmzJTF/fMJSQtW3b th1F+WB16zkRd1G/yKD5HMWT88cGWkxfU2yDxROXT5g449UCXSoTn9DUe8L3txBS8tyuwz0Q5t0n K7LhReAy8B23n40PtZ9pJxInuHzAh7ZDLqohzmFfpBoJFm9ofWFxgqRjcRuVoISJgPXzM3btO7gr O3l9KeG/4EH14hXMjAcUHwRPDAfMfrS+EBww85fct4GQIugfeizQeCtUOTCn2QsNBsUBkY/FIdbP wEUj0g/0XiSkUpl3sLm9p6e9ZmdeKZHf/a1ozB7MfsxfVC/Sb+ByQnQmyLtEO53RCdh0JjpV4TA3 qemDT35TlNe2OewmletQRV9y6dALJ/m5DXtHNZeicr/sEqQ5otmtpnKXOu6fvoNOPZr5F2fgHY02 a1e1yzr+fQ1zk+clDniUXFwtTMAw1Vjp5ITXlqV3TXSZmzwvm8ALovwrqX7GwFuuHQCIgI9K11gN Yw5MVHYZ6H+l0TpQTZ/rc5syi5/bzDfQd11h66jVuE7B/BpMCHtPqvI5hF9BhVCAn472T1fqh3tL R9yv/NoubpqFquFnX4PEE6bCGLjBpDCGs+Bi4E4gPqGr92u9Rni1zr0psmpdbyWx7RfqPRAfMDvQ TiG/WwEXJ5yHGD4wkPhuWfRlMeYmVDoj3sB+VvwLRVw63HGCpV/D4xbeWisvzlKpisv1unyi4KY0 wUy2Xqb9NBGNByY+bDwF4xk44Paz6svThP3wQe2/1qaHF/r4Tc5XHQ8FGwfB1AD5zDhk+wvG+MsB cfSxFH2Ty2dT6k2uNwjZ9sBb7oj9bI8RvYKdzHbBFhWK1DAQ4uPvdR/A9ZczPDw6Oto9ATecRPhS nURFjTT3cNKu97zTYrGFy6Kjr9cguLuEr/LCY2OHmxUVNXjQZrETWWw0a+rSOQgKZNeBHA88GbTZ 7CQ6doT1FaxfweIZrHwcvuDwGY2dhAsUXwuCtz9IO0MSV742ex8xcMDiBEsHcWJxS7XZKjJiXt9g PJGb4tbN0Os+FdT/4PFniRezP6C+RHBgyebSUAUMHETlU39ZcYhqRk+AX9DX+Hd8DHuoBNR+VPwE ORH6AW+COCaZISEgITDBELDt2xqTCd80mWAeT27oan5sMetKboIZLZkzmRCQBrzJVJuSLxICExkB Z2fzh82dA5Fxd9yTdu/i2IkyqzORIZNsCy0C0oAXWjwlaRICEgISAhICExSBoN/SnKB+SGZJCEgI SAhICEgIiCJw8w148Aj3pqC5uVnsFA2PEJwcaxzGWn4IIJBESAhICEwMBCbcgAc0LgUFBRX13Qg+ tr1pMtm/1Yh9aoSUvLHJN4ud14vKeNfXTYAz0PcUFGyHDY/q660FqbyEQCACQN8DgbfrYLPIV7qB pSZ3yvgOeAy6jWFpXCYKzQSNC4b9QrhMGDsHawqAKAlIkpI3bD/se6EgZr/giNcOI/8NqS+GXsGq CYOzYJH/Tijoe8acZstF+5XMcWolZxTsqunxjRV/r27EsVi93wj9N7mOkdD3dNYU8J0Dz6W2taCs uZuveNvBrT70alspp9uYx+GYQx6Kj/lGKwOhRxH4DZh0M4gylD4j2PwYHQaDhgOxH9HoSsboXeDD /WD8FVfifRYWOzW4FwSQ13ovWhqs/Uj+Ma8vRK+3k/77EA7cx/hQm34fYWP16y9huONg6zE4+p4A 7cPSbDFopAKEiCTAQudaWIZBpa1rbKzW0tUlFOU+ZEOhwg2Rw2q/N6LeWXopTFh6qGiPUPlYHeH1 K9ZvDEvfM9DRqKWUDSodUK9o1dx4o+6ibcZhqtVX66t5ejXYqTVSvpZh4xCzf4Kkj4oeKBS2o/Qo sA4vRt8TIpqbkdBt+NBheNEGCTQcIvYz6TAAMyZ9yY2hyajNJ0pNdTGs7+1e3kLEfmb1iuQf0/oS 0cvAeVT0N0x/RRJHV49+izvXAkWUQgHMSjpYFqVLD0sIw4HaIKxKHaAfp9li0vGYdDBoKYp11W7a F6344uCgrw2WF+d4ImHfCEuZy7UuYiuv+PduF9auRkE4T/eTr+/o0MNCQYrqNrjc6FDDSkFA0sVx AIFMjG6G2R5F6j0AGrqMCPUWodkKSi8IZ9oD6UycqTFB0h5h8qko1sbUK9JvBEvfw5FNulbAB7EA pPei+cLlrMs0PA5Ztk+4tHGb0kTpUfh72kAaF4RmghCEPgO9N0byi9BhsOhgROxn0mFg9C43gibD chTIWHKe3ZyzLb8h7wDlKoI1v4OkGRom/5jVl4heBs6job9BA4V9IkgaILYQQlY+qc5vaDDJtzwE HFqL71snNzXM1TyjWIrlF6HZYtJIJT6SnS9vKMrcMnB/flOjIf5Enov2BVVAFyM3nTPTlXA7j75f bSIZd1KuL6RdAOd4zJLVRTPW1TU1/SSunqf7yf/B4sUPbM0iDWcvg7BFz7/dmGUy7f0M1ptF5WDt V6TeGR6Mpt6RfgDvT5g4B097hOlluMUnMfWi/Ubw9D12WNDavYghp7Hf25TLsFYyx7PmShSle/Mu OEH3x3UIZtOjMGlcBDsDaCbY9BlC/oAddn6MDkOUhoNtP6/Rz04R+pKxpsngXJBXNxobuUXwNE08 lSyYKWZ/AG5o/jGuL1Qvb6EfzsHT37AcxdNGXY9+d3igYYAyUsnroDZ666B3qObWekU14zRbTDoe uOuhXFS6NpdAhwnWTATal2uOLp1arS52b7CvpfRGsJnKXUvL0q5KruGJfLF2Ae4It4BQti7fRfcD ejl+K9dauWADP6mAyQEYcJqqIOIz+HrH9GLpsOYng64reNojVD5XCYwfpl6uvhi0XKOg7+GXtYT7 Y5hjgE1Z7IoH3hT/uMXjkGH6xEsa18UOUHoUEkjjQquCvbHpM9h5aSo7P0aHcR6jgwFJuP0M7SL0 LmI0Gbb2lk8vRixNS1rIkDmiJMv7OyvlqqzjVRUfz5gBtMaFr32Qm7aZrukUlP2i+ceyvoK3Mzj6 Gx5EZ097W/9lEhOfOMwKIKOsRxJI3xO76tlyReGaPQd19i1Epf/J0mHX2WLRbFkwGinKEbMgTqB9 mbHA5aj9y9am1uhF7jVeYSXVFBfR1BUzTGmeyE2sKYjYVHrByfUNWLs4DdLmTndLJzNhz/WSCyXA uXABDtwaOL2YHKw90kLBxmdw9c7uB1B7QkZ7hOnlYAr8EdHL6jcw+qFAwUJKBFCNEXXJ7mdmO3bH LFi0MNYnDgPjlhBWHI7rSCL4MvzOuI7BvcWw2L/eZLXCjL1ercqvo69U2OuK4WkGf5VhrYX9fAN3 BeoY6DUDizikyNW1sAMH9NkqveIA8mQjl8dOqQaU1fwVK9s1JL/DXAtgqauN8JKDwz5gqtNlKdWU Y7WXpis1BvOAdaDLVE4f5wsEtkz72XY6ugxQMqu8rtcO4rs4JgSVkV4H22vhWYe6lrsk5v31XGFZ jVooBZuuTcwntqdcqrmpHIrrO/gr7mtddQA50bsW+GfaLyKMmX+M64uaw9TLxrmLsmEUw1N3et+p rnVcs8INR35tB1q/vLvWJn7dep+XelhIjKIerQO9EK5cVBtgp3fAU5X2Np4thBi8XyZi6bV21cJT NYO7HjtooMtru+wOjoGk2tRrt5obq8F3UlzLxwrPKqDQNZrMXSYdfTHB95UlXy0OxwBta2oDbVSO DsrYkQUsHA4Mt4EmGplZ2toOM9yBwK0qUboeDzvggTG8A2G2Wrs4+gVoreAwJke0/TLr3ddu91HQ 9Y70A5g9OM4DHFuFQqOr1mTRWyQl97LPqPx1O+P1H9fL7je4h3C0nzEPQKcKsQ/VXiw2d+Cwt3FN pgP6N/5FL7d2a687bvO5uOVe/8Li0F1oov8ft5dWeGAC6VFQGheEZiKA9sJNX4Ih7y/Hkx+jw2DS cGD2B9gDEed6CCxOX8Kkybhe+iS70U3+oWiyw3tXdPDjNhfpTCD+GGyYv2NeX5xihp3+9QhuKZp6 3XRUDNoXMRoavvtWaFy87eIgBFmPlFHad/Om7zHToaW4TlyjV1AF0mxhdDZUryJf7ZqmlKv0JmEq m6HNQK/k6KbQ0Jcz7W162ldm6WGswtpFR53bM2WWSu71PpSxmpsb48RxP2L0W/716GmPYAaj3hm2 g7nB17tQxGWmWy+WHiraI1Q+0zFIZNevCL1OUPQ9PvRAinLXdTG1xT9u6dS0x/jAOMTsn1jpE2At zQC6DU9DGdkerLUB/EIjp7kRzY/QYRCchiM4+4OnL+HNHbsZg+Dsh09xxoWWKAR6uWhi1+/RXRmr C0ldb33GvJHFHBcP10//ZGupiEmtbbIeSvOZ/xuhDZ5sLLaWwYpk2ZW3r+UmeLJdxx4bN0Fg576M H1u1J3KTXCkQJMA5xaC1YsgRbY9jWO+YXiwdXGPhLGAAOyOiPRKR7y3Le384vd55uf2gCwRImKwJ E2v8layREBgHBKzABCwvHtHtXais6zBolCp4okq3YpGvEUarr8NApzeJQqVSqoQJ7dEKEyvXVatV qeAGjyrT1roIisUKTMJzVh3cR7vIXIH2yDNlPQl9vcldmgB3eLSpSJuEwNRCoO9k/Qcnz0VGRpKh obik72ckjfTWcoQw9Z088sHJS5GRQ0OXIpMe2ZA0b6ymCCzt9bUt1JGhoaE70h5dtfT67lVH6N7E yibRHk2s+hCxRhrwRMCRTkkISAhICEgITB4Exu3D88kDoeSJhICEgISAhMDNgMDNN+DBI9+bgh7o Zqh9yUYJAQkBCYEphMBNN6Vpq0iOyUnX2ys2+nweOYWqTHLVB4FBm41EyOAtXXhncqyeU/koHPMD oBMq/UO3TEYWr83Ozlgs6MPShQyh2gFamVf/0H3bPcqfbU4ba0h76ve9+ocvf5BftG7xVGnQk7Ie QxV7Yy1nfO/wnPU7M4CCIjkZyGsygJik4CAwUAyzXScdDE6HMYxe6fQoEOg+spPjmwnbd9LGFcfo RT510dNwYRC2dR+fmyvCpCmhZ5w9R4H4SBYTI5NFhIVFbCxrgUTx+u0+DGQoEG8bajq9NHBqJs4P RieEpYfc8pHQynBKQ0DfEzGTlJaWmPrtIfdiwgoMvh5HifOI63HCQjUGho3vW6ZmY62uWl/Osddk aXSNrhVAqFE4/QpmshhNhlAGp8MQstAdqp2u4zKSja0XoUFBBAJbCPcyM5TyU4vIwehFsPTxoTWh Ky6S/EZTB7coDvUdoxfpaqqtLqerwORrdfo6kxcIbJoS+DBWBx/Vy4tNvdZeE/1Kml/pQ7x+HZC3 EdaDJ1ojzwSAVIdXMk7LQjMFxglSX14SfXcx+RidEJYebHsRt3NYWhnOeRPUrpYuR8TYRmwPt/Ym IgTkitsZqBjPj7VTdkPH6iVQI5eCtjsk/zWsHhl6RWmScH+p5hHVI2biZEwf55VWeEgdlPdHKXRy TPoVyMmgg4Fuz6SDJZdU+cXcsj6U0GvYz2DYdBj2NrrWhFxZbWwzAHUL3egnNRjdiYhejI6EET+T mtYE/KXrYstdzCMu90XoRWjDVghh4AeXP02JlS4pp3F3lLBghMB8xK5fQRy3jPJIBjwmLQtEITNO QHwQ9c4Zw5bvttN/0V48PbC9OLpqlfBdGKCpNnCXDvChmBz4h+RZOlhKA7MzKFoZEfqeQHvctjP/ 0xU9VFqdm2moXKAxwuxkSoFEZv4RtlOB9gvkMOtFhG6JSfeD9RuC8YH1y9QrgjPTX4qDuUmTRb/w VOYX0xXlfNZPEfRP0Z3xndLkhhWgqqErnlod/KwGQr8CWRl0MLBCbeIjO/JJVWnRd/aYuky1yqq8 ir/0uOQi/9h0GFFLtrc1qolhS2rijrPrm4yN5cXPLJgRjtGdoHoROhW2LZOa1kRwGdYm9mwi9CJO mvEyMrnlT1MSHb9BTgpVeQcP1ze3tM/9yVv1uSm8Fnb9ChY4HVZhX3SHScsCUciME4xGR0QDW75I AeYpVnvpXrTyabWpoaFY++JDlvaW9r6Ix3+hmdtgynhkVTQWn0HSyqD0PSx7eEYqpvmQOD2GVOVl 2tdsMxnrVpzIcdEYYXZiUpD8Iu30YRbtF4hn1gtOt8Sm+8H6Dcx8TC+KM+IvxOHDi9ILL29oNBqf Tjhb2kBIjIjOKXdqrJ9Jo4A6bT0dA9EJi/0/Uz35fpmJqM2vPEXZAeal7TjQWBOz+l1T0baUWBI1 LyFhniNe4V6XnRMePu/bCXOJujE3A5Y1SnpBTZ7/25lXMhYSZ/e+ooovZfDsn9tgivLW1UW567gn 49OJKefhDbXktKHBROkwkqkVUYsT7rlzLqz92nQoOw2O01JWcSVXpMjJRboXtTDhnnsV5BSXShC9 fZ99DKtEq+xdNb8pG4yafYE+Kqo5Y9ux0N9Rl5QVSd8h8u+oVqW0/VVONNkZSfJToM7hxOXEJChJ zqaXZqhTb7t1doZWp4jnRWPphERGfl27IzHH5Ga9ooR4g+1/LiKk0fDKKii9alVTb2nW7ISFUaTv OGY/Lp93ZcS/VrJo/dOb3pcrc0ix0Ti/tPoKKwqdnUcbHXetTohlnaS6YnOPdd3ym9L/3LEGKhG2 LJ2x4il+zGPWL80T3MbCDYuTvqMYbrhOtnw8P+sM1l5yn9SRkhNzo23lcalFKoO9bFYDUb3+8NK+ v77LjE+roaQB2t2BXNruUiqaLp5Kd61rzdJKyMJVm/esSjldZVi/U5ud5HnfBLOHtl9kA/4JVXXb K5sT4HzSn9vORCTWtv7HrUPB4Ym3F3b/0Fn3ZgPJ6jiwjWMgXPxWR+2r7xJXX8Gql/B5K5Khc9C1 7XmK2pn2Z9PpCDnYmZTGbheQn91vICDQZJZeDGfM32DrUcScSXkK603G3Fl7697EN++5VrEONEVQ Cgr3dYgI/QpmFIsmgzhRGhScDoMyqmTcl+yrh013QvOw9OI0KL5SvY8mJa2Jt4P++2L0IlwwQAH7 u6vXXGka2JHm6ij9aUoGO3eVHH32lT2bt+2B3O012YmbPvyPp2i3itevvx1ixyK0LIQRJ0HXu5h8 ape/v25b/dOR9hKVoMgnmXv33lYDBav0lUlwRbAJuGZ7aTjL70+/czEs8QJ9bG7dk3nlmQAAIABJ REFU2hfm3BlNzkIycV8dEjJjtlufyH8mfQ9ij4gYODVjlmusIeGyW7isweIplp/ZTjHaL7ReELol hG6MQJCwaJIEHPzrEdXLpknC/B2uHq+fbkzw4KbcGb8pzYjZpLK8uQ/uNgaP/7mWyDOWczcqietg +fjClyrq+wadg5bug+pMuDJduwL6Maelr6fP0me+2E8u9MIOHNBbFTJoPtdvutDLvXVng7Omr3sp M1dUwiuH6g8dELZDh/ZspBqcg13mc9C2b4mbv2CRF/kTaOsz95rIOXOXpa+vzyK8xSe7M4OU6N7v sdm6m9/a30D6z3HyEb3zE+4B4ujuS/NXPvzYww+tWkT+8fbumrPUIPZ2nhpz8TznCXjhJI7phHzd 24vKGWzJTF/fMJSQtW3bth1F+YBW6zkqHkl3Wi/ByaXxd0STgeN/2FsCynrNkD8qQQnPTtbPz9i1 7+Cu7OT1pSQeFBMStF5aKIjNdr63n/SfNpONe+r3bFxq/vwEwNVlHoRFtQF+OHW2C+qW1jP0F9O5 XsFGq6Ovj9bsWbpj48ByXDxSkvnSvmYOWlvPV6eIPIpevmH1G4SNNCuGG8hnxgmKG6IXlQ/9G+c/ 9fcC56/FFT3MdLy9LN6qVRTlFKbrjYb8qrzCKo3qXsAHs3PJfRsIKYJ212OxtB+tUOXAXFgvH+iI B/A44Q54QvT5F102GxSp2b61oL7HiduDiBnsvUhIpTLvYHN7T097zc68UiK/+1vRmJ2IFNQvrH9I +P4WQkqe23W4Byjeu09WZMPbu2XQ5kXqZXo82Jm57+jJnu6T+wqerSRyObQqpN1BD4P0G+z6FdHL xBnDR7webS26xNTV6fJF+9pdQYXhOWnTx+vZpaO3iT5QdW/lTWbBEib9ihczhbsMR7sjQpMhCPTe wegwBDlu6S4CHSgLD5PhJUDvDehOhPyBtD4YnYq3Ga59gW5j5HQ2QhGXQROW1oS6yL+04nkh0mO8 H73I/3/ATU/jjbPOBO9YsGhKQDT30opXZiXPFYfVrwtwd8ERvLQyDC2LW7UnToKod2oNW36gv3Br 1kbfPPHHwZ0O9D3VnpYkz69zv7XFc0vpzUDpCJdFSp4xEgRhdgZFK0M9QOh7MHv4In6/PvVFMVXq Ta54wez0kyAcMvOLtFOE9kusXhh0S56Q5iPC3R6RfgOvR0wv9Y9Jk8T0FzKL1OP10o0JWN+0O+P8 4fngoM1hd5Lo2Gj/udXgaXTcPdCY/EfpTjBtDBoULKtoOkMORi+CpYP84dhCxorW5GRFhvz1J+wn sqNEnRzVSbjjt8hiYx0Wi80RPn8h+qzPX7jz5IYIeYZxIBd/qiQUGQ43IaOww6gv4VzgTvDyA2Xw Kez2AhBFzwNkBvssZJ4PkzVi5ygMYtNFse3BrKfpXBOTRXO36Z58iJ2eDH57Qee3wVxOuMyPyYgF A0q3JNLueKf8hPtZ7H3I0us+j+AM4c+Z79uBigjizfXN7tYxBf7ftEO1ZPj1IzDmtCaUdhweGck9 l73Xb/T1SOiq0/A365omz23n9QiUyk4RBG4Y3dIUwXO83BznO7wpcEUxkV0cc1oT52Bfx6kzlx0R d6xImjcGd3nBgkvfDe46d9kxI16Ov/4ZrFAp/xRA4IbRLU0BLMfTRWnAG0/0Jd0SAhICEgISAjcM gfF7S/OGuSgpkhCQEJAQkBCQECBEGvBudBTAM2OJ3uhGgy7pkxCQEJAQIESa0hw+CkJK5zFR6I0s J2uK3/wk4dF8bwKa4bGYvDngU7ID+trTA/Y4DhTuo9BQejt1aIxCiZoky43AWMfnGMmfaP3MuN3h ndwHn3omZyTz7DHw1WdY8taybu6TYncVT5T/oaXzuE56o1GBwqAXCZ8Rd7m09PW/wWfvY7cx9I6d suuR7Ow+HJe4eu+XJE5Gvmw5xX/azhLI0xu52KzGjsaIpTqEaaGpl+DbRQhdmFqiRhyfo4QlRPIZ cXVD+plgvB6v10MH2mrz4Q1xVXG1HjaDXlcMy3o3wXfGnm1y0nl4/PPfY/vrn2u4YwYtC0IvIvAP WHlqIl/J4rQjgbQ4vqW5I0QvI+cIkhB7gqZlYeADLD9t5UC94BN9iEk3hsYIUU6TgUfKizvJk5Hp F3c6IK5GUC+B9YvJx2huPJZ570F1TUYaLHCRQevj5Xggnkg8e5Xx2hWJT6xe+NKBer2kenZF5Hsy sfZ85CNxNeb9DMswLG086YE4INrAst6OLrvdCMMfDHiTmc6DsiDBR2ny/GrqNb+J+HvN2lGeT4mK FPkanYZeHhTXedajcQvw/GfSsojQi9BFLhRZLlqlrHL3Ah1smhURWhyPBV57mN5aoF5SKIDRSQfL h3TpgT0IDtSGDhH6FYwGhUnL4mWC/y4TH+ip6rTqLBV8LwjLaKjzs7K0tR3+Jf2OacMeexojP6Vg aFejsDiRN50N0y8srrB6EalfpnzBukCaG+GUZ2dS02AxaX1E8PSuRyBGahvmOguNT3a94PRVnurw 2WPLR+mNEPloXNHllsawn/FxZQQH4zalCf24g8SYDu0/eLBs7bLM4/blh9u6UqNxuh+gvbip6Txg +colj7S1mQozTPVnLws34Sh9CenZGbMs58SK2sbG/ISvMwtLSX71M/fRtezZG0LLgtKL8FIamlL2 tHWZDMrKnP3H+2gaRjuC0eKwrSGY3pVPqvMbGkzyLQ/BSsaL71snNzXM1TyjWIrSr2D2EDYtC2IO IQg+hIQvvCs95c4YQhYlp6SsfOCBuxbBvuh2Y2iM/EzA4h/xC4srrF5Q2iNEvp91wxxOahosJp0Q iicazxiESHxi9RJkO8XiH6U3QuSjccW7NWb9DIYamj6CQXGsstCRX1msN8Aixj6TmXQBRnUjrxUY 6uSaJtjv0MNii1nCtbe9o7ZYU8tzLZub9PlKuP+Buyf6414m0a5TUDoPl/Uc7Se3vsYAqKXkiOpi jRY2nZtwkmNeNvKXW7SsQCjKSwi8kkX0QvY20FDu5iZ1GeD+B4uPyDVG9xH9z/SXZ7ttdF/9NRUT udanlLcEKoTyf6s9N4DWRgBD4+L1ZttDl0EpptjCVpvlwrm3UQPoqNRarUaj0ZarKVZy91QzB2m5 qwhfUPSXrXeAqpDX9cKtfR1Ir+7gq5FdX7g9WD2yLRLFB6Y0tVBjvB3s8t6pduCeFSLW0dFY1yYQ ul+7Fhgn16xd1Zp8uJHlN6Ax4oXxyzwqlEr+FNBUiRiAxb+IX8y44lSz6wXuIWmT8a1fEfm8Fwx/ vbFy79tNWohgmIw1wVo3NP4d5fT/QPD1i9Y7sz1i7Sh4vW5PAv4z9XK5GHjiegPkeiUExqdovTD0 eglj7AbKh2DgKojZH2Ly2XE19v0MwyMsaTzv8MgVqzxjw8bHsqva3lhBThZk7HQRRfrReXBMKQ5K 5zHXTSJCopau27GNI7fjaDXintb1Wu32Yx1q2qnw68SJ0nnofxI/Zzq5eO5QXqb81UauJxLoPPh+ yf+XSefB0utN5+EvhH3M8pfP+Y17TXPLALuoJ1WElsVD4+LJzu/JeT4CuLtJgTk96qJAO3JnQkLC kttW59bVNeqAPobbGLQ4/An2L6I3dtWz5QrTmj0H972yhqj0P1nKL8HCri/cnth16loDox7ZtkCw ETJHiB8Cb1xARjc1LXfPdsV9hEjwTfamMdJ/KXBrBND6UBqjhvXb9tSfoG2wTZ9VmfmhhRPlpjHa /frbHeYB+6EdPFmjrxr3ERr/In5hcYXUC2W0CaTHEpHv8sJt4rD/BRosmtNJ+YhIePD1i9Q72g9Q NYHtKHi9VA5jE9PLwBPXy5AtJDHiU6xeGHoFUcwdhnwPvVFgCUQ+GldkbPuZQAPxlPEb8JwWoPUB Mh4gfIlYMN/Za65vqOmhbNdsup+bnc4DWnhQ9EYYfQ9WlWK0LCwaF8CZI6DhGWBswMwD5DswvGK0 IxgtDmYPTWfrhROx/9/r1aRkS2YpMWg2CMvYMulXUHtQWha2RSL42CwWjjHqormvr6enx+a+yGAK Gi8aIyz+cb/Y7Yg6xawXhPYIl8+muWGCBomTlQYLpfVB8ETjGQOO0kUx4hOtF0QvLp4tH6U3EpHP jKsb0M+I+BZ4Crv1G+t0k5ZOlvlscnWHA15agffl6BZIu3Nz03n404iAi3RaTMTfa47e2vLiLJWq uFyvy/efYg2sIBFalkB6EXMtdzMMM8BtMOOm4iCH2WA6g8GkHRHs5HNC/UBlDbsF6nUXMQNjDbyE 4z6E/5T+hkG/gtgTQBc1/PrUCD5WOhnstWXphYlzL+tcu3Y6sx6wjQmNUYByJP7Z9EBCfQW2IxAc WC9CfrdznvrFcIP68t14GqMAuyFBCP5JSIPFpvURxRNmjoVNUVwtPLhgQXcNjU9mvYjoZUqHdofF vzgtmtsBT5yA/MC4ujH9DOIaI/mm+/Cc0o7czHQe7jgJ7n8gfQ9WHqdlYdOLoHLYtCNYdpF0ll5b S0VMam2T9VCa5wNvlH6Fk82gfRGjZUHtwfFBi1znidHSGLHVsuMf5g+gXThJeGysB1C2ACGVVS/C yYCd4OUHiBBNCKJ+RepdhBWH0x7YjoLQK2L/cHoDizL0BmYaQcoY1wsEiZ2MnN6IGhxkXIWsnxkB WDQLYxCcFEmTgs5jzOl7bnxVdxg0ShX9CAC2YoPnXmpS1NeNh1PSOBIEJmE7GonbUp5ABG66Ozyu pxzBz6Sg8xhz+p4RABniLH0n6z84eS4yMpIMDcUlfT8jaR6vYFLUV4ixksSFCIFJ2I5ChMyUEzNp B7wpV5OSwxICEgISAhICogiM31uaomZJJyUEJAQkBCQEJARCi4A04IUWT0mahICEwE2FwNDg4NWb yuAJbuzExnNSDXg99RUFBdt3HWweR9KFnvaD2w9u336ohluna4LH5k1jns1mmVK90ij8tZw5WqHf XrB/+85DNd1D41+zg3abzc74pBHSB4doA3UOMc6G3O7OT/dBe9x5pJ6tbOjk1hKZ7I0a9tmQWzPp BDq5qvS4NeHxFL769dg8AfaAZmL+HR32p1xrcIzUoog5c0+X5pTKb312c1rsSAuNJp+zvz6zssAc SfrJI2/nv7Lsn4c3lu+wzqKHO5e1lpwywDd2yh9snOdZ2GM0WhhlrnbuLP1xzRBJ/15lxbo0WPjy 4P5Mjdkwd5He8OTGEb+QzhAsJHV+sn1Z4/uKSLoOCWwxM9NzHlGvuyMksnmRwf/ajip/vZqkGut/ mBJ84ZuwRPD+OvuPxL25XnA1+V774gX8+jVC2ih3kHiIOHzwpzu6rXOhCQw1ZKxu27MyQVBg6zny v367vpIbdOULNFVbtiVx4eO80FKyP7PIYoKc8khiGlI0batPC3kbEeygO4OfGzNLzhIy69bn12Uw ELnqMEOub/phkR3GWR9R0oE/As1HtqY339L173sWT3OfmvB4jvuARz/0CI+O9rHDea6BkA2eBZbd aA73f17KRm210qCZ7iNtuFKjOO+8/I+qIROhTXquYxoJvzpgICZyCQ7jb39Ip+2Iy7u0aAZ8GnXB FjEn1q8hDdotdiKLlfklQ1mn5YJFNmde4AmPhVcvNlwyQYdhan6z4PtpCReObjkNgysh5h7XTe3V QYuN+x5rTmwACIN9F+zRAfZ4hHN7ly1NZMjUINwiXGowvNnf9u8VCe6YZtt/1dZnc8YylPqJ9xyK yImOjg0f6rNHzovmlDovdEI8KMP9F3ejsji9fvk9OgL3xPChuZ32Poszel60pxLYdgZK5lNwe3A5 /vUu5i+m93I3nFGmmQ6tS/LLYrPDsmcR0Yx4oxkD/fUrjsTDr77uNpggSLg4mWvxaqv2lq1vrOeC kkoynS+UvxbVq86dR7qLtKklbum0LIlxH4n/F4vbQPt9/Y167JmB8rK4HBLDHlhlKYY8s3PGQtYF nX+9UCuDj3O6pNEI2p0fBIF+YXJ8/XWLCTYO8fxuif7/LR1l6c1VEHKe0Q6yiOHpL4E/xtsFO/91 po7nlGb30X0ZYRGymJgIYH8NCytroQsSAvHuwb2/gw6u/ne/PVxTc/Bgzck+2pl31hSEhWUcbIe5 h87tkDs5uay+h3d+sKd5V3YGUMhuKNhZ+p8Gwt2cHNm5ISwjIzkseV+7k3TXZFCy2bDthzuvEy++ eNQdT7WtpSuVqNf9qu/I9l1nUk3cofbx11Nk4TG0Z66S74qI0cbJSrKbL7gGo8Hz9QW7w2S74uJ2 ycLKdrZw6d3GncklyRm7t2aXRcRp58t+6cnPMDUyRbeOLlFCSOXH/7B1t7/P7csNT2fFEmfLx9uT X5aBkPnauIjdO0/SddpI85FskL+hvACmbiBd9ssNNaf5pRy5ogE/Set1xZGQKjc8ax14spo7f/4i 168x7YcM7cZdyS/HUKVl2dnlGaBul7G7/ZPtYeDXXpgs6iujiWEFH7fz2lA5zS45spfDInbNf+4Y rSzb+Zaqo4dg53RX7WHj4ZpPjnTaXXi2s/LzKli/bHzI1fbtu5PB5oK6+vq6AtA7/9eyss/ohDRm J0s4TcPsYcrB6l3EX0Svs/njsqI/18JZq/l3u/Q7D7a72oXl9OHskrCYXTExu2TJZTub+7l5O9xf pnwkHqKfeaFXH0/Xw1avNRrWe+68O/9vBR3tItWmn9kHnjXQRWyG8n7fYekxVtDRbpbamOe49nOr YTkty7qEgWS6oXGL28/2l4RPB3GWQ8UHszNKMrbuLzvpaY+HM36ZrNyrevytg7Tr4TasXuCkUL8R u7du2O2Kc1exgH+Y/Wi7QPzC5IBCxF+Pnd7tCPIz4xDSBb/88gf45J1geceQB/NYuemeC6zB8ww8 vcv47WP2+GUL7eE4DnhseheMZgKlqwDalEXphZc3NBqNTyecLYWhkrtwxGhoQgXfkoWLQdScwWMF zSWFR177S98ZuMK+/86FHvmx6uJ4BRmqVB+jczjkQv3D5WtKh1S6dXWGBzUKS1Gq9sV2OpBMN8Ed 1aWqSpKvvh0+yHbn9wjy2VswP5k/rv3bu4b2Sm5ffju9jbS3dzTNXaDWP95kSM0il4p2fNwCZ2fI 5oJ8w/nSqpn5xctVhBg27X+w3t3mfUTzB9Pi7phJ97rOfNr81WdcWvwtMAQi9lvayxLfKzQReX5y scpSWXm+AdSR6RGycBm9U7zQDwsETx+CRHLaxt0HIHLIUMtLR0COyrClrXGthn6Z7qT5u/5enEmn iOm9gvI95aYP179r5nonJD9nMPOHjQ9clN46E6bXTKXH1qw5Vq9aQDUf7+/H/GWKpomYPZi/SL2j /qKK7Z1teSVnKUQNZ0sKW4tquwBzYjt9MG6/EuYVs5Zrim9XmCxF6a/9tJkih/iLyUfiITxy3rcX 0UFr8cLl/I04J8B2tI3GpOZHLyZFR8UufGxnGoQcebv99JkzrbCTf392yhyYeoh+7EdV2hUbYEYU 2/C4ZduP+8trMJScOhUT2V91Ok+uzWzhrgVhWF4eG99/qaEBZic8drDbY1/7rkQan3J1qjZrqMpw yRXnnnK+e5j9aLtA6gWTg/obbBxi+X3d8Tsa7KnNgQmt+G2r53ifYeLpncFrH20XXnnGYDdg3msM dCAiYxKUJGfTSzPUqbfdOjtDq1PE03mFhas271mVcrrKsH6nNjvJM7MUPm9FipxcpLKiFibcc6+C nOLkthtKGoAW50AuHWpSKpounkrnbkuiF6cVNWpKV1e3W7YtJO0QqtUduUuphtBs4TNug+Ze+FEe iVTIhypzToBYFfG87qVsynkljbQYS1J5fe1GHYzFsJ35+m+95AK3X3r4q6Jtqbm6TwozLZB/Txpp bipJ58ZrvhDj10HoKvPKBUpDa6YBKH3SHilsbvoG0iIjkr77RPLx2tf/1EqGaPdHuEac9ECR7kRJ piW/K3cPDNEP6s2rWxv+8IU5427nrjdeOEkERGwkRvX6ZuFBoCnvyGpevf7ZkqXT4DaObf/ajnrI Vqys3fHdheTBlWbtmoZYXe5dC6PIi7rmokwHEBLEPvMjXc6bmbw0TE7C8hkLaI4qpcGWNSc+OV7z 47uWw3HSukPm23cterdQkdz4x0fvcQwR1+zcNHZ+Xgvrl40PmbY499mq4y/Lq4iq6WcHYKmzN4YG oyKj2uv+N7O+EhJiWcIJQezB/MXqHfWXrRVSozfnXHv0dEXM/hztloHcZS7zTn3+DpzLX9uxZ+VS QratPJix5pTB0NmT9l22v6h41wn/eKDJHLvElav8YDF48tM/X57/PX6Sc7bvU4UYcuVMP43JhLlx LnmypNxNSXT/aiczDtG4TWPb3/LeSyCM5S8f4SrjtgMpMueRgw+tP1X1fuevU+6aF7VgXUXug/vK ZBClwrYYaY/nuv4CeYqVH+747jzywPdO/Xo1H+dCQb8dzP49aex2gcUhIez2O6cPqd8kdrvA4hBr d37u+B12tX0MKZqUVO/xg4mnX0HhELUHa19Cyevb8Tb4+iQFXZqj+VANdH11dhBoeory8s79y7VX MqgYD82EZ8Cj3CVwm3EBpmWEPprmpalEJkzQz5hNE/mNo6EpBBoanX2LFw0Nf9LW3vLpxYilaUl0 oBzFFh57Owx4cO+mXv/6+q4nVp8wkdj7l1M7+Hma6Bn0+dMMsNXGPXxy8I1q5p2Jt30LhiL9Wl1b t3XtIjjP9xeu/HS0Yz6sEky8chHmG59e+8KCakPlrAKVPLKwuaT1n4P3/PO38vdySGxxnXLDnEvr Mw05bjmu1uyEwXgasP9QQXHACnTV+rXFYIpUzOUlD/X3Rwxxu7z9qqbntxlek8M0VNvX58nCxaj9 HbSQnafWuTrUDweOK3ABHcXXDDc8E/5XHIdpMtX9amKGCen+JnMpPEQsfTPKqs4FgKJn0kqNiZoT NS0qSkbg3T865k1bguWnBgVsg6cxfCgsdItdA/zDsMFoB7+ovzQLa0PsweWg9c72l6VTSJNx83bT pwntwHVGBnhxm4vMiL8gY/kriArYYccDZONlupRePZVnUPYnN+25RU4spmNfdWXHJ0Fsnx4wQ054 yPrtcBU5W/X2Z63Zy9I4Fc7uM90xC5bGkstIHCJxC4Vx+1n+8vbfeStFIjx2BlU+8I2VEH6JH74D nO4PHPFvjw6uugYuQoDPG7Sdh3/uOKcCWRtmP9djBbQLKoHtFyaHlmD4G2wc4u2OKkA2B6GzL7Nn evfPfFYEz6t9R5s+OB+V8IPUFK6RBd++EEuCTR6/AY+jd0muNpZs2xxFBhMGShpaz8FoRiEUaCaW 3G7+tG5/5SdrNa9mLJTdmUHydO8/f8/jjtZ39zeQ/nRKbbPkvg2EZL5UsfLnP/me9bN3VDkNRK6A E9xrB5SGJidxC9xcGMweGhrQYGvRJabCHDTRtdmfSgisthHAOG32LTSXYu3ShHtmPUNOUGmw9Xz2 2z0W+F/15rGsR52/r4Ldv792RP6rtd/bRJqryDfGfuc9K6IuffTp/qKzMQ+F5/Z8tpfP/9pHmU+Q P9DL4L/vOvyd1x9jvhhpayn6r0LI8n77N9ufN788zf7+u8/C4dv1b2XcT0d+eeRsoFc6ZqqFkdj0 99eO3qNd5RrQSpeV/lM9x1ZyFu5blA8tXUgiF+5RX4MifpvH/k8LXn5SR1+re2/JQF/jTsT+Fd/Z QIyGkiNL+jvVp06VgF7YPFF1Ka8IHsD9g4JjoPb8n3sROWSorfJYSdWC4sZHtj/Ze3vie0Uk0n0t cOt3YZ7R8PcdO533nf2isPIS0ec4NsaewvJzJvj/OK6y8bmXHC85VEmrybLnRf2XsoiUgg0boS9M xOz0F+w+HmLbg8kRqfdopr8LPKC6VfL/B4/Wlf3+1BE4eLu+uFtG0u998bH42DuWZdB6eW+97MKO pbYPtrRCvcvXLp3v7D/K9NdXpucIiYcPfxTxl1//Xwrb239S98J9m/1LGljhEavX7CSnlFXH5DNs 5UutbxeehuSsbfcmJF3OVDRXNZxI3+ooV84nH/wtB+qx+ImBHQlJzDh0W+Aft5j9mL+dxte59lWk 2j/7v88/t+UE2EMUSxaTqz0Hf/8aTNm30ta6v1j/JSF3Pf/jzaTN1X792qMi+SeAZ+lHifUnYH6Y CoErW6xK6FnX5m8/9D30TGC7IH8VrRd/OXdEsesXa0dYHGL53faz/8fMuQNOuC9ruDwIngu5Ufzk B8+ubqZ9m2b2wDZuEgK1h60wZKkjqLKQ6fITFLGIkNItqaVb+HSgd3nUPfLM21yrWbZeXsmdySqu ToijdqZtrZanbllU5ZocIyXrKzdac1OeatOfSdy0pjIHssihZySmomcrH6nPTYHdqIQH80FLcd1j C308jeBHK6JKHPXb29MW3UPn4J68J5pETX8oCxi/7oRd0nWef2RHTnT/9TYHne6Dx3iNX29fl/pY 7xb9z/Sbcj6kFQ9bVnLtCpknf1PX35YSPn9VU+/LzAFv0PZVKXcbVnny+PYfrps3dLKODmDw8KZu 8NZt6lmk5HzemneJfEF+Vqy80lLZav2Ve8Ajqpkw2hnkserXnijy4ijgTPH66XfbX/m5SbvmqabU unRjVemXrcXrspn2R8c/ZX4isvB9TeWpJvoA7HyD+1WE6EdXa3MMeaVwKcA/qhni7Iln40Ds3Avi 54tWv1nEmSPXrlHG8obJkretUDa0GoqMFDrVCsMa6P1F8nu5I+xGL1Iw8fku6Sw6W8VlM5W2wnid 9eTDG+dFkvAFiJ2CRL8d/oXsQPsROUKcMOqd6a+fOs+ho/NUYel5egzP8CAa8pdmw4A3LyG3Qzn9 WUNO0bFN9FxkluGn/5ExJ9x2mu0vzcPakHj47NukyMCFYsP50gZOO5SODo8A3Aae1Gfu31R5gjZI Miu/8alXkyAAIjMMz9bSzxVac6ro4zyox+pnlrtqmB4jm1/cYvYj/pIjXxzx/c2hAAAXbUlEQVTi LsLk/afztpwGHYpype4xiJ+h/o9bS/geBpAroRcEWf+q3Ezc8e9fL6mbrTlLdXVvfe6Me+5b6TlG 4YVTxG53sp/9ABKzXWBx6BYT0H6R+kXbBRKHaH5BMWtn0e3pkFx1yvj6Gv6TE5iaZuPJD3i3L1tP 6ICnvNvN5hF0+2KZMZq0wPWkb1iKw24HSjWH3TowYGVwq8EJLoOPPZBotfuk8AeckMATVmM5oAy0 c4yNV884MaZJDit112p3jokWEG694o2lw2pp0/yKkFc0XZftoVCK2u+4Yu011yp+AbqKOy67bbhi HbjMRj8AB5AMsNitl8GHgcCqBPlwyi0X0BsmPxPfAHyYubwTUX+9M3H74vaMXI5LcIC/AQpHlODS O6K8ocxkH7D09loGvOqLl+7g063DxP+o4xb318nF1TB6xSBwWM0d5q5ea2/b38vlvyCK/2rCcw9n P9ou/EQOJ4e2AtqfeBWDFJF25Mrv1RWI5/cS7LtbVy0nvyDV/whsqb75hCMns/8JtEcoMCY7k3bx 6M7Du17Qn7RWVcGVG9DQ7Hhs6WguB272MkMtySWp/DQjuMLNIA1/TT06p1sOJafCg0zXphn4+bax 0uTWIf2ftAjcwLgdOYbN+rB07t6UL6J7cuCpeCTGQ2V/qOSM3MmR5xxq316SWBKpHVDnIiiMXNaN yzlpBzyMhubGQTshNFmam+vOOCMjYQrHSe6SP5zg+4l/CG209BytO30+MhyevA2R2d97+K6lPpPI IdQkiZr8CNy4uB05loMX2j/64rOBwSESdWvat+9bOsf9BIYhIlT2h0oOw8QQJA11Hz7euWplhjTg hQBMSYSEgISAhICEgIRACBEYxw/PQ+iFJEpCQEJAQkBCQEJgGASkAW8YgDynQ0V7ESo5HsukPQmB iYdAqOI8VHImHkKSRTcegXF+zgI0KBEzYqP4Ly4574Fe57WWz8gM1+dQNwwRoBHZ2/qlLG7ti8xV 1Snthbxqgd6es9F75j7Q/mEMRuQMU+q6TyN2OunzCHi+d91boPzxqsfhXHEO2u0kMjpqmnPwarh3 4A1X8LrOB+KDiRsmDrFiY5w+cvtdhoQqznE5XIB1yiLssxf+a+7KpDEGYDzF284cKT16nETYSfT6 F9et8u5/MLOCri/4gJh2vJMfzxB0dhjow6ezaFD6O94JCb3OYE/Nw2/sJLO4766HSExs+tM/KHgs nl9eIdC0UdGIsOwPFO2TMi70GZidQ6aflqSm/rBrR+piHyODPWDJD1U9sm1BaZL2Kh1Vb/ZCof4t j9Y+cWXvkj/XwKeZMcv21GzKsJ2uyX1rUxX39RgVO6vc+kK2+eOCxI/qgQ6pH8id6DYXvtB6bstH 2e41urjE6/th4YNIHC4OkWJjmxyE/W5DQhXnuJxzro6CkI5bt65MCva9CT/aIwiYhqEMU/6epIA1 V9wujdt/81fVRaeqqHpKcjSCAW8U9UXIdeI5bugEqXg8pzR5GpQY35W0kn6o084CJ3h6HQuspeK3 AZ2EhUUs6ZfNcbmngcCizA30b6jBcL5EuX/tkX5+PSe/vHDI0YhAo4kQoxEZ+J/Z/Lo4fHmm/YGi fVI4+gw/OTQD0HNcoBynQAti8yzI6VPU5wDPH4gPamfkiqfjCSykgsPioxM7YMoPVT2ylfI0SUOm yuY32wGufkqTBOtTN5jN58/Cqr50Yd/Ob+zWC0aO6shk6B9wXu18aT8d7eSx8FU+J5Vbc8ph/ycs VQARAkW4vwYTMcFix2y9PqlAH9MXGJ9A1+JHfMrEx0eS52C4OIQ170cW/y6RwcSJ2wp/v4Kx3y0D i3N63l8+TcPsxOWk/PDQtW1GJZSd6bNw5wjxucjTYPH9A/0Ftq/TdL0sz8ayExZKsfVZOL4Om41b M4XPD7RTF/qgCbP6F6AHCujHMH892j17CQ8ccOQ1Uk8jfDylOVh6xesLwwfD02PHpNgbtzs8oEF5 10P7cnpoMPJ7KWuXysAegV6Hu6iJzGr6H/8nja6wTukt1FVrSmGVbthii41PqrmV17nDgJ/oZVl1 Kw6taSWGp6vuJu2vQsEh05cW27q52LWgQCPy16buU4sWbdj22HNJLr2HHy7fQW8W5/13w5Ob+TEP tz/AFHcC0GcEyoGTQM/xBF2I3bWpHuw48IDYV4NYfiY+onZGPbRKR05nFv7pw3Wb17n1B/cflx9c PR59L/v5k6dgIU1Fhm5lX0XBF6fmDsH+73eksaDgaJKWHCnlaJJ+Jet5nzMaaJJefIjc01S+vn95 rTZtadRVreZTQ+ElYvjRhvDzh7hlNVS6nD0pkUXf2R2X980VJyz22FtFIjVtKvlzb65vmKVp+9e7 X3pjjQgEQB/z2J9r5kbKl0dUVdJVqbKa8lzxCXQtL71FCQpgk8cWV255MW1uFI4PpkQkDoOIf5Ae VJxgfgVvP7RTRpxj8kXtZMiB/JYzR159v/x9C8lYFG3wQpEZ/17nfXZT1us0XywpJFrzcxvbWztn ko/S36uBHCJ2estXzCINlxTGbfWwIHXLx0WZH7kW1SOzik3P7YDbRKD1yfp7U3xsRrSllJtUUOqf 1G3kvttj1gvQBiUC8fL8HX985oHK8if2Whoy7mvb80ACb3T4jJnel9pcIluvSH152+/df2J4+uA1 WQ7G7Q5veBqUkdLrYFURNS+aLsUcGSmTRc7kJyoGWRdgvuVHSiMyvP2+crkjFn1GsPQcWH6EbkPc zqj4RzSziOnUrqMXGOaOJElcPpUwsnqMlM2AO7OGIdMAmTGTnDLR+3Lit+i+tz0YTVJU7CKo9fi4 +fRRx7S4+fQ2TnV7THh4dBws9g3LIaXu3rrz0Du33G1o+x+URHAIruoj5y9ZuAQWuiMRsLMQ/lvF rgPZ9DEYXcvw+FCrAreAOETqN7CkKyXIOMFoqkZlPyvOEToklFaJusGQA48qgNu95LwhPja69DR3 TcyvrhwsPnxsXDq+971frnlv9cfOlfoHNXfQNfDY9euii7pElPEa7YqsBnrZTbuXoGm5kHrBaYM4 JYwfNt0VWl8IPiieDI2TIWncBjxKg/K4BiAE2hf7v9ut2+z8oqJuUCm9zo6f/gpu5Pmw8qaTaLcI 9Dr0Ghvf4KqoYX15XFx5eglcd88qfvxbsZSOpHzD1vKt7r8NWw/WeM1NAI1I/aEXjLXL4dEP0IhQ IlCO9uKtAt87w+HsZxjFlONFK/NSVfvXQIuTxdHiMMrzSR4aGp/8GD7D2Tlv/XdUgNLfz4kjiZoz nPyR1mPamj3GVKhtkjB/yZ2UF5AUP/5R7nfRh4veNEl5Z4EmSQ2875QmiSOtsfpc2dholxi9+u0f lqtgtnyoquhEzpaPlIm/KesmURuftg78z6eirl7mYgBIHxLe+tmA4fspUIK5UfoYGgmUzumVrSX0 ASGXT6Djqdi8bccz9XU0figdz3D4MJVAon8cYvWLlcfiCpOD+TUK+5lxjsnH7AS/mHJaW+ggl/9g 26GcA/Zn9dxFDMUA84ueE9uqilrpnX/U3O9tfGAdLPyI2cnLly+vO/TkttxNFQNbdIpZKzhGFI52 irS+/qeS0pNUlIeWi8YJpeXasflA4wqIBxPQcmH+LgbaIK6H4em0qBzW5hXXiF6kX8XwwfBkKZ8M aWKXsmPtH0KDwj1acdNzwJA1HL0OaiZHX6LQPf4refg3ZPq/rIhfTK/6hzA6El5vEDQiiP2oPdwJ HnAvOhKEziNgBsMtFsmP09Ag9Dpuea7//oEw2P7ZX7qukCVL70sQW1GClkZwCLoeUx54QWE05Lz1 07eBzy9Sk3OX7yWGn8EITdKqW2m+hq9MgyQlijitdKxLBWqYwZ53Et+rrXvecWCus91ISWvJ0F/O 2cliWTRVczWCAxxok0hUNKXTHW7zp4/h8zPoWlB8MA3sOBSpX7agoOOE70sZfiH1y1brTg2Ic9eJ APmIne7495cTEU7P3DaXLtweFXsHfSctgtZa0Pjwa5zHVjtyv3/oyAcLLh0I++UhboqSN9TfTpd8 F80SiV321LvPWKIjCU47xd94En9armkLEFornDYILJrGR4Wn38D1stsjhk9EFxtPHoXJ9ztud3gA pYcG5b1d2bvDYnbJas47PXQkx47Wf1RRxdHKHOmxUToJ2Ci9zixgOGhr3190qt4R7t9PCzUENCJ7 KH1J/19N738VnpDCj3ZwOpLSkZx4ob6e/1OfOPEMfSzXaax004iUHTyyPd2bRkS/fbu+6BDcAl0C GhHYP9jDvVfCtF8wwH8H6DOYcjhamcrLsvWK7a8/VExLuWlx/CXwx0h+EXzE7XQ4+ftbXyQv/CXx 3TXr31vT4vscn2kSU/5o6jF61S/hQnjIQJc/Xa/CXqilNrhokkw8TVLvM6v+XPufkAw0ST38HbBl z6t1NQcPvZQHU0+xd0Dv6LgCbhrWVP7b4fZTl6fN5u8MIuj3MECvs7Ng3w6IFWLZr95fUPFpN+xi m+DXax/V13/0poHG567DZ2yUnoYQoOPZSfVmA8suT8cDiUx8MPlYHIrUL1tUkHGC+RWs/ZR2hxXn qHzETkzO3FvvBJMK33287ON9Ba+nA8rEkvlWhyVYfFz2WN4pOfS7fmL7qwmISui9OmYnL9/Uujr7 0L7Dn1RAfxWnfdBoJ4G0U5QGq194mQlofbZu37thzSmwlKPlwvwF3bBR2qCyF/8rB3Y5OU5ytXsf 4Fm9yxWfB7fvPFIP0kX0MuMNwwfDk7NmEv74dnM32EEWDcrZz4Kj18FMtls7udcHTJWnTOfjNmxc JtZ/wjTEqSBpRCjtBct+zB6UPgOjlcEEYfkx+g+QI2Zndw3l3Ml66F/cl9Sc3p7OD+G/fHntT4C6 fNiNJX909bgqY5u8tcEUWfwM8KfjmwhNUj956uePa5vezXPR4hCVYePj4APfQQBVk/Jtbt6JyLU/ 3J1Cn9kAvU4RT68Dd4alpxuU87dmk8WYcoEuJ4A+hk3HQ+Ww8EHk43FIbhK6IoQmBqXduQWhhULk JH1X3dQ/kH6sNO+jBhIJ1y30Za+/ms8/9UBw+Ljr0VB0AuKf31Twz51OAurXJb/yRCYXQHL1/a8l y0gUQjuF0nKhtFZs2qBV0da61hI62tGtoRQGztjF+esyMLqrVXOjmPEWjsRPNIZnCD/L4W2fGL/j v3i0c8hmvwqc5SNc1dgJbwM7SbhsBnw7PDYQXrVZLjtlvp/Di2gK0v5ASeCRPWJGhGPI4XQ6YYJt uBFGPD+KD9POnk93LjIUqR5sO+B+H4yzb/DwfpnytLz2+RPr6JzRiDamfLxkgJ3worbN9pXxVejL lGnGQ+vQp2i4TK8zVBpcB4dHzxHwhBfH7bJomf2yzXk1HDi4xyZ+XH7FRvtcQIBlQeJD39RnxWEA bl5O++5CTpG4Grkcl9Sg7fe1Bj8StxMpN2SzXAEi9cBOI2i/EAVYsku+n2r40JtMj472rOHgtF3o +M3exMIhTVd+7oLIKK9gE/UX/LpKYmX+wYNZE6DXkxGpLwQfFE+PwMmxN/4D3uTA8ab04mpn9svL KhfoBnKeos+xPJttX1nMntsaT2xa5Ukb4z1bR1lMdZ6ghHKaoxzfQi5pR0JgQiIwkWl9JiRgN8wo acC7YVBPPEVXe478rTMtbZXvaDc+djpt7X9saRkCdiF4r4jEfT89Y94Y3cGPj3+S1imFwMSm9ZlS VeHrrDTg+eIhHUkISAhICEgITFIExvMtzUkKqeSWhICEgISAhMBEREAa8CZirUg2SQhICEgISAiE HIFx/SyB82bQbiPTZEBS4xwaDI8c7hVFBIBR0GEEShoFDUegEClFQkBCQEJAQmBiIjCed3jOCy07 y5Jlu2JkJRHJJWERJQ8320eFEqXDiHu4tmVUhT2FOBqOoqLWkqLP/z6MIUBPszs5uSQ5+0gzV95y cP8GcCFjv/cqZR7J0p6EgISAhICEwLgjMI4DXneRNrXI4iIJAG4X96qELkwCaVbcYPnTdojTYfCl gHaH+zDLLQMW6wigcRGj4fCU4/ZQepoefoEmyMSm4cBoQdB0hHaEyy/o8rYuOL3eJaV9CQEJAQmB SY3AuA14PcaKEkB2ltqY57j2c6thOV3siV8wDmhWsktgpbEYWGwsuWxnM7dOD9B2wB1Vxu6t2WUR cdr5sl9mN1+gHT7QYVR5aIYO13xypJNjqyJX27dzN2EFdfX1dQURu+bP/7Ws7DO6GDRTPqTDxqLh 4M/4/nL0NFxS5cf/sHW3C/Q0lGoNaDgKdofJdsXF7ZKFle1s4eyEzEALkvxyzHxtnOzlMLDnuWOd vFAkHeg/tie/LANnoUjE7p0n3XedQv6I3Vs37M4AWHYZ6WpYwerltUu/EgISAhICUwSBcRvwzpxp BYjz78/mOO2iH/tRlXbFhrmRBKNZwWg7UDoMIrt1JgFKz9Jja9Ycq1ctgNXKyfH+flx+cDWO0dO4 aESGVLp1dYYHNQpLUar2xXa4f0VoQdB0wqb/6GvflUjJ8+TqVG3WUJXhEmUuJbB8LkL/gcsPzl8p t4SAhICEwM2OwHi9tDJ4pp8uYZcwN86FoCwpd1MS7Ld8/g785q/t2LNyKSHbVh7MWHOK0qy8ArQs nxRmWigtSxppbipJp0u9EkLpS27ftejdQqAZ+uOj9ziGSLSMe/Nl2uLcZ6uOvyyvIqqmnx1IiyZv DA1GRUa1vPcSU36a7+KNzNlCTqHrx5uexkCAnuaRwuYmoKfxpuHoJQKNUVHC8hmwhDFQDikNtqw5 8UAD9GOeBshD9+ObTjj6j+O1r/+pFdZTpkU5m851/QV2i5Uf7vjuPPLA9079enVDrC73roXtdYV0 IV1Cznz9txHp5TJLPxICEgISAlMHgfEa8KK+vUhFzla9/Vlr9rI0Dm5n95numAUwyNGNSbPCnfGn 7YBElL6EX6ojdk0qtzQdjHacBPqDyg+g4RCK+O8g9DT38awgM+9MvO1bMETp1+rauq1rF0XDm6hs WhCEHiXi9G/l7+UAMXGdcsOcS+szDTkknM74Orhhb+BiPyHzBm3n4R8QAcBkJ0b/gerl/bnad7Tp g/NRCT9ITeFA8vdSOpYQkBCQEJg0CIzblGZSeiZMMjacSN+qr6j5GOg2Ipa8uey1rywYzQpG2wE1 waTDAHqgnXt5To09LwK/xqEa+viOEEw+RsPBFQr4welpZicjNEYYLQiSjtF/LE/+CVhT+lFiclmG 7I1N9J2fCAKXLRj9B0Hk8y6d/ODZ1R9u2fRe6m86RkkAGwCNlCAhICEgITBBERivOzxC5mQYnq39 X79dX9maU0Uf5xHViupnlsfOm8amWTlpdNEG+dN23BHNpMOwn+4sOlvFoW4qbYVxIevJhzfOiyTz EtjyyRCbhsNzV+hVgyL0NBfnHujdov+ZflPOh9w8JChOrl0hIwSjBcHofjDakfjN1pylurq3PnfG Pfet9BwjffUHtnCMHgjTy5W6fdl60gx2Ku+OlW7wOESkHwkBCYHJi8C4r6UJ3xhYgO4HaKajfRYL dtFYBNKsYHWB0GGg2XmaoZHLxwQh6YE0HBgtCJZOBTPpP5y2nm6bIyZ6Rn/n758w5MxNbqrfwE8L Q4mR63UbfnVwkHjTl7jTpf8SAhICEgKTC4FxH/AmF5w3xJtmfVg6d0/Ma9M9OfBUfOwN0SwpkRCQ EJAQuIkRkAa8m6/yBi+0f/TFZwODQyTq1rRv37d0DnPa9ebzS7JYQkBCQEJgTBGQBrwxhVcSLiEg ISAhICEwURAYt7c0JwoAkh0SAhICEgISAlMDAWnAmxr1LHkpISAhICEw5RGQBrwpHwISABICEgIS AlMDAWnAmxr1LHkpISAhICEw5RGQBrwpHwISABICEgISAlMDAWnAmxr1LHkpISAhICEw5RGQBrwp HwISABICEgISAlMDAWnAmxr1LHkpISAhICEw5RGQBrwpHwISABICEgISAlMDAWnAmxr1LHkpISAh ICEw5RH4f99kwxktHeaOAAAAAElFTkSuQmCC --Apple-Mail-28--587058144 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Thanks, Dino and Darrel On Dec 21, 2009, at 6:37 PM, Dino Farinacci wrote: > A description of the design issue: > > (2) Map-Requests should not be sent in ECM with the Probe bit is set. > These type of Map-Requests are used as RLOC-probes and are sent > directly to locator addresses in the underlying network. > > Since RLOC-probing is intended for an ITR or PTR to know that the > forward path to an ETR or PETR is working, it sends Map-Request > messages with the P-bit set to a locator address (the destination > address in the IP header). Since the message path is direct from ITR/ > PTR to ETR/PETR the map-resolver and map-server is not involved in > the path. The spec currently indicates that Encapsulated Control > Messages (ECMs) are sent from ITR to MR and from MS to ETR. > > We want to write language indicating that P-bit Map-Requests are not > put into ECMs. Any objections to this? > > Thanks, > Dino/Darrel > --Apple-Mail-28--587058144-- From dino@cisco.com Tue Jan 12 14:31:29 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BF51F28C0D6 for ; Tue, 12 Jan 2010 14:31:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.319 X-Spam-Level: X-Spam-Status: No, score=-10.319 tagged_above=-999 required=5 tests=[AWL=-0.280, BAYES_00=-2.599, DC_IMAGE_SPAM_HTML=0.001, DC_IMAGE_SPAM_TEXT=0.001, DC_PNG_UNO_LARGO=0.558, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k2QLxDuRN-rg for ; Tue, 12 Jan 2010 14:31:28 -0800 (PST) Received: from sj-iport-3.cisco.com (sj-iport-3.cisco.com [171.71.176.72]) by core3.amsl.com (Postfix) with ESMTP id CAB233A68A2 for ; Tue, 12 Jan 2010 14:31:28 -0800 (PST) Authentication-Results: sj-iport-3.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: Picture 5.png : 90358 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAG2HTEurR7H+/2dsb2JhbADBcZR5hDAE X-IronPort-AV: E=Sophos;i="4.49,264,1262563200"; d="png'150?scan'150,208,150";a="207371611" Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-3.cisco.com with ESMTP; 12 Jan 2010 22:31:26 +0000 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id o0CMVQUw009278 for ; Tue, 12 Jan 2010 22:31:26 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 12 Jan 2010 14:31:26 -0800 Received: from [192.168.5.8] ([10.21.112.149]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 12 Jan 2010 14:31:24 -0800 Message-Id: <2BADCF6D-579A-4E1A-9137-6079F96EF8EF@cisco.com> From: Dino Farinacci To: Dino Farinacci In-Reply-To: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> Content-Type: multipart/mixed; boundary=Apple-Mail-29--587040488 Mime-Version: 1.0 (Apple Message framework v936) Date: Tue, 12 Jan 2010 14:31:24 -0800 References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> X-Mailer: Apple Mail (2.936) X-OriginalArrivalTime: 12 Jan 2010 22:31:24.0843 (UTC) FILETIME=[F94E67B0:01CA93D6] Cc: lisp@ietf.org Subject: [lisp] Design discussion -06-(3) -> return all overlapping prefixes: proposed text enclosed X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 22:31:29 -0000 --Apple-Mail-29--587040488 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Here is proposed text to deal with this issue. Darrel will be posting posting to the list an entire diff file as well as the ID shortly. --Apple-Mail-29--587040488 Content-Disposition: inline; filename="Picture 5.png" Content-Type: image/png; x-mac-hide-extension=yes; x-unix-mode=0644; name="Picture 5.png" Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAxEAAAGmCAIAAACMVZ7VAAAPU2lDQ1BJQ0MgUHJvZmlsZQAAeAGt WHk4lFHbP8+s1rGEhDSEEBGyluzZyr4mwszYGWOXLRFRhCxFopRKlnZUiIwkJVtJkbVIkiVjne8Z 6n3f7/uu93r/ec91zXN+5z6/+z73Ofcz5557AOASciWTfREAAD//YIrlIR28vYMjHvsRQAAF2AES IF3dg8ja5uamMOXftN+9MBtuXbIMWySzn/RDw6xOMfqfr+W5LLX8G6W/YhwFXhAASAYW8HhsYi0G dtvE1gwcFkwOhjmeDOzu6UqAcRSMZSjWlrowvgljnMcmrmZgt038koFD3T0Yuh8AwHD7E7z8AcBO wViTQAxyh6cZ6xIIQe5+MD4PAELTzy8Ats/ZAcsl3ckUWJeTBmMxxrnAPdyIgQCo7wWAOeefMm94 D5UUAASW/inbxQoAXxgAFf/Cm7PcOCuI720QSVFhwxzEpgMAeoBOn5OAfcsEYC2DTl+5SqevXQMA +QmABl/3EEroBhfeCNQOwH8ab+75jwYSDg4jwCKAAqageMQ+JIRcQ4thvLFvmF1Y0Wy9uBecjdyf eGa3Km4jCJZun8TvFqWIlUoMSXHsVpc9JKe8d7siVmlauVP1nvrZ/Q6aIgfHtQt1LfXWDC4bqhi9 MnEw7T5iY9ZooWB50WrFxsG21h7n4OJYdXT+mJIzxeXG8QE3LncDQhDxMqnRY9yLxVvKx8DX2S/U /1xAEbkysJ7SETQU/CsUhOHChSPkI5VPbDsxHdUYnRMTGGsYJxq3dvJj/JNThQlxiV6nrZIOJsud EUnhS2U/iz5LP7eWtp5Oz4AykVmYC5gLK9nDOdTcsrzMi2GX3PItCjQvyxYKX+EsQhXRiqeufrnW U9JyvfZGVenlm+duRd32LbO7o1UuWcFRsV4F7mLvsd7HPWB/yPaI9TH2Mb16vmaiduBJx9Pnz6rq rtSnNIQ9JzXaNOm92NcsTuVvYX+JeElrnXjV0Jb82rQd1/72zfm3Zh24jtZ3CZ0HO5e6KrtJPdt7 unpT3+u8p30o73P7yP/xbf/pTwc+zX+uGiAOsg1e/CL2pXxIbYg6bD08MhIyih3NG5MZaxi3Gh// GvGN7duVCYWJF5NWkyPfg6fQU1k/RH5UTmtMN/+0/Pllxntm7lfkLGL27BzfXNG85HzFgsLCw99y v68usi+SFutorDR9WgytmvZribA0sNy9Gr2eSqfD8RcDURACOo/QQvIg19E7MU7YGmYNlk62VJw7 pzG3Oo8OnyN/tECxUIvwtIjwThNxwq4EqQu7g2TF9ryUD1QQUGzc56WCU72trqPx8YCf5qpWsg67 bqo+2iDq0FcjW+OHpjyH/Y80mfNZeFves1q0OWAbaldpP+K45aiek9+xfOcml3FXjJuYuy7BhRhO SvO47vnU6633kM+cH5O/cIAC2TjQiRIadD64OCQ5lBi2P3xr+EJEV+TdExlR5GjbGPVY4ThU3NTJ 3viGU2UJOYnxp/2THJMNz6ikiKdyp9LPfj/Xk1affu18UoZvpmWWyoUd2SzZczkDua/yHl0suZSR H1vge9mhUP+KQtGOYpbiefhtaC95cD3/RkKp503HW6TbJ8qS71wqL6kor3xW1Xz39b0399896H34 4VHf477q/poPtX1PBp4OPRuv+1m/8Bw0sjcJvpBulqNupy61vH1Z0hr5yqJN6jV43dt+582pt44d cu+Q7953lnXFdlv1iPfM99a/P/fBsU+ib+ZjdX/8J8PP2M+PBgiDXIMNXwKGdgy1D0eOSI28Hz01 tmesdzz6q9jX1m/+E1wTVZMWk7++p01JT1F/uP5Ymc74KfmzccZ+ZupX7Cz37M05zbnOebf5Xwsn f3P+LlwUWyyg8dOKlvYudS9nrHisuq8lrOfT8XR7ejq9ZSP+vMAYXIQgKBBaQKQh96MAqh/dheln AswyLGGsLeziuBSOZa5A7jEeB962rar8JQIsgh5CdcKsO8zxeSKDO3eJeYvfkhiRFJQyk47ZXSbT Kftbjk9eYa+Jgq2ihxJ5X5hylEqUaqRahDpFw3M/8QBBk3SQpOWi7ahjqWuqp62vaCByiNMQGE4b 9Rk3mVSY5h2OO0IyMzNXtRCzxFkuWY1ad9jU2ZbYRdobO/A6DDvePRrnZHZM6Nikc63LmeO2ruKu 826N7hmE40QZ4hKJ6pHh6eIl40XzbvI552vrJ+jX4386QD6gjxwfKBHYTgkJEgiqDyaGMIdUhtqE LocVhxuFz0bkRxpGLpy4FmUVjYmujfGLFYvtj8s+aRXPEf/6VEqCXiJIrDt9IkklaS658oxfinTK 19SSs27nhM/1p+WnO54XPN+fkZ/pnCWSNXrhZrZPjlIuIvdd3pWLAZe08rfkjxU8vpxa6HZFrYir aLK4+WrxtfgSwnX9G7tKmUt/3Oy6VXu7GH7LgsudK4wqVap23uW4B+7N3h950Pew/VHT48fVD2rK aq8/KXqa/yyvLrc+q+Hc85TGpKbTL+KaI6ghLeSXpFbSq8i2rNel7Y/e1L593vH8XUNna1dP9+ee ufcCH4z7Tn18+Unxc8Wg8RB6eHx0+avbJMcPuZmvC5kr1xnx38x98D0AMMoAZBsAYPsWAMtbAGQc gVMdJwC8xwEwZwfAWg0gPkkCxM0FAAUpgr/5gx8ogMOABGJADqgAVPAZzENskCikDplDnlAslAtV QFRoEKIhOBGSCB2EEyIUcR5RhqAihhF0pCBSFWmDDEZmIe8ju5BzKF6UCsoRFY26hmpFzaKF0IfQ Qegr6NfoJYwkxg6ThKnGTGCFsObY09hn2HkmGSYS01WmAWYh5qPMBcyDLDtZvFiqWJZYdVkzWYfY 5NkS2T6yy7OfYR/FaeOKcOscxzmonLKcF7gAF5lriNuau32L3pZ6nv08NbwavPV8h/g6tx7b+p0/ ehvXtlsCugIDgtFCIkLN232FuYWf7vDA8+KbRYJFxUWHd1LF7okXS6TsipD0kLKT1tstL4OXZZX9 vWdI7pX8/b0FCqcU/ZRs9mkoi6qwqMyrDqi1qddptOzvPzB9ENLapi2lo6Z7WM9Fn2KQeCjPsMKo 2fizycrhbUf2mTmbJ1pUWX605rIxtE20e2E/7kA/infSPubpnO3ScHzGTcKdQCghjnns9gz1avbh 8w3waw4QIAcHtgVJBMeFvA+TDz8TMXKCEr0zZjjuerx/gsZp3qSFMz2p1HPV6ZUZN7KKs0tzyy/e za++3HSlqXiwJLP06G3+O12VcfeUHgw+vlhr/YynfrDxafP5lzFt5Dcn3oV0Z7x/8vHzAHLIaLT0 2+kfOQshS0rL71d+rPat3Vgv3rg/+MBeYLIR/1xQBV6CL4AGcUFSkDbkAN8pKdA16BnUC80gWBBi CE2EAyIYjv4dRCtiHIlCiiK1kC7IWGQhsgE5jEKhdqGMUQGoHFQD6id6B9oCnYB+jP6OwWNsMWcx LzCrWGVsILYCO8UkzeTNVMY0zbyXOZT5GQuaxYwln+UbqzJrMms/2x6202yD7GrsOewLOBtcNYcA x0mO75y2nI1cSlyl3ELc2Vs4t6TysPGk8uJ4s/mE+cq2qm19yX+Uf2bbGYGdAnWCToLrQsXb9bdP CKftUNkxgE8VURIZFE3d6Sx2UFxSAicxv2tAskXqgXTB7mSZUFn3PRZyWvJye0UVeBSZlSClxX0/ lSdVvqlOqE2rz+9HH+DX3H1QS8te20fnpO4lvbv6rw3GDCGjHcYHTVxNkw/fOdJrjrJQtDxulWvd actqd9g+3CHBMetomVPdsU/Oq8f5XNXdjrunEZ4RJz2EPC29UrwbfSE/Tf+wgPvkGYpkkAecF/vC uMNNIhIjB6Pcohdj00/uiq9PsE9cSso/o5EydDYtbX/6j4yiLLvsbTljeRWXYgpsChWKcMXrJZI3 XG5m3m4uhyp17p663/FIrjrzCeJZRAO28UKzcsvAq8x2lw7hztWe8Q8v+ssHaoaoo4Pf0r/3TRfM fJ3tng9aoC0+2Ii/ODAD4aAItMC/IrkhZcgJioOuQ23QLwQ/4iDCA5GOqEGMIjmRmkhf5GXkGxQC /ob7o26iRtCiaHf0dfQ3jCwmCPMEi8ZaYouxs0z6TPlMc8yHmctYWFn8WbpZ97PeYRNkS2fHsMex r+PiOBAcKZxbOa9yyXLVcB/i/rQlkIeV5zqvPu83voytGlvH+XO3mQhAArWCoUIqQrTtT4Sjd+jh WfG9IldEfXYeETsgriQhvUtUcruUkPT23cIyu2T37FGXM5J32EtWSFa8odS0b1SFRVVJzV09X2Px gJfmFy2C9pguRR8yyDGUMaKauJguH0k3l7R4amVi/cU2wG7dIfEot1ORs6pLm6u7G51QTNLyGPFK 8VH0HfZPJasFjgXlheiHLoTfjDwWhYouiTWOm47PTFBK/JR06oxYCvWsTxp7enmGYebQhZgc4dwn F20u/SpIK9x9pbHY9epKSfYN5dLOWx5l6DsXKxQr2+563aM9yH4k8/hFzbHa+aepdZL1rc89mrAv SqhmLUuthW2m7Yg3lzsE3xV2SXfX93p8YOqr6ff5jBuo+GI3NDXiNzo6bvW1ZoJn0vz7qanyH9Tp dz+7Z6i/Hs6en/Odl5n/vlD42/D37GIyTYhWuSS3dHtZbLlwBbFCWnm1umc1afXdmuAaca1ybXn9 8HoNXYKeyYj/Zr3EyB+ARTfAN4CCN9XV2xj+9x5+viFwTbbRuOEnm7/bETO4Z+Bv5GBzRi3IB3+W g0Kt9OEezlkQJ8nLwOgPxhNc9UxgLATL5SM9deG8BthgbEqiGFjCGLYD2Xu7GpvDGAdjb6K/jdUf eTjZd6PGZXBSyME6DD4/jAuIQfp/OQ8iPa3t/uhSKSGWNjAWgzndPgEmDD5jLRqBqPfHNwTK3/eI KSyHfUbweAUbMfzngbE0MACucDXmAYhAFpgCXaD354mH5Xh4HADPEkEQzBvd4P1l2W6Mvf6Plix8 KzPshW7o+IBxGPu5eMVTYFub1luBOyxzBf5/JfJl8hPyq39HGyv6bqz6V8MEHv1vyaalTe82Z7wA AWb9lbv/1WCs7HePFJoXEKFu64mSQCmg9qF0UAdQmig1gEfxoQSALEoJpYrSRh1EacBzam+mHk/9 w5fNs3H7xx5NYD+IIAT2nwj7//ck/t+qwAv+D2OjdodPGWDgd6MggYGasmlxjP5fWzAxHK7rAdAN IEdQvDw8g/Ha8D8XRBm8kb/7Hhm8gvxeefA/b9l40O7w+lMAAAAJcEhZcwAACxMAAAsTAQCanBgA ACAASURBVHgB7J0NWFNHvvDHC4kEDTVQxIJepUpXXU0s7C5u6xdgu9C6xrvVtavoat0Cb18vH9tH KdyF3WLf5sLWGny8LbKrtBhZK9glFhfuroAC7cJasMYWaAGBKrRIQ5BQE0N4eP9zThLycSYYC4p2 5oFkzpz/+c9/fvNx5syczEwZGRlB1FEClAAlQAlQApQAJUAJOCXwb07P0pOUACVACVAClAAlQAlQ ApgA7TPRckAJUAKUACVACVAClMDYBGifaWxGVIISoAQoAUqAEqAEKAHaZ6JlgBKgBCgBSoASoAQo gbEJ0D7T2IyoBCVACVAClAAlQAlQArTPRMsAJUAJUAKUACVACVACYxOgfaaxGVEJSoASoAQoAUqA EqAEaJ+JlgFKgBKgBCgBSoASoATGJkD7TGMzul8l9HpkvF9tp3bffwQMev3w/WD1/WInieX9bj8p XeMVTvk4J0n5OOcz1tkpd20d8O7mgkMNnyLP4KQNG33HMoued4FAczUqLEV9OrTw5yg23HyhFkm8 0PJCdHijOYR+2xLg5mYrcxeOLhehox+inyei8Ll3IbaJisJweZtMrPAr1MVt9JioOFzTq7lafbK2 tFmHvL2Ctz+zcS6fufze2ck0gG0Cnu4h/1/FP7nUtcRYpAn2a7UanqfIw80ihyZhe6u9WiavvoB4 OiSM2hO5ckLKCYHPKJfvjW+ylf8HBrz7+KbEqK7YmZvUxUdq9Ox7ia8v+Ob0xpy0gen4cN+CRlmL EqEw6c82+grGN9px1fZOLNpZi8QIqVQmvdHZKC8euWvRNi+kQEgchnzUqFKF8lRox1JUtg9FFZnk xVKU9DLasXJcDXKqrPM0WiRF0SloDkINLcgYjixZCkmY7e304u/xSW5uvWjKTNSqQ/MnpD1HiEu/ pzeSy9Ejz09Qn6ntw9QFVWfC+D7mzFZXGsJViQd4/0padK4CwtVQO7HzQQb1S1vPre35o7W817Tl cc+mRM4Rmi8nfA8PdcGZb9VDCE0QO0LE3MFGdZn30SjLOclPdXP9GLvunZ1ft55kGkCEWmdte3Kp yGKcSx5O+7XV0jdXoZD6inXBFmVqU3STqL3tunI8vQUaUISmz9o9QX0mTj4WKN/BQ6pHSwX6ooLn 9301YKpgBrXkifcOrF7Y/GHqInO98+IFLH500+6n1/uzHffvYMZtXjoJy/9tWs4tNty2T/6LIgNa /nju4chQhDQF+Tszu5Q+AYXK7RvHapu4Vd5xqOUGe8cabC403vxSYVAhAwT6DLkh9+E+JVKhQTgM nP10Xnard8JggCcyavu1vBkiu7ZVr9PokEAksAuGa42afo1ghq/jCZu4zQd6vXYICYQejkkzarVG oXAsNcv/A4lzkTgDpaUhxEeDl9DOYvRWPBIK0NZCJDUg5VakSkSFyejRWTjORT9GKB0tz0aZ/ihn E9qpRNer0N7v3G2CmTV3j9EOEESk1SIkQELbdOm+QigTHdtrTr3lW4iOjddOgkakNSJHbmAh2MfB 2WKDlccIE4Ue+HYKqRDaFnLnem6Tg1VU9l5O/ZzcjF/ja2/aKzAdc/LH5wh8HNVw6p8fjnLC0C1P LK7Vc3Fm8p2D823Fe0NTiwyqSlwlLS4Qkuip+wYeC2zD0XvN7U8gW/nBSuVRddPvDi+0GsOwKBr1 CIKVCV1GT3/brEVoWNuLK53I3dCr4/sKnSth1Gm1vUZ3kUjgrtVqhVZFRasDDjzhbbYPNztBmTRU VRy5dNRI8Dm1UzRDZFu7bC7lPDDqejVGoa9V7SC1Y8HrikciGjZkhSinTXU1ltGouew39rdVQmLd eaNiCC1dl5f9ubP21lrY2k/mbC016iell5Ww5rNw9bEhSczG7FVKngOBYb0GWmfkzpUF+t5+ndDh foEQVzgXH7OtXPcRpnxyRWq+yPxNqkcIDak7lSqr+qXW3ICLbtrWO2W9QtajHNq1/jaynitdZjOs ebJh3PxdLf9m/Y7f3Ppdr9eOmnGIs3y3umL4RuUgHsNQ1R1Neip0YX/11nYYf0Goq9v0+okzPc54 WsVxu95xfp/JY86OprUpEHlK5Bu9ZalZV0NUzGH2c28FC9y9cKVWiLN4XtneAllsXb8pvfqeiqT9 UwRZ3t5ZgikH9zUw4Z31+yQySfj+bbEHed7ZMwWvjsqTEqdpKAifMkUg8PIS8MJTC3oZOe3ldyRT JNuS9sVKeHBiyraDnXCvd+IWRqKXwtCPN6GNG9HjEvT8swhBiwTOHUVuRBu3oBVhaNcL2BPMzDHO XYPCEAoOw2eLh1BONEr+PdKQI4BxrCnh6J0CtC0cTZmCkg4iDcNB34wPJRtQQzPatwEJBIgnQayt ndUofAry8kJAcNtBBPcO7PToYCr6f+8hVIZSU1FsLCprY0+g5ncYVRJU0GwKgS8cKEESCaruRqf3 IQnELkFtZBaXGfkkkOQhLwGO1yLbVoHtAQsFPBQL9o9GYu/TX8aWbNiAeCAcjqcOIRXhWSYxTj0u c7CPc/SYUz+JG0zVHfkLvvYv76KiIlRQhHrNr4Nx8nfCZ9QCK58T/cgLFR9CEshiAYo9PMq5oQDT E3hhzqkFJl0uxhsclZc5HZ7ss7v2dpWvq6pdl4FQO/Tz2q8rED+z6YVSKLxoembTi+VSBHagpVF5 GfhpWKx8caBv+3Em0p4bVrcEkxlWX/qe0+GvSqRHop87UWAqm8zZ5rosyWteM6GyvzaFlzXzpRpz +bS61trLtgNeb870zuKF75/i9aa0QYfPa9pPx8qmeGV5eWUJJAf31alxQSS3D8a68wfT/14KMgNd f8kq3FfQ3I21QIUZy07e/m0b9odDs5NV3wnjBFOg/TlSpEe9B3MgcErSeaY2DTen7peATFJ5RUV5 EqRr5puCg5/ixoazHYNwzdWy1JwNEtmGpMIDTEuPjeF0mtZ3gGT4fkl4wWlc+ODxGvzYpG1lPXpO +7U9DYrqYpBt7yg9XX+66MOyNh1bbontLWfUEMjJubokViILD5dJ9tU1VIB/P+vHWcmdXjIfuMTd c5p9rxoZG86nSl4TQCMPRYW3f99lJtPryiBeyYacpG0yAS5Cr24oascNDSmcsYejHJLLCbKUT+t8 Bz2cjlCPQFb4693XO7YX4nrEz6iP6zr7sxDwBj/N1DskLnyho3YFvieia9LibksbigOsHTFdZJ7c /JFr5V/fjaFB/saWFBUUbpNA2d6f2szUd4L+UW63Wa+tk2nl5853KwErLz84LzKROc49/6W2s/kM 4xcrX4gRuVh+rJTeoXec+0xgxTz/ufA5Q1+TVCdLLjv0Ue9VeARa8Zj/qIGilIzAMGTITalhJr/6 K57JiZAbovMiy5VrMsM06SHZe5g8m6qC5+NBRS5KTJkNBdIsP6rI3qf7FkXmKJs6rneplGrZ1r80 4AZcuOjZtESkkKf/8ICqQ1UqVSQc/sjUhtpfP3oM97B8VHAQLdiJdEGoqQNZV/Rb0FrAFITFMf5b bIg7+vVe3MdiqrdFwsbzbCwSV6KdW9GKRFSlRJcSkPf/xd0gj3moqQohJQpZhK5FofoqlLELeboj TR2atwqFKdGADvU1IZSAvPYxCt3RkuXoMbjNBaDgYLR6NQoAP+PmPYuaVChcha7dNIXAFwTmheMJ x2+HEP8aDDEgZR6aSx51W/QsglIqT0cHVEhVihQJiOXWW4EWRKDleeh6H2qtRT1gfxLxZXOPReh4 DFK2o6p6FFOJcoOQqhxVJqPLWkTS4zKH0STa+Ej6oe/LyQ0Kak0j1tDYgBoa0IUGdJO595D4k/jY GGF1QNLPilTWogNNSKVEuXHoAtvbh6kuhHKUqOM6DpdtRUx5Rq7G6+Y9E55VBi8cKXk1omTVeeOT hWsy5/CNBiga/Jnz/OcFgAE88OAaOgBPwW7ec6ZhmzquflJ35VPsQ4EP416UE8cPEgWqBysrYUzJ ImVoeKUsWYWilVubqtZm4juK0ao0WsQsHrYdGETSwMzsxTGVeHAal2dte4F3vjTXgGKCMjNmh6k0 6csPPV+HazapfdC1NSXIruHOSeU1WXJjemmHGvyM47CztzlrEbZTnBKSHWNQKAcrodlBU3kCdwEe n+uHa92nGiAQtWtZ+wWzpiGQkddERNRURPvhlF1QqxGhHdN3F8EsIYwxBIqE8nYFNsO68WDMsny4 u0H3Fho9VYAnv7W1uu7Lb6biQ3gPwHOaO+QNh/0dFzN24ncekKonWVoi3XQ26lQXpjPq7Nrb0RM2 PhJnvsBTZaisNKj6wAbUooJcNqCHYJyIkF4YyuPmYxOb9YGuubXWxy+l8LlaZUgMGkxPO98Apz0F PgBZ2SNXTEvMCIqGhnFT/pqKfiMpnNHIwYdUTkj5bm2ZjZ+7HmERD6Hv3IAf4Ho0bWaQn7+vgBlL 4jP1DgU+6jc3NOL18iBcTq702WYNvtrkyOki8CTyd638Izd+AB5vVuVeafhUrVANqtC0GXhwg6Tf 1XptTqDDN3e+O4iZAvxmSlhf6cenlM25jF88G09Wcesh8yTFcNvh8A74+Lqhr5XiPyAEf6+HmTx/ iK6/CZEM5GVDuLT21sjIrXrpH5D0g3oIbTobzQhHZ/w1M/OvKdj/B5TZ1DcyorOSrw0zyzuxtqu2 MFEqxklnPrLrQQl2Kpj7SKli/VUpSJxZy/q5PxEaoX+UwH1HgLs0Qyhb75gq+QeU3WKqFCO3BvrM NRFl5wxAfRvoGzDay0NlLOzSEXWPnmBq6xs5Zu0jI8amGKYuozekMX9OTHw3s+prZ3rYdkB8vJxV 2deSF/ZGStOtkfoPpGBDYk0rG15+PAwOUy52OW8fBq7kgNhoYsl2wmMUSGZcvI5FBqqgnUHZeYyh phQBmaEv80CGba+wmFEVjZMWXQvnwI5bWJzUjpnsP9eEJbsKcZP4BqZNcq3nYtAfxIUt5TiK17NV TdkQdc4VCzoHziMjXZczQSbsr1U6o27gpkWSu70lxUvmbMoCsKHvYgZElHkZZzIpvVg/Fx9TvLfq cbqyrcrJiE71cU7i29KwN6Rhr+NSaubMtv+JHcyVVSdxvifWwhEpnI3BkQ8rz953Ru8j5Hw3Werw RahHrBxHusz88b3PhCsGioGxNfNtafTb0eY/afTxQrYcMfc7x/Ry83TGHwrybZd/xvwBJVOtgHDG xyxvcv66WK9ZPFyfpHznkjWnSPo2rq1QQTJLoasQVoXBkfQQygmRP3e8jqHjP87kLprN9FhQStRb hySMV7QiSIDgYRb+YdzHE95pcPPEAzfMBPwQ+9Q17bFFjzz6qG9w4dq8jKDstQGWgR2TvJdZHuvg dL1lAcs3eb+Qd31Ap6tpZQZD3U2Ct5B4BvPsDANgs6C/z1rCqQVulSMoOwxlq7CnqRUNqFBYBhoa wYfsH5zNrB89HBnAc3PZ5pAuPCmAmnRI14SkYSg62vwnRYmFzFUDuEun7DBraMXytX2jp1Q68ykm xvIM3AdUliKlEv+Vl+MxG4sxKuiHZo8eWsLBY28no60K5BmnbOK+iqTBog06oPAGlUVMV4/Vmew3 I7KcBY/FQpMGHU5+/QB+iYeoh0HkEgfrGFm/M/1WVllfOMCkRTUwmjo464S/hQmIWfutdVr7OfXb XQtms6XrOlOQlPV4fHGAKSQAjdVmHZfFz2YrxydT2kXHh35/vTD0+OODx6a8Go7nvPhCEYweufGY mjYVhDyEIuZ9I7Z2RNfuVjGVCDV91cOh1T6IrWtTcUVnndu86BUpMYEpKb5+Ldfl8vbkVUdziU/Z MPjCtgM8U90ULdhxateeBebxLYGHSbHp/LA5FnN7Ytc+CNyngsRUt1FzzBfY2znEjIz13VCDgF7b g7+GbgEe/IU/mQ/20/LCEPtWligihGHnwceDtaR2jOeOhR7x8YNPD9EcH/jiYdokF/DoT2HM6K2/ vaYACcORhDMJCEmXzbKMB9vbD1LCaQ/Bp5fHDA83D3jfS6tjJ4DYSOzbW1K8bDgn5+DVL0NdjTvx /HPKdJjk3blEBMKk9GI9XHxY/VDeGM9oOdG3vysuiZMbQn4n3fdGVA60Dex9AWJgLzEyec1G543J kcJZcQ4+zAn7+wg531k9jp+M5Y71iBV0SJf5LiP0hDI83Jb/L5yfPwwIQMM3v9IoVd92dbF/mnaV jpkJc5IuLp7O+MNY322Xf8Z83nRPXIHAXcMDq9gR9Y9Rr/XNn1aU1Vc097OFkFXG8UnOdw5hHHTr BtwHX1j7cgz4pydFi5fAOHLjN3qyHkI5IfInxOsQzJYwh+DvEuD20MP48rC18xf+ePouPPfEuO5P 3z2gAZ/iaE3Mz43v4xJ08VCZ+I21j29CdQr0bb3a+OPFHoPnPslPv+b1tHt896dHWPlD53ZuRh8o sXzW6R++tZ7wEx7jAB7Nnx8Ip/sufHBEhlDG9S49WuiB9F1fq1XoOrTXQqTtuqFW9V2H/LQ0QnCV jTNq0NdQbrqQZhbym4muf4gqi5AuDU/P9fYiAAbNa981pJmD3EX4jWxjH37fKawf6TXoUjlavglF H8fRooWouMJGs+UgEJrBnQi6L/8Ok1/AR4zAanhLWtMFb8yjrg40ywe/AC7CrS1ayLxjPjgT/TIY 3oZHHynR/rPox8E4ARoN6voaKgg2DMq4tz+TKiPqvY7bHbBTdx1pepHRHfnCtK8W/U2OpOkI+gS8 U2jRIpRdheJXWoxy8OgZDteZcC2TasaP55Wl6PCP0K9XIV0XytiJUDRajJtRbsdayNyZUD9oCMJi 168jkp474MAZMUk/CHNzg/IxB2v6vAPNm40+KUe5H6LMP5L5E/hwGsMGcur3N5pyCsto0XWmdKFg xJRnFAgm9aEPjuCT17twoYLXnXD5dMgXLMHhzPXupKz4m5keU6+ooEyy7aO+uvyP73fU45qoyU/J v7RQnBi7bK5ZXnH0k6TXtufJ8neml8zr662SkX7oNNxd8P4hmMNrxLU7P6PwC4SW7P7FFv/hltwa mcIvo+rZ1O3XZy8qSYcfVLClgMNK+CkF0w6oGlfFFuc963vrTG1c7qC4du+lRxeEo3qlrCRK0J82 X/uPrY1Q2cRr588ktw+86vKD77eUQSzvVWR0CtDyn+5ZHyhCBDuDJL8E/fJziyouwcQfKMc3u9Fm cTAhvRihL3Ejprx4qPrH//NT9E9ZcS4D7cCewi8EPNPiKaz9ju3YrFmPwbXJp57zUG9v/3gnjkCz 80SrdMcC7irj8bA4GlpJTaU0RBnVI427BneI8Eeh70ew398NCWctgz6N8mLaPuMT1z5Pzh1EhXFD T/Ryt7eRDq/pg0Xg5hA443PCla8uDqtsVILxmc9uY97iNOWXY3qN6mpOPmi48533D3+hu2oqbwVf eHuv3RMZPjSMe6Vi/kPQTteoSvF7vphz9krcuwQnXyD/JmWGVnYNIpc+PR9mkNmOt0M4gQ9qMnGw u4+EOc93NnKrT3O94KxHB0u7LlvStXBxrHU9Sjv+8EC7HOc7P0MaKERuSw+kjFgptvPap4vEk1Te oH1wqfzP7K/e884qOdw8g3JSWuJkNSG1LRm5m1JCCPdlZGhyVq/7P1p0KgKSdPxF3cIZdkmzOSTn O9zYHJy2If2vyRB6pvnb1N1dr7npzpx6EQ7fqzgRvsLF8sP3d8rfIWrHAMehp+8cojv+NkJv5+Fh s1t4fF5aiufgVOwcHIwhv5uZ+Wcx+gMehk1hRgKvtxRGv44P2b+Yv5bCtRZ58Z/t5QkW9h1PxE8p 2Elj2Em6RGXHgCqHDUss7WgtxJ1UcJZpOw5V2VIo0TZ/4pSRIRAcGAmzDc/G6RopTLQRzihkhDkU m4MYPYm43uA/cfSIipkXUOXY6EGJo3pq86xOhY0cZ+cZB0aktvYUMvMXOpWVMCsQBraP5JjTVd41 UpVpkjlumvIw22b1bbGntGOkMMYkz0531h4fjUKcONJhmQ6wupz1WoyJzhs5zoBSdYwkglVSbBKn Hku8plwYk4NDpJYATv0QMSc39qpSMxmIPeP4CJsyTv4WOx35WAxw9DjqLzWXhKaBkePRZs5Ap28k UWw6lMaMSBm/sgNmmk2BtxevpR5Z6hdMKpnmyqGe/mH0z66eslNUtR8wU+fM5J1janDILRXUcWs9 6A8xKpj1u1kfZhMuzr7Ywa3BHGrbDohTzlax+Fsv5oyqej1GeQXPDVnS5dA+DOTZpouZ0CHbCRX7 69rs44kx72bkfMC8G2BObNdFPC+G/8ytU86VgYEreJ7O6i8GJhBZZ2s/YtsxmNmrPZto1mNq9/Ac DdEN5LyB9R/v0nXV4gvFJ5n5ShJnrEdXepKds8AXRp9UAiALH8f2lhQzJ2eTsKZcDKl+I3t07nVk hDO9RD632AlNK3Qs55uqFCa9OKVvJ8ZkY0TAGbKFmatC0cx0jDg7xTy3Swgn8LFwcCgnxHzn5GPR A+aZ/8z1KNsSgj2melTKVBxW+PWwmJN5rcwkHadyJpA7XUSeBP6Ymyvl36I/saa28F1T+czD/Lnz 13m97voY1yDx8VJ8w3TuiPnOcRlMapuYv56BG5HRshSt6ne1/HDodyno7q1picZwsBAA/q2pwFNo vTLbGBc5nNZrmQULrH766yByzwP0SCJA743gIQMXnBFptLCEwu3+tt8FzXcmytiD3E2DYXemA1/l qh5XObiqHyxi1k/3sHvccTVeMhFu/QR5LYzewAITdsYQhCdXMNRoHc+TN2QYMhqNAqH92iIEY03t AKwy4G4jYQoXWa0+YHP+OxwYtd2d2iEvoae67f3NyjgfSW3FhlCTPoNWM4xEUO9u1xHaMdBzCxbZ sEsUQemwVmPgsauu4MUqbw+d0aDVDcOPWW8vCkLMUPrZdtiRs1GnMfJtls1kdBDSS9TPfQKSiaYK hXxLnsN6NK1vH1mUbMjsSIz343uYbwqkcG61zkOd5bvzK8f/7B2na3z4kxPkqB9CSPVafzpfIG0X l+6+FGkaJiQrZs445PsY8qTTDnrumCcphtHwydNnGrXpAfedTkVSGQqLxjMk+99C82+/OX7AwdDk UQL3hEBd4ZTljaMx523v2wFzedTdQwKGBokshPlZNTYiY3Nf2kImR0jhd2TqJMr3cU3XHcEYl4u0 7xz0OvBI1aVNTl75GJeIxlIykTxpn2ks+uN+/nIZujyI+AY0yEfPbkC+lkercY+JKqQEKIGxCej7 m899/mmf3oA8ZoX+4In5M+7HUb2xk3lfSWjq6sqvGvkw8GQwoiXiZxaahs9I4XeSuMmU7+OZrjth 8aBdM4E8aZ/pQSssND2UACVACVAClAAlMBEE/m0ilFKdlAAlQAlQApQAJUAJPGAEaJ/J9Qw16PXD rl9Fr6AEKIHvAwHaPnwfcpmm8ftK4PvyMg3++Ymn448+XM92w+VtMrHCr1AXt9H6rQdH/d3NBYca PkWepuVbXI9pUl8xXul11OMk2dqrZfLqC4inQ8KoPaTlgpxcPwGnXLL/DuK/ff0Pdnm7A3QTfYnm avXJ2tJmHfL2Ct7+zMa5fCZCQvsw0cbgX3vqdLBOqYebUT/sbv6VmQvRtn3yzpHGLwTMmknWLZsL KqgoJfA9IDD+faa2D1MXVJ0J45t+a+g1bXncsymRhIUo7xJhbbX0zVUopL5iXfB3jXF4CBYWRN+q YZHR0ZaFS7+69aQM7wMVJv3ZRl/H5Yi/qx3E6+34I6SuNISrEg8sFeiLCp7f99WAKWMMaskT7x1Y vRD2Il1kzi8vXsDiRzftfnq9P3sDIEUyXunl0kOKE8K7rhxPb1Fggemzdk+GPpOL9jtJGvcpV/Tf q/LGbbnroXej3LpuFekKo7oMdpGznJX8VDfXj2kPONsHi9yYHtiUV/6LIgNa/nju4UhY70BTkL8z s0vpE3BEOqQ4itcxVW/9eenmW0fm/b0I1rH0WnCgaFO4tr0o/sQmBbuaNIhMzxl4ObbrfNKicxXQ DqsRrIAKzgcZ1C9tPRfLvZam/rP6nbJrbM0KH23ZmCvpByVACVgIjH+f6aamFu9taanAg5XKo+qm 3x1eyC4AD8uU6pgllAS2FXNYC/t7imaIbt8gJ3qEQpG7oVfH92X2gkDG/rZKWOfSsvWBJfV34BEE KxO6jJ42i+ly6l+6Li/7c++EwQBPWPKkX8ubcXvr0wzrNcw6VVwojJp+jWCGry04+zTcsOOPzwcy m4sOqTuVsNWoxak1N8Bvl1/KegXsJzq0a72TjLiT9HKli1OPxTxHz8LVx4YkMRuzVyl5sEeovdPq YIFgHuwdYX8CVk935EYubxNbrmDpnZsCkdBd29+LhKbyiQ12nY9W22t0F4kE7rCgDiz8M2Z5u/10 OQC0CuCy03yai7P53Jjfd6Hcmm3Q9/brhIT6aNT1aoyQMaOliJvbzU7QJg1VFUcuNatlvrnaBxsB 5wfDN2CDXrwWdt3RpKdCF/ZXb22H5y54XOhaDvsEM9cu/1Y3MFiP21g4VPcZh9teyd+kgKW0RYnL kTwX1vPiYbkh3TegZrQdZq59r7md0GfyWL+rL+egdxzyIj3fcXNg1NIPSuD7Q2D832daGpWXgUcp xMoXB/q2H2dQ9txgbtX6noqk/VMEWd7eWYIpB/c19Ju2Umiuz5K85jUz25t3MDY2J1wik2TVd8L4 xxSZJPxIkR71HsSBU5LON7MZQ9RTZ9IjeG0KL2vmSzVtIK/taVBUw/YHqL2j9HT96aIPy9p0xC0c NK3vhL8qCd8vCS84jYXgsQ/8+yH2bWU9en3PaTgrPRL93IkCuD+zjqzf3Qs3XgpxFs8r21sgi60z p9d8qd23seF8quQ1gXf2TIxi/77LOizQWb8PgITv3xZ7kAenBK+OoSc4Ki9zOjwvZnft7SpfV1W7 LgOSzsQk/PXu6x3bC+HxFFbxr4/rOvuzEPAGP83II3HhCx21K1Kw5DVpcTfsLsPtjpI+jwAAIABJ REFUXE8vd7rIerjjZUPdPac5rmelaT8dK5vileXllSWQHNxXp8bGO+HWbC4nvP3bNuDMxeUNLpm4 coX6q2MhEw9uCH/Ny/tN3oaccK/smV6vJTFZ7DIf1k6vN2d6Z/HC90/xelOK949DxPLmUrpYzlyf 3HaSOFeXxEpk4eEyyb66hgrw72f9uEpyuokut3VlYI9kQ07SNpkA6pfg1Q1F7Xi3FzTcnLpfAqeS yisqypOg3Zj5puDgp71whsDNWHf+YPrfS0FgoOsvWYX7Cpq7sR4sz9E+6LtxIHCILSkqKNwmgbj2 pzZbPbqw15o++cF5eM8fcLnnv9R2Np9h/GLlC3vS40qh5oqDSrND5y9dk43rOOyX8h8b3Hsu5mJv dF7cgcPxfdkQ/u0tIzK2X1cgfmbTC/gqND2z6cVyqXnTHCzO4ZgtyjTFGQWx4bLwbfkHL5vbKwIH DhU0iBJ44AmMf58JuXnPYfbD7bj6Sd0V2IcKXODD0Ivqr3gmJ0JuiM6LLFeuyQzTpIdk74G2Q9N8 cFFJsgqJEyUZ0Zrc3J5KlUGFpvIE7gL8LIW3DHSfCs9YBtSuZYZLCHqQoeGVMtATrdzaVLU2E7cU RizfcTFjJ54jQ6qeZGmJdNPZqFNdlg4PBNs4dzdoclTwqBfgyW9tra778pup+BCe8DynucPQBj9I FKgerKyEMTHzdWPrF6VkBIYhQ25KjWWRNvPFNt+65tZaH7+UwudqlSExaDA97XwDc34qAKkcVOSi xJTZkKyx9Lh5z4S+2uCFIyWvRpSsOm98snBN5hxmrs1D6Ds34AcBoHTazCA/f18BM1jDZ+RR4KN+ c0MjXi8PwuSu9BERuZ5e7nSNrccGDvFA217gnS/NNaCYoMyM2bBlWPryQ8/XYfO5ufU2Zy3C5USc EpIdY1AoIXOZ8kYqn+NSrpAb/yZkokaJZscAX2UPipkNtzB5aSfctl3kw5b/QSQNzMxeHFOJd1lk 948zI7Irby7WF7MWx29uO0mc+QJPlaGy0qDqg7qDWlRQawzoIY7xQXNEE1xuPQU+kNHKHrliWmJG UDRkwqb8NRW4WyCYNQ3BKXlNRERNRbQfLv8X1GpieUC6tqYE2TXcpFRekyU3ppd2sJNfEMDRPkDW B+DxHlXulYZP1QrVoApNm8GMBJkTbvvtN1PCBpR+fErZzHSHkHi2yMNDFADZHOg9E4+AsaxQ9Gwv d3ehtxhfoAjZv21f8cmHf6Rs+j8xsLukARo//sx5/vNwfeeBxx++BxyHZ/G11k4pa2nx4qsV7Qni 7J24L04qP9YXUT8l8L0hMAF9JhM7VULZqqga2CoXFb4om++Gmuvz8GAyQle/+rhZ08/45aevaNpb 8Ua2GdLSAxvSjiWU4xZLlBe/xH9u6J48EZYfQqJd/5GHfYwj6UFunn5YQCFVvqJo/koSmBmzJAiO l0YWdz2XCZ4wSZXud7qBvbq93DP6+GJh4MY/rYmBxznpEv7/O75q+Ym6qGezITznedgz0t3DL/Jw /Ikkxioszbix9Etr415Pe/6NsR7yQBdv6bLNEtT41v/K5JeZtpLpl80NiWc4gJ4Dr2+TAR/bO6TJ DIcvRXojVuLh8/jG1ZGwkafZmXd7Nh9bvoeYHwP6++E2tg3uGQTnenq50zWWHkL05mBLn7Xls5MQ lri29fCWvWm7Kpg+n1LZ1k3i9nXHRyCfIT37+rr4w7urLOVtQssVEob+1wq4T0uzd2T/BsqP6Dev Rf0SzPDA9zDX+LB2ioPKi7fvjd90uG9rXtj0xZ6j+Wtf3lxNFxhEcNx2kjiHRhyoD4FSjxbOnPcY 7uujjOfOxS+bS1BuCf7O5Xa4LStnw7acbea/DdsKiqALvXR1OlOPEjviD6RtOVa1GExSffB5F3Kb G/+iAvIGhmpqf3vpWFyFLkV3DN7zI7RX0EhsiRsZ2I53scze2jfy+5Fj5uk5zvYBAo/9fkAJjyIa mawHZazruBS3dz7zDGNJs7VnCOE9R6V+UmXjzoRr4sxQGPrt+haH4Zo7YCn3+BotDhKuem9dTjQ8 6xkU6Zfitp6TLnr7YCfy2PjCQN9/7vAYvsk8/dwaQgtP/LZP+dSYL3RG1++tKH65vhQ/OynOtPWS OWALqKMEvm8Exn7ucJ0I+xAVXbt7r/KQGDpNTV/1IP+5Q+zNetpjix55FDYZK1yb19Q5sDZAiFpx DDqo1OCGDfhePXQLHm884AsHMR/sJ/NCElGPmyAappa64F1HdW2XHB5q5Uc9BlLihdCqTHsIFHl5 zPBw8/AQIK1Oz/XWC44MXMCjP0Xnct/622u4V2c4knAGBoeky2ZZ3m9giU21nvUn6Gc5CJn7mSeY oXX6QpW+/V1xSRwSZZRLN8wYjNqpjEM28iY9uMNkE45ttnVMvKLjQ/FPFZf9w2/w2JRXi6EdDGYt dmOtsrbfbCe048Nt+f9SgLYfBgTY6rQ5cim9TtJF0GMTl/0Bh/1YRAD5yjgem5rRxSDsuQ0xd52+ G1DQfPXaHkt5m+hyxVjHGgMDAPwhZICQqW4CV/mY7DSlE4kW7Di1SyPE92BzPuL+02h5u4N0Maba fzixkxG15wyBwatfDqtXxp14/j2DEuaJ4pbYPm3Yx8DY/93L7XDHVxqlih/mw+o3qNU8jJrtc8CX EcqGG2KxeE9lImV7nKKIEKil0PLwcWUncsMiSMBMZEH2MUfWHxztA2TNdE/Tk841PHDutON46wY8 s72w9mW/48rc6UnRYn5ynazxG/3KWTiWyisqPQr2QMYB3F6GzBIgfffJRSWl5buHjvkYm+vxmD0y fPS1Ds2FHf5AZJjHpAmn02OMfevY8vMY6IQmRuQJn6jv2wHnHLAQdZTA94nA+I8zdX/67gENIFQc /WQoaTseH0ovmZdUVh34+CYM9tt6tXE6/MSkqTk/vaViyN096IcbIFhWNi+2IDX8UBQ7fTXalRtM SC8+uOevcSCjvHioWm1cRNCDDC25NbLcm4KosNS3noaXeODOBH0z7ISzlsFDk/Ji2r6SrFh4/yNL UNRj87zGSJk+PB4WR0PbpKmUhihzZsOkGLwNEP4otCPD3QWFqamF6cWQusH8DOwv6GbuzZz6RznU VFecOww9EbC/rJt56rOOz+wfGsa9QzH/IaTvqlGVAgcmvXqLnkPnKirOHVXi8KzTV4l6TPKak7Li v6iR9p8qGMZj22t9dXlW6vEs3CfS5KcUpB7+pBO8Fv1px5PCX1sgg/sLP0MayLS0Ztvsvl1KLyld oJNTj11co4fDne8Acyv795VVwItLcxaEg4ysJGpfeVFBceyqRujritfOn2lJlx23IAke4JGfWyQ5 GC740yZc3niw1TCa2HJlaGY6o4oj5SXfQP+mR1GkwtPWb1W8e9XAne9wlpMPa6eqcVVs8TunPzwM 5dk7e029bjQfj9qWtztIF0Tt6Ej5SOKMNQhXvgrDOQYlZElGVLSvo1KrkHErt/ylB1JGLr1cUcH+ pVy6tGuLVWmWL5BvSz2yIaIFjJI+Pd/fqK7ed4StFAf2QAErLsKvMjkpDwjXoz1n8kHmvYqM1ILU 06b3orjbB9CftF8QcUmJgnJSYGa9JkSSA6/cEdofbUP6X5NhAOxM87epu7uu71r599I/MxGd6GbH 0TUH/ojL+SsJ0C6J5sDI+tAtaAqUEbn/93Rzy023h8TYdsTDvUCwc1/SO2mm+p6fxNZ35jzHR1t9 LtNup0fnHywoS11+CfigsHlzieWHQwcNogQefAJwsxhnp+4xvbaT+5kqO2JHbUj58nqF/IvGjMjY 61sLf1u4Ke4s3Pexi5GULoYt2wN3dG3mJ5/JzG2pxS8T9FSaHpiR8OersuOUCfJLCdD7wc6Q2zjw xsrA9Zx6kI5ZBaAnfdXRdEZanB0hxU9a4ASSvYullY3K9HocdfRiZYQfOeGCoBXTkWIQ/TL46TVX E+OuycX/vgQ398Pq840yPN2FXaUM35tjfiXdgqe9uPRf+9TE4VLnPx8ZwvOPYH/VV6mRNj+5w8Gs EwaEpUxHsp6EiFNI7JcYIxLnanB6Z5h51nZ8PB+xehS1119bT1i+wcxfmQ7NtMlBJxDcUNtnyTLc nQVXKW+plHpvjEVz1ddMdirb5YgfFrNg+951O+ayT96srOOnS+ldzJ2ulT4enNwcYzOFDA+UN8rw DQA7bD8SzU2MDPddGN8qnfqiMi69humU82OUz/93+Az3y/WmdNlzC9kyEDc/r/zEZ0bvlx5dHleP p4/BuftNZLm62V3LDHacaWnayIP7mvLCdT/4Ul2r0fru5cx3Eh93ZLIz99JOpjSKU1YckghQi7mc 2Je3ENfTxRKx/byz8rkyfK+4sVLFz9i1zN9Wn/3R3Si3TJzR07TwNpJYlHJoc3qoEGnb29KvscVK JW+ELnQMLLbkyyeXB6hHLcnyHqwL3meCViBxfux62NOX0D4IB9rk+J0zlDh3WbBRjNpVqp70poHE UB+rjhw+j51ee0XOlJPcyxdS10X6Gi6XX8N9l8pr5Wq04/fPZdeeSjCVc3hxc+NzMCDG9mWhbZG+ xxQHJM5etz8YN5hgZzprJ64v7ZXSmdugvuNoOJyx5fNi5nlVrG5P2NoOEmE50rz1uJ0klB8OJTSI EnjwCdz9/eaM8NNoI3IXeMLyazZ8jQat5psPN/8pqpKf0ZqYMp99QxkCh5FI4Ni+OOqBEB3Pkzdk GDIajTAybZlOY6MB/bphJBCYNnu0idvuAH4QbuCJmF+t40UFHVTZibusn/N6JhCiQ1OFQtiactI7 F3jCvCQ5XS7pIVMxlQeR0LGo2F9k1HZ3aoe8hJ7qtvc3K+N8JLUVG0LNQhNZrsxxOH67zsdkJ6wy cHtlxeV0ORoJIU7stJfHqzlor9T/cXmNXBpaXxwZbC9wV49hvY/Wt48sSjZkdiTG+/E97Bofsi2O 3Miyd+EMpgqjq+5WayXoNf06gVCgu6k1DrvDMiu3nTSCuXg5DKPAfgXgScaBYDsNpgQmmsDd7zMR U9RQLAm5xDzqYJHMvt/vNY0SEa+gJyiBOyFQVzhleePohXnb+3bAOAF140pA23rQ63iCRWVh3NBG J4O7FrkJ8hgaJLIQS+OSsbkvbSHN8QliTdVSAg8ygdt7Rr0rBAJ/cqjQt4fvDm8hwY+SHx97uOCu WEUjefAISJ5qKv33T/v0BuQxK/QHT8yfYTci+eCl+B6kSOD3tHLNcQNUZ5iURt6rH76nTQ0/MDey 8KqRDwO4BiNaAj89oY4SoAQoAdcJTKJxJteNp1dQApQAJUAJUAKUACVwlwj8212Kh0ZDCVAClAAl QAlQApTA/UyA9plczz2DXj+6/I/rl4/7FZPNnnFPIFX4vSLwfSvP37f0fq8KM03sA0fgnr5kYEUT fo/Ds/+lhtXpifR2NxccamgT8HQP+f8q/smlY0RluLxNJlb4FeriNk6Kt2DGwx7t1TJ59QXE0yFh 1J7IlZMiXWNkw3c6/X1L73eCdZcvHo/yDCbfw/bENWDk9GquVp+sLW3WIW+vYFj+YC673opr2ieR NNPMfoo8g5M2bHS+Uped0a61z3YX00NKYLwJTI4+k7Za+uYqFFJfse4e/CD569aTMmZDOtQ6a9uT S8f4Oc0wswrUt2pYhndS9C3Gw56uK8fTWxS4aE2ftfvO+kywmbH8F0UGtPzx3MOR8Lt9TUH+zswu pU9AoXL7xnF54bbtw9QFVWfC+D5sFfCatjzu2ZRIwiJVzqvJOKTXeQQP4tnOun3ry4p8ppv4QxLV gyjtxb9t9B/XejAe5Rnd0/bEtcwnpNeoLvM+GmVRJfmpbi4sBDyRzq5+QfZWGsJViQd4/0padK4C 6p0aqZn4fZBB/dLWc2t7/uhSfVSbmtkw6c82+uKlxm/XudY+365WKkcJ3CGBCe8zGXW9GqPQVzha 4fU6jQ4J2NWPWKuN/W2wcJt0jC1BuFPoqB92R9D0awQzfEejZC51jJfVGLyueCSiYUNWiHKakx1E zbELgpUJXUZPzoUpueM1X2n7PazXMOtUiWaIbisP8LosRlh8xd3Qq+P7Ci1LW7lqD6PHLtKFq48N SWI2Zq9S8jgIkLjZpGf4BmxsDL/lVtUdTXoqdGF/9dZ2JRbo6jYteOwsvfrefp3VejM2ii0HNzW1 eM9mZsU/HDhYqTyqbvrd4YVmFGQ77fU7T68lxtvy4MVsBCKhu7a/F0ExNxsD13LbQ8pHYjihnHDl I2swd7y3lRhnQgOaehVSIWZ5Rotc902d5dlBq4MFqXmkXYm46qlFjZXnjsqzXb1w1p44K4fc9Ver 7TW6i0QCd1hYDlbDstg6PpxJ6b2J1+iXhqqKzZvZWeLl9rieLjs9N+zqFz4dCPv8euq+gWo9Wu+Y y95rbn8CjVEf7fQvXZeX/bl3wmCAJ4K1srS8Gbbr55Htd619touVHlIC403gtu7XrkU63Jwq33zG gMJ/cuDn6IOIGjlcnv3c9fglvvqeihRFBLsqLmysVr89JXiGu7an4VR1Mci0d5Serm836PmPB6+F BS2bP0xdBOMKM9P+tmt1bs7mI5rK8CeaDqxeiAj6pbdy1v+9yIcvDuIpcvFq1zG1Cf8TOgMnkDNe CNdcLfvjmZwzGhQeIGTu8BDmzOl7Tj+Tk4bgUdv3N8rtW9jms7N+Hylegi5jw/n0nedkptVipmeo Xkpb6vTBq7kua3NZsmV1meg1rcdWzwflrtozqmd6tBR1tRvUW58+vTcELw3s7jlt9G5gtpvEzXze 6psfnBeZOK8M8jr3/JdvCLrPMOfEyhfwFuuc6a0ri425WBsoChdq5ArcE5IWbs/bSF4naWlUXsbl eekGsfLFmpW3PvDO3wpbkNyAC2HLLa5y5Vy/Y3qrS2J3X26BzQrDwvOe7D2c9HmLjwH876eFYtT2 rr869u3dLdMCkQZvDCL1C1PC+vUoUbX3AGQlpz2gYZQ/o86Sj4Rwbm42emzzkRSvvfF3dLz0qeyM i8p0fnbXS79qa7yM9GdXnZXpmR6xpv30KyekuUx3VizKyN26JxQWeSfUU2gHSPHfeXlmNLI8Se0J PEpxlkMn9deaZ9h0VDkYxu7baB1uacdIiXISzplesLPu/FtKZufyga6/ZBUWz166a8tCf7Iel9PF qSo4Ki/z83nJCPJ3Y3Nj2zR0bnlJERjTfl0BewU2RYtfOhpVOT2z6Vc/euVPEaDBSX3k1A9tjBfe 0U4hZjaqQfyY2v/Dts/c9oOoq+0zIV4aTAmMJ4GJeAdcMGsaUhlU8pqIiJoKvB0KQhfUatRf8UxO hNwQnRdZrlyTGaZJD8ne02xAHRczdjJTY6qeZGmJdNPZqFNd8MAKu2AK8LgC3tLSfaqhUmVA7Vp4 7MFnuPWjqRBp5aAiFyWm4H3Uc1PYzTMI8eq7i2D0W9ajDBQJ5e0KrBhve+nc8YNEgerBykoY8xkV JMQ7KmDn0zW31vr4pRQ+V6sMiUGD6WnnG+wkbA4NDa/gDlO0cmtT1dpMTNPIcgCfC/b0NmctwnrE KSHZMQaFchCQqhC7R6lNfOYDAjfzaftvv5kSNqj041PK5lzGL56NHya50+sp8AEDlD1yxbTEjCDY 3UW5KX9NRb8VV7sY3LznTMNBHVc/qbuCN2uD5+CH4SUPgp2u6ucLPFWGykqDqg95TkMtKshlWCaM Y9yNidmNfxMKm0aJZsdAjih7UMxsKexiV9qpIdmDSPlICidwI+YjgQNj7nh8sPwHLyjKD6wqiTjn vrZwReHmR0Xa9gLvfNxhignKzJgdptKkLz/0fB1Tgwn11IkxLpRnEk9Se0Iqh7BRsrN2YxBJAzOz F8fgfSfZfRvHkzNnenVtTQmwuwvEB3uzJDeml3ZAG+jEcdcvYrpImty8Z0KfZvDCkZJXI0pWnTc+ Wbgmcw7faIDGhj9znv+8ALiQBx7cexuAR1FSfSTpt4SLUjICYRdCc/tMKOd31D5b4qAeSmCiCExA n8ltbvyLCrgHwsZutb+9dCyuQpeiO7Z6YXN9HjyJg7v61cfNmn7GLz99RbM0srjruUwID5NU6X6n G9ir27sAv1M0N3RPHv6Gnoxo13/kYR/rCPrnhsQz8tLauAOvb5PBncyLkSfF29iA+0mJa5qK447p XiyEzb/GdB5+kYfjTyQxVlmESfFaBBw8vKXLNktQ41v/K5NfZvoW5H4CvpbdmxMppMpXFM1fSQIz Y5YEsTpdsufrjo/gqgzp2dfXxR/eXYX7XqK8+CX2z68WW0jc2KgdP4cQ3mtW6idVNu5MuCbODIUN Sbu+xWHc6V26Op3Jr8SO+ANpW45VwWauSPXB511ouC0rZ8O2nG3mvw3bCorwLdjkVAllq6Jq8CZx hS/K5rshkp1E/WZF7LclvaERB+pDoN+DFs6c9xjuc6OM587FL5trK24+Eob+1woo49LsHdm/gfIg +s1rUb+Ecx7uRHuI+UjMX25upHwkcTBbPF7fimRmh76HfH68MQK/mNzy2UlQnbi29fCWvWm7KsqD AJ1S2daNCPXUiR0ulWcST1J7QiqHpPrL8hQHlRdv3xu/6XDf1ryw6Ys9yeXNSbpIpzjTCzsbb4kb GdieA1dlb+0b+f3IsTGm57jLCSldJGPM4Yr0Rtwoefg8vnF1pL+bx8YXBvr+c4fH8E2mDt4aQgtP /LZP+ZTlxVP7+mjWQ/qG9vn1tOffgJrGts+kfLmD9pkUJQ2nBMaRAJ66Gn/HvtUhighh5ns8+PjN oiF2FGfaY4seeRQZUeHavKbOgbXMgrzCaQ+BgJfHDA83Dw8B0ur0zFsRQ/iGy9yJTZ+WF5649GNZ 7ITQrsEsPK6QjDwpXl4HNu4RH9gaHHmI5vjAF8/JqAucZh1LbKrDZJp9vGZ5+299+7vikjgY0i+X bpgxGLVTGcfaaS9nOXabF70iBXUhmDaq7ZLD4If8qMdASjyDFoRu154hpnfQdwOeWX312h74gi3R R99GccPj5vBsakkXiRsjxvVx6wZC4hfWvux3XJk7PSlazE+ukzV+o//xN6T0mob1jLBwg5upeHhD DgwPfKVRqvhhOEfAGdRqnoHxsRZG1+7eqzwkhk5T01c9yH8u2U5IHHb2+tlQh/RCcPDql8PqlXEn nn/PoIT5iLgltr1j9kKbTzbT4UGcPwSLXQM+NwHRHjcBdz4S8pdHKCekfCTGyxo83Ftd+48ej4U/ Cwk2lxyblNzGAcNfdHwk/ucFhW/PEbHZYbpOAPWWcTw2mF2Mw1k9JUV4u+UZEbhB6jjbk7HqnX39 NfE0pQeJFuw4tUsj5KMmcjvGJEnf/OlHHbfQvPlPLLyt9eW50ytwnwraoDiRMFnCXU2X5UIHjyl/ h+KfKi77h9/gsSmvFjNzkUJcDYZ5TLHBLaSHaf9NNqft66ODWksAK2/iDNq0TPtMsp/njiN0vX22 REc9lMCEEBj/cSajunrfEWbKWnNgT2FqanFRL2P5oseZbee/rVcbp8NPQJqa89NbKobccZMhnLUM P5xeTNtXkhW7f4pXlqCox/z8P5iQXnxwz1/jQEx58VC12kjS3/3puwc0IKU4dK6i4txRJZbPOn1V S4rXZ9ZjIJ186rmD599Jems5HvfS7DzRilVwu+HuAkhOYXoxiAzmZ2B/QfcwIsXLrQQ6KsO4Kyjm P4T0XTWqUnhLiUkX7LtJcIaW3BpZ7k1BVFjqW09nYCHYXQY+XbQnSIIHQuTnFkkOhgv+tAm/HcVj OlzDne9AWo6zWZafUpC6r6wCrCFxg+s4nLYh/a/JMFB0pvnb1N1d13et/Hvpn0HsvYoTVw3O0ytf IN+WemRDRAvkgPTp+f6Iv/RAysillysq2L+US5d24VfHLJyPfjKUtB2PO6aXzEsqqw4klyvGTgf9 hPRiYeHKV2G4y4BfUcqIiia+dwOShub8fymgsB0pL/kG5gd7FEUqPF34VsW7D0kI5ZyUj4RwUjkh 5aPz/Lr8jxdXnd26qSTkbSclHCMgOhN/zZ+TCj94atPelfDGEuPmLAiHb1lJ1L7yooLi2FWNAE+8 dv5MUj0lRuBieUYEbqCfsz0h8bSUK852Q9W4Krb4ndMfHoZ2yTt7Tb1urHrR/9GiUxFRJRENlvlz UoIJ6YXXFKvLs/acyYfr3qvISC1IPd1ObpTI7QkpXSRzzPl7Ulb8FzXS/lNVYR4JAnv2Jb2TBsUd afJT8pMOf9IJXot+u/pIashG5WuqK84dBm3Q7pV1a0n54nL7TEoYDacExpXA+PeZdANt6ddw/YI7 qLxRJrv0DzUzTODut/761sJopIw7G7WqZFP6tcoYSdxi9jlKINm7WAr3qvT65NxBFL1YGYG38xT+ fFU2aJFfSpB/y+gz5DYO6Ej61T3s60uotuPjjzugwsONTVF7vY8Ur/+ylNoVifDOQMK5nXKDaWru n109TExcH8Pq85CcRhn0xuAq8Mgaz6uHESleLhU4TBgQljIdqXoSIk5FHbkZGCMSw9R+44Bp0IXj KvbXyD3pq47OW1SSDjek7Agp8+Tnmj3COVsG4mqzgxKXzwjLCUkZjWh4oBzSwr7RhSrlLbL0L1rA GhK30QutfHrtFTmTy7mXLyAff1/Pm+XX4N4JL2SU62eNkd7oaVp4e0MsSqmKOxHKPMxaKR71Wjjn fqYSBu6oDYmGc/IvGkeclCvmanv9hPSyMa0M34uLAj9j1zJ/NoT782Z3LZPeMy1NN3hwhfLCdTV8 qa7VfDODUM6J+cisXuGQv6RyQspH5/k1e0EUkxDpj0RkxNxJNYWa+VfKG0uvmobw8CnfhfGt0pww pEqv2bT1Ui6826vcfi58hjupnhIjcbV+kXhCBFztCYmnOV2EdoOPci/tlJ6Nyx0Up6w4JBGMUS+6 285C/OKg0l+OuQQDIb3QC2prSZbjnxTg95lkLbLK6wNEaOT2hJQukiqzvDLa4uSgAAAgAElEQVT9 UkJcXVwy/t0rW1TAnnQ5834VWCRvl5d+rQYlZnlkVx9JDZlF/lLnP83tc27VV32kfHG5fSYljIZT AuNK4O7vN2eEn+wakbvAU+jBDt2b02M0aHXDSCAQQndp1Bm0mmEkEtxhQz+qB37gyhkv6L+F4CfE NpFaXTZBXlhzD00VCmHL0LEdWK7jefKGDENGo1FgGhgf+zJHCaO2u1M75CX0VLe9v1kZ5yOprdgQ 6ihmG0LgZis05pFDeuH3xq1vH1mUbMjsSIz343vYFYYxFToI2Nnpun78633tlfo/Lq+RS0PriyMt b2w4RHVbAXb2wDWkfCSF42gcuOFAp/noGC++BLthvR59d86sLsdPU7wiq1/jOwqNa4gzbhARZ3vC ydOpVaZ0OTQRnJz1p/MF0nZx6e5LkaapZae6x++k6+kav7jHQxPR/nvUPo9HmqiOB5PA3e8zPZgc 74tU1RVOWd44amne9r4d5N/2j8pNhM/QIJGF4PlBxmVs7ktbiMfOxs25rl/betDreILFgMK4oY14 sHMyukmUj5MRzz20SfvOQa8Dj1Rd2rTyHhpBo6YEKIGJI0D7TBPHdtJp1vc3n/v80z69AXnMCv3B E/Nv6x3VCUqFpq6u/KqRDwNtBiNaIn5m4TiP9Lms36ht/ltDg8Ed3k6C17m9n1oe7ms7DjpBIO5A 7WTKxzswn15CCVAClMD9SoD2me7XnKN2UwKUACVACVAClMDdJDD+74DfTetpXJQAJUAJUAKUACVA CdwdArTPdHc4uxKLQa9nl7dx5aJJJHu/2z+JUN6RKZT/HWGjF1EClAAlMCaBCXzLtbu54FBDm4Cn e8j/V/FPLnVuCvxugucpup0fT7V98s6Rxi8E3mv3RIablohxrvr+Omu4vE0mVvgV6uI2TobU3X6+ mDBPvP2aq9Una0ubdcjbK3j7M3gp6u+n4+Yw8fy/n7RpqikBSoASAAIT2Gf6uvWkjNlIDrXO2vbk Umc/i9JWS99chULqK9aN+QNv/Wf1O2XXEJo+a/cD2WdiV535Vg3LnNz7PpML+WKuTRNsv1FdBrsE miNDkp/q5sICqePh2j5MXQB7QvMtvxFXVxrCVYmw566+qOD5fV8NWNYllzzxHuwVbdpDmpH34gUs fnTT7qfX+9+tDhyRwwTzHw/SVAclQAlQAvcrgQnsMwWvKx6JaNiQFaKcZrXT6bBew6yTJJohssRt 7G+DFdyklq1RrGHay3us39WXc9A7Dnmxy2Fay2K/vbz5PF59xygUitwNvTq+r9DqJ1F6nUaHBCLB 7d16h7WamwKR0F3b34uEVnpI8eL49b39OuEMvF2treMKFwQrE7qMnv5cC1IZNf0awQxfGz1Muqxh 2kbBcUROr71+Z/liVmzU9WqMAMJsFNl+7njJ+WKOwfb7Jl6DWBqqKnbYhEur08LS5syuO7aXMEf2 djqI3NDU4j2hmZUqzScDmcWch9SdStgi2uLUmhvgv2krr6xXwH7PQ7vWW0q1Rd7Bw5XvZiFHO7m5 kTiQ+ZtjsP/m1u9qvthrpceUACVACTyABG6jhXc91ZqrZX88k3NGg8IDhLCarNkZG86n7zwnM63K Mz1D9VLaUthdrqfhVHUxyLR3lJ6ubzfo+Y8Hr50vAMO45WFsDG/FpCnOKPhnbWdLQMCGvetfWjrD iTxqrsvaXJZsWQ0oek3rsdXzQYe+pyJFESHHO5bDNqsZ9dtTgrEeLtdfHfv27pZpgUiDN9aQ+oUp 8UK9iaq9MA7BbWddWWzMxdpAUbhQI1fgO660cHvexkARKRwk9D2nn8lJQ9N9kO9vlNvxhiHgOuv3 rf97kQ9fHMRT5OJNFGJqE/4nlLFzNF3To6Woq92g3vr06b0hc5nrOD4400vST8yX4eZU+eYzBhT+ kwM/Rx9E1Mghpuznrscv8eW0H85yxgvho/YzxlryhTly/DDWnX9L2YpXeB/o+ktWYfHspbu2LPSH Q0376VdOSHOZbo1YlJG7dU8o7OxBttNRNYQER+Vlfj4vGWV3vbSxubFtGjq3vKSIkRT+evf1yG/O 78zfVMnPqH9h1xyvmVj+aUZ+UFz4wuk5XxxeDtsGX5MWd+s2EhaAJuY72U4CNyIHTv767tPP/CkN 9tsJWpq2WqfM/BLqwbPv/efrC/l3lC+65ndK8q8KV8U9FTlp12LgzF8aSAlQApTAdycw/u+A67uL YPYEnrkDRUI5uyOHaTl9XXNrrY9fSuFztcqQGDSYnna+ARLQcTFjJzOFp+pJlpZIN52NOtUFAwbg uOWZU/ChlLW0ePHVivYEcfbOBryZA0He0PAK7jBFK7c2Va3NhI3tkJEZPuiveCYnQm6IzossV67J DNOkh2TvabYaTjBHxHy78W/CIIRGiWbH4K3xelDMbCls3VHaCb0Y7ng9BT4qg0rZI1dMS8wIgo0+ lJvy11T0G0nhTDT8IFGgerCyEsbERqOfCnoqBxW5KDFlNkSem8JsEtPbnLUIp0ucEpIdY1AoBytB DDnZZZiYXm795HwRzJqGIC55TURETUW0HyZ6Qa0m2k+Kl5Qvowm38+namhJglxUIhT0lkhvTSztw pNr2Au983GGKCcrMmB2m0qQvP/R8HS5BTuy008wcunnPhF1EBy8cKXk1omTVeeOThWsy5zBzbR5C 37kBPwgAqWkzg/z8fXGHHvZXYeRR4KN+c0MjXi8Pwhyu9LFFF5+3c+R8J9hJ4oa4OTDRcZUfN34A gvEzVe6Vhk/VCtWgCk2bgbdLJel3mi+Xz7+ys1GWXheV04L779RRApQAJfC9IjD+fabGBgUQTFzT VBx3TPdiId69y+R4S5dtlqDGt/5XJr+ci8OYfsHSyOKu5zLhKExSpfudbmCvbu8C9t0nbnmTMhQN e24Xv1xfiu9VijNtsBEwQd7N0w9fo5AqX1E0fyUJzIxZEgTHzfV5MFIE7upXHzdr+hm//PQVwp1A GPpfK6DfI83ekf0bsE70m9eifgnXeuC7J3e8S1en5+F0JHbEH0jbcqwKNn9Fqg8+7yKFY21+kYfj TySxqYdjxs0NiWf0SGvjDry+TQZavJjwrzs+gu8M6dnX18Uf3l2F79iivPgleNyF05HSS9JPzBe3 ufEvKoAFQtG1v710LK5Cl6I7tnohHHPaT4oXEfKF03gmULglbmRgew74s7f2jfx+5BgzPdfy2UkI SVzbenjL3rRdFUzfRals60ZkO8lRwBlFeiMunB4+j29cHek/Oodr6vhb9WVNaoaYHzn6++E+VRv0 HYfbsnI2bMvZZv7bsK2gCHpSxHwn2Enkhrg5YJu5yg8EHvv9gBKqiUYm60EZ6zouxe2dzyeXf6f5 EvR4fKJIKp2dvWmubTE1waBflAAlQAk8yAQIU1HfIck8dzyn9IgP7qh4iOb4wBcPj37o298Vl8TB FFi5dMOMwaidyjhkfoFJOO0hkPLymOHh5uEBs3U6PbyVQpbHD8kIPTYLv9DkLvLEB33fDujb3+fW 7zYvekUK6kI+SF3bJYcXVuRHPQZS4ofYm+C0xxY98ij03grX5jV1DqwNYCfEsE4uJ/Rkb6J8/hAs Fo3QVDcB2U7zXRbuqW6Ijc4bkyCFsxGyOTLV4W0tNmpP3GFiuA0xd+++GzDW4qvX9uAhl6FbMNxm frGI1Tb6SU4v2w2w1w9XcuYL1shCEEWEMLQ8+NZx2ttPjNdNwJkvzjNAwEzMAvbRhDE+AZQbxvHY 0sEu1uDMTjsFcMhcKTo+FP9Ucdk//AaPTXm1GPrlwaxiN1avdb6wIUJPGIsabsv/lwJU/DAgAA13 fKVRqvhhuOSDM6jVPFxUnOU7l51EbowuEgfzrzqs7YQLeNOZggO+a/1QUvDsLVG/03zxePjx50Oj e6YtmWefA4xZ9IMSoAQogQeawPj3mXxmPQbEkk8956He3v7xTjx+o9l5olX6HLoFXjH/IaTvqlGV wlsVqouHqn+cvdLHQzhrGQyTKC+m7TM+ce3z5NxBBLt9/WyYW96/I/cAHgxKj85/6Dczv956CccQ Nm/ukJZbfqWwJbdGpvDLqHo2dfv12YtK0uHdDugmLHp8E6pToG/r1cYfL/YYPPdJfvo1r6fd40Eb hzM0szfFI+XSWXCP7FEUqRaD2FsV74avIMRrumfKF8i/SZmhlV0DO6VPz4dxIBh0AOcQPtxd8P6h TxFqxKnLzyj8AqElu3+xBTW9y6RXcejczs3oAyWcvJh1+odvhUl+ieqV8nOLKi7BhBSGADd9J9lJ Sm/3p0c49a+fI+TMlw3u/5QV5+IOgubAnsIvBLzgpA0bfeGQYD8pXmRo4swXnBBup68uP/h+Sxmc fK8io1OAlv90z/pA0ZwF4cBBVhIl6E+br/3H1kZAIV47f6ZRXc1tJ7dy1P0py/mkrPibmR5Tr6jg xSl2RA/HW9p1mUlyfkrBFwsXx8Yum2uWV6Qdf3igXY4zgJ8hDRQit6UHUkYIkUCwfb6T7CRyQ9wc SPxn9lfveWcVfmkvKCelJU5WE1LbkpG7KSWEVP6d5svlf+xcXofLYKZHn3k8mJxWeoYSoAQogQeL gJOb7B0m1H9ZSq26DzaHTzhXifhi6BqBon929ez4SVjKdCTrSYg4hcR+iTEica4mt3HgDegzIYFk 72JpZaMyvR43x9GLlRF+7kIvTvn//vbzYuZtbrG6PWFrO4iH5Ujz1sN2qtzyb6z0HOoCqZ70VUfT 4RtuqNkRUjyv4Lf++tbC3xZuijuLIwUXIyldTHp6vtldywwWnGlp2siDRCkvXPfDabtWo/XdS0gX qxVFT4MOk1IsSjm0OT3UahTFPtygPt8oyzVdVCnD9/6YX0m3oB7m9SWEajs+no/wG9DIoKi9/tr6 kC0DcfPzyk98ZvR+6dHlcfUy06WEL3dCejtI+ucIOfNF196Wfg33HyD18kbIihhYJMkXj7Vw2+9P iBfpCPlCsB9GRtpakuU9+DS8zwR0EufHQp/Jd2F8q3Tqi8q49JpN+Bw/Rvn8f4fPcNeS7MRCHE5t 4qBMv2QqD1ASGbmhts+SZaY520p5S6XUe2Msmqu+ZsoXZbsc8cNiFmzfu27HXHbEiEP9aJBdvpPs JOUXiQOJv3Cgjf2VQ+LcZcFGMWpXqXrSmwYSQwMJ5d9pvsxesAHhPpP0Rw9bFeXRxFEfJUAJUAIP MoEJ22/OoNXcQkKh/c6rsEYimioUwtasDs5o0OqGkUBgc4kTeYR/9m8U2K6EySVv1Gp1PE/ekGHI aDQKhHa/+Yez8MK1u8BTeDsrajpYbQpwiNeo7W99+8iiZENmR2K8H9/DrJwUTlLsLNyo7e7UDnkJ PdVt729WxvlIais2hDq7AJ9zOb2c+TJWLI7nHeN1ni+OGpyHmPSLhJPzXn7H+e7IzTkHV8866h8r X4b1ephDdzUeKk8JUAKUwP1PYML6TPc/mu+UAkODRBbCjIdhNRmb+9IW4rEtRArH51x2dYVTljeO XpW3vW9HIBPLaBj1TQ4C45rvkyNJ1ApKgBKgBL53BDjGe753DCYiwfzA3MjCq0Y+DKgZjGiJ5dVy Uvgd2SB5qqn03z/t0xuQx6zQHzwxfwZ9+L8jjnfhonHN97tgL42CEqAEKAFKwJEAHWdyZEJDKAFK gBKgBCgBSoASsCcw/usz2cdAjykBSoASoAQoAUqAErj/CdA+0/2fhzQFlAAlQAlQApQAJTDxBGif aeIZ0xgoAUqAEqAEKAFK4P4nQPtM938e0hRQApQAJUAJUAKUwMQToH2miWdMY6AEKAFKgBKgBCiB +58A7TPd/3lIU0AJUAKUACVACVACE0+A9pkmnjGNgRKgBCgBSoASoATufwK0z3T/5yFNASVACVAC lAAlQAlMPAHaZ5p4xjQGSoASoAQoAUqAErj/CdA+0/2fhzQFlAAlQAlQApQAJTDxBGifaeIZ0xgo AUqAEqAEKAFK4P4nQPtM938e0hRQApQAJUAJUAKUwMQToH2miWdMY6AEKAFKgBKgBCiB+58A7TPd /3lIU0AJUAKUACVACVACE0+A9pkmnjGNgRKgBCgBSoASoATufwK0z3T/5yFNASVACVAClAAlQAlM PAHaZxpnxr3tFdVXe8dZKVVHCVAClAAlQAlQAveawJSRkZF7bQOOX6/tbmz76MINvy2rVwqtDNJc rVZ+dnEA+YctX7d0hofVGW7vPZYfbt722iLF9JyBl2OZVBg7W89Wtnbe4vksWxQR6i/iNpqGUgKU ACVACVAClMCkJ+A+GSzsrk8NKJExloQt+0lFqMBkVGf9vnkl6aaDOvHxF2q2zLHuUNnbfs/lO2sP KxDKiPgF22GqLn561aVKk5U1KHFt04EnF9obTY8pAUqAEqAEKAFK4H4gMCnm5rwfWZWxOEOKeXnx LNSG215nOkwZ61RVIdEIqbb+9ZTWctbRc+/lOw+flUOXadcyX2ydQbUfd5hi6veO6F5UihGS1/5d 42g2DaEEKAFKgBKgBCiB+4HApOgzefhHpm1K2WA7c6X/sjoXCE7PjgtZujLqv2LArylu0RGh3nP5 3k/yYawsMXK7v7WN/PlzBMhD5BcIgQbrE9RPCVAClAAlQAlQAvcTgUnRZ2KA2feGhtAtCA/7wQo8 aOMW8FPbHpUj43st35tXCtOIibE/mmuyjR+8b0U0MiTPlEkkWcuVCGX+fONYiXBMFg2hBCgBSoAS oAQogUlBYPL0mUw4hmyxeNke2p21PYmP7pW8pvkvyQYUvSJ2oZvFKG1XXxcciKeJA6fjwK/Uass5 6qEEKAFKgBKgBCiB+4vA5OkzsS9+Cz35JoA896ngU165wLzDdP0SfhVIyLP0SIZ7qz8sKKpvsLzh dE/ltSf/noBQdNITVq94G1qON1bC3GJd/LHiRBW8kCX/uJK+z3R/VQ9qLSVACVAClAAlYCEwGX43 Z7xcd6T4y06mQ6FIO/5Y+PxnX3oy2GPOs5l8lKyJe6nw1tKBI/ByNQraGmzuUV3+x4ur6mC+C2U+ 1Ld3AZ7yuofy+qun4jRIGrI72PyLP8zXzdMTPgcr3q0PDRr8O/yeDqGpkwE3NoQ6SoASoAQoAUqA EnCRwGRYn0lfdESw6ZqV4aK8gfgd+Of6/XVJby+XM69Oi/1yTr8YO9c8zqRpPex9PA4hafnuonAf c1fk3sjri3IEm3rCqn5bYbO0FEKdnxzeqYwzLTbAjyn99RuR/s7WSrBCQL2UACVACVAClAAlMLkI TIY+k3Mi+t7+viEk8J/h8P70sF6PPDzMvSizlnsgf/nDfcXGZ9NWB5ttsP4Ge2D+0F00Q2Tu2Vmf pX5KgBKgBCgBSoASuD8ITP4+0/3BkVpJCVAClAAlQAlQAg82gcnzDviDzZmmjhKgBCgBSoASoATu bwK0z3R/5x+1nhKgBCgBSoASoATuDgHaZ7o7nGkslAAlQAlQApQAJXB/E6B9pnHOv972iuqrveOs lKqjBCgBSoASoAQogXtNYLK8A67Xdje2fXThht+W1TY/2NdcrVZ+dnEA+YctX7d0hseYuEh6SBe6 qn8M+eHmba8tUkzPGXg5ll1UwIk9mu6G8qYL6iHkMzty4xLzjiskQ2k4JUAJUAKUACVACdxTApPi 9+/d9akBJbC/LbiwZT+pCDWvDNlZv29eCWzixrg68fEXarbMcba+EUmPSYPDl6v6x5TvrD2sQCgj 4heslWR79BUlL0bUgyx20aie9plYFPSTEqAEKAFKgBKYtAQmxdyc9yOrMhZnSDEkL54F1XDb60yH KWOdqioEth5Rbf3rKctOKRYpaw+3HmsJa7+r+seW7zx8FpYrz9i1DG8rDI5kT+8nf8QdJn6i6rcj I78fORbJubATq4N+UgKUACVACVAClMCkIDAp+kwe/pFpm1I22C5aqf+yOhcQTc+OC1m6Muq/YsCv KW7ROaPGqYd0gav6x5Tv/SQfxsoSI7f7m6Mk2KN5vwoPnuX8x555w73aYbM0/aYEKAFKgBKgBCiB SUxgUvSZGD72vaEhdAvCw36wAg/auAX81LZHRUZqr4ck6ar+seR780qhJ5QY+yO7N5Mc7NG1lzJb 9ca9F+CVPdPrtQ2nu50Pn5FSQMMpAUqAEqAEKAFK4O4RmDx9JlOah2zT7mV7aHfW9qTN0W1Kuqqf JK9p/kuyAUWviF1ov5eLyapRe9wQ87aTOGNNqTI0ESGltPR/9Ta20wNKgBKgBCgBSoASmHQEJk+f iX3xW+jJNzHiuU8Fn/LKBWYQ5volPDYj5Fl6JP+fvbcBa+rKFv63DxAJGipQxYJexY+OMhIszAzW 76DTgWqNt9WxV9Fb2isyPl7B6VsZvAN3GnubF6cdwcdpkf4tHQtOK9oSB0fetoAKzsC1YI0WqYCI Ag7SGEqoiSE8/tc+Jwn5ODsQC51o13l4knP2WWfttX977X0W++yc3d9Vefbw0do6pyEaRz1mdU7y 7up3Ka878kkKTObeMX+WObuBLyd7+gm1WbQhdUncqp8/L4X97g6nwaiB63EPCSABJIAEkAAS8AQC nvC7OdPFmoPF11sraFRUkFH4eOz0FVsXRPlOXpElImna5K1FdyN6DsLkajJzQ5Qlorr46ebFNSpI y3rk9s4Z/HM7YT18CZ3l3dXvQt5w41iylsijt0VZfvHHVS3DHnH4L4OJqjNNefony02fqUF0TIjd ddzF+IEEkAASQAJIAAl4FAFPeD+T4ehB8do2GywB+T3bX6APsLprdrw9L9tIT0mDc49v3jLFMs6k bToQWJhMiLxs29HYID4uYuuB6eMC8u7qZ8kbjuaK13bKzvy63O7VUoRtj/7irrekyl6uyGMV6q0Z ERg0cTDwAwkgASSABJCAxxLwhJjJNRxDV/ftPiIOGec0CbzfYCC+vpYoyrUWelZY3l39AvIXz+4u Nq3IWOLWKwNM2m6tifiOH+fqjVODFwolkAASQAJIAAkgge+FgOfHTN8LBswECSABJIAEkAASQAIu CXjOHHCXZuJJJIAEkAASQAJIAAn8UwlgzPRPxY+ZIwEkgASQABJAAg8IAYyZHpCKQjORABJAAkgA CSCBfyoBjJmGGX9XS3nlja5hVorqkAASQAJIAAkggX82AU+ZA27QddQ3/+3cN8Hrl9j9YF97o1L1 5fkeEiKbtzJinO+guFh6WBe6Kz+IPf0NG1+bXTA2t+flLdzP4QzNDX87335dQ8bOn7syIsjOfpOm 5sgXN2bN+UVUMP50jlU/mI4EkAASQAJIwFMIeMI7LUlH7a7QEljfFjbZ3J+Vx1heVtRau3tqCV3O lm410sIXq9ZPdhVesPTwCpw/3ZUf1J7W6gMFhCiWPctZqTuc67+h05JtFSnarF8TYg2bdAWF8xK1 RKqrvrA6xiKE30gACSABJIAEkICHEvCIZ3OBjy1WhCvkFJG/jxVUf/PrXMCkWKk+E51AiHrDx8ec VkqxStMdYT12InYH7skPbk/rgc/gdeWKl+bSZYWJsfEIBEwixeVftxeF0SVS3qqrt2avbciHgAm2 MN+BElvP4g4SQAJIAAkgASTgaQQ8ImbyDYnLWJu+2v6llYbrlXlAa2xOcnTEovj/SoJ9bXGjy4XZ BPW4IO6W/KD2dH1xCMbKUuM2hfBZisJfjlEUPb9tliRkiXSNvRkd+z9MkYbn5wSTHpP9GTxCAkgA CSABJIAEPJKAR8RMHBnHaKiP3IV02Y8W0kEbr9An7SMqNkxHPWxJ/sxQ5Qezpyv/JDxGTN3ykymW HH0XxWWsCQO7W/PL6BNG2dTJ/Knms7/PJLJ8+XOPwrIw3jjOZAGG30gACSABJIAEPJiA58RMZkh9 9rD87Q8dztqftDsauiR/2RDlWfZoG/6cZiQJC7fMcljLxdiw+82pab1EFl6WPod7ZtffsAce4QWs 9tM2Nn9LNO3F752tMdjZjgdIAAkgASSABJCAxxHwnJiJn/gt8ROZGfl4j4Y91dVz3BymWxfo7B+J jzUi6e+qPHv4aG2d0wwnRz1mdd9Z3qU9uiOfpBCSsGP+LHN2/Fd3zRbl7MxeoohTfxg7pbWbC42M d+i8cG3K7NzoTCNRt2Um1n4xxIjNTjkeIAEkgASQABJAAt8jAU/43ZzpYs3B4uutFTQqKsgofDx2 +oqtC6J8J6/IEpE0bfLWorsRPQdhcjWZuSHKElFd/HTz4hoVpGU9cnvnDP65nbAevoTfXd6FPYYb x5K1RB69LYoP2Pj609VszJkHP6Oj280/Ly9VkkjuJ3LiqKO/7bvV8tknrVfKqlIKAtILFy+xvY6/ Aj+RABJAAkgACSABjyLgCeNMpq8uJWfWKys4MKqWzJRaNTfJaPzOX1WnikhBfUpam1oanHttXZyV 3aQZ8dy+/CcB1rcPsPRQweGQZ9ljKDmRCLOVXl4SYzUPdgzdl80BEyGZF5RqQqSWn8h5e3lrmnIT IWACOa1yQ9npoU6qss0A95EAEkACSAAJIIHvkYCnvNOSXWRDV/ftPiIOGec0CbzfYCC+vtandWwV 5jPDIy9gz8Wzu4tNKzKWRA1qAgogASSABJAAEkACDygBz4+ZHlCwaDYSQAJIAAkgASTwUBHwhGdz DxVQLAwSQAJIAAkgASTwUBLAmOmhrFYsFBJAAkgACSABJDDMBDBmGmagqA4JIAEkgASQABJ4KAlg zDTM1drVUl55o2uYlaI6JIAEkAASQAJI4J9NwFPmgBt0HfXNfzv3TfD6JYusLw8AONoblaovz/eQ ENm8lRHjfAfFxdLDuNDQ3PC38+3XNWTs/LkrI4IG1z+IPf0NG1+bXTA2t+flLVwpXOk3aWqOfHFj 1pxfRAXblphhKSYjASSABJAAEkAC/1QC/Bsf/6kmENJRuyu0BNa3hU0292flMZY3PLbW7p5aQldq o1uNtPDFqvWTXYUXLD28AqdP3eFc/w2dluQqUrRZvybEVdg0qD2t1bVzj04AACAASURBVAfglUuK Zc9yVrrWrysonJeoJVId96JLixX4jQSQABJAAkgACXgmAY94Nhf42GJFuEJOCfkPrFjb3/w6FzAp VqrPRCcQot7w8TGnlVLsqArrsROxOTA2HoGASaS4/Ov2ojApnHirrt7mtNPu4Pa0HoCF5Ijipbnc unIu9Wsb8iFggi3M8qJLp/wwAQkgASSABJAAEvAgAh4RM/mGxGWsTV9t/9JKw/XKPAA1Nic5OmJR /H8lwb62uNHlC7MF9TBhi8JfjlEUPb9tliRkiXQNU8xyYlB7ur44BGNlqXGbQvhLXOnv2P9hijQ8 PyeY9JgsGeA3EkACSAAJIAEk4MEEPCJm4vg4RkN95C6ky360kA7aeIU+aR9RsZE66mFL+i6Ky1gT Bnpb88voE0DZ1MlsYTKYPV35J0FJ6pafTLEoYepvPvv7TCLLlz/3qJEQ74GRNcuF+I0EkAASQAJI AAl4HAHPiZnMaPrsEfnbHzqctT9pdzRUSWPD7jenpvUSWXhZ+hzumZqdGscDlj3ahj+nGUnCwi2z HNZycdbf37AHHuEFrPbTNjZ/SzTtxe+drTE45oPHSAAJIAEkgASQgGcR8JyYiZ/4LfETmQH5eI+G PdXVc9wcplsX6OwfiY81Iunvqjx7+GhtndMMJ0c9ZnWC8t01W5SzM3uJIk79YeyU1m6b0MVJ3qU9 uiOfpBCSsGP+LHN2/JegfuMdOu9cmzI7NzrTSNRtmYm1Xww1wrPTjgdIAAkgASSABJDA90fAE343 Z7pYc7D4emsFjYoKMgofj52+YuuCKN/JK7JEJE2bvLXobkTPQZhcTWZuiLJEVBc/3by4RgVpWY/c 3jmDf24nrIcvoYC8rmZjzjz4mRvdbv55eamSRA78hM1Z3oU9hhvHkrVEHr0tig/YeJ0s/eKoo7/t u9Xy2SetV8qqUgoC0gsXL7G9jr8aP5EAEkACSAAJIAGPIuAJ40ymry4lZ9YrKzgwqpbMlFo1Nylp /M5fVaeKSEF9SlqbWhqce21dnJXdpBnx3L78JwHWtw+w9FBBZ3lD92VzwERI5gWlmhCpzU/YnOUJ YdljKDmRCLOhXl4SYzUPdlzo9/by1jTlJkLABHJa5Yay00OfhGWbBe4jASSABJAAEkAC3xsBT3mn JbvAhq7u231EHDLOaRJ4v8FAfH2tT+vYKsxnhkdewJ6LZ3cXm1ZkLIka1AQUQAJIAAkgASSABB5Q Ap4fMz2gYNFsJIAEkAASQAJI4KEi4AnP5h4qoFgYJIAEkAASQAJI4KEkgDHTQ1mtWCgkgASQABJA AkhgmAlgzDTMQFEdEkACSAAJIAEk8FASwJjpoaxWLBQSQAJIAAkgASQwzAQwZhpmoKgOCSABJIAE kAASeCgJYMz0UFYrFgoJIAEkgASQABIYZgIYMw0zUFSHBJAAEkACSAAJPJQEMGZ6KKsVC4UEkAAS QAJIAAkMMwGMmYYZKKpDAkgACSABJIAEHkoCGDM9lNWKhUICSAAJIAEkgASGmQDGTMMMFNUhASSA BJAAEkACDyUBjJkeymrFQiEBJIAEkAASQALDTABjpmEGiuqQABJAAkgACSCBh5IAxkwPZbVioZAA EkACSAAJIIFhJoAx0zADRXVIAAkgASSABJDAQ0kAY6aHslqxUEgACSABJIAEkMAwE8CYaZiBojok gASQABJAAkjgoSSAMdNDWa1YKCSABJAAEkACSGCYCWDMNMxAUR0SQAJIYBgIGA2G/mFQgyqQABIY RgLew6gLVQ2dgE6n9fEL8PUa+hVEe6PySPXJBj0J9I/a9PSaKSI3rv2nixp0HfXNfzv3TfD6JYsk NtZAoVRfnu8hIbJ5KyPG+dqcEd5l6RGWJmSk5Vn5upWuu1GaXXmO+OiJJP6VuEUOFDoaDu+vaxb7 6B8J+bftCyLc0ozCI0HAdX0NT47GixuV0oLgIn3yGlt/cO43OPe4RPyidqxeM3548vYsLej/nlUf P3hrRiBm6m/d88dVhX1BQUSjMcYWpO6NELMx9zfvzn72qJHMeyLvQFwMIdrDhxKz2lVBoUWqTWts b65sFYOcaT67a8aZEzJREC/nP2Ze8or0uMnDonuQrJmndZXyPywm0bXlK6OYMvYnTJrSwHfjrWmR T+qnBNv2pdYzbu848CFEU2GMVdNaMxw9/Pzumz1mcEZN5PwP9y6Z1XB212wLT3+f0PBpa7c9tSrE ZQDXUbsrtETJWSab+7PyGIs/tNbunlqSaba4Rlr4YtV6l/XC0sMq80jLs/J1N739amFmYwG9auzE bU4x0z+ajigbVfRs08SNCyIC6N5Dtz1Q/YDr+hqeuunvawdF32r6CBlo50L9hsbsHjL5L9aMt7Ss 4bHBM7T8IPzfM1CjFUMhMBLP5vTNWrW6t6KiV602ZsO/yK7s6P+GE1Pn1bzbAAPRmsoNLSq1kVS0 d5j4y/oN2u6urm6t+dBOlwHSDXYpAgd3tNXEqK6g9tA/Vacy/t3/Q/OybAa9Vqt3UtOvY2Rquczp 24UeGGM36bt0lkxN3c0VhPh7+zjpYCfcaYVz8hj1vf++B3+rbAImnV6nc7bfogny7dI5lc5yFr6/ secD1UGMLXeoQJ+mVcXVI4fOqC7XfgOptjxV2gJlrTz0/eNCtUNV8FvgY4sV4Qo5PfAfKHN/8+tc wKRYqT4TnUCIesPHx3TmK4S/hPUIy9LUkZZn50zPuK4X22tnLXm/L+UM5eMz2vmfmKiVxfd21tKz YwTO2urh93W6Lq2eVohOZ4PTVTty1kEI5/8OfsvLCfu5kA6aNsR8PbYfoGVw7Gdc1xe94rtv4ihV Svvt/9xi+7+dYL8RsTI/ZyzkF+pHTLoh9Idm04ZYL04Fce5PWP4g7IeDtQtn/e76v5PJmIAEhpPA CMRMXrNykrl/izk786o/07owWBSVH5fKC56+rmttOMHtS1UvJgUQU93pXZGviQNzJkzICfR5c/dF PT1ZU7olUhm5OnfHRqUY0sWvrj7a4iqHiPh8BR0Fkao299zeVMjp7/zGSL8NneU73hwl3hMYuEc8 at/uum7zrb+hdk/ka/40031btuTGQnZ7althfGWUMjL24FED6dpHE0ftON3AaWPrqTHrEb82ymfP hK1VNHzUddYVVBbDTsu1k8drjx89W9rM3eF4VUKfpprT+zI/OQmnetr/vKdo9+GGDl5M23J8i3KU /x5//z3iyH27azRcbNTfsOvNSLB5R1l5edkOyHfCH8T7LnUJaaZpUfH5WdDnjs1p39letvJM9UoF mMYJS/59261rm4pkcCBS1Ca3f/aLaCr/FCdPpEUvXqtemE4l2+TFHa7CMt+QuIy16avtR0gM1yvz 4NqxOcnREYvi/ysJ9rXFjVwVU51Cm6AeIUFz2sjJa5vei301MvbNyNjDXLwIwySw/yZ4xcbSToNg vbjwHzDX22+M7d2RL4D2Rumu3NWRytU7ivYOtCh2gXl/9v/DhMA9PrFvjvL/g7yO8hRuRy7saRDy W1DEai8Mi4TzFRb2vH7AdT/jXF+VJdAvxcYqI3fX1JXD/pv8Pm3yzptr/zF0Hgfvkh9MeO6Dw9aw l91veHP/iBRI9/j4Q3+o3FJj6cec8+VS3KkXuIDdn7D8geGHRLBduNDvrv8zyovJSGA4CYxAzESI XnsNbMxZd7lwEiG9b1V2mmMRQcODJ0Ty6Sc/P6ZqoLdRiG8mBcCAtL6hqTooOL3ouWpVdBLpzcw4 XQfn/MRBaqNa1ZldMCZVMTOBENXaQ0vLXXQTXoGTx1Cl1258UXP1Et0jYY9CFNVd/nTusmxjQn5c mWpplkybGZ3zSoORaBv2zS5JUxNpaqQiQZuX11kB2ZHRPmJvMR2v6tbADW60ERJJi44bjmHoIca6 35SCngTVhstnlmfRyMNE5a+dVyRyj1rUnWnyEvnaz+KPtVs7Rmqc06ZvvpyibKM3zYo2ZVp95slr YAPRtRwOPCTPM5KkmVmKSTK1NnPe/udrqCbxxDEEbM6uWrasqjwhmOZ8TkMvEd68AifA4E/vuYMl ry4rWXzatKBoadZkGmUSX8n4KaE/CoW9MRNmBoeMF3ODICJOnoRNC54Ss+z1splU/9XbrosAIo7R UB+5C6myHy2kkzC8Qp+0j6ggjbE56mGIWZNHRN7bC8JMGLxUh/qJmpoqa65/PZoeVqiJ36ibRwXr hek/VkvtdwwdR+FprLJTFRYgyW7hntzBcxoXG++HvUQelpUTnlTRC6L+nLhwO2Law/BbVnthWySc L0ve0/oBd/sZkdhPbayoMKpvE78xpJEO0BrJI4yRQRf+M8YbWploZkCYBjR06axd5+D9RkC6IkxG jHnpVWoWZBf+wL6E0Z+w+j2GH7rbX7nt/+wC4BkkMIwEnB8FfHflpsqzB0FLecMnYbfgW/3u+cur 4iJYevl7pzxYrqpPVBFpVsyKtJrqb+F+KvKJmLsu8tzJt/5fPTFy/2Zz/UfEksz8C8pEbeq17Xun ELK0qH1xfcVfvmqP/YlpzzsvXyQSS0Y64p/w1nrrpCh1Suli/lTRZuV0L9JQmw8PyGC7cfPzW6Sb 288+fjVzeVM5JCrkJzPmhpClC9pzllUE5G+fE+JLXsmvyUzsI30k4KV/zU9+N5G7mqln1ky/YCpR IFfpksaFRYZlPTtnJhxHxBW3T9oTeixNFnnmr8/8tM9IJOKBGQu8TvtPyfrke8+0HPA/lJyz4fb2 GebgovHLIyCWurxp74LphOxccDh2WaNK1dwRM3fK9s0F516TFpCE6l+/HyMh7xgNviLXWYCmgsx6 mq1v0BNrLFnQYygut1n7bv6QnuAeNYYEh5JG0kxjsiHNQHW47/N39QGd1r3Bdhz0DCZuKcagchYB 1/olYWveWZo041S1fI7ofwoXF4hy1P+ak/ZhSu7zOeO/fB50ONfL6zHC/mPJ0Pxt5VxfR+Ok1KWX YQ6ZoUMe885a13dC3p+lM8uK18fChRubnnxOdcWP/shAuB1NYdnjJey3rPYyaxYr2hXO11xOpy9P 6wd2svqZGOh1BjZrfcUs21urb4muVc2aMPXx0TJSW6F47tT2OcJwXPjPoiDok+MObF/63j4x9DbW bbB+Q16d/HoMqatVRlsvYey4Vy/ES7g/aSj7H8H+k7TTftXZD93tr+pKfgP2D93/GYXFZCQwzARG IGYyqt9tUxORrOVCSstYmdRYoaop7oqLYN5R734DTezF5S8HF6ryxu5IkIrSapT1Xxt++vWfpCXJ JEBRJl89rjc+UZVMzBOAzB2JCe7ZXqSPOwoc7UP6e25qVWqRLIhHZNRofLgncISfQpNQvW2nar8U piJfvtlJQqbwF5Ixj89+bBoxkaLl+Zdbe5aHSkgTvV5/l9Pbb6TjM313YbDCF77oGe6D/+TsYerx EifAo6t2AnPhq9uz4Z/O7Hd9e9K3Q0wnGfMIKPL3Hefr5esrhokvhsHCJiL2Hg2XjPZynOQphuu5 zYcvJRfHABa6BSyL5gLIwQIm7sqAwr7tPy8u/TS49/1RrxbX7iyP4hV78XpH22TMp0j8YCyqv/nQ /9Jb+49DQ7ksXXzwCrirOCkfrkSqq+d0JEpCbl2gz1clPtYfEvZ3VVZ/2uk76xfRcNZ2c9RjPjfS 8rYmcPuh054kp/Le+utr9M5hPJhyAkIa+dyJvuRLelqoXoT9h1MGnuzI2ceblvuxIBp4+wZMpl7t A17O3Mx+aPYDEjDjhWMvaSUiYmhhtiNBfyZeUwX9lunnDIvY+TIu8LR+wDIy6tjP8OY71RckRy15 WVarSv7g+Q/hfzxRVjIjYOIVMP3HjIfvmW3bHavfsLRH2nb8wGl0LidKul0voFWoP2H5Q981rgBO fshH/ELtQli/u/7P5YofSGDECQx3zNTfceBdGC6Cu0hkwc5P/OuVU0vgnpK5uWj2O2uFfgqrq8v8 OA3ETzR8u2tb+2te+hPHNsPhh+UfxC6kXbpU9AgxtFepT0KTU5/fX/nTnEXmmCh7RvbX6eN0yjbQ L39qeggRhexNvweXOGwdl/60l96PC979Ysdrm/KVhxIzS6be7jqz+4m1pKaAfFurMf003Lf31BeH Mtv8n/LeHv7j1aRWpSydqmlOb2xU8k19AFNvSiZMRrqeAhpV1J4/PsnQQ4yX86qUBcGKMyt2bbo1 aTbMdxZBbEY3ycS58EBLdT5jt2l+21dpeb2kKLlvTfBAJpyU9cNQWbbvo8ZSOP6wXNEqJvOefGVV WMDkGbHUzpJ4cXfGdN2nG+qBg3T59AkmTaWyOK8ApLV7Xym6IvYZ5EfIFj5HlMVfT/AdfVUNw2z8 6A/N92T7RU7VofTDV2aFb9kyd4pFviCj8NGelmzIFWY7ycPsAxur7XTHdLHmYPH11gquFjIKH4+d vmLrgijfySuyRCRNm7y16G5Ez8FsEJy5IYp7Jgi7Fz/dvLiG+lHWI7d3mse9hPXw1EZaHixx2Hwf lSaAV2kr5NGq+E55chvMzYqdBhEdo17MTyed/GfRuPb3PjpwRX/DyjkwcPkrcbFBEx+HHNOOPeer 2dTyeSLlrE38oEn+gt0o4IBRszk/VNcv3lKcv2L83RPVyXm90uqdF8L7XbYjZ3skjYJ+y+t3bi8D Ftjv9THzFRry9Lx+wFIap36mv1WwvmipJIteDZdV1KugshTxCcz/EjnVTP/p7zj80X6YQ1BP28sh RdEVQuZse3Z9iJdwvzG/y9K/VSU9Y/qIetH5/aXSN+JChJuke/UCrZfRn7D8Qcrww2mMdsHS767/ c1DxAwmMOIHhns/Ur6nq5MOM7K+0uutXaVcPm6r+rIYf9OGPLZ8G3dVsLj3v4jkSFDLe704ZjYFg 4k6ZYaIsfSxRd6YsOxZ/8E5YUoAUHtXX95gHmUAmYQwETCppQPqZ5A/gCRRr03SaH+/nfamWhL1Q TX+iRbKv1N8LXnVrQ1ECUSV/Fr+4ZG1mW0VSZHK4mIBM+7rChLHSvMbqUG4ykHmgikieWZxDr72Q kv0tlxu1R+/N0EP4Xwt3Zi5+dyoNmIg0Z5k8gLdSHLkzXA4PHDNracCUEK5axgyY4IK+5sa07E4e i1LZqKy41QOp42dtb5Lnyog6s2rthgt5RJSk2nQqdpy3vqc5s432nBBkZtcrlRc+FSTPCdAPCx9V 5oWU5JrktBaIVHiafc1fpin5mTSkIrtRefIfGirfZuapgoBJJEsKz29KzZhiHR+y6h3YMX11KTmz Xsm7gqolM6VWDeN2UIKdv6pOFZGC+pS0NrU0OPfaujjrRZNmxHP78p8EWKuWpYcKjrS81bCBHfHM hfT3SuSXUU89MycVdqT/Mgduk6x6AaqC/gPjo2VQTTacM680gpeHzE2vXghqK1JOJWYbpXy+f2/v 5HecP81+KCJ5FxLln9GAKX3h/kjw51BWO2LZw/3K3clvmX7ubAqXws5X4AIP7AesVjr2M4z64uUX xe6kVSVSvARP9l1vDP8h/ZrT4A/1SvofA6mAHWX9aQ0/fizUb1jaL7nQ+vfPr9F5BdBPnrl5m+4I bW7VCyhg9Scsf2D5IatdsPS76/9CZcU0JDD8BEbdu3dv+LUOn0Z4hxsZLZGIvC0q4fe0TW8fnJ1m zLqWuj1Y5OvWayEtSmy/TfCTbBPxFvtJHFSZjDrt12fXvRNfIVI0paZP52dAQ2I/CRBbb+RWVc56 IEXv4+fTZ+wzmUxiCZ3WbruBfn0/EYsl1rLZnh3yvjnfAImzSUPW8c8UhB9y3+4j4pBx5nhywJZ+ g4G4U78jLT9gmWWvX6c1+gRw09HoywbtqphRL0z/seh0+Ab5u0QiGbqTmPN1uMSpHVmyEbDHtd+a 9Tu3F4tGu29mvnZSgx846RnpfsB9/fB2Bp3uau3v51Vly2Nqi+OiBi+VK/9hXj0s/YYTT2Z2g51g +YOwH8K4Fd/fDrW/ctv/B7MXzyOB70bA02Mmx9IZ6yKV0fxAFpxSrLudwZyC6nipu8d1xZHRF6xZ Zd3+751Od3V3VaI8EkACw0FgpPsB9/Xrmvb5F9JH9vzm8mm7RQi/kQASeNAIfLcxju+/tKKwvLii GyYRDDwZTWQOTNkesS3sZ/uLxneKvGEWEvxo+IkRzGnEioCKkcDDSWCk+wH39YuDn1ItLTRCdwEP x0jgkkcftK714XQULBUSGGYCD9o40zAXH9UhASSABJAAEkACSGBIBIZ7DviQMkUhJIAEkAASQAJI AAk8YAQwZnrAKgzNdZuA0QDrpv2Ath9aeR/WqsV6fFhrFsv1IBN4UB+6w+8+fPwCHH7pdn8Vob1R eaT6ZIOeBPpHbXp6zRTLK4IEtRl0HfXNfzv3TfD6JYuGMsPpu9vZ/MV7B+uviLl39jj88k7QwuFN /O7237c9HQ2HYYFnsY/+kZB/274g4j71GC9uVEoLgov0yWts6TmXi8vuEvEb5HVW92nG93YZo7zf W/4jl9Hw+MPI2Xe/moX7n5GvR+F877cUeB0S+IEQeDBjJl2l/A+LSXRt+coh/KDXZU2aNKWwqpdV JPJJ/ZRg23ur9Qzd6ajdFVoCLxKHTTb3Z+Ux8AJD19sw2Gn4sjZR2QbvS5y4LS6WaZlrM+777DDY f995k380HVFyC/ORpokbF0Tc548W+bdkfauBNx4N0BMql8acnUz+izXjB63Z+y/WCF8pWN4RzvP7 UT9Ef2g+u2vGmRMykfnVt/BCsQpjrDp1b4TYcPTw87tv9ljXCYic/yGsSwNrFc+2yPv7hIZPW7vt qVUhLv9xGsbyMvufEa5HZr7DWDZUhQQeRgIjGDPpdF0m74AAsTe8kAPeFmOlp9PrYBmIQVcLscrD Kz203VrxuPHWe56puxlekCh3uUSAzeXmXeF877TCaXmMupi9Ip5VVeBjixXh4tr6TBXhlhK3nmDs uLZT2B5HVb6rXrqduy8wmfiz7uMGvVZPxPxbghyvZh+b9F1ak2S8xAqVOOtxbT9bNz3jrN+5HnkN zvny6VEri+8tq1u9J1o1hrHSKS/n+lMcpUppN/nZvRRZsFwRK/NzvgpM6Q31g1fIdOt8xjm+T0s4 n36Dlnu/V8C4gCG1JXglzx1xgMRb191FAL/1XaCu9MArrPQSAXuE0oXKa7HcsR3RdPpWIdNQjbco gm/n+mXV4/31A876h+gP32ir6Vradm/QDeMW0+7TtKpgaW3rptF+A/t37OVVtQWwLnLfS6uGUJtC /C3ane0X5sPqf1zVoyWPoX0L9zOsfIemE6WQwA+WwBB6BvfZGDrL0wuWZdOV1YlsLKnolfHrl2lb jv/mA3ke121JAxR5G16JCfI1/583IeOvLy3Jy113UFsRO5+uS9pau3vVJ0eDRNKZPgV5dBmBpOqU P8aM89Z11h2rhOVLSMu1k8drW4wG0RNRy80vnKQZCmyC+UK3X3P6LRW3Im9P+5/3FBVPinhp/SxX b+/1DYnLWLv8vX2ZKmrPIJsLOxn2sBRyC7NpixWH/17d2hgaunrnqq0R42jF2XKGhflqN6VHcenC ivobdmWvO2EksT/b+wz5y7IqulpJznO3ts8ZL6iHZT+rvghDv/xurmA9urBfe6P09ydyT2hJbKhE JVwYc6q26b3nCvcSeB/3Y7s/Wb/Ku795d/azFSRIYwzNevGdpeSTp3MzyNggMv4/VJvW82E7q1yE eHOBcIF0TwHVLkqq/hX1N3b+prrTmYmnzKvrkLEK9daMCFZg21255e1tjWPCiJYurCEPlqnoi91T 1Tth/ENYT03plqTz1WEBsRJtdgFtMvKiTflrwgJY6SBh6DzuXF5WOwL5hpo960rT6CvIxibISXuL UbPhqeM7o6dAgsDGqF+W/4AGW78atB9g+Q/oH7o/QKZR8flZX01NIzntW9c01DePIafmlRzliiP5 92234r4+nXhoLbyltvbFlyb7T6DyT3HyvdKiF49PvnJgXpWStMmLO/RrYFVuoY3J320+zP5HsB4N HcefficD1l+aGZGxRK/Kug71tuLD/3x9FntIjNHPMPMVKi6mIQEkYEdgBOaAd5c/nUsDJnlYVk54 UgWNnOj6ZbqWw4GHaMCUNDNLMUmm1mbO2/98jQ5WnxXT/wu7NXDTGm2sgH8EW3Tcv4VktBrSewvy SGr6JFifLS+dW7Tj2nlFIvfIRt2ZJi+Rr/0s/lg7DFwxN1a+sCpA8+UUWH0FrqxoU6bVZ568BjYM unHLfgwqRQjLTrY9rpWqlI2N/iJNQUuKNCexDqzgORsT8uPKVEuzZNrM6JxXGmz+jXZSJ544hgDS 7Kply6rKE7hlYc5pNCw9LPvZ9cXQz6hHVr6GjqPwtBT+1w8LkGTzK4oMrJfjWCZvLwiXwEnUoX6i pqbKmutfj6aHFWriN8Ybwh3RzIAwTW9FBYylWC5llctyHtY2TleEyWABCt7fBtId9/QNTdVBwelF z1WropNIb2bG6TpHEeuxl+gOOLNWRSYl0aUGO0nSJDksw3OyFaJvYT1+4iCoLFVndsGYVMVMWPBH tfbQ0vJuEyudy0qgvLCys2A76mrYM5sGTNL06JwkY4EKoBnVxNUqwIz6Zfmhm/0ArGss6J9u+QOF 4BU4AVat7T13sOTVZSWLT5sWFC3NmswFFr6S8VNCfxQKMmMmzAwOGc+/2V/EyZOwacFTYpa9XjYT 6odcvc3sUtj8he1n+bnL/keoHr1EoeDbRnXe1bpLmgJ1r5qMGedizWZ2P3N//R5FixsSQAIE1k4Z 3u3yZwnkd0RaWMarvd2YL3sj/fLde7V/kUN6alUTn15WKIPD9PPt9+7p83MIeSO35969vuv5kCj/ Sy0nw6X/Tl599969u9WygfR77RezQEz28Rm9Sd9zR+/afna+9Lqeq7mgKqfxtmslNmd7qLVg1R2b NMauoJ2u7RHSxOeYUEtz7DvJcVNcvMVzJq8nKD7Oyvo4HUoBXEpHCQAAIABJREFUf1mXXRbEpE6g YgnVwBq436XoXOgRtJ9dX/fuCek3yzvVIytfM59Tl6mF7UVSMJjzDWqx0NZ0Kon8TlrUWEaL9nqO +nIOcMi9avUKs3fZcmGUy1Kz1N9q5Tb+JpQtpOnVn+emvi2XvSGXvU7hW/xWWJwrr1xt0heC/+QU 3movhEs4x2Pp4f0/9Rqn78wR2l5Sq+GIlc7n61xeXt6xHalP0vaoOH+LXtZzBtoXycm3UuN1OX4K 1S+rHvl0d/oBYf9x1x+gMFwLpTViIWxTjru11E9ycm38wVLvXIvmzU4C9zM1Zb0tT3g7wfInTygs 4tsNp9+5XoTtZ/HhbWL3P871CFf0qLjmTyvuc94vbIpmv+u6n2Hna68Fj5AAErAn4E2Ge+vjRwV8 zP8CBcx44dhLWomI8KuQiH3NTy/M5+mPwPvowuuE++A/7SYqSfzonA8/OlRlSZeMeQSO/H3H+Xr5 gj6d3jDo7CihfEEHjHKNhs/RXqxnKlTGfuMlJX7sIXGrvAs7WfZYr7XZ4Uk+PpHm7B3gR8/c/rbH zHnM47Mfm0ZMpGh5/uXWnuWuX4zOz54JWBbNPabyFdGnDy70MOxn15eQfmou3RzrkZWvzzVq3GNB wfDpGzCZztj1cTX6ETrtSXIq762/vgbPuojxYMoJcDT53InWByu8h4+2rWBGuXjOZjvBCJ3F30Cx 82Zo+ZO0JBkeiZbJV4/rjU9UJVv901nYksIrh/EvUR+8LJpzPLYe8/CaCdqIl7maAikJVjqfiUB5 uRNO/LmRt9vfwNjqeIOuE76gIcLwpRUcr87uU6h+WfXYd4271I1+gBaTbvb+6ePtnj+Au3BKCvu2 /7y49NPg3vdHvVrMzw2g6V58Ldv6g6XeoUX3Nx/63wKQ+nFoKOm/dlOrUotk1ANhM2o0PvwoLpu/ kP0sPrxWdv8jWI8+Y7mOEK5towPzjKeovGruk9XPsPO1uRh3kQAScCLAt0yn5O+QMPuJtaSmQF2/ eEtx/orxd09U0yXWq3demDYjltSqlCXx4u6M6bpPN9TDPU66fDpMKeCedvWmZMIkpespkLPq/P7K n/5x+s0/7YUHF6Rg/6nEdeQv9BHa+T3Hf/zWqskSycS59AHH+YzdpvltX6Xl9RIXqztNZuZrqCzb 91FjKSj+sFzRKibznnxlVVgAHDI208Wag8XXWys4qzIKH4+dvmLrgigXBAXtXMK0Rzjb5to8jkNm wqFH/mPCPzZcoLGBbOqU2VMpZ/Jtrcb003Df3lNfHMps83/Ke7uwFpi9palUFufRG4J27ytFV8Q+ 5h/V8/UlqEfQ/jU0mIFnH4719ST5u6D+jkvC9fg05yfO+U6c+DioTzv2nK9mU8vnibS02sQPmuQv zBCuGt9HpfDgqkBbIY9WxXfKk9tgdk7sNAiR+jsOf7T/EiH1tL4OKYquEDJn27PrQ7yIYLnmd5nt fLcq6RnTRxTU+f2l0jfi7KaPQ6p56+unUb5U9AgxtFepT0KkpqZ+m7MoSCjqMDbwN+ODZfKJcG/u LDiqDofL3yr/U+xClh4+o+wZ2V+nj9Mp24CE/KnpIRDLcSec0hnlJZeF+csifwntMfvU7PIL8KCc YoZgw4Uzu+s/Ujf7AZb+IDf9weJvR5TFX0/wHX1VXc7PDYDpVdDeT7Zf5JrAofTDV2aFb9kyd4pF viCj8NGelmwKQqSQh0mIV8Te9HscasEPR/4s+9nti9H/MOpxQnflK+8tppNEZ+amNyYrq6KrGxV5 a9NjgoQrbfj6PcHiYyIS+IESGJG1U7qajv66aC03cRWwStMX7s9ctgjuJM1fHNisSua6ZzrHVvX8 /+VjlI4v9oWqaLQEMxy5f79J7qae+Ve3Sqto/yadlLWBFKa10YGq9JXXXqdzVA2lRc/H19M4CraE cNW+tauE76icACNf3Xu5/omdnAT3kRp3bW8MKGdthqMHxWvbbM4G5Pdsf4H+F8zchO1k2COoxVR6 +Kn4RmAmlRI1N1Yny5XnQ18P0vacSVLkyTdWx7Hs0bW8538o0SaPpMvpB/gJpGw9wvYL1td6ckxQ /8Wyjax6ZORrqil7BRaHp6aKpDDXDb6Tll4+sGSWjfG2u7oDb/on95LCzfqlN9JDS7Ol4WUX1sYS 48UtSmmerSBJUqcfiAAfE/KfNoudsrCsuD4Hf7PTYj7QX9z1llTJ/dBBGpw6z1iep1WD326B263z 1l0em7OM1mKwYo3P0cw2dUJYkrolT00Sav9z59F8QT3kvX3+iVqSECwv6FRJA9L3r8tcRF+EoRNO Z5SXVDL56zpr8ss++NIUGBWoT65VkoDcnu1bhKyn5bkP/7Gv30H6AbZ+9/zB6m82lZBQu/P9KLGZ mzVdHlNbHBd1sXSjFP734DeRLGnGpp0rX5huOyxpvcC8I8yfbT+rnTL6H0Y9Tm03t9/U5dULmpPW ttB2kb+p5wVBf+NMZfQzjHwdi4nHSAAJCBAYkZiJy8cErxgwEW94y4D9/0Hm9ACbtw9QeaNO208C xKweW8B0k1Gn7ydisYN+AUkuiZEvS3z40hl2um8P/Zm6Sez4Jk+zHrGf5Lu94ZOpR9h+9+uLQZSR L+i/S5ych6EDyBh9+Lct0JdVSob0mgDhcjFyYCVDdmS0RAJLRn+3zUkPvO+g6e2Ds9OMWddStweL fC2Vy0q/n+xNuo5WXZ+/xE/T/NE6VXJQZHX56pj7UUSvYdSjJd2pKs3yjv0AK3u3/IGlZBjS75s/ i88w2ORShZucXerCk0gACYxczIRskQASuF8CxrpIZTQ3rEg1KNbdzpjFDaSy0u8rn5qiUfPqB67M 33T7BVfPpgckf7h7w8r/h4sRS44EHlgC3/X/4we24Gg4EvBgAqKwvLiiGyYRDGAZTWSOdWo/K/2+ ihL588sn/+XSbYOR+E6M+dH86eOEZmLdl+aH9qJh5f/QUsKCIYGHlwCOMz28dYslQwJIAAkgASSA BIaPwAi803L4jENNSAAJIAEkgASQABLwEAIYMw1SEV0t5ZU3ugYRwtNIAAkgASSABJDAw05gpJ7N GXQd9c1/O/dN8Poli2x/C6e9Uan68nwPCZHNWxkxhPkTLD2senFXfhB7+hs2vja7YGxuz8v8b7AN zQ1/O99+XUPGzp+7MsL+TTwmTc2RL27MmvOLqGDbErMsxXQkgASQABJAAkjgQSIwInPAO2p3hZYo OQyyuT8rj7G87ASWC51akmnGUyMtfLFq/WRX4QVLDwuwu/KD2tNafaAAfrW07FnOSt3hXP8N1vc5 VZGizbYLeeoKCufB23SkuuoL9/+DbVbJMB0JIAEkgASQABL4JxMYkWdzgY8tVoQr5LRo3FLxfBn7 m1/nAibFSvWZaHh1s3rDx8eYK2Fylwjr4bUJfbonP7g9rQc+gzcrKl6aO57mZmw8AgGTSHH51+1F YVJIeKtu4Ifa2oZ8CJhgC/Pll2Kg+7ghASSABJAAEkACDw2BEYmZfEPiMtamr7Z/M7fheiV9KfPY nOToiEXx/5UE+9riRm7dFBZNQT0sYUh3S35Qe7q+OARjZalxm2C5CrqJwl+OURQ9v22WJGSJdA2f Zvns2P9hijQ8PyeY9HDLeFnS8RsJIAEkgASQABJ4SAiMSMzEsXGMhvq49XdlP1pIB228Qp+0j6jY OB31sCX5M0OVH8yervyT8BgxdctPrKup+C6Ky1hDX/rXml9GnzDKpk7ms2w++/tMIsuXP/eocWAh 4cHsxPNIAAkgASSABJDAg0Rg5GImMwXzIuAWJv6WHf7b4az9SbujoUu6pZllj7bhz2lGkrBwyyx+ rXKrLcaG3W9OTeslsvCy9DncM7v+hj3wCC9gtZ+2sflbomkvfu9sjcEqjztIAAkgASSABJDAQ0Fg 5GImfuK3xI8uiUo3H+/R8Km6eo6bw3TrAp39I/GxRiT9XZVnDx+trXOa4eSoh+qC7TvLu7RHd+QT WDM4Ycd8+3Vhu2u2KGdn9hJFnPrD2Cmt3VxoZLxD54VrU2bnRmcaibotM7H2i4EIj2knVwr8QAJI AAkgASSABB4QAiPxuznTxZqDxddbK2hUVJBR+Hjs9BVbF0T5Tl6RJSJp2uStRXcjeg7SZetnboiy RFQXP928uEYFaVmP3N45g39uJ6yHt/i7y7uwx3DjWLKWyKO3RfEBG1+XupqNOfPgZ3R0u/nn5aVK Esn9RE4cdfS3fbdaPvuk9UpZVUpBQHrh4iXW64Ts5FXgJxJAAkgACSABJPAgERiJcSbTV5eSM+uV FRwHVUtmSq2am2Q0fuevqlNFpKA+Ja1NLQ3OvbYuzopq0ox4bl/+kwDr2wdYeqjgcMiz7DGUnEiE 2UovL4mxmgc7hu7L5oCJkMwLSlg/VWr5iZy3l7emKTcRAiaQ0yo3lJ22TqoSstNWK+4jASSABJAA EkACDwaBkXqnJbv0hq7u231EHDLOaRJ4v8FAfH2tT+vYKsxnhkdewJ6LZ3cXm1ZkLIka1IQhCbhr 55CUohASQAJIAAkgASTwvRL4/mOm77V4mBkSQAJIAAkgASSABIaFwEg8mxsWw1AJEkACSAAJIAEk gAQ8iADGTB5UGWgKEkACSAAJIAEk4LEEMGby2KpBw5AAEkACSAAJIAEPIoAxkwdVBpqCBJAAEkAC SAAJeCwBjJk8tmrQMCSABJAAEkACSMCDCGDM5EGVgaYgASSABJAAEkACHksAYyaPrRo0DAkgASSA BJAAEvAgAhgzeVBloClIAAkgASSABJCAxxLAmMljqwYNQwJIAAkgASSABDyIAMZMHlQZaAoSQAJI AAkgASTgsQQwZvLYqkHDkAASQAJIAAkgAQ8igDGTB1UGmoIEkAASQAJIAAl4LAGMmTy2atAwJIAE kAASQAJIwIMIYMzkQZWBpiABJIAEkAASQAIeSwBjJo+tGjQMCSABJIAEkAAS8CACGDN5UGWgKUgA CSABJIAEkIDHEsCYyWOrBg1DAkgACSABJIAEPIgAxkweVBloChJAAkgACSABJOCxBDBm8tiqQcOQ ABJAAk4EjAZDv1MiJiABJPC9EPD+XnLBTBwJ6HRaH78AXy/HdBfH2huVR6pPNuhJoH/UpqfXTBG5 kPW4UwZdR33z3859E7x+ySKJjXVQKNWX53tIiGzeyohxvjZnhHdZeoSkTR0t6ht3+wjxIQQ+ySMT I2e5ysJdeaE8hzVNd6M0u/Ic8dETSfwrcYsc6HQ0HN5f1yz20T8S8m/bF0QMa86o7H4IuK6v+9Ho fI3x4kaltCC4SJ+8xtYfnPsTzj0uEb+oHavXjHfW8+CnoP8/+HX4QJZgBGKm/tY9f1xV2BcURDQa Y2xB6t4IMRtNf/Pu7GePGsm8J/IOxMUQoj18KDGrXRUUWqTatMb25spWMciZ5rO7Zpw5IRMF8XL+ Y+Ylr0iPmzwsugfJmnlaVyn/w2ISXVu+MoopY3/CpCkNfDfemhb5pH5KsG2faT3j9o4DH0I0FcZY Na01w9HDz+++2WMGZ9REzv9w75JZDWd3zbbw9PcJDZ+2dttTq0JcBnAdtbtCS5ScZbK5PyuPsfhD a+3uqSWZZotrpIUvVq13WS8sPYwy649+EJ1itDkZXn1vLfgYa3NXnqVn2NLbrxZmNhZQdWMnbnOK mf7RdETZqKJnmyZuXBARQPceuu2B6h9c19fw1E1/Xzso+lYD/wQMtH+h/kRjdg+Z/Bdrxlta3PDY 4BlafhD+7xmo0QpbAiMQMxF9s1atNmei3l+37cCC6bZZ2u33f1PRS4XVNe/u+HnMrO7KDS3cbaC9 w8TL9Ru0Op2JeAeMC3Cy1dDVrZeMCxjoO+xUmw/uaKuJUV1hvXf2Vqje1Vz+7YFZljEeg16rJ+IA sb2afl2XziSUqVAeXJoLPRJJgLexSy8aL+EyNXU3VxAi94bxjyFvd1pBVB6jLo5zHFHQ6XUwlCJx sN+i2KTv0pok4yX2pbOche9vHPjQU2F36GefplWltnKDYEr7DaQ68FTVFig7VX0vrXKqHaqC3wIf W6wIF9fWZ6qI/0CZ+5tf5wImxUr10pt7FtcWbPj42DPbX3ARzArrseTi/O0/BtJSVc88C/FE391v x00Kd5axTXFX3vbaoe+7ri9bPbOWvN8XmbQmZ7HKZ7Qz3qiVxfeW1a3eE60aI3DWVg+/r9N1mbwD AsTeOp1OIrFgdtW+nHUQwrULB3/m5YT9X0gHTRtivh7bP9AyOPY/ruuLXvHdN3GUKqXd5BdiqT+q UbA/iViZn/NVYEpvqB8x6bp1PoP1k2bThlgvTgVx7mdY/iDsh4S4bhfO+t31fyeTMQEJ3A+BEZjP 5DUrJ5mLezh78qo/07owTBSVH5fKC56+rmttOMHtS1UvJgUQU93pXZGviQNzJkzICfR5c/dFPT1Z U7olUhm5OnfHRqUY0sWvrj7a4iqHiPh8BR0Fkao299zeVMjp7/yGCwUMneU73hwl3hMYuEc8at/u um5znNZQuyfyNX+a6b4tW3JjIbs9ta0wvjJKGRl78KiBdO2jiaN2nG7gtBGmnhqzHvFro3z2TNha 1Qzyus66gspi2Gm5dvJ47fGjZ0ub9eZ8eW1On6aa0/syPzkJ6T3tf95TtPtwQwcvo205vkU5yn+P v/8eceS+3TUaA03vb9j1ZiTYvKOsvLxsB+Q74Q/ifZe6+EucP6Pi87PGwkhGTvvO9rKVZ6pXKsA0 Tkzy79tuXdtUJIMDkaI2uf2zX0TDbtRTnDyRFr14rXphOpVskxd3cFnTA4HNNyQuY236aohcbDbD 9co8OBybkxwdsSj+v5JgX1vcyFWxjZTdrqAeOwmBg8Cw8f8y/pGQJ+bGRQXb3mgERLkkd+Xt9Gib 3ot9NTL2zcjYw8dppcIwCey/Cd6ysbTTIFhfLvwKFHj7jXE2WnujdFfu6kjl6h1Fewdamp0hdge8 f/r/YULgHp/YN0f5/0FeRzkLty8X9jQI+TMoYvm/nREDB8L5Dpy33fO8/sF1/+NcX5Ul0F/Fxioj d9fUlcP+m/w+7QqcN9f+Y+g8Dt4lP5jw3AeH4f8kfmP3J97cPygF0j0+/tBPKrfUWPo3y6UO3+7U C1zK7mdY/sDwQyLYLlzod9f/HcqJh0jguxAYgZiJEL32GtiUs+5y4SRCet+q7HQVEwRPiOQLcPLz Y6oGehuF+GYSHTzSNzRVBwWnFz1XrYpOIr2ZGafr4JyfOEhtVKs6swvGpCpmJhCiWntoabmL7sAr cDIdbyDXbnxRc/US3SNhj0IU1V3+dO6ybGNCflyZammWTJsZnfNKg5FoG/bNLklTE2lqpCJBm5fX WQHZkdE+Ym8xHa/q1sCNbLQREkmLjhuOYeghxrrflIKeBNWGy2eWZ9HIw0Tlr51XJHKPVNSdafIS +drP4o+1WztAapzTpm++nKJsozfHijZlWn3myWtgA9G1HA48JM8zkqSZWYpJMrU2c97+52uoJvHE MQRszq5atqyqPCGY5nxOQy8R3rwCJ8DgT++5gyWvLitZfNq0oGhp1mQaZRJfyfgpoT8Khb0xE2YG h4wXc4MdIk6ehE0LnhKz7PWymVT/1duuiwAijtFQH7kLqbIfLaSTLbxCn7SPqCCNsTnqYYjRZDqX yZgpzZ06+90Zga/FQtTiQvg+5J21eXtB+KmGodNQP1FTU2XN9a9H08MKNfEbdfOoYH0x/cpZO5di 6DgKT2lhbC8sQJLdUkDT6GQt9sb7Zy+Rh2XlhCdV9IKkPyct3L6Y9jD8mdWO2AYJ58uS97T+wd3+ RyT2UxsrKozq28RvDGlU98I+eYQxMujCf8Z4Q+sTzQwI04AGGAO38Bq8PwlIV4TJiDEvvcoy+m+5 1v7bvXph9jOs/pDhh+72Y277v30h8QgJfEcCIxEzmSrPHgSzyhs+OXcLvtXvnr/swkr+3ikPlqvq E1PapFkxMHTR/i29n/pEzF0XSerf+n/K7ItcLMX1ExFLMvPp/TX12va9GevfPxMO92z1X75qh//p 9+Su3pi70fK3euPhozZ3cnVK6eL4KjqrpmizcroXaajNhwdksN24+XmDtpvbzz5+VdvSVA6JCvnJ vasz3k8poxFBQP72OSFTYl7h8oU7VMBL/5pPr+Q2lh7i5RdMBQrkqt8UNNyMDMtKmjMTjiPiituf y4IdWeQZ/W/1PTv1O2e4jhck65Pv9WzKhUtyNty+99/33ucezzV+eQRSUpc3HVi/M+Olci52Uama O4jXlO2bCyCWJCSh+tcX3k8u16fr318yiya42goy6ylk36An1iyJC7E8uLTekK19tFVHH/fjnZBg GlM1u4jJrBdwOw73d/7ubRVxOGtNd94ZgqR47tysnKVn2n9968xCGMaqSCv7m7MemxR35W0utexK wta8sxTyksrniP6ncPG8D2riV+TAydznc8a3HYUd5/pi+ZVFpfnbyr++jsZJqUsvFye/r99cJHWQ czrk/VM6s6x4087taw/c3pAvGxvuR+tXuH0x7WH4M9P/nSyxJAjnaznr+O1p/QOz/7E33FpfMcv2 1kbL4eSsCVMfn0S7E8Vzp7bPnWIvbj5y4T+Lgrx9g+MObP9gh31vMVh/Iq9Ofj3j+TfAAoe25mSA e/XC6mdY/sDyQ3f7MXf936mYmIAEvhMBbuTgO2lwutiofrdNTUSylgspLWNlUmOFqqa4Ky6C+duN u9/APebF5S8HF6ryxu5IkIrSapT1Xxt++vWfpCXJJEBRJl89rjc+UZVMzBOAzLdLE9yzvUgfdxQ4 2of099zUqtQiWRBvkVGj8TFyu/wUmoTqbTtV+6UQNF2+2UlCpvAXkjGPz35sGjGRouX5l1t7lodK SBO9SE/HKGD82UjHZ/ruwuCGL3zRJO6D/+TsYerxEifAo6t2AnPhq9uz4Z/L7Hd9e9K3SwiRjHkE FPn7jvP18vUVw4N8A2s2Es2Q28Teo+F7tJfjZE4xXM9tPnwpuTgGsNAtYFk0ZAaWi5iTmehp+rMy EC7s2/7z4tJPg3vfH/Vqce3O8ihesRevd7RNxnyKxA/GovqbD/0vvYX/ODSUKnG18Qq4qzgxH65E qqvndCRKQm5d0EKqxMcaq/V3VVZ/2uk76xfRcNZ2c9RjPicg7x2zbGcMdzok+l+lVXnq1ktaEmu+ 47grTwwNl/527S6ZOn2+yx/fkdBpT5JTeW/99TUahRsPppyAf+7lcyf6ki+pKUL1JexXnOHg4Y78 fbwpj8eCaEDuGzCZersPeD9zM/un2T9IwIwXjr2klYiIoYXZvgT9nHhNFfRnpv8zLGLny7jA0/oH y4ipY//Dm+9UX5ActeRlWa0q+YPnPzSqiCgreY591GNfbqb/mMX4Htu2PbL6E0s7pW3KD5xG53IC pdv1AlqF+hmWP/Rd4wrg5If82JdQuxDW767/c7niBxIYNgLDHTP1dxx4N1EF5hkjC3Z+4l+vnFoC 947MzUWz31kr9JNXXV3mx2kgfqLh213b2l/z0p84thkOPyz/IHYh7bqlokeIob1KfZLOEz+/v/Kn OYvMMVH2jOyv08fplG2gX/7U9BAiCtmbfg8ucdg6Lv1pL70fF7z7xY7XNuUrDyVmlky93XVm9xNr SU0B+bZWY/ppuG/vqS8OZbb5P+W9PfzHq0mtSlk6VdOc3tio5Jv0AKbelEyYjHQ9BTSqqD1/fJKh hxgv51UpC4IVZ1bs2nRr0myY7yyC2Ixukolz4f9N1fmM3ab5bV+l5fWSouS+NcEDmXBS1g9DZdm+ jxpL4fjDckWrmMx78pVVYQGTZ8RSO0vixd0Z03WfbqgHDtLl0yeYNJXK4rwCkNbufaXoithnkB8b W/gcURZ/PcF39FU1DLPx/5HSfE+2X+RUHUo/fGVW+JYtc6dY5AsyCh/tacmGXGG2kzzMPrCx2k53 TBdrDhZfb63gaiGj8PHY6Su2LojynbwiS0TStMlbi+5G9BzMBsGZG6IgDuO2i59uXlxD/SjrkduW cThhPTw1AXld3Y68/3PnsdVLpjx6qTYL6lE2O8Z6s3JXnnT/bfaxZWBP4Wb9rHG8jcKfvo9KE8Db tBXyaFV8pzy5DeZsxU6DSI9RX+anlk5+tWhc+3sfHbiiv2HlHxi4/JW42KCJj0PGacee89Vsavk8 kfLXJn7QJH+BMVo5m/NPdf3iLcX5K8bfPVGdnNcrrd55IbzfZftytkfSKOjPvH7ndiRMB/4BYeYr FNl7Xv9gKZdT/9PfKlhftFSSRa+GyyrqVVBZivgE5n+PnGqm//R3HP5oP8wtqKft6JCi6Aohc7Y9 ux6GhAX7k/ldln6vKukZ00fUi87vL5W+EWc3fZzLkvtwr16gVTP6GZY/SBl+OI3RLlj63fX/gRLi HhIYDgLD/WyuX1PVyYcZ2V9pddev0i4dNlX9WQ0/6MMfWz4NuqvZXHrexXMkKGS8350yGgPBxJ0y w0RZ+lii7kxZdiz+4J2wpAApPJKv7zEPMoFMwhgImFTSgPQzyR/EsG/Zmk7zY/y8L9WSsBeqo+GO RrKv1N8LXnVrQ1ECUSV/Fr+4ZG1mW0VSZHK4mIBM+7rChLHSvMbqUG4yED8QAz3fM4tz6LUXUrK/ hW+IC8EevTdDD+F/FdyZufjdqTRgItKcZXLzPVscuTNcToyqzFoaMCWEq5YxAybIpq+5MS27k8ei VDYqK271QOr4Wdub5Lkyos6sWrvhQh4RJak2nYod563vac5soz0kBJnZ9UrlhU8FyXMC9MPCR5V5 ISW5JjmN/m6Rp9nX/GWakp8xQyqyG5Un/6Gh8m1mnioImESypPD8ptSMKdbxIavegR3TV5eSM+uV vCuoWjJTatV6enb8zl9Vp4pIQX1KWptaGpx7bV2c9aJJM+K5fflPAqxVy9JDBYXk+77urchrTNnw 2QalVi0Ly89/JsalflfyHc2fwbXSmSd/GSJ0a7fqhR2kjsWuAAAgAElEQVTxzIUwqYmQX0Y99cyc VNiR/sscuE2y6ovlVzBuWgbVZ8M/80ojeH/I3PTqhaC2IuVUYrbR/Gju7+2dNEuhzeyfIpJ3IVH+ GQ2Y0hfujwQ/D2W1L2E/Z/kz0/+FjIE0dr4CF3hg/2C10rH/YdQXL78odietKpHipbkhVg3COwz/ If2a0+AP9Upon1D7sKOsP63hx5WF+hNLuyYXWv/++TU63wD6qzM3b9Mdoc2tegEFrH6G5Q8sP2S1 C5Z+d/1fqKyYhgTun8Coe/fu3f/VI38lvKuNjJZIRN6WrOB3s01vH5ydZsy6lro9WOTr1mshLUps v03w02t4l4HYT+KgymTUab8+u+6d+AqRoik1fTo/AxoS+0mA2Hojt6py1gMpeh8/nz5jn8lkEksc 34kA+vX9RCyWWMtm1eXOjjnfAOuvx9252ANk4Qfbt/uIOGScOZ4cMKnfYCDu1K+AvEnbrdX394n9 Ah3fJQHZuCFvOH5ILG+Rntx2Ic48zDlgpsBev05r9OFzpC8btKt6Rn0x/UpAPU0C+bsEXhkwZOcx 5+twiVP7smQnYI9rfzbrd25HFo1238x87aQGP3DSM9L9g/v66dsZdFdrfz+vKlseU1scFzV4qVz5 D/PqYelPnHgysxvsBMsfhP0Qxq34fnio/Zjb/j+YvXgeCQyNgKfHTI6lMNZFKqP5gSw4pVh3O2OW 073W8Zr7PK4rjoy+YM0q6/Z/7xypnO7TQLzseyOge2+f/97HzlxYu+h7yxIzuh8CI90/uK9f17TP v5A+yuc3l0/hLUL4jQSQgKcSeNBiJqKtqSm7YRLBwJPRROZIn5419P+03awDbUdlWUunyBtmIcGP g594es70If9P72ZOKI4EkMDwEBjp/sFt/SZdw1/r6ozQjcDgIAn8+bzY8a4eZA8PBdSCBJDACBF4 4GKmEeKAapEAEkACSAAJIAEk4IrAcM8Bd5UXnkMCSAAJIAEkgASQwINKAGOmB7Xm0O6hEjAaDPzP i4Z6gYfJPej2exjOH5w56D8/uCrHAo8ggQd1ig78vsPHL8Dhl273x0l7o/JI9ckGPQn0j9r09Jop llcECWjr1168XFnbdvOuT9D8uSsjggb72Tm8R+4729n8xXsH66+IuXfzDJ6fgNHfKem723/f2Xc0 HN5f1yz20T8S8m/bF0Tcpx7jxY1KaUFwkT55jS0953Jx2V0ifoO8zuo+zbjvyxj237c+z7lweOoX 3k419PbrOYUfAUuEOTy8/jMCCFElEhicwIMZM+kq5X9YTKJry1cO4Ye7LiGYNKWwepdVJPJJ/ZRg 23ur9QzsmEo/DIxvtKRUycq2fRIb5BLgMNhp+LI2UdkG70WcuC0ulmWZxabh/h4G++/fpH80HVFy C/ORpokbF0Tc548W+bdkfauBNxsN0BMql8acnUz+izXj4RWUHrIJ2u8htn03M4alft1pv+6Z23x2 14wzJ2Qi67slNBXGWHXq3gix4ejh53ff7DGfMGoi53+4d8ksWNt4tkXe3yc0fNrabU+tCnHxD5h7 5gwizeTw8PrPIETwNBIYGQIj+GxOp+vS6umLr+HFG7bG6/Tw3qJBVku1lYdgRdvdZXuBqbsZXpDo 73IpAHsN9Eg43zutcEoeo4Z13OBvFTNg4vXJ5JEnb/+2pwzeSEkqLmntysVL2H66tlPYHtvr6b7v qpdu50K84OPPuo8b9FqtezypXpO+q0tnC5U463FtP9XC3pz1O9cjf7Vzvnx61MrieztrATQZw1jR lJ37wBlxlCql/fZ/brF9oZZguSJW5ufQd1GG+sGrYrq1dmgG1Dntwat0uPVSdd1dOtsngP0GcNqu bi1tAI4bvJJKUL9QupD9Fn2O7YKmw9uAhDO1XMT4dq4vVr3cX7t21i9cv5z98CwV5O14Mswm7Pbr un052+OQwzfaaromNyyIa/5TE2MLtyh3n6ZVRZfa5f+M6nLtN3DtHRt5lbZAWSsPff+4UO075AOH QvVukXK2U7heWBxc+Y8lD/tvYf3u1ou9TjxCAg8NAZfDJPdbSkNneXrBsmy6gjqRjSUVvTJ+/TJt y/HffCDP4178LQ1Q5G14JSbI1/z/2YSMv760JC933UFtRez8y/B/W2vt7lWfHA0SSWf6FOTR5QKS qlP+GDPOW9dZd6yyGI5brp08XttiNIieiFpufuEkzVBgE8wXbuE1p99ScSvy9rT/eU9R8aSIl9bP cvGWXu+49eVxnHp+0SSDyx7RhZ0MewQs55K4hdm0xYrDf69ubQwNXb1z1daIcbTibDnDwny1m9Kj uHRhRf0Nu7LXnTCS2J/tfYb8ZVlVNojlPHdr+5zxgnpY9rPqizD0y+/mCtajC/u1N0p/fyL3BCwO FypRCRfGnKpteu+5wr0EYp3Hdn+yfpV3f/Pu7GcrSJDGGJr14jtLySdP52aQsUFk/H+oNq3nwyZW uQjx9qcrdBVI9xRQ7aKk6l9RfzPn5PDVXbnl7W2NY8KIli6IIQ+WqeiL2lPVO2EcwlR3OjPxlHnV HTJWod6aESEmNaVbks5XhwXESrTZBbQJyIs25a8JC2Clg4Sh87iz/ax2AfINNXvWlabRV4qNTZCT 9hajZsNTx3dGT4EEgY1RXyx/AA22fjJou2b5A+hn1e+A/Zy5CUub3l8yXcBycxKz/Qq3L3Z5BbOI is/P+mpqGslp37qmob55DDk1r4SusgxvMv/3bbfivj6deGgtvO229sWXJvtPgNSopzj5XmnRi8cn XzkwD5YDb5MXd+jXMF4cz6x3tp22/G3aO5ODoP8YOo4//U4GrOM0MyJjiV6VdR38ZcWH//n6LFiC 0KbfttFv41dc+QerF04IP5DAQ0pgBMaZusufzqUBkzwsKyc8qYJGTnT9Ml3L4cBDNGBKmpmlmCRT azPn7X++RkfE3mL6/1y3Bm5ao40VaiNp0XH/zpHRavp/XkEeSU2n64HnpXOLdlw7r0jkHtmoO9Pk JfK1n8Ufa3c13sPKF97+33w5BVZfAdsq2pRp9Zknr4ENg2wwBh776qjFF+Cq1HUuX6fJspNtj+us VcrGRn+RpqAlRZqTWAeLj/CcjQn5cWWqpVkybWZ0zisNXDzKUCSeOIYA0uyqZcuqyhO4ZWHOaTQs PSz72fXF0M+oR1a+ho6j8LRU2akKC5Bk8yuHDKyX41gyby8Il8BJ1KF+oqamyprrX4+mhxVq4jfG G8Id0cyAMA2MB3RxY0Hc1axyDagOSFeEyWChCd7fBtJt97xEd8A5tSoyKYkuHdhJkibBiFj2yVaI 7vUNTdVBwelFz1WropNIb2bG6Tq41E8cBPBVndkFY1IVMxPgorWHlpZ3m1jpXG4C9sNKzYLtoqth z2waMEnTo3OSjAUqgGBUE1er9zLqi+VXbrZrWERG0N+Y9Wus+w21P0G14fKZ5VlAlZj4fsCWu+2+ cPtlty9he2w12u17BU6AGLr33MGSV5eVLD5tWlC0NGsy96zNVzJ+SuiPQkF6zISZwSHj+RUCRJw8 CZsWPCVm2etlM2kJrt5mdk3semfYyaoXV/2YkP94iUKhjRjVeVfrLmkK1L1qMmYc/WeBpd/terGj iAdI4GEjAGunDO92+bME8jsiLSzj1d5uzJe9kX757r3av8ghPbWqiU8vK5TBYfr59nv39Pk5hLyR 23PvXt/1fEiU/6WWk+HSfyevvnvv3t1q2UD6vfaLWSAm+/iM3qTvuaN3bT87X3pdz9VcUJXTeNu1 koGzd5qKPstJzZHCVQpqvKtN0E7X9gip66F8fpdQewdO9p3kuCku3uI5k9cTFB9nZX2cDvbAX9Zl lwUxqROoWEI1sAbudyk6F3oE7WfX1717QvrN8k71yMrXzOfUZWphe5EUDOZ8g1ostDWdSiK/kxY1 ltGivZ6jvpwDHHKvWr3C7F22XBjl4jnz/lYrt/E3oWx5bnK1SV8ItZNTeKu9EPLlHEmv/jw39W25 7A257HVaKfb+nHqNU3fmCPX/1Go44v3cOZ3P1tl+4XahPknbl+L8LXpZzxloLyQn30qB1+X4KVRf rHrh091p18L+wKxf0+Uk6pxQ3fKk/y819U9ZZ/4xiPm0oE7t11X7EiqvI5OBY94fOJOcu4i7tdTf cnJt/MriP7SdmptVErixqSnrbXnC2wmWP3lCYRHf/rh2LVTvQnay6oW315mDpRzO/gNnelRcN0Id 5nPeH9n9wH3ViyV3/EYCDxsBbzLcWx8/KsA/viIkYMYLx17SSkSEX4VE7GuelmM+T6eA9NEF1gn3 wX/aTVSS+NHX5vrRoSpLumTMI3Dk7zvO18sX9MHsKIl4YIIvnHLehPKlUmLuwddoL9ZkISdN4ulr lm1fM9s/+53Eims3MlyuuOnCTpY9TvlBAv0nkJDHJ1IbvQP86MHtb3vMnMc8PvuxacREipbnX27t WR5qO2+HStpt/AuIA5ZFc1K+IgrNhR6G/ez6EtJvMcCxHln5+lyjxj0WFAyfvgGTg+DLx9VoSei0 J8mpvLf++ho8GyPGgyknwNHkcyda/YH38NG2FcwoF8/ZbCcYobP4GyhmbLwwjGeJ+uAlzzAE5CU2 tPxJWpIMjzbK5KvH9cYnqpItfmseLjOBz3uZsQfSkrHS+TwF7OdOOPHknhTf/kYDywEbdJ3wBQ0L hiOtIHh1dp9C9cWql75r3KVutGtaTLrZ+5uPN6N+vaYmLEwn7SSIaKrbsyuMJPtd35707VSavbHa r3D7ErKHrZvzh4DCvu0/Ly79NLj3/VGvFvNzDOglXry32PqVxX9gLKq/+dD/FoDUj0NDSf+1m1qV WiSjngybUaPx4UeD2fUuZCerXnitLA7QY3ACtnZCgs9YrkOFvTY6wE+f3jL1e4nvo164TPEDCTyE BPgWNZwFm/3EWlJToK5fvKU4f8X4uyeq6VLq1TsvTJsRS2pVypJ4cXfGdN2nG+rhHiddPh2mAkDH DmPgKZkwSel6Cuyqzu+v/Okfp9/801540EEK9p9KXEf+Ag/DyPk9x3/81qrJEsnEufSByPmM3ab5 bV+l5fUSF6s4TWbma6gs2/dRYyko/rBc0Som8558ZVVYABwKb8a6jcro9mDFfzwxu/n8XpAJldDQ zcUmaOcSpj3Cmppr8zgOmQmHHvmPCf/YcIHGBrKpU2ZPpZzJt7Ua00/DfXtPfXEos83/Ke/twlrg QYemUlmcRzty7d5Xiq6Ifcw/qufrS1CPoP1raDAjUF9Pkr8L6u+4JFyPT3N+4pzvxImPg/q0Y8/5 aja1fJ5IS6tN/KBJ/sIM4arxfVQKD7oKtBXyaFV8pzy5DWbzxE6DEKm/4/BH+y8RUk+96JCi6Aoh c7Y9uz7EiwiWa36X2c53q5KeMX1EQZ3fXyp9Iy5E6K5tbOBvigfL5BPhHtlZcFQdDle8Vf6n2IU0 +peKHiGG9ir1SYjg1NSfcxaZ75nZM7K/Th+nU7ZByeRPTQ+B2Azk4bmeYzrDfnJZmKcs8pfQvrJP zS6/AA++KTYItl00b3f9Qepmu2bpD2LV77+05VUpC4IVZ1bs2nRr0uySTJhzw8WBtChCm3D7ZbV3 lj1CmmmaxW+PKIu/nuA7+qq6nJ9jANO6oN842X6Ra0qH0g9fmRW+ZcvcKRb5gozCR3tasmkFiBTy MAnxitibfo+Vi3O9s+xkt1NhDiz/n9Bd+cp7i+lk05m56Y3Jyqro6kZF3tr0aEZ7JMbLbtYLu6x4 Bgk8+ARGZO2Urqajvy5ay010BULS9IX7M5ctgv93m784sFmVzHXndI6t6vn/y8coHV/sC1WlUJhw ++H+B8vd1DP/6lZpFe2XpJOyNpDCtDY6UJW+8trrdE6robTo+fh6GkfBlhCu2rd2lfAdlRNg5Kt7 L9c/sZOT4D5S467tjQHlrK1jX25oikVeFlb44ab141my5nRhOxn2COoylR5+Kr4RmEmlRM2N1cly 5fnQR4O0PWeSFHnyjdVxQnd4qlnX8p7/oUSbPJIu///svQ9YU0fWPz79QUKCBg1UsaAvUrSrrAQL u4v9pwKui6017qqrq+irdQW2jwvYfsXiLtm36M+8sO0K/twuso+l1ei2RfslrL642woqdAtvC67R Ii1QoAoWaQgl1MQQHn9n7k1CSGYCERCsMw8PmTtz5sw5nzMz99y5c2fSD8HCTwh0PmT5ifZaj04S +V8+u5FmR0q95qqzO+EQeCyZUAZr3eA3YfHVQ4vm4BRC0B963SepBx3bZlh8LT3wTI4s9OylNTHI dDlRKcsfQJ+gST8UhlUm6HXdKmd0cFZcr0N7G8AFX3SVxuTGYqv4Z64WnFBc18QHJ2ia8mE5TvVv 004UyJTcBxAy/9QFptJ8nQbac2IwgoN+t+hQvL9c1a6WSdMPrlU8g7/TxAcAE9Ip8qNyKp769qqC s+98ZvaN8DUkVSuRNK87ecAHg/Zq3EV7GGivQfo1nT/Fvj+5FZMdCZBagyxXXpzMtXNrisMvtf8S +xddHge2lktbu7XLjq9OOxohttjLli6Pqi6Ki7h8ZqMMnmH4IIxOmLUpbfnmEPvpTVsBS4Rsdxdy DsTf1t8pOFDaz8xWyziQuqTyqcaENU24fxVs6t4cLCHzN9S4aRdHPdk1Q+D7hMCo+EwcQGbYYsCM PCUSh0N0LelSycCbu0mv60NS8cBEl0ibTXpDHxKLHfjTylDqpZFT0o36jk5Tr0DoO0Xi6qWHfWmK nO7LA5+13zKLHXfytPARe0uGt8MnlQ9ZfvftZY+JXZxSL/C/jZwaj105+yggYxJIufezeLNKiXQo tiHrZc92GHEQA3lJJHCUtCXA/gUNfzk8d5cpqzk12V8oshqLlm4t586vWd/Wou/1kXhrG99fq07y C68sXRnlDgN7WopdYCMGt/q1PUv7OMG+wNkg8Bb0mnrNZrN4aEa0ZzkwbpHTcZwZSDR2V3dtd5pd RkoVZ/4ja5eRkpPxYQiMDQKj5zONjT6sVobAeETAVBOujOSmCbF0mWs7M/iPLmnpd6VDVeFDC2r7 SxZs6tzs4l1zPyGL3XMERtTu91x6ViFD4MFFwPYc/OBCwDRnCIw6AsLg/LjCa2YhTDyZzGiebak+ Lf2uBAr/6dWS/7jSaTQh0bSoHzwZMnko0213VRMrNEwERtTuw5SFFWcIMASGjgCbZxo6VoySIcAQ YAgwBBgCDIEHF4FR2NPywQWTac4QYAgwBBgCDAGGwPcWAeYzDWLajqbS8msdgxCxbCcEGG5OkIyL BGaXcWEGJgRDgCFwfyLg8V//9V+jIblR36a5+o/iz7U/mBnkZVeB7lr5ux+rLzRc8374UX/R4Kup aHzsWA6Iust/EPq+uqT/7yc76kNefvJHvBYu5NG11Zz+3+LyL6qbjVNCp04eINaQL2j8B5HTiT+N jxOhJcFd+kHkccTN2Fh3ofTS+fKmBq9Jj/p7D7C7WVv1zseVvRNmPDLRvqXQJB2x9La648p/Fv2r 7h+XuqZG/Qe/6xSVOQ2fQXBw4kfj40TIJ7jCjVhkEHnuB7sQ9WKJDAGGAENgPCAw4O41UgK1Ve8O PKXkuEXP/0lplHWTEjhedCZsVceHKtmxFyrWz3C1uQCND01Od/kPSt9SeUgFXznF/oKXki6PsfTU tthqoMUhHlWvnof3T3I30PgPKqdDRTQ+DmS2S3fpB5VnIG7643k+G6z7WqEKVLjN/uBSverYAtid SKavvHT3H8bbVHEj8nXDe0ru4ELUMG3jU2Eu9vei4TMoDg7S0Pg4kFkvXeNmpbL7HVSe+8Iudgqx KEOAIcAQGF8IjMq7Od9HFmaGZsqxptxR8bzKfY37OIcpc7nmQiRs3azZ8H9P8lsg0yAh86FRu8t/ cPqWQx/CzoqZW+dbtq6kydPx7z9ih0mYqnnpzp0/3DkaF0GT0XU6mf/gcjpyJfNxpOq/do9+cHkG 4maqfw8cJmHm1ZdaC4NlUOsbNf0fxOvqCsBhghAs4o+e6JfKvVifUdfV0dGlI+0cbYYsoxO7iOVF d9KqcSud4OX60YGMz+A4OFZJ5uNIZb12iZuVyO53cHnGwi52ArIoQ4AhwBC43xEYFZ9JFBCXsSZ9 5cAnd+NX5XhT5om5SZFhzyz7XQLEdUX13LkpNBCJfGjE7vIflL7j30dgriw1bhMcb8EHijy69y/g ybO8n++c2dehxyfo3WUg8h9UTufKiHycyWwpbtEPKo8jbsLQl6MyC9dtnyMJWCRbbauUi7QdfDdF FlqQ64+6Sc7OQGLalbnm/O7wvWLf3KlTc30Fr++5zDUqmHQJV4bHvL4x8YAAssSvJlZ1WerQXTuz O29luHLljsL9lr3kaby5dCI+g+LgzJLIx5nMkuIKN0KhQeW553YhCMmSGAIMAYbAfY3AqPhMHCKO 3lAvd/5u9A+expM2HoFPDPSo6CA68qFRust/MPqOghLwhFITf+Twls1JHkNTCTdTkvRuoE/uVJ+9 K4vbXE+f0TTg0x35DyYnjZsjHxqdNX2o9IPJ44yb6Jm4jNV4c8WWgrPYuYyeOYOvtPGjPypQdIF8 1cNwYM7gB+JaJXX8NdQ1VPr5pxeuqlRHJqAeRcb5Go7ES2PSlPWo8lFq+nQ4nzA/vQJvKmlsO+H7 5jJluzpYKslp4l6nWg5LdeQ78NoRn8FwGFi6/8qRT3+OY4yKmyMhdz2YPPfeLkQxWSJDgCHAELiP ERg9n8kCisP9yGcgVg65AzMHXA2R0l3+NHpd3d92mVD804lz+DPGB8iCL/rlgTNfcYIsc3GJOioV zg6Wl/zD+U0QJnEn9PPnStHkHJSlA5+RoqfJQ8XNVLfn9Zm7elB06Nn0edy7zr66bHj1KV3pratv /A5pW4ve+qjqrnAThM1fG45q3/iHMucyd74cN50UFJlcgP1yeWXS/n0bleA08TLX1mA/KXXx1aKk o4ZthbJBERlI4IAnDYeBhQhXDnwIFHySM25UUpxBk2cs7OJSUJbJEGAIMATuQwRGz2fiF35LvLlT YAEZgSf+Kkr95SfcJMzNS3huRiKweSR9HeUfHT9RXeM0RePIxwKyE727/F3S69/7Zwos5t7x5BxL df0/TvL0cQfTCzekLopb8dN1+B7c1WY3mWCsu1J6prq0rmuI/oAjf5dyIuSEg1VSRz6W9GHTu5SH gltXVaJyrqIHZcZp3o0JauGhMN1qB5l0KXPzIhUmpLmu2FL9bztPYqi4GZvelp1KyjFF/l6+57Vl eRj/AVNWEm9oYx7e2Jng0gWe2MV9xM8f/oukM/zgR+A1hLVUjni6xGGE7ELEDQSG4GRHl/KMnF2c 6uXFYf8ZAgwBhsCDgIDrxa93h4D5ctXhoq9ayrBXpMo49lhMyHMvPhUhmvFclhDt0iW9WHg7rPsw PrZ+9oYIq0d1+YNtC6vw2pKsSZ1ps/j3dmQ+vMTO9O7yd0FvvHYySYfkkdsj+BulBQaKPOLQX/oj dfsu5fkfLTF/iF//TAjoL9f1r7knYyHt2DbDnEH2HyDzdyEnsHXGASEyHxpu7tK7kIeMm75qY+4C PLcD4cbflpxRonDuEzlxxInf995s+vCfLV+crUhRSdOPLVx0F7j19t0GxjLhJGRsrdCUAP6aiwfL f5wbcuPt/VwLPHhuy1r0d9y2LmYX//CNH017DKK7Tq4SaTc1fbqlDC50W95pkG+2tDq4dghkPF3g AOVHwC403DjpnPm7kGcE7eJcrwNY7JIhwBBgCHyPERiNeSbz51eSFLVKfDeCiaUmRUq1hpt3mZL2 m8pUIVLVpuy6rpH55zWvjbMhO33WMi4u/5HUtvsAjQ8mJNG7y59Gbzx1egusunl5UZRNPC5Ck0e0 /j816ROR8lxsbIUSTczU/Odq20FfbY0fQlnZ7JJfBtjSBnLtv6Lxp8mJS5JwoPEZKXqaPGTcjF1X LQ4TQopLSvBpZNZP5Dw9PLUNeVvAYQLRdMoNZ8/b5ueGjpskMBrA17SnxJ5cdvhWcIJUhkz5td29 2nZu+RJClc2fftpcipU3qSpvdgbMT698Gl6hlqWc25JjwtNSED5ubecjpP80PGk4YB7Dt4sL3Cj8 afKMpF1IepEwY2kMAYYAQ+D7iMC9P2/O2NHV2YvEAZP5ySQ7UPuMRiQS2d7W2eWQo2R6d/kT6C9/ tKfI/FzGoghyveRU+KAdPnQXTZls8/mAzlh8RCxvkpVsvxSHXwINJxDktLAj40Cva2ToCfLcFW5E Od3GTa/XIS+JBI7AHWIw6XW3kUQiGXIBGl8CDhbSkcGZVi+8niP2F4I8I2cXThhyvXQ5WQ5DgCHA EPi+IHDvfabvC3JD0kP/1gGf/Y9cuLTmmSGRMyILAgw31hQYAgwBhgBDYNwhwHymcWcSJhBDgCHA EGAIMAQYAuMQgdFYzzQO1WQiMQQYAgwBhgBDgCHAEBgWAsxnGhZ8rDBDgCHAEGAIMAQYAg8IAsxn ekAMzdRkCDAEGAIMAYYAQ2BYCDCfaVjwscIMAYYAQ4AhwBBgCDwgCDCf6QExNFOTIcAQYAgwBBgC DIFhIcB8pmHBxwozBBgCDAGGAEOAIfCAIMB8pgfE0ExNhgBDgCHAEGAIMASGhQDzmYYFHyvMEGAI MAQYAgwBhsADggDzmR4QQzM1GQIMAYYAQ4AhwBAYFgLMZxoWfKwwQ4AhwBBgCDAEGAIPCALMZ3pA DM3UZAgwBBgCDAGGAENgWAgwn2lY8LHCDAGGAEOAIcAQYAg8IAgwn+kBMTRTkyHAEGAIMAQYAgyB YSHAfKZhwccKMwQYAgwBhgBDgCHwgCDAfKYHxNBMTYYAQ4AhwBBgCDAEhoUA85mGBR8rzBBgCDAE GAIMAYbAA4IA85keEEMzNRkCDAGGAEOAIcAQGBYCzGcaFnys8DhCwGQ09o0jccadKAyfcWcSJhBD gCFwnyHgOU7k1et1Am+pyGO44jjzaas7frDmCvLak7MAACAASURBVPKO2LFy9ZQhs3fmM+SiQyIc Ef76a2dyyj9BAgOSLNsZ94zIWjMt3Zp/r3/vhTymyxuVMpV/oSFptQ2He63n+KhPd638vcqSOgPy 9YnY9OzqICEn1v2PD9eRG8UCw6SAXyU/FeYa7OH3r8Z/v3W49gux75KdcTH3vkUNX37X+LjIdQtn F3yGnnUvxoehS8MoGQIuERhxn8lcWrgltkEjE64ufnnnpePPZrQgP1QWGFZ5dHkUVRJ9ufxPC1Fk denyCCrNUDJIfLQN7ynr1QhFy3+2eop4KFwQIvEZWsmhUY0Q/9YvjynqVbjKidO22/lMtPShCTfy VPdCnr7eVhD8O20vQiN7h2v8aPesC6ejhX5WXLRlphhN6v4wsfHE8XV7bnRbMkza8Cff3b9oTt1H u+da6X0EgaGPrtm+dEUA77hYWYzer1l7xvfNZTb+4U8Ygvw5PEYNH1tdox352tKREWqYtvGpMKmL +kagfxk/q96ivM73rHvuM42A/C7QGSTLDZwH4TTU7HsxPgxVFkbHEBgEgRF/N2f+6oYKmTSaHsW+ 8//q/KZMYyorMyFVp84miN6g1xuMtkuImLsayxDy8RTYJ9riRoNON5DeluUQIfIJW16QOxEIA72R Wd+lG1AxJPcZdV0dHV06sx0vIh+7fFrUDKwc+YMD5qa+ZO4kOecsOtqbckEOBQRe9s4vLZ3M2Zrq LKc1h/zr2i5mQ0eH3gKGK3lIelnrM4JdnPFEiJQujlCntHb+NlFiLWz3S7JLn97B6Hb0A6Lf6iqh PZf1lFn/NMjUdAuT9Gpb1BpbuklTqvsWUm/Z0at1KmW1PPBosX3rGsB9wAVJLyuBPZ58Ghn/Wy2Q K4/S3PnDHfhbwTtMkOQKH2sdA3/J/Dnc4B0oyKMf6ptQEv5gRUq/pqVHLC+6k1aNW/uEAa19oNT4 ynX/HVo7F63Y2pkHfpnAh/acRZPTWR77lKHY0bX89tyc4878AQ/iuESTf+g4O9dun0LH2VEeV+OD PUcWZwiMAwTsb7UjIo4ofkPJ/oPLNAjlnyuIT7qa+eZcBcpsWBcH3HVNxa+8I8834Ypk0sz8DTuj /ET69pqT5UWQ0tRcUlzdZDIKH49YEiLGghnbS9NVsTk9mB5JM6s3pUdMpgpM5+Ppg50xlSxbhfkI Eyp/8+cozMdcc16x5ZwSRMVhYqbmxYwwMaLz4ekc/7dU71nxzxN+QtlsgSofe4YJlSk8f7f1dWRt uSbLyWd6ek8geQmIlk6sgmiX8lOJ2y/X+yFtdEzBUx2Hdnxe72eC+PsZUSFku/TV7c5Ze9qEYn6y /3n099iKHKgrd9XN5Hn4jShJHrJeVWcSEy5WBktjJLocFW4q8sJNBauDpbR0oDC2Fz+bl4Em+qEp v1ZvWs8D4sIudVXZa8/swnafGC9HrU0m7YalxWmRQZDgHCKWFWR9PnMXym19cXVdbeMEdG7BqRMc meQ/t9+M++b8liNryoSZ1S9sneEzFdIjlnL0PbLCF4pnfHFoQYUSXZcXtRlWB5Dnv6h60fEk44/M VeffUDeUggzdrX/LLiyaHrZ1/ZwAuCTiY2wrfvavGUiIZodlLDKos74CPJ5797f75gip/a4fN07/ +MUNRxeFcFHCPxf4U+Sn1qu7duaPp/NO61BMoARmjF0HF/2X2M7p3Dy9IE9XlHn848qW+sDAlWkr Xgzjxh+a/GRWbtqRJr9l/nJqxv9sXZSft/awrizmyaswr4ko/OW382jjEk1+t3AmK8ulEnF20R6g kPP44GL8cVE1y2IIjDYCIz7PhDwlgTKL1Kr8i80z4D4inDpViPRNx32PYIcpYXZW5vRojU6x4OC6 Kj1qvpi5Bb87Q5r2XfJT8jUfLjvZqscMukqfzYvNMcUXxJ1VL86K1ikic3fWcf6Whf3AHyofG5k0 PTM4Gpny0yt4N8lQ11Dp559euKpSHZmAehQZ52uAdnA+NoaWiJcGz0Oo8lFq+vRo8BV5/m7r68jW dk2W05Y9zAhNTqHYm5sj1HQi7wmoHk+omNAkeMKn2kU8bQICKHIqYmMrSuP9AQr0iVZLF4+sl7fY D5io23NUE1IzZ8cjpF5zZHFpl5mWzvEXzpYGa0HCDr3djA7ZLh112XOxwyRLj8xNMKnUPTAVqkFe 5DlOzNzDdypk9nxy+NSrsacWnjc/Vbg4awb3rk0kmRIU+INAoJkwdbZ/wBTO0UdCjh4FP+ofFBW7 7+xsjMOXnVyTxuwcA10vCp5U/A2NV1OU13FXKruu3FWrKGm2gU/Cx0MYiDRlJk3+lzVXtCpNjwZN mIxRoPE31byCcYtXb7h6YUkW1srMTbc5KmS7JuNP5U+p19h2At42KtvVwVJJThP32APvX+mB1n9p 7ZzOic9RK+vrfYRaVVOKLHdLjYGOD5WRe3akyS/2FOP5zi6wqaeXCRotatLz+FP4I/fwdxdnmrp0 nCnyUBhRxx8KPUtmCNwbBEbeZ4J3FnB/iI88liVFqqplW67D/DbWpf6z9+B/6pKGQ+vTMraWcvcS tbqxLSyuqHVVFmRFh18w/N7QnWZImwVz4qiuugBe2EG4duPTOl0XF88p/rL/HR+X2f+PxsdKIa9M 2pex7jWY2/exJAnC5q8NR7Vv/EOZczkfp3H328H4WPlZf4MikwuwvMB//76NSriX8Pzd1dfKz/mX LKcDnZ2vMCCHlm4joskZFbu/OhK/CZkzdeZj2BdEWavOJc8PotrFIyh5myoe842vfOnS0aRSQ7rh KDwHDwx28pD1Cluk4PBMbU7en7H+6IVQqFrz989baenAXuQfdyj5nR3YCv2BZpevm/8FRJnyD/ct Tz60/QJWTFqQPA/Px7gMKkUtbiQiv8dXL4oL6P9YwXIDt9PLwqaXe3UV4I99qkbwHfsas/NWbszb aP1bufH4CegpVL0oeFLxR5L1SXe6N+VBdbkbOuHF3NG4MF4UIj6QePQP3Wpw6XRKZTvKXN58KSkt REjvdx7e/pidSq5+RVV3Izw4K2HebJ4/8T8Nf5r8tPTaGuwnpS6+WpR01LCt0Po8RqwTJ9L6L62d UxlZMuKr00qLXq4uwb6v6nRjB01OKh837UiTPyhqJ9cvUC+Sbv15QX91FP7u4u8uzv0CDIzRcKbJ M7A0PwbjNOfxJ5Mbfxzo2SVD4B4jAK+oRjp4CCSwiEcclbahcNfBNQ7cxSLL8gAB50gh7r4imTAJ yHxEk0UeIsiH1U4SsaiXvxlNeGzuI49CTypcUnC1pXtJIPCmBiIfi8uGJN74PueNZeMWThmb3pad SoJXfmflKyf3LNuiTkLWBVUUPtR6uQwLf+wwWflAdOj60ri7kBMX8eBx9HJcdUFLp1RDlDNi0cvR 1eqkd9a9a1Kjiblb5mGvxJVdeE9CGhvJWUkktHsb5SQPXS+rFwJtw8NSnS+eB6Kl8yrxLdkJB6vd bXbp5bybzm+1CE0x6tvhB/XehukDO1kdMOIQlh7rTf5p0ZkP/HuOPvRqEdxHI3jEnfTqb28wF9XX eOR/8S3/h4GBqK/5hk6tEUb78exNWq2AnzWl60XC0xX+0N64F0peHo7NARolV60DPoKJ3ryHj67j CQz8dpLK30Mc/3Q6aoVPOrSVrTkw6Zjzpqg7PZkzNa8S8b9jv6Dx723mijv1d0EzruERP+ywiaQz MHoCF7OCmImL/kts57gMIfA967FpGEtPqTem6PyumyY/gYEtyU07UuTvvY0Zcv/4/7ZxhsTfWvlQ 8R8MZ2PdlX8130YzQ56cM5neV6y10nF2lMdSgtCP0IDxR5iVxI0/1hrYL0NgbBAYeZ+p5txBfJf4 938dmLilMDR6TS0/W4RmzIpB1WrlqWXirowQ/QcbcLpsSQheAiKZNh8e4tQXM/aYn7z++a78HlSY 1Lvy8TWoSoW+q9aafxwq6jn37yOK6z5LPZNd4ETk82TH2/vx5JTqzYqE583vY9kuHjwje+2pPjz6 yISTkLG1QlMCr+s0Fw+W/zj3GT8Rkc9qfzJWbVcs/A+e27IW/V2N+WcX//CNJ9zUl8a/lybn5Pa3 3j/0heEa1kh3JP34F778d9F9LeR0ICMFF3ZBkmdeDY0uq1WDqbKe28jv1DCXYheztlxZlM8Js39n 4RdigXVzB4o8VL0sPkXOrJxv0ifrldehcvnSEJgHgkkZCE7pfW3H3z94BaFabOUjmYVfIDRv+y/W o6tku0SH/xLaYc65uaWX4AUx1zgFFoeC4+/4z2rf95RF30wVeX2pgQVDvJ9hLD97oKT1sg3/OaGJ ifODrPSqjGMPdzfl4AqEmfJgCfII259+x5F7/7WjXjQ8afjDsiWQ5/36M8Dy3dLMFjFa8MTOFcFS RMFnalf5zrcW4sWCs/PS65OUFZGV9Zn5a9IjKfZFpqv5FUqVf+aF53Zvujl97ikFrIVynl2zKWTD waFfPEvhL6OkT5v2GPDcdXKVSLup6dMtGE/dlnca5Ju52WhbdfYRYv9dRO+P9mVt8cbqfG7cUMQf mfTrqV9vuIRrjp4ZNHeme+OS+3Ykj4eruVk+1JOigMWfX6WAMGo8Xv35CfQxsd+5i/8gOHf9a+7J WKj02DbDnMk2kAgR2njSduUwPw47tIcVAZ3U8cpu/MlcFj/0nWIIYrEkhsAIIUD2A4bB3PhlcyUu 3qNKuSg3vJAbXytT9d6GsXXKnOQGudc2dZKigpt8Eiao1/13DL+mWxyeFiqHe7OiGrsc8aHqWH9P T7Ti5obClwrXJH2IEyEkhJeEOj8/83n8fxKf61csy5cutXz8SC9eIQtLmi7c2B0XGp0+ESnbU2JP Ipl/aoJUlq/Lr+1+DXwmROJjX499XNtu4V/Z/GkI4vmrKm/uXRHpnr72PO3jkkCKnJLus7VKfMPG oSynvgxJg1JhL5k+SjpP6PTflV0Qeuanv5fVlmkm5m6bgyeZIHj6k+1i+LpRcZ0XR5NTCy5oAmwO NAXPtZDloepl8ZlQ/ARwmNQyafrBtYoou9kMx3ST9nytEr82w6FMiX3xhF/J1yOqXdZ3J4UUnH3n M7Pvi48uSKpW8iVp/632VSsuWdohtFCOuLfxs11K7KhBwPjLfVcnoiDtdUt7UDflIGF0wqxNacs3 B/EzATwt5b+DXvomMp40/GGGqLF+V047J811JaCQGpLI+UxkfCTdjfzXFalB8yPMMtSk0bQrrnan RgWT7YsM3G4O7YqFbyo4DWS5sXJLmyBpZMUNOfULMn9PMTldMj+9Utu5oCIn5VwZEsrg0QZq+7i1 3YXPROy/Un96fyTIb67/vIhb9ijTNqVsaAKK6Dx5wQr84ESWk8CDSzJ0u2tHmC0kjIfwaPn8wtwk dUrOpRTwVnEw4fFqPiLzdxd/1zi3NX4IFcpml/yS8ikDJxD+RxtPLldTxkl/8vjAz2U9E5OGxx9h 5tb58NTEAkNg7BF46M6dO6MshdloQiKhzTkz6/WwUNdTKrG7DXISmE16Qx8SiyU2Uj6Zpxd7S4a4 4yWFD1lL2DsOeUkk/eL1k7nFp7+YY8xdfR3L89cu5CQXcDuVLqdBZxY6bzdqoR+6XYgSOekF+0E0 /OXw3F2mrObUZH+hyGp0WjqR6yCJZn1bi77XR+KtbXx/rTrJL7yydGXUIGVGK/uu9RoZ/OlqOfOH FIPAW9Br6jWbzWKJdPA3NHTusHiQ0q8p6Sa97jaSSBwGB5cVuBxPnMcfKq8+ve6WWey44y5FTioX WgaVD3n8ARz6kFTsOHjSuNPTKfWScTYWHxHLm2Ql2y/FWR9p6Jz5HAt/N3B24Ai7Wuj1X1b/Edxl eVR1UVyEQz67ZAiMCQL3wGcaE71YpfcnAqaacGUk93yP5c9c25nBz2/R0u9Ky6rChxbU9pcs2NS5 Gd5hjUkYUb3GRANW6QOAgP6tAz77H7lwac0z90xZfcMBn2P4FSQfYLUGbfWClYT9MgTuBQLMZ7oX KLM6hoyArqrq7DWzECb+TGY0T/bsHMvMAi19yIztCI1ddec+v9KJ5z+nRf3gyZAhrGm1Kz2y0ZHU a2QlY9wYAmOIgFlf9z81NSZP/BrShHx/uiBmyhBecI+hwKzqBwQB5jM9IIZmajIEGAIMAYYAQ4Ah MCwERmN/pmEJxAozBBgCDAGGAEOAIcAQGIcIMJ9p/BnFZITzvNwI7tK7wXpckj5o+o5LIzChvt8I dDSVll/r+H7ryLRjCNwFAqP1bg6+hxIM/NKkre74wZoryNu6bc9dCPsgFDFd3qiUqfwLDUmrHb5L 0l0rf6+ypM6AfH0i4DP+IMv3xlT6kUXLbDJ7kr4uHGItzu1hiAUdyej4OFK6vHaW53vTPjlFGsUC w6SAXyU/FeYShrHJ1F87k1P+CRIYkGTZzrhnHNr5MGVq/Pdbh2u/EPN7lQ2Tl/vFjfq22sZ/ffKt //pFz9h/2wadV/3ZxW4UEL1gedgQ1s+NMX1f3ca9c1UT87pf5g+9Nrc0fFjW0HJb4Dd/bmxUwBh9 MOG+OVgJhsCIIzDwu/6RYq8vl/9pIYqsLl3e/4GotuE9JT5XLlr+s9VTXG+zNFJi3I98+rhdcL7T wubQ9vcSs/YMnLplUyj8CUMQf2Q9hd5GOSKRqjMbF1Q93Pz7/UPZZ4hQI6k9EMiGkjQi+pLk+d60 z68tHQ2hhmkbnwobh/e31i+PKepV2NoTp20fYZ/J+Fn1FuV1nnOMfQ8aSuMaJk1b9e7AU/x2X9Hz f1IaZR3l4HjambAFKB+qZMdeqFg/w96hcqx2zOlbKg+BeTJjf8FJaS4vWrqQ29ITC1oB519d3f/U HEeh2TVD4MFAYFTezZm7GmFLPR/b1v4clGHLC3InQizQG7Zm6dIZnfA1GnQ6g3OyEx2fAJumcOex 6rs69APfZOkNsI8MlY/Z0NGhH5Drbr0dIHwfAj4O9cJGzDjLSV4af72+Q2fAGynDRjX9hcQR6pTW zt/yj3f9yehWC1zIozRwjhj8reAdJkii0WO2JP6w6wlVfrvq7KK6hgMLqlTyqBecHCazrqvDWV9n /IntwVYDDR8bwYAIXV/Y8ocoz4Di3AVRnhFvnzScafqS7QV2pLZnsr4Ry4vupFXLQdMJcKLy4IEm D7lknxFABtVww7UP9P7o3C/mLDram3IBSyggSDg8eUQrtnbmgZ8o8LF6LPZS4jgdT0dK/nro8vg+ sjAzNBPrhXz4g1dwtK9xH+cwZS7XXIiE3VA1G/7vSbsOj0kGhLGnbzn0YQ64TFvncztvmzSvY4cp oTrtjmGbGjYVzan8p26AxO5c0NsPrb+4w53RMgRGHYGhDKruCaFvrzlZDtv7o6bmkuLqJpNR+HjE khB85LsnN5CoZNnwDAMHSiRU/ubPUdw+4Mb20nRVLL8rMRwAV70pPYLfH9y55q7yxL9sr58QjHT4 QA+5f7S6HX5TNWn7w8RI11T8yjvyfBMuJpNm5m/YGQWbevfV7c5Ze9qEYn6y/3n099gKGA5Q7qqb yfOmuFEvJ0ldVfZafLS7JcQvbji6KKTqTGLCxcpgaYxEl6PCVcsLNxWs5vb7ofG3T4+eiMp6ovnz y4ztxc/mZaCJfmjKr9Wb1lsfRc1V599QN+Adxrtb/5ZdWDQ9bOv6OXhXXAo9pPfjac+fKL9FGeqP 7j11CswOJi8I40ngIXjFP0/4CWWzBap8PHYmVKZY7EjEn94eBsg5iN25uon6upCHqBNdnpFon1yV NJzt7WKvr326vb2IeLrQV3ftzB9P553WoZhACczoDhrs67XJY2wrfvavGbDT9OywjEUGddZX0N6f e/e3++YIzTXnFVvOKS3tf2Km5sWMsNvU/njrPLVfgGCe3hOszbtfTKI8/dmOMZI82FHijtzTFWUe /7iypT4wcGXaihfDuPGEiGf5qcTtl+vhEL3omIKnOg7t+LzezwTx9zOiQtyUB4kC4jLWLHnrgEJt 51MYvyrPB6Em5iZFhk3p+11CNfSaonrDZst5hY5KoTGn7/j3EZgrS43bhIcYWxCGzBDDzLd/MDh9 eJQjB13DW6uO7UfwbPzInn+uX+HZ17gn5xdlyE9rCsx64S9T6/Y5th/OsaX1F3IdLJUhMKYIjPw8 U/PFzC34HRzStO+Sn5Kv+XDZydaBj1XS9MzgaNj4P53fTL+r9Nm82BxTfEHcWfXirGidIjJ3Zx2t W3oIb5k0ZTo1mp6Aj6hrRwnT5fDkU9Ki0zcd9z2CHaaE2VmZ0+EoMcWCg+uqcM3iaROgn2tyKmJj K0rj/aEc+gTOmXerXihjqnkFO0zx6g1XLyzJwlzMt+Cft9gPmKvbc1QTUjNnw3Okes2RxaVdZip/ vt4eJA/Oyg1NKIMDvyznl0FEOFsarO0pK+vg5tAgAQdD49UUOEUEYmXXlbtqFSXNWi4d/pHoafwp 8ltZkX+NbSVJIGFw2sLJNgIv0LesR5WPUtOnAwwWO9Lwp7YHd/HH9ZP0RWR5bOI6RKjy2OiG0z6B CQ1nmr4Ue9HwRBR9jW0n4O2tsl0dLJXkNHGPJZbDf22KDYzQ5PEQBiJNmUmT/2XNFa1K06NBEyZz syaGuoZKP//0wlWV6sgE1KPIOF+D6P2R2i8GStF/RZOnn8IhRpKnn0StrK/3EWpVTSmy3C01BkTD Uyj21pjKQN9O5D0B1Wug95nQJJj/clsevm447nlA6OXO043+wdN40sYj8AmYA3MZxpq+o6AEXiOm Jv4oyCKmMGLP0/HItGuqMjw8ewEMQ1nPr6Yp4ekB7hIMDppAb2FDQ3nVV9944csyDWDraSa0H6iD 1l9cosQyGQJjhcDI+0xhcUWtq7JAn+jwC4bfG7rTDGkDTtOUVybty1j3Gng6/EmnddUFMFME4dqN T+t0XVw8p/hLuyc1LtfyTxL1O+jASJ67OffX0HGlv9677JeQJfJE9Z+9B5HUJQ2H1qdlbC09Oxv7 VOrGNuQRlLxNBWXgmLDKly4dTSo1pBuOLprjXr1Q2sObOyVTJVe/oqq7ER6clTBvNiSHLVIU4CEk tTl5f8b6oxdCoV7N3z9vpfHn02WzzxZtSktec6hzQ0H0xFBvbrs2kX/coeR3djgOSJL1SXe6N+VB HbkbOuHF3NE4y5QPkZ7KnyI/sHURmq+eh9ysiEjbhGRQZDKnL9hx/76NStCWtyMNf1p7oOHjQhii vjR5aHxo8ljph9c+gQsFZ5q+NHvR8KTpW1uD/aTUxVeLko4athXCOxTXgSYPgHz0D91q6D46pbId ZS5vvpSUFoI/OBCEzV8bjmrf+Icy5zKeOsEn9NL7I61fOEgFPPhAk8ea7/xLkqefKh7mboteri7B 44DqdGMHDc+o2P3VkTAaoTlTZz6GnwFQ1qpzyfOD3Jenv26IOfirfB+xUTjk2tJtkbGi19X9bZcJ xT+dOKd/A0l9a2crCCabIAvGiyvQDXjgpARJ8Oq/Lk4AWvk84f97bOGCd6qWPZcLtHnr8NnnhPYD eZT+QqmBJTMExhgB261wJOWQTJgE7HxEk0UeIpEYFhAYJWJYjsm/4pdw/oE3zMzruQVPvfz4MeGx uY88CqNw4ZKCqy3dSwIh30XgmcC8g7AXNomFR28Py+oFMdTHBQFfG7/Uie//0thIjqtIiNeGul2v x8z4p9NRK4Jp/MrWHHgYzXlT1J2eLLEOj2aoy8PC1tdL0Mt7fU569Tbby4ekszaf3KqT8B/B4Rze Il4WNTha+CfmXjjY1LQmE+gteln0t+dPk9+OmVO0F+G5tEkTnFfTWuyIB3e7hWtE/IntwW38LbKR 8YG7N9+uHORxUggnEOUZsfZJaSc0fWntgX8FRsSTU8pRX4EnbtyP+GHHXiSd4Qc/Ai++E3D0jv9o 8nB0gonelrv29S4tQnjKwdj0tuxUErzCOytfObln2RZ1kp3dif3R4hg49AuLHB68aP3t3KU8jsK7 lIfn/Ng03IU8pd64bOd33fgH+hFpfIhY9HJ0tTrpnXXvmtTwEm3LPPzU4q48HHtcAxeReFt7tIDr ueovP9GjCAm6eQkPCxKBzSPp6yiv/KBdNOdnkZCLw5jS69/7Zwo8W+540m6Jt6n+GJx7PTG3KjlZ 1Je2ca8s59MyxSLqtwWBjz6BzuW/8T978dOv6XDKaWjI8vnTRMamQ+T2Q+kvPBocJOwfQ2AcITDy 80ygnGTafHheU1/M2HMqO/H1h3yyxSfazW1X3t6PxwvVmxXlpefwdxnqiwfPtOnnPr4G4/FdtdY8 EVY2X607oqgv7fWkOHOmuiP/C0VVh8+e+gZGpXbVCc0VKP1G6duCR2Mgojy1bM/ZE8eLEhfi8+1l S0KmmrXlew5zS6h0+3cW7t5ddILfdcS9eoG1qT6/Qpl/S7wsevcbSzMhAdZ82J6S4f3grJyNuw+v jK2HeuVLQwJo/Pl0Te3CxKK3ij86BPj45i6uhhn9vrbjIF6hoghQ6jmSiePH27DPZyw/m73z9BGI vVuaufv47uImjCONnsp/EPkxS+fgM3kGJFZ82WzLstnx4LnS0nNvqrEds4uv6WfMIuMPBYntgYaP rSLHCAUfmjyOxe2uifLY+AyrfUItFJxp+tLsRcPTJqcD/n7THoPKd51cdeD8WzveWIDvWLot7zRw TcVOd1uUJg/0lx2vi2MvqdHsvHR481oRGZ63p0pr7u27DWVlwknI2FqhKYE7IfTf8q8v0foj13Sh hGO/QH0tb0HbPsZ3ySPpx3fvOVMKXxLQ5LEJ7BAhy6M1Nlbnc+OMIv7IgeNndi/gPviKnhlEwxOz lTzzKkwPm/ASyaznNnIrn92WB6bdLlcd2lOoOMKNchnH9hz4qAbGB9GM57JgpNIlvVh4IPvwL/Bq ytkbIqwe1eUPti38cMOaU5F/sVpqDOmN104m6ZA8cvuAtVYe3tjt7Cl9u7qqtKIIBl94RKWMzjhP 9LAsHlYR6Mrkkeq86fBiDtZyxTwqRjR7KUw2BgAAIABJREFU0foL5sUCQ2D8IeCi8Q9DWHF4Wqi8 rFatqIZbKooPVcf6e16/wi9fQpdaPn6kF69ohiVNF27sjotccXND4UuFa5I+xMQQEsJLQh2mWfgM +H+rrZJb6nS6/upqgQzG7U9u+sOP5npFb/DRBrnXNnWSooJzwoQJ6nX/HTPZU9/UqLjO9XSkyamF oT4BNjeaIkSe/u7UC1XzX7m3Kxa+yX82LMuNleMHUmuIn6CHVUcyafrBtYooeEqSkPl7ii3p+Ze2 cG84ZOlPHwwHfU3a87VKLgU4limxz5fwK/n6AI/exvpdOe24GljPBKmpIYkrYI15H4XeqpcjfwO3 iwFdfqseA34Dpy+Aa1V99RuxYfyTn7bdYsfK5k9DEG9HVeXNvSsik4n4Y3ak9uCJyPgMqN7+gqIv osnj4nNukjwj0z5BYFo7sdrFoZ3T2oNoDhnPy9U0/NMrtZ1wCHzKuTIkxH0CZPm4tX3zgDfj/YDS 2r/h60b+a4zUoPkRZhlq0mjaFVe7U6MCo9MnImV7SuxJJPNPTZDK8nX5tR3P0/rj16b1fGWO/cLU fbZWyXdIaNE58IwhDUqNixFR8OmXeGBMQpSn+7+/+7wIa45k2qaUDU0Qic6TF6zw90T+ZDx5rs/8 9Pey2jLNxNxt/JnQMEPlpjzgM31+JUlxneeH1E0KddeMLU/B7NGUtN9U3vjLgpzaFCyWf17x2jgL EULTZy1DVTDuyX8ktU2sjBW98dTpLQDXy4uibOLhiMec3fK8enVS0ilufBYmlPzK9nnKAELLhXj2 0xORqgf9MmLp4mupSddzZP8xD7uhZHu99oz33YxLpIpZGkPgXiAwWntaguxmk97Qh8RiyyGrg2lj hk/uzchT7C0R2SauBytDyrfwkUpsYxCJqj9t6PUCpUHgLeg19ZrNZrFEyr2vgn0TGv5yeO4uU1Zz arK/UOQkPI2/JV0iGSI+/RIPLebMnyj/4MxKj4fH1muOvWBYP8P5DZ1zcUu9zvhT2oOFfth2d5Zk kBSKPLRSQ5fTNc40PpZ0p/ZgSXfGkyyoSa+7jZyYkGm5VJo85CKwFyjykkgG39100H5B5g/Dhlvj gCt5YPuDW2bxwJ11bfyd8TQbdGahdMj9lyY/LR02IunsReKAyfbPWRxxn9GInMeNMaC//NGeIvNz GYsiSDqAPPBBjad0snTw52xA3iSQ4vUYsOOJTmAZKjFXkr3A4s7jKkkElsYQGAcIjKLPNA60G30R TDXhykjuuRbXlbm2M8P6nDr6dd+rGkx1u5VzlcLczvRkp/H+XsnA6rm/EHgQ+sX9ZREmLUOAITAS CAz+zDAStXx/eQiD8+MKr5mF8OBtMqN5gyxdvz9xEM7Zl9684JPG+1N6JvVYIPAg9IuxwJXVyRBg CIwtAmyeaWzxZ7UzBBgCDAGGAEOAIXB/IPD/3B9iMikZAgwBhgBDgCHAEGAIjCkCzGcaU/hZ5S4Q MBnhXD8WGAIWBFh7GJ9NgdllfNqFSTU6CIyX9Uz48wrHL1xGUuPR5u9C1ra64wdrGsUCw6SAXyU/ FeaCks/SXSt/r7KkzoB8fSJgW4Qg61Yugxa8HwmodjFd3qiUqfwLDUmrh/K13njT3ahvq2381yff +q9f9Iz9B5xgXPVnF7tRQPSC5WGTB9eMxoekr7mtSXPtNuwkCZs64v0kJ00Ln+OqChf0ZqMJiQb/ OI4kxdDSqHanFR/99jCq/c5ZX25YuIK8I3asXM3vCEVTfTTSneWh1TKInKNvF5pgLJ0hMCYIjA+f SV8u/9NCFFldupz4meuwkRlt/i4F/LrhPSV3AB9qmLbxKer+uTwPs/YMnBpm4xf+hCEINvr8vgYX duF3OfpOCzf/kdW/8aPdsy6cjhbijbK5oC0zxWhS4Yxn44nj6/bc6LZkmLThT767H87Y+Wj3XCu9 jyAw9NE125euCHDpyLZV7w48BeecQoie/5PSKOtmY3C87kzuiHucUyU79kLFehebSCFE44OLE4Lh xDuRKdzuZZbM0Mo7awbutTOgFJ3epFmnjIxc3pwRGTSgxEhduLA7rYpRaw98haPb70j6ai3DQrT8 Z6unWFsITfsRTifJQ6tiEDlH2S40qVg6Q2CsEBhVn8ms69KJJ09xuOfpDbDPh4A7TcWitbmrEbZq lNsdwTF0OMyGDp1ZMkXSX4nRoDMgMb87CM9nZPnDFi9EvZzr5WuPWF50J7ZmZXakeoKr/XMtKt9q gYg8SlNkPVTOkg5bmzjhZsuCiDMO9rnOcWd6svx9ejgveEibsljrcMFHIpF6mjoMwikSbgsuV3YR R6hTWs3eAfaTNNYaSPgPWc5vdZUIzhi29y1QMD4gBvVqW9T2Z7Zrdd9C6q2B9OpqFZyD27t1hYue 4/vIwsxQcXWtQo18+k8v6WvcxzlMmcs1i29kL6xWbfi/J59P3kxS0KIomY8lk/DjMwESU9XP/wK2 hOi9/d3k6aEEIrskKr0w9IVgJD8188cze+P8XChqxwu2q3fqd9ZsR3u5srutjEO/prcHcr1ce3Bo b1bepN/R7HdEfcOWF+R+7pvSE+gNW1J16QWT+f3e+mUj69WfPzCGN6MSSyWe+q4OBMOhbYu7PqOO 2/fOvgsT5bGx0+s7zJ5SqdgTNsqCjb4GkZNuF/I4OeR+apOHRRgC4wqBoQ6IQxcaHqZX/POEn1A2 W6DKx8cIJFSm/DlqMq5I11T8yjvyfO52JZNm5m/YGeUn0rfXnCwvgtym5pLi6iaTUfh4xJIQMV2w vrrdOWtPm1DMT/Y/j/4eW4FPI8hddTN53hRje2m6KpbfxRgOxqrelB4B+4BT+FvmD6Zm/M/WRfl5 aw/rymKevArzCojCX347j6YXsV6s77Uzfzydd1qHYgIlargeJJirzr+hbsA7a3e3/i27sGh62Nb1 cwLgkogbTU7AgVwPRS8absCkrjp77aldePcpaUKCsL5Sp92wtHiF8RCed3HGDe6aJPwxn6rstWc4 Ppxk8Ysbji4KodkFSIztxc/mZaCJfmjKr9WbLJsOu2hX/fwnxstRa5MJy5lGmSOJWFaQ9fnMXSi3 9cXVdbWNE9C5BadOcHJJ/nP7zbhvzm85sqZMmFn9wtYZPlMhPWIpR98jK3yheMYXhxZUKNF1eVGb YXVAv5vOFe//JwqIy1iz5K0DCrXdySXGr8rzgWRiblJk2JS+3yVUQ+8oqjdsHnBORT8PHCPyGUji fOUbPOU/BCazf0CI1HbjdKbqTyHSi5Y+U4Catuz6x4dx6+P6aSkxot1p9qLa3VX7JLQHkIVYL6T3 twdOYL69UWSH5NHtd1R9kSfnUKtk3CkySJhQ+RvLOEnTi6BCV3niX7bXTwhGOnzwi9w/Wt0Ov6ma NJg3NdecV2w5p7TsHjcxU/NiRhic/kkZD4G5fb3RE1FZTzSccxwhdiEnwS40uwP/frsMoZ8SlGVJ DIFxgMBorAH30sBzfI8qH6Wm43PC89O5wx70Tcd9j2CHKWF2Vub0aI1OseDguio9ar6YuYV7daVp 3yU/JV/z4bKTrTAR5SKIp01AUEVORWxsRWm8P1SBPoGjtrtKn82LzTHFF8SdVS/OitYpInN31pmo /MWeYjzfgI8g9fQylcEEQ5Oem25AFP6IrBetXmPbCXjLBnMSwVJJTpMK62M5tJSmmqHxagqcvgLZ cEbKrlpFSTPIhmi4wYkkZBxo7Gn0FNx0dQfmYodJlhqeGa/Lz28HiDTIS0DFjcIHmWpewQ5TvHrD 1QtLsrC1zBhnl3YXzpYGa3vKymCOq18dMv4dddlzMX9ZemRugkml7rHI2V/OIebhOxUmf3o+OXzq 1dhTC8+bnypcnDWDe9cmkkwJCvxBINBPmDrbP2AK77gLOXoU/Kh/UFTsvrOzsQZfdrpuokACJwgO CL0In9cW/YOnsUvrEfgEzAUNKTjycVEIr2UyKWR5M+e+Oct3b8yZdjjGzVVwQS8Kfi5rItLUZ5d3 ueKA82h2p/QXut1dtGdSe6DVS2lvdDVGt9/R9bVKJE3PDIbT7izjJB1PK739r4fwFgxiOjWangDt Ut2OEqbL4Yy/khbw1g11DZV+/umFqyrVkQmoR5FxvgaKUuXh8exB8uCs3NAEfE4c8rGvCjnIifNI dqHY3e1+OqBudsEQGC8IjLzPFBSZXIDvB/LKpP37NiqhJ/M9r/6z9yA1dUnDofVpGVtLuXuPWt3Y FhZX1LoqC7Kiwy8Yfm/oTjOkUU7IsmDmEZS8TQXHQMJBdpUvXTqaVGpINxyFdSfVBfCEBeHajU/r dF1cPKf4Sx2Nf1DUTk5O8GSkW39ewBXl/lH40/Si1Vtbg/2k1MVXi5KOGrYVwgFggwXJ+qQ73Zvy gCx3Q+edP9w5yr2eo+GGKHJSa6HQ0+Rv4ma8MuUl+1dmHE05iz0FaUHyvAAabjQ+yMPbH8ukkqtf UdXdCA/OSpg3G65pdoEskX/coeR3dgz0Kmj4f938LyiSKf9w3/LkQ9sv2OSERJdBpajF8z4iv8dX L4oL6J+SsTi2dr6ahU0v9xFfgD/2qRrBRx9asLCzEg+8Cw3mRVtLwa8DH7scW1Q8f35W7uILrS/d vPB0Ajjeu85iZOjBNf2UZT/EZ61e/NpurozEi2Z3mr2odqe0T6iT2B5o9dLaG0l2Pm10+x1VX4tA ME7uy1j3Gng6fNug6kVUQBL1u6fBTPLczbm/hv4i/fXeZb8EQhGepheEzV8bjmrf+Icy5zJu6vyJ 4jR5+Hpls88WbUpLXnOoc0NB9MRQ7/5+4SgnruVe9FMsOAsMgfGDAP0V2HBllHD9zRsPBHYLlcQi y3JHAb/Qg7sPSSZMAiof0WSRhwjy9Qaj/WongiB8T5bGRnKLQURC/Jakl7+rTHhs7iOPwuhQuKTg akv3Em5jbgr/Xvzgzz39W/7b5CTxt4rhqBetXkEzFu4RP+wwiKQz8MpigVf/6hYrO4dfsacXpHh5 OC4KJeKGXMnpwJi7JNHT5EcNuIgBz0XAubMm7CP03oZJDxH84CTuH/+fw43Kx0Mc/3Q6akV+SFvZ mgMLiXLeFHWnJwM6FLtg7tBouP9ejkAgJ/w576bzWxBwilHfbicnx4DwjzOC9Fhv8k+Lznzg33P0 oVeLuHcQHKkHbyL7evkUiTfMRfU1Hvlf7Ar/MDCQwHhAEi84V4pLF3CWVX/5iR7Bua03L2FXRCLg LQLRvo7yyg/aRXN+Fgm59sGRjyWPQO8ZFZsWxWUHRP5cVpGvabkCr4Utnqe79DYRBhshqHbnb9FO 9gLGVLuT2qdVEMf2QK2X3t6srAi/o9rvKPpa2xXW2huMrnfdjwhS25L4TgHzPsJeZIJUGECMTW/L TiXBEoWz8pWTe5ZtUSfZxmGiPBY8LeMyks7afHKrTgJtHn+GCcHS72xyconwz9Eu1vTh91MrJ/bL EBhPCAw2Irova9uVt/fj+4Hq4Lkta9Hf1RC9mF38wzeemBWDqtXKU8vEXRkh+g821MJMkGxJCF4y Ipk2H08sX8zYY37y+ue78ntQYVLvajiKnBTM2nJlUb4KsnT7dxZ+IRZYPtad+/gaVKVC31VrzT8O FfWc+/cRxXWfpZ7JdP4c954UBSym+ioFLtQXD5b/+M9PoI+J/Gl6PUupd9q0x4DnrpOrRNpNTZ9u wfNeui3vNMhp58zDcoLyswferz8DhO+WZraI0YIndq4Ils6g4EbDAYoTA42ehlvoD1die52ZqW1M r6+3rIroN4kzbhQckOlqfoVS5Z954bndm25OnwvroIXW2ynR7g/fPP7+wSsI1eJWdCSz8AuE5m3/ xXp0ldyuosN/CXLmnJtbegle+HLTiwLLQE7EwWrH95RF30wVeX2pgQVk/BM+xr+k9TLXtI6kH/9i Tmhi4vwgK70q49jD3U05uAJhpjx4oGMzoCbz5arDRV+1lHG9IOPYYzEhz734VIRoxnNZQrRLl/Ri 4e2w7sN4Fd7sDRH4noTD5Q+2LcTn26OsSZ3WeVYyH94EBHp9zY78/3PrkZWLgh6+Up0Fq1ii50ZZ HCYif5f0IEmvmX//2G9zLKhToLWftiuHiePAihkSYn9f6Unud6ivjdgeaPW6aG9OsvMJo9vvoA6i vk92WNrzmxUJz5vfx63u4sEzsteW0PoRUXpTHe/EHz4rnwZtqV11QoMX/r9R+nbM0/ipRiachIyt FZoSaA8aPL7lPuMnIsqzkqtXU7swsajguSm3T1cm5ffIKtMuzWgkyxnnryfaZaT6KVFdlsgQGHME BhkQ70I+bTu3fAmhyuZPQxBe0YxMqsqbe1dEJjfIvbapkxQVa3CiMEG97r9juLXhSByeFiovq1Ur qvFtIz5UHUtxmCDX0N2ouI5HGBgEcmphKEiATYymCJGn/4qbGwpfKlyT9CFmAiEhvCSUf0on85c8 vzA3SZ2ScykF7uI4mPJru1+bj8j86XqR65XMT6/Udi6oyEk5V4aEMpAWavi4tZ3uM/U21u/KaceC wHomuDenhiSCzzRlDhk3fRNZTlyeFNzFTRK8uXWtcNfprPz6SrxoDNaW8g+ciIzbM8FkHJChtxXk aVcsfFPBySXLjZVb7uVEu5i052uV3LsEIC9TYt864Vfy9YjartZ3J4UUnH3nM7Pvi48uSKrmP/In QcClWe2oVlyytBNocVxOb+Nnu5TY0YFQllNfJvddnYiCtNct7VndlIOE0QmzNqUt3xxkmx/iyQf8 N39+JUlx3ZKkblKou2ZseQpmj6ak/abyxl8W5NRiB13mn1e8tn959fRZyxD2meQ/ktq8MRofzJlE 3/tNT5mqviy/HhNEBxcUPM/POt0NPUItJ3BnTFj6HzZ5MB/nQOt3zTR7wfYKJLsbaO25j9weAmj9 3UV7c5Yep4xuv8M1kPS9fsXSri61fPxILz9O5l+4sTsuktKPMCOncKutEs8rodP1V1cLYJBRf3LT H4811yv0U9LSJyJle0rsSWhsqQlSWb4Oj2/gMxHl8USWevMvbeF6nyz96YPhYlRvtaOjnA93j2o/ dVKVJTAExgUC9/68OTN8wmpGnlKJ41hsNukNfUgslgzPj7PwF3tLRANvbGT+Jr2uD0nFjsK4bxxK vcD/NoJPdoenFIhDxc19UYklKPJDxaDCNx+t/esy+JqsITXd8kkjFTdnPpBiEHgLek29ZrNZLHH8 pppsF6KMlESzvq1F3+sj8dY2vr9WneQXXlm6st9doBQaq2RjR1dnLxIHTLb4jf1y9BmNSOTQaPtz nWMEevxVv6GvV+zta7/XhqWoO/Rt/94TqFbEL74KKwWdayalONudRGWXNny7c8yc6x2kvdmJMJSo hb/zeDWUwvY0burrrJc9s6HGYe9K5CWRkLYnpchjqXckhixHIe+rfuooPLtmCPAI3HufiSF/nyFQ UxQeeQlPknEhq/MPaU53e2vmGP1WFT60oLa/7oJNnZuDx5uM/eLdB7G+xsS9s/L9CzqTNjMc7wN7 3Scisn56nxiKiekKAeYzuUKH5QECurbys03tQk9YhWRCkx5/dl7IsOfMRhhXY1fduc+vdOLzPqZF /eDJEFcHhoxw1d9Pdn1tZz5tjIp6hjlM30/7jpFWrJ+OEfCs2pFEgPlMI4km48UQYAgwBBgCDAGG wPcVgZHfn+n7ihTTiyHAEGAIMAQYAgyBBxkB5jPRrW8yGrnto+gULGcsEGB2GQvUWZ0POgIj1e9G is+Dbg+m/9ggMN6WpowBCrpr5e9VltQZkK9PBGxbEGTZd+DyRqVM5V9oSFqNd8wchUCul1IRfP8i 8Jbaf1TVVnf8YM0V5G3ZnopS7n5NdtbXoolp1O0yziF70Oz+/dZ3HDY28rg0Uv1upPiMQ+CYSA8G AiPvMzV+tHsWnOEqxBtfc0FbZorRpMKZkcYTx9ftudFtyTBpw598F87EtZyVy9H7CAJDH12zfemK AOtef1Ymo/Vr1p6BU+Fs3MOfMAT5cz5SH7er0Hda2AZ7NHwmar02Uewj+nL5nxaiyOrS5RG2ZG3D e0p8Tl+0/Gerp/DbUNny7vcISV+LTqNml3HVbs3a0i35O1qFSIueezd136xvilfnZXRPxJd7ZtU+ UHa/39v5uGpXgw4M1HFppPrdSPEZVBNGwBAYHQRG3mf6VleJz77ldlqzyhyMD2VFvdoWNRyFawta 3bcQvzWQXl2tgnNte7euGIJksNWNQTLZcb8fnr/Z0KEzS6ZI+h0eo0FnQGLHfWtutQC9PEpTxB3u ZpMNiSPUKa1m74Dhb9ykN8B+ygLH02Bo9fZL0B8zdzXCxo5y29EuXE7Y8oLcz31TegK9YeumLr3A CQeyvv1cybGh4tanh/NzpZOlQzCTpSKyPBwfiUTqaeowCKdIuC21iPpauLiyC96dSDx5Sr/JocyQ 5byH7ZaMvH2q+dZXKjgRGXcWv14P5NnXqYY9UfGxqcHTlxbkNtyd3Un42NdqH+/T626JpRJPfVcH gm5kt9UZuT1byw61/Vjp7X+Jdh+knfcZdfx+b4Sm6I6+cHQJsZ9i+ch8yO3ZXh8ufg/b1f0wHtL6 L2kccMKSJTAExh6BkV/PFLGsAE5ERxNzW9Nazy6/ULk8E6EmTlHJf26/2bypEJ+iKsysTmr98GeR EI1YytEjWeELzZVwMBmE6/KiNuqR7FVnEsOV4SvzdmxUiqfm+opfXXmiidu8ua9u9+vhkLXjbGnp 2R2C7KlT/yQ+cKUD+BnbS3e8/pA429c3W/zQgT01XdwRZchcdf6A4p8lQNDd+rfswj3H69pw7Zi+ OObVcPnh+FXvHAd/hw/GNpwYowxPPHXieOHGcKjr9d11di6glbD/V9dUnKh8yCfbxydbHH5gT5WW V4pab39Ju5i+vUZVDse7oKbmkuLq4hMfnWk08PJ7+uCNuVWybIEP4KBMrLLoRdPXjql91G3cUF11 dvheHwBfcCAxMS8GMM+uboH5woeU4TGHTxhRxwGc+NCO83V8PRT8UV2VhY9470NgrxcrGoGeri/Z Li3Ve0CAmNc3Jh4Q+OZOFb/aj4ONv+D1jStft8hpr7p9fLTbrX1dg8ZFMzZfXYL7Qnrcax1ndmdf i9Rwl7mr3ogQu2d3F/gQxOgqTwQwD6yM2evj+yfByrwYn9ypPnt3XDZgWnJ7dr/9EOp1ZXeavuaa 87vD94rB6Lgpvr6HF9I9fTlRiHq54ENrz0S9Rrtd3UfjIXFcBdBs/dR+HCCCyRIZAmOOwMj7TMjD dyrcy3s+OXzq1dhTC8+bnypcnDWDe9cmkkwJCvwBPt10wtTZ/gFTxNwkhZCjR8GP+gdFxe47Oxv7 VF922nwVR4i8xX4ak0bdnqOakJo5G069UK85srgUuwviaRMQZOVUxMZWlOLjPhD6BM6f7yp9Ni82 xxRfEHdWvTgrWqeIzN3J+TqGxqspyuvwegufVbKrVlHSrLVWJpwtDdb2lJXBXIo1CXkIAxHMn2ny v6y5olVpejRowmTLaSI2GruIvum47xF5vgklzM7KnA5HoSkWHFxXhdVyUa9deWu0+WLmFvwODmna d8lPydd8uOxk60BwpOmZwdFw8Es6fxgDVV8rR8df93DT1R2Ye2qXBslSwzPjdfn57WWAOfISiD3F eH6xCzD09DJBImrSc9OLNHlMNa+cAT7x6g1XLyzJwtYyY3qX+pLsgrxAgLIeVT5KTZ8ObCw4dNRl z8X8ZemRuQkmlbrHIqej9rbrUW63tnqGGJkZEASUk40VO6qUu84c/FfHNZhqfPqxgP7iQ7U7GZ9+ PvYxD+EtAFOnRtMTAEp1O0qYLkcop6RFR2/P7rUf+9rs4y7tzhE66IsMdQ2Vfv7phasq1ZEJqEeR cb6Go3NHX/DVqP2UwofWnu2VsY+Pcru6X8ZDDhJS/6WMA/YQsjhDYPwgMAo+k0U5laI2H6Iiv8dX L4oL6J/bhwVCOPT7Ivw1vLrjPlIL8Mc+VSP4On2N2XkrN+ZttP6t3Hj8BDgLYYsUBVIgSW1O3p+x /uiFUBjbNX//vBV5BCVvU4EPBceHVb506WhSqSHdACc/1FUXwIstCNdufFqn6+LiOcVfwtSUZH3S ne5NeZCVu6Hzzh/uHLW+nhP5xx1KfmcHrqU/QOLRP3SrwaXTKZXtKHN586WktBD6uqv6z96DwqlL Gg6tT8vYWsr5gmp1I0xlUevtr8wuFhZX1LoqCxKiwy8Yfm/oTjNYz3DlieSVSfsy1r0GdzYfLoGu rx1T+6ibuDU14LOxMuUl+1dmHE05i30daUHyvICgqJ2cXVAvkm79eYGtBqo8Ht7+mEglV7+iqrsR HpyVMG82XLvQl2iXoMhkrl7AYf++jUqQh8fh6+Z/AbdM+Yf7licf2n7BJieu01UYdrt1xdyNPE/v R+DgsF3nUjTCaBnKT7qkgpaD+j/kHKrdafiQRZFE/e5p6EPy3M25v4b2L/313mW/BEqRJ6K2Zzfb D7lel3bnijjqC++7w+avDUe1b/xDmXMZDzX8mOKevoiqF40PtT3TFLOkD7td3efjIcBA7L+IMg4M AifLZgiMEQJDX44ydAG5yRfpsd7knxad+cC/5+hDrxZVp5VG8OuUPfipGS+7Vct8isQb/I++Rv6Y 7h8GBqK+5hs6Ndww/PiaTVqtgH8TZvW64P7hgXq5K18vjgnvmUljI7lVSCIhXtnCE6AJj8195FEY VQuXFFxt6V4SaFmnJPb0AhovDztxLIryyNjLCRmCid78HRldxxMqeCbAdRCLLJwFvJbWex69XgI/ yYRJkOojmizyEAE/vcHIrY6y4oa19gZ99NyCJ9f6ErhDklu4NWAehtsc7n0mQAH13oZXNyL4wTnc P/6/a3k8xPHwKrYV+SFtZWsOLIDLeVPUnZ4MilD0xdxhEov772AXSJN4czhg8/D1cl5557cg4BSj vt1OTo4B4R+H5/DbLc+5r6O88oNKwvSoAAAgAElEQVR20ZyfRcLpvHcTPKXTwWeCM2vSl72xrHnt Qji+Rvr0bNya3LU7B4QTPi5l4sGEd+jCXm5Rla2DkNuzW+2HXjHF7mR9jU1vy04lIWnmWfnKyT3L tqiTeLtb2Tu2B2s6+ZesF6Z15ON+/xqhdvW9GA8J/ddjJm0cIJuKpTIExhSBkfeZ2q68vR8mcdB7 yqJvpoq8vtTAtATvZxjLzx4oab2sgkzdkfTjX8wJTUycH2SlV2Uce7i7KQfPAwkz5cES5BG2P/0O HZycWTnfpE/WK69DCfnSkACztlxZlM8x37+z8AuxwPIR/tzH16AqFfquWmv+caio59y/jyiu+yz1 TIZlSyDP+/VnoIp3SzNbxGjBEztXwDllfW3H3z94BaFarMWRzMIvEJq3/Rfrp3aV73xrYQ6sw52d l16fpKyIrKzPzF+THuVHxnDGrBhUrVaeWibuygjRf7ChFuSULQmZSq2Xrqpk2nyYJlFfzNhjfvL6 57vye1BhUu+THTzOqjcrEp43v48Vv3jwjOy1JVR9yRW4i1voD1divc7M1Dam19cr+YPo+iHoSVHA 4quvUqAy9cWD5T/+8xM0eUxX8yuUKv/MC8/t3nRz+txTCgSns3AyEvVd/fBNol3QVQsOB89tWYv+ jt9iXswu/uEb0eG/BDlzzs0tvQQvRnGzAmejX06uIvt/1nY47HbLMb38wbaFVViWrEmdA+cF7et0 GfeY9DDOj14SMufHE7eiSxhSCFY5h2r3tiuHuf6ocsBnxQySL2eq4x9aDp+VT4NnmHbVCU0oVPpG 6duqJ8jt2d32wylB/ke0O62dP9WHvXOZcBIytlZoSqAdanB7yw25QW4PZH0RovVTGm7P0tozWSeb vYbdru7z8ZA2rgb01dPGAQqiLJkhMJYIuLiJ3KVY2nZ+WY1acQnfM7gQz/3vbfxslxI7IhDKcurL 5L6rE1GQ9jpPj9RNOUgYnTBrU9ryzUH8kytPS/kfPwEcJrVMmn5wrSJKAusSGhXXsecAg2dOLQyh CbDZ0hQh8vRfcXND4UuFa5I+tMiTEF4Sip/Xexvrd+W04wKwngluqqkhiZzPpD1fq+Tm+nGOEvs6 Cb+Sr5d0N2KHCciC5keYZahJo2lXXO1OjfIj3XtgcmNOcoPca5s6SVGxBhcTJqjX/XfMZADcQK4X E1GCODwtVF5Wq1ZUYxXiQ9Wx/p7Xr1hwu9Ty8SO9+H0ZLGm6cGN3XCRNXzJzQ7d7uEmCN7euFe46 nZVfX4kXjbWXWSY+kOT5hblJ6pQcuLvD7ZaTp7b7tWeCKfIYuN0c2hUL31Rw1LLcWLmUiyGSvshE tguytDdU2fxpCOJxUFXe3Lsicn13UkjB2Xc+M/u++OiCpGolz5v2f2Tb7fRZyxD2meQ/kpKbB02M /nSPwB/jl5ebfixBIq+lCeDAPAZR1GzVd4h2t9E74kP0mW61VXKTuafrr64WwDyX+pOb/ni663pF b/BRYnt2v9/1q+gYI9md2s5Do9MnImV7SuxJJPNPTZDK8nX50N4mW/EZkr70fnq52tK/HPm42b9G tl05ImZ3Pc7HQ9RH7r8B/O4DxHHATjsWZQiMEwTuu/Pm4Lv6hr8cnrvLlNWcmuwvFNlv8+gSU7Oe +yZZ7C0ZchGX/IaaaalXKrnbe6e1IrNJb+hDYrFkaH7uSOlL5QPy6L75aO1fl5UJMxtS00P4Ff2Q 2IekYmdlnflAikHgLeg19ZrNZrHEcc8IN/W1wmT3a9a3teh7fSTe2sb316qT/MIrS1dG2eWPcrTP aERDb58jJYwzziPFmedj4T/k9uy2PG7ZHfY+RV4SiXBofcIVEqOul6vK7z7vvhsPnVUF5F2NA84F WApDYAwRuN98JlNNuDKSfx8EqGWu7cyYY5mbGEMQH8yqa4rCI2GRjSVkdf4hbbxZoqrwoQW1VgER KtjUuRnevbLAEPjeIMDGw++NKZki9wkCw38+u7eKCoPz4wqvmYXwYGkyo3nWpdz3VghWG0Yg+CcH C6e0Cz1hFZIJTXrceWZpzGEK/+nVkv+40mk0IdG0qB88GTJ5wG6XYy4eE4AhMFwE2Hg4XARZeYaA ewjcb/NM7mnHqBkCDAGGAEOAIcAQYAiMDAKjtz/TyMjHuDAEGAIMAYYAQ4AhwBAYDwgwn2k8WIHJ wBCgI2AyGq3betGJxnHO/S7/OIaWicYQYAjcYwTGy3om+P5F4C29t1+0WaBuqzt+sKZRLDBMCvhV 8lNhI2gA/bUzOeWfIIEBSZbtjHvGtpqGlu6yarPRYEBC+OjPbOzzHApQRoO+1/lsYJd1jP9M53bC me8K8rZsxzX+VXBPQtPljUqZyr/QkLTa1n7c4+CS2hlPl+TuZ46y/G4JdFf9zq0aRozY2S7f43ZO swstfcRQZowYAu4jMD58Jn25/E8LUWR16fII91UYbomvG95Tcge6oYZpG58KG8EPq1q/PKaoV2H5 Jk7bbucz0dJpmuiaTiS/s0bF74KOueV1v5x4s2r3rDOno4UoMGjrY4bSE13dqEe7dVUJHGOibzvz f95eBkfdQZD5Z6k2pIVJOg4dXvvGTUjQbni+ZO3twzP/eQIfMzIra3Nv3h9auv2ESGsqi1l4df9T c3AxODjzo91zLwB/vA27jyAw9NE125euCOA3XuIIxuAfqZ1oLeaLlv9s9RTLputjINpdV1l3fsfc c6WAsxZpOSZ+sBPVixvOJc7iWiK/e813Wth2feR9JhKebipiLD6+LoPUfix8RlV+N2V1t9+5yX7k yEl2ud/buQt0aHahpbtgxbIYAqONwKi/mzMbOjr0Rns1jAadzjAgxdzVCBtH+nBHXthTDiXuzB/O ndJ1dQyogGPkXC/PP2J50Z20ajlcTPC6exeyzwiVdnTp+J2sec5zFh3tTbmAOQsGcKal86Uc//c1 vnIEO0wyKWzcx2VyhzF821EJew3CmcGqG59U31Rr4AxapPnsu15kqNn4V4vDBNRwsq/s4IEO1Hvz OhxSi8+pbfzO0N1Vjc/ThaOOtd9cb1FDehk+whZd0uFTcvlwS1eJaeCg4p4ytU6lrJYHHi22185K OLTfPj2AA++YwF76gW+aaHZx5ktsJ2HLC3InAm2gN4K9anRDt7szf5xCk5NkX55ex53jrO+6S716 Dd9wdsSm4f6wHd+ta7KIJ45Qp7R2/jbR8bPEPv0w6wX+RDwt9cJRPAbYN8cZTls+H+m9QWk/Fjqa /A5s7C6H3h7sCjlFSfZyr99ZWbonD639DBVPXCvRLiPczq3aOf/q9R06A+7osKFdfy4JT2sueby1 5g78JfGh2YWWPpAju2II3FMERsFn6qvb/Xp4uDJ8x9nS0rM7BNlTp/5JfOBKB6hlbC/d8fpD4mxf 32zxQwf21HRxPbO9RlUOx22gpuaS4uriEx+daeR6LMxzPKQMjzl8wog6DuTFhCsf2nG+DmND4d9S vQcqjXl9Y+IBgW/uVPGriVUcf1q9kK67dmZ33spw5codhfvVmPXdBXPN+d3he8VQ6dRcX8Hrey7D 6WvW4Ok9wfFux2XR0q3l+n/N7Re5TcnjC5L2H0ruxP7Bd7cBuIilBVnYV5CVJBwt2o7PypXNLsmN Cmr830NYF2G65iVD5zY19thMKe83iHcmlVhpQsIW53Jlkfrn65JevlkYDFs9o/Ql1epl/fN8Nv6F LzRXwsFwEK7Li9qoN1GqvWDKqio7fK8PgCPe+xC0hxcrGjE3Snvgs5z/6yntBE6w8sFOpEqWLfCB KpSD292ZOZ9CkZNk367yRGhsB1bG7PXx/ZNgZV6MT+5Un707eNMT2zmlUnPTTRUSZl19AVsHTcy6 uu0smMyHoza2F8e8Gi4/HL/qneOW29eI1YvoeCJdU3Gi8iGfbB+fbHH4gT1VWqrR4Ti2rZT2AxoQ 5Eeo/FRiuDImRhm+p6qmFOKv83HcJNzBzQUfkr04POGfc79z0W7dkgeYU9qPW3i6sIt77dwFzlYw HH95fX3+NNU3WxDz+kM+f5LX4KGMjKeL8daRr+WazIfPdLaL63RKFSyZITDqCIyCz4TE0yYgeGLO qYiNrSjFx2sg9IlWi7pKn82LzTHFF8SdVS/OitYpInN31plQ88XMLdyrMZgRkZ+Sr/lw2clWfIMQ e4rxPAc+CtfTC0+QoCY9PwtC4Y+8oNKyHlU+Sk2fDpXmp/OHH1DqNbad8H1zmbJdHSyV5DRxb9As h/+6C7qhrqHSzz+9cFWlOjIB9Sgyzte4y8IFvafEF3s0SBX5+sY9/3975wPW1JEu/NkPiAkSaqCK BV2kahddCRZ2P+wf/wBuF1pr3FVXV9ErawW21wu0+4kNd2GfYm9zse0CPq6L9LFYjF4t6iVWV/oH UKG7uC1YowtUQHAFLNoYllAT8+fp9845SUjCmZiDodo68yjnnDlz3nnn974zZ86ck5mq9x7+iar1 t8x4kyBoEu4rqEvfy83933IYqIsImiREuvpW3MUq/MWWKLFQErp0W1wKHMK4hVASBndiJg0syste mzIl0NdXMPFHYTiH8NCZYscla6zyIx4NCY9LfL1mJrbj5ZsOj55w7BCI9jI2v1K9VY1SVGtbzywu xFLMjB0JdnEQ6bRL8pPhRBJ5QUQ8LCDj3u7D6V32SHoiLvv6CG6Bs2lVaEoalEjVj9KmQFen+OQV LcnPXXKzHZqNAEMwaVrotDCI8oOdUNgOWgc8BTMlERoY6rvBjGXBCa/lS6x3uq4DQRUyeLGbNrOw YAos1Zc/b+fqs0SzI6L/4BKO0B+iRP54XNOovon8x6N2GB+F5ZkfgnFYnv5AlMNpL6wMdyD6LU99 EMF/+PL0lp+T+XBzsPIfQrKIwpLZaXV4nShoMCBw+T+OJ7S3+BRnIMnhTEwjKYH7lMAY9Jl8wjM3 KfGNGqU0vnx+X0atXq7ftzCyrQnf1yFcvfZZm3aA2S8+dlkblVTVu7wQ4uOjz+h/rx/M0bNrmobH bSlnXkWZkGTjL8qZS5k/BPnhsZlMelljRtHr6xRwJ2NrPCnflmbcT8pe1FqVsU+/qRL3GkYZ/KLm ropGLbs+UBRfYIaE8PCZa+CKw2lI8cPXixccWlKaAkNKRmX++Yy1p2Sz/rzjyvBppOo5caKX6fOx soz4HL4JOQQGBe4SDjrlBx+JM4HZ3Law5wwXPj92tk9rv9rEvEoLDcH39E7o+xIC2V7+eNk0pJSp XlG2XYuOKEybMxOOSXYhiEckP7GlB7u/nrf6TfsgDV/5yIdbT+jIcNhXHPefT6fAcnIlG0peAC+V vPBa8q9AE6Ev33IJV/xm8OZ/bBBabjHdktsmFHnw5Zuqn+EBP2FI0u7Mgy8xtcBazFHka+ncXrps Xek6279l6w4chrxIPNv/8R7klb24Y/eanLyNtUxfWaXq7EMEOVgxgv9w6I9QXGJRUyxYCUVOmvYY frZBhctPZc4N52svkhxue2EtnYK9HpD8lq8+JP8h8nRSZ/iAZBdbCk/9fCSfAoazTY7rli2vdGZN 1fqczJW7b64tjw+Y7Y8forj8Hx6xCO2tq9zhY245w+eZPbtdPIx3SUYPKYGxJuB0Z/VaZuxwhSQx lnkvJRTgr1dN7P15/GOzHnkUegqVi8tbrwwuZibyFo9/CBIECicIfYRCEXxIYRCL4BITXrgcMX/Y v/YPnrjk47Q4iJl67o97CUx6Ur5+3Vi5R4LxDV0omRoMG79xzJdCsAfB0Hbxr9230bTpT0a6nT/a 0PWu9HgGkhTUyJZNGEpOVWWw+bJSkA8rcpzr18mkeOtlwxtD33uzjp+s2WzaF2xua9ox6/hWZPzr l3oULmIly9S/r4ryaVv36iwdLq/4hw9LkVbdcLk7PSIKumRdN3tBlljsjyx4dKfustqAYoTIPIjN ETuZUcuPkTTOhzmwtGepZJroxvPLohklxP7w3belk13u/sdhuOdECAR7+UxLgVd7vSgYaRp7i2FQ ofgd4aA8k2QXgnAcTfATloPV7mBUhoM7f+POgqCnnzv7spnC4InAhHBfFRjyLpdAjDtFFj+mrmAP FDotvcfWUBf/4ZOvpeeaVqUWxGMPh2DUaPyYbjWRJ04lgnrIBNY3EPSbLbdIcgj+E8cI4NA/ZuHv 4ptUGQdXHzKqUEBJ6hwMgDc3eD3NJYd/feT2W976EPyHxcjBkz3B9ddbfu7ER1CYwXDmyhDHWctr tTeSzNhwZKNWLEB34DmivSXJv4McUntIiidlQ+MpgTEm4P0+k1lTr6gqU4Le2qItlZdEftYfgc96 fCU6q0RfN2nMP50tHDr1eUV+T+AzvpmQUDx5Ln7BcS5vm/nJni+2lg2hygzTCmZ0Ag1l5cPHTv/M gmSqczvrf/qnJ9DfOOX3XXy3SAuplDtPpa5C76tg99z2Yz/e9Swh38mTH4MkW48sF2rWd32Wise9 tKkHO2Qb2N8rDfx11pFEiNu/SR85AbbEYLLgXp1U8BAy9DaoT8ICbGqsZ8n8Cf17j+6+pL/KoKiQ H7gUFLR4S1KC0HKFO56Qg+k2DAqoEsv+XfWLzVN8HoLxMMjCzwfZyqva+VH1c+gDnMu57Yd/tGNZ 4jbULlM2SP11pdMHD23tgpKl5TwRiXzaMFFt0Rs1AdN1H2XB2LtkaggynK15Q/F3fPWhD+TXg4OQ /hJcIPP1s8lX5u1/eLCrGPMRFMgimDs77JPCCHvNF7eXNSiUIQVnnstdf33KrOP5CFZbQciNP5Bk c/rJkzesdn+nIe1581GGw85q6ZuLCXYnCUdGbj0Rp33nvniSgbanRjYZ+pT9ysPq2SB5V+27yc8S /ZyQtaG+5o2j3U1WP6k4HynNTp8bjix9B47uvIhQC/bqioLKSwjN2bwkhu288shXEFUk/4Yza06e C2ckoCaV4niyaCAP/GRtC1heunj6JCQI5ZJD9B9u/X+5JhQeeMTzX50dX9eiAtGFz62byCg3Cn/g lMO7PrJoRvjtE17yn6kknpwmYSI57TIaP3fgXJCcwnImZcvyV7csSK8qf27i7RONGWVD0sac87M5 /f+nJdOvcbe3S6dyNxG87cKznSSVi8ZTAt4l4P21U3RdewMrUh20TGuV745kfqN+o+Pwy5XDv5lP iz755rIkpoYZqitXJ7fgfg6ElNmqHSuXwrNn3+c7wlS4twR3WeYxHpWuH1yDjnDKv1CzTtqA7zvS KYVr0f6tPdC1QPIl3a/HhhPyNZ+t2TKvoZiRL4Vvp2AnbVHr7oWRsNPXlBt2XAFfVTetSfLFKchB fyF3l1SBX//DD/uz5xlry7Rq0DM9rBvPrON4naR0MDNdzM5YMzLeMcZhX9exI3A/A8EaKS1ZcjQz dvqF6nVS6INCppK0eaYy6GhCgFcqRU9Nh7kJUitWWmkGZJ/Z8Mb8YFyIvos7ko9k4XLikKLatGtp KNq7IzAV35WdQkqcOgdtZ+XjE4L4tBnrc5ZsmO46XOZ0Fae90ie3J2yPxV0ua5CWyI7Buxg4ItjF lpBjy+EnPTa7x0cUJpk8sTuHXBylb+bWk9O+v3z/0NHncW8ipGCF3+H8HnVKRJq6qww+22rK2Te1 l+TnnFnr9pYGpvYPn5LFNVUlxSDjhXSFtGw4GvbS1C+uytqV6KV8QSAHT6h3nZ/v3qTKsJpMkKZa /d9LiWsb60j+sy8Bcegv3x3FNAXw9Ux0SaI6oOTm7zIhRzbw9wfEIYfTXm7qI6GdSY8Q89OH5D/8 eLIkOOwySj/XVEfvTFYLCnrleaE2zqStc3ml8qd35ifOFxJ4Pnn5RVJ7yy2fIMdb7SR3pjSWEvA2 Ae/3me6koRl+wmpGviJ/mJ7RKa3ZqNNbkEgkduqjGHVaC5KIuJ9dnK6/wwEhX5B/G15dOWeKDMcq RLIu6cnN55OsrzTuIB3moEPjxGJYOtj7AWYx0IvEIv0tndniK4YXN87cCBnCVZizZILESSf4LTSe +sFXPEGC35h6PXDYC8jr/fz9TEaT2WwWOb14guwJdiErxu0nxPSey3enJ3/7ep4vUfVRneCdL4Gn VY5EfPdVj7scZr3WLBjpzPz155LD214cfsuq7bk+kPLOfu45T4JduGFy1CNc03WXm96Ax0JrL5x0 qVO8tbwuTSJvnk4yhw+8JWdYIt2jBL5dAt9+n+nbLd8oc8NPz0WPnDm/cv4oBdDLKAFKgBK4dwRc xqeZrx2cnp7unWo0Z0rgO0yA9pm+w8ajqlMClAAlwEnArGv7S3Oz0Re/CjWioJ/NS5jo0fg0pzAa SQlQAlYCtM9EXYESoAQoAUqAEqAEKIE7ExiD+ZnunClNQQlQApQAJUAJUAKUwHeMwL3oMxkNsO4Y DQ8cAWr3e2tyyv/e8iflztcufNOT8qXxlAAlwJ/AWPWZ4PcR3B0j/Et7kehtWEXuvghEPXlqx1fO yPR9bQdyD+TmVh3GK/N9Z8PIclmLcp/ZfRSAGQNt21aZu+OTC6O9/N7Zl8B/pL2+H344CgPdm0sI dgFltFfrd1fmvlSRu63q8BXrLKTwadL91X7ygqa7Wr3tAK5B26rr75P2n5f+NDElAATG5pcUunrZ Hxeg2KbaJTGulC0mPC/11xqYhnpMfuvump/bYzd6ur3O9SRfOVzpNR3vKfC6e/Gyn6+Y6HYaJNfc 759jrnJZtbt/7G65sv1PS/ebgmFeco0xQZldFOUZ7S+tBkKoY/K6p6Lsswp5iP8e25eTP5e97rGe HtL83iTjtAvMHKCphtUw7aWMfkIfHsK0l4T09pT3807v5f357UqsYcDkzUnz7337fz/DorrdrwTG ZJzJPNAJE+IF2pc6cSy8KEaV1XvzP9JdZ32x6LTMOqS6gRs65zd3Br1Wq+fxWKLTwzwpHqV3p6ej zo77Fpj36MaNAa3jukh85XCmj1pSXgKLyqEwf5iyaEA7sgD8OMDsLCDEgsx6Z55c+uPyeYM/Z7ms 8Mbe7taM7rzRd2rVeGnYIbXaWLyzuXPEFWYw8Uj+MUuqvslpkkHq8c6L+Y24njPiLuzLrQ9nLhDJ 7Sdc/DntdRd6Yo3A35gJwEja2eJJfmg777ol+6f7+j5SH24+rvnZjkn1CJ834CpmS2jfkuTrdDe0 etxswAR19sSIyy747C28pKQsTv3NH76Bf0vZDhNEkdJjsVzysSzuwJcbtxQ+doxcuM+UdQbXID+O GsTNjcSfFM+tJY2lBLxGwPvjTLr+5iP1sNwJ6uo+eaypy2gQPB6zeLoIZ2ToP/ZsaR4KCEYTX1Ct X4O7TQP16X/e3D4+AmnxQgqykHhVP2yz1Tn46d/QXytXJhYzM1zDgm5N6+UxE9wprO069spBvCQ7 BKmkoGztlrhgYdsnubPOnIiflPeXjQvLSlft0dYlPNlatDDSjZ74eo5gbj6dn3pKYZ1HO6BA/WIe KMlXDjm9byBeOU0p3c48ignSGn/7pzimvHw5tJ3dvqp6q22+b5SyqGPfwulwO+PQ/7bX+JPLNeZ2 57CVmyifyJIMVVkpbrohlDV+/N9PTYdBoytN25Z+eDhYIJ3ppyzDE6OnNWZZ+WuvVr9xovSEFiWE iWEk0E3Qduxdvr8IQd/3kW0frlnqa+ncVvzLOhSsMYYV/qaIl33d6ENSgOQnHPUObrHEesrTDy1t ucWrThhRwv8teh69n8hMrF+y/HrmHNJaHVx+SBrqc9s+cNZ3RNaHxIfEk7Mena1OTzvXGCFJEGuL lbipkVWuL1/BzJNOku8YHx+A6obim3JqY3D7NqI9xKqYz57epeqohb3B3v/ZXlk1JWrjmkg8iTch vVM76SgfC+MKfLlxyYA4Pna0ifD1H+/6tIzLxd3Oc/IHSaR4WyZ0SwmMIQHvjzN1nytIxe+YkLp/ q+y4bOXHyUd67c9VgpmSCA084t9gxpQgkY/gllFdp1WhKWl4ybl+lDYFbmbFJ69oYVWEZ0sTi40p 5Uk1qkWF8dr82JItbfb3+iOY6LoOBFXgDlPazMKCKfFqbf68navP6pDIVwTrotQNaOBF5DhjndqI unR4tVq3eo6QjiP0bR2NwSHyyuWNqtg0NJSfd7p5FHLunK9EXhARj4xl8gam28OTAzI2v4I7TCmq ta1nFhcCVWTG5eXW33v83ZZrDO3OFI3fH722Gy4oWdW6fwpCQ7vq+9lBw3Fq8JMhZRnKlk8BbFb+ hr7D8JZE0a+KkIiLu5juLLvaNFeevj7QXQIh6jB/QUdH/dl/fjUOH9apkf94X1t331P7cuvDlS0T 585PRvD3xP891VM0eTwCdMUNiYkNtSkh2OM+1UB1IwXuesSdmuyfpPoOQzHc+rjjw5U5oR75i4Kh sKr+YuX47IKZKdBoraxYVDtgJrZXbL5DSBZRWDI7rQ4/AeIFxJnAYReop52tWYoe3ITW9Si2tuSf 7LbD5ErvTr41G8cNb26OFzvt87Gj04XOByS7EPiT2zdnsfSIEhgbAt7vM0UlVfUuLwRt46PP6H+v H8zR57Cr3sIHTCFJuzMPvgQP9fYgjvvPp6HdkZVsKHkB4iUvvJb8Kzgp9EVtTeXsildXr33Wph1g 9ouPXcYjAJyh/R/vQTwsuLZ7TU7extqambgPpursC4/bUs7kaEKSjb8ot1/rRk97Gucdv6i5q6JR y64PFMUXyvAp5lbLV86d0ssaM17PW/0m9BzZlpUvB+Tjz6xurJSpXlG2XYuOKEybM5MpCJf+3uPv plxjandnG3lyZK7/ZA+kq2378NPrsFW/c64VNuGxmYyfAP+i19cpwHtY/i3NuJ+Uvai1KmOfflOl FA7IQRyx4u1FaTDKKZsj+K/9C+YdPJv8XAkkL11dMj+YnVLQU/uS9CFl7sZPOPgj5MZeTBae6ol8 wjM3KaEOwwqGjS+f35dRq5fr9zGLNhJU5fJDQlJE9k9SfSfp44YPd+aEehS1MJ/xk+zuzKK8NfvO zAZPUb//RS9JPhsvnVlTtd3XxyIAACAASURBVD4nc+Xum2vL4wNm+zO+wGkXWMF4TcY3g+tLQauS tTfhxdy+pChWQ870buRzlosvN04hTCQfO46QwrSdOJbEjdiOEewyIgcaQQmMCQHbs69XhYvHPwTy AoUThD5CIby90hvEIvsHf2yO45wH48VsI4IEAhOzGO84H5GJfZof/9isRx6F3knl4vLWK4OLw8Tu NRVBfkzww++54DMd+G+6jfeYP+xf24dWbvXE1zgGQ9e70uMZ8IqwRrZswlByqioDjUoOyCTky2rM ovCHcuoY+bw5+ExLeVqOehF849zYW1xnRMXvCAflmX5k/UEjr/AnlIul6CW7W27UN37UL4z8eWzM HVzB0XiO+0b1O7B+syC+63xWV0C81FinOlt1IynK9ibJyh93mBj+fr44n0eCcUdUKJmKlx/0G8ea CnZHhrBHn0Cnynb95TXcyzfuyToBg4WyuZPt/u+5fdnbiqs+I3NkY+7kJxz8Cfbi74dsb1CSGMuY RCiwF5ZDWTf1iCO1NYrDP9kzXPUdRq+Zk8763InPiMwJ9UiMrMOMZmhbfBArNmicn4l9mhvRXpm6 GcnW9ghJZmw4slErZhcqxmc47AKxIt9x8BeaQZzEKbimt5aLKN/pYvuB59zsl7jsjMqOQIz1ruH2 n2gXHxFnOyYm2sVFQXpICYwJAe+PM4Ga4slz8SDPubxtx7env/WDwO2iw/D6w9J3oDI3tzK/ChqX oYoCvH+gT99W8XclfMSzp+b4V9CO9CsPqy+ChF217z4UvRKX+OsmjTkAvoBsbavIb6812V9w4HNO YeqMBDhWHE/eVnP4QFX6gha4Z0kXT59kTTSUlV+1Y8v/ZsCh6tzOeg2+IXHrab3AdWOy4F6XVPAQ MvQ2qE/CnZCRg78B5SWHlL7v4rtFuNlVvtNQX3tqN0AB+dV9ulmP8+OAjO1lDYqyW6Lk+NxdzxSA RCTAI2Lc+n953lv8SeXyrt0vfLRpwcdrVx6P/XMHe4/C5eMRLH2730lVwQXGaGWO6diieOb1Z/6m ysMXbPx3nqqtPfUOpFGd237sqi548mOQfOuR5TtO731p1zzcE9KmHiTnLnxYmgJvVbR1slhV6RR4 MQe/Ekp4VIT42tee3kUfUmGJfsJZ7/CzBLff2vP10A/Nmvpte5hP8LRFW6BS32myDG4/1Iz8lpop qJHYPvg9yl3fSfoQ+ZCAEuqRLXnxjOJ1uXuWJbaDR8iemR5Kks/Gq1sWpFftPfbJbmgPg0oWNenh cY6rPcR2MdTXbN9yogL2DtUWwPwjx7oYVyekJ8q3KeqyJbWTJG4ul9sP+dkRLrNc2QvusZ91lQr5 AZhxoBasTuJGaseI8XbN6A4lMJYE2KcWb+cgis6ZLatrUeU34dtTymxVYogvMmpOtyiYd1oQV6fA fZq0Xy+a3Mh8onSivXWFH7z3UH16PQQ26p6Grybsu7628uXKlRkfYyEQ0qJPzh753MWeQ2hiZGaH bNwmVUZ+A9PJEKSpVv93Av6GWvz8AvjqN6v4fBb0HnAwlrUMvjk/WIw49bQJdNmKw+LlAUjRn5V4 BElDstMk0jItK0fISw4Wy5Vvz0X28yV0/srfHjHhL0BBzzPXcpNil/LigNhfI/fnL3gnHwtB0pJE mQS2nPrfeN5b/HFWXOXyrt2nzEhGZ8EfZD+RjGqYyaJp6Ge6Saj4C21+yGXcBYKgavnkN4FfsSca uz+bjlj+ysbrry2NlTdqbsLi8Fmn6pAA+yak/1tv/wbbG2dGgMMf0cynA5ByCP0q5plFV7Mzeoql P8SfQ1/o52ffblt6V32mchfcN4TgJ5z1TrYmFAZjuOzF1w/1X3bm90APH4K6uAXgpK1/dsXE4XEU BzLMrrt65JoWfj7WR/JPU8Q+zvqu6+LWh8hnZKZsDKke2dKnjNfBV0dSiXznqvw4sImYm7+vyBpf dj6Vaf2k8qd3RkM7RrSLqbN9a3E/zga+ZwIHzZ6evhS+MbdwtZ9gR5vdXeXb9HTZktpJEjeXy+2H /OwIl1kGa1oUrKNAyYqhrykJz05KENr0d23n9cysNCPbsTvZxa4h3aEExoLAGK43Zzbq9BYkEonv rl9mhp/mmpGvyF8sZIfc74DBml4idr61GHVaC5KInCMZUbz0hDkA0TixWMBRJl5yIGee6T3nACn1 fv5+JqPJbDaLxBLHNyVu9Cdw9TxfqwCe5SJkCxMukOxuMRiQ0DNnIAnnHw/+cxuJxZ45M/ww3ugn Yd5HA3A/ZxMQ8iaXl3ABIZq3HJ724i2fU0/+fsgpBiKt+rjWd1JyW3oP2hOQPLIewTwgHX/eM2ur sbA7OzNEMNIPSXys8Z66EFF/0gm+8q3pPebGna/X7ehgF9BwJH9QgxTPrSGNpQS8S2AM+0zeVZRK owQoAUrgHhMwNkcrYtnxSNCkYNXNvEg8hksDJUAJPCAEOMZLHpCS02JSApQAJcCPgCCiLKnyqlkA A81GM5pzp5+k8BNOU1MClMB9T4COM933JqIKUgKUACVACVAClMB9QOD/3Ac6UBUoAUqAEqAEKAFK gBK43wl8l/tMRgOsp8Yj8E3PQ/R3Kqm3OHhLzljD+67oOdYcqHxKgBKgBCiBuyPwnf2eyXhhnUKq DKnUZ6xw/F0Y0NBerX+v8WSbHgUFxsDPnsOt8wsQ098dwPv36rHlQOZ/fxHxnp59bQdgQV+Rn/6h 0F9nPhXlppi6q9XF9Z8iPz0SJ2/xbP12/PM6f8m3/WNAvLCra75MMS8i/5iXlq2AKRLGKNyrfOFX Vwa9HgngR7hmg8XXE+AGvc6E/Bxm5R0jJFaxnZ/v3dNySRS0eAv8Dn9ss/JI+qj9wfP64pEeNBEl cH8Q+M72mdhZOr7WwKS8ji2LWVMNq4PZ2UY/oQ9nlwQnpLenvONO5ye5M2CtXwGeCJoJmjpjgjob 1hI2HD6wetu1QesJoyb6yUOwBrB1bWAmfaBf2OxHV25+Zmkoed4am1jvbMeOg1W/u+bpnXLeUYr3 9Pyy4z0Fs5Ai6pi87qkoNz+X6r28P79diVULmLzZkz6Trl72xwUotql2ScwdC+TNBFz5aqzFjJf9 fMVE8nRod6XGPcpX23U48+BKZmFdRv2A0sHfpV8/mzujGuo1Cgvf+Ji+9vDAIBrSbFx+MnNOqK6v +v+9m2xd8zukULk2J0p8Y/eeVbvwkjuatc+fXHV7z7QPD+NldmYUbjCV/uHKYLAAaYx1CQtai56K ZBHxbAcM/2hKVfSwnnNf9JlG7Q+e15e78iV6MSXw7RIYsz6TRQfr8IrFEl/jDb1gothpaiXDjQG9 eILTvEFQaoNeq0cidlYbRwg63Q2zr0Qi8oUJe2B2E+spUYwqq9fsH2o7tl1x6wrsyeLUVbZFmu6Q Hj9qc8m3ybNv/6VtxGv9MjNw2iIjmMVvTZorKlj61x402n/B/i3n9KomJazzatq41APi3HxY+Wb9 Da1ZPFE83FHk5safg11/j3ZI/N3Z3Z1gT8tFthc3B5KeZF245SAUs6Tqm8TmZdtjVePHuTdi5MJ9 pui0FSULVH4jUloMWmbeKckEiV2IeaATTyZtW4rHRTWSPmyykdxcLndzyJlv1JLyki+CsobC/GEi nAGdn8f1FIZwtANa0YSJw65JyNvb+RKycYm2dL5SsVIJc7xKsueh4jKYW5tZxuNfNxphNk5cr699 KjNaK/I/vjYhffO6t5Nh+lQ2wIrj0p3C6/IV13tgxWUc5n2tHxxqwm0CHGi+WqxlrmXagWAtuyo2 TsazHRAu3XizdEdQBgok9Vfd+wPO0jlwt29cfshe55J+1P7geX1x1pceUQL3NYEx+Z6p7ez26NcC J5UEiV77gd/2SS82dAKDs9Xp0YroZaUvrVOI8KlXlx1m1wSA3lJ/7Utv/UC0PShou+gHO7Y1wyLh TGDjA/84KWi7XwKswfJHWTOsOYDTH0t4NVq2J2X5wQM6Nin+az57ekf+hydhb7D3f7ZXbjvQ1see JKS35jtSPnuVy9+Y5PJCWLQ+oKQ3p7dmyZnGJQUIdTFpxP+2+Xr3+kp43ESCgqaM3o9/Hgu7Mc8w 6ZG08jfdjbAAHIQeWVUfYY0IN3wsbblvRQO6l2pqa2teAp6T/ijacfEGyCNw48fB0IdhJiii048f PlC5Lhryeiu3zaELiDV3DiSenHZ3vtThiHe5iPYicOD2k/rj4IcJUN5tZ5trYf8tdh+7KEmO9mp1 bumyaMWylyqL7DdRh5Jw7Pr6j3ftzSNz8+nc6NdEQSWTwP/93tp2gXFmXX+zsr4KRHR1nzzWdOzw J9Wdeif/d60XZG4cepCjyPn6BuLOhFK63S8Q6qki/axzfXTR50rTNnDOhLfWpe/wg6KJXh1Oz5m5 t/J1Y0fOfM3958rwiZTyjKLdmTdLoC5/fRtA2+vpybR9VZtroBZLZ54siQvv/PtubGuBXP2y/uYm lQz2jVlHO0RbMk7a0kyPWlSC2wSYR/4XqzN+d70yAqaJR/LFTark4fFCu3wP2wFYgQ4vNaetKjiQ nqBIWFex44Jb/jh7QiC0n9x+CDII6fn5A8gZRX0hlIBGUwL3HYEx6DMZm1+p3qpGKaq1rWcWF+Ke hBk/dfmLgtVGtaq/WDk+u2AmLMmlWlmxqBaag4HaZ0sTi40p5Uk1qkWF8dr82JIt+J7Nxg8hWURh yew0vG6XdaV52BHMlERohurqYCwLjqxB39maBasZwBGsObC1Jf9kt8Z2iiu9O/m26xy3PkGT4F4y 9Ome468mHl9w2vxU5aLCqcy7NqF4YnjYj8Ig8fhJM0NCJ4qYEQQBkx5FPBoSHpf4es1MTOLyTYc+ nqNwN3yQaPJ4BOiKGxITG2pTQrCcTzUaIjfEk4OPIAw/Z6vLLjdf1CjVQ2o0fgK7kKazgo5HXDwJ dne8zHmfZ7lI9iL5D86MQ0+ByF9trIPy3kT+41G7GrzIiB6C8SCCHEPfYXjbC2OEERJxcReMU8DS ffgP/6Bv62gMDpFXLm9Uxaahofy8080gpPtcQSrzyg9GMmTHZSs/Tj7SyzgJQR9Y8YTbH3gqRMzX LkciL4iIhwV85OyiL0R9xoFz1g0py1C2fAo4py29XY7zjrfyJdrROTv7ka84CPdokDL2rXXbqt57 +Ceq1t+mSSDCWk/Vpe/l5v5vOQwaRQRNEiJdfSvuYhX+YkuUWCgJXbotDposdKitSygJC7SmgRVn 2TqeMiXQ11cw8UdhOIfw0JlOw+o82wGQwASVor09UKBRdmVJS1LxsyKRv+0Kly2bnqP95PZDt+0t I9ozf/BefXEpDz2kBO4LAvb3A97Txsc/BAtTylS6tAkR0RGFv5wzE46jFuaXn1ekarO7M4vCEVpU 2QvL6L7/RW/oEG6nIFy99tl1NMDsFx+7nI96cbx0Zk3VmgQ4u67jieWqS/7MOz5hSNLuzEV7d4hS ne5e4jUZ3zzftTuwIqNk7c1Mh+XAONO3NRHlM+qQ/ijzW/ApYfDjKxyysN9IHfpwVgkm5sd9oSFh qB11Ql/HMrj97d9dQPZhCB0KTNm1ZgWJT0JceOYm5aevSZUopfHlfbCy1dtGAywd31bzX5zcIiMl vDgAnH1/GFx5QCZrVyhgauMl3Xmx4aTCs/GcPBHB7kRRPvzKRfIH1o6Qi4v/AAdOPeMSi5r0XbFN qshJ0x4bF4+a6gqXn8qcI2mr+T0nz8UduJ+UvagVvlEz9Mni3l5pnwaaWDSHEw7+4Bc1d1X0pyd3 fdCCjMxwFXMuKqmqd8r2sCNb46PP/OX5n5qMiP3cmFwubm4OeXq0S8rXdrGsMeP1ONTcpMCDphBI +uTEZpZ/sjVVC+mL4tDZRsU86FK4CV7Ld4QdCxg7ErMWLzi0pPS/TmUoh5T555m+718Lu+U5dl9X 9ZzoEjC2ZW3GDLXizrRDYIqGG51BB7vC62JrO8RsblvYc4YLn394a9L8uFCrBNd2ALn/wj6lKWdf jMhcfeCZ5Hblic4/+vdzt5Pg5w4KDu+S2zduPySnZ2V66g93WV+GC0D3KIH7koBTi+AdDX2mpcCr qF4UjDSNvcXwEF/8jnBQnim2PZ6boQ/hg0xM+xI0zs/Erk8//rFZjzyKzKhycXnrlcHFYWJTN6OO n3XIQzJjw5GNWvHwN9Ss5uNc3vqLmIHtcT4u0SDKNT2rACLKHwmD0USy35T5s6rqj0KG9v3g1aqm nNoYNisfVk9HfdgYsT/obOms+LsSJP44LAxZuq/Bpw+C+GA2B6NG48c0zwQ+OBX7NZgkMZbpaEGH CeKs+o/gxkr1nAOT3i/A33qn6xmAwTn7fYQVxvnXlSci2p3zciaST7lI/tDK3q8IHEbaHTKOWfi7 +CZVxsHVh6DvElCSOgffdUg8/box9EeC8YOAUDIVW81vnNUpYZ8URviDoetd6fEMJCmokS2bMJSc qspAtg+YxOMfAjGBwglCH6FQhHR6A3SbSPrgDLm42RQxtF38a/dtNG36k5ET7vBlEWe+1s98kJh5 PvGHwusYPcn6sF0Ea3rsRrZy2VRy3XopX2c7CgozGDu6ZmY7NvS9N+v4yZrNpn3B5ramHbOOb0XG v36pR+Ei1pgy9e+ronza1r06iymv+IcPS5FW3XC5Oz0iCobKu272giSx2B9Z8Kh53WW1AcUIkXkQ u1/sZKYRYNsSa+Njac9SyTTRjeeXRTMqjGgHmFiuP6w+jzEyfSX+OMnNrwfJ/Llk2P15RPtG8kOr /BHp+frDKOsLdyFoLCVw3xFg73xeVcvYXtagUIYUnHkud/31KbOO5yMB9IXsoXhG8VfyCbAkODzV y56ZHjrrkZXorBJ93aQx/3S2cOjU5xX5PYHP+GZKH8fx6pYF6VXlz028faIxo2xI2phzPk7Qd+Do zosIteDOVkVB5SWE5mz+JazTbqiv2XG0vRpiD9UWXBGheU9sYdYD504/iyR/ZHeL0b3v4rtFOMf3 FFVfTRKOu6yutb0rxPme7L2A+0TaCvmBS5Gz09PnhtvSK/P2PzzYVYzHMAQFsggx8okqkn/DiOT8 48rHrKlXVJUxwou2VF4S+Vl/BM7qP5IbfJbAi8OkgfotexcUw6vPmaXy9gxFQ2xje0HZSnlcMME3 LNw8Qy3u7e5aWL7lIvlDLGNHDg4kPaHDIZ7/6uz4uhYVGKXwuXXs8z6J5+TJj4HqW48sF2rWd32W iu2oTT3YIdvgNMroUDrLlb1Hd1/SX7X7QxDzu3GT5TYkkgoeQobeBvVJGNBQn9tZ/9OS+cFC8eS5 8E5LdS5vm/nJni+2lg2hygzTMkK5SNysGgz8ddaRRNjfv0kfOcFBK65dznyfvMH6ufKdhrTnzUdx Kc7trJa+uZigT9/FPUy9UO48lboKvY8H0M5tP/bjXUun4r4mZ/BKvliygx0LklPcj9uYbsMbT1Vi 2b+rfrF5is9DUuAP3QEfZKunqp0fVT+HPmDKu/3wj3YsS9yG2mXKBqm/rnT64KGtXWD5tJwnIpFP G+4+a4veqAmYrvsoCyqOZGoIMpyteUPBPBcd+kB+PTgI6S/BBfBdv03+iHaAEw1CnU1lDM/8lIqH Xpj05drz2OPip4XPmsbdThLEIFL7Npvgh08Q2sOpnfz8gXd9IRWAxlMC9yWBMVg7Rd+csD0WV3Rr kJbIjmXODYfn1b07AlO1KCVEpuxXSSXynavy5zMTAdzoOPxy5fBvgNOiT765LAlaXOd4qfzpnfmJ 84XGC+kKKf7WYDikqeW7owS6vaWBqf3DsdlJ3UVx4YiYniB/WIDT3oWaddIG3KI6BHb83Foue7ws rqkqKeZC9Top9AXZIIhPm7E+Z8mG6YQOGZOKm4+ua29gRapdODTcrfLdkcx4mzMfZOPGj8O0Xqv8 7MWNT3WmrezCryfK1w9ugO4dZyDxtJDszikF8S8X0V7cHEh6skOVA7XRJYnqgJKbv8u0v9vglgO/ LajZMq+hGBdDIIXfScE2bVHr7oWR3AVjZ4RyPCcpHcxMF+sv5O6SKvBneUgakj3PWFumVZeuH0zH nA3VlauTW3B/A0LKbNWOlUtBK059ENkf4Nq+ptyw4wr4irlpTZIvI83tH458e2x+Hh9RmGTav7UH l1e+pPv12HBOfbpt6aVTCtcip/TkrL2Qr9U7NdXRO5PVgoJeeV4oOT84o+vYEbg/yyGJtGTJ0czY 6fZ6KpWkzTOVQYcVQvbijqKnpsPcBKkVK61WCcg+s+GN+cyDRN/FHclHsjAXHFJUm3YtDUVs48ZG 2f+mxKlz0HY+7QD7Mg6aT6kUqZks4ktl5fAMBjI5+RNqKVbBOb2t/ST7IWf6dpt9PfQHMd/6YodF dyiB7wKBMegzwU+UdXo/fz+T0WQ2m0Vidk4B+N1yx5/3zNpqLOzOzgwRCEfMJgdXwQfdviJ/mG7O kZw1HmYZ8OAe4Hihh/tjLd9jNe7AhySHxI2UfuziQZORdh91dqRykexFSk9UwKzXmgUjp5EkyDHq tLfh1czdOiHM5YjGicWwxOuIYDbq9BYkErlkQdBnxOVMhOFYhUjWJT25+XyS9dUvdzrHWEK+jkkc 93np43ih6/7d5otntdBdbnoDurPsU4prBq7HBu2AXiQW6W/pzBZfmAbFuZ1xTW07hqtwu+Q4NwQ+ hXOH38D6jpwzxXbhXW8tOu0ts8h1plO+/K3pXVyX7Ifc6cmFIejjpfpCzpeeoQTuDYGx6DNxlcTY HK2ItT2ZoYJVN/MIny5yXfwAxFE+D4CRx76IeKiy6JEz51fOH/u87nEOLuNG8DZzRQhHT/Qea0mz pwQoge8XgW+rz4S0Z8/WXDUL4AHbaEZzpM9GujxOf7+w8i8N5cOfGb3iASZg1rX9pbnZ6ItftRpR 0M/mJUx0Gp9+gNHQolMClMCYEfjW+kxjVgIqmBKgBCgBSoASoAQogbEnMAZzWo690jQHSoASoAQo AUqAEqAEvmUC96LPZDQYmGkev+Wijnl23/Vyfdf1H3MDeykDynl0ICk399woH/d86FlKwBsEvvU+ E/4ltkj09mGXddfgdxwuHam+tgO5B3Jzqw7jldU8Dt6S43GGtoSEctlO3+12ZLnuVqLL9WOsv0tu jofaq/W7K3NfqsjdVnX4Cju7p+Np5/2RHEbnJ85Sv8Wje8d57Aqpu1q97cC2bZW526rrXeq11zL9 PnIbHRzu+kL5jI4mvYoS4EngW/+licWE59P9WgPT5w7PUqyrl/1xAYptql0SY9df0/GeAq/DFS/7 +YqJ7qY1sl8Bc7B4SY6DSPtu2+mXZp2qjRcEa5CGiQxGRs2La0+ls3MbcpbLfvFd7nCVi6dIw7ED q/OuDAYLkMZYl7Cgtegp5+mFxlR/sq5mTTWs5mY/H/2EPpyZssse47TDxWE0fuIk9Ns9uEecx7SQ vZf357crcRYBkzcnzR+u117Mdcy4dX6SO+PMCajXNmU1dcYEdXZRlMhw+MDqbdcGrSeMmugnD8H6 OW2f5M6ypQ/0C5v96MrNzywNZSf9sokYuy2xvowZn7ErC5VMCXwXCXzrfSZRjCqr1+wf6jgVm3mg EyZxgzlzHQlGLSkv+SIoayjMHyZ8GtD5TWDneXJM4ro/OjkGvVaPRBLRHZp6k/4rmDoYloJxDLBm p7XPxFUunBJPsiKSiH11AzeQeKLj4p0e5gsyOMtlV0OnhwmO/dhFyuyRI3ZM166o1KA8o3+wFq// 4BRI+jslcjrwXH/2Mm49b12Bs7I4dVVSlJN0rgNODnf0E756wgyTNwb0pHl3zPobWjMYcthb+Mkn c+bmw8UBx+H5gcwwyZCv8YZe4ORXpCv4yQcKbuuFI4fIhftM0WkrShao/JyXZ8N6GrTMvGuu8xth LUmcueLJ3KB+aAe0ogkTh02C88V8uDLFGTuGf2kbYZ5S53odwVQPk4atMrbUGu2/YPeWc3pVkxLW bzZtXOpBS8pVLptwR55sHDd/Un1xx8eWh/OWWz5/v3KWSo8oge85AQ9qOh8C2o69y/cXoQBYoGvb h2uW+lo6txX/sg4Fa4xhhb95exH68NnSPBQQjCa+oFq/hu026fqbj9RXQSZd3SePNXUZDYLHYxZP F4FivoG4E6WUbldiFQRpjb/9U9wEosKjkGPor5UrE/GyIRAkBU3r5TFE+eau60okKGxNkb74TnJd QGHrr3/yytt4kQoIhv5jruUaqE//8+b28RFIixfokIXEq/phm63OgedXSO95vohcLqTtOvbKQVkZ 0w2SSgrK1m6JC3a6cbDqMX/FG393PfjgYpjmW764ST5veDyPW3+E6o+nb77QDosGxieUP3Vj90tf tAcbYf9oXtx0XvqDfIKe5rOnd6k6YAkaNNj7P9srq6ZEbVwTGcpoy/GHzIHoJ7z0PFudnnauMUKS INYWKzFSWeX68hUREmRpyy1edcKIEv5v0fPo/URmQvCS5dcz50zklO+W2wg/YQrKycc6njEp7y8b F5aVrtqjrUt4Eq8TDFe0nd2+qnqrfbazlEUd+xZO50Bmi+KU71ZPLv8kc4B8fP3HOz4FMTmbm0/n p55SWPUMKFC/mAfOT+JMigdRHPULoStN25Z+eDhYIJ3ppyzDixqlNWZZ24dhPgEpMtTbZdSsfeZY DmHl6Zjk8sIvpm1FJb0vrmhr6RyPTs07fpjRX/xvm68nfXUapgKvExQ0/Wbj1MBJEB/zDJN+SFr5 m2NTL+2e16BAPbKqPv2KUO6qRywXmSenX0HXkFRfOPkY+o49+3YerFs1MypvoV5V+E+ww3OH/uN1 WEKAIJ+3XzGU6B9K4MEi4OXvmXx9oLukrhtSh/kLOjrqz/7zq3H4sE6N/Mf7QndHMFMSoRmqq4Nn QBvn7nMFqfgdHFL3b5Udl638OPlILwycOASJvCAiHhnL5A3224TDWdsubzkDtc+WJhYbU8qTalSL CuO1+bElW9qY/odNICYFawAAENFJREFUpOPWbIRnT8GkaaHTwiDaD3bw3X3Q2oUbUS4fwS14eNWq 0JQ0vJRYP0qbIkOo+OQVLeKXLyKVS9d1IKgCd5jSZhYWTIlXa/Pn7Vx91pmcYwF8BRN/FAarbKHw 0JmOw11MmhH6Q1lF/mpjXZ1RfRNsh9rVYDUjwsu889SfrKe+szVL0YNNX9ej2NqSf7Jb46iwyz6J w3AyFz/hqae/KFhtVKv6i5XjswtmpoDRVlYsqh0APxVNHo/gVHFDYmJDbUoI2BN9qtGQOBC5YUU5 OJP4iHxFePwDL5nsO85YB2OEXTpm+MPY/AruMKWo1raeWVyItTEz8Vg+RyDJJ+pJ5EbgwJEnG6Vv 62gMDpFXLm9Uxaahofy8081wgsSZFM/I4uCG0DgwSt2Qsgxly6cABmv7cKNt+yzMRyqPLUkzKlXQ +MByN25WVfYJmgTPZkOf7jn+auLxBafNT1UuKpzKvGsTiieGh/0I1/fxk2aGhE7ED3JgQyY9ing0 JDwu8fWamdgCl28SKx65XASeRP5u6gsXHx9BGB4XV5ddbr6oUaqH1Gj8BPwQSpLP068wChoogQeP gJf7TOKIFW8vSoPFkmRzBP+1f8G8g2eTnysBqqWrYS1SX2FI0u7Mgy9JnDBHJVX1Li+EqPjoM/rf 6wdz9DlOq5/KGjNez1v9JvQ48JLp5MBXTltTOYz8QLh67bM27QCzX3zsMn5i5QrCFb8ZvPkfG4SW W0zreNuEIg++fFP1sxhIzFEucdx/Pg33XVnJhpIXoLySF15L/hVO6YuI+Vo6t5cuW1e6zvZv2boD hyEvUrna//EeCISFsXavycnbWMu03SpVZx8iyMGFwmuwo9sWtr9quPD5sbN9uLwc+iMUl1jUFAvU UeSkaY/hexIqXH4K1g0k6g8puAJRTyRek/HN4PpSuKhk7c1v/vDNPrev50gcbHm6+glfPaMW5pdj z8zuzizKW7PvzGwosvr9L3qRT3jmJiXYElYWa3z5/L6MWr1cvw++ayH4D4kbXM/JmcQnPG4Low8Y TbLxF+U4fzb4+OM1YpFSpnpF2XYtOqIwbc5M6ymuDUk+SU9SuUgcXPJkfYuJ9Iuauyoatez6QFF8 oQzHMOdInEnxcB0nt/DYTIYP2L3o9XUKsBbbPnzZ/Ve4pED28etLMndvPoMdV1KeOQc/4bgNyvwW rKQw+PEVC5NCh6fHZOqMVXcnASbmx7+hIbhP1Ql9aEK9I5aLp1/BisSk+sLJByL3/WFQBV06rULR jwqWdJ/PyJkuILc/PP3KiQU9oAQeGALEV12jJhD26BPoVNmuv7yGeyHGPVknYHBINneyfeCazXGc 41fd4vEPQdpA4QShj1AoQjq9gfk6Bz8UQUvhj9svfxj51zl/8MScdfrDS46JbQzHPzbrkUehNa9c XN56ZXBx2Ig3DPYcBGJ8S7X4MSnwc6vQupQem4KjXDbl4dlUYGK+JBrnIyLma+m5plWpBfHBrDyj RuNnZHcJ5cInRcCLCX4sLWjHLbdIctg0oAO+wtKepZJpohvPL4tjBHDoH7Pwd/FNqoyDqw8ZVSig JHUOBkDUn5FC+sOhJ5NU5DsOtlaVSBfb4gkcuP2Ev562uyMw9LEWM4gdn2DvoJLEWMb2QgF2Zjfy ObnZCsHBGU5x8THdxtcwf9i/rP/7TEt5Wo56Ebw2bewthsG/4neEg/JMsuNiKVzyEaeebsoFWHBw 5sBEATHWCsP12tD1rvR4BrzyrpEtmzCUnKrKQNb6S+JMimdz4OZmq2L+uMPEyDcxPbOb/9IgNNGg 64cNMt3WQ221Kjpyw2gu2W/K/FlV9UchQ/t+8GpVU05tDFuxRpQLBpkZEWJ/GIuydFb8XQmHPw4L Q5ZuQr0jl4uLpzv+YEdifeHk4xfAgAENe/CAZTjsEOX7iEbhVwwK+ocSeIAIsDXNmwUWPiyFh3Kl tk4Wq0rul2X0wK9pEh6FBsjSd+DozosIteChjYqCyksIzdn8yzXwSCeePBceB1Xn8raZn+z5Yiss LQ6rRz15490inFL5TkPa8+ajuGU6t7Na+maS0+fjTprzkrP48ZXorBJ93aQx/3S2cOjU5xX5PYHP +GY6SXQ6MNTXvHG0uwlroq2QV5yPlGbj9cY5y7Ukhm1M99TIJkPb2q88rJ4N1+2qfTf5WUK+gqgi +TdOGdoOOMu1cEYCalIpjieLBvKm6z5a2wJ9VOni6ZOQIJRLjuFszRsKpn0/9IH8enAQ0l+CC/B3 95z6M3ZB4vmvzo6va8GfZBU+t24io88sntymkvREwHPH0fZqkHqotuCKCM17YstS+H6IHDg5kPyE v33ZjItnFH8ln6BT9GA8z0wPNWvqFVVljNGLtlReEvnFvLRsBaBwx4GLG4kzmQ/c6OGdUVY+fOz3 zyzYVZ3bWf/TP80Xt5c1KJQhBWeey11/fcqs4/nwzYrD6A5biuG/ZPnQ3+BhXxIHZLmy9+juS/qr 1npx4FJQ0OItSQkmC+7tSQUPIUNvg/okPDmpsf4w3szq5soZnomYEyPiCf6JWq3tw85TqavQ+yq4 +Nz2Yz/eFR/9K6gXxadm1Z6HF9ZgRNzJ8WVEc/7pu8jKeU9R9dUk4bjLavjAjh2xwv55sveCvVyR s9OhvtvSK/P2PzzYVYwzEBTIIsTIh1h/mXxdy0XiSfYrQn0h8Jk0UL9l7wL8sebMUnl7hqIhtrG9 oGylPJZUf42tvPyKEyaNpAS+9wTcNCajLbto5tMBSDmEfhXzzKKr2Rk9xdIfzsG3W4vmdIsCD3/j UKfA9/i0X8twnwmJonNmy+DenN+Em76U2arEEN+ei9bPl85f+dsjJvylMHzSdOZarps+Ez85sUuv r618uXJlxsc4Uwhp0SdnW0dt2AiXv6bO9vzifjayrrirTjZpXTo8unGWa9HkRmaQ6ER76wo/Kdzv Pr0eAht1T8NXE/bxzJebjyQks0M2bpMqI79hJdZJkKZa/d8JxG/YTa3/yFcxKtX1F9dZS4HEuM9E tgtC83/2e2lLnTqgZJNtTWXfEH7cJkaS9NR3tm9lecL3TOAN2dPT3feZxti+VnOnjIcOk0oqke9c lR8nRrquzvwefN8E6xW3wK0/bf2zKyYKkHsOI7mROEcR+YifX1CSocoqPp8FvSIcjGUtg2/O92dm 6+jPX/BOPhMrLUmUuelpkvnjq0fqSSqX/ktuDsgyWNOiYAFBvS5ur0OS8OykBHFYvDwAKfqzEo8g aUh2mkRapmX0t/aZkAtnpiz4j2u8kds/Ub+1fWjs/mw6YtsHZeP115bGrhnMmF5ec/Af5qAXH52X 0aSwS+bc0VjlqPLPW9sBUIFJaer8x1YFfmyDgMslC1oB9V3TY81X1VWMBPFpM9bnLNkQzo4YsWkJ f13Kxd+voP3hqi+E+ise7GR/3ZIdPjfGLEVdanV/futgdlwEof7q+fkVoZQ0mhL4nhMYm/Xm4Af2 Rj/21/swCaGf0zssIlCzUae3IJHobhfv5SnHrGN+Cy3yFws9aPiI2vM+wTtfQrmsciRi9y9neOtn v8Cs15oFkhFw+OrvNT0JHOz6uux4qCfMZ9Hx5z2zthoLu7MzQwTCEeV1EWs/JMoncLNf6LJD4GPU aS1IInI0LqTU+/n7mYwms9ks8qxywQc5rJ+P9BOCnsRyuejt/hCqPxonFsPS3NZA4kyKt13HZ2vW 9V3RmQLF/prOo6tUGcHRjbXWF9B8pHgn7ajL5R3+5EKMlA8xo/Arcg70DCXwfSQwNn2m7yMpWqbv MwFjc7QiFgaR2FCw6maebVzNFke33iBA4kyKH1WeZyt/MK9l+Mry9Tc3uH3nO5zU63teLZfXtaMC KQFKgC8B+/Mf3wtpekrge0RAEFGWVHnVLIABEaMZzXHzU4DvUaHvQVFInEnxo1Ix+metJ3948abB iIST43705PQJ5O+/RyWfx0VeLRePfGlSSoASGBsCdJxpbLhSqZQAJUAJUAKUACXw/SLg5fmZvl9w aGkoAUqAEqAEKAFKgBKwEqB9JuoKlAAlQAlQApQAJUAJ3JnA/fs9U1/bgZ3NF5G/dTqcOxfFloK5 sFPkp38o9NeZT0XZoumWEqAEKAFKgBKgBCiB0RO4f/tMmo73FHgdunjZz1dMdDdtkmvhv7ReiFDH 5HVPRbmZusb1SnpMCVAClAAlQAlQApQAgcAYvpvT6W5o9XiCYpgYZjh3i0E7cOPGgHbkzMUu6aOW lJfAgr8ozB+mlhnQGoZFWPcMeq1WPzIaxSyp+ianSQapxsOKsjRQApQAJUAJUAKUACXgBQJj0qkw 9NfKlYnsLLTxAahuKJ5Zv8ncfDo/9ZTCOgtOQIH6xbwoZgCJkN43EK/spJRuV+KCCtIaf/unOGae a8f0sKBV03p5DBOvvVr9xonSE1qUECa2z+nrBUhUBCVACVAClAAlQAk88ATGYJxpoPbZUtxhkkUU lsxOq4MFj6zrN+nbOhqDQ+SVyxtVsWloKD/vdDPmT0xvM45EXhARDwtHyNlFC9j0xpTypBrVosJ4 bX5syZY2IzL0HQ56J1nRr4qQiIu7mG6WdXFMmxy6pQQoAUqAEqAEKAFKYLQEvD/O1NZUDmuHSWfW VK1JAK3WdTyxXHXJHy9L4hc1d1X0pyd3fdCCjMwwEPN+jpyeLZOsMeP1ONTcpIhlj9n0sH/12mfX 0QBeIxMVH7ucv7gD95OyF7UWLYw09Mni3l5pn9YZJ6GBEqAEKAFKgBKgBCiBuyDg/T6TiR3d8cPv 1SBIZmw4slErFiBD17vS4xnwKq1GtmzCUHKqKgPBArEIkdLj5chxEDP9LX9YcEvnmH78Y7MeeRTW c69cXN56ZXBxmNivG6/J9UhwCPwVSqbilUD9xlmVgH3LjfrGj/qFkT+PjXFcuwvO0EAJUAKUACVA CVAClMAdCXj/3dysx1dCruqWBelVe499sjv9rR8ElSxq0iOT5TbESwUPIUNvg/okDAKpzu2s1xhI 6fsuvluEFxVXvtNQX3tqNwwiQfrqPh2bHn3dpDEHhAhRa1tFfnutydc3ePJjkHrrkeU7Tu99adc8 PP6kTT3YYV2X/MJHmxZ8vHbl8dg/22LgPA2UACVACVAClAAlQAl4SMD7fSbfkKXX11amCFDZ+VTZ xxllQ1L50zujRUgcFi8PQOr+rMQjyXtuRaRJpPCJUsugiZRe089+voTOX/nbZ921uDzGsjPXblrT I1XGx8kLjq/M76lLi86YLUKhc+WNT2cjVJd1KrXYKGXL/7fefnZnyoxkZkf2EwkdZmKR0L+UACVA CVAClAAlwIPA2K03Z4YpBszIVywWO77/0+m0aJxYDEuhugbu9K6pho+t6UX+YiH+WMoWjDrtbeSS qfWcxWBAQqfEtovolhKgBCgBSoASoAQoAfcExq7P5D5fepYSoAQoAUqAEqAEKIHvEgHvv5v7LpWe 6koJUAKUACVACVAClIBnBGifyTNONBUlQAlQApQAJUAJPNgEaJ/pwbY/LT0lQAlQApQAJUAJeEaA 9pk840RTUQKUACVACVAClMCDTYD2mR5s+9PSUwKUACVACVAClIBnBGifyTNONBUlQAlQApQAJUAJ PNgEaJ/pwbY/LT0lQAlQApQAJUAJeEaA9pk840RTUQKUACVACVAClMCDTYD2mR5s+9PSUwKUACVA CVAClIBnBGifyTNONBUlQAlQApQAJUAJPNgEaJ/pwbY/LT0lQAlQApQAJUAJeEbg/wP/A4lk4nWb WQAAAABJRU5ErkJggg== --Apple-Mail-29--587040488 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Thanks, Dino and Darrel On Dec 21, 2009, at 6:37 PM, Dino Farinacci wrote: > A description of the design issue: > > (3) Add text in section 6.1.5 about returning all EID-prefixes in a > Map-Reply sent by an ETR when there are overlapping EID-prefixes > configure. > > If a LISP site is configured with EID-prefixes that overlay, that is > say it is configured with an EID-prefix of 10.1.0.0/16 and also > 10.1.0.0/24 we need better language in the spec to indicate how this > is dealt with. Because if a Map-Request is sent for 10.1.1.1, and if > the ETR only returns a Map-Reply for 10.1.0.0/16, then a Map-Request > for 10.1.0.1 will use the locator-set from the 10.1.0.0/16 map-cache > entry and not for the 10.1.0.0/24 entry which could have a different > locator-set. So we want to write language in the spec to have an ETR > return all EID-prefixes in the Map-Reply. > > Any objections to this? > > Thanks, > Dino/Darrel > --Apple-Mail-29--587040488-- From dino@cisco.com Tue Jan 12 14:31:54 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2A4093A68F2 for ; Tue, 12 Jan 2010 14:31:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.263 X-Spam-Level: X-Spam-Status: No, score=-10.263 tagged_above=-999 required=5 tests=[AWL=-0.224, BAYES_00=-2.599, DC_IMAGE_SPAM_HTML=0.001, DC_IMAGE_SPAM_TEXT=0.001, DC_PNG_UNO_LARGO=0.558, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vwq1fii8Rocq for ; Tue, 12 Jan 2010 14:31:53 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 3A2303A68A2 for ; Tue, 12 Jan 2010 14:31:53 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: Picture 6.png : 59312 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAHqGTEurR7Ht/2dsb2JhbADCEJR5hDAE X-IronPort-AV: E=Sophos;i="4.49,264,1262563200"; d="png'150?scan'150,208,150";a="465748071" Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-6.cisco.com with ESMTP; 12 Jan 2010 22:31:50 +0000 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id o0CMVmnJ006399 for ; Tue, 12 Jan 2010 22:31:50 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 12 Jan 2010 14:31:46 -0800 Received: from [192.168.5.8] ([10.21.112.149]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 12 Jan 2010 14:31:43 -0800 Message-Id: <42F592F9-EE92-438A-9C18-88E3C12D0E0D@cisco.com> From: Dino Farinacci To: Dino Farinacci In-Reply-To: Content-Type: multipart/mixed; boundary=Apple-Mail-31--587021684 Mime-Version: 1.0 (Apple Message framework v936) Date: Tue, 12 Jan 2010 14:31:43 -0800 References: X-Mailer: Apple Mail (2.936) X-OriginalArrivalTime: 12 Jan 2010 22:31:43.0734 (UTC) FILETIME=[0490F160:01CA93D7] Cc: lisp@ietf.org Subject: [lisp] Design discussion -06-(4) -> protecting against coarse Map-Replies: proposed text enclosed X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 22:31:54 -0000 --Apple-Mail-31--587021684 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Here is proposed text to deal with this issue. Darrel will be posting to the list an entire diff file as well as the ID shortly. --Apple-Mail-31--587021684 Content-Disposition: inline; filename="Picture 6.png" Content-Type: image/png; x-mac-hide-extension=yes; x-unix-mode=0644; name="Picture 6.png" Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAmUAAAFUCAIAAADqI9zlAAAPU2lDQ1BJQ0MgUHJvZmlsZQAAeAGt WHk4lFHbP8+s1rGEhDSEEBGyluzZyr4mwszYGWOXLRFRhCxFopRKlnZUiIwkJVtJkbVIkiVjne8Z 6n3f7/uu93r/ec91zXN+5z6/+z73Ofcz5557AOASciWTfREAAD//YIrlIR28vYMjHvsRQAAF2AES IF3dg8ja5uamMOXftN+9MBtuXbIMWySzn/RDw6xOMfqfr+W5LLX8G6W/YhwFXhAASAYW8HhsYi0G dtvE1gwcFkwOhjmeDOzu6UqAcRSMZSjWlrowvgljnMcmrmZgt038koFD3T0Yuh8AwHD7E7z8AcBO wViTQAxyh6cZ6xIIQe5+MD4PAELTzy8Ats/ZAcsl3ckUWJeTBmMxxrnAPdyIgQCo7wWAOeefMm94 D5UUAASW/inbxQoAXxgAFf/Cm7PcOCuI720QSVFhwxzEpgMAeoBOn5OAfcsEYC2DTl+5SqevXQMA +QmABl/3EEroBhfeCNQOwH8ab+75jwYSDg4jwCKAAqageMQ+JIRcQ4thvLFvmF1Y0Wy9uBecjdyf eGa3Km4jCJZun8TvFqWIlUoMSXHsVpc9JKe8d7siVmlauVP1nvrZ/Q6aIgfHtQt1LfXWDC4bqhi9 MnEw7T5iY9ZooWB50WrFxsG21h7n4OJYdXT+mJIzxeXG8QE3LncDQhDxMqnRY9yLxVvKx8DX2S/U /1xAEbkysJ7SETQU/CsUhOHChSPkI5VPbDsxHdUYnRMTGGsYJxq3dvJj/JNThQlxiV6nrZIOJsud EUnhS2U/iz5LP7eWtp5Oz4AykVmYC5gLK9nDOdTcsrzMi2GX3PItCjQvyxYKX+EsQhXRiqeufrnW U9JyvfZGVenlm+duRd32LbO7o1UuWcFRsV4F7mLvsd7HPWB/yPaI9TH2Mb16vmaiduBJx9Pnz6rq rtSnNIQ9JzXaNOm92NcsTuVvYX+JeElrnXjV0Jb82rQd1/72zfm3Zh24jtZ3CZ0HO5e6KrtJPdt7 unpT3+u8p30o73P7yP/xbf/pTwc+zX+uGiAOsg1e/CL2pXxIbYg6bD08MhIyih3NG5MZaxi3Gh// GvGN7duVCYWJF5NWkyPfg6fQU1k/RH5UTmtMN/+0/Pllxntm7lfkLGL27BzfXNG85HzFgsLCw99y v68usi+SFutorDR9WgytmvZribA0sNy9Gr2eSqfD8RcDURACOo/QQvIg19E7MU7YGmYNlk62VJw7 pzG3Oo8OnyN/tECxUIvwtIjwThNxwq4EqQu7g2TF9ryUD1QQUGzc56WCU72trqPx8YCf5qpWsg67 bqo+2iDq0FcjW+OHpjyH/Y80mfNZeFves1q0OWAbaldpP+K45aiek9+xfOcml3FXjJuYuy7BhRhO SvO47vnU6633kM+cH5O/cIAC2TjQiRIadD64OCQ5lBi2P3xr+EJEV+TdExlR5GjbGPVY4ThU3NTJ 3viGU2UJOYnxp/2THJMNz6ikiKdyp9LPfj/Xk1affu18UoZvpmWWyoUd2SzZczkDua/yHl0suZSR H1vge9mhUP+KQtGOYpbiefhtaC95cD3/RkKp503HW6TbJ8qS71wqL6kor3xW1Xz39b0399896H34 4VHf477q/poPtX1PBp4OPRuv+1m/8Bw0sjcJvpBulqNupy61vH1Z0hr5yqJN6jV43dt+582pt44d cu+Q7953lnXFdlv1iPfM99a/P/fBsU+ib+ZjdX/8J8PP2M+PBgiDXIMNXwKGdgy1D0eOSI28Hz01 tmesdzz6q9jX1m/+E1wTVZMWk7++p01JT1F/uP5Ymc74KfmzccZ+ZupX7Cz37M05zbnOebf5Xwsn f3P+LlwUWyyg8dOKlvYudS9nrHisuq8lrOfT8XR7ejq9ZSP+vMAYXIQgKBBaQKQh96MAqh/dheln AswyLGGsLeziuBSOZa5A7jEeB962rar8JQIsgh5CdcKsO8zxeSKDO3eJeYvfkhiRFJQyk47ZXSbT Kftbjk9eYa+Jgq2ihxJ5X5hylEqUaqRahDpFw3M/8QBBk3SQpOWi7ahjqWuqp62vaCByiNMQGE4b 9Rk3mVSY5h2OO0IyMzNXtRCzxFkuWY1ad9jU2ZbYRdobO/A6DDvePRrnZHZM6Nikc63LmeO2ruKu 826N7hmE40QZ4hKJ6pHh6eIl40XzbvI552vrJ+jX4386QD6gjxwfKBHYTgkJEgiqDyaGMIdUhtqE LocVhxuFz0bkRxpGLpy4FmUVjYmujfGLFYvtj8s+aRXPEf/6VEqCXiJIrDt9IkklaS658oxfinTK 19SSs27nhM/1p+WnO54XPN+fkZ/pnCWSNXrhZrZPjlIuIvdd3pWLAZe08rfkjxU8vpxa6HZFrYir aLK4+WrxtfgSwnX9G7tKmUt/3Oy6VXu7GH7LgsudK4wqVap23uW4B+7N3h950Pew/VHT48fVD2rK aq8/KXqa/yyvLrc+q+Hc85TGpKbTL+KaI6ghLeSXpFbSq8i2rNel7Y/e1L593vH8XUNna1dP9+ee ufcCH4z7Tn18+Unxc8Wg8RB6eHx0+avbJMcPuZmvC5kr1xnx38x98D0AMMoAZBsAYPsWAMtbAGQc gVMdJwC8xwEwZwfAWg0gPkkCxM0FAAUpgr/5gx8ogMOABGJADqgAVPAZzENskCikDplDnlAslAtV QFRoEKIhOBGSCB2EEyIUcR5RhqAihhF0pCBSFWmDDEZmIe8ju5BzKF6UCsoRFY26hmpFzaKF0IfQ Qegr6NfoJYwkxg6ThKnGTGCFsObY09hn2HkmGSYS01WmAWYh5qPMBcyDLDtZvFiqWJZYdVkzWYfY 5NkS2T6yy7OfYR/FaeOKcOscxzmonLKcF7gAF5lriNuau32L3pZ6nv08NbwavPV8h/g6tx7b+p0/ ehvXtlsCugIDgtFCIkLN232FuYWf7vDA8+KbRYJFxUWHd1LF7okXS6TsipD0kLKT1tstL4OXZZX9 vWdI7pX8/b0FCqcU/ZRs9mkoi6qwqMyrDqi1qddptOzvPzB9ENLapi2lo6Z7WM9Fn2KQeCjPsMKo 2fizycrhbUf2mTmbJ1pUWX605rIxtE20e2E/7kA/infSPubpnO3ScHzGTcKdQCghjnns9gz1avbh 8w3waw4QIAcHtgVJBMeFvA+TDz8TMXKCEr0zZjjuerx/gsZp3qSFMz2p1HPV6ZUZN7KKs0tzyy/e za++3HSlqXiwJLP06G3+O12VcfeUHgw+vlhr/YynfrDxafP5lzFt5Dcn3oV0Z7x/8vHzAHLIaLT0 2+kfOQshS0rL71d+rPat3Vgv3rg/+MBeYLIR/1xQBV6CL4AGcUFSkDbkAN8pKdA16BnUC80gWBBi CE2EAyIYjv4dRCtiHIlCiiK1kC7IWGQhsgE5jEKhdqGMUQGoHFQD6id6B9oCnYB+jP6OwWNsMWcx LzCrWGVsILYCO8UkzeTNVMY0zbyXOZT5GQuaxYwln+UbqzJrMms/2x6202yD7GrsOewLOBtcNYcA x0mO75y2nI1cSlyl3ELc2Vs4t6TysPGk8uJ4s/mE+cq2qm19yX+Uf2bbGYGdAnWCToLrQsXb9bdP CKftUNkxgE8VURIZFE3d6Sx2UFxSAicxv2tAskXqgXTB7mSZUFn3PRZyWvJye0UVeBSZlSClxX0/ lSdVvqlOqE2rz+9HH+DX3H1QS8te20fnpO4lvbv6rw3GDCGjHcYHTVxNkw/fOdJrjrJQtDxulWvd actqd9g+3CHBMetomVPdsU/Oq8f5XNXdjrunEZ4RJz2EPC29UrwbfSE/Tf+wgPvkGYpkkAecF/vC uMNNIhIjB6Pcohdj00/uiq9PsE9cSso/o5EydDYtbX/6j4yiLLvsbTljeRWXYgpsChWKcMXrJZI3 XG5m3m4uhyp17p663/FIrjrzCeJZRAO28UKzcsvAq8x2lw7hztWe8Q8v+ssHaoaoo4Pf0r/3TRfM fJ3tng9aoC0+2Ii/ODAD4aAItMC/IrkhZcgJioOuQ23QLwQ/4iDCA5GOqEGMIjmRmkhf5GXkGxQC /ob7o26iRtCiaHf0dfQ3jCwmCPMEi8ZaYouxs0z6TPlMc8yHmctYWFn8WbpZ97PeYRNkS2fHsMex r+PiOBAcKZxbOa9yyXLVcB/i/rQlkIeV5zqvPu83voytGlvH+XO3mQhAArWCoUIqQrTtT4Sjd+jh WfG9IldEfXYeETsgriQhvUtUcruUkPT23cIyu2T37FGXM5J32EtWSFa8odS0b1SFRVVJzV09X2Px gJfmFy2C9pguRR8yyDGUMaKauJguH0k3l7R4amVi/cU2wG7dIfEot1ORs6pLm6u7G51QTNLyGPFK 8VH0HfZPJasFjgXlheiHLoTfjDwWhYouiTWOm47PTFBK/JR06oxYCvWsTxp7enmGYebQhZgc4dwn F20u/SpIK9x9pbHY9epKSfYN5dLOWx5l6DsXKxQr2+563aM9yH4k8/hFzbHa+aepdZL1rc89mrAv SqhmLUuthW2m7Yg3lzsE3xV2SXfX93p8YOqr6ff5jBuo+GI3NDXiNzo6bvW1ZoJn0vz7qanyH9Tp dz+7Z6i/Hs6en/Odl5n/vlD42/D37GIyTYhWuSS3dHtZbLlwBbFCWnm1umc1afXdmuAaca1ybXn9 8HoNXYKeyYj/Zr3EyB+ARTfAN4CCN9XV2xj+9x5+viFwTbbRuOEnm7/bETO4Z+Bv5GBzRi3IB3+W g0Kt9OEezlkQJ8nLwOgPxhNc9UxgLATL5SM9deG8BthgbEqiGFjCGLYD2Xu7GpvDGAdjb6K/jdUf eTjZd6PGZXBSyME6DD4/jAuIQfp/OQ8iPa3t/uhSKSGWNjAWgzndPgEmDD5jLRqBqPfHNwTK3/eI KSyHfUbweAUbMfzngbE0MACucDXmAYhAFpgCXaD354mH5Xh4HADPEkEQzBvd4P1l2W6Mvf6Plix8 KzPshW7o+IBxGPu5eMVTYFub1luBOyxzBf5/JfJl8hPyq39HGyv6bqz6V8MEHv1vyaalTe82Z7wA AWb9lbv/1WCs7HePFJoXEKFu64mSQCmg9qF0UAdQmig1gEfxoQSALEoJpYrSRh1EacBzam+mHk/9 w5fNs3H7xx5NYD+IIAT2nwj7//ck/t+qwAv+D2OjdodPGWDgd6MggYGasmlxjP5fWzAxHK7rAdAN IEdQvDw8g/Ha8D8XRBm8kb/7Hhm8gvxeefA/b9l40O7w+lMAAAAJcEhZcwAACxMAAAsTAQCanBgA ACAASURBVHgB7H0NXFNHuv50gZCAoQaqWNGLVO2iK8FCe7EffgBuF1pr3C1uu4r+S7sC258Xsb3q 4q3cFltzsR+CP9dFui1W0bVFu8bqym4LqNBdWAvWaAEFBKvQRYqhBE0Mof5nzklCPuYNORgK1jk/ JefMmfPO8z7vOzPnIznPXTdv3kRsYQwwBhgDjAHGAGPAKQM/cbqX7WQMMAYYA4wBxgBjgDDA5kuW B4wBxgBjgDHAGBiYATZfDswRq8EYYAwwBhgDjAE2X7IcYAwwBhgDjAHGwMAMsPlyYI5YDcYAY4Ax wBhgDLD5kuUAY4AxwBhgDDAGBmaAzZcDc8RqMAYYA4wBxgBjgM2XLAcYA4wBxgBjgDEwMANsvhyY I1aDMcAYYAwwBhgDbL5kOcAYYAwwBhgDjIGBGWDz5cAcsRqMAcYAY4AxwBhg8yXLAcYAY4AxwBhg DAzMAJsvB+aI1WAMMAYYA4wBxgCbL4cvBwx6fd/wte7Y8nDhudPadWSeldwKA8OVP7eCmR17ezLg 6Qhb01ZTUneysxcFTIhLmBHsWMG6RK9tq236x8nvApfMnS213kFZN7Y1qy/d6EXICyH8F909Ljx0 tJhS0apIiH2rw4ZjVXOp/KPKo/U65O8XsfyJhGCRCQS93HBmmVJeGFikS00YgAJ3+9JWv3dbTZPE S3f3+N+kPRpmMj/EeLRajZePTOzh4MwQt+vQnrkAaNcRJ0fXWeQTsXpRwhjz0a586nVa5CERizyN Br2n6AcOsisAb7M6I60f3Wb0MbjuYMBuvtSXHl4RW13IW05E1c7ny7bq9UGHlVzl6Jn/WRolcY5I t39f5CqDVZ3plTcXR1lt268KtG9/uPPt+uOrpx0rjRYFdKJOrmYAMnS+uPRYyhSZ8wOpe42dxf7v x1t2hT+sCw4kQyRUjvp6W/Hua/i0BA1uKG36fP2UE0cwfr5RP99ZqU9mxE0c6KQFoX83fqRsUJGj GsctezTM5O0t4+Fh0P9qyxXvzEGR1aULIuwrDGm79o1ZbVPbpeHsNNEVrfhFwpgBMtxk39hVo9yV lKlR4225CKkN0ZVrB+wdVth+kFW7/EGos8wQo07fEibR79/77MZvuk2JZegMf+TDLXND6z9fP82c b35eQdPvW7zy8YXjzSeFjpD1bfufeHcjGsWZMSA/2aznf7F6YYigU45+q0PXj/rbYGuMgYEYsJkv O758k0yWonT1yi1hAw+8yP/eOVnTJdW1mSrkh68ZB1z8fHGVdNVTv8JjdO+Na6MnTHd+iFD7zq3Z 7e3VfYuQusx6/kbow/pmu/nSqOvQGKVjpOZJrU+v0WqNyFM2WmbD3fWL2L4iSn0wznzFxrcHlUsi VKtajT7jHWnWajuMnjKZxFOr1UqljvtNflzXVCKDFf6eMtX7nXWv7Ag1X8PpdRodksgkZuRm/yMW HLwZW7Noc6TK17vfBRgPf5w9DwhB9h3xG7uayjA5nrQcgdvV4usz5CV1wI9PQjRdGsnoMfaOmR10 6ZPWLhVn2IKC3HP+q3qCfJBR26X1Gi0bqN2LmbmR/FkkRqImCeZnDYnuF5RX5iPt+e/TdmiNUqnM 09ChE42RmoOOq0NxMVsyfX5nlz+kOOQ6+dvbeVHFwSYbeOnUfIf/2uWbqrpQ2a7qfWFhfwpxlS1/ eq+3lSE16jEXtJepdh05urI6LsDmCHu/IPzC+5G5YftPOj8wn/bHs+07mAHr55eaj09kYiryfrlm Ul+H1oVHa+LxcRsWZywyXaG4yKJ/yJj/GHP3+AdmxkUEgpMBb2tQ9l2EYWy+gs8MsuuePxqNjxiV XbeiRMEPbH31698OD1eGry4pLS1Z7bV57Nh3JFvPduBhuub4+vDXJf65Y8fm+nu9vfGMjm/LWHV8 a+bfj+KN7tY/by7auLe+jdsBlSN9+6GY18IV7yU+vW8vnhMsi769dPXbd/m9M9Z/s1cMWVHUmJqw VOlfCYsvyCJn93LViu6ry/dwO9q/46Z/3o5ks7//ZsldWzfWdBn5wzSXitfnLQpXLlpdtEXVbwnA A/KA6xOcjvap+LXtNYXlB3FrzS1HD1Uf2v95cZPOhAfiQdN8KEV5l99mP7/NkvCtG6s69fjwi9Ub cVBi3l6WstULh0DyWkqV2S8rV0yrmsadmOGYt8Nj9h4ijfU1bcTrb8eEK5cVt+up7cI4PbmTwUL5 Zi+/XH+J0lm7uKm26h1kshyVUb2q9+b/dqumyvEWf6ZA9QvMK5j/+qrN4a/74SSUvH4Xzs8XK5pw E3iB4sLvtfsbEV+QPQrjzG1d21qy4ETlgiwcIq6O9P+tvNKyvIj0C1FWdWrrZ7+IxKsRj3P1kbzo +ZbKxzJIzcuKg20kNNRFOiW5ZDq2Ea16vrX1+ZJ0kqvq8xotgv0C8AvrR/o20rlilOEph/fvLVoW jvvy2+vrnfYLiE+qX6zwTmbAar7UNR/VECpSPwzyyx3r9/qiQ23WgznEEjyiOxxBnl0aMuV5k6a9 P8X/9Rg8cjlUcSwQYN/xYLjEaMDn0qKxk8ZPCsKVvPDKePzZTc59JeN88WWBOqciNraiNDGQjBsn OzsR0tU3VgYEZhQ9XamKTEY9mRuO1+BduLypbpXyMpmAyi4r19VmHm3BlZ2U412iqbKQzp6yMnyN wFUlf7pKn8iLzelBipDs3OnJZeTE3Oa6xFLRtOLhP5Fcr6OWS19WXTjLFYbcg0cl3o4hsSCuRDUv O1qTGZm7Bo8X+P4YvmOMrwlCZNKc5kJSnzxE5hcaHogHwD6Ev+VUVhJ3+1fdvk5xWLH4s/gDrZa8 orSrbd7rv0uRb0DJU7OzJkSrNZmztj1bRY7wxkEp6ynMR+kZE3BQ8jMqyA1P6uLpgacCXFkd5CNq bCyv+vpbb7JZpkY+vp44xpR2neLkGpFlZIVEI4OzdnG9S5dq8d/0x1IiRuOGpAt/WZg7fVGACMF+ QXkF5KGh5vfF69QoUbW07sT8bJKdRu6yEIoLh53yx8N/LJ7Ge06+d/i12MNzjhsfLZqXPZHMakgs HRMc9FPSL3zHTg0cP0ZCegUScfVRyH2BwVGxm0qmkpYvXLWEklSxXcRjpCSBRSKJROTL38nWk3QH /ALxQ/2L2Kb0Iw9RELlvpM6/UHO2s1Ddo0a+o8n5CmQf4hMfwhbGgC0DXE/gizwQd7knz5qXHa77 m6IqR3H0b7oXXP02Sv/Ya9uA1ZZk5szsXM+HEyJCm/71ypyK/HUl/4hbEmNVwdmqC/adHe6wT5zw fPdVJBX31XA9Hk/lofteutrrI0MeKG1F4cnX5YUosfKl3VFS9K5BLybf19CHzXwm/OTR7X+rRQbu 8sw010mXpN58qnmH367U3KVX0/off0LlSBwYtyNt3s6tkiQrr+qrC/BNS/nUkoMcJ8saH35add7H 6j6bgwt8gXpV8Rx+rWiFcrIH4u3gkkvffHEFdWGbCOUcupA5v7EQr6XPq8PPovRtiqh3F1tmGyoe 5BFM5aG+5A3Opr191ErHHxp3sHXC5qAD66LDT/z1qYd6Dchyi5XabsNXHxGc8xu3PDoZobWP7o2J bVCpmto2RaYVfL4uSaOoTN0ShaoqlbOcnE1IQxLenZc85VilYobojT1zCkW56l/mrvtwVd6zubPJ /UAK/2EwTkIhwu1uikI11cpIbhP6o7/USXIjNMDfVEMSlrY4DK/XAH5FzfSn5xXAP74+CySmCxUq bfLokPCQ7F/NmIq3obiHhspIdXApzCTzOxIHPJDQn7q4wJSa/edzZgu93J2n8YFBqAE14fPIvu7N 7758hh88SB0t8kvcviSBG0zwH1V8npmKUVlP34f7l0xQXmH8QP+i9yOcVLv/t3vxXoWiQYkv9LMW tGyIDMaw6stJfuLFrl+ETvWh8snVZX8YAzYMWM2XfTjT8Rnb0vS5cdI+mbwqR93Vhi/uTE9r+jrK Kz9tF4f+IjKC6wkWK/yJo9SHOzO1lCJKfc+o2LVRXI3xkb+UV+SrL57VoBhTb6bU5425br+/cZfW RFLSdJ8X5443PgMVS82PpvhZShYbye3jJkukb/5AfjgVybJKFItG98QnqVKR1QM5iac3NubtYf+F EKgcIZ55b8sBvfwA5UVOhfEim/LcgRc0UjtW+X2mv3zNxMqVa1Xb5HhoqPumHY0PNtnxvX/avfch IyqaX1B3sXt+kNSrhThzbwAZHMSyiQH4w4t4bV7s8ZByGg+Q/d4WzhINv9T3brzPTzxa7CEWS5BW p7dMmY48cFaQBNezttf/dEDKnUP4kMnSin++svXfoPseRsfyt//1dTJKGt5bdQSfHihmjrM8fKT4 C+DkSTK1i0nUOmtX/NOgRHS58MOztSlT+GQ3Xrx00S8Qz/1kcfTLWV7R+EcekxLx7dBWFIA6K1tz 8AP4nPfF3RlpUFz4dml/Ob9ke3rTfn6w+NPAnt13vXawem1pBE+8B+91f36abypzPb2vade/CrHN nwUFob6WbzQqtSiaZBReDJ2dXtzdT3wAsRFd8PRbcs9ryPs/pocEm9in+eUcv+v9iAPhNYpLELx+ uasTITJfgvY9JFQ+ua7PGWN/GANmBvhRg9uSTP91IFK1r1Mef3C+8TNy8eE73jKan/l0xZwqcuKc fffVtabzUOOZqvcOfn2xjNzFLdyw5/6YyU+++GgEb5FSX1uzOv+/r9+7aG7wPWers7H96GlRllNf Sn0k0D7nhJA/+vKSNz9u4b4NrNmVset0qDw9ZWawsbNceTCfDAaaLWuKzku8TD8k6O27gcvkoruR vrVCfRTjV5/aVv4Qvl5B5SVbP24oxns/LM26KEGzHl6zMAR7hu3Tyvva9n68Dd8/rSW87coqOo/Q jJW/WjLtgcWoqlBdOyflYMGTY24cqUzN75FXrj0Nfeu47ewHWzjm3/9y9evLC8gXMg9PutpxYiNn B12r7jQ+NF3cc+zLXZmX/R73TBs37n7c3roDT4s7lzd/kURmEU3SvkbFcyE6Kp6xXXQeeJyO9uUw fum4mfjmnerUho3GRy6fW5ffg4pSexPuuUJtd+KUGFStUh6Ol3RtmKz9dGktRiqfP3ls29n3eH+3 HUt6Bn1CcvHU5kM/274Q+Eqw+B55Is5LTZkiUhXfrki9jJ/VxdyHExrgfzy+v0LD+UiHmeeK5KeM H5PEOLWtWP5WHOWrWngfCpuVFF1VWHZ61rLePMVY9OkXOI4o65mrqYBfvd/S8+phdJKah8jQkF+h LAzMOvHk+uVXJkw7nIlE+LwIQXEhmGiLOX8+Uh78dqzY+4K61Hz/n+Tt0dYzXBfYlbH3fOj0FNwv zPVxT7+nuzmH5I8oSxEiRR5hWzJuOraA+9EWMqfK/6k+Muo/UxPM34yF+heMX1g/wnm7Zucc/FwD Tc3LaEhVVkRWNmTlL86IBPoFMtRR+XT0iJUwBu66edMq13Vn1m+XK8mTMzy4ZKlf3BBmnjA1jTv8 96TiM/SSlftjTN9w0+9/T7IYD0OWRVbQnfYcf15Gqa+tWvbOLNIJuSU6pKBg6XPB/JkmHrpv3b7Z ssuf2p15fknt/dUVUdUH4yK0zTv9diX1l6Lkuowdofg6z4oceWD6LENpvkadt7w7JQTZ2UmPa9kS FYyvQ+jlhjMpSnm+VQMIJaszdoSJUEfj/peKFheazs7lGY9ty4ydbbkgsjkCoTMly+QVHJ2yAl3a c6cPL5uFp35ZXndait7GDkoOP/rWojgpMlaVrJlVkUPsiOT4u7X4M3le3Y6He6l4JrUCPCA7nBb7 duXW+PXFRc/G15I5Di+J01VbFy+UwTw0fbljhSqVjMh4ESWrnv0/fP5h8Vc+IXsp2rPuMsGfsaBl E3e3jatq90e7422/1B60Z4Vu3qWMoOIc+fSS04tjENwuPsVxxHnZzHN0SHZcryvtIm1b8X9/EI8f wfJL4vQ92b9agudjql9QXi1BB4A8rInZHGkihzQgz1UcSpuJ882O//648DDs/lr4tCpPrF67O0Ki 3bnVL4mcipkWvl+cKV4mrzJ3X1F08pTlaxc8N9k8Ppjr9n9a9yPr741bl3O1zf0LxC+sH1nyNn1+ 5aNNyYubSZ4ULO9+LkRq27/M/OhAPvudYWuMAY4B2/mSFJEv6xuReMxohxsSfXo9ElN+cg5RSalP jOv6eiU+/o6/c0CU+pBprlxofafGXNyJf8+OvKVSkaeL9YVXM+KfkeDfq+BfktxaGyY7Eh+pTcgM Ws0NdMvGsVuAfXO5YxNGg1bXhyQSF/0y2ZfBv6gZmNs+rcbgxWcaeRGB5X670yMF4oRs8f3IE9/k t/6xh4U3O7+E5BVmRufl49Vr6DUajRJ7p6C4QDhHWvlQ43e075zPkcYPwzOcDDjOl8OJhrXNGGAM MAYYA4yBkcmA1e9JRiZAhooxwBhgDDAGGAMjgAE2X46AIDAIjAHGAGOAMTDiGWDz5YgPEQPIGGAM MAYYAyOAATZfjoAgMAiMAcYAY4AxMOIZYPPliA8RA8gYYAwwBhgDI4ABNl+OgCAwCIwBxgBjgDEw 4hlg8+WIDxEDyBhgDDAGGAMjgAE2X46AIDAIjAHGAGOAMTDiGWDz5YgPEQPIGGAMMAYYAyOAATZf joAgMAiMAcYAY4AxMOIZYPPliA8RA8gYYAwwBhgDI4ABNl+OgCAwCIwBxgBjgDEw4hlg8+WIDxED yBhgDDAGGAMjgAE2X46AIDAIjAHGAGOAMTDiGWDz5YgPEQPIGGAMMAYYAyOAATZfjoAgMAiMAcYA Y4AxMOIZYPPliA8RA8gYYAwwBhgDI4ABNl+OgCAwCIwBxgBjgDEw4hlg8+Xwhcig1/cNZetDbV8o 9pGGRyj+H2v9kRaXkYbnxxp35pdwBjyFHzLII9rq926rOYt8IlYvShgzSBs/osMMZ5Yp5YWBRbrU BPFQuDXU9mHMmkvlH1Uerdchf7+I5U8kBIu4qsOHh0u8JomX7u7xv0l7NAwGfkfucV9c3MMzgEer 1Xj5yMQeP2iMtJeKc8pPIi8dksaviZtt10/d4y/g0LD4C2Bhxf0MuHm+NHaWJuWvbhWhTvTkh+mb pnx7KCFvQ/cosrlxSq2yQYVQtOIXCWMk/QhG2lrT5+unnDgSLQowA+ssM8So07d4/Wv1tGOluLwT e0OWAGTofHHpsfntb1rX9/OdlfpkRtxEqflw4LOvtxXvudbZi5BdPwQOEFg81PYBOMbOYv/34y07 wx/WBQdy/g0THozk340fcYmHUOO4ZY+GySzg2ApmwH1xcQ/PVDzacsU7c1BkdemCiB8yaK0X9mQ2 FJIWR41b6TBfusdfqj/D5C8VCyu0ZsDd8+X1rwsNamTATQT0eiDPvqsqpEY9eDNkwuMFuY3+q3qC fJBR26X1Gi2zmyf0Oo0OSWQSu2J8rFHTpZGMHuO4w9oT03qfXqPVGpGnbLTMwTeX7HynqUQGdRlx wbKEXEfIR/ctQnbl6MP65keQbf2eMtX7nXWv7Ah1fi4siVCtajX6jLefV/u0HVqjVCrzNHToRGOk zo1ggH1azXWJTOqp7epAUqv6wu1rtR1GT5lM4qnVaqXSflxanRYhL6mLcbl+EYNSRKkPxoVZ6CMr TvHQgmVztOOGUdehMWKH+5MCyp+IBQdvxtYs2hyp8vV2SAlHwwj2l1R2bJdigisSxicUR2JK39Gl kzr0F75dRzx0/JB9p3Gh5qG7eObx2/+l4TF2NZXhpPL0sq/sdFsY/zRToXN394YnJ+TOUXlRMkdo XvEtOMbLkc/B+QvZFzZ+IiSMN2fjLUFk7y88vjnywHs0ov66MoAIACye+Fzd/PPTPlNmxL3VUbx+ s+w36vkZ8s+UuU9vj5B4qknCF8o3FxKLouTK3/0hajQBoG8vzSiMzSHTKkKyrOrlGRGjPS9Wb1z4 9/0BIvlUr8J8Dd6RXLnKVJ+r5/jHWHM8M+mYUs3vGZWlfnFDmAQJtRMRX5B9btI6lNv6YkJ9bZMv Ojbr8H4c9+YrhUiUXZcof/H9+LJR2XW/efD378bipsLiC7LOTMo0yFUrKmbf+MR/11KE2r/D0y18 Da1vP/RE3gY0KgCN+a1q+RLL1FRftfmZ4nUm/AglzmvcPXeyo5+kpKs85Y8rG3xDkEZFhpLAaFU7 /kxXr92CXRZq35r/6FGorCe6em1phARpmg/9fp8inzt1kMuy8peuiQoQw3waq45vVzWWYnTdrX/e XHRwQtgLS0LH482B8YxKVKDWZkPn0scPLdTvmIav78du+OsLc/PznnlPUxbzSN2WuaGor359zjNH DCjmP7c8hT6JrcjBlnOfvpI2Y4w1fkv+4L2aS8VvHsk7okExQVJ8Z2PAheqvk3Yhg9Z4BuDT4yQU x+vHU5JPVYbIYqSanEISAkXR8oKEEJkTPBT8sP1bzJNb4RnmjdIvtO01B8oP4kOaW44eqm426EUP RMyfLHE2cAngP0Bc//l6er5xKD19fC3d0wJbWF4JzFvIXxAnYF9xI0/g+GkzDg+QtwH4PJU+3jrJ T2h8s46XdV5ZCB85K+7/vs+k8cHYvdH6itVVynXF2/7RcQl39cfuJ+OmaZFlZIVEI0N+RgU3NXSV PpEXm2NILIgrUc3LjtZkRuauqScDhLcaX+f1FOaj9IwJ0QiZ65vNOHzq6hsrAwIzip6uVEUmo57M DcdruDoC7Xj4j8Xzes/J9w6/Fnt4znHjo0XzsieKjAZ8jSkaO2n8pCBs1AuvEI+6cbf18J/oS9pp ufRl1YWzZA2F3MM/tOM2aH9EU2UhnT1lZfha0rLbUPN7MlkmqpbWnZifjR1GRtwksHiIrmNyNCo0 IRnXVLWj5AkKhHKOXiRnFhioAPs8/z1IEZKdOz25jJy1+OH/2ua9/rvIZJk8NTtrQrRakzlr27NV +FITjIuuqW6V8jKZmMouK9fVZh5t6cTr3ELB01G/eRrxV54RmZtsKFT1lOFwI28viaeEXN934WM9 vQ24EDVreR4k43wRrpNTERtbUZoYSBg62dmJgPzRt+3Hd4aV7aoQmTSnmTtFw/e+4QX2F2gXMiWI Tx0YRx9JAHZW1Z5T6JueNTURB3nxrnmlXThf6Hjo+GH7HHxKXBCUh27iGaINwtNyKiuJPMdB6vZ1 isOKxZ/FH2glWQgugvjXIjjf6C0IzSsoXlDeQv7COOn5APdTul8mPALGAWi8BfAIzCsA5XAX33T3 0vtvlfxVhPC/TdGmlVcTq6/jZroLcnG5ovLGzZs3qhWvIsUn1bi07rNErnJi1l+ys/+SQdZfRdl1 V2/e1FnVr4w214fx6tRf5KX/URH9liJ6EzHC2xduh8fJufAqym3ASLjlRvdVM3KUm9eN7XZf7Tbi XTb1cbtFrTrTIc4+OO/eyjNbv3nTWJfM8/aWIvlP6ekfZJ/4tzM7HG8KtVG3B7Oau+dK6x7cdD9a nj0X7PP8y/eU8GCvNhREv5VRd+Nm9ScKbDC9opEvL9kTjTczTrU657P7Qp4tDAsF9v6qjxL7Waeu kBrdJ3B8UW4B57CpJma49+sCXMccR0yROpFQlFiJ92EcN0h1KH9M+I/VkZqtRSQV3yJRgxbYX3q7 kB2hfMJx5PM/vYVr6cRHhP/0Sm6LxgOEH7bPe2AfFygP3cUzxJu53AHPzZutZ7Kx79F/OaEz6rqv O+sU2IhQ/k35zOWGfb5hczeqScrl9vdToXlF/KLFC+ITVwf8FdYvnPdTgsp2GQRvwHhL91doXtmi Gylbnsjdi6dsghyfDCKUEb89vuWZOafVSPbYVHJzktyNRUjqQ57J+eC7HFrugUQvf9bve/+0e+9D RlQ0v6DuYvf8ILyfv/Qy1SeXPE4fYOibP5AfTsWX8yWKRaN74pNUqbb1XbVjwinb05v284PFnwb2 7L7rtYPc/UmpDGPo88LI8LkbdkYs5R/B8n4lVq5cq9omVyJU90074i6ySUVw4Zn37r9r6zEp8bEM 1Iq/R9RZ2ZqDH6DmvC/uzkjjmoOs8E7h60lRL/fQ2NvDYs9V+yb+vXgvkGzKcwde0EhFJIJ4kYhN Bk37+38AQ+dT4umNj7KCwVkhf+zx9HLhvfpdJ0Jj9Np2/IF6b+jIt596b5D63B/+ryXuJHPwHfvY SI4UsYg8vITyx6uFVLo3IBD/Fcsmkq9veZGoOV/o/tLahewMik9qHE2Xw0bMuYfJTX/eAxgPHb+p 07kjTxz66UA86+vP/qPlBpo0+ZHQ0f0PmyH2HPME15T63o3/+olHiz3EOB+1Oj3tabrJpHD+4XzD Jj34lOnvp16ewvOKFi8ob2F/YZw0+yY6zOPtgOOnUN6cjbdUPMD45oQHswsj6NPj1VdfdTec6+Un tlai6NeefHmWb+8bZ4qRZEFG1IOdZ99bWXO4Ham9fxIrulD4319XnuvomzV5XtR4n41f7EPf+8VO fCREbPji7J8yW9qen73kJ+dM9fu+n+Pb8uF6Ul8bMennP72bjMiOi67zH8ozxfK7F8WNF33x5b4P us5h+7HTf+514QO+XRfttPE49X1eXdd+4tnXeOHTz7q8Ux599l4vfXmJMufYnvzuc0jffe3rLy/e nPbguNGm+kj9E9Fv/2few2+eVpWdz/lOHztvSjA/RdhD7Wvbe0D559qy8ksV5wzd33ecK6ltnxYa JjXWvbJ3aYH345seX/nrcf5/OF+GJPFrHomyTIA2dgz17+xPqehT+/bN/Ml3RcXthmCvm8WtFV93 TlTMGP/JxwLsB0k9Mf/tHQXfdE262Vn1TtFDvy4/+mTU7yZ5XHnzq+KK85959I1pVec+dfYAQvLX 4l/ybiwA+LxZXvLO1soDlddarnV+f66+5NqoiJ/KJAjw917f75WnPq5s+cNf1CfSPt/cjt3zXfA/ UQ96I0N1lfJwd7Guy//TqpWVesTFMT5I9/kbf96a261G+mZtx6UTDRp56HR8IzyAEzDGJAAAIABJ REFUw++YP+NufPXOubLP6v7lf9fNfaqn9uE7/HrVlAmrZvrTGfX8nu7vxGv0dm3CYbXB43GVz9gn /nL4d/Q4hoc1nVSq9JVba5oMdbtWtBQjpFA+uWJcTzmVBzp+J/YHlSeCee46MaYgds/5XY/IXwmT 0juEiTwgT6Q/Qd7ivhOf/6m4o83ju6/3fvJYQtkbM6a9Mn0U/VmSMP7jXwoRG6n5Fux9aeeBzR/V HN3ehVOu+1rbuZOtd0VNCbmrR1heGTvp8YLydoIX5C8dJ9QvLOOSi+OeUN7GXaukjrdBun9S8xMZ 6OMbP/445hXmYQQud+ELXXfD0u/NkyxFBd2pz0kN9SnKae1R1QfjIs6ULJNXFOK2okOy43r3rLtM LmAyFrRsigzuaNz/UtFi7ksNBEty+NG3FsW1mOvLJ2QvRTb1SSXHRXdm/Xa5kvvSkDwwfZahNF+j zlve/ciFF/l2XbRjwWnVQmL12t0REu3OPL8kMq6bFoWtX0hWoEt77vThZbOqC5EsrzsthbsKMte2 fBrOpCjl+ZZNspKsztgR1lcTszkSf2nHvMhzFYfSZpKHwZSlqzQmNxZXlgdmJXjtz7ysTgxJVjfn 48ef1elrd+QIs2/LvzzjsW2ZseTXZk1f7lihSjVBEiWrnv2/hSEyCz8OfPrb8ZMe17IlKhhB/oqQ tr2qoGTfV0b/CH9darXSQlrbl1uDVKuI1/gxMHmSjXAcl6ADfruSyIZpSa7L2BHKPSe2xW/KHyky VpWsmcV9LQiJ5PiZKD4ueV7dDvzVIWCh+qtt3gm1C5hBtnic8ik7BcZx7Xb1u35JGpQYqChsV8ll GdueyZwdKHaCh4Lfif1bzROXeG6rXh90WCmferR6SZzT2RIHGugXJMT64qJn42vJU0y8JE5XbV28 kNzsARYB/OPvTyFEzbeUoBbyC2nrJkydWlheOYmXLU4Ln7hJur9UnFC/gPspMKQgIXmLeQPGWwgP 0oHjG8yDNfsjYn0o5svBOWbEP2PAvwOR+Ehv5VfJ+He+yFsqFQ3QNwcHcYiPwgzovHy8eg29RqNR YrrZ68Y2nds38Y9/SWLLnalcZvULE3dhMmrbLmp7/aQ+nU0fP6NKDQivLF0UZTJu0Gr6kExCP+Wg ATDhtM8fbOcGcnCKZsBU5i5/b5FP/Jurxj++N22dIbslPS1QJHa5U9w6fmzBSR6a7LvGs/7QLomi WX505ek4ckP8lhajQavrQxKJXX5CNgXyLzTfBOfVADjt+cSPo6j+CsUJNQuWC+NNyHg7qLwCcQ7P jpEzXw6P/6zVYWSgquiuWbX97Rcsv/ocd77fX3THrhlqwpWR/CNkzEHWM1c3hDq5oBqxNGl3bvXb cu+J04tnj1iIDBhjwHUG2HzpOlesppsZ0HfVHzt39qregMTjon76yGSXvg/iZgwj1ZymqqrkklGE b5QYjGiG/IlQFy+rRqo/DBdj4EfAAJsvfwRBZC4wBhgDjAHGwJAzQP+O2ZA3yxpgDDAGGAOMAcbA bcUAmy/hcA2XrtBwtQszwfYMJwMsH4aT/dunbZYnQx8r2+9CDn17I7CFkaU/BegZjUDebh2Sc72k W7f/Y7AA5MMw6j0NqY6V6yHjYNyJ+oAja7yiBcx5vx4h+UMDPnCZ++dLSA8rTKLfv/fZjd90m75Y bugMf+RD/B5t03uEOf0sP6+g6fctXvn4wvHc7+oGhn/LNUac/hRVz8h1N/uaNub8ar8BzXogf0cc /m2GZu+upOxWVUBQkWp5gus/znDSoF18XdUvo1l0rpdEO+LOK6Pmw7DqPQ2hjhUtvPXH6Tp6j5hk 2m5VH9AunxEy6fex8YoWDZfKnPfrHzh/XELsciX3z5eQHhZ+c1nnRRV+fbZl6dR8h9ev2+pnqaoL 8Tuye19Y6AIyYTpHdL0YofpTFvQOK3T7sH6NgwGugKZnZK7pgh5Z33dlPWr8OwR11furfx4V2lW+ tFlFDm9t498uiJzp7zjj04zBPl7IQb+MzgM53t6+c70kS4surUB6VbhVqk4cFBewHNCJ4+pT9ciE tQs5ScuHweg9QX5B/BA89Hyj61jB9iHPXCzvBXT0UhYU5J4bnD6gTct37Hhlw4LVhjA9L6sDLavO +zU9fywHj+wVF2YlgQ4AeljYivT/rbwS9+3xpF2Ly0RZ1c+/MNFvLC6NeJzTz+qRFz1/aOL5HbMq lOiy4mCbLmE8/W2TVcWCdY4AvRhh+lP6tkNPvLsBv3FmatiGuTpV9td4Vnryw//ahF8xA9hHkH4N xChV9wrWz6KZEUUUxKVPKsZaV/nHv35L0naEqyRXPZ8sA/R3QD5p5nGZE/0yKg/O7TvqJZUfTll5 pgG/RDc6puDRjh2rzzUEGPD6xxuiJlMQDaBrRtGJw0aguADlgG6RtR0rPbK1kcFUHpy0S/GLK6Lm A6T3BBlx0i4Vp5N8g3SsAN6cIHJ9F6ijh98060demeaqPiDU5B04XkFUWOfDgHpeoL4YZ92xX+Ni KH8gPCOwfAi+70PXwyK+i6VjgoN+SvSwfMdODRw/hhexE3H6WSjkvsDgqNhNJVOJTtOFq6Bkj1Cd I0g3ByFh+lPIQxRE9KLV+RdqznYWqnvUyHc06bCAzhGoi4QPAReavhKon0W3Ejg2nN9x9IsDqnr+ vXvyCeTN8HT9HZhPun1QvwzgQah9kcRHbSjDPF9FPr6oQY1VzwzobopeLwfPia4ZgAeMC6Q3BPAG 6ZENdT5Aek9AtPB75gCdOIgfIN9AHSvIPghI0A5YR89ixlV9QMsBtit32nhl633/Fp8PLut5wfpi /Sat18D8sa404tfdf31pdrkwk3t1izjggYQp1q8mMasumOtZPns57YvxgUGoATVhXcO+7s3vvnwG WR66aZFf4vYlCWFzMwtOK5M06S1pW/CbEOcVtc6pLfvkXGtMVHDaisKTr+NXPiZWvrQ7SoreNeix hEV9yRv8G1AvffPFFdTFreccupAZGipbknrzqeYdfrtSc5deTbMCKQ6M25E2b+dWSZIJLMGIC3f/ b/fivQpFgxKLkGQtaNkQSd7EWF9eQLc/1YdIY6BChUqbPDokPCT7VzOmkgJ4obYbHJlW8Pm6JI2i MnVLFKqqVM4iUgPw0stpeigCFaraJBWSZ0c9ua6q8hpW+xB5hc18Jvzk0e1/q0UG7iYtd4sW5PNB I5V/czzUq4rn8CiKVigne6D6ajoPa+F4WTthul2MUFTslmpdc2S1KnTspPu9o1F1WdbTx9JmWKeQ 1XHSqP95LLGwQpv7XO6ZP+SXod++Ho/y31WJPUE8oVBcPKB40Xn7d8s/MI4sxWcbZo5Bcx9oeGdO mawgbcb4+pJ1Q5oPYXEHWydsDjqwLjr8xF+feqjXgJyIdRCmAL/AeAH5VltTiI2lzyPa3fo2RdS7 i02vHwLsk6bdsIgTnu++iqTivhruDPpGLwrd99LVXh+cD/wpNe4Xm6JQTbUykm8N8gv3d6dw7pTx CiKB500+teTgkhhcZ1njw0+rzmMtqYavPsKb6fMbtzyKb/CsfXRvTGyDStXUtilqTUFVJh4he5Hs hV8WpL5v/W7n/kYs/RrMn/66t8HaUMyX3IvlKXpYHB0O+jj9Ol/4Oz59Tbv+Rbrlz4KCUF/LNxqV WhQdwNNo6Oz04h9+mmdc13SOnOvFuK4/xaHwGuVjmq0uE0FjMl+C9j0kwvW5sD0+Iv36Qbz3Fh20 AXV50I3v8GvYn5//cuAeVf6o1Yly0boqZe23+oe+hfTOAD77ugH+ufjikxJb/TKQB6TjXaDoUuEd lHxAEXNfjq5Wpe579kM8r4uyU6HJ0kyNmRwbvSoQDxQXQG/IC9CJg/TIBLfb7wV1jZIPgvStEOAX iBPQ0QN1rAD7pvOqvo7yyk/bxaG/iIwwn2lR3YQLRc519Ey6ctj4QPqAUBN31ngFsWDKBwG6frC+ GG7DoV+D+QMBGpHl7p8v285+sEWDff1IefDbsWLvC+pSLF3H+Y71sLYebT1D5kPNroy950Onp6TM DDbXL9yw557u5hxybi7KUoRIkUfYloyb3IHUPzlTcr7NGK1VXsZHKB6fPB7r5igP5nPGt6wpOi/x ili9KGEMQtMeWIyqCtG16k7jQ9PFPce+3JV52e9xzzT8RQeM5+MGLJOEPizNuihBsx5eg/U3iP7U x9vOIlRLvNiVVXQeoRkrf7VkbFf5mp1zcrD+ydS8jIZUZUVkZUNW/uKMSMi+oS6/QlkYmHXiyfXL r0yYdjgTP/u0nG1RXALaRXU8n4XbjiU9gz5R4SNPbT70s+0LJ9LGH21N5l/W4SpH6q+tX9n6uofu yIEVePPD0n0xjxFFSbnobqRvrVAfJd8JOrWt/KHc2abzEXs+kWg8lX9LvN7/cvXrywuUu5IyD0+6 2nFiI8QDbpUsDvb7Lu78eMd53SVLPvj7z18TF0OeWktnvzY9uqxWhUObFZ+Igwguhnr+BOu9EsU4 fL7VXrhfPR1X3l76QfwTQNyhuBga6PHqo/M2M/zXqFqVc2xa6elotYakLRZ4xd0JzDeoXcg3IB/G eyDpuJn4oYXq1IaNxkcun1uX34OKUnsTAnHjtAXwC8KJdaC4/mufbw+Oux9bX3fgaXHn8uYvkojD mqR9jYrn/uMynTcOy5lPV8ypIjmbfffVtVa3cLidLv7B/fTNj1uw6A83buw6HSpPtx433q9Ifsr4 Mdl7alux/K35A+ShfaPmfL5TxquoAHqe8Pmgrp2TcrDgyTE3jlSm5vfIK9eevm9KDM5z5eF4SdeG ydpPl9biyMvnT8ZfPeHOg3tWZR5E6GuiJqQi48kfZo9upfbrACh/BpkV9nH8Ybbp3N1K253tFdyN GlXmadJPuCWR+9vb9NU6JZmE8FKW01Cm8E9IQcGdl/n6SNWcg0TRyVOWr13wXDCvOMrXBf4m+uLJ 0qRzhO++apubMi+TXoMngpxaDCF5+RMJY0TIM3DhlaVFWC8s9TMTHqwXNp1oIPY2NazL4fS5yi4r cRakT07h5svO47VK/rkfxqkk+ZH8G8USaXcTmSxxteCZEUY5alar2zPrutOjQgD7ut5WXLs9c877 meQwJM+NVci4NfqfPnq7yMQnqmz5YjLCJx/4iVRh5ZXXqfOlXnshh7sIzz9zcv2CuDGGMyXkfAKV XS7Rj1ubMQop21fFHsAqYOnJMnm+Jr+2+y3zfIns+KSDxF+3N+PJ/0qdG/tcZWQJ1i/LOV+bFZcC 8GyyZG/f0F1Sq+QDxucDkgWn8/MlQrNj1spry9SirBdmjoeQkPLrbZWcv0ca6hK85LjPnrwSiD/U lyu+Hb2bjgeKC//LDcd4BUXTeQtZ0p06mdcje/G+WUSPjFvAfIPa5Q9z/AvkA54vkSR87XQFPp/I rCYpjfWtYqHJEu+G/AL6RYs5vvb5FplR2XkV66OtOlZG9NE4QfF/trY/F+QszydMiUdkvlQ8KKOd 3jl6TSnB/TST76ckT5rLFGOXkXHDjPP0xX/e28v3i/wT36yPiwT6I8UyKTLbuWPGqwB6ICx5m386 iRv9iA5duASJQ9MaFd5Y1y+zYjHhi9P1ixmNJw7pU3NyU1Wrck6vIrp7eDFw44mU3q/HzwTy57aa L2+798feqs6Ro24OF+pb/+Ooc+Rcv+bWWxyMBQf9nUHzCbVux4Nw++SXCdoL1W/ioZlXGIVacq3c Dg8+CIoLVE7aceCNFDrTIyOt2OnTObNPzAlc6HpPFCPO23XESTHRX0TRsXJuH0/Yej1yXY+sv6lb WxPo1601Bh8tPP9NtoYLv6ldBwk8U7m9rp9QfTFK/sDkjbw9t9t8+SPRORoxiTDUfAq3r23c6reH 3N7hF2d3Gs11huuT6ZENF/O3TbvC8/+2ce2OBOr++7FDS6MoJD+uqF/nKIh+b2FoMfyYrA81n8Lt SwIfV83bY/Akt3gMyH/uPSM3RcN/Xnf0P5ge2Y+pP7jbF+H5724EzJ47Gbjdri/d6TuzxRhgDDAG GAOMAVcZGIL3FbjaNKvHGGAMMAYYA4yB24YBNl/eNqFCt4tez+2C8/aJPEPqTgZu9/wcLvzD1a47 Y3+rtkbuw6Fb9ey2PX6E6/UMoKME6E85RmMAO44HDF8JpE8ElbsR6SB0uwTpJQ3CviDvHO0Pc9yB /HTEKcjNoahMjyOA310AQB6GuF134R9qOz/++ZLp9bg3hzqd6yhR9adoCAawQztkuMogfSKo3G04 B6XbJUAvaVD2BXhHsz/McafmJw2nADeHpio9jlT87gLghIchbddd+IfezhDej8W6MBodeaEN/iGa tSNanVar01uXOF/HukgauL5R19GhdWbNpNeDX9tt+qdGhubrpElOX8xSblCXWuuLceUqTaGyWhG0 +5Cz9/L0o8d6VRoIiiNOul9mfbGb/3sT/1sYaBZp4XSdrv5XiutfCKbbx79uxCD7EMaj5V7Y2w/f tbUwrKM0ClcN8sE/MXT0F8Zplw8D2IHAYD2yrg7sAhQRV3kWYp/oE606ocCHeNm89x0q521DeW7H gwkIzS9et8vPk38BoT1ienyx4M+CgzfXVhO0vjZo7Y/Hvx/tasIvs4DsQ/gd7fAljvWp9geMO+QX 34pjfOl4oDyn5ScVp8UsHQ9k33IYsOKIn24fiiMNv3VTrtt3zENnPDhrF+u+ddiPexw/UCe1Bnx7 rQ/J9aUgXRgn+k3WdpAsq3p5RgR+r0Rf/fqcZ44YUMx/bnkKfRJbgbWrUO7TV9Jm0N+bdgfq9dB5 s9af4pI0cV7j7rk0kSz83rHGnU/v2YLwvHjvxr8vWejJyVCXoYBOQ1D281tgHaVDT+RtQKMC0Jjf qpYvsUzt1nisdIJAPSagCwG6WnA+WLfbnz+AdTx91BzPTDqmNL1GfFSW+sUNYeQ9UGSh6hNB5Zrm Q7/fp8jnXjwkl2XlL10TFUDOe6zxWPFAb9eJbpe1HWu/BOklObEP4SdE0BZqfdg+GHe6X3B8aVhI GaQvJlQfjY4Htk/HA+OH7ENxpOJ3Mh5C9q3LLXk4tbvmQDl+tR1qbjl6qLrZoBc9EDF/MichRW3X ie5bP/+2Ond0fm6r0iG4vhSoCwPqN4F6Q5JxvkhtUOdUxMZWlCYGEv2vk1jPBFruNL0eiDchukue HniqVGPp6SAfUWNjedXX33qTzTI11tjyNJ9j2ekoEf5pemRAPvSHi2Knf6fVGl2PDL8djp4PEA9W Fm1XIfu2tQba0jbv9d9FJsvkqdlZE/CrZTNnbXu2Ct9hAXmgtwvqdgF+CdVLguyD+AHHofqQ/X4z dnEH/ALj22/Ids1ZnlPyE8QJ4XFm3xaJaUtYfjqNIwU/yA+Eny930O0CeSBeUNv1xoNwWU9hPkrP mIAH4fwM7sWmoM4dlZvbrdA89rkPt2BdGAf9pmxOv6m+5BXy5lOEHHS46LpdA3lwp+j1uEVfTBqS 8O685CnHKhUzRG/smVMoylX/Mnfdh6vynsXvZ+9tIlzb6yjhIqoeGZQP5nhR7Jh32X3SdbWQBz0f nOi42dk1bwL2zbv5T+gWk6Uc0j+6u5PonTnqJeGbvHSdNUC3C9Krmt9YiBFS9LZs8Vu2IF0wCH8U 8CJfqP4mAL8ZgH3cIb9CQ+nxNdtx+IT1xaj5CfEA4oH04ByAmAoE5qeTOFLxC81/1ErPw1A4XtR2 IZ1BSOcOouf2Knf/fClcF8ZWv2lUbhKn3wTrDWGxGI5kWWwkd8sPi1w6Jf3O0usBeYN0rADugu57 GB3L3/7X18lZi+G9VUfwfUrFzHEWqu11lMxm+Izq1yOD8qFfx41E0wdHktdjMtux/9QDulqkHi0f QB7sDZu2ndknTfAPEfv9Mh0GlEvEpju5Jn2kPrPum4NekpN2qbpdkF9eLaQz3BsQiP+KZROJ6oyX N/3Jpwk6otrndzriNx9E/6TWB+zzoOzzB/KLtEeLLx0HqTzJqY6efX7iI6g4QTwC+xHBScMP2R8o jhT8guz3thBEyCEPcRmVB642/kNrl+wzxdGPVCGRhXTuLAMHOei2XXgW3AlfuC4M5rxfvyn7yWX8 c0hIbwjS7YJ8uNP0etylLya+R56I1a41ZYpIVXy7IvUyQqNi7pMgM5+FdjpKcYFaqg4alA8Tm0w6 ZfZ2xnMnQQ7h7AV0tR5GJwXquDmY5gog+7NHt1P1icSAHtlEQP9o2gSiL+aolzQd8Gt2gJiq27UI 0KsaJ1wviWp/LoCfzhpCkL+4PtX+Ix30uEM6XEL7OwL0yyCdPkgfDeIZCdRlg/BD4xsYxxAdtX9h nUFB+S/n8scxD6Mk9Hgl3HOF2i6kMxgN6NxB+XN7lQ/J+/A6Gvdj/axC7vsO+BYU1oXJjJ2Nzy+a vtyBdWH4u6y8LgzRz+KXrtLw3Fj1qNyrL6eZi5CtHYR1uN5aFIead/rtstbyTq7L2BHKC8rQuD9T skxeUWi7J7F67e4IiXbnVr8kk74Y2c+rYZwpXibHepn8YtYXm2z+3oep3ObDZCcxUFHYbtIXmx0o 1sI4qX5hRbKdeX5JnL4Ybz49rmVLVDAynElRyjmFHUuryeqMHZNaTTykz698tCl5cTP5nkrB8u7n QqR0+7qamM2RJvKJJXmu4lDazGCLUYcV7Y63/VJ70J4VunmXMoKKc+TTS04vjrHwGR2SHde7Z91l 0m7GgpZNYd1UnGEiuzia8qHBHBd7O5EAJN2Z9dvlSk5SDeuRzTKU5mvUecu7l6ADUD7QeXDw01QA 2E8JalmmlJsTgqsry+tOS5Hyv0iztsaXw3lui8fcL6B2sQQs0hcXPRtfS0S78IJ1u7YuXoh7h60d U7+QImNVyRos6kKqYr0tA4lL8ry6HXNDSQl9odt31k9pduD6FPuX4bhT/RLa3xGU50A/wvkpjGfI Po0ZXCZ8HADi+HAvtX9ZxgFz+/3jIZVPnFW25eY8JMdT4iUDeEPlpnFVPiF7KbIaByKDte1VvM5d hL+O6NyZ+4UZ4W38OSTzJceHQF0Y/PVEncYokon5exf9lA6Xrk0/AqdrI1avx5E3XKLz8vHqNfQa jUaJVDbwHZI+rcbgJZOQiuSHzK4cApIF5QN4AHUHhoG8pVKRJ3UvrdCRB1otc5lw++Yj7T9N7drr H5l1vuz0kpy0C+h2AX4J10tybt8Bv72f5m3IXwTYNx9n/wn4ZV/NyTa2IDDPOWMATkc8g7QPIHa0 z1UUHkdh9oE8xEYAHgDztGKnOne0A26fsqGbL28fDm4FKdPruRX22LGMAcbAj46BH7HOHZsvbzFb NVVVJf36YvInQqWuX/rcYtPscMYAY4AxMOIY0HfVHzv349S5Y/PliMs2BogxwBhgDDAGRiADQ/C+ ghHoJYPEGGAMMAYYA4yBW2Pgdpgvb3cdmdsd/61lGDuaMUBnYKT1i5GGh84aKx1OBobqYRv5OqWP zZddB6nj4yYdGUc8g2adrreF37l6qfyjyqP1OuTvF7H8iYRg/icuIwy/Iw+DjAuNvpGpb0VD6s4y etyBFoaUf6DNEVnspn6BfaPrXgl1GsDjGC+hhln9HxMDQzNf0nRhBqnj4xYdGRqewUXR2Fns/368 5djwh3XBnIQIVI5GFH4aD4OMi4UCq5WRqW9lBdD9q2DcqU0NMf/UNkdooVv6BecbXfdKqNtUPLR4 CTXM6v+YGBiS+7FUXZhB6vg405EhgXDUr3EMDxWPXTV7OzR9JXIIpLcFlcP4HfV07CBZNp3jd9RR shxot0K1M8i42JnmNodX38o5Dw7xFaxrRrcPxZ3Gz1Dzz7cJ5RUdP/6JrZa8+1bb5ajvJkyfTph9 qF/AOlnCdK9o/JMyyD4NDzVeFsMQHksFtvLjY8D915du0/Eh+kc0fShYH4caHhAPaEcG6DoZq45v VzWW4la6W/+8uejghLAXloSOx1M2UA7gJ36VZhTG5nCvqrHo6UQArxAC8eM7wIBulDAekEB9Jap1 cyFV9wrCCfAgWN+Kbh+M75h+vSEOthNdM94tun047mYybD7hOLqNf4BPWp54nEz548oG3xCkUeFX PikCo1Xt+DNdvXbL9eMpyacqQ2QxUk0O94ouRdHyggT8Hi6YTwo/sH0skUbv17BOlrVfg9Yvw8GA 4k7FA8fLpv9a47GJN9v4MTLg/utLp7owHIWu6vjgylQdGUAfBwgPjAeyQ9dXQkjXVLdKeZm8nKzs snJdbebRlk6uTagcwA/o6QDwEYQf0lESaqe/voC49B804BqIE+SBzr9wHoD4CtRjAvGD+UCnBMLf X/sW+Qf4pOPXia5jMSaNCk1IxlJMqnaUPAErTOccvajxkQRgnSZVe06hb3rWVPwKYdXiXfNKu/A1 KJ1PofY5f2n9GooL75chsSCuRDUvO1qTGZm7pt6AnOpe9ZPavwbZJzUoeMB4AXj6G2JrP2IGbg7B 0nomG72Kov9yQmfUdV/XmVvoLshF6FVF5Y2bN29UK15Fik+q8a66zxJxZbQpMesv2dl/ySDrr6Ls uqvmo3TkqLfyLNuk3KhOJNUSK7vJlu6GpQmy6bgAeCA7OvUXeel/VES/pYjeRMDwOHmz3RfycElu gw0cvAsqx+js8PP+yveU8AavNhREv5VRhzmBFyr+6k8UGEl6RSN/XMmeaLyZcaoVNnOTagdjH1Rc gHZuVJPQ5PbHC8IJ8wDyT8UP2Sf4qHlirEvmcgy9pUj+U3r6B9kn/u0sf5zZdxZ3Cj9U/O7iH+IT ws/VV6iNuj24f+XuudK6x5zYXMa+mt7CeXDiI5JX6ZXcFo1P4fZ5Zuz7xU0gLrxfjuODqd1jddic rrVIjmP6Vh43HlCYJ0WAfXNtBzw36f0FwmO2wz5/zAx4oiFYAF0Y4To+BBuP0FZHiaaP48QPAA9d Z8eJvhJuQuLpjf96e9jfPIXKHfGbdHxoejqQCyB+jMdBNwoygssBO4OLC9Dyxpb+AAAgAElEQVTO D65vxeOg80DNkwH0nuh+0e3D+UC1MqT8Q3lFXrsO5gkvxoSvr0S9iMgjcIndyx2BjH2kg/Bm/Xll MCqfXG2AH6p93rxDvwbiMljdK74Vq7+AfbMajgMeoL9AeEwt9XWUV37aLg79RWSE2bIVBrZ6mzPg 8eqrr7rdBW9x34nP/1Tc0ebx3dd7P3ksoeyNGdNeGd1SsLLmcDtSe/8kVnSh8L+/rjzX0Tdr8ryo 8T4bv9iHvveLnfhIiNjwxdk/Zba0PT97yYSftO09oPxzbVn5pYpzhu7vO86V1LZPCw2TaMrf+PPW 3G410jdrOy6daNDIQ6f7OvWBiuf+G59T7eg6/6E8Uyy/e1HceNEXX+77oOscxhk7/efBPsbykne2 Vh6ovNZyrfP7c/Ul10ZF/FSGJ049vbyPjn/S3Z7Y3/aOgm+6Jt3srHqn6KFflx99Mup3E/hpi+YI Fb/c59s3vyquOP+ZR9+YVnXuU2cPYMmR1+JfChGD99ipdgTHBcKJ9a0ObP6o5uj2Lhya7mtt5062 3hU1JUT8/RUqzgfHiKg8BHwH8e9JxQ/xMPEaPb5Yj+mVvUsLvB/f9PjKX4/z/8P5MiSJX/MIljOi L54Afpyr9LjTzZBSKn538R8gpefVJA8a/7FP/OXw7yr61L59M3/yXVFxuyHY62Zxa8XXnRMV4WFN J5UqfeXWmiZD3a4VLcX4+abyyRXjeuj9js6PE/szxn/yMaVfS430uARxfjmOD+NufPXOubLP6v7l f9fNfaqn9uHpXq+aMmHVTH8gklDcgX4q/Qk9XrPvJXnriIfvv2f+vvQ/yzcVnc8fPWHVoxASOEPY nhHOwBC9D4+iCyNUxwfrJQnVr4G5puDxhPS2QH0lRNfbEqjDBelbOVULoeCXwbpRgngQHBfIOv8L Nuu9Zh0fSO+JrisE8o/P1wXwAOooCdRjwg4B+AH9NWsG7Ncp+N3GP6zTRMEvOxWTG4u/4SMPzErw 2p95WZ0YkqxuzlcjLHW3Xf0u0blzXZ9OmP30tTtyKPp0YX2g3pxtngxWvwyKOzDOCNb54mKtadzh vycVn2GUrNwfE8Bfs9onAdu+fRkYovmSECJQFwbQtXEftYLw4N8pC9SNEgrU5K+drpMTKwB+kx2X dZeGKy4QTjoPTvi/ZR5wi4PQe4LwO4kYfReAn14ZdyOtFv/gw1PiI3WQuqMeQufTYmegPLlVfbqB 7FMx84XO4wLwIED3yrl9EBgQLwAPNtOn1yOxa8ECG2U7RiYDQzhfjkyHGSrGAGMAZIDp04HUsB2M AdO3aRgRjAHGAGMAf/EnJD+uqF+fLoh9Z4VlBWOgnwF2fdnPBVtjDDAGGAOMAcYAxAD4XUroAFbO GGAMMAYYA4yBO5ABNl/egUFnLjMGGAOMAcaAYAbYfCmYMnYAY4AxwBhgDNyBDLD58g4MOnOZMcAY YAwwBgQzwOZLwZSxAxgDjAHGAGPgDmSAzZd3YNCZy4wBxgBjgDEgmAE2XwqmjB3AGGAMMAYYA3cg A2y+vAODzlxmDDAGGAOMAcEMsPlSMGXsAMYAY4AxwBi4Axlg8+UdGHTmMmOAMcAYYAwIZoDNl4Ip YwcwBhgDjAHGwB3IAJsv78CgM5cZA4wBxgBjQDADbL4UTBk7gDHAGGAMMAbuQAbYfHkHBp25zBhg DDAGGAOCGWDzpWDK2AGMAcYAY4AxcAcywObLOzDozGXGAGOAMcAYEMwAmy8FUyb4AINe3yf4IHYA Y2CYGbjd8/Z2xz/M4WfNUxjwpJTdtkXaS8U55SeRlw5J49fEzRYPgSNarcbLRyb26DfdVr93W81Z 5BOxelHCmP5i85rhzDKlvDCwSJeaMBR4zM0M/Nn05c73as9L/OeviYuxQ/ID8AbhE8wnZOg2KXf0 113AncR3ME0MR94OIg9BPocDP+bZEc8A4wMQG0c7QEV3Fjvnn3OkSeKlu3v8b9IeDYMadnMeQs0M U7n758v646unHSuNFgV0ok7OqQBk6Hxx6bGUKbKh9rH1wp7MhkLSyqhxK4divtSWK96ZgyKrSxdE WHzpbPxI2aBCKFrxi4QxEkuxeaWvtxWvXuvsRchuljLX+GE+9V9VJykv88zYz5dDzhvk4iD4hEzd FuU0f90E3Fl8B9PEcOSt4Dx0wudw4Ec0PAOMD9TY0OxQK7q30Dn//zYNdAg1jlv2aBgwmrs7D93r 4S1bc//92F7dtwipywxlaoOa+1emRuoP65stULU6rVant2wOsNKn7ejS4PuZRl2H1vaupqOd0Lm7 e1edUGCLXt6unwjodRqNa3iMXU1lCPl5elljDltQkDsKFwT5IKMWQ7Xeh9clEapVrVf/K0VqVw77 ZVfRalNPqLDatl7F/HRobXba8iNe+MLVPJzjXn6Oc7pz3uj89Gk1WiMGoO2yj4s1Kufrg+ETIToe c0uOPDivbz7O/Nmn13R1YJ6Jb7TlVuxT/aU1YlNmG0ebXVYbzuJLqkF+QXkI5S25hOrQ6LjQa7VW AIBVyD624zAOOM9Dxwac8ekEv0O7ZstGHHqbLoR3wPjNR/V/UvEMMD7Q4kK1098MsAbFxZFnwABy zn/EgoM311aT0dXXyeg6UB4O1H8hbCOk3PVpxUXAxuYrhUiUXZcof/H9+LJR2XW/efD378byB2ua D/1+nyLfQLbksqz8pWuiApxddNVXbX6meJ3a3HLivMbdcyfjLSd2PH187Wam8sMpK880BKDO6JiC Rzt2rD7XEGDA6x9viJqsby/NKIzN6eEakGVVL8+IGA0Som2vOVB+EFdtbjl6qLrZoBc9EDF/sgTX 9/QjE2ihfHMhMSRKrvzdH6I4O/r2Q0/kbUCjAtCY36qWL7EAg/wihzssVcUpyacqQ2QxUk1OIaFO UbS8ICFEhvrq1+c8c8SAYv5zy1Pok9iKHLwv9+kraTPGAPx4euMamoNZe/9ZebEhKGjR2oUvhpn9 deQN16Xwg/6Z8seVDb4hSKPCpw6KwGhVO/5MV6/dEuY4D2MT8DIoPmnxgnmg4Df7S8NlrDmemXRM acq3UVnqFzcQp9xkn+qvf2vh03u2IHy+de/Gvy9Z6NnXtDHnV2UooNMQlP38u1HX/y6kv0DxBfxC CMpDKG+t+Ywehcp6oqvXlkbAcYfsA/lJYuKYh/Wfr5924kj02A1/fWFuft4z72nKYh6p2zI3lMon 1x9x3tL7HbXdi9UbF/59f4BIPtWrMF+DISRXrjL1Xwg/LXkQjAcaH+hxge1QmyWFUFyo/kJ88tYd +cflmkvFbx7JO6JBMUFSfCdtoAXKQxucaKDxdqBWhme/268vjYbreM4YO2n8pCDskRdeGY8/uz2R tnmv/y4yWSZPzc6aEK3WZM7a9myVkzNUQ83vyWSZqFpad2J+djS2YsSmBdsRSXzUhrIyg/oq8vFF DeoevI7uxmdIXaVP5MXmGBIL4kpU87KjNZmRuWvqubkct+K4tJzKSiL3XZG6fZ3isGLxZ/EHWm3R yzKyQqKRIT+jwjLFi6bKQjpxix3ctRhvFPDLsUW+xEcSgC/TVe05hb7pWVMTEVIt3jWvtAuf4EvG +SK8K6ciNraiNDGQMHSys3MgnlXKhgY/UWdh8yp5blKNDmoW0fn5XnTdoC7TqNCEZNyeqh0lT8Bn nDlHL5KRRtAimE8wXnQe6Pjh+CKkq2+sDAjMKHq6UhWZjHoyNxyv4Txyj32qv54eeKpUl/Wog3xE jY3lVV9/60028S0Zn7u+2S+sv5jYd4wv4JezPKTlLc9/D1KEZOdOTy4jZ5l+ziIO2B8oP+1NSjwl CKdcF3644+lN7lqhZi0ZB6h8mg+m4Ifb9cadqKynMB+lZ0zASW3uvwB+cxP2n07xcJXtxwd6XAa2 Y9cyEBfIX4hPO6uWTX3bfv/345XtqhCZNKeZuyTAz5YGXhzyEOy/A9saOTXcPl+KE57vvvpfz4n7 rnOTyY1eFLrvpauqn0c0fPURdjt9fuOOJWs3vFBaMpWMt6qmNpALD59Asq9Qofp9Yf034SHZyTOm 4m0X7Vjup0XFbqmOJHcRQsdOup/0B5T99LG0mcH11QX4yggvl775ol7Txa3nHLoAjvthcQdbn87G 9aPDT+he0XWv1a21eSKrqEzdtOHZt3BLllFEHBi3I23fars7/YBfHBbKn7C5mQXEQnpL2pYNS3af mI5dUH9yrhV5BKetKMTzJ0KJlS+d3p1aqsvQ7Z4bOhA/ifia4ODL1UcJ/4VHmjrsmrTwRufnyv3/ 8xhuU5H7XO5vMSrZb1+P/zW2IAYvy+3M928K5ZOOB8cL4AGs3w/Bbs0rbOYz4ah2+9+UOWfyyT6e CzfZp/orDUl4d14yvtuimCF6Y8+cWfuq4p/MxS3nPZs75vJ+vCKgvxDEeHGML+QXvX9hE9S85fmU Ty05uHxt2uIdV5cWRI+a7mP1xTeudas/QJ4PlJ8mC5Y8DI5aw+U/6kWyF35ZYGmAyie/l4ofajc4 Mo2zj/vvlk3LlLhXmPovgN8CwG7FCR6upuP4QI/LQHbsmkVQXEB/AT7t7Fr4r60hc2T6vLqDqbt1 K4rkdvXATfs8FN4fQdPDuEP4ODcgWJGUDO99XtztR298q1IslVnuukrEpts3XvxDQNtHkja2PSYl PpaBWhG+lVrZmoMvCnPeF3dnpPF1QDsevF1v67tEEXNfjq5Wpe579kODCo3KTZpBAPbyZ0m+90+7 9z48MhbNL6i72D0/yHLT1AYLvyH1vRuv+IlHiz3E2A/8FFYqwZ7xLUq5scMHH6+1ecDJM2yFB/AL bth0OmfEXHmYYPsTXskmWWSxkdzBYpGFZkTjh8d5/zhCjafMhxx69Vo3Qty3eh14A/lpxcfxzuIb CaJeRC7ZvD0sfOvrz/6j5QaaNPmR0NH9eEhjDosgPkE82CyNB2f1HZDgAn3zB/LDqfg2UYli0eie +CRVKrLE0R32cRNUf4Puexgdy9/+19fJGZvhvVVH8M0JxcxxYvQVQUmLIymnLfT46ps/pvs1QB7a 562JT1O/RbIpzx14QSMV0YDwZYB9fifol0Me4p56gxzD/eH/muNC5ZO3jzOcW7Hqd9w22K4ppX3I ZMnbB/DD/ZQeX2h8cJJvTv0y+2f+hOLC3+Oi+QvySUw68O/lSTy+N4BcvIhlEwPwhxc/+uA16kLP Q6H9kWp62AuHYL5E+vKSNz9uqS7Ezml2Zew6HSpPT5kZPHFKDKpWKQ/HS7o2TNZ+urQWjw/y+ZPH ghQYGvIrlIWBWSeeXL/8yoRphzORiJzxg3b6Lu78eMd53SVTu3vP+1t+OyGd/dr06LJa8sgt+8ll /K8+pj2wGFUVomvVncaHpot7jn25K/Oy3+OepvmYiko6biY+/VSd2rDR+Mjlc+vye1BRau8jHR9s IRelhe9XJD9l/Ji0fmpbsfytuEDt3o+3nUWoluzdlVV0HqEZK3+1ZHwf3S9qi1aFOVNyvs0YrVVe xk4oHp883thZrjyYzzm7ZU3ReYmX6QctED9N1ds5nJmJu+7+7dh/Lz1NxufoScEI4I3Oz/eP7/oX afO9EsU4PFa2F+5XT8eb20s/eOq5lPF4Xun6x7QDsbhkzwpd6Gj86WwRxOd8IF4QD3T8cHx7+8iI LBfdjfStFeqjeLhRn9pW/lDuw+gklWeh9rFxqr8J98gTcfZoyhSRqvh2Repl/B3mmPvw6YfA/tJU nU+Nb6+W7tdsKZCHfW3UvOX9VdfOSTlY8OSYG0cqU/N75JVrT0dZzpTsQu3G/ost96zKxF8e+HoV XlWRuPxhdoAnwOcVKn6oX7SdfY/vv9uOJT2DPlHhBk5tPvSz7QsDW6jjj52X1ptUPND48CiQb7MD xFQ7CYGe1m1Z1qG43AfmD/cMxpHP0a3U8TNg3P24rXUHnhZ3Lm/+IomMGpqkfY2K52zurlngICgP p00SPN72Gx0xa3fdvHnT3WC0O/P8ktr7rSqiqg/GReDtpi93rFClEsbxIkpWPft/C/H3VqBFVxOz OdJUmdSR5yoO4fuoeI1uh//FlbU1WV53mvmLqV2l4bmx6lG5V19OszTZ0bj/paLF3JdoyGHJ4Uff WhTn5PwRX4QUFz0bX0v6FF4Sp6u2Ll54uWSZvIJMIdEh2XG9e9ZdJid2GQtaNoV1pyjl3H09Uplb ktUZO8L6QL/M1ew+tTu3+iVpUGKgorBdJZdlbHsmc3agWNu8029XklXV5LqMHaHc+T6NH2nx3sfj GzCdcjlSc+ee0XmKAnweg2DeKPzMEylyY4mVwKwEr/2Zl9WJIcnq5nz8mLl67W781Y+26vVBh5Xy qUerl8TR+7cVYmF8RgZT8CyKQzAP1PpgfHVn1m+XK7kvf8kD02cZSvM16rzl3UvQAYhnYfaJ45T8 kSHtjrf9UnvIGca8SxlBxTny6SWnF8fg2rQ4WpLXhkd87xiML+BXyrgGev8ynKHnrQjZ+ivPeGxb Ziz8K2f39d+2L7cGqchMic+YudsZCMclJQRHksYnjJ/K5xlz/5VPyF6KrPrv9E46P3bE22xS8IDj w/Ruar6Bftk0ZLMBxYXqLz6SzmdQC/mluLVh0/hprCpZM4v7OiESyfGzZFwleV7djrmh1nXN63Ae Irv8cWW8NVsdMZ9DMV86d86o1eIvv3jKpODAZT4e19R5+Xj1GnqNRqPE6qYuV8F1OyZ7Rp3GKLJ5 1YC1HYmP1PotBGYMlE+jQavrQxKJ1IX5gHI4Htqc+mV3CP6NSuMf35u2zpDdkp4WKBK7CJJrBeAZ /xTkulFi+9YFu1atNk08u8aP/tAuiaJZfnTl6Thy48alRSCfgvBgAMLq49+JI2+pVOR6bIXZJ4Ac 8wdHxOAlI/f2uR+826S6yb4L/cXMNi2+NL+wZSf9y2zN/tOERyodMP+d2xfol0Gr6UMyCWXQoPBp j9l62/V2neO3tmmzLggPLS4ma4LsWPLcIS6AvzCfNs5YNnD9G8jBuGU3bYWWhxacro0nNLPDWvbD z5fD6u5t17ihJlwZyV0OEuhZz1zdEApdYYwE38il8JZ7T5xePHskoGEYGAOMAcaAGxlg86UbyRwK U5qqqpJLRhG+4DEY0Qz5E6EDntYPBQpmkzHAGGAM3PEMsPnyjk8BRgBjgDHAGGAMuMCA239/6UKb rApjgDHAGGAMMAZuNwbYfDl8ERsuvaHhanf4mGYtMwYYA4yBW2fA9e8B3npbg7Tgoo7MIK07HDY4 /R0HM/0FmkvlH1Uerdchf7+I5U8kBHM/+TD9iuOWdb4E6/64SedIcLv9fJjW3M6zQwvDW2DU63RI hL90bdT3ebr8rebhxfwjb925XtUP7LxQ3atB9Bfn/tLHJeEsuMuO8JaH4YjbYL50TUdGMHeQ7tgj zvW5BLZj7CzGb1+0HBT+sC44kHvrjVv0hgah+zNc7VooMK8MRufIfOzgP7kXmu83oFkP5O+Ii8I/ vd67Kym7VRUQVKRankD5scKgWtI070/b1/+7XjQqr/tl8++AB2WQHeQWBpzrVbmlCZeNCNa9GkR/ ceIvOC657ABf0XU7TZ+vn4Lfmy+y/M6ss8wQo07f4vUvuv7j/PY3rev7+c5KfTIjbqK7+qhAP83V f/D5EuvjaI1SqczT0KETjZHybxrj0GDdJR2S8L9CM8Mjn0RHJrZm0eZIlTMdGesjXFo3647ZVMa6 YylYn+uc/6oeXp9L6zW6/2V+fFUIp40hy8b1i3hVEaU+GBdmKSMrnN6Q0Wc8FH+sG6UxSsdIza+U o/HG6/4ozK8Hs7EPbUDt0uxDNpy3i/WD8CuzuDcFQgZIOdE5csIz1jnif6c7WuZijroUl77v8MvN 8e9z1FXvr/55VGhX+dJm7u0TrW2mF2Y6axfrqemkDvlg72Rf0+93LS7Er3SQpc9COUTygn9BmLme c5z2cTcf5fgpzI6Q+JrbcuavI04X4242PshPx3ZhHuzxE72q8OSE3DkqIXp/EFDYX6wLppGMHmPu ulQDnO7VVv9URNHX4w+w82sQ/cWZv9C4RAXLFdL9ddnOd5pK8t588vZMyxKCX5zvY9J/tBSSFTwO P4Js6/eUqd7vrHtlRyg/ZQwmn22aGNyGi2ORAONO9GIgfRxrPRprnReBOjICQOKfzcK6Y5D+jlA9 GmPV8e2qxlIMq7v1z5uLDk4Ie2FJ6Hi8SdcbgnWjqLwNSveHrnNEtQ+x6aRdqn4QZAe/phPQQaPr HLlHl00UURCXPqkYa5/lH//6LUnbEQ6eXPV8sgzR2wX11ADHjO2nuJc6JRakbokQZf7sbf9V127w kzE9z4G4P9DyijAdOsAO1ncTFF/QX9g+Ne76tkNPvLsBv5FnatiGuTpV9tf4LOXJD/9rU8ffQX09 OqNwu1Q+QfycdUe9Kid5RceDb0rQdAmd6IIBdoTqXgnrL3yjjv7ioQ8alwCcdH+F2omIL8g+N2kd ym19MaG+tskXHZt1GCsKgONwWHxB1plJmQa5akXF7Buf+O9ail+/+R2ebiWgDh2E343l7v++D6gX A+njADovg9WRcZEcUHes/3g7/R0AZ399+zVdU90q5WVy+VJ2WbmuNvNoS6e5CkVvCNLnQgBvgnV/ SNu0dgH7Zqj2n1C7kH6Q/fGO23Y8A7pa7tJlCxwbzkM4+sUBVT03tSH5BHITga6vBOupOXpCSjyl /pyGQ2Hk28s2HvzongdVdb/DkzGgj4b7P6DLJtxfQHdMYHxhf+n2wbh7iIKIbrw6/0LN2c5CdY8a +Y7GV9qgX4Q86kJvF9Jrg/FTjQvGA/qLAF0werOWUuG6V671F0sDDitOxiWHus70E4XZQR7+Y3H4 e06+d/i12MNzjhsfLZqXPVEEj8Me/hN9CZ6WS19WXcDv4cZLyD3khYh0nUeuwpD/cf/1JdHfqcpM 6jXp76S+b37Hab8+jjZ5dAjW5/oVp89lrfNyBVl0tTLnN+J7WkRHBmvD6tsUUe8utrzmxh2scLpj SCruq8F3D7H6Aa871uuDRzauABH9nShUU62M5JuDcIaCL9yRLkm9+VTzDr9dqblLr6ZZvZ6Y0xua t3OrBLPUv3C6USdfx69wxPpcu6Ok6F2DnkiO9NUTaQCia2bDG9H9mbA56MA6rC/216ce6jWgAW+B Au1adJ1s7PcDs12D2rXoB215dDJCax/dGxPbQPTaomaOtzVgt2XPM759SXS1Th7d/rdahPVk8MJd nRFdNl1zZLWK6LJ5R6PqMqLLNkNWX/IK/5JhrMtmnT9QXHo5jQtFoEJVm6RC8uyoJ9dVVV7D7yQX 0dslemqnlUkaoqeGX148r6h1Tm0Z1lOLedC4+d2XzyDLDXUt8kvcviRBKp3z4YK8N46lFvYUZp4m OYz+kd2SsVZnpR9ni5PoslHijoT6C9gB8ocAoy2gv1F0+zWHf4/NYN0xh7jH7f7f7sV7FYoGpRK/ mmpBy4ZIzB+a7BDHLC6OqK+JzifQL+pL3qDGfS0UryjSumUx3X5HyDGvTHgsVW1XoDzfhHXBPl+X pCG6YFGoqlI5i0idDLzwL17mX7uK9fXe8Wnv1xm0zRN+rHa1v9i1bPEXv/YfGpfsDuE3IX9xvxZk x2y8MLOWrIoDHkjghkSi/+hsHFavKp7DH1u0QjmZ3IwVNl7xx7rrr/vnS1B/B9DHgXRevFrISATq yPR1lFd+2i4O/UVkhGXEEkYKqDvGP26y1+eCcDpvVMLddLGSu7JU55m31Rvib83b6XMBvGGvBen+ mBt2aBe2bz7E/tNJuzT9IPvDzdt0np3oHLlHl+3Gd/jZ4vPzXw7co8oftTpRLlpXpaz9Vv/Qt5Ce F6Cn1tf9jUalFkUH8P4YOju9yNWivu2jaYePlqzs3R1grK/eOu3wOmT4x791yIc3Q9WPo8YdP7kX qkNHtSM4voC/2Deqfc59IO5eoziBLFzlMhF8Ns1YNn6JslM5fT3Ud53KJzFPaxfuj5z+Bj7LctS/ I6b4rLPpd3Q8pGFwAfzF9U3jRr8uGGiDR2Kvrwf7xU959uOSk/5CWqb5i4vhcYkOF/JXiB3OX9me 3rSfHyz+NLBn912vHcRavBH4zeC4TYr+I89PYuXKtaptcnzKVfdNOxofjATnM92jwZUOxXzJIXHU iwH0gyBdpHFOdWTOfLpiThW5+Mi++6qtbrPrPNB1x9rO0vW5ID0puD1sf+vHDcW4woelWRclaNbD a4geC6CXNLaLrs+FAF0kbFaQ7g/U7iD0xajtzgX1g+gMQTw70TlCt67Lpq3J/Mv/Z+9s4KK47r1/ 8hFWVoUIVjFgrhpjL1pdLLRXYxoVsFby4tobvaaKPhorcPNYX9qPWngq/RRzs1ebVPBjLZJHsYrW FJOHtVq9TQQTTYNNsXFNkQQRbcQEzbqWJS5Z4JPnf2Zm32bOf3Zn2eVFz3yUnT1z5v/yOy+zO7t7 vpsgoOP1X+Svbn5xgOP466uEBjqc/h2EeyVdD+U8NaJL2J73lTI3+5dwf8KcUfq/zd9fPWrAg3Bv Fu6LRA4gWD/HeGTUspZ8UTt4/1EG71Uizxezj3GyoP6GfTOKgPcyviSvIdd0NrWmobB0Yd7UYRHe eRVmZol8PaKbzNQT84vp6UpBHj/GraPfyvHS2ROPy5DsEcsX5YIhX+nUyr1y25dxA9HxMrSFyeeK orxF1rwky9P1FMsXXhlqsuMa7783VX4+ImrgFQt8sUN8B+5vHv5g/YvLykz7VxQcG3P71jum9KFa OWuuVELwGJb18Ni8GIwfhHJe1Dgytsu74w7mwjdPT60+kg4jMJiNzR1z833kfC6EJ4W/u5XbXzf3 6na4KYTwhsY0I3wunIvE5hlhUiB+tfPFwAGDWwQvEjF+EDMiVGc1zhH9FLA7XDb4UFz/6kIaj67w at7m0R6WWZZl3cbf/V8GzytnLGHy1JhJQaH98o6YgwJ8SqphKH76jUXQWMAAACAASURBVDWp4+CZ L3dJ4hmp8MiogYDzRe2o9R8pRN+HkPDjYt28uXWzax5vzF7YRD9OKVvWupxyuAixnkzemWnRFTbn bVa/X++24wrSw61j6hlN2PGrcOs0xQOVmf3c3Z/lXDDhLrQrePejZu7VVRd3TD4vYeMF5XMh85I7 NMUOM1/o6TJuozS/KU4XC9z6eB0X70XL7Yj8R0/92DLHmuUXji2dBkhlQIyt+rYR4Tx6WQ7Xbliu lzRYBi9GnY8jcWfknBcVjkxXezsJnG8VKgWROENlnmFHXTcWH4phRKXIj33sTIQ3JOmjgT/FcqDG OQoRl43lluK0fHleQfDU2m13HPpoveOuvbMrAn465btYgeb+020Onab2DSJfUciA253+EsB+pfaX gFR0k3GZbRFYoUxP7fEHGU/A+fpNIxTcK0W/9etVa4XQ5avVs7w+RBIEh05uJbjnYbteBhcOP4sr 0KcU6Gc8tW5rF/58Ze+/K3I7FsQHd3+Ilaz2+MMbDytGXtZ/FQhdT+2/GvDIuQKYArqxpXMrPDy1 RPzuO2ahf5WHP199/BzzrIPOCLospJPEzfxaSKcg7fGHN57+1fo8Wn8K8PeX/hTix7kCXAGuAFeA K0BI6Ncr4KpyBbgCXAGuAFfg3lPgfrpe9jWOVV+L597r3eoZcf3V9eFHe0YB3g97RudQeAnphweh CEhmQ8mNCoJrQ22GiGMlCy/4pxrjUeoQvGvkTEHYRn2k48GEH6x5fDJSq/8Vs3lDGvXvL2kr+0mQ 46W/JIzEqdQBqRj6Ym3j6B7th6GXtW9Y7NvXSxavKgiuDZU6JByrELaZpnhYOoQwFtFUgNw0jMsz Wd9+5NBzWz5tda93kzz9NVjLUFp/X+D4xEQmTnxk4eo58xJECGjIc1AYRHlDmvRXmO2jBax+EuR4 6aMZBhYWS4fAzgxBrQDHkeSpm/2wR/h0IRDlXjERtuslzlthc2FYgjK5UX64NvBbeiYXDONYufwq OUGuI+xHZX22X0GHWCWUCouHpRtTB3dYbL+uw4HGGTA3DePywDqI1mtmC10STtqsNlh5jtz15fiY a8tNLeaOlfMC6HlyHpPLMH0MNC+MN4Tp7+3Dd5+tM6u9fM/zfabGC6M1A83L16r4jNlPghwvLPti GT5+2Ryr0OjmiicQfZg6uAz4eVTahzZh8rnYeQU8jqQ41Poh269PAj3Ap/Pxd78/CWDW0i4Rxg9i cnAw8zg3CuPaoLwtrfwsdkgauUJgxKPDkCwjaW5yWpfMOboxdTQ7Hu/6QgRZsy4fmDkO1wHJV3uc mrhpCJcHIo7+X6tvzv387RX7F1brCmufX/lwzAgoTZkjcHzaDBXPH334493TzprIdWPlDceCBDYf EOUxac4L5RYx9cf4U0k6RGekvYSmY/5h88JgPf38okXHnST937Y/Q/6QcRZYY6T42ZvA4WLyqpim oRDvJ5rHC+aCOX5VOFZY/J5xIXgS+znmVKs+mA4oZxDR3/hlybw/HRmmM4yPLKcQU5Jds/bXU4fS CRPLS9M4Euww+HoqejIkCj+fjuH0Pi4Kw/d9EN4KzsFhy49xozy1ZVwbNd4Wi2OFcJQ89uV72rhC t+q3TTi5yUIMeanF2c5yc1u1xWkhA8VFhFnxILqhOqD5aotTMzeNzeWhYkVFDx+d+K+JsDd4xPj4 hOF64dWYTuD4kLGPxI+emvHSqfFpcPzKbVhklb3hPCZteQGfSxtPDeFPYdwo7VwhNi8M43mhftmy EbSfuOtrGC/uczw7+PhFOFZY/0T6uceTfE9bu2M6oJxBdB7QlpfmcUTTZM0DBPErl0V6Hm4+HeL2 Pi0Ow/XSw+36aXn9p8Dtyha4XW4uzO7FGzevrBLmTcp7woSn3Khnt8JR4FU5fuZo3ejwXVedcm02 P/ey0bVqrzdvq97m5oLRV4YCx+rweroMvtcmcIKyaAHwsy4cyK1y5DkOzEzyquG7i9TH/H529c9w fqHxrZeeXrN79Tv0KhFbtmYSXSwTicfNqfHRDdMB80s0xll3vhxCAm5aZe4Bx6oKWB88sA24PKVQ k3J5Zs5NEAkS9EwX3UJhpQN4EYQkxNPraaPVSvlNJfOXlix1/Zu/9NARuIpSnhRtKcrP2rz4wDsT QTkL8LO05gXvd4E31LqsBGwBT+2rn391YK70JSam/lAI/CkzXM5tJlML5U9dyN04TkdwndntBe6Q TeCFkbpd/2MqukilEzll2vNim8f6iau2hvHiOsXnERu/o4FjRduLcqxeWmqC1hJX0Q6Zbhr7M6YD 5QwKM0AHiV35/TJPboh9rXkFMY6Y/RDz6wnYd8+bT7f2OvDp8ghppnw6kYun6G/o+ELGo6+3+/1Z GO7HIrwVUWmMC8NsB4QbJb5Fk3NtcA6OaFvM1Ifjw+QEMSORCrVwhTou05Nu/9NKyPB2ews8kI4v ATXkugupiAfRLRom/sEPwtkxUUOjBkRF6Ynd0Q6oS7V8tcTph5tGk5Btgv4MLo9QjcEPcrUXfMen q3H/X+jl+RuJiaTrKsJvcl1xlTwmLXmJQeO8IYX+9AQGfwrVeYA+6zt5pJkMI9aa5qJqJynaG9Wa twbai7mpcZe058V0wewnkJRQWet4YXog+PiVc6xCpRuNQ6M+iA4d9CIi0E+lvxGiMmz7tC7dAs1L +zgS7TP7IcOvWJvxN8x8OobH+7hIbK2QCoDwg3AuDOqdyY2afksjb0srPwsJRytXaGLyf5Bac9Hp CVUX0iy2amo1klC5kXhUuFpMHeZ/cyE5V06+qLV2fntiVNvpD/YXXI+ZE7FGa5zq3DSlGKpcnh0n mi+Wwzm2/XmHPk6amJMzZbSrfvnmg19rbSqiQugKjQCpGMDmN7k8ynlMWvOCj5nYvCFEf+CpMflT qYjOxHlJE1eoo4vNC3uMvG+qLBVE276h4mN9ZMr6+QsAceWPV+XSyeuR2U80jxcvg9672Ph1c6Z2 nl6xiPzBDOf8bdvRb+x6MkS6aW93jHMnZKPgDD5G3mPq7+63AealdRxh8wC5JM1vMr/zmFyw8PPp vPsA3w/Deng4Pwjhwqi0AoMbdR3j2mC8LYRjhfKzkHC0c4XgKxjnyk4d/ntnXEqcI7fWRGE0a3Ki kXhUuVoMHeDeEpNnhHKdkPrRRI2bphTDw9nxHHNxeXbErKD3v6VN4vKcXGqA67q46dKyH1228enl 4/SuSoxHNo9Ju/5yTlCAPDUlf4qpczTezxk5QZHjYv4uBi9sMXk9Zv8Kr1P88qq86sp3Gf1E83iR 2/Q8Z45fd39QcqxCopv2doeAGTrAeGFyBjH9NeelcRxhXD9yZqnhLB0vSj09LeHa6wE+ncsVf6QK hOF6SdR5K5q5MAg3Cms/yb6cC4ZVD1k5w2+n/cY1e0dM9CBr4xuLzLnDkmuq5k/FHarrhnG7GH5x F3AEqa/CTVM1F+qD2nlMUgRIXiGLT2kfSjRzheB39L68ML/xKf36OSXM40WKJ2BemzL+YHTDc1ba l+qydWBwBnHbakcQv31lHEmhK/pb0ONLTYv751g4rpf3j3p+Mj1X8cC0Ok+dsmW3l48VvnLgKeN7 vgpo5zH5ns+fcQW4ArgCfHzh2gRyhF8vA1EpyDrtd+pPf/Th7XYniRo59V+njxvq+q5PkPbuh9Ns 586d8vCzDE8mRUfcD2nzHLkCPaIAH1/dkplfL7slHz+ZK8AV4ApwBe4TBcLw+8v7RDmeJleAK8AV 4ArcTwr05+tlf+Hg9Jc4tfb7/p5Xf49fa3vx+lyB7ijAx0sf50XbPzm55dCWLRX5W06eaZe1NOXg 6PWvHpGXy6r13NPOdoe9nS5h0yn8dTnupTjhe3E+YcCX6esP5R/Kz688cssVWrceNealjKdb3gM+ GfWrMf6AHZLGD/aBzltOVmnqmWicgTvmNQNTQBgIdFbZ8e7FwM4Iay1k3girzyCMh228BBFLL54S +i9TyHhPMYOn5T6VN5f5Y1t/eTdfOVjQIPx0b8jI1XOf8Pm2TDc5OP5cazpuazqy5vDCcjeaY0hJ 609ypHVeeiVOFs8oxFwnTXmx4tGkcJCVVfxqil+D+/a/164wXSeE9th0nx6rYkQlTpWz+vYh2TxA iLXamW5Ztz3yL+snnK5K0w2zErrmFYH1kZzWF5acnt3yy0ffOQ7lYlrdmTdEC9jfgHhbPcLJUps3 sOh7qzxc46W38gnSb+ivlzJ+E2mrNu+1XvrZ7iRxUSuMt0Xjl/ObkmYe6EjOXlA8wxw5UB4ozsFh c3a0cpcC17Or8af7F8JV3RC7bhopoigD1zJb1AYeJ8YJsttvdUbExuoj7HZ7dLRneTV2Xqw4mTyj EHOdtOTFjMcduHpecr4SzsNS6qbmF49fK6/KnYiwEzVv5e2SHXG5JAZbkkGZr1qcvta9nyntiEex cqy/edv07OM6B2gH474NcnwOCwLD8oHe22v1TdNJDXF6lSvmDe/6nn3tcaY8XflVxvn521LNgxWz ittuD3Cy1OcNtXmSRikfF+7IFTt4f9BiBxsv4ZtXFYn0hQL5Zaj7MU3OLCu8OKbAaTCvOvvEl3+I 27+EkJZ/wvDQszk4KL9JCCVi0GDPFcMVHJPHBAcxzo42fpDLS4CPnS1/ExbPzirL3Z6iK/jGK3Fr v/iyUziZGacKr8c7/rQhpLotrXZjVQqiGxYexjMiJGRcJ0154fEg7YXwldZMij3/dsGK0yaLmPmQ QssLmycLFyWmbuNbz79+phLqNl09cbS2ydmu+2bK7HECMoUZP9TUyqtCmiBiILVVWXjovZprDYmJ 8zfOe2EyzoFi6hPXXP7swe1kCCEPbfnT4nkRwtudajLM6kzc+vyrs8if88ozitoE/7GFtcvyUnD7 Kv0NiZ/NHdNqB+G+dTbdLCe6rZeyDC/szawesvXSD77101czIBKVeSNUcWrgbYWfk6U6b1Qx2hcZ F9+8+rPVFxtgEeO09LLHb+1e/1HDMCfsv7F56jjvcUHc/QSxA/w4RGcYpwzuGFQO67yKBdO75WH4 vs+AuIcH06SufvLBuSsfCumN/RqstY3wfXB+k4oyLA4OYl87d0nFL+NQRHScwPQoT31l6ZbK33/t W+ZL/5ntWpWAFSfG6xHjbyPGsVuLJ2ZX09lQID1geTFioUUYz8hTvXtcJ8GOhrzQeNC8EH4TQXhY iG6oX5oAI37NvCqPoMw9s6mhIUZnLW9aayhecR4W2kfyZcYZMQAulZbqNkviIN3ly2fO/ePzgfRp tYUMGnz3zJMlGUXOrLK5p8yztqbZClKLN9TD61HEPsH6GzNqWojorNUOm/vW6bwL8o8YkzCGcmoi YScBHlvhdTs2b9CQmJu2OLXytsLNyULnDbQd2eNCpx9kcVZXOy23oW+QBksb7JMH4Z2zRjtMiV2F jPES7nnV5bpvPYbheiklaFl7ckYmwIEJqVhlGjcA5SKhfBlfocR3bGIZk4MTMn6Qr1//z6JnvPZ0 SRbMb87yggu5S04bJ/xmxzXhNGacGK9HjN8w/lTlso1rFu6+vaQsbcjEQbhuWGAYz8hVv7tcJ7Cj KS8sHry9Rq9ZVc7irLF5WJhumF8sfq28Kpee2COsqVtV+ZPaE5T3WX688RaWLzPO6LELXp2VDff4 jZN0/3VwxrTD5zKfKgZPJc8VD7+yX1i8n3zy6V+9uXWYfay/YXHDRWzylEXJCg6UdjuiBxn3LWrB 8623f7Q8quuuQED9soMkHf7xbfN3U1zxyOcNV7nyUVucWnlbYedkIfMG1o4Y921qxvbaVCOokzRi zNdHQWcjW589vWbKaK12lPq6S5jjnSDcRvdZ9+RO6O/Huj6+y6pZvdG80wAXzEuftpCE0Sjfh8Br b7p1KvlNUMrgQwm1BdQHvHZ2f0qE2lfnLnXdOlPzZktU0vdSU5Q3fkVP6n/bb/x+wrETp1Z3HBjW WV+7Y8KxTcT5588cZLQUmaiwJ06XNYQTFCl9+Bn76PLXV9qideSSiLca/PUJDz0CxMSK2WWXrrXO TlQLFuEZhZLrBHd3hUT85wXVmPGg7QUnsPhNGA9LsqPQDfMrhA1/2PEHzqty2VE+ijp/fSTtABGx g2iF21+0quTL1CfxkcfI6dJdf3yRXh2de9Yeh/vQxikjozo+ogaJoj90XGWXw8ASDsj7m1DI+IPp 7KoaqB1pHmBw36Lp3ZeuSKEHU356VHSs8MUoUTf5vOHyK3/UGmdkBHX40LB4+BsV+zD9WlGkRG+X mxafh5mThc0bg1TGO2tcQLApM3+SVmvOPfzca04zGVK8YhIVWKW/MccXWwRPqWK84PxBz0n33F7o 31+6OTh7P+hYv6wMFCs4Nmb9yTNjge8DG+VPDYmPIpfq9xc0VHVEiM0AB4DftDR/z/yMBpgfjHPG JZCua/sq8vMPbiuHg5QP5fqOPvCYoLyioBK+WdO2v5DuH7rRJfCPmPYFvljpXX1mWv6uOYVQheik KQR2L765asZbSxYeS/3NZS+yBq0U6NbxJbxQNmeU/u+j9Q13Bzwo8pYjoWcjcbr12Xm6qur0XjOc DPyjT+yU3wT34Opm5FTuO/ru7pxXHogrnlXrwPPCA/RwnY5tAzsx2/RHWjrdfveePVN1ejeoav7b zpM3JL94uyjcaMwLzmfGI+ar9Av8pi17xEYHvpXnBzBKHhbEf8bajumG+cXahfKqCDEdy9xy6sih ypwZddAPDbPHjXDrJmsvhS5SQWNt6XbalQqy9u84dDJ/2gV6vUsbMxrLF44y9Yn6mgHeZFfbqo2p 5pJRcDMWvnOb/oge7Q+Yfa3xYzprtSPVt/3eVPk7K7G/Z6lykaSBs7Zl/b7N0rjev373B/R2jNu+ bN7AfpajNc5hI78OXja9/uyOt/et3zWNtoptxWFs1EucLMvx+i/yVzffXPnEn078XzjjtarDnzjl XDaxH8JRYVPMYzrKrbvwk6oq8V/ehQsrF8OlG5s3sHbExgV1Gv3ELwCr7jRDUlufWip+DhmMHTED 2V9kvBPVeVVm45556r5chSwja8tZ8RsZpX+3FGcsr0k9Na22vOjjusK5OTeXVPy4YmHuW3CNoFt2 8omJ7reHhGQNtpuumw2xeTsXFUyFDuVsPVVnooOKbtVFcB2NHb0OvqPfZX27ziR8xYaWm+i8lv0D 4+KE+Hls+46OZqjYUjBjbwG1RAzFGUb6AkzYRj2aSc5BPMZvxQqvd13lGh4FriFxlhpfE4MyFD/9 Sgp8Xutkx0lc+tRc/es4ApMIvZFbc/PFealS/KUXVgiGDHnf2ZmsJxF6JC+VEPXJGycaq+vMBbVU 6qyJ5oz4iOsfSu1y4dp7D3WIfkvf+TR/rssv1i5yP4j+aF7wUyJWPBGEnZfjs8aC62KzW4rqoCtl L3tywXAdiU5MyxtCTC1rM14nhvh12bGGUltpXevLT4xl60bDZvnF2mVy0prLxoGrzLkFZ4UXdrps 83P/nT404mKtpJu8vdg/keps+KhS6P8Ga9PaJU0QRFqJsWxePAw0dr5onGT8d4aQ8jbyHylzZn2y Lvd6keFfhK9kIP0c6ydXsf7Gjh/VeahGO655wFxwQRrv0BNpsqSjsaGgqEXYhXHdVG0csTSHjHbV J4p5w/eHZOJ5cI1A+gMaZ2pejfX2tLNFa09XEx28rKWt9F5zy/JH3ZOByzR8c9B+pchJn5ZefD// 6bnDnRdPXadX2Orrp9pHbmT3Q/qOlW7yeUwsVf7F5g2kfbFxIRp+4rs/M9RVW4YUr0qS0okIyo4y TIKM9wTxFybIvMqwc08U9fz6sTIOTsj5MjL70EpQospd6mpvJ1FR4r2OYBq13XbHoY/WO+7aO7si ouHmUvCmxGjtnQTsyBYaV+blJ1Y2zwg9SbN91BJyAIlHm1/4XT/Cw5LsKHTDOGhIlC7eWcC8KswO 3GCw2+526gfJ+gOaL0MfsOCMjNXTu5WQeKR031L0iNnByvE4WUdwnVm1e69Mc5wh4m0p/AYxj6nP G5rbsdNh69TJOhs0jGY7ATcmWFadVwM21I8q9vz10lcczpfx1YM/4wpwBfqfAnwe639tFkzEob8f qy0K3djSuRUefpPq11i0Wea1uQJcAa5AzyjA57Ge0bm3vfT2+8vezp/75wpwBbgCXAGuQCAKhP77 sYF45XW4AlwBrgBXgCvQvxTg10vt7cW5Nto164kzQtUuobLTEzlr8RGqvEJlR0vsvC5XoC8o0Nuf X/agBsDx2Xm+UR/peDDhB2senxykZ8q1MZTHVzhyF3jTJ+jXF32/CSm4+5AMSlk/f4H4i6jgPIbK jl/vAepz6/KR7X85TwZNWv3M4oRufRPYb0RaKgTcLn6MInb8nNWXDrPbEc/L9smZ39ecqHeQuJgU +OnOaPgplLCxy3E7gWsAnL6iM++TSAeJztzgyx1SjiO/Ztlx+j3t3qoQhG73lgA9lM19dL0MiOPj V3Ym14bFYwoVPytUdvxmFqA+n10uNzXAL+rSjN9bnOD181m/9sNbIeB28RMG046fc/rWYXY7Inl1 Wk/G7c10J5D8mGM0LCYCv0JAyglix20hkB2U08caR+oG0TjVT+vBoz3BNdOuWw8KcE+5Ctv1Eue8 YHwZJY8pEKWVXBvMfkAcH78uWVwbJo/JLz+L7Uqhmx87ajwj6iHk+kyeW1bycVyuLUZcvkyZBaa/ siYtUeTLrua3NOB28WOJZYeeojVO+uNLfWx0hP3OLRI9PNrrjTjOC6N+Am8vWpu1sfs5ltdduraO caqlcq7vHResHLNDfyHK5tApY8Q4fcxxpDzdpwSLE+JxwMJbkdHCr1d9ThGeKHVW1qElauOr03bH ph863Ps+k9JID3DN1HVT10EZMC9RUSAs10uM88Lmy/hyuNwcq0Hn8ycAP3bE5j+unFlasmiPrTp9 +qXtM5MIzqPB7AfO8bFd3qfKUfrTkyWbyZBhZPgPzcvoolawMXlMAjcK5Wdh7YHohtlhc5fCqo8Q ucCrItEdrefzd62oARDw4BdO5OYk+Lajmx905lgOxhtC8sXkQcuZvCG8XbTZgdoa4rxzJuc3qxsG jyU2ujiZMT7N3AKP6ywbtwN6jMkLC6K9sASwfs7UBy7N597eZb5MV3pqbf7dtorKUZNXLk6CZsTK Ua6T97jzP36F6JWcPu3thcapVWdET/b46mtcMxXd2Dog2fLiQBQIw/d9nOd/enKThWSZl1x6Z/ZW umB+JyB8cN6QyJ1RcKz0EXrKj71jhUWrBzqrLU7SZBfsEDbXBuPXaOL4qHGU6FK3DK4Nk8fkI72M n+VzzOsJppu7itwOxjMKoz7uWAgZ1HL9LVMbZU4Zhj1E78si/CCUN+Q3Xy9n/naDaheGUYYdbdyi Abq70GltZjIqG3q+uYVkjwJ2RNGJazacF6atvRhRC0Wq/ZyVF3E0XloLK1DC2dXXTZvqCk5chbEG G1YOh1h2NI9fwYnij/9xJD+FHadmneVm3c+x8TXQAk3cVl5K1uVRHkhpnrRgovtE350wc80w3XAd fMPjz7QoEIb3lx7Oiz176NjksVv/fdJ4CMmbL3OT3KGrMZKio1cKSHMZ7FOO1eJ0KFp6+bFnzR8D x2r01A1l5wpWdJAOErvy+2W5e1fQM2AbQHlP779oKCdZNT8+ACvNvupsj9JF1Z/6L8Em5Rx52599 uRxOWjeLvjdtv2Gc+upCcXlbwZb8j8hRevR0jchRKtcVW75fvOm1tcBRemIYaDV395pZ+3boISr3 RnlMo7Ylvr4pLfmdPz7z7Q4n8b0FRPlZU8n5WlOq+xT2DqKbq7LSjsAzev/Erv+pg6WWaTURRBEq fboat736k4tEfBcN1u0kJmvX4gWu56XGY9Rn4aLWzUm0DGvfjcAbcjSl1popb2hgGqmtLgTeECAU uhwUFUHKjWaffkLLNG4Cb0hruzB8MO14cYsCiDN66v/5Tlb5WXvx8uKLvy6tJj98MZOUvmqOiiBu Xtj2x8cRsvHxQ+kZDWZz442pU7T15yTXAqGyBNy8KmU/Z+dFohfnfvVM0+6Y/bnFS26v8SyjipWL HDe5zmK7axi/vnGLfRbK/I0j39PoM3acWnVW2nWVsMcX5Zq9u2mFDcbj9qnkXI1pmkCpdZ2EPgLX jB6LGvbNBYLUlGtGoqO6zsNdY0IkrlnHIFj9VSgglGtGj7h4iOK+8i+mG64D3ELgW5AKhON6OSbr O3mkmQDyu6a5COClRXujWvPWYHyZjqtC6AweUwcFARDhj/g3wvWRmfhpUGxGqjB5w8US6mH2I6/S SoFzfDCOEo2FbqJiPhwrJo/JxTWT+EcQhN0dv2hJ9hfl44hZy+2o8YxCok/X3U9tZosubZgYp9Nq jRSWoCauVhDKC47/ZlnSxtG4/lDLhzek25or8IYImq/or73+wz9f/ZKMGTc9aaj6J0Ri/cDbRayP /VXY8RMn047YWPB+TNdBqGgDB0jfjGLzwrS0F9MfFPrjVSnyEgzphZvr7vDcxrFyZf+Xxp2m8Qtu WJw+ZBy5g2LsYHEGrjPDqFCkNr5ohb7CNaOhDH4Q/sZEDY0aEBWlhw9u290v2dk60Pj5FowC4igK 5kz0HIHzUh5f+M5T+ctujppwrEDkZ1G+zLlygd/07YlRbac/2F9wPWZOxBqDUC5wrMqeGv7l8Zrc 0jZDzcYLU8UZpm1tQSUh/1gL7ig359u/foy8Z6osLYfnNuA9fayPlH6wgdkf6eL4RFmXNf11BX0P Sjk+RiaXAA6KHKVygaOU2WLMvS5xlCgH6o2dHxJSR2lNwBH7mJBJq/+d/qbCw2PqnH79o02lbaQi t2P6rd8KXKfyvWezn+l8gwYM/CzDy3MThIs8PJVtiG4ezpGvnccFvoFB9yBpbz5rOQFvmi1Un+LH yPsh0odyiGQxwlPb5cMrqALG2o1l7xfF5bZtGmNqBJTHk0j7KrJKegAAIABJREFUUgsCbwh4KSB+ YWaW9OsaJF9aH7Y7f57wegY8HlzlSBoqlGB/NLbLAooKYW2Yna6G0rMmZX9mmQDUTP3+v9Cm3nPK OBJ+mNFSfsQyEZ7uqvpt+WPppNYMvDD9nc3j7G8ucfHCgNOkqb3Yfglx86rk/XysA+m3wNXa8UbD STD4WlXhNT2Z9tiGeWPh/Q1SjugjjrvAx+8TQ5v3vbH7Y8cnVCbK6fs4Lm72BuAOQTcZOYXexP7b 5i1e4whtLyROymXTojOmp5IXJo6vcZ9K43rn6RWLyB/ojR3g8X1j1zyE9+Iav8A1+3xE1MArPlyz X75xtVbSYf+FJMO6nCmjXfXL936w/sVlZab9K4CHePvWOybfH954h83UbSaig/eJfF+rAmFYD89x Pn1bKr0sSZuh2HgUeN/wDH66BzyvcvFdisDzenn+XLh6+JZTjlVBBoX43PhgR6KZXinhiiu8TCcl y1oXk9dj9rvuzdJj2ZfydicJPxrztUN5YYL9znOnNgDHR7BjgM9E6TmzLu2Grw6xN/vuV2Jy2+hM PeuTvMSTRYaJpy4sTCfOizkmQ6nPKdmWvN2Tqev2kxXPZdYJN0UFftaOhfOun1pqOEvHQtrYrXM7 Dm66Tv3mPX31pVQqBWNDdLuI2ZnYmr/LYAIsItzNjl83zVlVarP0gD71b+dMOA0yZF/+WfHfXtUv bKEBrJt9GW4zIvrTCsR6MnlnpkVX2Jy3OUEoIEi+4sEbtfmJx0yG8SdqF8+NEIuwvxrbBS4I7A2z 04X2Z4adO1XpxRnQ+Q3xhQsijxRct2SNzbY0lcLH+bUbDzz40W7ghUlDQ+CFwfXJ3rRPY39muBWK kH7+WAfSb+37SmJWCM0nWlw39+r2qdA5kXJMH5228ZuTeJX+gtk7idiS1jU5wqtIxjhC2wuLk5DG D7Tp7B2LZ99xkTm+pl95QRzXhlFblxD/49o9fj2Whc6QopfrbJxaWzk3xVM/tsyxZvmFY0uBh0g8 EnmZ8eyydWPq4DmJ72lXIAzXSz/8LIwvI5XLeUzA3+kisXrkPRkjYcS+Jo6PGkeJ4VIsYvCY0LrM A8HwcRRcIaZl78JQ6ONtT76vsE9/iWG/UvtLeMkizgiuM1TybT+6X29sMpxYfWGudDvYdZL2x15p FzxMSZ+AeWEKPXHT9Iimfq5uSttRKc5uj1+t/DUsSq06s+1oH19sOz1QivTz0OjQA/H3CxfhuF72 i8R5kD2kgP3yjpiDwk0CwSHcqcbvsLlDsu/bEbP9oXcuLHzCXcR3uAJcAa5A7yrAr5e9q/+9773T Xv/H8+edEfS2tZPEfXda+nDx6y33fuo8Q64AV+CeUoBfL++p5uTJcAW4AlwBrkCYFAjDegVhipSb 5QpwBbgCXAGuQO8p0BvXS84D6r325p49CoS7H4bbvicTvscV4Ar0hAJ+vqsf+hAC5gE1frBvT93H etdvs/xG0mPcK7+RBFehv8fvzprNk3If7saOCgcKs4pyjgLuh5hlP+Uhso/G78e95/A90688KYVn L3z9NjzxBmmV94cghRNO6/HrZaA8oPa/164wXYe1AkauFn7L7DfJHuNe+Y1EvUL92+snnK5K0w2z EqtQcxhxWl9Ycnr65d+7OFkLhkurwahb6qNH2TypUASLcqAw4yqco0D7IWbaX3lI7KvE78+/+3jv jYv2I4ee2/Jpq3t9qOTpr8FafVj/n93yy0eBr6CTqscMnpb7VN5cZBEAd3Yh3Amw38I6vU++uoVC F2BzkpjYac9/b/28scP7bF4yiULVHzBO2WQ90u7vCvwMoX1jIhMnPrJw9Zx5CcLv5mUR9uWnYbte YjwjjAck5yVFzVt5u2RHXC6Jwa4dMm5UN7lXykaS2VdWCK6kw/E5LMUDywR6b6/VN+U8XVb8Udza tsRB8APWO/bIobGyVeC0xSPX0+MNs4PxmHAeEJtnxOZJefz77uFxKv1iHChfi55napwjrB/Cz/VR DhQ7X48/7z3MPp6v99nivlr8anH6WOq9cdFhvWYGTIJ7s9r+CftY/59OaihfwV2/rdq813rpZ7uT xG9Ta9GNetTO4Qqw33bcvVFNLERYJ4Q6aqk27z9+YnVtIjKuQ5wXtDuTm4bnK6vvpz/A2isOm4Po YxEOGk1Z2DBOGbQws93v2nza11xbbmoxd6ycF7YrkCvQkD6G+vNL4BmZktN3zE9/MSbuV5HzS9Jj ikfEvLj+ooNGDVyh9F8kG/dkPXv4kN0rDeAlJb8YM6I4Tv/iA5HbRrxwtlE4KCxtaassPJSTbkpf un/HxTvS4szAD1r/ygP6bXFx2/QP7NhyXip3c68iY8CUKeecVA5cnvzkF/VxxSPAReQrW8RggDOV bEpPNyVvOXe+CvZfEfepa8S+V8TB73Y23Swnuq2Xnj8BS3+RIVsvrTplhLUfqUEsfs3xIHqidsR8 Y341Im5bZPorD8T8ynheaC/gAeWYHojZFhOzTZ+8Y8s5aztECTyjZGjiV5bm7IgESfW/cOtMgCeV XzI/2TR/fcV2aa0jmhe6YXEy/YpWlByo+nfzH4B49hxpJ7d2lKQnmx5Y/3Y9VAbOUfkZWEqRNF09 cbT26JF3TzY63P2H3Q+ZflXyxRLT2M/ZZlTiZ8bJtkJLsX4V7nER/b9W37y6rIL2c11hbW7zW99L BSYA1v8nZ5YV0ncbBvOq1tvLDtLAScs/hcsn1k+EOso/7LxU2lFTv41+NPvURMgpzfx8c/Pzp9bR mC0f22zhz0sav4pxys4XwkLGNdYf0PlBKTGUpGSWbR0CM1hx88bmU0+/U/N0IQw1oSaz3UnKHKE+ MVQ8f7UGFhiH7bqx8gadUvrRFurrJc4zEkRh8YD8cJ3MpoaGGJ21vGmtoXgFnccRbpRH9MC4Vyhn yq99j6cg9jqdACXTjRiTMCYRzo6EnQR4bPV+lSWLX2s8mJ6YHbFcwVPDeUBsnpEqT4olFBIn7pdl hBCM+4ZxjgQrjH6I+2Xny45GKmXY18YFIwSLH49TNSI4KOtXhM2rCuG4iIoePjrxX2k/HzxifHzC cD30crz/D4h7eDBN4eonH5y7Aus0wzb2a3A1QvqJUIH5h50XLHrP5HBp7rckang0fX2r0+n1usHi 3a/2zvDnhYxT4K/VX64ZFp9X8WyNOTWbtBVsfvs81QWt7xJN1h+w+cFVXf7I5pTRWqx2B73iRlBS w9hH4kdPzXjp1Hj6OurKbe/3TfTcPr55z9OhCBXnGYF1NlfID8eKLryZou88eWhOZkP58cZfDWqh /C/YZNyupCQxl0C5V1MVnKmtAmeq/tTPEPv4SpZCPIH9ifLH8ZHHj3GyMK4Txp/C7GA8NYwH9BLC M1LhSbGVQdod8zt1Cn1h4d7cHCiM+4ZxjsACsx9ifrF83ZEod5j2sXZRni6WYPFjccr0UZiV9yt4 sTZ5yqJkBQ8u1ONCQt+52stv/1dyrAbF02QC576x88I4XJr7LQ0Gluc0Z5bE0V3YhhQ++8hD4x7R yufSlhfGTcPaEa8vBi3vD9j8gM4zohki55RJxYBhFDZXu7uK4XZtF91PiE8kDaTRaiVdrarcQM+J fWEv1NdLKSeUZ6TkAeFcJ5Eb9fWR9CVcROwgavr2F60Yt8uFf9TAvfLhTA0pXiFwpnD7Qm5dt87U vNkSlfS91JTA17QVznT90UXTC29XpHD6QEgyKlr8qFLMVx6/n3hcVj2PCH8Ks9NxVThVwWOiy8PD uzfgAwmbdFzo60KBnGfkjyclmvH6i8Qp1kD9MjhQKPdNhXPE6IeCY9SvBn6TmIE4sry4b0i+Kr1I JX48Ti+FpV12v1LhVQUzLpRuxRJle/np/1k1qzeadxpMhFz6tIUkjMbnB7ZLlbyEE7rdb+ECRRVN K3v2ZUPEF2Tgv0wcO1r4qoH6uO5uXtL4VYxTLF+sPoTvrQN0P5EziM0PbJVpqWAn9mDHmu9Wnnwz vu3AA7+orN1YlSJOGMp2d/uFewZdjSLG5xuJiaTrKsINxD333pFQ34+VeEble04d+xx0oTwjemsF eEY3nDcOVeTnVxRUAg2qDXhYsH/oBsy/Atep9K4+My1/1xy4CQ7v3Cn5uLG2VOBhFWTt33HoZP60 C/RdX9qY0ZQfBNsXtdbOIfFR5FL9/oKGqo6ICA8H5+yZqtO7ywX+18kbdiWXh3LBhI/iRM4UwJbB 9NanloqcKcw+dUrIxTdXzXhrycJjqb+5DGkEtwEvacv6fZshQsoz2r9+9wfXYBeLXz0eRgSInpgd sVzgMe07+u7unFceiCueVesglItECPCntpw6cqgyZ4aLP+WOc+fpqqrTe+FzSjPwjD6xu3lSO97e t37XNNpalJuGq4TEifklXdf2QZ85uE3S7VD+lpNVnk8/KPdtx4b/lwtuhfalr2s9nKNj2yAv+BT2 SEsn5bKx+iHmF8sX7LM3xD7Wz9lGhFJm/FicmB13/HvDOS5Y3qGfb/NuL7Gfw8dqfvr/Bx3rl5WB QeBYrT95ph3pJyyPtAwb724dutlvgb+2nSLbrO9Zjl+JSEqRLpbgObx5YeMUyxer79ZB1h+w+QHT WbJjA07Z76zE/p4Pp4zR7m6/mw+uT3/xURN8Mq0rNI6NJjrKDbzwk6oq8V/ehQsrF6u8iMTi6Zny iBC7uXujRviI/njDpQWRBpi73r8ZDw+W62c/c0x/u85UKvmrNtH5N/sHxsUJ4jfvWwpm7C0QDhqK M4yxpPPcR5XCWxyDtWntkiY4klZiLJtH4YXzbi6pAC5Y7lvSd0qA2zVRT662nBXfEl249t5DHVXU lLP0nU/z505MyxtCTC1rM16n3KvsWEOprbSu9eUnhtEXhU9892eGumrLkOJVLmx9RDzbPjVIyKhH M8k58Gv8VmzQbdrR2FBQ1CLaqy5qqjaOWJpDRlux+FPV4hGt+Pxl60kIkleEXrJfemGF0DqUp5as J1FJay4bBwJ/quCs8AJF4E+lD424WCvpXHP1r+OIqHN5zc0X56Xm1VhvA4Rk7elqoqNtDlG919yC cUYJFifilzhbT9WZ6MWSbtVFDdUkdvQ6+luj6GdmFOea1xZdWEu5b7A5xfaNJvrkjRONwN0sqKVd JWuiOQP6j9PK7IeTEb9ovthPHbrY9pF+LgSM/WHFHxvPbhfMBtqvQjouWN47Gv++ySS9XqLtZYxb AP0crmjq/b/075bijOU1qaeAY1X0cV3hzG83g3X5/MByKJRFJ7LH+1DX+Opmv3W0NpbSKc5S2mBp iZu/4FEJ5xruvNzzknycIvk+MZY9rhtcOsjnSY3zjKtfmQsuSPMwjDChBdjtbr0uzRvmpiKiS8t+ dNnGp5eP7m9LSfeF9WOBOOOIHBTZ4ezo7OzUSzcnvcYD/WlKp35QbJSPuBKnRj8o2rfc60SvXRUu T6fD1qmTGYczcftd7e0kKhCnXv67v4vHI7etridmRyqX85hcOgTKn9LAkwooTg1+Ee4bwjmSq+Z6 LukQqF/XaQE8queLGkDiD02coRwXaAbdPBCMbip5saPR0G/ZBrSXBpOXe16SjVM8X6mfyOrj0Ur1 A5xXcTv35pG+cL28N5XlWXEFuAJcAa7AvaRAqD+/vJe04blwBbgCXAGuAFfApQC/XrqU4I9cAa4A V4ArwBXAFeDXS1wbfoQrwBXgCnAFuAIuBfrz9bKv8ZL6WjyuNuaPXAGuAFeAK9B9BUL9e5LuR6Sw YPvkzO9rTtQ7SFxMyrInF4yWfjNwcanJUB5f4chdIFuXXGGgRwoQfhN8by3S95u9vcXTuXX5yPa/ nCeDJq1+ZnGCzzeNUX2C4GehtpAD4dYnVPaVdpCE7pHicOertN9b46IPNlgQ406pZx/M6x4Iqa9f LzutJ+P2ZrqFTn7MMRoWKYAtJLwkt93u7zDjYfGYQsXT0RryZ5fLXbywxQnSoj1+bGjmZ/mxpzgc bn1CZZ9lR5HMPVQQ7nxZ9ntrXPTBZtM87lh69sG87oGQwno/tv3WHZtnBRZftTodt27ZfQ4CR8bm 8CmhZ9yla98Yp1q++vlX8G+eeLGEIoGXdPtHOYGvGsC2D5wgCLKLQDx2z2Jv1LO2jRWPyGOKiRAX oJLsUZ4OrOtPRG4Xqo/cO/wI1U7XrLHf8Y0TOD53bkEK9Jj3pshr8tyyklioEeMTjfcpin3Kz1r7 jhHKIwcqX1ix9aRGgHt1S96QQjyyIIPRR5GXImpPQVD2GXoy7XjcMPewdnFVDrT/u+rLH1l6etcJ 1D4rTvV88Xan/pV+vaMS95n2/YwLVpwuy6z+5jqmfARem105z7jqBRK/WJetg792cflxPbLyUh93 rjM9j0w93YfV83VXk3ZY8cjr3MfPldNgd8U4dzIn+281Y2PTo21F5XQhDGPFsrIFY2NJV31+0aLj TpL+b9ufIX/IOFsEx4qfvblm0nDgzuSVZxSJSLnYwtpleSlDIbDOc2/vMl+mK8i0Nv9uW0XlqMkr FyclwFPgJT1ZspkiW4f/0LxMWjyp/cbRJ1/dDCu8jJ+8eabDvPUfsL7MU6/96KUkHeXUsOwT4AQt OrlJXBUIzGbNunxg5jjYUW62y/uePbidwHXuoS1/WjwvoqtxS9G/V5NhVmfi1udfnUX+pIwHeEyv e3hSTc523TdTZo+jiAY3T6ecOtJl1/znr6fSfFkb8NF+s7ph8Fhio4v2GePTzC3wuM6ycftkPXB8 ClacNknxDym0vLB5svDGEclL4KOR6I7W8/m7VtTAil6DXziRm0MFxTclPwvqMvUEXtK8Px0ZpjOM jywvpau6ZNeslfLyxDMky0iam5zWJXOO/ucoq1Z9PHaEgFXaC45r15+tJ25HCILxh21He/9nmBaL PDp46blxikPr+GL2H5V8me2ukhczAdw+Ni7Yeqr0N6ZfKAQO2k8PG4XVeYghtrB0yYapsMgXPi9h dtg6EFJfu23RMWE+ic3O1jXU2Gg/n9e+ewJwsEds/uPKmaUli/bYqtOnXwJuNsxvTP1Fp8xxx4wH 1xPJl2mFFqrFg550nx0I/fvLQfphwM0xtxSVD15XOB5WSDIv3D+riqIo9SMHEzhUdDYj42xVVjzl ubwP69OjHBlH46W1put0saXq66ZNdQUnrlpdrcPiJQ3QJVIOs6X0yvkPreWWNgsZPJS+l8Lsa+EE RQyAS6Wlus2SOEh3+fKZc//4fCB9Wm0hgwZHwKWOEQ/GY3KloOQreY549tT4aAjHx09eg1quv2Vq o7kYhj0U2H1ZTzh0D9MT4SXdqt82gb4oMeSlFmc7y80gmtNCBkZq1sdPXr5B4jwsTz0ZzwjhIvmP 02NR3EPaRXP/l9sVn2N6BjG+mBwoNF+03ZFxzQ4f5ZR5qgfWLhify2PHdw/noGmLH+v/tvodE+jF 0rAuuTDLVlraIvVzjDeHcrh8w/b7DGsvPF/MJNZvsfr3YznytqYbUkyeWVB2wbTCtu7qmu2wWOSs imZYqvsPHzWnTx29ZlX5+y8ayklWzY8PTI0mrzrbo3RR9af+C94xwabgc8Uuzv3qmabdMftzi5fc XvMovZkobkxeEhQe+HnrwkNGY4MJ4AaFT1/dnAr+Sf0ZhP81XgNPJ3rsgldnZT96usY4SfdfB2eU 64ot3y/e9NrakueKnxgGGs7dvWbWvh36FRLEhoaJ8ZjEFOC9Yk3uS1PJ+VoTQHTxTY2PxuYW+eNG lRqPUXeFi1o3Jwk3s7saA+HpuG+lYtyfjQjn67Orf6bujG9tnjKczPxmw69mVMeWrZmUEDWpsnnU tsTXN6Ulv/PHZ77d4STRPkh3hT4I/wvTTrv+bD392VH6Z9shAzT3f6VpKMH0hEMax5eeyfPC8sXa PSmJnRczeCjE7LvqK9od4Y5hfC6XHfkjzkHTFj+mw2zhTlih8cRmAM/Nery5OEPq52RD2bkCmBk6 SOzK75fl7l3higzpJ67D4qN73PkWe55heuL5YneUAorH4/i+3Av99RLWHRaV7ISPAwcQERMTR7lV 9CndYjNShYkaLpbwTJ0joxduIg4coHwjJEbuxUuipiOHDIqhj8DuvgNvRun1ErU/QJ8FmO9mMoxY a5qLqp2kaG9Ua94aITTBhO+fxEceI6dLd/3xRXp1d+5ZexzugxqnjBS+fERrMuJBeEziB4hybpev N9kzsTK8j9V1EHqPGwTBOD44/8jng8uC479ZlrSRCtR1V42no+DyoHpSqAxscl5Sh1B8+5/QHMPb 7S3wQDq+BOw3CKdNn5DxsNj6o3qicQrpKv6o2Ami/yvMExU9Ndlvb9pjOJZLYgtPGecPbctcYc4l rg/ame2Ctzt7XCsjd5cw7WOcKTU9qUV5f3N7Ye6wOWiseYl5OhSiOlymZzi+FGa/LqdXP2fz5vzk pRh3WDxQjuhJz2Dny7LlJx7WKfdhWejvx7pELHq0aGn+nvkZwJEgxjnjEoCDs2WPCGPavgGASpVH bglVcY4M5QFtOL4far1WVZh/KP9okwA7QHhJYH/9K/oMWCx/fEkeIaVnU5NLtpyzdqL2NXKCor5m yII7w7ZqY6q5ZBTczwRObPojcB1H4oGwmTwmN9dGxtNx6eb7iPPRPnF+CVUNugdJe/NZywm4ekuc MiQv2+XDK6h+xtqNt0vgNzltm8aYcqikGE8H4WdherrzkvGSxif/B3gtOj0heUe6/tWF9NPWSOnF hTZ9kLzAHrZpso9xkcA40w7mFLOjvf+zPWB6arWPxYnli7U75pcdvVDK1NPdf2TjAovTXV/W3zC/ GAdNa/yYDuO/MR9cm06OyTmUn74zU/xWgeftiII3h+Xlh1vHSo+pJ5YvywAtQ+PBTrgvy8N3vSRZ g+3w6aMhNu+d3MNw9xU4OAXXywWRLUV1JtOFN630nRIROTVZxJz7VuaMYwsLrldnJ+cCnwtasLFh UxH9egv9/NLUYKq+2UpPEHhJpjqTQJEBLpjJVPe2tYvaF78xtG70lJSxwJMilpaCS60O1L6HJzVm wjFAiYkcMeqBvenHf4d+r5X8R8qcZyatgx3Dv0yiLB8kHlpV4DEBX7OgdlNpm8STcnFwCPB0/nrV zR27TesrNy8+2j8lPpqVsrKun7UPp9wiC+WUZe65OxY4ZQLHqsOLk+WTV0vze4L5+Ad1+mHivW1n afUNxC9U7aL8LFOT2GTAYzIVfNwAL54xPd15AS/JlRdwvm5HP7y4NbemePy6aUPTSlLhlYzXpkkf re0FfrTYFzlQDD0RO15p+OxidrT3fx+z7ieYnlrtY3FSRyzdsHbH/LoDZuyw7Lv7j2xcYHG668v6 G8OdUDSc8tpK0ogF+HRLLpTC9+zMy04Dn05r/JgO0WOXNy86mDXEUNpQkyh8OUMCJAu8OQgBeHNF XwihUN6cA8sLG3dYXrScpSeWL2YHjQc74b4sDzmfpNN+5/Jv9kzY5Nx6dd2aeF3g3Ktwc2SU9qFE lSOm7BDwow5nZKzwMRv9gbASPaY8Bb525rQ7uoheH+15scmqFlwZhEEGRkfrvG1rzysY30o9USud 9hvX7B0x0YOsjW8sMucOS66pmj/VXTtgfYLMK2D7NCKWnlKkobLjTtx3J2R6+pp1P2Pb154v247b TeA7YdYTC0SKv9u8NlQHyMv2+buLXs2s1hVeXpcnfCUePsGx21i8ORX9sQSwckRPbfmGMB4szn5d HurrpfN8silVvBcBuhQuur3ZxWHu1zLx4LujwLmKB6bVeQyULbu9HH5fxLdgFeB6BqtcT5x3vjI5 9YJ7Ctx6++cbeV/vCd17xEeor5fEdu7cqU86dfCGx9lJJhmeTArL26oe0YY7CZEC7XfqT3/04e12 J4kaOfVfp48b6v6SVIgc3GdmuJ59ucFtN86camrRRejgzhJ58JtPThrnffOnL0fOY/OrQMivl349 8gpcAa4AV4ArwBXofwqE8fs+/U8MHjFXgCvAFeAKcAUQBfrz9ZLzs8RG5TognTvI4nDrqdW+1vpB ps1Pu0cV0Np/tNbXKlu47WuNR0v9fnBrva/xvATwUKM+0vFgwg/WPD5Zi9rdqhs+HYLgB2nNBL53 10e4Zn64UQiXTVO+anpqtY/UV+qpKUJ3ZaUdP/q4zwx4p7fGS8AB0opKHTSd3ncrI/0HAg7ffKKm Bh4Ps58o2yXk/VMtWsWxvn697IM8r88u/14AYxFyeeTSxyf3zJffwqqDZn6Qohv5KWDxhsLNb6p/ e/2E01VpumFWQtdaIbCOk9P6wpLT06XmSzN+b8Fw5bJRTC6bn/Tkh9X01GqfWZ+lpzyIQJ6z7IS8 XXplvASSvacOSwfP0X69x+w/8CO33uIkIvGAxox+wmqXkPdPTc0bxvuxdvstm4Muhma3271jwvky LC6PVp6XVp6OKzIlx4fN6yEk5enKrzbWUsrVYAblymXP+7Fvcc28IxP31flBmA4w6MLI7VJGqbGk w/E5XSLfSZe9Fv7B4viW1+qb/HCjWFw26lkLR0xNT9w+m9fGqq/Gb9ISJ9OOH32ATsPk7uGtwx4v GDcqKG6dsOSiPILA42Tq4DaHz1fuKl47WF5eVXx21dqLPW9gebHnW1b/oQFonVfpNM6ez33S8fsE i4c1rzLbxW//9BtCdyqE5f2lN+8mbQipbkur3ViVomfzZXAujzaeF6jA5ByhPB2c4+MdPyyw6eKL wR2Mk788XnLcRtITo83+VO+DXDOVkJn8IKYOeHux9Q+C26USZ8CHOptulhPd1ktZhhf2ZlYP2Xrp B9/66asZwukYN4rNiYNTPP1KOF+dIyZGiOip4NCp8drY8ajwmzTFidtR0YfNxRNTVv5FxguLG/Vl 97h13lyz1NHMfqsMTyzBdWDPV5idIHhYzPZC5w2EowfxeOfrPd8yuYcQpyZOoop9pRRBcA/BCLOf 4O2C9k9lPCEvCcP7S5H700aMY7cWT8ym66ySGPiP82XdJOvOAAAgAElEQVQGwsv/6rbyUrIubxRA vkrzzoq/9tXG88I4RzhPB+H4INyi9htH4vZmmlrMY2Oji8RV4rxoJMqG6XNcM2WI6iWIDhhHCdMf 4w15nMv5TZ4j3djrdN6F5elHjEkYkwhWImGHYhlavV8fMvwyuGxEI0dMNWaFfTVeG1hS1FfhlGmM U3O7oP2BnTE+XljcKDUdWPUJwfobxttiR4nric9XmCV2nFhtrF+h8wamv1iumG8Fv4z+A2vCa+Mk qtmXJxcE9xDrJ5r7pzyWsDwP/fVS5N0Yxp+qXLZxzcLdt5eUpQ2ZOGgAcfNldi/euHll1anxcGk0 mxtvUC4P/QwQOD7bX1pqglJ6daVbNPC8WpeVwB7wvL76+VcH5kpfrhF4XofX+35y6OYcvfT0mt2r 3wE7ROBGjZ66QbAv8XSoYXET+EqwhDqAomt+fOFAbpUjz3FgZpI3r6fedocuX0uKjl6x1Z0vh711 sy5V5h5wrKqARVzVN8o1oxFSrtnmxQfemQgRWYBrJnKdAverVQeRa2YGeW0mUwvlml3I3TgOFlgP bHPf2sJ0wNoL05/yhp7dCs6B2+X4maN1o2OjF5pNaPeXNj/3MtzfdrV7YIH6qRW14PnW2z9aHtV1 V/gwALARSYd/fNv83RTXeZQbJfPL7FdefLSfltd/mjx2a/ak8S4j/h/dekJVhn2B1wYiFC8v/iH0 ltgfvphJl6ePEq7rjPoiD4upp4d3FlCcWtsF6w+YBPh4EbhRpG7X/5iKLpbS00EjNR1Y9b24ZrLx rjVOTAdsvsLyhRdllI8mywuvjfUrbN7A8hLLlfMteGb2H63ziYp9ZXIi9xCW1ha5h9MOn8t8qhiq idxDZjxYP8HaxeWUMX5dh8L46P16OzRuJN5NpESPin10+esrbdE6Ir5nxPkybC5P4DwvnHPE5unQ bFkcH4zXE3k1Gs54aFg8/I2KfXgYPESKlDLYY27S288+wjVjhugpVPCDMB2E6Q3Ok7cXrj/GG2Jz taSQum6dqXmzJSrpe6kpVPcgNl00fbnSFSmcTlsqSlrvV9WvksumnSNGg1Xo6cpAHHEyDp0opg+v TaU+m9+kPU62HWmZcKl9QT27wPnC+4MrUt/HyAj2eFHlRjF0wOpj/U1rnBA1ogPNB5+vfLOFm6JN v8X4aPKq4nO0vdjzRocAZyKDvz7hoUfgFUbF7LJL11pnJ0Z3XBXMKeZbl1NmfyMa5lUxHNS+y4/r USv3EOsnYA9pF/Xx64ojPI+hv15S3s25ckvdjJzKsqeGf3m8Jre0zVCz8cIjj6aTWrPpWKb+zuZx 9jeX1ME7N8PscSNufLhnO+0K5TtPr1hE/mCG3b9tO/qNXfMejjxzascbDSehAHhe1/Rk2mMb5sG6 o8DPemPnh4TU0bP2F1Z8TMik1f++mHKOas3Ajaq6kGaxCW8LXdwoqEcoT4eQf6yFXcq9+vavHyPv mSpLy+G5DfhiH+sjU9bPXwC8ETF+8kWttfPbE6PaTn+wv+B6zJyINSNHfh3qbnr92Sjrsqa/rqAO bCsOXzYu93m3BKWyDbhmn+cNBVQLnCFxzTT5hZGoSYcRd85s2DeDolqAa9aQazqbWtNQWLowbyrl WrM24Ha9sftjxyeCFPvzDn0cFzd7w9x0TAesvdJw/T28oc7p1z+iqJaK3I7pt34rtvves9nPdL5B vf9t50nDy3MT6Dx78c1VM87RvrD1wdu+70dZKbDLQLdfvnG1Vspr/4Ukw7qcKaPdHCi533g7s18l dDWUnjWVxxe+81T+spujKMoGVjpjexRKET2jmP326ZT9f6EB7jllHAn3AFrKj1gmwtNdVb99Zukz p82Mfp4wwIsv5qXngliNccJ8NHIKvcnzt81bvOxg7TJbGNfKcYEpMQwZL88SOYfOAuNxygsnEB3S v8Oq/+3iKUh/w/otFieUM3WYicxXmB0lD4vm9W3gySOrPwp8OrxfyeeNCQ/ReVWpvwGZb6fq2PNk wgBt8wk2n09VfrdckEbkHpYL3MPMFmPudS/uIWvexvoJzKvMdsH6pzhvYK0TqvKIUBly2xF5Nz+u WFh6YYVwt8WQ952dyXoSRXk6A1eZc4GnQysDT+e5/waezsVa6eNK4PKMIyLfCjhQL857OE7gedG6 wPOCq826cTnC9dL6dp1JsEyPmOh1N/sHxsUJlBs1ruzU4b93xr3wyLTcWhM9k27Rz8wozjWvBZ4O zHR0ozydl6cQb74YvPvNXvbkguE6iVcF8ee+Redr2LKTTwBfLHpKXo319rSzRWtPVxMd3I6lb5jf a27xd730cM12LioArpm9SZtfF9eMRhKIDtHeXLNOA2myCFyzdVOHCW+0qBnfTeB20TmbbsDtqiax o9fNTY+Kn3dzSYVSh6stSHulYvpLvKHqOuCaUUmzJpoz4iOufyjZAX7TQx1urlm+2O9HPZpJ6PXS +K1YJGwhXNU/wIMrKGoRq1QXNVUbRyzNIaPdHCi536+1svuV+A34loIZewH6Bps/7hump8B9k/fb WSNrnNTo8YZLCyReWzztW9fPfuaYzo4HbooI/CaZnsTR0QyGAo8TKrPsoO2Syu4PNHrWloCNl3+j HDoT5dARQ/w64NCV2krrbj2D6WAfvpFRv/XlJ8ay+5t7/pGNX1aMrjKWDrHx7PnKdY78UeRhyfOC OLHrpb9+5eYhivMGiWbrH6GXymXzLfx6Cuk/IieRxh/IfJLgmgfk9uUCuJ4L3MPyNso9nPXJutzr Rd7cQ3n/Ny6ejPUTeB/Cahe0fwqvs11BhOsxfOvHShyZ6GjZguva+DKa8lbjRiE8Hdw+wusBO18S RVJKM32Wa6YMVb0E0YF1kpr+cBtXK9esq72dBM6DYwUUmjJQQCP3LTR+/VhR6BlknAo76n419Adq CBkv8Dt0BYdOzS+zvmp/0xgn2j8lOwHyv5hxIokx28vvvIHlJZUHMDUh4fgp1mI/CO4h0k8gKI39 008a3TwcvutlNwML5vQ+xDm6L7lmfUj/YLoPP6efKXAP9rf7ct7oR93unrpe9iXO0f3INetL+vej MchDDVKBe7G/3Y/zRpDN3xun3VPXy94QkPvkCnAFuAJcgftCgdD//vK+kI0nyRXgCnAFuAL3mQL8 etn/G7w/83HU1L9X81LLmR/rewr0937Y3+PvSz0i9L8n8ZsdmyPj97T7vgJbN5yPEyrBmJydUBlX 8noky6HLq5vxN36wb0/dx3rhN6nIL+kYYqB5MeqGuKib+YrRdD/+4HQLsRZazLF1C1E/DEJPdjxa MqJ1kfiV8QjuPiSDpJ+hB+gnVHYCdNfr1Xr6eolyZHpcicZ38x995zjwnlyerdXOdMu67ZP17UcO Pbfl01bpgNOaPP217bBO3rv5E1z1YyITJz6ycPWceQkBrzPn8hLkI6obzscJ0pPiNAZnR1EnyAIW r0cyFbq8uhd/+99rV5iuw2+uR66G36QGmKdKXgFa6Ea17uUrOA5B/EHp1o2su38qW7eQ9MOg9GTH ozVPZvyseILhZIXKjtakeq9+GO/Hsjk4GEcGk0CNj8PiSWF2FOX/tNUQus57teufhTibYI1uWB/A es1scZc7LVW2f0LpXa/6Zlu5qdaYeOCo2jovHo9sLo94PFCOGKYbzsfx+A9kD9eZzWPCbWK8IWW+ TF6PZBjLC+cfYX61xu+bWdS8lbdLYmHtwxhkPRPf6sIztbwY1d1F7P6M5YWVs/PFdXO7d++ox88e 1+6TpR3/umHxyy25nmM8KSwerFy0pxx3bN2wfkitsNqLNY7U9cR0YMfjUiPQR1b8zHiC4GQFZwfL N9CMerVeWN5f2pqO/vSwsVRYuMQQW1i6ZMNUusgFypFBFGBxf/QE40mdOZaz+mLDMGJNSy97/Nbu 9R81DHPC/hubp45j2k/JLNv60ZhNpLj5hQX1dY2Dyelpx44INaP/1+qbcz9/e8X+hdW6wtrnVz4c MwLKU+YI9dsMFc8fffjj3dPOmsh1Y+UNx4IE9rsOlMujmSOG6sbk9bTfOPrkq5thJaPxkzfPdJi3 /gPWIXrqtR+9lIS+FWbrDCkzOTsqOntzhTwcNCTfFcM/ef0MLFFImq6eOFrb5GzXfTNl9jg97ZDM vKCcyT8S6rM5U8z4ob7GLWIgnGCrLDz0Xs21hsTE+RvnvTB5aIR0v2HE5j+unFlasmiPrTp9+iW4 D4FziNhusf4Mtdl64uVYvphuzIBU4kfGNdMMFLJ1U8kLM+StgzevCouHXY70wzWThmO6Mfsh3l7s caSip3denvGCjDumOEHws/B4tHGygrCD5ctMrW8Whv79Jc7BUeHIMMXB+Dhs/pdOP8jirK52Wm6T QYNJA32D6CQPqhCdB8SNgJV7297fc+wXGcdmvN35eMWsrQ8LF5Wo6OGjE/+VcqAGjxgfnzBcmMSJ TqhPxj4SP3pqxksCX4VcuS3QL1jho1weoo0jppm/M0CXSDnJltIr5z+0llvaLGTwUHGJYlaYUMbW GePsoDpjvCEkX1VeD4tDhPGqEL9Y/IgIfovNpoaGGJ21vGmtoXjFeQesWK2n9yfuWOmFgVKpSZOd 3p5QzYvphd2fUS6V1nwx3Zix4PHj4xoxJBXLdUPzwswgPCksHqwcVv8bOZgAOrDobEbG2aqseEow et9qVe0nrH5IkPZCxhHaH7S2I0ufIPhZaDxu+wzOnfuYZ0ezHSRfj8X+sBf66yXOwUH5XIhQbD4O xpOamrG9NtUIppJGjPk65WiSwmdPr5kyGjHuLi4vqKOLGkYN++aCmXNhMWvX5qIEuJ67Hzu66G5C PL2eNlqtpKtxW8n8pSVLXf/mLz10BK6iGJen7/G82DpjnB2lzlsFnTHeEJavCq+Hyf3B+EeYXyx+ dztq3MkC5nnlT2pPUA5d+fHGWxgnTiUvpkesP2N5YeVoviHifOHjmpmWu1CuGxa/+wTZjlhfyavC 4sHKsX6I6obwsLD2wnheWH/AdFCJR6YMPA2Cn4XF4zIeKCdLqx0sX5ff/vEYlvuxkDrGwcE5MnK9 /PFx5DwpOD9l5k/Sas25h597zWkmuq25k+BzJ5VNeNMVe7BjzXcrT74Z33bggV9UwpyYIn5OxeAx iW/SogfBe9CuRhEr8Y3ERNJ19VOb2aJLc38/yBop3IkG4Kaw9XGeF6azCmfHR+chxSsEndU4Sixu GmiD8HpE2cSe6cW9QvhHmF9//LX2+g//fPVLMmbc9KSh7DvqYhwwDwo7Xx9JO0ZE7CD67PYXrTCd UnCGQNuQ/grcKyhSzYuew9rk/RnLS+I3KbhOaL6IbirL2KvEj41rVkZs3bC8WBZomVRfwZOiuAOV eSZK+rhZOk94jcvk96n0c8GDoh8KpdDIwPQlZBCFtgrtjo0jOM7UE9MBbUfJr/xBKz8Li8fVz6W8 oHuIHDe5P6/nzLwwO1i+Xvb6wW7or5cPoxwchCODqITxccZ9KnGgFPyvaBL9xC8mpgG3AZAlhZlZ AOdS2Vxcp9+bKj8fETXwigUQGSKxmMZ5ovliOZxso3yrpIk53hyozQe/1tpUBC6IrtA4NpoMmLw9 7yvckZzL02k906d4XqjOCI+J8li8dN761FJRZ4yjhOULijF5PQu+dlMTVwvz64e/dufPE17PgBgO rnIkDcVbD24h1JYK3LGCrP0P/nDEZ0su0JZPGzMa7mPT0xScuCeGRbDzimePNVc/lPPsnkT4WSK/ Scl1QvP9l+vaeGRIu2jlW2G6TRjD5lJhbYDxpDA+4MOD2dxArB+iPKmxDmY/JJfY809aF5s7BnwS Zn+Yj7Qv2o4IN1ArPwvjwQXByWLmhdnRyoPD+kPvlodlPbzGD3YDt4vOK7AJ3C7K4SL2fSUxK1rE Uvp33dyr26fCvINsjov5uwwm4DgCQil+3TRnVanNUrKsdfqVFwxn6bXMMGrrEnJw03X6QjPv6asv pQqmrCeTd2ZadIXNeZsT6KnodvHUUtGOVw24d3QgRW/ftyNmBYVrSptxam3l3JSLJ5cagD8nbrq0 7EeXbXx6+TjpVayrqs+jZCcr3ljeYjbE5gGX54n4KHvTvpj9K7wqZl/K2y1+GefW5SPAzyoX350K HLGX588FAhhbN+fFHJOB3kr2bNmWvN1jmiX762bXPN6YvbCJ6lO2rHU5XNqZG6Jzzlj9uVMbgF9G TwJ+mZPayZ51affMJFpypyq5OMMypPj2T9a438Uz4yd4vvDNlZMVz2XWmalBgfO1Y+G8WCSvyV3n 07elSp2KVjcUG4+K99uZfqPh+2V4/Ddq8xOPmQzjT9Qunsu+jlEXsHWePDQnExhnxGAgFuE9TVqJ sQxeP8GxGx/sSDRToirlxAmtBv0zh+rMyovWY2zufqjsz0heBClH8v23u5hujGikInb8yLhmmlHT DYmfaYcW+tanfMCCjCfgngAWD7McH3eIbo91MMcXOSPNG/L2mtjKnK9U+oNvXpQbKIx3JB5x3DFE su9+JSa3jb7ym/VJXuLJIsPEUxcWpsMvL5nxT6Zf0WC073XXfJg2duvcDsW8yvCr2Q6SL9t03ywN y/VSSFXivwTIwcHUgd/DBsr9gW/M2+1Xan8JU7x4hcNs9ki5Xy4PFgXG68Hqh6Yc1VmFs+Owdepi ozyf+IqRaI4/YF4PWFbhaiF+2fG3H92vNzYZTqy+MFe6jR6AjEAputupH+SbMtjvIrF6xmuRgPNS d43kRZByRr7quqHekfglvxrGNVM3LH48HLvd3kkiFLwqLB6sHHHA0A2pqVqMjiOUSyXFqR8U7TOU NMUTBD8LjUc1PdZBpJ+wqtIyJF+seh8rD9/1sqcTtV/eEXNQeLEveK7I7ViA3AHricg4l6cnVA7a B33rv/2hdy4sfCJoE/xErgBX4H5T4N65Xnba6/94/rwzgt5ucJK4705LHy5/69OTjcu5PD2pNvfF FeAKcAXCrsC9c70Mu1TcAVeAK8AV4ArcxwqE/veX97GYPHWuAFeAK8AVuGcV4NdLuHvb3i7+PKuf tjKPv582XD8Nu7/3t34qOw+7Dyig+l36UMdn/+Rk0Zn3SaSDRGdumEu/ES5uWLnreAgeldwZySjC uwmBS38m2Hwuf2fJjyPxo/nKz++55+x8kfh7LqxgPQXHPwrWW7fOC2J8of2n37YXpmCf5Y6FhueF pc3Lg1KgR6+XzVcOFjQIP2GkdCTP9RIrDyoj1kks7oxUj8m7YdkIbRnK59Lqhhm/Sr5a7YeoPpov M/4QOQ2Jmfq31084XQXcNyuxCgaHEaf1hSWnp1/+vakBfjmaZvzeguFqP8MNSRTdMqJ5fKn0nz7f XhqV6rvcsdDwvDTKwaurKxC2+7Esrk3SzAMda9+ha7xG+qyDjpWLoWNcHjbfh+WXyZ2RdGHxbtT9 wk+IbHdutUvn+39gx4/xuTB7GI+JFb9avvBbZYfN5gg8fAiob/HI2PFj+mB6Blze4fic0PXrYUV1 i/Cv2kIsr9U3+eUfaY2TXR+LE89X2d/Ux5fSg1r/YfU30YLSr8sya7zg8bvOkj8GPt5dZ7L8uo65 HkPPHXNZ9n3E88XaPTQ8L98o+LNuKhCO95dsro0YaMSgwYyfdsMSjKxyNpcH5u8WD7/Ji+/D9otz Z1BuFNMvzvFBm4BpBy63597eZb4My++R1ubfbauoHDV55eIktcWIMB4Tkzekmq9HN29+EDOBPsgj 82537/gxfZh5aSzsbLpZDmsRX8oyvLA3s3rI1ks/+NZPX6UL6UGfjaErpJYbtgm3THTZNf/566lD 6YDSGidWnzphbVi+SH+jJpTjKwgeGbO/gXGmX5XxgsXPypWWeevjd7yr+EXsh4Y7hukJTrF8vfPy 7s8YXwyJnxf3nALheH/J5kNpzQnl8iB8H4xLpcqdYfB6UL8ox4edGW5HI9dMjcfEiB/NVyNPp8/x yLD41fRhN42W0k4nQLp0I8YkjKE8mkjYoa9sWr1fZ8r4R1rjxOpjUSL54v2NbSgoHhmjv+F+Ee4V Ej87SigV9WkjxrFbiydmV9MFMsV1nrF5BvGLOhAPdJc7hulJsHyRdlfli/nJgR8OtwLhuF6y+VCy TDplz11P3eUYlwfj+8BkNnnKomRSt+t/TEUXhXVVBVsq3BkmNwrzi3N8XKH7PmJ2YDnrxblftS4r gerFS25/9fOvDsyd7Huq7zOcx8SMH8tXK0+nr/HI0PhxfXx1DO5Z1ILnW2//aHlU112BdPplB0k6 /OPb5u+muMzJ+Uda40TruxzIH5F88f7mY8A9voLgkTH7G+YXHS9I/D5Rej0R9VHyvLDxjvr1ssna 7S53DNOztzl0rFx5WbAKeL9ODtaG73kqXBtakcHJEs5HypX8IIzvo+IX4c6IcYsKeHGjhGKlX7E2 XO1kHB9XOfsRsxM414z44TEx4mfmq52n07d4ZGj8A/RZ38kjzWQYsdY0FwEkvGhvVGveGum2f9et MzVvtkQlfS81hflBALvZvEt10XRB+a5I4fSBcAs2KjpW+Gq3yKuS84+0xonW947Bex/pD2IVrL+x xl1HUDwyRn8D16hf5XhB4sdaR9JHwfNSGe+CFIGP09Bwx4A8xtYTyRdrd608L++uwffDrUDo318q +VDmv+08Y20nXdf2VeTnHxQ+7aGcrPwtJ6vo106QcsoFI8R0LHPLqSOHKnNm1FFGxOxxIyjfB76A UTcjp3Lf0Xd357zyQFzxrFoHQf1684mObYP6Mdv0R1o6SdeNQxBPRUEloEja9hfS/UM3ugjm14u7 VFV1ei98M9L8t21HPxHedbBaCbMDH8ecObVtw/H9cNJrVYX5h/KPNkEE+OZsAB5T6V19Zlr+rjmF tJ6O0HcJSPxwxMPZ8cpX1E3gQA2JjyKX6vcXNFR1RPh9wQQ8sqX5e+ZnUEaHcc64BOAibdkjNuL2 DSBa5ZFbNCaC20fyReIH++tf0WdcMJPxJXmElJ5NTS7Zcs7aidrH9BGiuvjmqhlvLVl4LPU3l1VF FiojfyD+Lev3bS6Hw9Bv96/f/cE12HX3h71nz1Sd3g1HoZ+fvGHXGidaH4mGIPmi/Q0ZX5J5yiPb seH/5cJTYZzSnsXsP1h/w/y69dl52ne8IPFj6Yr6BD7eUb+IAy/u2I5DJ/OnuXhtmttFtK/UE8kX s+/mi+14e9/6XdNg1BHbisPB914kbV4clAJhWA8P40MlXl1qMtBJx73FlrSuyYkWf9HlLoQdsRzn 9fhyYVx8H8wvxlfCeTdMHpAKd8k7du99ph3tXDOEY4XHD5dkBidLzkVy84O8Q/be73M8Mt92d8Xv QPQRUrFd3h13EC4GxlOrj6QP8/viwDt9976cpybx3XD+kdY42fXd/mU7eL7s/oaPL208Mry/Mf2i 42WiVStfzFcfP+PdD+9PJqYqr83Xr6u/yS14nrP1HNmA5YvY18rz8gTA98KtQBiul0LIKlwbjSlh XB6pXMb3UfEbHHdGA7eInRgWP7s2qxQsqHCsWGcIZUi+UjxyfpDcTJ/lkSnj96dPV3s7ifKBJcmT DcdzrXEq62NRqecr2Qm034aMRxa4X/X4VbJm8LxUxjtmCC0PCXeMoad6vpJu8vGoieeFpsQPhFiB cF0vQxwmN9fDCnAeWQ8Lzt1xBbgCfV6B4O5Q9fm0eIDdVEA3tnRuxSedOl0EcXaSSYnYtzG66Yaf zhXgCnAF+o0C/P1lv2kqHihXgCvAFeAK9KICof9+bC8mw11zBbgCXAGuAFcgTAqE83rJuT9hajRu tlcU4P25V2TnTrkCfUaBsH1+qZ3701v8mpD4ZfKPguAo9VbHYMavEoyyfj/iW2nKS6qsvT+reOGH uAJcgf6oQNiul9q5P73FrwmBX4R/pJmj1Fs9CIkfDYdV39p/+Faa8pIqa+/PqBd+gCvAFeifCoTt fizO/cF4WBi/BuPdwK/yb92xKcFUeH0230e7X7kdjH+klaOk3oVwXhI9r9Nx65ZdKYbCpFbemcIA 9XWnEZYdiYkQFxKTagTJt2LZp2UY/4gVv1jfBj/Pg8Ug7tyyd9EC94b3B3cVaYeZl3QM68/wo71u +5XHwZ9zBbgCfVKBsLy/ZHJ/VDg7GL+GybtBOVO+3B83HydUfjE7KvwsaHElR+nMsZzVFxtgsdO0 9LLHb+1e/1HDMCfsv7F56jishzB5SaSrPr9o0XEnSf+37c+QP2ScLYLTi5+9uWbScMSOZt4Z0w6e r2a+FdM+FCL8I1b8X57J+c3qhsFjic1M1+uLTzO3wOM6y8btk/U+HCh3f8Cc4nmxuG93QuYXi4eX cwW4An1NgTC9v2RwfwjCw0L5NQjvBuVMIfVD5Rezg/KzkKbW6QdZnNXVTsttMmgwabC0wT550Ief 7XMmzkvSjxxMgGBcdDYj42xVVnwanPa+1epzss8TNv9Ia/z+6wfIt/KJzesJxj8irPgH6O46LdU2 MxmVDfmbW0j2KOCRF524ZpM4UM6ssrmnzLO2ptkKUos31Du9HPnuqual6M+h8+sbBX/GFeAK9F0F wnK9ZHJ/MM5O3flykGfdrEuVuQccqyoMLq0wzhHGmcLqh8ovZgfjZ7nykB7dHKWpGdtrU2FOJ0kj xnx9FL3IFT57es2U0bL67qcYL4kMGL1mVXkWrZdV8+MLB3KrHHmOAzOT3CcqdjTzzhQWaIG/fAPm WzGtQyHKe2LFHz31/3wHNDAWLy/+IWBEYn/4YuZ/gI2oCIL1B8ytSl6M/hw6v1g8vJwrwBXoawqE 5X6skKRoWc7JUvKwIiPo2jEPDYuHv1GxDw+Dh0hKTcJ4N8CFFuyTTviYaoBULW5gZIfInxj89QkP PQL8jorZZZeutc6mC9OIlyo530e7X7YdCIbJzxKDZHGUSMrMn6TVmnMPP/ea00x0W3MnUWCU+sbm JQ0QTorNSBWW34nSCZgpxJAK/0gtfpY1pL5GvnxQfLoAABe7SURBVBXLMi1D+EeRTb81HMuF26qn jPOHtmWuMOcSzweoYuMCuUXXQehbyIED9Hj/wRyrtiNh9mftfrvPF0PD5we4AlyB8CoQhveXCKcJ 4+xg/BqMd+PSQ86ZwuqHyi9mB+JB+EcIv4ye8MQvJqYRJ/3IrTAzC/u8UcwU4yVhXC2XPvJHzbwz uQHPc2a+bn0C5Vt57PnuIfwjdvyfXdj/F7g/Ub7n1LHPdYS0lB+xfAjmdlX99sFkyn3TxC9j5sXm WDnqg/MbCr6Yr1z8GVeAK9BTCoTh/WWX9e06U6mUQLWJciuzf2BcTFrOWoTCmqt/HUeq6K6zvObm i/NS82qst6edLVp7upro4HYsrfVec8vymfNuLqn4ccXC3LeANUm37OQTE/XiLv2bNdhuum42xObt XFQwFd5gRbPrXw2RX9TOw9FEn7xxorG6zlxQS0PNmmjOiId1V1tP1ZlgLhe26iLgR8aOXjc3XXwP +ET6RkNdtUVXuHJKglQFeRietOayceAqc27BWeECoMs2P/ff6UMj7E2NBddF85aiOhAte9mTC4bD NQPZohPT8oYQU8vajNeJIX5ddqyh1FZa1/ryE8Oi2PEjdmgxK9/rH0rte+Haew91iO1b+s6n+XNT 2e2Cmhd/udFSMGNvgVDHUJxhpG/AmfHfeqZG+EjyeMOlBZHQeczv34ynfej62c+HHlDvP4wAWHkR J6s/zxoZnN9Rj2aSc9BJjN+KFe4JMILgRVwBrkAfVaDPrB+L8mtkvBu/nClZfX+6B+rXnx247eu0 O7qIXh/t5zUI/FLCbr9S+0t4iSCSFP2bpjWkvALlNCFGVfhHgcbvsqyxfuDtAjVRfplK/K64ZI+B +5VO1JiXzJ37Ke63d/hi7sD4DleAKxCkAn3mehlg/P2fM2W/vCPm4Fp3uhW5HQvgzSjfuAJcAa4A V6BvK9DfZur+z5nSx88xzzrojKB3Tp0kbubX+lsT9O0OzaPjCnAFuAJhUqC/vb8MkwzcLFeAK8AV 4ApwBVQVCMP3Y1X98YNcAa4AV4ArwBXojwrw62V/bDUeM1eAK8AV4Ar0tAL8etnTinN/XAGuAFeA K9AfFeDXy/7YajxmrgBXgCvAFehpBfj1sqcV5/64AlwBrgBXoD8qwK+X/bHVeMxcAa4AV4Ar0NMK 8OtlTyvO/XEFuAJcAa5Af1SAXy/7Y6vxmLkCXAGuAFegpxXg18ueVpz74wpwBbgCXIH+qAC/XvbH VuMxcwW4AlwBrkBPK8Cvlz2tOPfHFeAKcAW4Av1RAX697I+txmPmCnAFuAJcgZ5WgF8ve1px7o8r wBXgCnAF+qMC/HrZH1uNx8wV4ApwBbgCPa0Av172tOLcH1eAK8AV4Ar0RwX49bI/thqPmSvAFeAK cAV6WgF+vcQVd7a3d+FH+++R3spLq1+t9ftvi/DI+6MC/b1/9vf4e6PP9PT10m63aboIKevfqD+U fyg/v/LIrVDopbQvWXVeXGrS61890h4KL5ps2D45s7sif/3+/C2VR645/ZyqjN+PPr2VF+JXGX+v 689UXBmnH52ZVu7Fwv6uQ+MH+2A+2XKySttIR/pzv2lhPH6hQbdsqcjf8e7FcKQTbvvhiNltM8K9 F7Kdrmvbfj3vYMewYcRqdaaXr9s+We+ybT9j/NUMklpb9XSKq0j1kVXfevn3pgYzIWnG7y0Y7ras agY9yLIvVe7qaIa9L6wdhESh54f+QKf1ZNzeTLfd5Mcco+Nx/6z4/ejTS3kRpl9W/FLuzPpuXXp4 hxWnH517OMLec9fPdWj/e+0K03VChoxcPTcdH2kKfftU/1RE578Aj/8zaYIl5PLIpY9PjvVvS1uN cNvXFo3G2uF4f+lotFksbdXVbRaLs2jn+UZ3SJ13GqsJiYmIdJeo7zDrT366rHgInJc4iHTa79iU rwrbHTabQ1nMcMW0L9XTp5jXNt/+UU607Lwuu83eCWX2O7fsvndrA/crmrQ77HZlnHevwVHjVMtX P/8K/s1TuVgSwozfjz54XrdAzC7S6ZDnJRMgwKdg55bdqxVYfpnxS/ZZ9V2uO213bnmZFoq77BA/ bZhub8p2YcbpR2dC1PuDXB8s7K52SBZJrZ02GeNErJxWVfpV5kvr4X7t9ls2hzAE7HaoGKQOQntp 6G94PDRaVl7q+otnwYvheStvl8A1ITIGe+3NthP+/inT2RUwYbeXoAE2Lhg64/GnPF351cZaIxgc PND77RRbB1dYyn6F1cfsuyz16UdvQUIU6ICk4v/f3vlHRVXlAfy2wMAgY05kaNoWIi16ZDDZs9gv BfG02u46ntQsJDdPObKdDlK7Ybjr/IFtpNseh45rSkcpncxddA9DulgJqFANa+BxMqQFAlehRsNx gRoahtN+73szwzhz72OeMinT9/0x7707931/fO73vfvufW/mm2Mq2U6Bw1JiPvLK/QkQkL3WxgO1 5VDS3lFZ0dDu6FfcM2t+gpJrAL9++Fja4Ro1m41UgUJn/t3f0sZROf3W6gJjpqGPFhN1YcPKgllC ubDv+8GXD3IqHt6+gcTEkvFPm1Zm0S7zcu2a159tGRNPbCbo8rVxGSYrrPMs+XT0LEsvCLO1V7y4 T1sizLVq1IUlK15Ii4VbW2f9sW2m1mqo0NP5zuay8snJT2Ul3e5rt3ufb78EHz+/BGnN9ZuXH15n cUvOTm/dMzfBvXfF2tb65pK3txC4X5m48f2sReGDbRsNj9SQ2G7HpE2//cPxd1YecpB5v9jyG/Ju Zp0BjixeciF3xngGT8l4YNY/27Bx0fv7YxWaxAhjiQ1k68xrXe0+ZH9MtpZ0tju6VzxUkZ965xWm B7DDbJer4syKw8Hm9YblTD4c05yNx/Srjha52iWm0PLMBgi2+sNrdCfN8ep5KpvBSENIW7aydGm8 mldO+HqZ/kIcMvWCJu84z4ghNX0ZDfnVs5QS8cbiQMhQewmeS8Sb8D3HHr5f3nYOex0gJDwS1NjK C/d+bD7bMmnS4vxFzyRLXk+CHZ/e9ntxZl83AjovruTMtJ8yOHf4L4e2H7KReZNUMIPnWbztGeIp nz9PvkfRjb8RjPElsds6wPPi5WfenkxI37ZaK70b7ThZuIrOoxKLdZ32oHbZkYUHOun9KW8Zvr66 oDA+gzhKCuqES8rl6oe3Zxoc2aULqkzpmzJs+tTiF5r5z/8k5SsS1fHdMES+KIwlwcQwxbcOS43N RCbrMggxWYluMtwQGCrP2ohMvb3te2/ZTTtLXeKmwskZFpt+9tbH6ikJe9uZtUXnKaKa80XrmvSV Hd08OFAuab9wnA8fWubnF5Q5Gl+knWW2acWZ4/M3gXfE+S2ty1rCw6CrtMDMwaRoRWtrbf1/v46k uzUWEj0mXDVhDLE4LIa6zMy66uw4KulEt+gCQ6+k/Yz6hESC8Jo+YwnJK5gMwl3tfrF58zRqv6Yg tVjnMJrAGIeFRAY6h+HxktcuknYKR/tw5saDks/HY4X3hr251RwbV1C2xGxK1ZE+/YZjjfB1tDIW HDRZDcYxeYWJ2RCMy3anV1928soJYevl+QtxyNTrivM+oo3fVDxdV0PvSsd6m0sC5CAn3gT5HHs4 fsk9H90umIpaWsYquo3tazXFqxrtcIsscT0JZnyKev0489uLfV5IntcM+/u79sOToCKrKV6tMrQL QxF4FgULlwM7rnj1ufLdDTAq1sHoL521H+4E56ub3z9xAdaWXSfPwCp5QXnnkk2wkZFy3P4ne0++ PX8qDDu5y3D1teaclzc89ir0WuJZ29xQCiM+WM59+Umz7bKwbaj4go5EmIuE/Ki4BTty9z3nbZ0q 7Y8PwLVJW/xk8dNQrn76pYWPgtiocCJXb8tn/4AD8+a37sjK3/BUdVUi7X9NbV2EqLJyvu9ZuR2+ LV5xCSZj9yxIZlouFkrYL1Tw5QOFDL+gNCw6jh5g1JpeNDZ/mRK/STcjkRawFlX80jfSdYRotDMU f357zux99Qt/VQwVtz9W/OBtU3JXG4ERIdnm50/tyam2F9j3zE2CfaZeCfuZ9e9MzS2lLQJ+bXn5 iSKgJrb7Vx0fQWmh9sjLv87d8exx2kurS3NncMfl8D1z4bWLhJ2CHF/O3HgIu5PHh2kPTBEmz1ye Qpq2vVdk+LSE1qG3nSR5rl7gkNeRu2VD1p7j08Fjy7ufd/LKCUcvz1+eXtEvTWJV+cr83GU7Lq0o zYiZHh1GTRKWwDnIiDdBMpsDzy8uf5edvFU2jJXLf99QSc9H46G2ixJyghqfPM689uKdFxLnNdP+ pkbaR+alnynP2WNfXaZxc+Jy4MQVrz5PvlvP6FjTacwRXhyWXectRJHRfmpte0yGxlFjqi+/uCB5 PHQIY24GXWOjxkWFRUUpYSK+X6WUesTOqS8OHVTCuRoNk6W9wgPRAfFuaMzd0yZOgStL2fzSM2d7 5k+C77kLR75YXyQTeeVTDVEpjNMUA4QOXSPDlFehFw5Ugv/CEiF6434UqhQmh0Cs+K30J8d+Nh+3 KD+/wu7KfqCAdBJ4P8vcaahxEMOuqJ6CXB64SVPuJUdLtv3rJXpH4ti59hAM7rUzJwjtKF491Zmp wsFRCu/G9dM7TDww6gsuuNqddpZiuwu9yKX/dRMyvr/XCisy8B0MD9y6+5tPf9TxHbkr4b6kce4y QRDzg9kusjhLxYMUH19z+tvf0hzMgemvKu3icX0LV5lyRH/BPbGqE2ImjIjqbqHjaV45rUYXVrv4 +8vT6/LLFa9EPfXJA0/ZVAqQy443Locwpax449lDPWL5xdVLD2Auov13T6DnXLg6mta59E3PcHJG Kj59TeJxFqfl/dvLfbzveUGGOa997Y8IpyftxFh68xylviMWVhFCVElcV+Xwj+hgy3fbPzrWIz2+ HOzasWuVCXx3pBjzByrSM4Rm1q8uoz//UE2YCTdvppMbNh7cvOavN43drNwvTNXyUDHrd51+awsd NBp31dVWH91hpAK3Hu7qnXbPMirnm4ZuZwy8JXOmebe+pXogXAwLtgamfDLYtbds/foyfTlo6dtd SLf3dtmbd/8bVBl3Vh38Gq4RVuN+y2kQuq36rZtT5Om9Y+o8OLDo4MKNVfv3lq+Z0wT9jmZ+wm3w eKi2avMLh3bDt3+vLoR33CvauYNj0R+m/Tw+bL/gmutoKakrKvlWuTBj/baHCqlkhTiSEZX4fkbd qoFBZI2tRptq2j4ZJkjh3cJ5U5TE2V27cafwSNm25QWA5vnBD5OncH/AtJ9np8evrUerq4/ughgz ndxcca43MYUO9A1Hp6W8Nk/5xjIabxFkqNUvfzTtQObCg5mN3Dlml4P8dmHHrceeAOOQy8cXsGt/ YPA72NIobib9nXWWSvAL4ry22/N+j2Gq4Yn1OxdntkD8aB9K8Iynfct5enn+8vSK55elac6a8jcr PtwB5+8txekNdiKXg9x449nD80vudaCtoUS4nuizd7+29/D62afofWDGXXdy5XDi2cNBXnz6tT6P M6+9eHq5nDn2x064G2xZd2DJa8fefG7bbErBtmpfq43HQS5/nnw/ADd0wdCFZWTMHOyus4p3QobP bfq4Lyh2WExNH77igJ9/pORP19Y0mfQNtEvNnm7KjJM0gFX//GnxcSU5dfbjiQP07Rh4hHn8y/UL UhddWFH2fNmynCNUOCy6lMrp0uM0lnzi6D7WVCTMf4GMmiLan+keT59gpuNJcqjlzNIImKswnbgQ ByvL+bqvx+2RpXd8Um6rNnK1KUdfJ3S0Cp3psVfm0fcL7G0t6wxWqgWeX4LWvIQ1i+LVdJ+3sOzn 8rm1h+GXNut28c1yq37OLr2gR1OcqZXSqkx8IIYY+8ijsx5KP5eXc96g+ekMmDzo7WnTnzcKEiyG JogB3cqHl46He4tBFk/QCzenLPvZ/LVZxOpqd3PHJwlEbHej+cJLi1KzenISSqv2fea85Zkps3Ma irxpdbUdgV1NYuWjtw8zuOS3C9tOLmdOHNq/4vDxNtdrWzUpoyCGFFnXZh4gmrg8nVpTYitp6nn1 QXrnT5fsMb3wtFujLti6XJ9G791di095bztbL9ffSI7eeNf5VXJqlXB2aAoe2JqiJC3udgn0fLQL v9QKON54HGYStl/hcbKuA86Wz8uFC5amu33tinZgmLFdW7qIXpc4cpjXh6uNT3ejDa099vtwjuJc Nz5t4JwXt3I4c87H5JkF5u5Ls+sMa4/WEAW9toFNH3dan5zL5sCLZ4/9PtdhFU++5FO5IS43xtZN 33///Q9sidPRax8kSqVKsqscMkpmfWdvL7ykE66MVkWJ0wVDkthbMuWzhcDDJZl6XfXVKq9LHU+2 ZPk12w+W2COiIwYcA06nU6lSD9OxgDHwoxpHhFqYS4cf8kcEcgjfhWu2H9B3ne0dGKuK7m7753JT TmyKuXpxmqCwv2K3UtuuqXz21AJ3N8M3RPyG2y4y7ZQbD2y7AC+JVKkUnnMFfkPV+vrOaescmzry cuMUUe4g55WzxXqVsv310+s5wlVfpQrw/PXnACUy4w3uxnw5eOzhbfjr5dV0l0NUf+tURqvdSMVy +XLc8jxrfnx6qvhvuPT6cXaVB3DdgJqyORNHr+074qcUzJPLgVOfK9+fwI1Ych36yxsRA9o0mgnU l900u2nIgdKVl550jct733xt7JaJx08te3Do61G95WhMKUoVJ3DAj8LllzYkCXMBvPJR7WyoGM+P z1Dx8EfjB/aXP5qmDl1H+y83H/389KV+B4makPaz+xICeK9n1MKw1ddXnXMqYMDpcJIZmoeTXMM8 XvmodTSEDP8xxWcINRvLFewvWVSwDAkgASSABJDAlQR+cuUu7iEBJIAEkAASQAIMAthfMqBgERJA AkgACSABHwKe9+58yq/DLuR5gT9nV0bYb7798dz7k6+DBSOqUnDnNIme9dzipfBzi8CXEOMQuONY EwkgASRwIxO4gfrLUZ3nxb+NrzrPUYhx8CeDJUgACSCB0UggaPOxUvl3WPmYCLm6PC+B5pHh5w9i 552Rsp82tL9en/w7V5nn6Go5jMbgQ5uRABJAAqOIQDDGl+z8OxJ5Z+TleZGfR4aXP4idp4aXzygw vV75d2TnOZLHYRRFGZqKBJAAEhj9BIIxvuTl32HnnZGf50VeHhluXhtunhqe/ZJ6/fLvDMVGYHmO 5HMY0oBbSAAJIAEkEGwCwRhfCvl3TlRue6+JOIS/chUySNC8Mx+uW2Wj+ZjSSL25aDZNMUGIJ8/L lrlJ/V3aNPEvsyX8FvLInHhJY6R5o/bAP2e+4eiHVBjNVX+G/1yFBfJ5XSCefF76pERP/qBe3bh4 yFf1iJCvyjvvzBX1k5Q0j5Kf/WL+IJ5emucoax5of6L13iWm//jkOUojjQ1FqYJ1V+T/8tY7v9UI FSCfTqAcRHH4iQSQABJAAj8IgZHvL6Xy71CXfPPO8PLISLkvJ48M4eQP4uXr6W/fycmjJJk/6Jrz HA2T72bwYq35A2tU0i9TZ13rH85KkcXvkAASQAJIgE1g5Odjefl3eHln5OZ5kZtHhpfXhpenhme/ tN5rz3MkzeHTD1bPObJi2cHU11uHSfLFbmcsRQJIAAkggWsjMPLjS17+nXHuvD9++Zg4eWQ4eV7s nLxRvDwyhJc/iJP3h2f/sPmDfPLvyM1zJJ3vZvLUhaQeJre1P1fj8PLaQh6PRgJIAAlcFYFg/X+s 7Pw7I5bnxT+PjHReG//6FKRs+935blipcJgtw9bLz6cDWbT6+4knfxNTJhYiASSABJBAsAgEq78M lr0oFwkgASSABJDA9SAw8s8vr4cXqBMJIAEkgASQQHAJYH8ZXL4oHQkgASSABEKDAPaXodGO6AUS QAJIAAkElwD2l8Hli9KRABJAAkggNAhgfxka7YheIAEkgASQQHAJYH8ZXL4oHQkgASSABEKDAPaX odGO6AUSQAJIAAkElwD2l8Hli9KRABJAAkggNAhgfxka7YheIAEkgASQQHAJYH8ZXL4oHQkgASSA BEKDAPaXodGO6AUSQAJIAAkElwD2l8Hli9KRABJAAkggNAhgfxka7YheIAEkgASQQHAJYH8ZXL4o HQkgASSABEKDwP8BSAe1PvCuRNkAAAAASUVORK5CYII= --Apple-Mail-31--587021684 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Thanks, Dino and Darrel On Dec 21, 2009, at 6:38 PM, Dino Farinacci wrote: > A description of the design issue: > > (4) Add text in a new subsection of section 6.1.5 about dealing with > Map-Replies with coarse EID-prefixes. > > As mentioned in the Hiroshima IETF, an ETR could return a Map-Reply > with a coarse EID-prefix. One that is shorter in mask-length than > what was allocated to it. Even if it is registered properly with the > mapping system, there can be a bug, a compromise, or an inadvertent > configuration to cause the Map-Reply to have a shorter mask-length > then what was registered. > > To fix this, there can be two possible solutions, one is proxy Map- > Replying by a Map-Server on behalf of the ETRs for the registering > site and ITRs being configured to not accept EID-prefixes shorter > than a configured mask-length. > > Would anyone like to comment on this? We can propose text but there > may be other lightweight solutions to this. We would like to figure > a lightweight solution versus having a strong ITR-to-ETR > authentication mechanism which most probably would require third- > party systems. > > Thanks, > Dino/Darrel > --Apple-Mail-31--587021684-- From darlewis@cisco.com Tue Jan 12 14:43:37 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D46483A67C0 for ; Tue, 12 Jan 2010 14:43:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A993Ra-iomFB for ; Tue, 12 Jan 2010 14:43:37 -0800 (PST) Received: from sj-iport-2.cisco.com (sj-iport-2.cisco.com [171.71.176.71]) by core3.amsl.com (Postfix) with ESMTP id 273FD3A67A5 for ; Tue, 12 Jan 2010 14:43:37 -0800 (PST) Authentication-Results: sj-iport-2.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: rfcdiff-lisp-05-to-06.html, draft-ietf-lisp-06.txt : 172385, 173069 X-IronPort-AV: E=Sophos;i="4.49,264,1262563200"; d="txt'?html'217?scan'217,208,217";a="232343840" Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-2.cisco.com with ESMTP; 12 Jan 2010 22:43:34 +0000 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id o0CMhYOS017720 for ; Tue, 12 Jan 2010 22:43:34 GMT Received: from xmb-sjc-213.amer.cisco.com ([171.70.151.153]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 12 Jan 2010 14:43:34 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01CA93D8.AC0D6C98" Date: Tue, 12 Jan 2010 14:43:32 -0800 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Diffs for candidate -06 update. Thread-Index: AcqTvy/Hk/pjb5sSQQOEobxCseh+nwAGSbVA From: "Darrel Lewis (darlewis)" To: X-OriginalArrivalTime: 12 Jan 2010 22:43:34.0531 (UTC) FILETIME=[AC3BF530:01CA93D8] Subject: [lisp] Diffs for candidate -06 update. X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 22:43:38 -0000 This is a multi-part message in MIME format. ------_=_NextPart_001_01CA93D8.AC0D6C98 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable All, The attached diff file is a sum of the discussions on the list as well as the editorial changes. I'd like to give a reasonable time frame for review and discussion. How about a week?=20 -Darrel ------_=_NextPart_001_01CA93D8.AC0D6C98 Content-Type: text/html; name="rfcdiff-lisp-05-to-06.html" Content-Transfer-Encoding: base64 Content-Description: rfcdiff-lisp-05-to-06.html Content-Disposition: attachment; filename="rfcdiff-lisp-05-to-06.html" DQo8IS0tIHNhdmVkIGZyb20gdXJsPSgwMDI5KWh0dHA6Ly90b29scy5pZXRmLm9yZy9yZmNkaWZm IC0tPg0KPEhUTUw+PEhFQUQ+PE1FVEEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50 PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9SVNPLTg4NTktMSI+PFRJVExFPndkaWZmIGRyYWZ0LWlldGYt bGlzcC0wNS50eHQgZHJhZnQtaWV0Zi1saXNwLTA2LnR4dDwvVElUTEU+PC9IRUFEPjxCT0RZPg0K PFBSRT4NCk5ldHdvcmsgV29ya2luZyBHcm91cCAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIEQuIEZhcmluYWNjaQ0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgVi4gRnVsbGVyDQpJbnRlbmRlZCBzdGF0dXM6 IEV4cGVyaW1lbnRhbCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRC4gTWV5ZXIN CkV4cGlyZXM6IDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+QXByaWwgMiw8L0ZPTlQ+PC9TVFJJ S0U+IDxTVFJPTkc+PEZPTlQgY29sb3I9ImdyZWVuIj5KdWx5IDE2LDwvRk9OVD48L1NUUk9ORz4g MjAxMCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEQuIExld2lzDQog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IGNpc2NvIFN5c3RlbXMNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+U2VwdGVtYmVyIDI5LCAyMDA5 PC9GT05UPjwvU1RSSUtFPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+SmFudWFyeSAxMiwg MjAxMDwvRk9OVD48L1NUUk9ORz4NCg0KICAgICAgICAgICAgICAgICBMb2NhdG9yL0lEIFNlcGFy YXRpb24gUHJvdG9jb2wgKExJU1ApDQogICAgICAgICAgICAgICAgICAgICAgICAgPFNUUklLRT48 Rk9OVCBjb2xvcj0icmVkIj5kcmFmdC1pZXRmLWxpc3AtMDUudHh0PC9GT05UPjwvU1RSSUtFPg0K ICAgICAgICAgICAgICAgICAgICAgICAgIDxTVFJPTkc+PEZPTlQgY29sb3I9ImdyZWVuIj5kcmFm dC1pZXRmLWxpc3AtMDYudHh0PC9GT05UPjwvU1RST05HPg0KDQpTdGF0dXMgb2YgdGhpcyBNZW1v DQoNCiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgaXMgc3VibWl0dGVkIHRvIElFVEYgaW4gZnVsbCBj b25mb3JtYW5jZSB3aXRoIHRoZQ0KICAgcHJvdmlzaW9ucyBvZiBCQ1AgNzggYW5kIEJDUCA3OS4N Cg0KICAgSW50ZXJuZXQtRHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJu ZXQgRW5naW5lZXJpbmcNCiAgIFRhc2sgRm9yY2UgKElFVEYpLCBpdHMgYXJlYXMsIGFuZCBpdHMg d29ya2luZyBncm91cHMuICBOb3RlIHRoYXQNCiAgIG90aGVyIGdyb3VwcyBtYXkgYWxzbyBkaXN0 cmlidXRlIHdvcmtpbmcgZG9jdW1lbnRzIGFzIEludGVybmV0LQ0KICAgRHJhZnRzLg0KDQogICBJ bnRlcm5ldC1EcmFmdHMgYXJlIGRyYWZ0IGRvY3VtZW50cyB2YWxpZCBmb3IgYSBtYXhpbXVtIG9m IHNpeCBtb250aHMNCiAgIGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRl ZCBieSBvdGhlciBkb2N1bWVudHMgYXQgYW55DQogICB0aW1lLiAgSXQgaXMgaW5hcHByb3ByaWF0 ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5jZQ0KICAgbWF0ZXJpYWwgb3IgdG8g Y2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3MuIg0KDQogICBUaGUgbGlz dCBvZiBjdXJyZW50IEludGVybmV0LURyYWZ0cyBjYW4gYmUgYWNjZXNzZWQgYXQNCiAgIGh0dHA6 Ly93d3cuaWV0Zi5vcmcvaWV0Zi8xaWQtYWJzdHJhY3RzLnR4dC4NCg0KICAgVGhlIGxpc3Qgb2Yg SW50ZXJuZXQtRHJhZnQgU2hhZG93IERpcmVjdG9yaWVzIGNhbiBiZSBhY2Nlc3NlZCBhdA0KICAg aHR0cDovL3d3dy5pZXRmLm9yZy9zaGFkb3cuaHRtbC4NCg0KICAgVGhpcyBJbnRlcm5ldC1EcmFm dCB3aWxsIGV4cGlyZSBvbiA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPkFwcmlsIDIsPC9GT05U PjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+SnVseSAxNiw8L0ZPTlQ+PC9T VFJPTkc+IDIwMTAuDQoNCkNvcHlyaWdodCBOb3RpY2UNCg0KICAgQ29weXJpZ2h0IChjKSA8U1RS SUtFPjxGT05UIGNvbG9yPSJyZWQiPjIwMDk8L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+PEZPTlQg Y29sb3I9ImdyZWVuIj4yMDEwPC9GT05UPjwvU1RST05HPiBJRVRGIFRydXN0IGFuZCB0aGUgcGVy c29ucyBpZGVudGlmaWVkIGFzIHRoZQ0KICAgZG9jdW1lbnQgYXV0aG9ycy4gIEFsbCByaWdodHMg cmVzZXJ2ZWQuDQoNCiAgIFRoaXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBCQ1AgNzggYW5kIHRo ZSBJRVRGIFRydXN0J3MgTGVnYWwNCiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1 bWVudHMgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mDQogICBwdWJsaWNhdGlvbiBvZiB0aGlzIGRv Y3VtZW50IChodHRwOi8vdHJ1c3RlZS5pZXRmLm9yZy9saWNlbnNlLWluZm8pLg0KICAgUGxlYXNl IHJldmlldyB0aGVzZSBkb2N1bWVudHMgY2FyZWZ1bGx5LCBhcyB0aGV5IGRlc2NyaWJlIHlvdXIg cmlnaHRzDQogICBhbmQgcmVzdHJpY3Rpb25zIHdpdGggcmVzcGVjdCB0byB0aGlzIGRvY3VtZW50 Lg0KDQpBYnN0cmFjdA0KDQogICBUaGlzIGRyYWZ0IGRlc2NyaWJlcyBhIHNpbXBsZSwgaW5jcmVt ZW50YWwsIG5ldHdvcmstYmFzZWQgcHJvdG9jb2wgdG8NCiAgIGltcGxlbWVudCBzZXBhcmF0aW9u IG9mIEludGVybmV0IGFkZHJlc3NlcyBpbnRvIEVuZHBvaW50IElkZW50aWZpZXJzDQogICAoRUlE cykgYW5kIFJvdXRpbmcgTG9jYXRvcnMgKFJMT0NzKS4gIFRoaXMgbWVjaGFuaXNtIHJlcXVpcmVz IG5vDQogICBjaGFuZ2VzIHRvIGhvc3Qgc3RhY2tzIGFuZCBubyBtYWpvciBjaGFuZ2VzIHRvIGV4 aXN0aW5nIGRhdGFiYXNlDQogICBpbmZyYXN0cnVjdHVyZXMuICBUaGUgcHJvcG9zZWQgcHJvdG9j b2wgY2FuIGJlIGltcGxlbWVudGVkIGluIGENCiAgIHJlbGF0aXZlbHkgc21hbGwgbnVtYmVyIG9m IHJvdXRlcnMuDQoNCiAgIFRoaXMgcHJvcG9zYWwgd2FzIHN0aW11bGF0ZWQgYnkgdGhlIHByb2Js ZW0gc3RhdGVtZW50IGVmZm9ydCBhdCB0aGUNCiAgIEFtc3RlcmRhbSBJQUIgUm91dGluZyBhbmQg QWRkcmVzc2luZyBXb3Jrc2hvcCAoUkFXUyksIHdoaWNoIHRvb2sNCiAgIHBsYWNlIGluIE9jdG9i ZXIgMjAwNi4NCg0KVGFibGUgb2YgQ29udGVudHMNCg0KICAgMS4gIFJlcXVpcmVtZW50cyBOb3Rh dGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA0DQogICAyLiAg SW50cm9kdWN0aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDUNCiAgIDMuICBEZWZpbml0aW9uIG9mIFRlcm1zICAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgOA0KICAgNC4gIEJhc2ljIE92ZXJ2aWV3IC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDEyDQogICAgIDQuMS4gIFBh Y2tldCBGbG93IFNlcXVlbmNlIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g MTQNCiAgIDUuICBUdW5uZWxpbmcgRGV0YWlscyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAxNg0KICAgICA1LjEuICBMSVNQIElQdjQtaW4tSVB2NCBIZWFkZXIg Rm9ybWF0ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDE3DQogICAgIDUuMi4gIExJU1AgSVB2 Ni1pbi1JUHY2IEhlYWRlciBGb3JtYXQgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTgNCiAg ICAgNS4zLiAgVHVubmVsIEhlYWRlciBGaWVsZCBEZXNjcmlwdGlvbnMgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAxOQ0KICAgICA1LjQuICBEZWFsaW5nIHdpdGggTGFyZ2UgRW5jYXBzdWxhdGVk IFBhY2tldHMgIC4gLiAuIC4gLiAuIC4gLiAuIDIxDQogICAgICAgNS40LjEuICBBIFN0YXRlbGVz cyBTb2x1dGlvbiB0byBNVFUgSGFuZGxpbmcgLiAuIC4gLiAuIC4gLiAuIC4gMjINCiAgICAgICA1 LjQuMi4gIEEgU3RhdGVmdWwgU29sdXRpb24gdG8gTVRVIEhhbmRsaW5nICAuIC4gLiAuIC4gLiAu IC4gLiAyMg0KICAgNi4gIEVJRC10by1STE9DIE1hcHBpbmcgIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIDI0DQogICAgIDYuMS4gIExJU1AgSVB2NCBhbmQgSVB2NiBD b250cm9sIFBsYW5lIFBhY2tldCBGb3JtYXRzICAuIC4gLiAuIC4gMjQNCiAgICAgICA2LjEuMS4g IExJU1AgUGFja2V0IFR5cGUgQWxsb2NhdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAy Ng0KICAgICAgIDYuMS4yLiAgTWFwLVJlcXVlc3QgTWVzc2FnZSBGb3JtYXQgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIDI2DQogICAgICAgNi4xLjMuICBFSUQtdG8tUkxPQyBVRFAgTWFwLVJl cXVlc3QgTWVzc2FnZSAgLiAuIC4gLiAuIC4gLiAuIC4gMjgNCiAgICAgICA2LjEuNC4gIE1hcC1S ZXBseSBNZXNzYWdlIEZvcm1hdCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAzMA0KICAg ICAgIDYuMS41LiAgRUlELXRvLVJMT0MgVURQIE1hcC1SZXBseSBNZXNzYWdlICAuIC4gLiAuIC4g LiAuIC4gLiAuIDMzDQogICAgICAgNi4xLjYuICBNYXAtUmVnaXN0ZXIgTWVzc2FnZSBGb3JtYXQg IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj4zNDwv Rk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPjM1PC9GT05UPjwvU1RS T05HPg0KICAgICAgIDYuMS43LiAgRW5jYXBzdWFsdGVkIENvbnRyb2wgTWVzc2FnZSBGb3JtYXQg IC4gLiAuIC4gLiAuIC4gLiAuIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+MzY8L0ZPTlQ+PC9T VFJJS0U+IDxTVFJPTkc+PEZPTlQgY29sb3I9ImdyZWVuIj4zNzwvRk9OVD48L1NUUk9ORz4NCiAg ICAgNi4yLiAgUm91dGluZyBMb2NhdG9yIFNlbGVjdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPjM4PC9GT05UPjwvU1RSSUtFPiA8 U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+Mzk8L0ZPTlQ+PC9TVFJPTkc+DQogICAgIDYuMy4g IFJvdXRpbmcgTG9jYXRvciBSZWFjaGFiaWxpdHkgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj4zOTwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48 Rk9OVCBjb2xvcj0iZ3JlZW4iPjQwPC9GT05UPjwvU1RST05HPg0KICAgICAgIDYuMy4xLiAgRWNo byBOb25jZSBBbGdvcml0aG0gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDxTVFJJ S0U+PEZPTlQgY29sb3I9InJlZCI+NDI8L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+PEZPTlQgY29s b3I9ImdyZWVuIj40MzwvRk9OVD48L1NUUk9ORz4NCiAgICAgICA2LjMuMi4gIFJMT0MgUHJvYmlu ZyBBbGdvcml0aG0gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA8U1RSSUtFPjxGT05U IGNvbG9yPSJyZWQiPjQzPC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVl biI+NDQ8L0ZPTlQ+PC9TVFJPTkc+DQogICAgIDYuNC4gIFJvdXRpbmcgTG9jYXRvciBIYXNoaW5n ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gPFNUUklLRT48Rk9OVCBjb2xvcj0i cmVkIj40NDwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPjQ1PC9G T05UPjwvU1RST05HPg0KICAgICA2LjUuICBDaGFuZ2luZyB0aGUgQ29udGVudHMgb2YgRUlELXRv LVJMT0MgTWFwcGluZ3MgIC4gLiAuIC4gLiAuIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+NDU8 L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+PEZPTlQgY29sb3I9ImdyZWVuIj40NjwvRk9OVD48L1NU Uk9ORz4NCiAgICAgICA2LjUuMS4gIENsb2NrIFN3ZWVwICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPjQ1PC9GT05UPjwv U1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+NDY8L0ZPTlQ+PC9TVFJPTkc+DQog ICAgICAgNi41LjIuICBTb2xpY2l0LU1hcC1SZXF1ZXN0IChTTVIpICAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj40NjwvRk9OVD48L1NUUklLRT4g PFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPjQ3PC9GT05UPjwvU1RST05HPg0KICAgNy4gIFJv dXRlciBQZXJmb3JtYW5jZSBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+NDg8L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+ PEZPTlQgY29sb3I9ImdyZWVuIj40OTwvRk9OVD48L1NUUk9ORz4NCiAgIDguICBEZXBsb3ltZW50 IFNjZW5hcmlvcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA8U1RS SUtFPjxGT05UIGNvbG9yPSJyZWQiPjQ5PC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNv bG9yPSJncmVlbiI+NTA8L0ZPTlQ+PC9TVFJPTkc+DQogICAgIDguMS4gIEZpcnN0LWhvcC9MYXN0 LWhvcCBUdW5uZWwgUm91dGVycyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gPFNUUklLRT48Rk9O VCBjb2xvcj0icmVkIj41MDwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3Jl ZW4iPjUxPC9GT05UPjwvU1RST05HPg0KICAgICA4LjIuICBCb3JkZXIvRWRnZSBUdW5uZWwgUm91 dGVycyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDxTVFJJS0U+PEZPTlQgY29sb3I9 InJlZCI+NTA8L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+PEZPTlQgY29sb3I9ImdyZWVuIj41MTwv Rk9OVD48L1NUUk9ORz4NCiAgICAgOC4zLiAgSVNQIFByb3ZpZGVyLUVkZ2UgKFBFKSBUdW5uZWwg Um91dGVycyAgLiAuIC4gLiAuIC4gLiAuIC4gLiA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPjUx PC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+NTI8L0ZPTlQ+PC9T VFJPTkc+DQogICA5LiAgVHJhY2Vyb3V0ZSBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj41MjwvRk9OVD48 L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPjUzPC9GT05UPjwvU1RST05HPg0K ICAgICA5LjEuICBJUHY2IFRyYWNlcm91dGUgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+NTM8L0ZPTlQ+PC9TVFJJS0U+ IDxTVFJPTkc+PEZPTlQgY29sb3I9ImdyZWVuIj41NDwvRk9OVD48L1NUUk9ORz4NCiAgICAgOS4y LiAgSVB2NCBUcmFjZXJvdXRlICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPjUzPC9GT05UPjwvU1RSSUtFPiA8U1RST05H PjxGT05UIGNvbG9yPSJncmVlbiI+NTQ8L0ZPTlQ+PC9TVFJPTkc+DQogICAgIDkuMy4gIFRyYWNl cm91dGUgdXNpbmcgTWl4ZWQgTG9jYXRvcnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gPFNU UklLRT48Rk9OVCBjb2xvcj0icmVkIj41MzwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBj b2xvcj0iZ3JlZW4iPjU0PC9GT05UPjwvU1RST05HPg0KICAgMTAuIE1vYmlsaXR5IENvbnNpZGVy YXRpb25zICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDxTVFJJS0U+PEZP TlQgY29sb3I9InJlZCI+NTU8L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+PEZPTlQgY29sb3I9Imdy ZWVuIj41NjwvRk9OVD48L1NUUk9ORz4NCiAgICAgMTAuMS4gU2l0ZSBNb2JpbGl0eSAgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA8U1RSSUtFPjxGT05UIGNvbG9y PSJyZWQiPjU1PC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+NTY8 L0ZPTlQ+PC9TVFJPTkc+DQogICAgIDEwLjIuIFNsb3cgRW5kcG9pbnQgTW9iaWxpdHkgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj41 NTwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPjU2PC9GT05UPjwv U1RST05HPg0KICAgICAxMC4zLiBGYXN0IEVuZHBvaW50IE1vYmlsaXR5IC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+NTU8L0ZPTlQ+ PC9TVFJJS0U+IDxTVFJPTkc+PEZPTlQgY29sb3I9ImdyZWVuIj41NjwvRk9OVD48L1NUUk9ORz4N CiAgICAgMTAuNC4gRmFzdCBOZXR3b3JrIE1vYmlsaXR5ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPjU3PC9GT05UPjwvU1RSSUtF PiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+NTg8L0ZPTlQ+PC9TVFJPTkc+DQogICAgIDEw LjUuIExJU1AgTW9iaWxlIE5vZGUgTW9iaWxpdHkgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj41NzwvRk9OVD48L1NUUklLRT4gPFNUUk9O Rz48Rk9OVCBjb2xvcj0iZ3JlZW4iPjU4PC9GT05UPjwvU1RST05HPg0KICAgMTEuIE11bHRpY2Fz dCBDb25zaWRlcmF0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDxT VFJJS0U+PEZPTlQgY29sb3I9InJlZCI+NTk8L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+PEZPTlQg Y29sb3I9ImdyZWVuIj42MDwvRk9OVD48L1NUUk9ORz4NCiAgIDEyLiBTZWN1cml0eSBDb25zaWRl cmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA8U1RSSUtFPjxG T05UIGNvbG9yPSJyZWQiPjYwPC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJn cmVlbiI+NjE8L0ZPTlQ+PC9TVFJPTkc+DQogICAxMy4gUHJvdG90eXBlIFBsYW5zIGFuZCBTdGF0 dXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gPFNUUklLRT48Rk9OVCBjb2xv cj0icmVkIj42MTwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPjYy PC9GT05UPjwvU1RST05HPg0KICAgMTQuIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+ NjQ8L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+PEZPTlQgY29sb3I9ImdyZWVuIj42NTwvRk9OVD48 L1NUUk9ORz4NCiAgICAgMTQuMS4gTm9ybWF0aXZlIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPjY0PC9GT05U PjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+NjU8L0ZPTlQ+PC9TVFJPTkc+ DQogICAgIDE0LjIuIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj42NTwvRk9OVD48L1NUUklL RT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPjY2PC9GT05UPjwvU1RST05HPg0KICAgQXBw ZW5kaXggQS4gIEFja25vd2xlZGdtZW50cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+Njg8L0ZPTlQ+PC9TVFJJS0U+IDxTVFJP Tkc+PEZPTlQgY29sb3I9ImdyZWVuIj42OTwvRk9OVD48L1NUUk9ORz4NCiAgIEFwcGVuZGl4IEIu ICBEb2N1bWVudCBDaGFuZ2UgTG9nIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA8 U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPjY5PC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05U IGNvbG9yPSJncmVlbiI+NzA8L0ZPTlQ+PC9TVFJPTkc+DQogICAgIEIuMS4gIENoYW5nZXMgdG8g PFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj5kcmFmdC1pZXRmLWxpc3AtMDUudHh0PC9GT05UPjwv U1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+ZHJhZnQtaWV0Zi1saXNwLTA2LnR4 dDwvRk9OVD48L1NUUk9ORz4gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDxTVFJJS0U+PEZPTlQg Y29sb3I9InJlZCI+Njk8L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+PEZPTlQgY29sb3I9ImdyZWVu Ij43MDwvRk9OVD48L1NUUk9ORz4NCiAgICAgQi4yLiAgQ2hhbmdlcyB0byA8U1RSSUtFPjxGT05U IGNvbG9yPSJyZWQiPmRyYWZ0LWlldGYtbGlzcC0wNC50eHQ8L0ZPTlQ+PC9TVFJJS0U+IDxTVFJP Tkc+PEZPTlQgY29sb3I9ImdyZWVuIj5kcmFmdC1pZXRmLWxpc3AtMDUudHh0PC9GT05UPjwvU1RS T05HPiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj42 OTwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPjcxPC9GT05UPjwv U1RST05HPg0KICAgICBCLjMuICBDaGFuZ2VzIHRvIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+ ZHJhZnQtaWV0Zi1saXNwLTAzLnR4dDwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xv cj0iZ3JlZW4iPmRyYWZ0LWlldGYtbGlzcC0wNC50eHQ8L0ZPTlQ+PC9TVFJPTkc+ICAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiA3MQ0KICAgICBCLjQuICBDaGFuZ2VzIHRvIDxTVFJJS0U+PEZPTlQg Y29sb3I9InJlZCI+ZHJhZnQtaWV0Zi1saXNwLTAyLnR4dDwvRk9OVD48L1NUUklLRT4gPFNUUk9O Rz48Rk9OVCBjb2xvcj0iZ3JlZW4iPmRyYWZ0LWlldGYtbGlzcC0wMy50eHQ8L0ZPTlQ+PC9TVFJP Tkc+ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPjcx PC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+NzM8L0ZPTlQ+PC9T VFJPTkc+DQogICAgIEIuNS4gIENoYW5nZXMgdG8gPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj5k cmFmdC1pZXRmLWxpc3AtMDEudHh0PC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9y PSJncmVlbiI+ZHJhZnQtaWV0Zi1saXNwLTAyLnR4dDwvRk9OVD48L1NUUk9ORz4gIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+NzI8L0ZPTlQ+PC9TVFJJ S0U+IDxTVFJPTkc+PEZPTlQgY29sb3I9ImdyZWVuIj43MzwvRk9OVD48L1NUUk9ORz4NCiAgICAg Qi42LiAgQ2hhbmdlcyB0byA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+ZHJhZnQtaWV0Zi1s aXNwLTAxLnR4dCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gNzQNCiAgICAgQi43LiAgQ2hhbmdl cyB0bzwvRk9OVD48L1NUUk9ORz4gZHJhZnQtaWV0Zi1saXNwLTAwLnR4dCAgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj43MjwvRk9OVD48L1NUUklLRT4g PFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPjc0PC9GT05UPjwvU1RST05HPg0KICAgQXV0aG9y cycgQWRkcmVzc2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+NzM8L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+ PEZPTlQgY29sb3I9ImdyZWVuIj43NTwvRk9OVD48L1NUUk9ORz4NCg0KMS4gIFJlcXVpcmVtZW50 cyBOb3RhdGlvbg0KDQogICBUaGUga2V5IHdvcmRzICJNVVNUIiwgIk1VU1QgTk9UIiwgIlJFUVVJ UkVEIiwgIlNIQUxMIiwgIlNIQUxMIE5PVCIsDQogICAiU0hPVUxEIiwgIlNIT1VMRCBOT1QiLCAi UkVDT01NRU5ERUQiLCAiTUFZIiwgYW5kICJPUFRJT05BTCIgaW4gdGhpcw0KICAgZG9jdW1lbnQg YXJlIHRvIGJlIGludGVycHJldGVkIGFzIGRlc2NyaWJlZCBpbiBbUkZDMjExOV0uDQoNCjIuICBJ bnRyb2R1Y3Rpb24NCg0KICAgTWFueSB5ZWFycyBvZiBkaXNjdXNzaW9uIGFib3V0IHRoZSBjdXJy ZW50IElQIHJvdXRpbmcgYW5kIGFkZHJlc3NpbmcNCiAgIGFyY2hpdGVjdHVyZSBoYXZlIG5vdGVk IHRoYXQgaXRzIHVzZSBvZiBhIHNpbmdsZSBudW1iZXJpbmcgc3BhY2UgKHRoZQ0KICAgIklQIGFk ZHJlc3MiKSBmb3IgYm90aCBob3N0IHRyYW5zcG9ydCBzZXNzaW9uIGlkZW50aWZpY2F0aW9uIGFu ZA0KICAgbmV0d29yayByb3V0aW5nIGNyZWF0ZXMgc2NhbGluZyBpc3N1ZXMgKHNlZSBbQ0hJQVBQ QV0gYW5kIFtSRkMxNDk4XSkuDQogICBBIG51bWJlciBvZiBzY2FsaW5nIGJlbmVmaXRzIHdvdWxk IGJlIHJlYWxpemVkIGJ5IHNlcGFyYXRpbmcgdGhlDQogICBjdXJyZW50IElQIGFkZHJlc3MgaW50 byBzZXBhcmF0ZSBzcGFjZXMgZm9yIEVuZHBvaW50IElkZW50aWZpZXJzDQogICAoRUlEcykgYW5k IFJvdXRpbmcgTG9jYXRvcnMgKFJMT0NzKTsgYW1vbmcgdGhlbSBhcmU6DQoNCiAgIDEuICBSZWR1 Y3Rpb24gb2Ygcm91dGluZyB0YWJsZSBzaXplIGluIHRoZSAiZGVmYXVsdC1mcmVlIHpvbmUiIChE RlopLg0KICAgICAgIFVzZSBvZiBhIHNlcGFyYXRlIG51bWJlcmluZyBzcGFjZSBmb3IgUkxPQ3Mg d2lsbCBhbGxvdyB0aGVtIHRvIGJlDQogICAgICAgYXNzaWduZWQgdG9wb2xvZ2ljYWxseSAoaW4g dG9kYXkncyBJbnRlcm5ldCwgUkxPQ3Mgd291bGQgYmUNCiAgICAgICBhc3NpZ25lZCBieSBwcm92 aWRlcnMgYXQgY2xpZW50IG5ldHdvcmsgYXR0YWNobWVudCBwb2ludHMpLA0KICAgICAgIGdyZWF0 bHkgaW1wcm92aW5nIGFnZ3JlZ2F0aW9uIGFuZCByZWR1Y2luZyB0aGUgbnVtYmVyIG9mDQogICAg ICAgZ2xvYmFsbHktdmlzaWJsZSwgcm91dGFibGUgcHJlZml4ZXMuDQoNCiAgIDIuICBNb3JlIGNv c3QtZWZmZWN0aXZlIG11bHRpaG9taW5nIGZvciBzaXRlcyB0aGF0IGNvbm5lY3QgdG8NCiAgICAg ICBkaWZmZXJlbnQgc2VydmljZSBwcm92aWRlcnMgd2hlcmUgdGhleSBjYW4gY29udHJvbCB0aGVp ciBvd24NCiAgICAgICBwb2xpY2llcyBmb3IgcGFja2V0IGZsb3cgaW50byB0aGUgc2l0ZSB3aXRo b3V0IHVzaW5nIGV4dHJhDQogICAgICAgcm91dGluZyB0YWJsZSByZXNvdXJjZXMgb2YgY29yZSBy b3V0ZXJzLg0KDQogICAzLiAgRWFzaW5nIG9mIHJlbnVtYmVyaW5nIGJ1cmRlbiB3aGVuIGNsaWVu dHMgY2hhbmdlIHByb3ZpZGVycy4NCiAgICAgICBCZWNhdXNlIGhvc3QgRUlEcyBhcmUgbnVtYmVy ZWQgZnJvbSBhIHNlcGFyYXRlLCBub24tcHJvdmlkZXItDQogICAgICAgYXNzaWduZWQgYW5kIG5v bi10b3BvbG9naWNhbGx5LWJvdW5kIHNwYWNlLCB0aGV5IGRvIG5vdCBuZWVkIHRvDQogICAgICAg YmUgcmVudW1iZXJlZCB3aGVuIGEgY2xpZW50IHNpdGUgY2hhbmdlcyBpdHMgYXR0YWNobWVudCBw b2ludHMgdG8NCiAgICAgICB0aGUgbmV0d29yay4NCg0KICAgNC4gIFRyYWZmaWMgZW5naW5lZXJp bmcgY2FwYWJpbGl0aWVzIHRoYXQgY2FuIGJlIHBlcmZvcm1lZCBieSBuZXR3b3JrDQogICAgICAg ZWxlbWVudHMgYW5kIGRvIG5vdCBkZXBlbmQgb24gaW5qZWN0aW5nIGFkZGl0aW9uYWwgc3RhdGUg aW50byB0aGUNCiAgICAgICByb3V0aW5nIHN5c3RlbS4gIFRoaXMgd2lsbCBmYWxsIG91dCBvZiB0 aGUgbWVjaGFuaXNtIHRoYXQgaXMgdXNlZA0KICAgICAgIHRvIGltcGxlbWVudCB0aGUgRUlEL1JM T0Mgc3BsaXQgKHNlZSBTZWN0aW9uIDQpLg0KDQogICA1LiAgTW9iaWxpdHkgd2l0aG91dCBhZGRy ZXNzIGNoYW5naW5nLiAgRXhpc3RpbmcgbW9iaWxpdHkgbWVjaGFuaXNtcw0KICAgICAgIHdpbGwg YmUgYWJsZSB0byB3b3JrIGluIGEgbG9jYXRvci9JRCBzZXBhcmF0aW9uIHNjZW5hcmlvLiAgSXQN CiAgICAgICB3aWxsIGJlIHBvc3NpYmxlIGZvciBhIGhvc3QgKG9yIGEgY29sbGVjdGlvbiBvZiBo b3N0cykgdG8gbW92ZSB0bw0KICAgICAgIGEgZGlmZmVyZW50IHBvaW50IGluIHRoZSBuZXR3b3Jr IHRvcG9sb2d5IGVpdGhlciByZXRhaW5pbmcgaXRzDQogICAgICAgaG9tZS1iYXNlZCBhZGRyZXNz IG9yIGFjcXVpcmluZyBhIG5ldyBhZGRyZXNzIGJhc2VkIG9uIHRoZSBuZXcNCiAgICAgICBuZXR3 b3JrIGxvY2F0aW9uLiAgQSBuZXcgbmV0d29yayBsb2NhdGlvbiBjb3VsZCBiZSBhIHBoeXNpY2Fs bHkNCiAgICAgICBkaWZmZXJlbnQgcG9pbnQgaW4gdGhlIG5ldHdvcmsgdG9wb2xvZ3kgb3IgdGhl IHNhbWUgcGh5c2ljYWwNCiAgICAgICBwb2ludCBvZiB0aGUgdG9wb2xvZ3kgd2l0aCBhIGRpZmZl cmVudCBwcm92aWRlci4NCg0KICAgVGhpcyBkcmFmdCBkZXNjcmliZXMgcHJvdG9jb2wgbWVjaGFu aXNtcyB0byBhY2hpZXZlIHRoZSBkZXNpcmVkDQogICBmdW5jdGlvbmFsIHNlcGFyYXRpb24uICBG b3IgZmxleGliaWxpdHksIHRoZSBtZWNoYW5pc20gdXNlZCBmb3INCiAgIGZvcndhcmRpbmcgcGFj a2V0cyBpcyBkZWNvdXBsZWQgZnJvbSB0aGF0IHVzZWQgdG8gZGV0ZXJtaW5lIEVJRCB0bw0KICAg UkxPQyBtYXBwaW5ncy4gIFRoaXMgZG9jdW1lbnQgY292ZXJzIHRoZSBmb3JtZXIuICBGb3IgdGhl IGxhdGVyLCBzZWUNCiAgIFtDT05TXSwgW0FMVF0sIFtFTUFDU10sIFtSUE1EXSwgYW5kIFtORVJE XS4gIFRoaXMgd29yayBpcyBpbiByZXNwb25zZQ0KICAgdG8gYW5kIGludGVuZGVkIHRvIGFkZHJl c3MgdGhlIHByb2JsZW0gc3RhdGVtZW50IHRoYXQgY2FtZSBvdXQgb2YgdGhlDQogICBSQVdTIGVm Zm9ydCBbUkZDNDk4NF0uDQoNCiAgIFRoZSBSb3V0aW5nIGFuZCBBZGRyZXNzaW5nIHByb2JsZW0g c3RhdGVtZW50IGNhbiBiZSBmb3VuZCBpbiBbUkFESVJdLg0KDQogICBUaGlzIGRyYWZ0IGZvY3Vz ZXMgb24gYSByb3V0ZXItYmFzZWQgc29sdXRpb24uICBCdWlsZGluZyB0aGUgc29sdXRpb24NCiAg IGludG8gdGhlIG5ldHdvcmsgd2lsbCBmYWNpbGl0YXRlIGluY3JlbWVudGFsIGRlcGxveW1lbnQg b2YgdGhlDQogICB0ZWNobm9sb2d5IG9uIHRoZSBJbnRlcm5ldC4gIE5vdGUgdGhhdCB3aGlsZSB0 aGUgZGV0YWlsZWQgcHJvdG9jb2wNCiAgIHNwZWNpZmljYXRpb24gYW5kIGV4YW1wbGVzIGluIHRo aXMgZG9jdW1lbnQgYXNzdW1lIElQIHZlcnNpb24gNA0KICAgKElQdjQpLCB0aGVyZSBpcyBub3Ro aW5nIGluIHRoZSBkZXNpZ24gdGhhdCBwcmVjbHVkZXMgdXNlIG9mIHRoZSBzYW1lDQogICB0ZWNo bmlxdWVzIGFuZCBtZWNoYW5pc21zIGZvciBJUHY2LiAgSXQgc2hvdWxkIGJlIHBvc3NpYmxlIGZv ciBJUHY0DQogICBwYWNrZXRzIHRvIHVzZSBJUHY2IFJMT0NzIGFuZCBmb3IgSVB2NiBFSURzIHRv IGJlIG1hcHBlZCB0byBJUHY0DQogICBSTE9Dcy4NCg0KICAgUmVsYXRlZCB3b3JrIG9uIGhvc3Qt YmFzZWQgc29sdXRpb25zIGlzIGRlc2NyaWJlZCBpbiBTaGltNiBbU0hJTTZdDQogICBhbmQgSElQ IFtSRkM0NDIzXS4gIFJlbGF0ZWQgd29yayBvbiBhIHJvdXRlci1iYXNlZCBzb2x1dGlvbiBpcw0K ICAgZGVzY3JpYmVkIGluIFtHU0VdLiAgVGhpcyBkcmFmdCBhdHRlbXB0cyB0byBub3QgY29tcGV0 ZSBvciBvdmVybGFwDQogICB3aXRoIHN1Y2ggc29sdXRpb25zIGFuZCB0aGUgcHJvcG9zZWQgcHJv dG9jb2wgY2hhbmdlcyBhcmUgZXhwZWN0ZWQgdG8NCiAgIGNvbXBsZW1lbnQgYSBob3N0LWJhc2Vk IG1lY2hhbmlzbSB3aGVuIFRyYWZmaWMgRW5naW5lZXJpbmcNCiAgIGZ1bmN0aW9uYWxpdHkgaXMg ZGVzaXJlZC4NCg0KICAgU29tZSBvZiB0aGUgZGVzaWduIGdvYWxzIG9mIHRoaXMgcHJvcG9zYWwg aW5jbHVkZToNCg0KICAgMS4gIFJlcXVpcmUgbm8gaGFyZHdhcmUgb3Igc29mdHdhcmUgY2hhbmdl cyB0byBlbmQtc3lzdGVtcyAoaG9zdHMpLg0KDQogICAyLiAgTWluaW1pemUgcmVxdWlyZWQgY2hh bmdlcyB0byBJbnRlcm5ldCBpbmZyYXN0cnVjdHVyZS4NCg0KICAgMy4gIEJlIGluY3JlbWVudGFs bHkgZGVwbG95YWJsZS4NCg0KICAgNC4gIFJlcXVpcmUgbm8gcm91dGVyIGhhcmR3YXJlIGNoYW5n ZXMuDQoNCiAgIDUuICBNaW5pbWl6ZSB0aGUgbnVtYmVyIG9mIHJvdXRlcnMgd2hpY2ggaGF2ZSB0 byBiZSBtb2RpZmllZC4gIEluDQogICAgICAgcGFydGljdWxhciwgbW9zdCBjdXN0b21lciBzaXRl IHJvdXRlcnMgYW5kIG5vIGNvcmUgcm91dGVycw0KICAgICAgIHJlcXVpcmUgY2hhbmdlcy4NCg0K ICAgNi4gIE1pbmltaXplIHJvdXRlciBzb2Z0d2FyZSBjaGFuZ2VzIGluIHRob3NlIHJvdXRlcnMg d2hpY2ggYXJlDQogICAgICAgYWZmZWN0ZWQuDQoNCiAgIDcuICBBdm9pZCBvciBtaW5pbWl6ZSBw YWNrZXQgbG9zcyB3aGVuIEVJRC10by1STE9DIG1hcHBpbmdzIG5lZWQgdG8NCiAgICAgICBiZSBw ZXJmb3JtZWQuDQoNCiAgIFRoZXJlIGFyZSA0IHZhcmlhbnRzIG9mIExJU1AsIHdoaWNoIGRpZmZl ciBhbG9uZyBhIHNwZWN0cnVtIG9mIHN0cm9uZw0KICAgdG8gd2VhayBkZXBlbmRlbmNlIG9uIHRo ZSB0b3BvbG9naWNhbCBuYXR1cmUgYW5kIHBvc3NpYmxlIG5lZWQgZm9yDQogICByb3V0YWJpbGl0 eSBvZiBFSURzLiAgVGhlIHZhcmlhbnRzIGFyZToNCg0KICAgTElTUCAxOiAgdXNlcyBFSURzIHRo YXQgYXJlIHJvdXRhYmxlIHRocm91Z2ggdGhlIFJMT0MgdG9wb2xvZ3kgZm9yDQogICAgICBib290 c3RyYXBwaW5nIEVJRC10by1STE9DIG1hcHBpbmdzLiAgW0xJU1AxXSBUaGlzIHdhcyBpbnRlbmRl ZCBhcw0KICAgICAgYSBwcm90b3R5cGluZyBtZWNoYW5pc20gZm9yIGVhcmx5IHByb3RvY29sIGlt cGxlbWVudGF0aW9uLiAgSXQgaXMNCiAgICAgIG5vdyBkZXByZWNhdGVkIGFuZCBzaG91bGQgbm90 IGJlIGRlcGxveWVkLg0KDQogICBMSVNQIDEuNTogIHVzZXMgRUlEcyB0aGF0IGFyZSByb3V0YWJs ZSBmb3IgYm9vdHN0cmFwcGluZyBFSUQtdG8tUkxPQw0KICAgICAgbWFwcGluZ3M7IHN1Y2ggcm91 dGluZyBpcyB2aWEgYSBzZXBhcmF0ZSB0b3BvbG9neS4NCg0KICAgTElTUCAyOiAgdXNlcyBFSURT IHRoYXQgYXJlIG5vdCByb3V0YWJsZSBhbmQgRUlELXRvLVJMT0MgbWFwcGluZ3MgYXJlDQogICAg ICBpbXBsZW1lbnRlZCB3aXRoaW4gdGhlIEROUy4gIFtMSVNQMl0NCg0KICAgTElTUCAzOiAgdXNl cyBub24tcm91dGFibGUgRUlEcyB0aGF0IGFyZSB1c2VkIGFzIGxvb2t1cCBrZXlzIGZvciBhDQog ICAgICBuZXcgRUlELXRvLVJMT0MgbWFwcGluZyBkYXRhYmFzZS4gIFVzZSBvZiBEaXN0cmlidXRl ZCBIYXNoIFRhYmxlcw0KICAgICAgW0RIVHNdIFtMSVNQREhUXSB0byBpbXBsZW1lbnQgc3VjaCBh IGRhdGFiYXNlIHdvdWxkIGJlIGFuIGFyZWEgdG8NCiAgICAgIGV4cGxvcmUuICBPdGhlciBleGFt cGxlcyBvZiBuZXcgbWFwcGluZyBkYXRhYmFzZSBzZXJ2aWNlcyBhcmUNCiAgICAgIFtDT05TXSwg W0FMVF0sIFtSUE1EXSwgW05FUkRdLCBhbmQgW0FQVF0uDQoNCiAgIFRoaXMgZG9jdW1lbnQgb24g TElTUCAxLjUsIGFuZCBMSVNQIDMgdmFyaWFudHMsIGJvdGggb2Ygd2hpY2ggcmVseSBvbg0KICAg YSByb3V0ZXItYmFzZWQgZGlzdHJpYnV0ZWQgY2FjaGUgYW5kIGRhdGFiYXNlIGZvciBFSUQtdG8t UkxPQw0KICAgbWFwcGluZ3MuICBUaGUgTElTUCAxLjAgbWVjaGFuaXNtIHdvcmtzIGJ1dCBkb2Vz IG5vdCBhbGxvdyByZWR1Y3Rpb24NCiAgIG9mIHJvdXRpbmcgaW5mb3JtYXRpb24gaW4gdGhlIGRl ZmF1bHQtZnJlZS16b25lIG9mIHRoZSBJbnRlcm5ldC4gIFRoZQ0KICAgTElTUCAyIG1lY2hhbmlz bXMgYXJlIHB1dCBvbiBob2xkIGFuZCBtYXkgbmV2ZXIgY29tZSB0byBmcnVpdGlvbg0KICAgc2lu Y2UgaXQgaXMgbm90IGFyY2hpdGVjdHVyYWxseSBwdXJlIHRvIGhhdmUgcm91dGluZyBkZXBlbmQg b24NCiAgIGRpcmVjdG9yeSBhbmQgZGlyZWN0b3J5IGRlcGVuZCBvbiByb3V0aW5nLiAgVGhlIExJ U1AgMyBtZWNoYW5pc21zDQogICB3aWxsIGJlIGRvY3VtZW50ZWQgZWxzZXdoZXJlIGJ1dCBtYXkg dXNlIHRoZSBjb250cm9sLXBsYW5lIG9wdGlvbnMNCiAgIHNwZWNpZmllZCBpbiB0aGlzIHNwZWNp ZmljYXRpb24uDQoNCjMuICBEZWZpbml0aW9uIG9mIFRlcm1zDQoNCiAgIFByb3ZpZGVyIEluZGVw ZW5kZW50IChQSSkgQWRkcmVzc2VzOiAgIGFuIGFkZHJlc3MgYmxvY2sgYXNzaWduZWQgZnJvbQ0K ICAgICAgYSBwb29sIHdoZXJlIGJsb2NrcyBhcmUgbm90IGFzc29jaWF0ZWQgd2l0aCBhbnkgcGFy dGljdWxhcg0KICAgICAgbG9jYXRpb24gaW4gdGhlIG5ldHdvcmsgKGUuZy4gZnJvbSBhIHBhcnRp Y3VsYXIgc2VydmljZSBwcm92aWRlciksDQogICAgICBhbmQgaXMgdGhlcmVmb3JlIG5vdCB0b3Bv bG9naWNhbGx5IGFnZ3JlZ2F0YWJsZSBpbiB0aGUgcm91dGluZw0KICAgICAgc3lzdGVtLg0KDQog ICBQcm92aWRlciBBc3NpZ25lZCAoUEEpIEFkZHJlc3NlczogICBhIGJsb2NrIG9mIElQIGFkZHJl c3NlcyB0aGF0IGFyZQ0KICAgICAgYXNzaWduZWQgdG8gYSBzaXRlIGJ5IGVhY2ggc2VydmljZSBw cm92aWRlciB0byB3aGljaCBhIHNpdGUNCiAgICAgIGNvbm5lY3RzLiAgVHlwaWNhbGx5LCBlYWNo IGJsb2NrIGlzIHN1Yi1ibG9jayBvZiBhIHNlcnZpY2UNCiAgICAgIHByb3ZpZGVyIENJRFIgYmxv Y2sgYW5kIGlzIGFnZ3JlZ2F0ZWQgaW50byB0aGUgbGFyZ2VyIGJsb2NrIGJlZm9yZQ0KICAgICAg YmVpbmcgYWR2ZXJ0aXNlZCBpbnRvIHRoZSBnbG9iYWwgSW50ZXJuZXQuICBUcmFkaXRpb25hbGx5 LCBJUA0KICAgICAgbXVsdGlob21pbmcgaGFzIGJlZW4gaW1wbGVtZW50ZWQgYnkgZWFjaCBtdWx0 aS1ob21lZCBzaXRlDQogICAgICBhY3F1aXJpbmcgaXRzIG93biwgZ2xvYmFsbHktdmlzaWJsZSBw cmVmaXguICBMSVNQIHVzZXMgb25seQ0KICAgICAgdG9wb2xvZ2ljYWxseS1hc3NpZ25lZCBhbmQg YWdncmVnYXRhYmxlIGFkZHJlc3MgYmxvY2tzIGZvciBSTE9DcywNCiAgICAgIGVsaW1pbmF0aW5n IHRoaXMgZGVtb25zdHJhYmx5IG5vbi1zY2FsYWJsZSBwcmFjdGljZS4NCg0KICAgUm91dGluZyBM b2NhdG9yIChSTE9DKTogICB0aGUgSVB2NCBvciBJUHY2IGFkZHJlc3Mgb2YgYW4gZWdyZXNzDQog ICAgICB0dW5uZWwgcm91dGVyIChFVFIpLiAgSXQgaXMgdGhlIG91dHB1dCBvZiBhIEVJRC10by1S TE9DIG1hcHBpbmcNCiAgICAgIGxvb2t1cC4gIEFuIEVJRCBtYXBzIHRvIG9uZSBvciBtb3JlIFJM T0NzLiAgVHlwaWNhbGx5LCBSTE9DcyBhcmUNCiAgICAgIG51bWJlcmVkIGZyb20gdG9wb2xvZ2lj YWxseS1hZ2dyZWdhdGFibGUgYmxvY2tzIHRoYXQgYXJlIGFzc2lnbmVkDQogICAgICB0byBhIHNp dGUgYXQgZWFjaCBwb2ludCB0byB3aGljaCBpdCBhdHRhY2hlcyB0byB0aGUgZ2xvYmFsDQogICAg ICBJbnRlcm5ldDsgd2hlcmUgdGhlIHRvcG9sb2d5IGlzIGRlZmluZWQgYnkgdGhlIGNvbm5lY3Rp dml0eSBvZg0KICAgICAgcHJvdmlkZXIgbmV0d29ya3MsIFJMT0NzIGNhbiBiZSB0aG91Z2h0IG9m IGFzIFBBIGFkZHJlc3Nlcy4NCiAgICAgIE11bHRpcGxlIFJMT0NzIGNhbiBiZSBhc3NpZ25lZCB0 byB0aGUgc2FtZSBFVFIgZGV2aWNlIG9yIHRvDQogICAgICBtdWx0aXBsZSBFVFIgZGV2aWNlcyBh dCBhIHNpdGUuDQoNCiAgIEVuZHBvaW50IElEIChFSUQpOiAgIGEgMzItYml0IChmb3IgSVB2NCkg b3IgMTI4LWJpdCAoZm9yIElQdjYpIHZhbHVlDQogICAgICB1c2VkIGluIHRoZSBzb3VyY2UgYW5k IGRlc3RpbmF0aW9uIGFkZHJlc3MgZmllbGRzIG9mIHRoZSBmaXJzdA0KICAgICAgKG1vc3QgaW5u ZXIpIExJU1AgaGVhZGVyIG9mIGEgcGFja2V0LiAgVGhlIGhvc3Qgb2J0YWlucyBhDQogICAgICBk ZXN0aW5hdGlvbiBFSUQgdGhlIHNhbWUgd2F5IGl0IG9idGFpbnMgYW4gZGVzdGluYXRpb24gYWRk cmVzcw0KICAgICAgdG9kYXksIGZvciBleGFtcGxlIHRocm91Z2ggYSBETlMgbG9va3VwIG9yIFNJ UCBleGNoYW5nZS4gIFRoZQ0KICAgICAgc291cmNlIEVJRCBpcyBvYnRhaW5lZCB2aWEgZXhpc3Rp bmcgbWVjaGFuaXNtcyB1c2VkIHRvIHNldCBhDQogICAgICBob3N0J3MgImxvY2FsIiBJUCBhZGRy ZXNzLiAgQW4gRUlEIGlzIGFsbG9jYXRlZCB0byBhIGhvc3QgZnJvbSBhbg0KICAgICAgRUlELXBy ZWZpeCBibG9jayBhc3NvY2lhdGVkIHdpdGggdGhlIHNpdGUgd2hlcmUgdGhlIGhvc3QgaXMNCiAg ICAgIGxvY2F0ZWQuICBBbiBFSUQgY2FuIGJlIHVzZWQgYnkgYSBob3N0IHRvIHJlZmVyIHRvIG90 aGVyIGhvc3RzLg0KICAgICAgRUlEcyBNVVNUIE5PVCBiZSB1c2VkIGFzIExJU1AgUkxPQ3MuICBO b3RlIHRoYXQgRUlEIGJsb2NrcyBtYXkgYmUNCiAgICAgIGFzc2lnbmVkIGluIGEgaGllcmFyY2hp Y2FsIG1hbm5lciwgaW5kZXBlbmRlbnQgb2YgdGhlIG5ldHdvcmsNCiAgICAgIHRvcG9sb2d5LCB0 byBmYWNpbGl0YXRlIHNjYWxpbmcgb2YgdGhlIG1hcHBpbmcgZGF0YWJhc2UuICBJbg0KICAgICAg YWRkaXRpb24sIGFuIEVJRCBibG9jayBhc3NpZ25lZCB0byBhIHNpdGUgbWF5IGhhdmUgc2l0ZS1s b2NhbA0KICAgICAgc3RydWN0dXJlIChzdWJuZXR0aW5nKSBmb3Igcm91dGluZyB3aXRoaW4gdGhl IHNpdGU7IHRoaXMgc3RydWN0dXJlDQogICAgICBpcyBub3QgdmlzaWJsZSB0byB0aGUgZ2xvYmFs IHJvdXRpbmcgc3lzdGVtLiAgV2hlbiB1c2VkIGluDQogICAgICBkaXNjdXNzaW9ucyB3aXRoIG90 aGVyIExvY2F0b3IvSUQgc2VwYXJhdGlvbiBwcm9wb3NhbHMsIGEgTElTUCBFSUQNCiAgICAgIHdp bGwgYmUgY2FsbGVkIGEgIkxFSUQiLiAgVGhyb3VnaG91dCB0aGlzIGRvY3VtZW50LCBhbnkgcmVm ZXJlbmNlcw0KICAgICAgdG8gIkVJRCIgcmVmZXJzIHRvIGFuIExFSUQuDQoNCiAgIEVJRC1wcmVm aXg6ICAgQSBwb3dlci1vZi0yIGJsb2NrIG9mIEVJRHMgd2hpY2ggYXJlIGFsbG9jYXRlZCB0byBh DQogICAgICBzaXRlIGJ5IGFuIGFkZHJlc3MgYWxsb2NhdGlvbiBhdXRob3JpdHkuICBFSUQtcHJl Zml4ZXMgYXJlDQogICAgICBhc3NvY2lhdGVkIHdpdGggYSBzZXQgb2YgUkxPQyBhZGRyZXNzZXMg d2hpY2ggbWFrZSB1cCBhICJkYXRhYmFzZQ0KICAgICAgbWFwcGluZyIuICBFSUQtcHJlZml4IGFs bG9jYXRpb25zIGNhbiBiZSBicm9rZW4gdXAgaW50byBzbWFsbGVyDQogICAgICBibG9ja3Mgd2hl biBhbiBSTE9DIHNldCBpcyB0byBiZSBhc3NvY2lhdGVkIHdpdGggdGhlIHNtYWxsZXIgRUlELQ0K ICAgICAgcHJlZml4LiAgQSBnbG9iYWxseSByb3V0ZWQgYWRkcmVzcyBibG9jayAod2hldGhlciBQ SSBvciBQQSkgaXMgbm90DQogICAgICBhbiBFSUQtcHJlZml4LiAgSG93ZXZlciwgYSBnbG9iYWxs eSByb3V0ZWQgYWRkcmVzcyBibG9jayBtYXkgYmUNCiAgICAgIHJlbW92ZWQgZnJvbSBnbG9iYWwg cm91dGluZyBhbmQgcmV1c2VkIGFzIGFuIEVJRC1wcmVmaXguICBBIHNpdGUNCiAgICAgIHRoYXQg cmVjZWl2ZXMgYW4gZXhwbGljaXRseSBhbGxvY2F0ZWQgRUlELXByZWZpeCBtYXkgbm90IHVzZSB0 aGF0DQogICAgICBFSUQtcHJlZml4IGFzIGEgZ2xvYmFsbHkgcm91dGVkIHByZWZpeCBhc3NpZ25l ZCB0byBSTE9Dcy4NCg0KICAgRW5kLXN5c3RlbTogICBpcyBhbiBJUHY0IG9yIElQdjYgZGV2aWNl IHRoYXQgb3JpZ2luYXRlcyBwYWNrZXRzIHdpdGgNCiAgICAgIGEgc2luZ2xlIElQdjQgb3IgSVB2 NiBoZWFkZXIuICBUaGUgZW5kLXN5c3RlbSBzdXBwbGllcyBhbiBFSUQNCiAgICAgIHZhbHVlIGZv ciB0aGUgZGVzdGluYXRpb24gYWRkcmVzcyBmaWVsZCBvZiB0aGUgSVAgaGVhZGVyIHdoZW4NCiAg ICAgIGNvbW11bmljYXRpbmcgZ2xvYmFsbHkgKGkuZS4gb3V0c2lkZSBvZiBpdHMgcm91dGluZyBk b21haW4pLiAgQW4NCiAgICAgIGVuZC1zeXN0ZW0gY2FuIGJlIGEgaG9zdCBjb21wdXRlciwgYSBz d2l0Y2ggb3Igcm91dGVyIGRldmljZSwgb3INCiAgICAgIGFueSBuZXR3b3JrIGFwcGxpYW5jZS4N Cg0KICAgSW5ncmVzcyBUdW5uZWwgUm91dGVyIChJVFIpOiAgIGEgcm91dGVyIHdoaWNoIGFjY2Vw dHMgYW4gSVAgcGFja2V0DQogICAgICB3aXRoIGEgc2luZ2xlIElQIGhlYWRlciAobW9yZSBwcmVj aXNlbHksIGFuIElQIHBhY2tldCB0aGF0IGRvZXMNCiAgICAgIG5vdCBjb250YWluIGEgTElTUCBo ZWFkZXIpLiAgVGhlIHJvdXRlciB0cmVhdHMgdGhpcyAiaW5uZXIiIElQDQogICAgICBkZXN0aW5h dGlvbiBhZGRyZXNzIGFzIGFuIEVJRCBhbmQgcGVyZm9ybXMgYW4gRUlELXRvLVJMT0MgbWFwcGlu Zw0KICAgICAgbG9va3VwLiAgVGhlIHJvdXRlciB0aGVuIHByZXBlbmRzIGFuICJvdXRlciIgSVAg aGVhZGVyIHdpdGggb25lIG9mDQogICAgICBpdHMgZ2xvYmFsbHktcm91dGFibGUgUkxPQ3MgaW4g dGhlIHNvdXJjZSBhZGRyZXNzIGZpZWxkIGFuZCB0aGUNCiAgICAgIHJlc3VsdCBvZiB0aGUgbWFw cGluZyBsb29rdXAgaW4gdGhlIGRlc3RpbmF0aW9uIGFkZHJlc3MgZmllbGQuDQogICAgICBOb3Rl IHRoYXQgdGhpcyBkZXN0aW5hdGlvbiBSTE9DIG1heSBiZSBhbiBpbnRlcm1lZGlhdGUsIHByb3h5 DQogICAgICBkZXZpY2UgdGhhdCBoYXMgYmV0dGVyIGtub3dsZWRnZSBvZiB0aGUgRUlELXRvLVJM T0MgbWFwcGluZyBjbG9zZXINCiAgICAgIHRvIHRoZSBkZXN0aW5hdGlvbiBFSUQuICBJbiBnZW5l cmFsLCBhbiBJVFIgcmVjZWl2ZXMgSVAgcGFja2V0cw0KICAgICAgZnJvbSBzaXRlIGVuZC1zeXN0 ZW1zIG9uIG9uZSBzaWRlIGFuZCBzZW5kcyBMSVNQLWVuY2Fwc3VsYXRlZCBJUA0KICAgICAgcGFj a2V0cyB0b3dhcmQgdGhlIEludGVybmV0IG9uIHRoZSBvdGhlciBzaWRlLg0KDQogICAgICBTcGVj aWZpY2FsbHksIHdoZW4gYSBzZXJ2aWNlIHByb3ZpZGVyIHByZXBlbmRzIGEgTElTUCBoZWFkZXIg Zm9yDQogICAgICBUcmFmZmljIEVuZ2luZWVyaW5nIHB1cnBvc2VzLCB0aGUgcm91dGVyIHRoYXQg ZG9lcyB0aGlzIGlzIGFsc28NCiAgICAgIHJlZ2FyZGVkIGFzIGFuIElUUi4gIFRoZSBvdXRlciBS TE9DIHRoZSBJU1AgSVRSIHVzZXMgY2FuIGJlIGJhc2VkDQogICAgICBvbiB0aGUgb3V0ZXIgZGVz dGluYXRpb24gYWRkcmVzcyAodGhlIG9yaWdpbmF0aW5nIElUUidzIHN1cHBsaWVkDQogICAgICBS TE9DKSBvciB0aGUgaW5uZXIgZGVzdGluYXRpb24gYWRkcmVzcyAodGhlIG9yaWdpbmF0aW5nIGhv c3RzDQogICAgICBzdXBwbGllZCBFSUQpLg0KDQogICBURS1JVFI6ICAgaXMgYW4gSVRSIHRoYXQg aXMgZGVwbG95ZWQgaW4gYSBzZXJ2aWNlIHByb3ZpZGVyIG5ldHdvcmsNCiAgICAgIHRoYXQgcHJl cGVuZHMgYW4gYWRkaXRpb25hbCBMSVNQIGhlYWRlciBmb3IgVHJhZmZpYyBFbmdpbmVlcmluZw0K ICAgICAgcHVycG9zZXMuDQoNCiAgIEVncmVzcyBUdW5uZWwgUm91dGVyIChFVFIpOiAgIGEgcm91 dGVyIHRoYXQgYWNjZXB0cyBhbiBJUCBwYWNrZXQNCiAgICAgIHdoZXJlIHRoZSBkZXN0aW5hdGlv biBhZGRyZXNzIGluIHRoZSAib3V0ZXIiIElQIGhlYWRlciBpcyBvbmUgb2YNCiAgICAgIGl0cyBv d24gUkxPQ3MuICBUaGUgcm91dGVyIHN0cmlwcyB0aGUgIm91dGVyIiBoZWFkZXIgYW5kIGZvcndh cmRzDQogICAgICB0aGUgcGFja2V0IGJhc2VkIG9uIHRoZSBuZXh0IElQIGhlYWRlciBmb3VuZC4g IEluIGdlbmVyYWwsIGFuIEVUUg0KICAgICAgcmVjZWl2ZXMgTElTUC1lbmNhcHN1bGF0ZWQgSVAg cGFja2V0cyBmcm9tIHRoZSBJbnRlcm5ldCBvbiBvbmUNCiAgICAgIHNpZGUgYW5kIHNlbmRzIGRl Y2Fwc3VsYXRlZCBJUCBwYWNrZXRzIHRvIHNpdGUgZW5kLXN5c3RlbXMgb24gdGhlDQogICAgICBv dGhlciBzaWRlLiAgRVRSIGZ1bmN0aW9uYWxpdHkgZG9lcyBub3QgaGF2ZSB0byBiZSBsaW1pdGVk IHRvIGENCiAgICAgIHJvdXRlciBkZXZpY2UuICBBIHNlcnZlciBob3N0IGNhbiBiZSB0aGUgZW5k cG9pbnQgb2YgYSBMSVNQIHR1bm5lbA0KICAgICAgYXMgd2VsbC4NCg0KICAgVEUtRVRSOiAgIGlz IGFuIEVUUiB0aGF0IGlzIGRlcGxveWVkIGluIGEgc2VydmljZSBwcm92aWRlciBuZXR3b3JrDQog ICAgICB0aGF0IHN0cmlwcyBhbiBvdXRlciBMSVNQIGhlYWRlciBmb3IgVHJhZmZpYyBFbmdpbmVl cmluZyBwdXJwb3Nlcy4NCg0KICAgeFRSOiAgIGlzIGEgcmVmZXJlbmNlIHRvIGFuIElUUiBvciBF VFIgd2hlbiBkaXJlY3Rpb24gb2YgZGF0YSBmbG93IGlzDQogICAgICBub3QgcGFydCBvZiB0aGUg Y29udGV4dCBkZXNjcmlwdGlvbi4geFRSIHJlZmVycyB0byB0aGUgcm91dGVyIHRoYXQNCiAgICAg IGlzIHRoZSB0dW5uZWwgZW5kcG9pbnQuICBVc2VkIHN5bm9ueW1vdXNseSB3aXRoIHRoZSB0ZXJt ICJUdW5uZWwNCiAgICAgIFJvdXRlciIuICBGb3IgZXhhbXBsZSwgIkFuIHhUUiBjYW4gYmUgbG9j YXRlZCBhdCB0aGUgQ3VzdG9tZXIgRWRnZQ0KICAgICAgKENFKSByb3V0ZXIiLCBtZWFuaW5nIGJv dGggSVRSIGFuZCBFVFIgZnVuY3Rpb25hbGl0eSBpcyBhdCB0aGUgQ0UNCiAgICAgIHJvdXRlci4N Cg0KICAgRUlELXRvLVJMT0MgQ2FjaGU6ICAgYSBzaG9ydC1saXZlZCwgb24tZGVtYW5kIHRhYmxl IGluIGFuIElUUiB0aGF0DQogICAgICBzdG9yZXMsIHRyYWNrcywgYW5kIGlzIHJlc3BvbnNpYmxl IGZvciB0aW1pbmctb3V0IGFuZCBvdGhlcndpc2UNCiAgICAgIHZhbGlkYXRpbmcgRUlELXRvLVJM T0MgbWFwcGluZ3MuICBUaGlzIGNhY2hlIGlzIGRpc3RpbmN0IGZyb20gdGhlDQogICAgICBmdWxs ICJkYXRhYmFzZSIgb2YgRUlELXRvLVJMT0MgbWFwcGluZ3MsIGl0IGlzIGR5bmFtaWMsIGxvY2Fs IHRvDQogICAgICB0aGUgSVRSKHMpLCBhbmQgcmVsYXRpdmVseSBzbWFsbCB3aGlsZSB0aGUgZGF0 YWJhc2UgaXMNCiAgICAgIGRpc3RyaWJ1dGVkLCByZWxhdGl2ZWx5IHN0YXRpYywgYW5kIG11Y2gg bW9yZSBnbG9iYWwgaW4gc2NvcGUuDQoNCiAgIEVJRC10by1STE9DIERhdGFiYXNlOiAgIGEgZ2xv YmFsIGRpc3RyaWJ1dGVkIGRhdGFiYXNlIHRoYXQgY29udGFpbnMNCiAgICAgIGFsbCBrbm93biBF SUQtcHJlZml4IHRvIFJMT0MgbWFwcGluZ3MuICBFYWNoIHBvdGVudGlhbCBFVFINCiAgICAgIHR5 cGljYWxseSBjb250YWlucyBhIHNtYWxsIHBpZWNlIG9mIHRoZSBkYXRhYmFzZTogdGhlIEVJRC10 by1STE9DDQogICAgICBtYXBwaW5ncyBmb3IgdGhlIEVJRCBwcmVmaXhlcyAiYmVoaW5kIiB0aGUg cm91dGVyLiAgVGhlc2UgbWFwIHRvDQogICAgICBvbmUgb2YgdGhlIHJvdXRlcidzIG93biwgZ2xv YmFsbHktdmlzaWJsZSwgSVAgYWRkcmVzc2VzLg0KDQogICBSZWN1cnNpdmUgVHVubmVsaW5nOiAg IHdoZW4gYSBwYWNrZXQgaGFzIG1vcmUgdGhhbiBvbmUgTElTUCBJUA0KICAgICAgaGVhZGVyLiAg QWRkaXRpb25hbCBsYXllcnMgb2YgdHVubmVsaW5nIG1heSBiZSBlbXBsb3llZCB0bw0KICAgICAg aW1wbGVtZW50IHRyYWZmaWMgZW5naW5lZXJpbmcgb3Igb3RoZXIgcmUtcm91dGluZyBhcyBuZWVk ZWQuICBXaGVuDQogICAgICB0aGlzIGlzIGRvbmUsIGFuIGFkZGl0aW9uYWwgIm91dGVyIiBMSVNQ IGhlYWRlciBpcyBhZGRlZCBhbmQgdGhlDQogICAgICBvcmlnaW5hbCBSTE9DcyBhcmUgcHJlc2Vy dmVkIGluIHRoZSAiaW5uZXIiIGhlYWRlci4gIEFueQ0KICAgICAgcmVmZXJlbmNlcyB0byB0dW5u ZWxzIGluIHRoaXMgc3BlY2lmaWNhdGlvbiByZWZlcnMgdG8gZHluYW1pYw0KICAgICAgZW5jYXBz dWxhdGluZyB0dW5uZWxzIGFuZCBuZXZlciBhcmUgdGhleSBzdGF0aWNhbGx5IGNvbmZpZ3VyZWQu DQoNCiAgIFJlZW5jYXBzdWxhdGluZyBUdW5uZWxzOiAgIHdoZW4gYSBwYWNrZXQgaGFzIG5vIG1v cmUgdGhhbiBvbmUgTElTUCBJUA0KICAgICAgaGVhZGVyICh0d28gSVAgaGVhZGVycyB0b3RhbCkg YW5kIHdoZW4gaXQgbmVlZHMgdG8gYmUgZGl2ZXJ0ZWQgdG8NCiAgICAgIG5ldyBSTE9DLCBhbiBF VFIgY2FuIGRlY2Fwc3VsYXRlIHRoZSBwYWNrZXQgKHJlbW92ZSB0aGUgTElTUA0KICAgICAgaGVh ZGVyKSBhbmQgcHJlcGVuZHMgYSBuZXcgdHVubmVsIGhlYWRlciwgd2l0aCBuZXcgUkxPQywgb24g dG8gdGhlDQogICAgICBwYWNrZXQuICBEb2luZyB0aGlzIGFsbG93cyBhIHBhY2tldCB0byBiZSBy ZS1yb3V0ZWQgYnkgdGhlIHJlLQ0KICAgICAgZW5jYXBzdWxhdGluZyByb3V0ZXIgd2l0aG91dCBh ZGRpbmcgdGhlIG92ZXJoZWFkIG9mIGFkZGl0aW9uYWwNCiAgICAgIHR1bm5lbCBoZWFkZXJzLiAg QW55IHJlZmVyZW5jZXMgdG8gdHVubmVscyBpbiB0aGlzIHNwZWNpZmljYXRpb24NCiAgICAgIHJl ZmVycyB0byBkeW5hbWljIGVuY2Fwc3VsYXRpbmcgdHVubmVscyBhbmQgbmV2ZXIgYXJlIHRoZXkN CiAgICAgIHN0YXRpY2FsbHkgY29uZmlndXJlZC4NCg0KICAgTElTUCBIZWFkZXI6ICAgYSB0ZXJt IHVzZWQgaW4gdGhpcyBkb2N1bWVudCB0byByZWZlciB0byB0aGUgb3V0ZXINCiAgICAgIElQdjQg b3IgSVB2NiBoZWFkZXIsIGEgVURQIGhlYWRlciwgYW5kIGEgPFNUUklLRT48Rk9OVCBjb2xvcj0i cmVkIj5MSVNQPC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+TElT UC1zcGVjaWZpYyA4LWJ5dGUNCiAgICAgIGhlYWRlciB0aGF0IGZvbGxvd3MgdGhlIFVEUDwvRk9O VD48L1NUUk9ORz4gaGVhZGVyLCBhbiBJVFIgcHJlcGVuZHMgb3IgYW4gRVRSDQogICAgICBzdHJp cHMuDQoNCiAgIEFkZHJlc3MgRmFtaWx5IEluZGljYXRvciAoQUZJKTogICBhIHRlcm0gdXNlZCB0 byBkZXNjcmliZSBhbiBhZGRyZXNzDQogICAgICBlbmNvZGluZyBpbiBhIHBhY2tldC4gIEFuIGFk ZHJlc3MgZmFtaWx5IGN1cnJlbnRseSBwZXJ0YWlucyB0byBhbg0KICAgICAgSVB2NCBvciBJUHY2 IGFkZHJlc3MuICBTZWUgW0FGSV0gZm9yIGRldGFpbHMuICA8U1RST05HPjxGT05UIGNvbG9yPSJn cmVlbiI+QW4gQUZJIHZhbHVlIG9mIDANCiAgICAgIHVzZWQgaW4gdGhpcyBzcGVjaWZpY2F0aW9u IGluZGljYXRlcyBhbiB1bnNwZWNpZmllZCBlbmNvZGVkDQogICAgICBhZGRyZXNzIHdoZXJlIHRo ZSB0aGUgbGVuZ3RoIG9mIHRoZSBhZGRyZXNzIGlzIDAgYnl0ZXMgZm9sbG93aW5nDQogICAgICB0 aGUgMTYtYml0IEFGSSB2YWx1ZSBvZiAwLjwvRk9OVD48L1NUUk9ORz4NCg0KICAgTmVnYXRpdmUg TWFwcGluZyBFbnRyeTogICBhbHNvIGtub3duIGFzIGEgbmVnYXRpdmUgY2FjaGUgZW50cnksIGlz IGFuDQogICAgICBFSUQtdG8tUkxPQyBlbnRyeSB3aGVyZSBhbiBFSUQtcHJlZml4IGlzIGFkdmVy dGlzZWQgb3Igc3RvcmVkIHdpdGgNCiAgICAgIG5vIFJMT0NzLiAgVGhhdCBpcywgdGhlIGxvY2F0 b3Itc2V0IGZvciB0aGUgRUlELXRvLVJMT0MgZW50cnkgaXMNCiAgICAgIGVtcHR5IG9yIGhhcyBh biBlbmNvZGVkIGxvY2F0b3IgY291bnQgb2YgMC4gIFRoaXMgdHlwZSBvZiBlbnRyeQ0KICAgICAg Y291bGQgYmUgdXNlZCB0byBkZXNjcmliZSBhIHByZWZpeCBmcm9tIGEgbm9uLUxJU1Agc2l0ZSwg d2hpY2ggaXMNCiAgICAgIGV4cGxpY2l0bHkgbm90IGluIHRoZSBtYXBwaW5nIGRhdGFiYXNlLiAg VGhlcmUgYXJlIGEgc2V0IG9mIHdlbGwNCiAgICAgIGRlZmluZWQgYWN0aW9ucyB0aGF0IGFyZSBl bmNvZGVkIGluIGEgTmVnYXRpdmUgTWFwLVJlcGx5Lg0KDQogICBEYXRhIFByb2JlOiAgIGEgTElT UC1lbmNhcHN1bGF0ZWQgZGF0YSBwYWNrZXQgd2hlcmUgdGhlIGlubmVyIGhlYWRlcg0KICAgICAg ZGVzdGluYXRpb24gYWRkcmVzcyBlcXVhbHMgdGhlIG91dGVyIGhlYWRlciBkZXN0aW5hdGlvbiBh ZGRyZXNzDQogICAgICB1c2VkIHRvIHRyaWdnZXIgYSBNYXAtUmVwbHkgYnkgYSBkZWNhcHN1bGF0 aW5nIEVUUi4gIEluIGFkZGl0aW9uLA0KICAgICAgdGhlIG9yaWdpbmFsIHBhY2tldCBpcyBkZWNh cHN1bGF0ZWQgYW5kIGRlbGl2ZXJlZCB0byB0aGUNCiAgICAgIGRlc3RpbmF0aW9uIGhvc3QuICBB IERhdGEgUHJvYmUgaXMgdXNlZCBpbiBzb21lIG9mIHRoZSBtYXBwaW5nDQogICAgICBkYXRhYmFz ZSBkZXNpZ25zIHRvICJwcm9iZSIgb3IgcmVxdWVzdCBhIE1hcC1SZXBseSBmcm9tIGFuIEVUUjsg aW4NCiAgICAgIG90aGVyIGNhc2VzLCBNYXAtUmVxdWVzdHMgYXJlIHVzZWQuICBTZWUgZWFjaCBt YXBwaW5nIGRhdGFiYXNlDQogICAgICBkZXNpZ24gZm9yIGRldGFpbHMuDQoNCiAgIDxTVFJPTkc+ PEZPTlQgY29sb3I9ImdyZWVuIj5Qcm94eSBJVFIgKFBJVFIpOiAgIGFsc28ga25vd24gYXMgYSBQ VFIgaXMgZGVmaW5lZCBhbmQgZGVzY3JpYmVkIGluDQogICAgICBbSU5URVJXT1JLXSwgYSBQSVRS IGFjdHMgbGlrZSBhbiBJVFIgYnV0IGRvZXMgc28gb24gYmVoYWxmIG9mIG5vbi0NCiAgICAgIExJ U1Agc2l0ZXMgd2hpY2ggc2VuZCBwYWNrZXRzIHRvIGRlc3RpbmF0aW9ucyBhdCBMSVNQIHNpdGVz Lg0KDQogICBQcm94eSBFVFIgKFBFVFIpOiAgIGlzIGRlZmluZWQgYW5kIGRlc2NyaWJlZCBpbiBb SU5URVJXT1JLXSwgYSBQRVRSDQogICAgICBhY3RzIGxpa2UgYW4gRVRSIGJ1dCBkb2VzIHNvIG9u IGJlaGFsZiBvZiBMSVNQIHNpdGVzIHdoaWNoIHNlbmQNCiAgICAgIHBhY2tldHMgdG8gZGVzdGlu YXRpb25zIGF0IG5vbi1MSVNQIHNpdGVzLjwvRk9OVD48L1NUUk9ORz4NCg0KNC4gIEJhc2ljIE92 ZXJ2aWV3DQoNCiAgIE9uZSBrZXkgY29uY2VwdCBvZiBMSVNQIGlzIHRoYXQgZW5kLXN5c3RlbXMg KGhvc3RzKSBvcGVyYXRlIHRoZSBzYW1lDQogICB3YXkgdGhleSBkbyB0b2RheS4gIFRoZSBJUCBh ZGRyZXNzZXMgdGhhdCBob3N0cyB1c2UgZm9yIHRyYWNraW5nDQogICBzb2NrZXRzLCBjb25uZWN0 aW9ucywgYW5kIGZvciBzZW5kaW5nIGFuZCByZWNlaXZpbmcgcGFja2V0cyBkbyBub3QNCiAgIGNo YW5nZS4gIEluIExJU1AgdGVybWlub2xvZ3ksIHRoZXNlIElQIGFkZHJlc3NlcyBhcmUgY2FsbGVk IEVuZHBvaW50DQogICBJZGVudGlmaWVycyAoRUlEcykuDQoNCiAgIFJvdXRlcnMgY29udGludWUg dG8gZm9yd2FyZCBwYWNrZXRzIGJhc2VkIG9uIElQIGRlc3RpbmF0aW9uDQogICBhZGRyZXNzZXMu ICBXaGVuIGEgcGFja2V0IGlzIExJU1AgZW5jYXBzdWxhdGVkLCB0aGVzZSBhZGRyZXNzZXMgYXJl DQogICByZWZlcnJlZCB0byBhcyBSb3V0aW5nIExvY2F0b3JzIChSTE9DcykuICBNb3N0IHJvdXRl cnMgYWxvbmcgYSBwYXRoDQogICBiZXR3ZWVuIHR3byBob3N0cyB3aWxsIG5vdCBjaGFuZ2U7IHRo ZXkgY29udGludWUgdG8gcGVyZm9ybSByb3V0aW5nLw0KICAgZm9yd2FyZGluZyBsb29rdXBzIG9u IHRoZSBkZXN0aW5hdGlvbiBhZGRyZXNzZXMuICBGb3Igcm91dGVycyBiZXR3ZWVuDQogICB0aGUg c291cmNlIGhvc3QgYW5kIHRoZSBJVFIgYXMgd2VsbCBhcyByb3V0ZXJzIGZyb20gdGhlIEVUUiB0 byB0aGUNCiAgIGRlc3RpbmF0aW9uIGhvc3QsIHRoZSBkZXN0aW5hdGlvbiBhZGRyZXNzIGlzIGFu IEVJRC4gIEZvciB0aGUgcm91dGVycw0KICAgYmV0d2VlbiB0aGUgSVRSIGFuZCB0aGUgRVRSLCB0 aGUgZGVzdGluYXRpb24gYWRkcmVzcyBpcyBhbiBSTE9DLg0KDQogICBUaGlzIGRlc2lnbiBpbnRy b2R1Y2VzICJUdW5uZWwgUm91dGVycyIsIHdoaWNoIHByZXBlbmRzIExJU1AgaGVhZGVycw0KICAg b24gaG9zdC1vcmlnaW5hdGVkIHBhY2tldHMgYW5kIHN0cmlwIHRoZW0gcHJpb3IgdG8gZmluYWwg ZGVsaXZlcnkgdG8NCiAgIHRoZWlyIGRlc3RpbmF0aW9uLiAgVGhlIElQIGFkZHJlc3NlcyBpbiB0 aGlzICJvdXRlciBoZWFkZXIiIGFyZQ0KICAgUkxPQ3MuICBEdXJpbmcgZW5kLXRvLWVuZCBwYWNr ZXQgZXhjaGFuZ2UgYmV0d2VlbiB0d28gSW50ZXJuZXQgaG9zdHMsDQogICBhbiBJVFIgcHJlcGVu ZHMgYSBuZXcgTElTUCBoZWFkZXIgdG8gZWFjaCBwYWNrZXQgYW5kIGFuIGVncmVzcyB0dW5uZWwN CiAgIHJvdXRlciBzdHJpcHMgdGhlIG5ldyBoZWFkZXIuICBUaGUgSVRSIHBlcmZvcm1zIEVJRC10 by1STE9DIGxvb2t1cHMNCiAgIHRvIGRldGVybWluZSB0aGUgcm91dGluZyBwYXRoIHRvIHRoZSB0 aGUgRVRSLCB3aGljaCBoYXMgdGhlIFJMT0MgYXMNCiAgIG9uZSBvZiBpdHMgSVAgYWRkcmVzc2Vz Lg0KDQogICBTb21lIGJhc2ljIHJ1bGVzIGdvdmVybmluZyBMSVNQIGFyZToNCg0KICAgbyAgRW5k LXN5c3RlbXMgKGhvc3RzKSBvbmx5IHNlbmQgdG8gYWRkcmVzc2VzIHdoaWNoIGFyZSBFSURzLiAg VGhleQ0KICAgICAgZG9uJ3Qga25vdyBhZGRyZXNzZXMgYXJlIEVJRHMgdmVyc3VzIFJMT0NzIGJ1 dCBhc3N1bWUgcGFja2V0cyBnZXQNCiAgICAgIHRvIExJU1Agcm91dGVycywgd2hpY2ggaW4gdHVy biwgZGVsaXZlciBwYWNrZXRzIHRvIHRoZSBkZXN0aW5hdGlvbg0KICAgICAgdGhlIGVuZC1zeXN0 ZW0gaGFzIHNwZWNpZmllZC4NCg0KICAgbyAgRUlEcyBhcmUgYWx3YXlzIElQIGFkZHJlc3NlcyBh c3NpZ25lZCB0byBob3N0cy4NCg0KICAgbyAgTElTUCByb3V0ZXJzIG1vc3RseSBkZWFsIHdpdGgg Um91dGluZyBMb2NhdG9yIGFkZHJlc3Nlcy4gIFNlZQ0KICAgICAgZGV0YWlscyBsYXRlciBpbiBT ZWN0aW9uIDQuMSB0byBjbGFyaWZ5IHdoYXQgaXMgbWVhbnQgYnkgIm1vc3RseSIuDQoNCiAgIG8g IFJMT0NzIGFyZSBhbHdheXMgSVAgYWRkcmVzc2VzIGFzc2lnbmVkIHRvIHJvdXRlcnM7IHByZWZl cmFibHksDQogICAgICB0b3BvbG9naWNhbGx5LW9yaWVudGVkIGFkZHJlc3NlcyBmcm9tIHByb3Zp ZGVyIENJRFIgYmxvY2tzLg0KDQogICBvICBXaGVuIGEgcm91dGVyIG9yaWdpbmF0ZXMgcGFja2V0 cyBpdCBtYXkgdXNlIGFzIGEgc291cmNlIGFkZHJlc3MNCiAgICAgIGVpdGhlciBhbiBFSUQgb3Ig UkxPQy4gIFdoZW4gYWN0aW5nIGFzIGEgaG9zdCAoZS5nLiB3aGVuDQogICAgICB0ZXJtaW5hdGlu ZyBhIHRyYW5zcG9ydCBzZXNzaW9uIHN1Y2ggYXMgU1NILCBURUxORVQsIG9yIFNOTVApLCBpdA0K ICAgICAgbWF5IHVzZSBhbiBFSUQgdGhhdCBpcyBleHBsaWNpdGx5IGFzc2lnbmVkIGZvciB0aGF0 IHB1cnBvc2UuICBBbg0KICAgICAgRUlEIHRoYXQgaWRlbnRpZmllcyB0aGUgcm91dGVyIGFzIGEg aG9zdCBNVVNUIE5PVCBiZSB1c2VkIGFzIGFuDQogICAgICBSTE9DOyBhbiBFSUQgaXMgb25seSBy b3V0YWJsZSB3aXRoaW4gdGhlIHNjb3BlIG9mIGEgc2l0ZS4gIEENCiAgICAgIHR5cGljYWwgQkdQ IGNvbmZpZ3VyYXRpb24gbWlnaHQgZGVtb25zdHJhdGUgdGhpcyAiaHlicmlkIiBFSUQvUkxPQw0K ICAgICAgdXNhZ2Ugd2hlcmUgYSByb3V0ZXIgY291bGQgdXNlIGl0cyAiaG9zdC1saWtlIiBFSUQg dG8gdGVybWluYXRlDQogICAgICBpQkdQIHNlc3Npb25zIHRvIG90aGVyIHJvdXRlcnMgaW4gYSBz aXRlIHdoaWxlIGF0IHRoZSBzYW1lIHRpbWUNCiAgICAgIHVzaW5nIFJMT0NzIHRvIHRlcm1pbmF0 ZSBlQkdQIHNlc3Npb25zIHRvIHJvdXRlcnMgb3V0c2lkZSB0aGUNCiAgICAgIHNpdGUuDQoNCiAg IG8gIEVJRHMgYXJlIG5vdCBleHBlY3RlZCB0byBiZSB1c2FibGUgZm9yIGdsb2JhbCBlbmQtdG8t ZW5kDQogICAgICBjb21tdW5pY2F0aW9uIGluIHRoZSBhYnNlbmNlIG9mIGFuIEVJRC10by1STE9D IG1hcHBpbmcgb3BlcmF0aW9uLg0KICAgICAgVGhleSBhcmUgZXhwZWN0ZWQgdG8gYmUgdXNlZCBs b2NhbGx5IGZvciBpbnRyYS1zaXRlIGNvbW11bmljYXRpb24uDQoNCiAgIG8gIEVJRCBwcmVmaXhl cyBhcmUgbGlrZWx5IHRvIGJlIGhpZXJhcmNoaWNhbGx5IGFzc2lnbmVkIGluIGEgbWFubmVyDQog ICAgICB3aGljaCBpcyBvcHRpbWl6ZWQgZm9yIGFkbWluaXN0cmF0aXZlIGNvbnZlbmllbmNlIGFu ZCB0bw0KICAgICAgZmFjaWxpdGF0ZSBzY2FsaW5nIG9mIHRoZSBFSUQtdG8tUkxPQyBtYXBwaW5n IGRhdGFiYXNlLiAgVGhlDQogICAgICBoaWVyYXJjaHkgaXMgYmFzZWQgb24gYSBhZGRyZXNzIGFs bG9jYXRpb24gaGllcmFyY2h5IHdoaWNoIGlzIG5vdA0KICAgICAgZGVwZW5kZW50IG9uIHRoZSBu ZXR3b3JrIHRvcG9sb2d5Lg0KDQogICBvICBFSURzIG1heSBhbHNvIGJlIHN0cnVjdHVyZWQgKHN1 Ym5ldHRlZCkgaW4gYSBtYW5uZXIgc3VpdGFibGUgZm9yDQogICAgICBsb2NhbCByb3V0aW5nIHdp dGhpbiBhbiBhdXRvbm9tb3VzIHN5c3RlbS4NCg0KICAgQW4gYWRkaXRpb25hbCBMSVNQIGhlYWRl ciBtYXkgYmUgcHJlcGVuZGVkIHRvIHBhY2tldHMgYnkgYSB0cmFuc2l0DQogICByb3V0ZXIgKGku ZS4gIFRFLUlUUikgd2hlbiByZS1yb3V0aW5nIG9mIHRoZSBwYXRoIGZvciBhIHBhY2tldCBpcw0K ICAgZGVzaXJlZC4gIEFuIG9idmlvdXMgaW5zdGFuY2Ugb2YgdGhpcyB3b3VsZCBiZSBhbiBJU1Ag cm91dGVyIHRoYXQNCiAgIG5lZWRzIHRvIHBlcmZvcm0gdHJhZmZpYyBlbmdpbmVlcmluZyBmb3Ig cGFja2V0cyBpbiBmbG93IHRocm91Z2ggaXRzDQogICBuZXR3b3JrLiAgSW4gc3VjaCBhIHNpdHVh dGlvbiwgdGVybWVkIFJlY3Vyc2l2ZSBUdW5uZWxpbmcsIGFuIElTUA0KICAgdHJhbnNpdCBhY3Rz IGFzIGFuIGFkZGl0aW9uYWwgaW5ncmVzcyB0dW5uZWwgcm91dGVyIGFuZCB0aGUgUkxPQyBpdA0K ICAgdXNlcyBmb3IgdGhlIG5ldyBwcmVwZW5kZWQgaGVhZGVyIHdvdWxkIGJlIGVpdGhlciA8U1RS SUtFPjxGT05UIGNvbG9yPSJyZWQiPmFuPC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNv bG9yPSJncmVlbiI+YTwvRk9OVD48L1NUUk9ORz4gVEUtRVRSIHdpdGhpbiB0aGUNCiAgIElTUCAo YWxvbmcgaW50cmEtSVNQIHRyYWZmaWMgZW5naW5lZXJlZCBwYXRoKSBvciA8U1RSSUtFPjxGT05U IGNvbG9yPSJyZWQiPmluIGFuPC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJn cmVlbiI+YTwvRk9OVD48L1NUUk9ORz4gVEUtRVRSIHdpdGhpbg0KICAgYW5vdGhlciBJU1AgKGFu IGludGVyLUlTUCB0cmFmZmljIGVuZ2luZWVyZWQgcGF0aCwgd2hlcmUgYW4gYWdyZWVtZW50DQog ICB0byBidWlsZCBzdWNoIGEgcGF0aCBleGlzdHMpLg0KDQogICBUaGlzIHNwZWNpZmljYXRpb24g bWFuZGF0ZXMgdGhhdCBubyBtb3JlIHRoYW4gdHdvIExJU1AgaGVhZGVycyBnZXQNCiAgIHByZXBl bmRlZCB0byBhIHBhY2tldC4gIFRoaXMgYXZvaWRzIGV4Y2Vzc2l2ZSBwYWNrZXQgb3ZlcmhlYWQg YXMgd2VsbA0KICAgYXMgcG9zc2libGUgZW5jYXBzdWxhdGlvbiBsb29wcy4gIEl0IGlzIGJlbGll dmVkIHR3byBoZWFkZXJzIGlzDQogICBzdWZmaWNpZW50LCB3aGVyZSB0aGUgZmlyc3QgcHJlcGVu ZGVkIGhlYWRlciBpcyB1c2VkIGF0IGEgc2l0ZSBmb3INCiAgIExvY2F0aW9uL0lkZW50aXR5IHNl cGFyYXRpb24gYW5kIHNlY29uZCBwcmVwZW5kZWQgaGVhZGVyIGlzIHVzZWQNCiAgIGluc2lkZSBh IHNlcnZpY2UgcHJvdmlkZXIgZm9yIFRyYWZmaWMgRW5naW5lZXJpbmcgcHVycG9zZXMuDQoNCiAg IFR1bm5lbCBSb3V0ZXJzIGNhbiBiZSBwbGFjZWQgZmFpcmx5IGZsZXhpYmx5IGluIGEgbXVsdGkt QVMgdG9wb2xvZ3kuDQogICBGb3IgZXhhbXBsZSwgdGhlIElUUiBmb3IgYSBwYXJ0aWN1bGFyIGVu ZC10by1lbmQgcGFja2V0IGV4Y2hhbmdlDQogICBtaWdodCBiZSB0aGUgZmlyc3QtaG9wIG9yIGRl ZmF1bHQgcm91dGVyIHdpdGhpbiBhIHNpdGUgZm9yIHRoZSBzb3VyY2UNCiAgIGhvc3QuICBTaW1p bGFybHksIHRoZSBlZ3Jlc3MgdHVubmVsIHJvdXRlciBtaWdodCBiZSB0aGUgbGFzdC1ob3ANCiAg IHJvdXRlciBkaXJlY3RseS1jb25uZWN0ZWQgdG8gdGhlIGRlc3RpbmF0aW9uIGhvc3QuICBBbm90 aGVyIGV4YW1wbGUsDQogICBwZXJoYXBzIGZvciBhIFZQTiBzZXJ2aWNlIG91dC1zb3VyY2VkIHRv IGFuIElTUCBieSBhIHNpdGUsIHRoZSBJVFINCiAgIGNvdWxkIGJlIHRoZSBzaXRlJ3MgYm9yZGVy IHJvdXRlciBhdCB0aGUgc2VydmljZSBwcm92aWRlciBhdHRhY2htZW50DQogICBwb2ludC4gIE1p eGluZyBhbmQgbWF0Y2hpbmcgb2Ygc2l0ZS1vcGVyYXRlZCwgSVNQLW9wZXJhdGVkLCBhbmQgb3Ro ZXINCiAgIHR1bm5lbCByb3V0ZXJzIGlzIGFsbG93ZWQgZm9yIG1heGltdW0gZmxleGliaWxpdHku ICBTZWUgU2VjdGlvbiA4IGZvcg0KICAgbW9yZSBkZXRhaWxzLg0KDQo0LjEuICBQYWNrZXQgRmxv dyBTZXF1ZW5jZQ0KDQogICBUaGlzIHNlY3Rpb24gcHJvdmlkZXMgYW4gZXhhbXBsZSBvZiB0aGUg dW5pY2FzdCBwYWNrZXQgZmxvdyB3aXRoIHRoZQ0KICAgZm9sbG93aW5nIGNvbmRpdGlvbnM6DQoN CiAgIG8gIFNvdXJjZSBob3N0ICJob3N0MS5hYmMuY29tIiBpcyBzZW5kaW5nIGEgcGFja2V0IHRv DQogICAgICAiaG9zdDIueHl6LmNvbSIsIGV4YWN0bHkgd2hhdCBob3N0MSB3b3VsZCBkbyBpZiB0 aGUgc2l0ZSB3YXMgbm90DQogICAgICB1c2luZyBMSVNQLg0KDQogICBvICBFYWNoIHNpdGUgaXMg bXVsdGktaG9tZWQsIHNvIGVhY2ggdHVubmVsIHJvdXRlciBoYXMgYW4gYWRkcmVzcw0KICAgICAg KFJMT0MpIGFzc2lnbmVkIGZyb20gdGhlIHNlcnZpY2UgcHJvdmlkZXIgYWRkcmVzcyBibG9jayBm b3IgZWFjaA0KICAgICAgcHJvdmlkZXIgdG8gd2hpY2ggdGhhdCBwYXJ0aWN1bGFyIHR1bm5lbCBy b3V0ZXIgaXMgYXR0YWNoZWQuDQoNCiAgIG8gIFRoZSBJVFIocykgYW5kIEVUUihzKSBhcmUgZGly ZWN0bHkgY29ubmVjdGVkIHRvIHRoZSBzb3VyY2UgYW5kDQogICAgICBkZXN0aW5hdGlvbiwgcmVz cGVjdGl2ZWx5Lg0KDQogICBvICBEYXRhIFByb2JlcyBhcmUgdXNlZCB0byBzb2xpY2l0IE1hcC1S ZXBsaWVzIHZlcnN1cyB1c2luZyBNYXAtDQogICAgICBSZXF1ZXN0cy4gIEFuZCB0aGUgRGF0YSBQ cm9iZXMgYXJlIHNlbnQgb24gdGhlIHVuZGVybHlpbmcgdG9wb2xvZ3kNCiAgICAgICh0aGUgTElT UCAxLjAgdmFyaWFudCkgYnV0IGNvdWxkIGFsc28gYmUgc2VudCBvdmVyIGFuIGFsdGVybmF0aXZl DQogICAgICB0b3BvbG9neSAodGhlIExJU1AgMS41IHZhcmlhbnQpIGFzIGl0IHdvdWxkIGluIFtB TFRdLg0KDQogICBDbGllbnQgaG9zdDEuYWJjLmNvbSB3YW50cyB0byBjb21tdW5pY2F0ZSB3aXRo IHNlcnZlciBob3N0Mi54eXouY29tOg0KDQogICAxLiAgaG9zdDEuYWJjLmNvbSB3YW50cyB0byBv cGVuIGEgVENQIGNvbm5lY3Rpb24gdG8gaG9zdDIueHl6LmNvbS4NCiAgICAgICBJdCBkb2VzIGEg RE5TIGxvb2t1cCBvbiBob3N0Mi54eXouY29tLiAgQW4gQS9BQUFBIHJlY29yZCBpcw0KICAgICAg IHJldHVybmVkLiAgVGhpcyBhZGRyZXNzIGlzIHVzZWQgYXMgdGhlIGRlc3RpbmF0aW9uIEVJRCBh bmQgdGhlDQogICAgICAgbG9jYWxseS1hc3NpZ25lZCBhZGRyZXNzIG9mIGhvc3QxLmFiYy5jb20g aXMgdXNlZCBhcyB0aGUgc291cmNlDQogICAgICAgRUlELiAgQW4gSVB2NCBvciBJUHY2IHBhY2tl dCBpcyBidWlsdCB1c2luZyB0aGUgRUlEcyBpbiB0aGUgSVB2NA0KICAgICAgIG9yIElQdjYgaGVh ZGVyIGFuZCBzZW50IHRvIHRoZSBkZWZhdWx0IHJvdXRlci4NCg0KICAgMi4gIFRoZSBkZWZhdWx0 IHJvdXRlciBpcyBjb25maWd1cmVkIGFzIGFuIElUUi4gIFRoZSBJVFIgbXVzdCBiZSBhYmxlDQog ICAgICAgdG8gbWFwIHRoZSBFSUQgZGVzdGluYXRpb24gdG8gYW4gUkxPQyBvZiB0aGUgRVRSIGF0 IHRoZQ0KICAgICAgIGRlc3RpbmF0aW9uIHNpdGUuICBUaGUgSVRSIHByZXBlbmRzIGEgTElTUCBo ZWFkZXIgdG8gdGhlIHBhY2tldCwNCiAgICAgICB3aXRoIG9uZSBvZiBpdHMgUkxPQ3MgYXMgdGhl IHNvdXJjZSBJUHY0IG9yIElQdjYgYWRkcmVzcy4gIFRoZQ0KICAgICAgIGRlc3RpbmF0aW9uIEVJ RCBmcm9tIHRoZSBvcmlnaW5hbCBwYWNrZXQgaGVhZGVyIGlzIHVzZWQgYXMgdGhlDQogICAgICAg ZGVzdGluYXRpb24gSVB2NCBvciBJUHY2IGluIHRoZSBwcmVwZW5kZWQgTElTUCBoZWFkZXIuDQog ICAgICAgU3Vic2VxdWVudCBwYWNrZXRzLCB3aGVyZSB0aGUgb3V0ZXIgZGVzdGluYXRpb24gYWRk cmVzcyBpcyB0aGUNCiAgICAgICBkZXN0aW5hdGlvbiBFSUQgd2lsbCBiZSBzZW50IHVudGlsIEVJ RC10by1STE9DIG1hcHBpbmcgaXMNCiAgICAgICBsZWFybmVkLg0KDQogICAzLiAgSW4gTElTUCAx LCB0aGUgcGFja2V0IGlzIHJvdXRlZCB0aHJvdWdoIHRoZSBJbnRlcm5ldCBhcyBpdCBpcw0KICAg ICAgIHRvZGF5LiAgSW4gTElTUCAxLjUsIHRoZSBwYWNrZXQgaXMgcm91dGVkIG9uIGEgZGlmZmVy ZW50IHRvcG9sb2d5DQogICAgICAgd2hpY2ggbWF5IGhhdmUgRUlEIHByZWZpeGVzIGRpc3RyaWJ1 dGVkIGFuZCBhZHZlcnRpc2VkIGluIGFuDQogICAgICAgYWdncmVnYXRhYmxlIGZhc2hpb24uICBJ biBlaXRoZXIgY2FzZSwgdGhlIHBhY2tldCBhcnJpdmVzIGF0IHRoZQ0KICAgICAgIEVUUi4gIFRo ZSByb3V0ZXIgaXMgY29uZmlndXJlZCB0byAicHVudCIgdGhlIHBhY2tldCB0byB0aGUNCiAgICAg ICByb3V0ZXIncyBwcm9jZXNzb3IuICBTZWUgU2VjdGlvbiA3IGZvciBtb3JlIGRldGFpbHMuICBG b3IgTElTUA0KICAgICAgIDIuMCBhbmQgMy4wLCB0aGUgYmVoYXZpb3IgaXMgbm90IGZ1bGx5IGRl ZmluZWQgeWV0Lg0KDQogICA0LiAgVGhlIExJU1AgaGVhZGVyIGlzIHN0cmlwcGVkIHNvIHRoYXQg dGhlIHBhY2tldCBjYW4gYmUgZm9yd2FyZGVkDQogICAgICAgYnkgdGhlIHJvdXRlciBjb250cm9s IHBsYW5lLiAgVGhlIHJvdXRlciBsb29rcyB1cCB0aGUgZGVzdGluYXRpb24NCiAgICAgICBFSUQg aW4gdGhlIHJvdXRlcidzIEVJRC10by1STE9DIGRhdGFiYXNlIChub3QgdGhlIGNhY2hlLCBidXQg dGhlDQogICAgICAgY29uZmlndXJlZCBkYXRhIHN0cnVjdHVyZSBvZiBSTE9DcykuICBBbiBFSUQt dG8tUkxPQyBNYXAtUmVwbHkNCiAgICAgICBtZXNzYWdlIGlzIG9yaWdpbmF0ZWQgYnkgdGhlIEVU UiBhbmQgaXMgYWRkcmVzc2VkIHRvIHRoZSBzb3VyY2UNCiAgICAgICBSTE9DIGluIHRoZSBMSVNQ IGhlYWRlciBvZiB0aGUgb3JpZ2luYWwgcGFja2V0ICh0aGlzIGlzIHRoZSBJVFIpLg0KICAgICAg IFRoZSBzb3VyY2UgUkxPQyBvZiB0aGUgTWFwLVJlcGx5IGlzIG9uZSBvZiB0aGUgRVRSJ3MgUkxP Q3MuDQoNCiAgIDUuICBUaGUgSVRSIHJlY2VpdmVzIHRoZSBNYXAtUmVwbHkgbWVzc2FnZSwgcGFy c2VzIHRoZSBtZXNzYWdlICh0bw0KICAgICAgIGNoZWNrIGZvciBmb3JtYXQgdmFsaWRpdHkpIGFu ZCBzdG9yZXMgdGhlIG1hcHBpbmcgaW5mb3JtYXRpb24NCiAgICAgICBmcm9tIHRoZSBwYWNrZXQu ICBUaGlzIGluZm9ybWF0aW9uIGlzIHB1dCBpbiB0aGUgSVRSJ3MgRUlELXRvLQ0KICAgICAgIFJM T0MgbWFwcGluZyBjYWNoZSAodGhpcyBpcyB0aGUgb24tZGVtYW5kIGNhY2hlLCB0aGUgY2FjaGUg d2hlcmUNCiAgICAgICBlbnRyaWVzIHRpbWUgb3V0IGR1ZSB0byBpbmFjdGl2aXR5KS4NCg0KICAg Ni4gIFN1YnNlcXVlbnQgcGFja2V0cyBmcm9tIGhvc3QxLmFiYy5jb20gdG8gaG9zdDIueHl6LmNv bSB3aWxsIGhhdmUNCiAgICAgICBhIExJU1AgaGVhZGVyIHByZXBlbmRlZCBieSB0aGUgSVRSIHVz aW5nIHRoZSBhcHByb3ByaWF0ZSBSTE9DIGFzDQogICAgICAgdGhlIExJU1AgaGVhZGVyIGRlc3Rp bmF0aW9uIGFkZHJlc3MgbGVhcm5lZCBmcm9tIHRoZSBFVFIuICBOb3RlLA0KICAgICAgIHRoZSBw YWNrZXQgbWF5IGJlIHNlbnQgdG8gYSBkaWZmZXJlbnQgRVRSIHRoYW4gdGhlIG9uZSB3aGljaA0K ICAgICAgIHJldHVybmVkIHRoZSBNYXAtUmVwbHkgZHVlIHRvIHRoZSBzb3VyY2Ugc2l0ZSdzIGhh c2hpbmcgcG9saWN5IG9yDQogICAgICAgdGhlIGRlc3RpbmF0aW9uIHNpdGUncyBsb2NhdG9yLXNl dCBwb2xpY3kuDQoNCiAgIDcuICBUaGUgRVRSIHJlY2VpdmVzIHRoZXNlIHBhY2tldHMgZGlyZWN0 bHkgKHNpbmNlIHRoZSBkZXN0aW5hdGlvbg0KICAgICAgIGFkZHJlc3MgaXMgb25lIG9mIGl0cyBh c3NpZ25lZCBJUCBhZGRyZXNzZXMpLCBzdHJpcHMgdGhlIExJU1ANCiAgICAgICBoZWFkZXIgYW5k IGZvcndhcmRzIHRoZSBwYWNrZXRzIHRvIHRoZSBhdHRhY2hlZCBkZXN0aW5hdGlvbiBob3N0Lg0K DQogICBJbiBvcmRlciB0byBlbGltaW5hdGUgdGhlIG5lZWQgZm9yIGEgbWFwcGluZyBsb29rdXAg aW4gdGhlIHJldmVyc2UNCiAgIGRpcmVjdGlvbiwgYW4gRVRSIE1BWSBjcmVhdGUgYSBjYWNoZSBl bnRyeSB0aGF0IG1hcHMgdGhlIHNvdXJjZSBFSUQNCiAgIChpbm5lciBoZWFkZXIgc291cmNlIElQ IGFkZHJlc3MpIHRvIHRoZSBzb3VyY2UgUkxPQyAob3V0ZXIgaGVhZGVyDQogICBzb3VyY2UgSVAg YWRkcmVzcykgaW4gYSByZWNlaXZlZCBMSVNQIHBhY2tldC4gIFN1Y2ggYSBjYWNoZSBlbnRyeSBp cw0KICAgdGVybWVkIGEgImdsZWFuZWQiIG1hcHBpbmcgYW5kIG9ubHkgY29udGFpbnMgYSBzaW5n bGUgUkxPQyBmb3IgdGhlDQogICBFSUQgaW4gcXVlc3Rpb24uICBNb3JlIGNvbXBsZXRlIGluZm9y bWF0aW9uIGFib3V0IGFkZGl0aW9uYWwgUkxPQ3MNCiAgIFNIT1VMRCBiZSB2ZXJpZmllZCBieSBz ZW5kaW5nIGEgTElTUCBNYXAtUmVxdWVzdCBmb3IgdGhhdCBFSUQuICBCb3RoDQogICBJVFIgYW5k IHRoZSBFVFIgbWF5IGFsc28gaW5mbHVlbmNlIHRoZSBkZWNpc2lvbiB0aGUgb3RoZXIgbWFrZXMg aW4NCiAgIHNlbGVjdGluZyBhbiBSTE9DLiAgU2VlIFNlY3Rpb24gNiBmb3IgbW9yZSBkZXRhaWxz Lg0KDQo1LiAgVHVubmVsaW5nIERldGFpbHMNCg0KICAgVGhpcyBzZWN0aW9uIGRlc2NyaWJlcyB0 aGUgTElTUCBEYXRhIE1lc3NhZ2Ugd2hpY2ggZGVmaW5lcyB0aGUNCiAgIHR1bm5lbGluZyBoZWFk ZXIgdXNlZCB0byBlbmNhcHN1bGF0ZSBJUHY0IGFuZCBJUHY2IHBhY2tldHMgd2hpY2gNCiAgIGNv bnRhaW4gRUlEIGFkZHJlc3Nlcy4gIEV2ZW4gdGhvdWdoIHRoZSBmb2xsb3dpbmcgZm9ybWF0cyBp bGx1c3RyYXRlDQogICBJUHY0LWluLUlQdjQgYW5kIElQdjYtaW4tSVB2NiBlbmNhcHN1bGF0aW9u cywgdGhlIG90aGVyIDINCiAgIGNvbWJpbmF0aW9ucyBhcmUgc3VwcG9ydGVkIGFzIHdlbGwuDQoN CiAgIFNpbmNlIGFkZGl0aW9uYWwgdHVubmVsIGhlYWRlcnMgYXJlIHByZXBlbmRlZCwgdGhlIHBh Y2tldCBiZWNvbWVzDQogICBsYXJnZXIgYW5kIGluIHRoZW9yeSBjYW4gZXhjZWVkIHRoZSBNVFUg b2YgYW55IGxpbmsgdHJhdmVyc2VkIGZyb20NCiAgIHRoZSBJVFIgdG8gdGhlIEVUUi4gIEl0IGlz IHJlY29tbWVuZGVkLCBpbiBJUHY0IHRoYXQgcGFja2V0cyBkbyBub3QNCiAgIGdldCBmcmFnbWVu dGVkIGFzIHRoZXkgYXJlIGVuY2Fwc3VsYXRlZCBieSB0aGUgSVRSLiAgSW5zdGVhZCwgdGhlDQog ICBwYWNrZXQgaXMgZHJvcHBlZCBhbmQgYW4gSUNNUCBUb28gQmlnIG1lc3NhZ2UgaXMgcmV0dXJu ZWQgdG8gdGhlDQogICBzb3VyY2UuDQoNCiAgIEJhc2VkIG9uIGluZm9ybWFsIHN1cnZleXMgb2Yg bGFyZ2UgSVNQIHRyYWZmaWMgcGF0dGVybnMsIGl0IGFwcGVhcnMNCiAgIHRoYXQgbW9zdCB0cmFu c2l0IHBhdGhzIGNhbiBhY2NvbW1vZGF0ZSBhIHBhdGggTVRVIG9mIGF0IGxlYXN0IDQ0NzANCiAg IGJ5dGVzLiAgVGhlIGV4Y2VwdGlvbnMsIGluIHRlcm1zIG9mIGRhdGEgcmF0ZSwgbnVtYmVyIG9m IGhvc3RzDQogICBhZmZlY3RlZCwgb3IgYW55IG90aGVyIG1ldHJpYyBhcmUgZXhwZWN0ZWQgdG8g YmUgdmFuaXNoaW5nbHkgc21hbGwuDQoNCiAgIFRvIGFkZHJlc3MgTVRVIGNvbmNlcm5zLCBtYWlu bHkgcmFpc2VkIG9uIHRoZSBSUkcgbWFpbGluZyBsaXN0LCB0aGUNCiAgIExJU1AgZGVwbG95bWVu dCBwcm9jZXNzIHdpbGwgaW5jbHVkZSBjb2xsZWN0aW5nIGRhdGEgZHVyaW5nIGl0cyBwaWxvdA0K ICAgcGhhc2UgdG8gZWl0aGVyIHZlcmlmeSBvciByZWZ1dGUgdGhlIGFzc3VtcHRpb24gYWJvdXQg bWluaW11bQ0KICAgYXZhaWxhYmxlIE1UVS4gIElmIHRoZSBhc3N1bXB0aW9uIHByb3ZlcyB0cnVl IGFuZCB0cmFuc2l0IG5ldHdvcmtzDQogICB3aXRoIGxpbmtzIGxpbWl0ZWQgdG8gMTUwMCBieXRl IE1UVXMgYXJlIGNvcm5lciBjYXNlcywgaXQgd291bGQgc2VlbQ0KICAgbW9yZSBjb3N0LWVmZmVj dGl2ZSB0byBlaXRoZXIgdXBncmFkZSBvciBtb2RpZnkgdGhlIGVxdWlwbWVudCBpbg0KICAgdGhv c2UgdHJhbnNpdCBuZXR3b3JrcyB0byBzdXBwb3J0IGxhcmdlciBNVFVzIG9yIHRvIHVzZSBleGlz dGluZw0KICAgbWVjaGFuaXNtcyBmb3IgYWNjb21tb2RhdGluZyBwYWNrZXRzIHRoYXQgYXJlIHRv byBsYXJnZS4NCg0KICAgRm9yIHRoaXMgcmVhc29uLCB0aGVyZSBpcyBjdXJyZW50bHkgbm8gcGxh biBmb3IgTElTUCB0byBhZGQgYW55IG5ldw0KICAgYWRkaXRpb25hbCwgY29tcGxleCBtZWNoYW5p c20gZm9yIGltcGxlbWVudGluZyBmcmFnbWVudGF0aW9uIGFuZA0KICAgcmVhc3NlbWJseSBpbiB0 aGUgZmFjZSBvZiBsaW1pdGVkLU1UVSB0cmFuc2l0IGxpbmtzLiAgSWYgYW5hbHlzaXMNCiAgIGR1 cmluZyBMSVNQIHBpbG90IGRlcGxveW1lbnQgcmV2ZWFscyB0aGF0IHRoZSBhc3N1bXB0aW9uIG9m DQogICBlc3NlbnRpYWxseSB1YmlxdWl0b3VzLCA0NDcwKyBieXRlIHRyYW5zaXQgcGF0aCBNVFVz LCBpcyBpbmNvcnJlY3QsDQogICB0aGVuIExJU1AgY2FuIGJlIG1vZGlmaWVkIHByaW9yIHRvIHBy b3RvY29sIHN0YW5kYXJkaXphdGlvbiB0byBhZGQNCiAgIHN1cHBvcnQgZm9yIG9uZSBvZiB0aGUg cHJvcG9zZWQgZnJhZ21lbnRhdGlvbiBhbmQgcmVhc3NlbWJseSBzY2hlbWVzLg0KICAgTm90ZSB0 aGF0IHR3byBzaW1wbGUgZXhpc3Rpbmcgc2NoZW1lcyBhcmUgZGV0YWlsZWQgaW4gU2VjdGlvbiA1 LjQuDQoNCjUuMS4gIExJU1AgSVB2NC1pbi1JUHY0IEhlYWRlciBGb3JtYXQNCg0KICAgICAgICAw ICAgICAgICAgICAgICAgICAgIDEgICAgICAgICAgICAgICAgICAgMiAgICAgICAgICAgICAgICAg ICAzDQogICAgICAgIDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEg MiAzIDQgNSA2IDcgOCA5IDAgMQ0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgIC8gfFZlcnNpb258ICBJ SEwgIHxUeXBlIG9mIFNlcnZpY2V8ICAgICAgICAgIFRvdGFsIExlbmd0aCAgICAgICAgIHwNCiAg ICAvICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKw0KICAgfCAgIHwgICAgICAgICBJZGVudGlmaWNhdGlvbiAgICAgICAgfEZs YWdzfCAgICAgIEZyYWdtZW50IE9mZnNldCAgICB8DQogICB8ICAgKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgIE9IICB8 ICBUaW1lIHRvIExpdmUgfCBQcm90b2NvbCA9IDE3IHwgICAgICAgICBIZWFkZXIgQ2hlY2tzdW0g ICAgICAgfA0KICAgfCAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICB8ICAgfCAgICAgICAgICAgICAgICAgICAgU291 cmNlIFJvdXRpbmcgTG9jYXRvciAgICAgICAgICAgICAgICAgICAgIHwNCiAgICBcICArLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Kw0KICAgICBcIHwgICAgICAgICAgICAgICAgIERlc3RpbmF0aW9uIFJvdXRpbmcgTG9jYXRvciAg ICAgICAgICAgICAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgLyB8ICAgICAgIFNvdXJj ZSBQb3J0ID0geHh4eCAgICAgIHwgICAgICAgRGVzdCBQb3J0ID0gNDM0MSAgICAgICAgfA0KICAg VURQICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rDQogICAgIFwgfCAgICAgICAgICAgVURQIExlbmd0aCAgICAgICAgICB8ICAg ICAgICBVRFAgQ2hlY2tzdW0gICAgICAgICAgIHwNCiAgICAgICArLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgTCAgIHxO fEx8RXwgIHJmbGFncyB8ICAgICAgICAgICAgICAgICBOb25jZSAgICAgICAgICAgICAgICAgICAg ICAgICB8DQogICBJIFwgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgIFMgLyB8ICAgICAgICAgICAgICAgICAgICAgICBM b2NhdG9yIFN0YXR1cyBCaXRzICAgICAgICAgICAgICAgICAgICAgfA0KICAgUCAgICstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r DQogICAgIC8gfFZlcnNpb258ICBJSEwgIHxUeXBlIG9mIFNlcnZpY2V8ICAgICAgICAgIFRvdGFs IExlbmd0aCAgICAgICAgIHwNCiAgICAvICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgfCAgIHwgICAgICAgICBJZGVu dGlmaWNhdGlvbiAgICAgICAgfEZsYWdzfCAgICAgIEZyYWdtZW50IE9mZnNldCAgICB8DQogICB8 ICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSsNCiAgIElIICB8ICBUaW1lIHRvIExpdmUgfCAgICBQcm90b2NvbCAgIHwgICAg ICAgICBIZWFkZXIgQ2hlY2tzdW0gICAgICAgfA0KICAgfCAgICstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICB8ICAgfCAg ICAgICAgICAgICAgICAgICAgICAgICAgIFNvdXJjZSBFSUQgICAgICAgICAgICAgICAgICAgICAg ICAgIHwNCiAgICBcICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICBcIHwgICAgICAgICAgICAgICAgICAgICAgICAg RGVzdGluYXRpb24gRUlEICAgICAgICAgICAgICAgICAgICAgICB8DQogICAgICAgKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsN Cg0KNS4yLiAgTElTUCBJUHY2LWluLUlQdjYgSGVhZGVyIEZvcm1hdA0KDQogICAgICAgIDAgICAg ICAgICAgICAgICAgICAgMSAgICAgICAgICAgICAgICAgICAyICAgICAgICAgICAgICAgICAgIDMN CiAgICAgICAgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMg NCA1IDYgNyA4IDkgMCAxDQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgLyB8VmVyc2lvbnwgVHJhZmZp YyBDbGFzcyB8ICAgICAgICAgICBGbG93IExhYmVsICAgICAgICAgICAgICAgICAgfA0KICAgIC8g ICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rDQogICB8ICAgfCAgICAgICAgIFBheWxvYWQgTGVuZ3RoICAgICAgICB8IE5leHQg SGVhZGVyPTE3fCAgIEhvcCBMaW1pdCAgIHwNCiAgIHYgICArLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICAgIHwgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICB8DQogICBPICAgKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICsNCiAgIHUgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgdCAgICsgICAgICAgICAg ICAgICAgICAgICBTb3VyY2UgUm91dGluZyBMb2NhdG9yICAgICAgICAgICAgICAgICAgICArDQog ICBlICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIHwNCiAgIHIgICArICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKw0KICAgICAgIHwgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICBIICAg Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSsNCiAgIGQgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgciAgICsgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICArDQogICAgICAgfCAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IHwNCiAgIF4gICArICAgICAgICAgICAgICAgICAgRGVzdGluYXRpb24gUm91dGluZyBMb2NhdG9y ICAgICAgICAgICAgICAgICAgKw0KICAgfCAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICAgXCAgKyAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICsNCiAg ICAgXCB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgfA0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgIC8gfCAgICAgICBTb3VyY2UgUG9y dCA9IHh4eHggICAgICB8ICAgICAgIERlc3QgUG9ydCA9IDQzNDEgICAgICAgIHwNCiAgIFVEUCAr LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKw0KICAgICBcIHwgICAgICAgICAgIFVEUCBMZW5ndGggICAgICAgICAgfCAgICAgICAg VURQIENoZWNrc3VtICAgICAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgIEwgICB8TnxMfEV8 ICByZmxhZ3MgfCAgICAgICAgICAgICAgICAgTm9uY2UgICAgICAgICAgICAgICAgICAgICAgICAg fA0KICAgSSBcICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rDQogICBTIC8gfCAgICAgICAgICAgICAgICAgICAgICAgTG9jYXRv ciBTdGF0dXMgQml0cyAgICAgICAgICAgICAgICAgICAgIHwNCiAgIFAgICArLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAg ICAvIHxWZXJzaW9ufCBUcmFmZmljIENsYXNzIHwgICAgICAgICAgIEZsb3cgTGFiZWwgICAgICAg ICAgICAgICAgICB8DQogICAgLyAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgIC8gICB8ICAgICAgICAgUGF5bG9hZCBM ZW5ndGggICAgICAgIHwgIE5leHQgSGVhZGVyICB8ICAgSG9wIExpbWl0ICAgfA0KICAgdiAgICst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rDQogICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIHwNCiAgIEkgICArICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKw0KICAgbiAgIHwgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8 DQogICBuICAgKyAgICAgICAgICAgICAgICAgICAgICAgICAgU291cmNlIEVJRCAgICAgICAgICAg ICAgICAgICAgICAgICAgICsNCiAgIGUgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgciAgICsgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICArDQogICAg ICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIHwNCiAgIEggICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgZCAgIHwgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICByICAgKyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICsNCiAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgfA0KICAgXiAgICsgICAgICAgICAgICAgICAgICAgICAgICBE ZXN0aW5hdGlvbiBFSUQgICAgICAgICAgICAgICAgICAgICAgICArDQogICBcICAgfCAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwN CiAgICBcICArICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgKw0KICAgICBcIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCg0KNS4z LiAgVHVubmVsIEhlYWRlciBGaWVsZCBEZXNjcmlwdGlvbnMNCg0KICAgSW5uZXIgSGVhZGVyOiAg aXMgdGhlIGlubmVyIGhlYWRlciwgcHJlc2VydmVkIGZyb20gdGhlIGRhdGFncmFtDQogICAgICBy ZWNlaXZlZCBmcm9tIHRoZSBvcmlnaW5hdGluZyBob3N0LiAgVGhlIHNvdXJjZSBhbmQgZGVzdGlu YXRpb24gSVANCiAgICAgIGFkZHJlc3NlcyBhcmUgRUlEcy4NCg0KICAgT3V0ZXIgSGVhZGVyOiAg aXMgdGhlIG91dGVyIGhlYWRlciBwcmVwZW5kZWQgYnkgYW4gSVRSLiAgVGhlIGFkZHJlc3MNCiAg ICAgIGZpZWxkcyBjb250YWluIFJMT0NzIG9idGFpbmVkIGZyb20gdGhlIGluZ3Jlc3Mgcm91dGVy J3MgRUlELXRvLQ0KICAgICAgUkxPQyBjYWNoZS4gIFRoZSBJUCBwcm90b2NvbCBudW1iZXIgaXMg IlVEUCAoMTcpIiBmcm9tIFtSRkMwNzY4XS4NCiAgICAgIFRoZSBERiBiaXQgb2YgdGhlIEZsYWdz IGZpZWxkIGlzIHNldCB0byAwIHdoZW4gdGhlIG1ldGhvZCBpbg0KICAgICAgU2VjdGlvbiA1LjQu MSBpcyB1c2VkIGFuZCBzZXQgdG8gMSB3aGVuIHRoZSBtZXRob2QgaW4NCiAgICAgIFNlY3Rpb24g NS40LjIgaXMgdXNlZC4NCg0KICAgVURQIEhlYWRlcjogIGNvbnRhaW5zIGEgSVRSIHNlbGVjdGVk IHNvdXJjZSBwb3J0IHdoZW4gZW5jYXBzdWxhdGluZyBhDQogICAgICBwYWNrZXQuICBTZWUgU2Vj dGlvbiA2LjQgZm9yIGRldGFpbHMgb24gdGhlIGhhc2ggYWxnb3JpdGhtIHVzZWQNCiAgICAgIHNl bGVjdCBhIHNvdXJjZSBwb3J0IGJhc2VkIG9uIHRoZSA1LXR1cGxlIG9mIHRoZSBpbm5lciBoZWFk ZXIuDQogICAgICBUaGUgZGVzdGluYXRpb24gcG9ydCBNVVNUIGJlIHNldCB0byB0aGUgd2VsbC1r bm93biBJQU5BIGFzc2lnbmVkDQogICAgICBwb3J0IHZhbHVlIDQzNDEuDQoNCiAgIFVEUCBDaGVj a3N1bTogIHRoaXMgZmllbGQgU0hPVUxEIGJlIHRyYW5zbWl0dGVkIGFzIHplcm8gYnkgYW4gSVRS IGZvcg0KICAgICAgZWl0aGVyIElQdjQgW1JGQzA3NjhdIG9yIElQdjYgZW5jYXBzdWxhdGlvbiBb VURQLVRVTk5FTFNdLiAgV2hlbiBhDQogICAgICBwYWNrZXQgd2l0aCBhIHplcm8gVURQIGNoZWNr c3VtIGlzIHJlY2VpdmVkIGJ5IGFuIEVUUiwgdGhlIEVUUg0KICAgICAgTVVTVCBhY2NlcHQgdGhl IHBhY2tldCBmb3IgZGVjYXBzdWxhdGlvbi4gIFdoZW4gYW4gSVRSIHRyYW5zbWl0cyBhDQogICAg ICBub24temVybyB2YWx1ZSBmb3IgdGhlIFVEUCBjaGVja3N1bSwgaXQgTVVTVCBzZW5kIGEgY29y cmVjdGx5DQogICAgICBjb21wdXRlZCB2YWx1ZSBpbiB0aGlzIGZpZWxkLiAgV2hlbiBhbiBFVFIg cmVjZWl2ZXMgYSBwYWNrZXQgd2l0aA0KICAgICAgYSBub24temVybyBVRFAgY2hlY2tzdW0sIGl0 IE1BWSBjaG9vc2UgdG8gdmVyaWZ5IHRoZSBjaGVja3N1bQ0KICAgICAgdmFsdWUuICBJZiBpdCBj aG9vc2VzIHRvIHBlcmZvcm0gc3VjaCB2ZXJpZmljYXRpb24sIGFuZCB0aGUNCiAgICAgIHZlcmlm aWNhdGlvbiBmYWlscywgdGhlIHBhY2tldCBNVVNUIGJlIHNpbGVudGx5IGRyb3BwZWQuICBJZiB0 aGUNCiAgICAgIEVUUiBjaG9vc2VzIG5vdCB0byBwZXJmb3JtIHRoZSB2ZXJpZmljYXRpb24sIG9y IHBlcmZvcm1zIHRoZQ0KICAgICAgdmVyaWZpY2F0aW9uIHN1Y2Nlc3NmdWxseSwgdGhlIHBhY2tl dCBNVVNUIGJlIGFjY2VwdGVkIGZvcg0KICAgICAgZGVjYXBzdWxhdGlvbi4gIFRoZSBoYW5kbGlu ZyBvZiBVRFAgY2hlY2tzdW1zIGZvciBhbGwgdHVubmVsaW5nDQogICAgICBwcm90b2NvbHMsIGlu Y2x1ZGluZyBMSVNQLCBpcyB1bmRlciBhY3RpdmUgZGlzY3Vzc2lvbiB3aXRoaW4gdGhlDQogICAg ICBJRVRGLiAgV2hlbiB0aGF0IGRpc2N1c3Npb24gY29uY2x1ZGVzLCBhbnkgbmVjZXNzYXJ5IGNo YW5nZXMgd2lsbA0KICAgICAgYmUgbWFkZSB0byBhbGlnbiBMSVNQIHdpdGggdGhlIG91dGNvbWUg b2YgdGhlIGJyb2FkZXIgZGlzY3Vzc2lvbi4NCg0KICAgVURQIExlbmd0aDogIGZvciBhbiBJUHY0 IGVuY2Fwc3VsYXRlZCBwYWNrZXQsIHRoZSBpbm5lciBoZWFkZXIgVG90YWwNCiAgICAgIExlbmd0 aCBwbHVzIHRoZSBVRFAgYW5kIExJU1AgaGVhZGVyIGxlbmd0aHMgYXJlIHVzZWQuICBGb3IgYW4g SVB2Ng0KICAgICAgZW5jYXBzdWxhdGVkIHBhY2tldCwgdGhlIGlubmVyIGhlYWRlciBQYXlsb2Fk IExlbmd0aCBwbHVzIHRoZSBzaXplDQogICAgICBvZiB0aGUgSVB2NiBoZWFkZXIgKDQwIGJ5dGVz KSBwbHVzIHRoZSBzaXplIG9mIHRoZSBVRFAgYW5kIExJU1ANCiAgICAgIGhlYWRlcnMgYXJlIHVz ZWQuICBUaGUgVURQIGhlYWRlciBsZW5ndGggaXMgOCBieXRlcy4NCg0KICAgTjogdGhpcyBpcyB0 aGUgbm9uY2UtcHJlc2VudCBiaXQuICBXaGVuIHRoaXMgYml0IGlzIHNldCB0byAxLCB0aGUNCiAg ICAgIGxvdy1vcmRlciAyNC1iaXRzIG9mIHRoZSBmaXJzdCAzMi1iaXRzIG9mIHRoZSBMSVNQIGhl YWRlciBjb250YWlucw0KICAgICAgYSBOb25jZS4gIFNlZSBzZWN0aW9uIFNlY3Rpb24gNi4zLjEg Zm9yIGRldGFpbHMuDQoNCiAgIEw6IHRoaXMgaXMgdGhlIExvY2F0b3ItU3RhdHVzLUJpdHMgZmll bGQgZW5hYmxlZCBiaXQuICBXaGVuIHRoaXMgYml0DQogICAgICBpcyBzZXQgdG8gMSwgdGhlIExv Y2F0b3ItU3RhdHVzLUJpdHMgaW4gdGhlIHNlY29uZCAzMi1iaXRzIG9mIHRoZQ0KICAgICAgTElT UCBoZWFkZXIgYXJlIGluIHVzZS4NCg0KICAgRTogdGhpcyBpcyB0aGUgZWNoby1ub25jZS1yZXF1 ZXN0IGJpdC4gIFdoZW4gdGhpcyBiaXQgaXMgc2V0IHRvIDEsDQogICAgICB0aGUgTiBiaXQgbXVz dCBiZSAxLiAgVGhpcyBiaXQgc2hvdWxkIGJlIGlnbm9yZWQgYW5kIGhhcyBubw0KICAgICAgbWVh bmluZyB3aGVuIHRoZSBOIGJpdCBpcyBzZXQgdG8gMC4gIFNlZSBzZWN0aW9uIFNlY3Rpb24gNi4z LjEgZm9yDQogICAgICBkZXRhaWxzLg0KDQogICByZmxhZ3M6ICB0aGlzIDxTVFJJS0U+PEZPTlQg Y29sb3I9InJlZCI+NC1iaXQ8L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+PEZPTlQgY29sb3I9Imdy ZWVuIj41LWJpdDwvRk9OVD48L1NUUk9ORz4gZmllbGQgaXMgcmVzZXJ2ZWQgZm9yIGZ1dHVyZSBm bGFnIHVzZS4gIEl0IGlzIHNldA0KICAgICAgdG8gMCBvbiB0cmFuc21pdCBhbmQgaWdub3JlZCBv biByZWNlaXB0Lg0KDQogICBMSVNQIE5vbmNlOiAgaXMgYSAyNC1iaXQgdmFsdWUgdGhhdCBpcyBy YW5kb21seSBnZW5lcmF0ZWQgYnkgYW4gSVRSDQogICAgICB3aGVuIHRoZSBOLWJpdCBpcyBzZXQg dG8gMS4gIFRoZSBub25jZSBpcyBhbHNvIHVzZWQgd2hlbiB0aGUgRS1iaXQNCiAgICAgIGlzIHNl dCB0byByZXF1ZXN0IHRoZSBub25jZSB2YWx1ZSB0byBiZSBlY2hvZWQgYnkgdGhlIG90aGVyIHNp ZGUNCiAgICAgIHdoZW4gcGFja2V0cyBhcmUgcmV0dXJuZWQuICBXaGVuIHRoZSBFLWJpdCBpcyBj bGVhciBidXQgdGhlIE4tYml0DQogICAgICBpcyBzZXQsIDxTVFJJS0U+PEZPTlQgY29sb3I9InJl ZCI+YW48L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+PEZPTlQgY29sb3I9ImdyZWVuIj5hIHJlbW90 ZTwvRk9OVD48L1NUUk9ORz4gSVRSIGlzIGVpdGhlciBlY2hvaW5nIGEgcHJldmlvdXNseSByZXF1 ZXN0ZWQNCiAgICAgIGVjaG8tbm9uY2Ugb3IgcHJvdmlkaW5nIGEgcmFuZG9tIG5vbmNlLiAgU2Vl IHNlY3Rpb24gU2VjdGlvbiA2LjMuMQ0KICAgICAgZm9yIG1vcmUgZGV0YWlscy4NCg0KICAgTElT UCBMb2NhdG9yIFN0YXR1cyBCaXRzOiAgaW4gdGhlIExJU1AgaGVhZGVyIGFyZSBzZXQgYnkgYW4g SVRSIHRvDQogICAgICBpbmRpY2F0ZSB0byBhbiBFVFIgdGhlIHVwL2Rvd24gc3RhdHVzIG9mIHRo ZSBMb2NhdG9ycyBpbiB0aGUNCiAgICAgIHNvdXJjZSBzaXRlLiAgRWFjaCBSTE9DIGluIGEgTWFw LVJlcGx5IGlzIGFzc2lnbmVkIGFuIG9yZGluYWwNCiAgICAgIHZhbHVlIGZyb20gMCB0byBuLTEg KHdoZW4gdGhlcmUgYXJlIG4gUkxPQ3MgaW4gYSBtYXBwaW5nIGVudHJ5KS4NCiAgICAgIFRoZSBM b2NhdG9yIFN0YXR1cyBCaXRzIGFyZSBudW1iZXJlZCBmcm9tIDAgdG8gbi0xIGZyb20gdGhlIGxl YXN0DQogICAgICBzaWduaWZpY2FudCBiaXQgb2YgdGhlIDMyLWJpdCBmaWVsZC4gIFdoZW4gYSBi aXQgaXMgc2V0IHRvIDEsIHRoZQ0KICAgICAgSVRSIGlzIGluZGljYXRpbmcgdG8gdGhlIEVUUiB0 aGUgUkxPQyBhc3NvY2lhdGVkIHdpdGggdGhlIGJpdA0KICAgICAgb3JkaW5hbCBoYXMgdXAgc3Rh dHVzLiAgU2VlIFNlY3Rpb24gNi4zIGZvciBkZXRhaWxzIG9uIGhvdyBhbiBJVFINCiAgICAgIGNh biBkZXRlcm1pbmUgb3RoZXIgSVRScyBhdCB0aGUgc2l0ZSBhcmUgcmVhY2hhYmxlLiAgV2hlbiBh IHNpdGUNCiAgICAgIGhhcyBtdWx0aXBsZSBFSUQtcHJlZml4ZXMgd2hpY2ggcmVzdWx0IGluIG11 bHRpcGxlIG1hcHBpbmdzICh3aGVyZQ0KICAgICAgZWFjaCBjb3VsZCBoYXZlIGEgZGlmZmVyZW50 IGxvY2F0b3Itc2V0KSwgdGhlIExvY2F0b3IgU3RhdHVzIEJpdHMNCiAgICAgIHNldHRpbmcgaW4g YW4gZW5jYXBzdWxhdGVkIHBhY2tldCBNVVNUIHJlZmxlY3QgdGhlIG1hcHBpbmcgZm9yIHRoZQ0K ICAgICAgRUlELXByZWZpeCB0aGF0IHRoZSBpbm5lci1oZWFkZXIgc291cmNlIEVJRCBhZGRyZXNz IG1hdGNoZXMuDQoNCiAgIFdoZW4gZG9pbmcgUmVjdXJzaXZlIFR1bm5lbGluZyBvciBJVFIvUFRS IGVuY2Fwc3VsYXRpb246DQoNCiAgIG8gIFRoZSBvdXRlciBoZWFkZXIgVGltZSB0byBMaXZlIGZp ZWxkIChvciBIb3AgTGltaXQgZmllbGQsIGluIGNhc2UNCiAgICAgIG9mIElQdjYpIFNIT1VMRCBi ZSBjb3BpZWQgZnJvbSB0aGUgaW5uZXIgaGVhZGVyIFRpbWUgdG8gTGl2ZQ0KICAgICAgZmllbGQu DQoNCiAgIG8gIFRoZSBvdXRlciBoZWFkZXIgVHlwZSBvZiBTZXJ2aWNlIGZpZWxkIChvciB0aGUg VHJhZmZpYyBDbGFzcw0KICAgICAgZmllbGQsIGluIHRoZSBjYXNlIG9mIElQdjYpIFNIT1VMRCBi ZSBjb3BpZWQgZnJvbSB0aGUgaW5uZXIgaGVhZGVyDQogICAgICBUeXBlIG9mIFNlcnZpY2UgZmll bGQgKHdpdGggb25lIGNhdmVhdCwgc2VlIGJlbG93KS4NCg0KICAgV2hlbiBkb2luZyBSZS1lbmNh cHN1bGF0ZWQgVHVubmVsaW5nOg0KDQogICBvICBUaGUgbmV3IG91dGVyIGhlYWRlciBUaW1lIHRv IExpdmUgZmllbGQgU0hPVUxEIGJlIGNvcGllZCBmcm9tIHRoZQ0KICAgICAgc3RyaXBwZWQgb3V0 ZXIgaGVhZGVyIFRpbWUgdG8gTGl2ZSBmaWVsZC4NCg0KICAgbyAgVGhlIG5ldyBvdXRlciBoZWFk ZXIgVHlwZSBvZiBTZXJ2aWNlIGZpZWxkIFNIT1VMRCBiZSBjb3BpZWQgZnJvbQ0KICAgICAgdGhl IHN0cmlwcGVkIE9IIGhlYWRlciBUeXBlIG9mIFNlcnZpY2UgZmllbGQgKHdpdGggb25lIGNhdmVh dCwgc2VlDQogICAgICBiZWxvdykuDQoNCiAgIENvcHlpbmcgdGhlIFRUTCBzZXJ2ZXMgdHdvIHB1 cnBvc2VzOiBmaXJzdCwgaXQgcHJlc2VydmVzIHRoZSBkaXN0YW5jZQ0KICAgdGhlIGhvc3QgaW50 ZW5kZWQgdGhlIHBhY2tldCB0byB0cmF2ZWw7IHNlY29uZCwgYW5kIG1vcmUgaW1wb3J0YW50bHks DQogICBpdCBwcm92aWRlcyBmb3Igc3VwcHJlc3Npb24gb2YgbG9vcGluZyBwYWNrZXRzIGluIHRo ZSBldmVudCB0aGVyZSBpcw0KICAgYSBsb29wIG9mIGNvbmNhdGVuYXRlZCB0dW5uZWxzIGR1ZSB0 byBtaXNjb25maWd1cmF0aW9uLg0KDQogICBUaGUgRUNOIGZpZWxkIG9jY3VwaWVzIGJpdHMgNiBh bmQgNyBvZiBib3RoIHRoZSBJUHY0IFR5cGUgb2YgU2VydmljZQ0KICAgZmllbGQgYW5kIHRoZSBJ UHY2IFRyYWZmaWMgQ2xhc3MgZmllbGQgW1JGQzMxNjhdLiAgVGhlIEVDTiBmaWVsZA0KICAgcmVx dWlyZXMgc3BlY2lhbCB0cmVhdG1lbnQgaW4gb3JkZXIgdG8gYXZvaWQgZGlzY2FyZGluZyBpbmRp Y2F0aW9ucw0KICAgb2YgY29uZ2VzdGlvbiBbUkZDMzE2OF0uICBJVFIgZW5jYXBzdWxhdGlvbiBN VVNUIGNvcHkgdGhlIDItYml0IEVDTg0KICAgZmllbGQgZnJvbSB0aGUgaW5uZXIgaGVhZGVyIHRv IHRoZSBvdXRlciBoZWFkZXIuICBSZS1lbmNhcHN1bGF0aW9uDQogICBNVVNUIGNvcHkgdGhlIDIt Yml0IEVDTiBmaWVsZCBmcm9tIHRoZSBzdHJpcHBlZCBvdXRlciBoZWFkZXIgdG8gdGhlDQogICBu ZXcgb3V0ZXIgaGVhZGVyLiAgSWYgdGhlIEVDTiBmaWVsZCBjb250YWlucyBhIGNvbmdlc3Rpb24g aW5kaWNhdGlvbg0KICAgY29kZXBvaW50ICh0aGUgdmFsdWUgaXMgJzExJywgdGhlIENvbmdlc3Rp b24gRXhwZXJpZW5jZWQgKENFKQ0KICAgY29kZXBvaW50KSwgdGhlbiBFVFIgZGVjYXBzdWxhdGlv biBNVVNUIGNvcHkgdGhlIDItYml0IEVDTiBmaWVsZCBmcm9tDQogICB0aGUgc3RyaXBwZWQgb3V0 ZXIgaGVhZGVyIHRvIHRoZSBzdXJ2aXZpbmcgaW5uZXIgaGVhZGVyIHRoYXQgaXMgdXNlZA0KICAg dG8gZm9yd2FyZCB0aGUgcGFja2V0IGJleW9uZCB0aGUgRVRSLiAgVGhlc2UgcmVxdWlyZW1lbnRz IHByZXNlcnZlDQogICBDb25nZXN0aW9uIEV4cGVyaWVuY2VkIChDRSkgaW5kaWNhdGlvbnMgd2hl biBhIHBhY2tldCB0aGF0IHVzZXMgRUNODQogICB0cmF2ZXJzZXMgYSBMSVNQIHR1bm5lbCBhbmQg YmVjb21lcyBtYXJrZWQgd2l0aCBhIENFIGluZGljYXRpb24gZHVlDQogICB0byBjb25nZXN0aW9u IGJldHdlZW4gdGhlIHR1bm5lbCBlbmRwb2ludHMuDQoNCjUuNC4gIERlYWxpbmcgd2l0aCBMYXJn ZSBFbmNhcHN1bGF0ZWQgUGFja2V0cw0KDQogICBJbiB0aGUgZXZlbnQgdGhhdCB0aGUgTVRVIGlz c3VlcyBtZW50aW9uZWQgYWJvdmUgcHJvdmUgdG8gYmUgbW9yZQ0KICAgc2VyaW91cyB0aGFuIGV4 cGVjdGVkLCB0aGlzIHNlY3Rpb24gcHJvcG9zZXMgMiBzaW1wbGUgbWVjaGFuaXNtcyB0bw0KICAg ZGVhbCB3aXRoIGxhcmdlIHBhY2tldHMuICBPbmUgaXMgc3RhdGVsZXNzIHVzaW5nIElQIGZyYWdt ZW50YXRpb24gYW5kDQogICB0aGUgb3RoZXIgaXMgc3RhdGVmdWwgdXNpbmcgUGF0aCBNVFUgRGlz Y292ZXJ5IFtSRkMxMTkxXS4NCg0KICAgSXQgaXMgbGVmdCB0byB0aGUgaW1wbGVtZW50b3IgdG8g ZGVjaWRlIGlmIHRoZSBzdGF0ZWxlc3Mgb3Igc3RhdGVmdWwNCiAgIG1lY2hhbmlzbSBzaG91bGQg YmUgaW1wbGVtZW50ZWQuICBCb3RoIG9yIG5laXRoZXIgY2FuIGJlIGRlY2lkZWQgYXMNCiAgIHdl bGwgc2luY2UgaXQgaXMgYSBsb2NhbCBkZWNpc2lvbiBpbiB0aGUgSVRSIHJlZ2FyZGluZyBob3cg dG8gZGVhbA0KICAgd2l0aCBNVFUgaXNzdWVzLiAgU2l0ZXMgY2FuIGludGVyb3BlcmF0ZSB3aXRo IGRpZmZlcmluZyBtZWNoYW5pc21zLg0KDQogICBCb3RoIHN0YXRlbGVzcyBhbmQgc3RhdGVmdWwg bWVjaGFuaXNtcyBhbHNvIGFwcGx5IHRvIFJlZW5jYXBzdWxhdGluZw0KICAgYW5kIFJlY3Vyc2l2 ZSBUdW5uZWxpbmcuICBTbyBhbnkgYWN0aW9ucyByZWZlcmVuY2UgYmVsb3cgdG8gYW4gSVRSDQog ICBhbHNvIGFwcGx5IHRvIGFuIFRFLUlUUi4NCg0KNS40LjEuICBBIFN0YXRlbGVzcyBTb2x1dGlv biB0byBNVFUgSGFuZGxpbmcNCg0KICAgQW4gSVRSIHN0YXRlbGVzcyBzb2x1dGlvbiB0byBoYW5k bGUgTVRVIGlzc3VlcyBpcyBkZXNjcmliZWQgYXMNCiAgIGZvbGxvd3M6DQoNCiAgIDEuICBEZWZp bmUgYW4gYXJjaGl0ZWN0dXJhbCBjb25zdGFudCBTIGZvciB0aGUgbWF4aW11bSBzaXplIG9mIGEN CiAgICAgICBwYWNrZXQsIGluIGJ5dGVzLCBhbiBJVFIgd291bGQgcmVjZWl2ZSBmcm9tIGEgc291 cmNlIGluc2lkZSBvZg0KICAgICAgIGl0cyBzaXRlLg0KDQogICAyLiAgRGVmaW5lIEwgdG8gYmUg dGhlIG1heGltdW0gc2l6ZSwgaW4gYnl0ZXMsIGEgcGFja2V0IG9mIHNpemUgUw0KICAgICAgIHdv dWxkIGJlIGFmdGVyIHRoZSBJVFIgcHJlcGVuZHMgdGhlIExJU1AgaGVhZGVyLCBVRFAgaGVhZGVy LCBhbmQNCiAgICAgICBvdXRlciBuZXR3b3JrIGxheWVyIGhlYWRlciBvZiBzaXplIEguDQoNCiAg IDMuICBDYWxjdWxhdGU6IFMgKyBIID0gTC4NCg0KICAgV2hlbiBhbiBJVFIgcmVjZWl2ZXMgYSBw YWNrZXQgZnJvbSBhIHNpdGUtZmFjaW5nIGludGVyZmFjZSBhbmQgYWRkcyBIDQogICBieXRlcyB3 b3J0aCBvZiBlbmNhcHN1bGF0aW9uIHRvIHlpZWxkIGEgcGFja2V0IHNpemUgPFNUUklLRT48Rk9O VCBjb2xvcj0icmVkIj5vZjwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3Jl ZW4iPmdyZWF0ZXIgdGhhbjwvRk9OVD48L1NUUk9ORz4gTA0KICAgYnl0ZXMsIGl0IHJlc29sdmVz IHRoZSBNVFUgaXNzdWUgYnkgZmlyc3Qgc3BsaXR0aW5nIHRoZSBvcmlnaW5hbA0KICAgcGFja2V0 IGludG8gMiBlcXVhbC1zaXplZCBmcmFnbWVudHMuICBBIExJU1AgaGVhZGVyIGlzIHRoZW4gcHJl cGVuZGVkDQogICB0byBlYWNoIGZyYWdtZW50LiAgVGhpcyB3aWxsIGVuc3VyZSB0aGF0IHRoZSBu ZXcsIGVuY2Fwc3VsYXRlZA0KICAgcGFja2V0cyBhcmUgb2Ygc2l6ZSAoUy8yICsgSCksIHdoaWNo IGlzIGFsd2F5cyBiZWxvdyB0aGUgZWZmZWN0aXZlDQogICB0dW5uZWwgTVRVLg0KDQogICBXaGVu IGFuIEVUUiByZWNlaXZlcyBlbmNhcHN1bGF0ZWQgZnJhZ21lbnRzLCBpdCB0cmVhdHMgdGhlbSBh cyB0d28NCiAgIGluZGl2aWR1YWxseSBlbmNhcHN1bGF0ZWQgcGFja2V0cy4gIEl0IHN0cmlwcyB0 aGUgTElTUCBoZWFkZXJzIHRoZW4NCiAgIGZvcndhcmRzIGVhY2ggZnJhZ21lbnQgdG8gdGhlIGRl c3RpbmF0aW9uIGhvc3Qgb2YgdGhlIGRlc3RpbmF0aW9uDQogICBzaXRlLiAgVGhlIHR3byBmcmFn bWVudHMgYXJlIHJlYXNzZW1ibGVkIGF0IHRoZSBkZXN0aW5hdGlvbiBob3N0IGludG8NCiAgIHRo ZSBzaW5nbGUgSVAgZGF0YWdyYW0gdGhhdCB3YXMgb3JpZ2luYXRlZCBieSB0aGUgc291cmNlIGhv c3QuDQoNCiAgIFRoaXMgYmVoYXZpb3IgaXMgcGVyZm9ybWVkIGJ5IHRoZSBJVFIgd2hlbiB0aGUg c291cmNlIGhvc3Qgb3JpZ2luYXRlcw0KICAgYSBwYWNrZXQgd2l0aCB0aGUgREYgZmllbGQgb2Yg dGhlIElQIGhlYWRlciBpcyBzZXQgdG8gMC4gIFdoZW4gdGhlIERGDQogICBmaWVsZCBvZiB0aGUg SVAgaGVhZGVyIGlzIHNldCB0byAxLCBvciB0aGUgcGFja2V0IGlzIGFuIElQdjYgcGFja2V0DQog ICBvcmlnaW5hdGVkIGJ5IHRoZSBzb3VyY2UgaG9zdCwgdGhlIElUUiB3aWxsIGRyb3AgdGhlIHBh Y2tldCB3aGVuIHRoZQ0KICAgc2l6ZSBpcyBncmVhdGVyIHRoYW4gTCwgYW5kIHNlbmRzIGFuIElD TVAgVG9vIEJpZyBtZXNzYWdlIHRvIHRoZQ0KICAgc291cmNlIHdpdGggYSB2YWx1ZSBvZiBTLCB3 aGVyZSBTIGlzIChMIC0gSCkuDQoNCiAgIFdoZW4gdGhlIG91dGVyIGhlYWRlciBlbmNhcHN1bGF0 aW9uIHVzZXMgYW4gSVB2NCA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPmhlYWRlcjwvRk9OVD48 L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPmhlYWRlciwgYW4NCiAgIGltcGxl bWVudGF0aW9uIHNob3VsZCBjb25zaWRlciB0aGUgY2hvaWNlIG9mIGRlZmF1bHQgc2V0dGluZzwv Rk9OVD48L1NUUk9ORz4gdGhlIERGDQogICBiaXQgPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj5p cw0KICAgYWx3YXlzIHNldDwvRk9OVD48L1NUUklLRT4gdG8gPFNUUklLRT48Rk9OVCBjb2xvcj0i cmVkIj4wLjwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPjEgc28g RVRSIHBhY2tldCBmcmFnbWVudCByZWFzc2VtYmx5IGNhbiBiZSBhdm9pZGVkLjwvRk9OVD48L1NU Uk9ORz4NCg0KICAgVGhpcyBzcGVjaWZpY2F0aW9uIHJlY29tbWVuZHMgdGhhdCBMIGJlIGRlZmlu ZWQgYXMgMTUwMC4NCg0KNS40LjIuICBBIFN0YXRlZnVsIFNvbHV0aW9uIHRvIE1UVSBIYW5kbGlu Zw0KDQogICBBbiBJVFIgc3RhdGVmdWwgc29sdXRpb24gdG8gaGFuZGxlIE1UVSBpc3N1ZXMgaXMg PFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj5kZXNjcmliZTwvRk9OVD48L1NUUklLRT4gPFNUUk9O Rz48Rk9OVCBjb2xvcj0iZ3JlZW4iPmRlc2NyaWJlZDwvRk9OVD48L1NUUk9ORz4gYXMgZm9sbG93 cw0KICAgYW5kIHdhcyBmaXJzdCBpbnRyb2R1Y2VkIGluIFtPUEVOTElTUF06DQoNCiAgIDEuICBU aGUgSVRSIHdpbGwga2VlcCBzdGF0ZSBvZiB0aGUgZWZmZWN0aXZlIE1UVSBmb3IgZWFjaCBsb2Nh dG9yIHBlcg0KICAgICAgIG1hcHBpbmcgY2FjaGUgZW50cnkuICBUaGUgZWZmZWN0aXZlIE1UVSBp cyB3aGF0IHRoZSBjb3JlIG5ldHdvcmsNCiAgICAgICBjYW4gZGVsaXZlciBhbG9uZyB0aGUgcGF0 aCBiZXR3ZWVuIElUUiBhbmQgRVRSLg0KDQogICAyLiAgV2hlbiBhbiBJUHY2IGVuY2Fwc3VsYXRl ZCBwYWNrZXQgb3IgYW4gSVB2NCBlbmNhcHN1bGF0ZWQgcGFja2V0DQogICAgICAgd2l0aCBERiBi aXQgc2V0IHRvIDEsIGV4Y2VlZHMgd2hhdCB0aGUgY29yZSBuZXR3b3JrIGNhbiBkZWxpdmVyLA0K ICAgICAgIG9uZSBvZiB0aGUgaW50ZXJtZWRpYXRlIHJvdXRlcnMgb24gdGhlIHBhdGggd2lsbCBz ZW5kIGFuIElDTVAgVG9vDQogICAgICAgQmlnIG1lc3NhZ2UgdG8gdGhlIElUUi4gIFRoZSBJVFIg d2lsbCBwYXJzZSB0aGUgSUNNUCBtZXNzYWdlIHRvDQogICAgICAgZGV0ZXJtaW5lIHdoaWNoIGxv Y2F0b3IgaXMgYWZmZWN0ZWQgYnkgdGhlIGVmZmVjdGl2ZSBNVFUgY2hhbmdlDQogICAgICAgYW5k IHRoZW4gcmVjb3JkIHRoZSBuZXcgZWZmZWN0aXZlIE1UVSB2YWx1ZSBpbiB0aGUgbWFwcGluZyBj YWNoZQ0KICAgICAgIGVudHJ5Lg0KDQogICAzLiAgV2hlbiBhIHBhY2tldCBpcyByZWNlaXZlZCBi eSB0aGUgSVRSIGZyb20gYSBzb3VyY2UgaW5zaWRlIG9mIHRoZQ0KICAgICAgIHNpdGUgYW5kIHRo ZSBzaXplIG9mIHRoZSBwYWNrZXQgaXMgZ3JlYXRlciB0aGFuIHRoZSBlZmZlY3RpdmUgTVRVDQog ICAgICAgc3RvcmVkIHdpdGggdGhlIG1hcHBpbmcgY2FjaGUgZW50cnkgYXNzb2NpYXRlZCB3aXRo IHRoZQ0KICAgICAgIGRlc3RpbmF0aW9uIEVJRCB0aGUgcGFja2V0IGlzIGZvciwgdGhlIElUUiB3 aWxsIHNlbmQgYW4gSUNNUCBUb28NCiAgICAgICBCaWcgbWVzc2FnZSBiYWNrIHRvIHRoZSBzb3Vy Y2UuICBUaGUgcGFja2V0IHNpemUgYWR2ZXJ0aXNlZCBieQ0KICAgICAgIHRoZSBJVFIgaW4gdGhl IElDTVAgVG9vIEJpZyBtZXNzYWdlIGlzIHRoZSBlZmZlY3RpdmUgTVRVIG1pbnVzDQogICAgICAg dGhlIExJU1AgZW5jYXBzdWxhdGlvbiBsZW5ndGguDQoNCiAgIEV2ZW4gdGhvdWdoIHRoaXMgbWVj aGFuaXNtIGlzIHN0YXRlZnVsLCBpdCBoYXMgYWR2YW50YWdlcyBvdmVyIHRoZQ0KICAgc3RhdGVs ZXNzIElQIGZyYWdtZW50YXRpb24gbWVjaGFuaXNtLCBieSBub3QgaW52b2x2aW5nIHRoZQ0KICAg ZGVzdGluYXRpb24gaG9zdCB3aXRoIHJlYXNzZW1ibHkgb2YgSVRSIGZyYWdtZW50ZWQgcGFja2V0 cy4NCg0KNi4gIEVJRC10by1STE9DIE1hcHBpbmcNCg0KNi4xLiAgTElTUCBJUHY0IGFuZCBJUHY2 IENvbnRyb2wgUGxhbmUgUGFja2V0IEZvcm1hdHMNCg0KICAgVGhlIGZvbGxvd2luZyBuZXcgVURQ IHBhY2tldCB0eXBlcyBhcmUgdXNlZCB0byByZXRyaWV2ZSBFSUQtdG8tUkxPQw0KICAgbWFwcGlu Z3M6DQoNCiAgICAgICAwICAgICAgICAgICAgICAgICAgIDEgICAgICAgICAgICAgICAgICAgMiAg ICAgICAgICAgICAgICAgICAzDQogICAgICAgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQg NSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxDQogICAgICAgKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAg ICB8VmVyc2lvbnwgIElITCAgfFR5cGUgb2YgU2VydmljZXwgICAgICAgICAgVG90YWwgTGVuZ3Ro ICAgICAgICAgfA0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgICAgfCAgICAgICAgIElkZW50aWZpY2F0 aW9uICAgICAgICB8RmxhZ3N8ICAgICAgRnJhZ21lbnQgT2Zmc2V0ICAgIHwNCiAgICAgICArLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKw0KICAgICAgIHwgIFRpbWUgdG8gTGl2ZSB8IFByb3RvY29sID0gMTcgfCAgICAgICAgIEhl YWRlciBDaGVja3N1bSAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgICB8ICAgICAgICAg ICAgICAgICAgICBTb3VyY2UgUm91dGluZyBMb2NhdG9yICAgICAgICAgICAgICAgICAgICAgfA0K ICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rDQogICAgICAgfCAgICAgICAgICAgICAgICAgRGVzdGluYXRpb24gUm91 dGluZyBMb2NhdG9yICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICArLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICAv IHwgICAgICAgICAgIFNvdXJjZSBQb3J0ICAgICAgICAgfCAgICAgICAgIERlc3QgUG9ydCAgICAg ICAgICAgICB8DQogICBVRFAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgXCB8ICAgICAgICAgICBVRFAgTGVuZ3Ro ICAgICAgICAgIHwgICAgICAgIFVEUCBDaGVja3N1bSAgICAgICAgICAgfA0KICAgICAgICstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rDQogICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgIExJ U1AgTWVzc2FnZSAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgIHwgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQog ICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSsNCg0KICAgICAgICAwICAgICAgICAgICAgICAgICAgIDEgICAgICAgICAg ICAgICAgICAgMiAgICAgICAgICAgICAgICAgICAzDQogICAgICAgIDAgMSAyIDMgNCA1IDYgNyA4 IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMQ0KICAgICAgICst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rDQogICAgICAgfFZlcnNpb258IFRyYWZmaWMgQ2xhc3MgfCAgICAgICAgICAgRmxvdyBM YWJlbCAgICAgICAgICAgICAgICAgIHwNCiAgICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICAgIHwgICAgICAg ICBQYXlsb2FkIExlbmd0aCAgICAgICAgfCBOZXh0IEhlYWRlcj0xN3wgICBIb3AgTGltaXQgICB8 DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSsNCiAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICsgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICArDQogICAg ICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIHwNCiAgICAgICArICAgICAgICAgICAgICAgICAgICAgU291cmNlIFJvdXRpbmcg TG9jYXRvciAgICAgICAgICAgICAgICAgICAgKw0KICAgICAgIHwgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICAgICAgKyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICsNCiAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgICAgfCAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwN CiAgICAgICArICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgKw0KICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICAgICAgKyAgICAgICAgICAgICAg ICAgIERlc3RpbmF0aW9uIFJvdXRpbmcgTG9jYXRvciAgICAgICAgICAgICAgICAgICsNCiAgICAg ICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgfA0KICAgICAgICsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICArDQogICAgICAgfCAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICArLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKw0KICAgICAvIHwgICAgICAgICAgIFNvdXJjZSBQb3J0ICAgICAgICAgfCAgICAgICAgIERl c3QgUG9ydCAgICAgICAgICAgICB8DQogICBVRFAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgXCB8ICAgICAgICAg ICBVRFAgTGVuZ3RoICAgICAgICAgIHwgICAgICAgIFVEUCBDaGVja3N1bSAgICAgICAgICAgfA0K ICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rDQogICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICB8ICAgICAgICAgICAgICAg ICAgICAgICAgIExJU1AgTWVzc2FnZSAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAg IHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCg0KICAgVGhlIExJU1AgVURQLWJhc2VkIG1lc3Nh Z2VzIGFyZSB0aGUgTWFwLVJlcXVlc3QgYW5kIE1hcC1SZXBseQ0KICAgbWVzc2FnZXMuICBXaGVu IGEgVURQIE1hcC1SZXF1ZXN0IGlzIHNlbnQsIHRoZSBVRFAgc291cmNlIHBvcnQgaXMNCiAgIGNo b3NlbiBieSB0aGUgc2VuZGVyIGFuZCB0aGUgZGVzdGluYXRpb24gVURQIHBvcnQgbnVtYmVyIGlz IHNldCB0bw0KICAgNDM0Mi4gIFdoZW4gYSBVRFAgTWFwLVJlcGx5IGlzIHNlbnQsIHRoZSBzb3Vy Y2UgVURQIHBvcnQgbnVtYmVyIGlzDQogICBzZXQgdG8gNDM0MiBhbmQgdGhlIGRlc3RpbmF0aW9u IFVEUCBwb3J0IG51bWJlciBpcyBjb3BpZWQgZnJvbSB0aGUNCiAgIHNvdXJjZSBwb3J0IG9mIGVp dGhlciB0aGUgTWFwLVJlcXVlc3Qgb3IgdGhlIGludm9raW5nIGRhdGEgcGFja2V0Lg0KDQogICBU aGUgVURQIExlbmd0aCBmaWVsZCB3aWxsIHJlZmxlY3QgdGhlIGxlbmd0aCBvZiB0aGUgVURQIGhl YWRlciBhbmQNCiAgIHRoZSBMSVNQIE1lc3NhZ2UgcGF5bG9hZC4NCg0KICAgVGhlIFVEUCBDaGVj a3N1bSBpcyBjb21wdXRlZCBhbmQgc2V0IHRvIG5vbi16ZXJvIGZvciA8U1RSSUtFPjxGT05UIGNv bG9yPSJyZWQiPk1hcC1SZXF1ZXN0PC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9y PSJncmVlbiI+TWFwLVJlcXVlc3QsDQogICBNYXAtUmVwbHksIE1hcC1SZWdpc3RlcjwvRk9OVD48 L1NUUk9ORz4gYW5kDQogICA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPk1hcC1SZXBseTwvRk9O VD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPkVDTSBjb250cm9sPC9GT05U PjwvU1RST05HPiBtZXNzYWdlcy4gIEl0IE1VU1QgYmUgY2hlY2tlZA0KICAgb24gcmVjZWlwdCBh bmQgaWYgdGhlIGNoZWNrc3VtIGZhaWxzLCB0aGUgcGFja2V0IE1VU1QgYmUgZHJvcHBlZC4NCg0K ICAgTElTUC1DT05TIFtDT05TXSB1c2UgVENQIHRvIHNlbmQgTElTUCBjb250cm9sIG1lc3NhZ2Vz LiAgVGhlIGZvcm1hdA0KICAgb2YgY29udHJvbCBtZXNzYWdlcyBpbmNsdWRlcyB0aGUgVURQIGhl YWRlciBzbyB0aGUgY2hlY2tzdW0gYW5kDQogICBsZW5ndGggZmllbGRzIGNhbiBiZSB1c2VkIHRv IHByb3RlY3QgYW5kIGRlbGltaXQgbWVzc2FnZSBib3VuZGFyaWVzLg0KDQogICBUaGlzIG1haW4g TElTUCBzcGVjaWZpY2F0aW9uIGlzIHRoZSBhdXRob3JpdGF0aXZlIHNvdXJjZSBmb3IgbWVzc2Fn ZQ0KICAgZm9ybWF0IGRlZmluaXRpb25zIGZvciB0aGUgTWFwLVJlcXVlc3QgYW5kIE1hcC1SZXBs eSBtZXNzYWdlcy4NCg0KNi4xLjEuICBMSVNQIFBhY2tldCBUeXBlIEFsbG9jYXRpb25zDQoNCiAg IFRoaXMgc2VjdGlvbiB3aWxsIGJlIHRoZSBhdXRob3JpdGF0aXZlIHNvdXJjZSBmb3IgYWxsb2Nh dGluZyBMSVNQDQogICBUeXBlIHZhbHVlcy4gIEN1cnJlbnQgYWxsb2NhdGlvbnMgYXJlOg0KDQog ICAgICAgUmVzZXJ2ZWQ6ICAgICAgICAgICAgICAgICAgICAgICAgICAwICAgIGInMDAwMCcNCiAg ICAgICBMSVNQIE1hcC1SZXF1ZXN0OiAgICAgICAgICAgICAgICAgIDEgICAgYicwMDAxJw0KICAg ICAgIExJU1AgTWFwLVJlcGx5OiAgICAgICAgICAgICAgICAgICAgMiAgICBiJzAwMTAnDQogICAg ICAgTElTUCBNYXAtUmVnaXN0ZXI6ICAgICAgICAgICAgICAgICAzICAgIGInMDAxMScNCiAgICAg ICBMSVNQIEVuY2Fwc3VsYXRlZCBDb250cm9sIE1lc3NhZ2U6IDggICAgYicxMDAwJw0KDQo2LjEu Mi4gIE1hcC1SZXF1ZXN0IE1lc3NhZ2UgRm9ybWF0DQoNCiAgICAgICAgMCAgICAgICAgICAgICAg ICAgICAxICAgICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAgICAgMw0KICAgICAgICAw IDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDgg OSAwIDENCiAgICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICAgIHxUeXBlPTEgfEF8TXxQfFN8ICAgICAgICAg ICBSZXNlcnZlZCAgICAgICAgICAgIHwgUmVjb3JkIENvdW50ICB8DQogICAgICAgKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsN CiAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgIE5vbmNlIC4gLiAuICAgICAgICAgICAg ICAgICAgICAgICAgICAgfA0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgICAgfCAgICAgICAgICAgICAg ICAgICAgICAgICAuIC4gLiBOb25jZSAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAg ICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKw0KICAgICAgIHwgICAgICAgICBTb3VyY2UtRUlELUFGSSAgICAgICAgfCAgICAg ICAgICAgIElUUi1BRkkgICAgICAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgICB8ICAg ICAgICAgICAgICAgICAgIFNvdXJjZSBFSUQgQWRkcmVzcyAgLi4uICAgICAgICAgICAgICAgICAg ICAgfA0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rDQogICAgICAgfCAgICAgICAgICAgICAgICBPcmlnaW5hdGlu ZyBJVFIgUkxPQyBBZGRyZXNzIC4uLiAgICAgICAgICAgICAgIHwNCiAgICAgICArLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0K ICAgICAvIHwgICBSZXNlcnZlZCAgICB8IEVJRCBtYXNrLWxlbiAgfCAgICAgICAgRUlELXByZWZp eC1BRkkgICAgICAgICB8DQogICBSZWMgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgXCB8ICAgICAgICAgICAgICAg ICAgICAgICBFSUQtcHJlZml4ICAuLi4gICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAg ICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rDQogICAgICAgfCAgICAgICAgICAgICAgICAgICBNYXAtUmVwbHkgUmVjb3JkICAu Li4gICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICArLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICAgIHwgICAg ICAgICAgICAgICAgICAgICBNYXBwaW5nIFByb3RvY29sIERhdGEgICAgICAgICAgICAgICAgICAg ICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSsNCg0KICAgUGFja2V0IGZpZWxkIGRlc2NyaXB0aW9uczoNCg0K ICAgVHlwZTogICAxIChNYXAtUmVxdWVzdCkNCg0KICAgQTogVGhpcyBpcyBhbiBhdXRob3JpdGF0 aXZlIGJpdCwgd2hpY2ggaXMgc2V0IHRvIDAgZm9yIFVEUC1iYXNlZCBNYXAtDQogICAgICBSZXF1 ZXN0cyBzZW50IGJ5IGFuIElUUi4NCg0KICAgTTogV2hlbiBzZXQsIGl0IGluZGljYXRlcyBhIE1h cC1SZXBseSBSZWNvcmQgc2VnbWVudCBpcyBpbmNsdWRlZCBpbg0KICAgICAgdGhlIE1hcC1SZXF1 ZXN0Lg0KDQogICBQOiBJbmRpY2F0ZXMgdGhhdCBhIE1hcC1SZXF1ZXN0IHNob3VsZCBiZSB0cmVh dGVkIGFzIGEgInBpZ2d5YmFjayINCiAgICAgIGxvY2F0b3IgcmVhY2hhYmlsaXR5IHByb2JlLiAg VGhlIHJlY2VpdmVyIHNob3VsZCByZXNwb25kIHdpdGggYQ0KICAgICAgTWFwLVJlcGx5IHdpdGgg dGhlIFAgYml0IHNldCBhbmQgdGhlIG5vbmNlIGNvcGllZCBmcm9tIHRoZSBNYXAtDQogICAgICBS ZXF1ZXN0LiAgU2VlIHNlY3Rpb24gU2VjdGlvbiA2LjMuMiBmb3IgbW9yZSBkZXRhaWxzLg0KDQog ICBTOiBUaGlzIGlzIHRoZSBTTVIgYml0LiAgU2VlIFNlY3Rpb24gNi41LjIgZm9yIGRldGFpbHMu DQoNCiAgIFJlc2VydmVkOiAgU2V0IHRvIDAgb24gdHJhbnNtaXNzaW9uIGFuZCBpZ25vcmVkIG9u IHJlY2VpcHQuDQoNCiAgIFJlY29yZCBDb3VudDogIFRoZSBudW1iZXIgb2YgcmVjb3JkcyBpbiB0 aGlzIE1hcC1SZXF1ZXN0IG1lc3NhZ2UuICBBDQogICAgICByZWNvcmQgaXMgY29tcHJpc2VkIG9m IHRoZSBwb3J0aW9uIG9mIHRoZSBwYWNrZXQgdGhhdCBpcyBsYWJlbGVkDQogICAgICAnUmVjJyBh Ym92ZSBhbmQgb2NjdXJzIHRoZSBudW1iZXIgb2YgdGltZXMgZXF1YWwgdG8gUmVjb3JkIENvdW50 Lg0KICAgICAgRm9yIHRoaXMgdmVyc2lvbiBvZiB0aGUgcHJvdG9jb2wsIGEgcmVjZWl2ZXIgTVVT VCBhY2NlcHQgYW5kDQogICAgICBwcm9jZXNzIE1hcC1SZXF1ZXN0cyB0aGF0IGNvbnRhaW4gb25l IG9yIG1vcmUgcmVjb3JkcywgYnV0IGENCiAgICAgIHNlbmRlciBNVVNUIG9ubHkgc2VuZCBNYXAt UmVxdWVzdHMgY29udGFpbmluZyBvbmUgcmVjb3JkLiAgU3VwcG9ydA0KICAgICAgZm9yIHJlcXVl c3RpbmcgbXVsdGlwbGUgRUlEcyBpbiBhIHNpbmdsZSBNYXAtUmVxdWVzdCBtZXNzYWdlIHdpbGwN CiAgICAgIGJlIHNwZWNpZmllZCBpbiBhIGZ1dHVyZSB2ZXJzaW9uIG9mIHRoZSBwcm90b2NvbC4N Cg0KICAgTm9uY2U6ICBBbiA4LWJ5dGUgcmFuZG9tIHZhbHVlIGNyZWF0ZWQgYnkgdGhlIHNlbmRl ciBvZiB0aGUgTWFwLQ0KICAgICAgUmVxdWVzdC4gIFRoaXMgbm9uY2Ugd2lsbCBiZSByZXR1cm5l ZCBpbiB0aGUgTWFwLVJlcGx5LiAgVGhlDQogICAgICBzZWN1cml0eSBvZiB0aGUgTElTUCBtYXBw aW5nIHByb3RvY29sIGRlcGVuZHMgY3JpdGljYWxseSBvbiB0aGUNCiAgICAgIHN0cmVuZ3RoIG9m IHRoZSBub25jZSBpbiB0aGUgTWFwLVJlcXVlc3QgbWVzc2FnZS4gIFRoZSBub25jZQ0KICAgICAg U0hPVUxEIGJlIGdlbmVyYXRlZCBieSBhIHByb3Blcmx5IHNlZWRlZCBwc2V1ZG8tcmFuZG9tIChv ciBzdHJvbmcNCiAgICAgIHJhbmRvbSkgc291cmNlLiAgU2VlIFtSRkM0MDg2XSBmb3IgYWR2aWNl IG9uIGdlbmVyYXRpbmcgc2VjdXJpdHktDQogICAgICBzZW5zaXRpdmUgcmFuZG9tIGRhdGEuDQoN CiAgIFNvdXJjZS1FSUQtQUZJOiAgQWRkcmVzcyBmYW1pbHkgb2YgdGhlICJTb3VyY2UgRUlEIEFk ZHJlc3MiIGZpZWxkLg0KDQogICBJVFItQUZJOiAgQWRkcmVzcyBmYW1pbHkgb2YgdGhlICJPcmln aW5hdGluZyBJVFIgUkxPQyBBZGRyZXNzIiBmaWVsZC4NCg0KICAgU291cmNlIEVJRCBBZGRyZXNz OiAgVGhpcyBpcyB0aGUgRUlEIG9mIHRoZSBzb3VyY2UgaG9zdCB3aGljaA0KICAgICAgb3JpZ2lu YXRlZCB0aGUgcGFja2V0IHdoaWNoIGlzIGludm9raW5nIHRoaXMgTWFwLVJlcXVlc3QuICBXaGVu DQogICAgICBNYXAtUmVxdWVzdHMgYXJlIHVzZWQgZm9yIHJlZnJlc2hpbmcgYSBtYXAtY2FjaGUg ZW50cnkgb3IgZm9yDQogICAgICBSTE9DLXByb2JpbmcsIHRoZSB2YWx1ZSAwIGlzIHVzZWQuDQoN CiAgIE9yaWdpbmF0aW5nIElUUiBSTE9DIEFkZHJlc3M6ICBVc2VkIHRvIGdpdmUgdGhlIEVUUiB0 aGUgb3B0aW9uIG9mDQogICAgICByZXR1cm5pbmcgYSBNYXAtUmVwbHkgaW4gdGhlIGFkZHJlc3Mt ZmFtaWx5IG9mIHRoaXMgbG9jYXRvci4NCg0KICAgRUlEIG1hc2stbGVuOiAgTWFzayBsZW5ndGgg Zm9yIEVJRCBwcmVmaXguDQoNCiAgIEVJRC1BRkk6ICBBZGRyZXNzIGZhbWlseSBvZiBFSUQtcHJl Zml4IGFjY29yZGluZyB0byBbUkZDMjQzNF0NCg0KICAgRUlELXByZWZpeDogIDQgYnl0ZXMgaWYg YW4gSVB2NCBhZGRyZXNzLWZhbWlseSwgMTYgYnl0ZXMgaWYgYW4gSVB2Ng0KICAgICAgYWRkcmVz cy1mYW1pbHkuICBXaGVuIGEgTWFwLVJlcXVlc3QgaXMgc2VudCBieSBhbiBJVFIgYmVjYXVzZSBh DQogICAgICBkYXRhIHBhY2tldCBpcyByZWNlaXZlZCBmb3IgYSBkZXN0aW5hdGlvbiB3aGVyZSB0 aGVyZSBpcyBubw0KICAgICAgbWFwcGluZyBlbnRyeSwgdGhlIEVJRC1wcmVmaXggaXMgc2V0IHRv IHRoZSBkZXN0aW5hdGlvbiBJUCBhZGRyZXNzDQogICAgICBvZiB0aGUgZGF0YSBwYWNrZXQuICBB bmQgdGhlICdFSUQgbWFzay1sZW4nIGlzIHNldCB0byAzMiBvciAxMjgNCiAgICAgIGZvciBJUHY0 IG9yIElQdjYsIHJlc3BlY3RpdmVseS4gIFdoZW4gYW4geFRSIHdhbnRzIHRvIHF1ZXJ5IGEgc2l0 ZQ0KICAgICAgYWJvdXQgdGhlIHN0YXR1cyBvZiBhIG1hcHBpbmcgaXQgYWxyZWFkeSBoYXMgY2Fj aGVkLCB0aGUgRUlELQ0KICAgICAgcHJlZml4IHVzZWQgaW4gdGhlIE1hcC1SZXF1ZXN0IGhhcyB0 aGUgc2FtZSBtYXNrLWxlbmd0aCBhcyB0aGUNCiAgICAgIEVJRC1wcmVmaXggcmV0dXJuZWQgZnJv bSB0aGUgc2l0ZSB3aGVuIGl0IHNlbnQgYSBNYXAtUmVwbHkNCiAgICAgIG1lc3NhZ2UuDQoNCiAg IE1hcC1SZXBseSBSZWNvcmQ6ICBXaGVuIHRoZSBNIGJpdCBpcyBzZXQsIHRoaXMgZmllbGQgaXMg dGhlIHNpemUgb2YNCiAgICAgIHRoZSAiUmVjb3JkIiBmaWVsZCBpbiB0aGUgTWFwLVJlcGx5IGZv cm1hdC4gIFRoaXMgTWFwLVJlcGx5IHJlY29yZA0KICAgICAgY29udGFpbnMgdGhlIEVJRC10by1S TE9DIG1hcHBpbmcgZW50cnkgYXNzb2NpYXRlZCB3aXRoIHRoZSBTb3VyY2UNCiAgICAgIEVJRC4g IFRoaXMgYWxsb3dzIHRoZSBFVFIgd2hpY2ggd2lsbCByZWNlaXZlIHRoaXMgTWFwLVJlcXVlc3Qg dG8NCiAgICAgIGNhY2hlIHRoZSBkYXRhIGlmIGl0IGNob29zZXMgdG8gZG8gc28uDQoNCiAgIE1h cHBpbmcgUHJvdG9jb2wgRGF0YTogIFNlZSBbQ09OU10gb3IgW0FMVF0gZm9yIGRldGFpbHMuICBU aGlzIGZpZWxkDQogICAgICBpcyBvcHRpb25hbCBhbmQgcHJlc2VudCB3aGVuIHRoZSBVRFAgbGVu Z3RoIGluZGljYXRlcyB0aGVyZSBpcw0KICAgICAgZW5vdWdoIHNwYWNlIGluIHRoZSBwYWNrZXQg dG8gaW5jbHVkZSBpdC4NCg0KNi4xLjMuICBFSUQtdG8tUkxPQyBVRFAgTWFwLVJlcXVlc3QgTWVz c2FnZQ0KDQogICBBIE1hcC1SZXF1ZXN0IGlzIHNlbnQgZnJvbSBhbiBJVFIgd2hlbiBpdCBuZWVk cyBhIG1hcHBpbmcgZm9yIGFuIEVJRCwNCiAgIHdhbnRzIHRvIHRlc3QgYW4gUkxPQyBmb3IgcmVh Y2hhYmlsaXR5LCBvciB3YW50cyB0byByZWZyZXNoIGEgbWFwcGluZw0KICAgYmVmb3JlIFRUTCBl eHBpcmF0aW9uLiAgRm9yIHRoZSBpbml0aWFsIGNhc2UsIHRoZSBkZXN0aW5hdGlvbiBJUA0KICAg YWRkcmVzcyB1c2VkIGZvciB0aGUgTWFwLVJlcXVlc3QgaXMgdGhlIGRlc3RpbmF0aW9uLUVJRCBm cm9tIHRoZQ0KICAgcGFja2V0IHdoaWNoIGhhZCBhIG1hcHBpbmcgY2FjaGUgbG9va3VwIGZhaWx1 cmUuICBGb3IgdGhlIGxhdGVyIDINCiAgIGNhc2VzLCB0aGUgZGVzdGluYXRpb24gSVAgYWRkcmVz cyB1c2VkIGZvciB0aGUgTWFwLVJlcXVlc3QgaXMgb25lIG9mDQogICB0aGUgUkxPQyBhZGRyZXNz ZXMgZnJvbSB0aGUgbG9jYXRvci1zZXQgb2YgdGhlIG1hcCBjYWNoZSBlbnRyeS4gIFRoZQ0KICAg c291cmNlIGFkZHJlc3MgaXMgZWl0aGVyIGFuIElQdjQgb3IgSVB2NiBSTE9DIGFkZHJlc3MgZGVw ZW5kaW5nIGlmDQogICB0aGUgTWFwLVJlcXVlc3QgaXMgdXNpbmcgYW4gSVB2NCB2ZXJzdXMgSVB2 NiBoZWFkZXIsIHJlc3BlY3RpdmVseS4NCiAgIEluIGFsbCBjYXNlcywgdGhlIFVEUCBzb3VyY2Ug cG9ydCBudW1iZXIgZm9yIHRoZSBNYXAtUmVxdWVzdCBtZXNzYWdlDQogICBpcyBhIHJhbmRvbWx5 IGFsbG9jYXRlZCAxNi1iaXQgdmFsdWUgYW5kIHRoZSBVRFAgZGVzdGluYXRpb24gcG9ydA0KICAg bnVtYmVyIGlzIHNldCB0byB0aGUgd2VsbC1rbm93biBkZXN0aW5hdGlvbiBwb3J0IG51bWJlciA0 MzQyLiAgQQ0KICAgc3VjY2Vzc2Z1bCBNYXAtUmVwbHkgdXBkYXRlcyB0aGUgY2FjaGVkIHNldCBv ZiBSTE9DcyBhc3NvY2lhdGVkIHdpdGgNCiAgIHRoZSBFSUQgcHJlZml4IHJhbmdlLg0KDQogICBN YXAtUmVxdWVzdHMgY2FuIGFsc28gYmUgTElTUCBlbmNhcHN1bGF0ZWQgdXNpbmcgVURQIGRlc3Rp bmF0aW9uIHBvcnQNCiAgIDQzNDIgd2l0aCBhIExJU1AgdHlwZSB2YWx1ZSBzZXQgdG8gIkVuY2Fw c3VsYXRlZCBDb250cm9sIE1lc3NhZ2UiLA0KICAgd2hlbiBzZW50IGZyb20gYW4gSVRSIHRvIGEg TWFwLVJlc29sdmVyLiAgTGlrZXdpc2UsIE1hcC1SZXF1ZXN0cyBhcmUNCiAgIExJU1AgZW5jYXBz dWxhdGVkIHRoZSBzYW1lIHdheSBmcm9tIGEgTWFwLVNlcnZlciB0byBhbiBFVFIuICBEZXRhaWxz DQogICBvbiBlbmNhcHN1bGF0ZWQgTWFwLVJlcXVlc3RzIGFuZCBNYXAtUmVzb2x2ZXJzIGNhbiBi ZSBmb3VuZCBpbg0KICAgW0xJU1AtTVNdLg0KDQogICBNYXAtUmVxdWVzdHMgTVVTVCBiZSByYXRl LWxpbWl0ZWQuICBJdCBpcyByZWNvbW1lbmRlZCB0aGF0IGEgTWFwLQ0KICAgUmVxdWVzdCBmb3Ig dGhlIHNhbWUgRUlELXByZWZpeCBiZSBzZW50IG5vIG1vcmUgdGhhbiBvbmNlIHBlciBzZWNvbmQu DQoNCiAgIEFuIElUUiB0aGF0IGlzIGNvbmZpZ3VyZWQgd2l0aCBtYXBwaW5nIGRhdGFiYXNlIGlu Zm9ybWF0aW9uIChpLmUuIGl0DQogICBpcyBhbHNvIGFuIEVUUikgbWF5IG9wdGlvbmFsbHkgaW5j bHVkZSB0aG9zZSBtYXBwaW5ncyBpbiBhIE1hcC0NCiAgIFJlcXVlc3QuICBXaGVuIGFuIEVUUiBj b25maWd1cmVkIHRvIGFjY2VwdCBhbmQgdmVyaWZ5IHN1Y2gNCiAgICJwaWdneWJhY2tlZCIgbWFw cGluZyBkYXRhIHJlY2VpdmVzIHN1Y2ggYSA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPk1hcC1S ZXF1ZXN0LDwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPk1hcC1S ZXF1ZXN0IGFuZCBpdCBkb2VzDQogICBub3QgaGF2ZSB0aGlzIG1hcHBpbmcgaW4gdGhlIG1hcC1j YWNoZSw8L0ZPTlQ+PC9TVFJPTkc+IGl0IG1heSBvcmlnaW5hdGUgYSAidmVyaWZ5aW5nDQogICBN YXAtUmVxdWVzdCIsIGFkZHJlc3NlZCB0byB0aGUgPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj5v cmlnaW5hbDwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPm1hcC1y ZXF1ZXN0aW5nPC9GT05UPjwvU1RST05HPiBJVFIuICBJZiB0aGUgRVRSIGhhcyBhDQogICBtYXAt Y2FjaGUgZW50cnkgdGhhdCBtYXRjaGVzIHRoZSAicGlnZ3liYWNrZWQiIEVJRCBhbmQgdGhlIFJM T0MgaXMgaW4NCiAgIHRoZSBsb2NhdG9yLXNldCBmb3IgdGhlIGVudHJ5LCB0aGVuIGl0IG1heSBz ZW5kIHRoZSAidmVyaWZ5aW5nIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+TWFwLVJlcXVlc3Qi PC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+TWFwLQ0KICAgUmVx dWVzdCIgZGlyZWN0bHk8L0ZPTlQ+PC9TVFJPTkc+IHRvIHRoZSA8U1RSSUtFPjxGT05UIGNvbG9y PSJyZWQiPm9yaWdpbmFsPC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVl biI+b3JpZ2luYXRpbmc8L0ZPTlQ+PC9TVFJPTkc+IE1hcC1SZXF1ZXN0IHNvdXJjZS4gIElmDQog ICA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPm5vdCw8L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+ PEZPTlQgY29sb3I9ImdyZWVuIj50aGUgUkxPQw0KICAgaXMgbm90IGluIHRoZSBsb2NhdG9yLXNl dCw8L0ZPTlQ+PC9TVFJPTkc+IHRoZW4gPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj5pdDwvRk9O VD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPnRoZSBFVFI8L0ZPTlQ+PC9T VFJPTkc+IE1VU1Qgc2VuZCA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPml0PC9GT05UPjwvU1RS SUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+dGhlICJ2ZXJpZnlpbmcgTWFwLQ0KICAg UmVxdWVzdCI8L0ZPTlQ+PC9TVFJPTkc+IHRvIHRoZSAicGlnZ3liYWNrZWQiIEVJRC4gIERvaW5n IHRoaXMgZm9yY2VzIHRoZSAidmVyaWZ5aW5nDQogICBNYXAtUmVxdWVzdCIgdG8gZ28gdGhyb3Vn aCB0aGUgbWFwcGluZyBkYXRhYmFzZSBzeXN0ZW0gdG8gcmVhY2ggdGhlDQogICBhdXRob3JpdGF0 aXZlIHNvdXJjZSBvZiBpbmZvcm1hdGlvbiBhYm91dCB0aGF0IEVJRCwgZ3VhcmRpbmcgYWdhaW5z dA0KICAgUkxPQy1zcG9vZmluZyBpbiBpbiB0aGUgInBpZ2d5YmFja2VkIiBtYXBwaW5nIGRhdGEu DQoNCjYuMS40LiAgTWFwLVJlcGx5IE1lc3NhZ2UgRm9ybWF0DQoNCiAgICAgICAgMCAgICAgICAg ICAgICAgICAgICAxICAgICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAgICAgMw0KICAg ICAgICAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUg NiA3IDggOSAwIDENCiAgICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICAgIHxUeXBlPTIgfFB8RXwgICAgICAg ICAgICBSZXNlcnZlZCAgICAgICAgICAgICAgIHwgUmVjb3JkIENvdW50ICB8DQogICAgICAgKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSsNCiAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgIE5vbmNlIC4gLiAuICAgICAg ICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgICAgfCAgICAgICAg ICAgICAgICAgICAgICAgICAuIC4gLiBOb25jZSAgICAgICAgICAgICAgICAgICAgICAgICAgIHwN CiAgICstJmd0OyArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKw0KICAgfCAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgIFJl Y29yZCAgVFRMICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICB8ICAgKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAg IFIgICB8IExvY2F0b3IgQ291bnQgfCBFSUQgbWFzay1sZW4gIHwgQUNUIHxBfCAgICAgIFJlc2Vy dmVkICAgICAgICAgfA0KICAgZSAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICBjICAgfCAgICAgICAgICAgUmVzZXJ2 ZWQgICAgICAgICAgICB8ICAgICAgICAgICAgRUlELUFGSSAgICAgICAgICAgIHwNCiAgIG8gICAr LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKw0KICAgciAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgIEVJRC1wcmVmaXggICAg ICAgICAgICAgICAgICAgICAgICAgICB8DQogICBkICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgIHwgIC98ICAgIFBy aW9yaXR5ICAgfCAgICBXZWlnaHQgICAgIHwgIE0gUHJpb3JpdHkgICB8ICAgTSBXZWlnaHQgICAg fA0KICAgfCBMICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rDQogICB8IG8gfCAgICAgICAgICAgVW51c2VkIEZsYWdzICAgICAg fFJ8ICAgICAgICAgICBMb2MtQUZJICAgICAgICAgICAgIHwNCiAgIHwgYyArLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAg fCAgXHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgIExvY2F0b3IgICAgICAgICAgICAgICAg ICAgICAgICAgICB8DQogICArLSZndDsgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgICB8ICAgICAgICAgICAgICAg ICAgICAgTWFwcGluZyBQcm90b2NvbCBEYXRhICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAg ICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rDQoNCiAgIFBhY2tldCBmaWVsZCBkZXNjcmlwdGlvbnM6DQoNCiAgIFR5cGU6ICAg MiAoTWFwLVJlcGx5KQ0KDQogICBQOiBJbmRpY2F0ZXMgdGhhdCB0aGUgTWFwLVJlcGx5IGlzIGlu IHJlc3BvbnNlIHRvIGEgInBpZ2d5YmFjayINCiAgICAgIGxvY2F0b3IgcmVhY2hhYmlsaXR5IE1h cC1SZXF1ZXN0LiAgVGhlIG5vbmNlIGZpZWxkIHNob3VsZCBjb250YWluDQogICAgICBhIGNvcHkg b2YgdGhlIG5vbmNlIHZhbHVlIGZyb20gdGhlIG9yaWdpbmFsIE1hcC1SZXF1ZXN0LiAgU2VlDQog ICAgICBzZWN0aW9uIFNlY3Rpb24gNi4zLjIgZm9yIG1vcmUgZGV0YWlscy4NCg0KICAgRTogSW5k aWNhdGVzIHRoYXQgdGhlIEVUUiB3aGljaCBzZW5kcyB0aGlzIE1hcC1SZXBseSBtZXNzYWdlIGlz DQogICAgICBhZHZlcnRpc2luZyB0aGF0IHRoZSBzaXRlIGlzIGVuYWJsZWQgZm9yIHRoZSBFY2hv LU5vbmNlIGxvY2F0b3INCiAgICAgIHJlYWNoYWJpbGl0eSBhbGdvcml0aG0uICBTZWUgU2VjdGlv biA2LjMuMSBmb3IgbW9yZSBkZXRhaWxzLg0KDQogICBSZXNlcnZlZDogIFNldCB0byAwIG9uIHRy YW5zbWlzc2lvbiBhbmQgaWdub3JlZCBvbiByZWNlaXB0Lg0KDQogICBSZWNvcmQgQ291bnQ6ICBU aGUgbnVtYmVyIG9mIHJlY29yZHMgaW4gdGhpcyByZXBseSBtZXNzYWdlLiAgQSByZWNvcmQNCiAg ICAgIGlzIGNvbXByaXNlZCBvZiB0aGF0IHBvcnRpb24gb2YgdGhlIHBhY2tldCBsYWJlbGVkICdS ZWNvcmQnIGFib3ZlDQogICAgICBhbmQgb2NjdXJzIHRoZSBudW1iZXIgb2YgdGltZXMgZXF1YWwg dG8gUmVjb3JkIGNvdW50Lg0KDQogICBOb25jZTogIEEgMjQtYml0IHZhbHVlIHNldCBpbiBhIERh dGEtUHJvYmUgcGFja2V0IG9yIGEgNjQtYml0IHZhbHVlDQogICAgICBmcm9tIHRoZSBNYXAtUmVx dWVzdCBpcyBlY2hvZWQgaW4gdGhpcyBOb25jZSBmaWVsZCBvZiB0aGUgTWFwLQ0KICAgICAgUmVw bHkuDQoNCiAgIFJlY29yZCBUVEw6ICBUaGUgdGltZSBpbiBtaW51dGVzIHRoZSByZWNpcGllbnQg b2YgdGhlIE1hcC1SZXBseSB3aWxsDQogICAgICBzdG9yZSB0aGUgbWFwcGluZy4gIElmIHRoZSBU VEwgaXMgMCwgdGhlIGVudHJ5IHNob3VsZCBiZSByZW1vdmVkDQogICAgICBmcm9tIHRoZSBjYWNo ZSBpbW1lZGlhdGVseS4gIElmIHRoZSB2YWx1ZSBpcyAweGZmZmZmZmZmLCB0aGUNCiAgICAgIHJl Y2lwaWVudCBjYW4gZGVjaWRlIGxvY2FsbHkgaG93IGxvbmcgdG8gc3RvcmUgdGhlIG1hcHBpbmcu DQoNCiAgIExvY2F0b3IgQ291bnQ6ICBUaGUgbnVtYmVyIG9mIExvY2F0b3IgZW50cmllcy4gIEEg bG9jYXRvciBlbnRyeQ0KICAgICAgY29tcHJpc2VzIHdoYXQgaXMgbGFiZWxlZCBhYm92ZSBhcyAn TG9jJy4gIFRoZSBsb2NhdG9yIGNvdW50IGNhbg0KICAgICAgYmUgMCBpbmRpY2F0aW5nIHRoZXJl IGFyZSBubyBsb2NhdG9ycyBmb3IgdGhlIEVJRC1wcmVmaXguDQoNCiAgIEVJRCBtYXNrLWxlbjog IE1hc2sgbGVuZ3RoIGZvciBFSUQgcHJlZml4Lg0KDQogICBBQ1Q6ICBUaGlzIDMtYml0IGZpZWxk IGRlc2NyaWJlcyBuZWdhdGl2ZSBNYXAtUmVwbHkgYWN0aW9ucy4gIFRoZXNlDQogICAgICBiaXRz IGFyZSB1c2VkIG9ubHkgd2hlbiB0aGUgJ0xvY2F0b3IgQ291bnQnIGZpZWxkIGlzIHNldCB0byAw Lg0KICAgICAgVGhlIGFjdGlvbiBiaXRzIGFyZSBlbmNvZGVkIG9ubHkgaW4gTWFwLVJlcGx5IG1l c3NhZ2VzLiAgVGhlDQogICAgICBhY3Rpb25zIGRlZmluZWQgYXJlIHVzZWQgYnkgYW4gSVRSIG9y IFBUUiB3aGVuIGEgZGVzdGluYXRpb24gRUlEDQogICAgICBtYXRjaGVzIGEgbmVnYXRpdmUgbWFw cGluZyBjYWNoZSBlbnRyeS4gIFVuYXNzaWduZWQgdmFsdWVzIHNob3VsZA0KICAgICAgY2F1c2Ug YSBtYXAtY2FjaGUgZW50cnkgdG8gYmUgY3JlYXRlZCBhbmQsIHdoZW4gcGFja2V0cyBtYXRjaCB0 aGlzDQogICAgICBuZWdhdGl2ZSBjYWNoZSBlbnRyeSwgdGhleSB3aWxsIGJlIGRyb3BwZWQuICBU aGUgY3VycmVudCBhc3NpZ25lZA0KICAgICAgdmFsdWVzIGFyZToNCg0KICAgICAgKDApIERyb3A6 ICBUaGUgcGFja2V0IGlzIGRyb3BwZWQgc2lsZW50bHkuDQoNCiAgICAgICgxKSBOYXRpdmVseS1G b3J3YXJkOiAgVGhlIHBhY2tldCBpcyBub3QgZW5jYXBzdWxhdGVkIG9yIGRyb3BwZWQNCiAgICAg ICAgIGJ1dCBuYXRpdmVseSBmb3J3YXJkZWQuDQoNCiAgICAgICgyKSBTZW5kLU1hcC1SZXF1ZXN0 OiAgVGhlIHBhY2tldCBpbnZva2VzIHNlbmRpbmcgYSBNYXAtUmVxdWVzdC4NCg0KICAgQTogVGhl IEF1dGhvcml0YXRpdmUgYml0LCB3aGVuIHNlbnQgYnkgYSBVRFAtYmFzZWQgbWVzc2FnZSBpcyBh bHdheXMNCiAgICAgIHNldCBieSB0aGUgRVRSLiAgU2VlIFtDT05TXSBmb3IgVENQLWJhc2VkIE1h cC1SZXBsaWVzLg0KDQogICBFSUQtQUZJOiAgQWRkcmVzcyBmYW1pbHkgb2YgRUlELXByZWZpeCBh Y2NvcmRpbmcgdG8gW1JGQzI0MzRdLg0KDQogICBFSUQtcHJlZml4OiAgNCBieXRlcyBpZiBhbiBJ UHY0IGFkZHJlc3MtZmFtaWx5LCAxNiBieXRlcyBpZiBhbiBJUHY2DQogICAgICBhZGRyZXNzLWZh bWlseS4NCg0KICAgUHJpb3JpdHk6ICBlYWNoIFJMT0MgaXMgYXNzaWduZWQgYSB1bmljYXN0IHBy aW9yaXR5LiAgTG93ZXIgdmFsdWVzDQogICAgICBhcmUgbW9yZSBwcmVmZXJhYmxlLiAgV2hlbiBt dWx0aXBsZSBSTE9DcyBoYXZlIHRoZSBzYW1lIHByaW9yaXR5LA0KICAgICAgdGhleSBtYXkgYmUg dXNlZCBpbiBhIGxvYWQtc3BsaXQgZmFzaGlvbi4gIEEgdmFsdWUgb2YgMjU1IG1lYW5zDQogICAg ICB0aGUgUkxPQyBNVVNUIE5PVCBiZSB1c2VkIGZvciB1bmljYXN0IGZvcndhcmRpbmcuDQoNCiAg IFdlaWdodDogIHdoZW4gcHJpb3JpdGllcyBhcmUgdGhlIHNhbWUgZm9yIG11bHRpcGxlIFJMT0Nz LCB0aGUgd2VpZ2h0DQogICAgICBpbmRpY2F0ZXMgaG93IHRvIGJhbGFuY2UgdW5pY2FzdCB0cmFm ZmljIGJldHdlZW4gdGhlbS4gIFdlaWdodCBpcw0KICAgICAgZW5jb2RlZCBhcyBhIHBlcmNlbnRh Z2Ugb2YgdG90YWwgdW5pY2FzdCBwYWNrZXRzIHRoYXQgbWF0Y2ggdGhlDQogICAgICBtYXBwaW5n IGVudHJ5LiAgSWYgYSBub24temVybyB3ZWlnaHQgdmFsdWUgaXMgdXNlZCBmb3IgYW55IFJMT0Ms DQogICAgICB0aGVuIGFsbCBSTE9DcyBtdXN0IHVzZSBhIG5vbi16ZXJvIHdlaWdodCB2YWx1ZSBh bmQgdGhlbiB0aGUgc3VtDQogICAgICBvZiBhbGwgd2VpZ2h0IHZhbHVlcyBNVVNUIGVxdWFsIDEw MC4gIElmIGEgemVybyB2YWx1ZSBpcyB1c2VkIGZvcg0KICAgICAgYW55IFJMT0Mgd2VpZ2h0LCB0 aGVuIGFsbCB3ZWlnaHRzIE1VU1QgYmUgemVybyBhbmQgdGhlIHJlY2VpdmVyIG9mDQogICAgICB0 aGUgTWFwLVJlcGx5IHdpbGwgZGVjaWRlIGhvdyB0byBsb2FkLXNwbGl0IHRyYWZmaWMuICBTZWUN CiAgICAgIFNlY3Rpb24gNi40IGZvciBhIHN1Z2dlc3RlZCBoYXNoIGFsZ29yaXRobSB0byBkaXN0 cmlidXRlIGxvYWQNCiAgICAgIGFjcm9zcyBsb2NhdG9ycyB3aXRoIHNhbWUgcHJpb3JpdHkgYW5k IGVxdWFsIHdlaWdodCB2YWx1ZXMuICBXaGVuDQogICAgICBhIHNpbmdsZSBSTE9DIGV4aXN0cyBp biBhIG1hcHBpbmcgZW50cnksIHRoZSB3ZWlnaHQgdmFsdWUgTVVTVCBiZQ0KICAgICAgc2V0IHRv IDEwMCBhbmQgaWdub3JlZCBvbiByZWNlaXB0Lg0KDQogICBNIFByaW9yaXR5OiAgZWFjaCBSTE9D IGlzIGFzc2lnbmVkIGEgbXVsdGljYXN0IHByaW9yaXR5IHVzZWQgYnkgYW4NCiAgICAgIEVUUiBp biBhIHJlY2VpdmVyIG11bHRpY2FzdCBzaXRlIHRvIHNlbGVjdCBhbiBJVFIgaW4gYSBzb3VyY2UN CiAgICAgIG11bHRpY2FzdCBzaXRlIGZvciBidWlsZGluZyBtdWx0aWNhc3QgZGlzdHJpYnV0aW9u IHRyZWVzLiAgQSB2YWx1ZQ0KICAgICAgb2YgMjU1IG1lYW5zIHRoZSBSTE9DIE1VU1QgTk9UIGJl IHVzZWQgZm9yIGpvaW5pbmcgYSBtdWx0aWNhc3QNCiAgICAgIGRpc3RyaWJ1dGlvbiB0cmVlLg0K DQogICBNIFdlaWdodDogIHdoZW4gcHJpb3JpdGllcyBhcmUgdGhlIHNhbWUgZm9yIG11bHRpcGxl IFJMT0NzLCB0aGUNCiAgICAgIHdlaWdodCBpbmRpY2F0ZXMgaG93IHRvIGJhbGFuY2UgYnVpbGRp bmcgbXVsdGljYXN0IGRpc3RyaWJ1dGlvbg0KICAgICAgdHJlZXMgYWNyb3NzIG11bHRpcGxlIElU UnMuICBUaGUgd2VpZ2h0IGlzIGVuY29kZWQgYXMgYSBwZXJjZW50YWdlDQogICAgICBvZiB0b3Rh bCBudW1iZXIgb2YgdHJlZXMgYnVpbGQgdG8gdGhlIHNvdXJjZSBzaXRlIGlkZW50aWZpZWQgYnkN CiAgICAgIHRoZSBFSUQtcHJlZml4LiAgSWYgYSBub24temVybyB3ZWlnaHQgdmFsdWUgaXMgdXNl ZCBmb3IgYW55IFJMT0MsDQogICAgICB0aGVuIGFsbCBSTE9DcyBtdXN0IHVzZSBhIG5vbi16ZXJv IHdlaWdodCB2YWx1ZSBhbmQgdGhlbiB0aGUgc3VtDQogICAgICBvZiBhbGwgd2VpZ2h0IHZhbHVl cyBNVVNUIGVxdWFsIDEwMC4gIElmIGEgemVybyB2YWx1ZSBpcyB1c2VkIGZvcg0KICAgICAgYW55 IFJMT0Mgd2VpZ2h0LCB0aGVuIGFsbCB3ZWlnaHRzIE1VU1QgYmUgemVybyBhbmQgdGhlIHJlY2Vp dmVyIG9mDQogICAgICB0aGUgTWFwLVJlcGx5IHdpbGwgZGVjaWRlIGhvdyB0byBkaXN0cmlidXRl IG11bHRpY2FzdCBzdGF0ZSBhY3Jvc3MNCiAgICAgIElUUnMuDQoNCiAgIFVudXNlZCBGbGFnczog IHNldCB0byAwIHdoZW4gc2VuZGluZyBhbmQgaWdub3JlZCBvbiByZWNlaXB0Lg0KDQogICBSOiB3 aGVuIHRoaXMgYml0IGlzIHNldCwgdGhlIGxvY2F0b3IgaXMga25vd24gdG8gYmUgcmVhY2hhYmxl IGZyb20NCiAgICAgIHRoZSBNYXAtUmVwbHkgc2VuZGVyJ3MgcGVyc3BlY3RpdmUuDQoNCiAgIExv Y2F0b3I6ICBhbiBJUHY0IG9yIElQdjYgYWRkcmVzcyAoYXMgZW5jb2RlZCBieSB0aGUgJ0xvYy1B RkknIGZpZWxkKQ0KICAgICAgYXNzaWduZWQgdG8gYW4gRVRSIG9yIHJvdXRlciBhY3RpbmcgYXMg YSBwcm94eSByZXBsaWVyIGZvciB0aGUNCiAgICAgIEVJRC1wcmVmaXguICBOb3RlIHRoYXQgdGhl IGRlc3RpbmF0aW9uIFJMT0MgYWRkcmVzcyBNQVkgYmUgYW4NCiAgICAgIGFueWNhc3QgYWRkcmVz cy4gIEEgc291cmNlIFJMT0MgY2FuIGJlIGFuIGFueWNhc3QgYWRkcmVzcyBhcyB3ZWxsLg0KICAg ICAgVGhlIHNvdXJjZSBvciBkZXN0aW5hdGlvbiBSTE9DIE1VU1QgTk9UIGJlIHRoZSBicm9hZGNh c3QgYWRkcmVzcw0KICAgICAgKDI1NS4yNTUuMjU1LjI1NSBvciBhbnkgc3VibmV0IGJyb2FkY2Fz dCBhZGRyZXNzIGtub3duIHRvIHRoZQ0KICAgICAgcm91dGVyKSwgYW5kIE1VU1QgTk9UIGJlIGEg bGluay1sb2NhbCBtdWx0aWNhc3QgYWRkcmVzcy4gIFRoZQ0KICAgICAgc291cmNlIFJMT0MgTVVT VCBOT1QgYmUgYSBtdWx0aWNhc3QgYWRkcmVzcy4gIFRoZSBkZXN0aW5hdGlvbiBSTE9DDQogICAg ICBTSE9VTEQgYmUgYSBtdWx0aWNhc3QgYWRkcmVzcyBpZiBpdCBpcyBiZWluZyBtYXBwZWQgZnJv bSBhDQogICAgICBtdWx0aWNhc3QgZGVzdGluYXRpb24gRUlELg0KDQogICBNYXBwaW5nIFByb3Rv Y29sIERhdGE6ICBTZWUgW0NPTlNdIG9yIFtBTFRdIGZvciBkZXRhaWxzLiAgVGhpcyBmaWVsZA0K ICAgICAgaXMgb3B0aW9uYWwgYW5kIHByZXNlbnQgd2hlbiB0aGUgVURQIGxlbmd0aCBpbmRpY2F0 ZXMgdGhlcmUgaXMNCiAgICAgIGVub3VnaCBzcGFjZSBpbiB0aGUgcGFja2V0IHRvIGluY2x1ZGUg aXQuDQoNCjYuMS41LiAgRUlELXRvLVJMT0MgVURQIE1hcC1SZXBseSBNZXNzYWdlDQoNCiAgIFdo ZW4gYSBEYXRhIFByb2JlIHBhY2tldCBvciBhIE1hcC1SZXF1ZXN0IHRyaWdnZXJzIGEgTWFwLVJl cGx5IHRvIGJlDQogICBzZW50LCB0aGUgUkxPQ3MgYXNzb2NpYXRlZCB3aXRoIHRoZSBFSUQtcHJl Zml4IG1hdGNoZWQgYnkgdGhlIEVJRCBpbg0KICAgdGhlIG9yaWdpbmFsIHBhY2tldCBkZXN0aW5h dGlvbiBJUCBhZGRyZXNzIGZpZWxkIHdpbGwgYmUgcmV0dXJuZWQuDQogICBUaGUgUkxPQ3MgaW4g dGhlIE1hcC1SZXBseSBhcmUgdGhlIGdsb2JhbGx5LXJvdXRhYmxlIElQIGFkZHJlc3NlcyBvZg0K ICAgdGhlIEVUUiBidXQgYXJlIG5vdCBuZWNlc3NhcmlseSByZWFjaGFibGU7IHNlcGFyYXRlIHRl c3Rpbmcgb2YNCiAgIHJlYWNoYWJpbGl0eSBpcyByZXF1aXJlZC4NCg0KICAgTm90ZSB0aGF0IGEg TWFwLVJlcGx5IG1heSBjb250YWluIGRpZmZlcmVudCBFSUQtcHJlZml4IGdyYW51bGFyaXR5DQog ICAocHJlZml4ICsgbGVuZ3RoKSB0aGFuIHRoZSBNYXAtUmVxdWVzdCB3aGljaCB0cmlnZ2VycyBp dC4gIFRoaXMgbWlnaHQNCiAgIG9jY3VyIGlmIGEgTWFwLVJlcXVlc3Qgd2VyZSBmb3IgYSBwcmVm aXggdGhhdCBoYWQgYmVlbiByZXR1cm5lZCBieSBhbg0KICAgZWFybGllciBNYXAtUmVwbHkuICBJ biBzdWNoIGEgY2FzZSwgdGhlIHJlcXVlc3RlciB1cGRhdGVzIGl0cyBjYWNoZQ0KICAgd2l0aCB0 aGUgbmV3IHByZWZpeCBpbmZvcm1hdGlvbiBhbmQgZ3JhbnVsYXJpdHkuICBGb3IgZXhhbXBsZSwg YQ0KICAgcmVxdWVzdGVyIHdpdGggdHdvIGNhY2hlZCBFSUQtcHJlZml4ZXMgdGhhdCBhcmUgY292 ZXJlZCBieSBhIE1hcC0NCiAgIFJlcGx5IGNvbnRhaW5pbmcgb25lLCBsZXNzLXNwZWNpZmljIHBy ZWZpeCwgcmVwbGFjZXMgdGhlIGVudHJ5IHdpdGgNCiAgIHRoZSBsZXNzLXNwZWNpZmljIEVJRC1w cmVmaXguICBOb3RlIHRoYXQgdGhlIHJldmVyc2UsIHJlcGxhY2VtZW50IG9mDQogICBvbmUgbGVz cy1zcGVjaWZpYyBwcmVmaXggd2l0aCBtdWx0aXBsZSBtb3JlLXNwZWNpZmljIHByZWZpeGVzLCBj YW4NCiAgIGFsc28gb2NjdXIgYnV0IG5vdCBieSByZW1vdmluZyB0aGUgbGVzcy1zcGVjaWZpYyBw cmVmaXggcmF0aGVyIGJ5DQogICBhZGRpbmcgdGhlIG1vcmUtc3BlY2lmaWMgcHJlZml4ZXMgd2hp Y2ggZHVyaW5nIGEgbG9va3VwIHdpbGwgb3ZlcnJpZGUNCiAgIHRoZSBsZXNzLXNwZWNpZmljIHBy ZWZpeC4NCg0KICAgPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj5SZXBsaWVzIFNIT1VMRCBiZSBz ZW50IGZvcjwvRk9OVD48L1NUUklLRT4NCg0KICAgPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4i PldoZW48L0ZPTlQ+PC9TVFJPTkc+IGFuIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+RUlELXBy ZWZpeCBubyBtb3JlIG9mdGVuIHRoYW48L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+PEZPTlQgY29s b3I9ImdyZWVuIj5FVFIgaXMgY29uZmlndXJlZCB3aXRoIG92ZXJsYXBwaW5nIEVJRC1wcmVmaXhl cywgYSBNYXAtDQogICBSZXF1ZXN0IHdpdGggYW4gRUlEIHRoYXQgbG9uZ2VzdCBtYXRjaGVzIGFu eSBFSUQtcHJlZml4IE1VU1QgYmUNCiAgIHJldHVybmVkIGluIGEgc2luZ2xlIE1hcC1SZXBseSBt ZXNzYWdlLiAgRm9yIGluc3RhbmNlLCBpZiBhbiBFVFIgaGFkDQogICBkYXRhYmFzZSBtYXBwaW5n IGVudHJpZXMgZm9yIEVJRC1wcmVmaXhlczoNCg0KICAgICAxMC4wLjAuMC84DQogICAgIDEwLjEu MC4wLzE2DQogICAgIDEwLjEuMS4wLzI0DQogICAgIDEwLjEuMi4wLzI0DQoNCiAgIEEgTWFwLVJl cXVlc3QgZm9yIEVJRCAxMC4xLjEuMSB3b3VsZCBjYXVzZSBhIE1hcC1SZXBseSB3aXRoIGEgcmVj b3JkDQogICBjb3VudCBvZiAxIHRvIGJlIHJldHVybmVkIHdpdGggYSBtYXBwaW5nIHJlY29yZCBF SUQtcHJlZml4IG9mDQogICAxMC4xLjEuMC8yNC4NCg0KICAgQSBNYXAtUmVxdWVzdCBmb3IgRUlE IDEwLjEuNS41LCB3b3VsZCBjYXVzZSBhIE1hcC1SZXBseSB3aXRoIGEgcmVjb3JkDQogICBjb3Vu dCBvZiAzIHRvIGJlIHJldHVybmVkIHdpdGggbWFwcGluZyByZWNvcmRzIGZvciBFSUQtcHJlZml4 ZXMNCiAgIDEwLjEuMC4wLzE2LCAxMC4xLjEuMC8yNCwgYW5kIDEwLjEuMi4wLzI0Lg0KDQogICBO b3RlIHRoYXQgbm90IGFsbCBvdmVybGFwcGluZyBFSUQtcHJlZml4ZXMgbmVlZCB0byBiZSByZXR1 cm5lZCwgb25seQ0KICAgdGhlIG1vcmUgc3BlY2lmaWNzIChub3RlIGluIHRoZSBzZWNvbmQgZXhh bXBsZSBhYm92ZSAxMC4wLjAuMC84IHdhcw0KICAgbm90IHJldHVybmVkIGZvciByZXF1ZXN0aW5n IEVJRCAxMC4xLjUuNSkgZW50cmllcyBmb3IgdGhlIG1hdGNoaW5nDQogICBFSUQtcHJlZml4IG9m IHRoZSByZXF1ZXN0aW5nIEVJRC4gIFdoZW4gbW9yZSB0aGFuIG9uZSBFSUQtcHJlZml4IGlzDQog ICByZXR1cm5lZCwgYWxsIFNIT1VMRCB1c2UgdGhlIHNhbWUgVGltZS10by1MaXZlIHZhbHVlIHNv IHRoZXkgY2FuIGFsbA0KICAgdGltZSBvdXQgYXQgdGhlIHNhbWUgdGltZS4gIEFuZCB3aGVuIGVp dGhlciBhIG1vcmUgc3BlY2lmaWMgb3IgYSBsZXNzDQogICBzcGVjaWZpYyBFSUQtcHJlZml4IGlz IHJlY2VpdmVkIGxhdGVyLCB0aGVuIHRoZXkgU0hPVUxEIGJlIGNhY2hlZA0KICAgd2l0aCB0aGUg VGltZS10by1MaXZlIG9mIHRoZSBwcmV2aW91cyBvdmVybGFwcGluZyBFSUQtcHJlZml4ZXMNCiAg IGNhY2hlZC4NCg0KICAgTWFwLVJlcGxpZXMgU0hPVUxEIGJlIHNlbnQgZm9yIGFuIEVJRC1wcmVm aXggbm8gbW9yZSBvZnRlbiB0aGFuPC9GT05UPjwvU1RST05HPiBvbmNlDQogICBwZXIgc2Vjb25k IHRvIHRoZSBzYW1lIHJlcXVlc3Rpbmcgcm91dGVyLiAgRm9yIHNjYWxhYmlsaXR5LCBpdCBpcw0K ICAgZXhwZWN0ZWQgdGhhdCBhZ2dyZWdhdGlvbiBvZiBFSUQgYWRkcmVzc2VzIGludG8gRUlELXBy ZWZpeGVzIHdpbGwNCiAgIGFsbG93IG9uZSBNYXAtUmVwbHkgdG8gc2F0aXNmeSBhIG1hcHBpbmcg Zm9yIHRoZSBFSUQgYWRkcmVzc2VzIGluIHRoZQ0KICAgcHJlZml4IHJhbmdlIHRoZXJlYnkgcmVk dWNpbmcgdGhlIG51bWJlciBvZiBNYXAtUmVxdWVzdCBtZXNzYWdlcy4NCg0KICAgPFNUUklLRT48 Rk9OVCBjb2xvcj0icmVkIj5UaGUgYWRkcmVzc2VzIGZvciBhIGVuY2Fwc3VsYXRlZCBkYXRhIHBh Y2tldHMgb3IgTWFwLVJlcXVlc3QgbWVzc2FnZQ0KICAgYXJlIHN3YXBwZWQgYW5kIHVzZWQgZm9y IHNlbmRpbmcgdGhlIE1hcC1SZXBseS4gIFRoZSBVRFAgc291cmNlIGFuZA0KICAgZGVzdGluYXRp b24gcG9ydHMgYXJlIHN3YXBwZWQgYXMgd2VsbC4gIFRoYXQgaXMsIHRoZSBzb3VyY2UgcG9ydCBp bg0KICAgdGhlIFVEUCBoZWFkZXIgZm9yIHRoZSBNYXAtUmVwbHkgaXMgc2V0IHRvIHRoZSB3ZWxs LWtub3duIFVEUCBwb3J0DQogICBudW1iZXIgNDM0Mi48L0ZPTlQ+PC9TVFJJS0U+DQoNCiAgIE1h cC1SZXBseSByZWNvcmRzIGNhbiBoYXZlIGFuIGVtcHR5IGxvY2F0b3Itc2V0LiAgVGhpcyB0eXBl IG9mIGEgTWFwLQ0KICAgUmVwbHkgaXMgY2FsbGVkIGEgTmVnYXRpdmUgTWFwLVJlcGx5LiAgTmVn YXRpdmUgTWFwLVJlcGxpZXMgY29udmV5DQogICBzcGVjaWFsIGFjdGlvbnMgYnkgdGhlIHNlbmRl ciB0byB0aGUgSVRSIG9yIFBUUiB3aGljaCBoYXZlIHNvbGljaXRlZA0KICAgdGhlIE1hcC1SZXBs eS4gIFRoZXJlIGFyZSB0d28gcHJpbWFyeSBhcHBsaWNhdGlvbnMgZm9yIE5lZ2F0aXZlIE1hcC0N CiAgIFJlcGxpZXMuICBUaGUgZmlyc3QgaXMgZm9yIGEgTWFwLVJlc29sdmVyIHRvIGluc3RydWN0 IGFuIElUUiBvciBQVFINCiAgIHdoZW4gYSBkZXN0aW5hdGlvbiBpcyBmb3IgYSBMSVNQIHNpdGUg dmVyc3VzIGEgbm9uLUxJU1Agc2l0ZS4gIEFuZA0KICAgdGhlIG90aGVyIGlzIHRvIHNvdXJjZSBx dWVuY2ggTWFwLVJlcXVlc3RzIHdoaWNoIGFyZSBzZW50IGZvciBub24tDQogICBhbGxvY2F0ZWQg RUlEcy4NCg0KICAgRm9yIGVhY2ggTWFwLVJlcGx5IHJlY29yZCwgdGhlIGxpc3Qgb2YgbG9jYXRv cnMgaW4gYSBsb2NhdG9yLXNldCBNVVNUDQogICBhcHBlYXIgaW4gdGhlIHNhbWUgb3JkZXIgZm9y IGVhY2ggRVRSIHRoYXQgb3JpZ2luYXRlcyBhIE1hcC1SZXBseQ0KICAgbWVzc2FnZS4gIFRoZSBs b2NhdG9yLXNldCBNVVNUIGJlIHNvcnRlZCBpbiBvcmRlciBvZiBhc2NlbmRpbmcgSVANCiAgIGFk ZHJlc3Mgd2hlcmUgYW4gSVB2NCBsb2NhdG9yIGFkZHJlc3MgaXMgY29uc2lkZXJlZCBudW1lcmlj YWxseSAnbGVzcw0KICAgdGhhbicgYW4gSVB2NiBsb2NhdG9yIGFkZHJlc3MuDQoNCjxTVFJJS0U+ PEZPTlQgY29sb3I9InJlZCI+Ni4xLjYuICBNYXAtUmVnaXN0ZXIgTWVzc2FnZSBGb3JtYXQNCg0K ICAgVGhlIHVzYWdlIGRldGFpbHM8L0ZPTlQ+PC9TVFJJS0U+DQoNCiAgIDxTVFJPTkc+PEZPTlQg Y29sb3I9ImdyZWVuIj5XaGVuIHNlbmRpbmcgYSBNYXAtUmVwbHkgbWVzc2FnZSwgdGhlIGRlc3Rp bmF0aW9uIGFkZHJlc3MgaXMgY29waWVkDQogICBmcm9tIHRoZSBzb3VyY2UgYWRkcmVzczwvRk9O VD48L1NUUk9ORz4gb2YgdGhlIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+TWFwLVJlZ2lzdGVy PC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+TWFwLVJlcXVlc3Qg b3IgRGF0YS1Qcm9iZTwvRk9OVD48L1NUUk9ORz4gbWVzc2FnZSA8U1RSSUtFPjxGT05UIGNvbG9y PSJyZWQiPmNhbiBiZSBmb3VuZCBpbg0KICAgc3BlY2lmaWNhdGlvbiBbTElTUC1NU10uICBUaGlz IHNlY3Rpb24gc29sZWx5IGRlZmluZXM8L0ZPTlQ+PC9TVFJJS0U+DQogICA8U1RST05HPjxGT05U IGNvbG9yPSJncmVlbiI+d2hpY2ggaXMgaW52b2tpbmc8L0ZPTlQ+PC9TVFJPTkc+IHRoZSA8U1RS SUtFPjxGT05UIGNvbG9yPSJyZWQiPm1lc3NhZ2UNCiAgIGZvcm1hdC48L0ZPTlQ+PC9TVFJJS0U+ IDxTVFJPTkc+PEZPTlQgY29sb3I9ImdyZWVuIj5yZXBseS4gIFRoZSBzb3VyY2UgYWRkcmVzcyBv ZiB0aGUgTWFwLVJlcGx5IGlzDQogICBvbmUgb2YgdGhlIGxvY2FsIGxvY2F0b3IgYWRkcmVzc2Vz IGxpc3RlZCBpbiB0aGUgbG9jYXRvci1zZXQgb2YgYW55DQogICBtYXBwaW5nIHJlY29yZCBpbiB0 aGUgbWVzc2FnZS4gIFRoZSBkZXN0aW5hdGlvbiBwb3J0IG9mIGEgTWFwLVJlcGx5DQogICBtZXNz YWdlIGlzIGNvcGllZCBmcm9tIHRoZSBzb3VyY2UgcG9ydCBvZiB0aGUgTWFwLVJlcXVlc3Qgb3Ig RGF0YS0NCiAgIFByb2JlIGFuZCB0aGUgc291cmNlIHBvcnQgb2YgdGhlIE1hcC1SZXBseSBtZXNz YWdlIGlzIHNldCB0byB0aGUNCiAgIHdlbGwta25vd24gVURQIHBvcnQgNDM0Mi4NCg0KNi4xLjUu MS4gIFRyYWZmaWMgUmVkaXJlY3Rpb24gd2l0aCBDb2Fyc2UgRUlELVByZWZpeGVzDQoNCiAgIFdo ZW4gYW4gRVRSIGlzIG1pc2NvbmZpZ3VyZWQgb3IgY29tcHJvbWlzZWQsIGl0IGNvdWxkIHJldHVy biBjb2Fyc2UNCiAgIEVJRC1wcmVmaXhlcyBpbiBNYXAtUmVwbHkgbWVzc2FnZXMgaXQgc2VuZHMu ICBUaGUgRUlELXByZWZpeCBjb3VsZA0KICAgY292ZXIgRUlELXByZWZpeGVzIHdoaWNoIGFyZSBh bGxvY2F0ZWQgdG8gb3RoZXIgc2l0ZXMgcmVkaXJlY3RpbmcNCiAgIHRoZWlyIHRyYWZmaWMgdG8g dGhlIGxvY2F0b3JzIG9mIHRoZSBjb21wcm9taXNlZCBzaXRlLg0KDQogICBUbyBzb2x2ZSB0aGlz IHByb2JsZW0sIHRoZXJlIGFyZSB0d28gYmFzaWMgc29sdXRpb25zIHRoYXQgY291bGQgYmUNCiAg IHVzZWQuICBUaGUgZmlyc3QgaXMgdG8gaGF2ZSBNYXAtU2VydmVycyBwcm94eS1yZXBseSBvbiBi ZWhhbGYgb2YgRVRScw0KICAgc28gdGhlaXIgcmVnaXN0ZXJlZCBFSUQtcHJlZml4ZXMgYXJlIHRo ZSBvbmVzIHJldHVybmVkIGluIE1hcC0NCiAgIFJlcGxpZXMuICBTaW5jZSB0aGUgaW50ZXJhY3Rp b24gYmV0d2VlbiBhbiBFVFIgYW5kIE1hcC1TZXJ2ZXIgaXMNCiAgIHNlY3VyZWQgd2l0aCBzaGFy ZWQta2V5cywgaXQgaXMgbW9yZSBkaWZmaWN1bHQgZm9yIGFuIEVUUiB0bw0KICAgbWlzYmVoYXZl LiAgVGhlIHNlY29uZCBzb2x1dGlvbiBpcyB0byBoYXZlIElUUnMgYW5kIFBUUnMgY2FjaGUgRUlE LQ0KICAgcHJlZml4ZXMgd2l0aCBtYXNrLWxlbmd0aHMgdGhhdCBhcmUgZ3JlYXRlciB0aGFuIG9y IGVxdWFsIHRvIGENCiAgIGNvbmZpZ3VyZWQgcHJlZml4IGxlbmd0aC4gIFRoaXMgbGltaXRzIHRo ZSBkYW1hZ2UgdG8gYSBzcGVjaWZpYyB3aWR0aA0KICAgb2YgYW55IEVJRC1wcmVmaXggYWR2ZXJ0 aXNlZCwgYnV0IG5lZWRzIHRvIGJlIGNvb3JkaW5hdGVkIHdpdGggdGhlDQogICBhbGxvY2F0aW9u IG9mIHNpdGUgcHJlZml4ZXMuICBUaGVzZSBzb2x1dGlvbnMgY2FuIGJlIHVzZWQNCiAgIGluZGVw ZW5kZW50bHkgb3IgYXQgdGhlIHNhbWUgdGltZS4NCg0KICAgQXQgdGhlIHRpbWUgb2YgdGhpcyB3 cml0aW5nLCBvdGhlciBhcHByb2FjaGVzIGFyZSBiZWluZyBjb25zaWRlcmVkDQogICBhbmQgcmVz ZWFyY2hlZC4NCg0KNi4xLjYuICBNYXAtUmVnaXN0ZXIgTWVzc2FnZSBGb3JtYXQNCg0KICAgVGhl IHVzYWdlIGRldGFpbHMgb2YgdGhlIE1hcC1SZWdpc3RlciBtZXNzYWdlIGNhbiBiZSBmb3VuZCBp bg0KICAgc3BlY2lmaWNhdGlvbiBbTElTUC1NU10uICBUaGlzIHNlY3Rpb24gc29sZWx5IGRlZmlu ZXMgdGhlIG1lc3NhZ2UNCiAgIGZvcm1hdC48L0ZPTlQ+PC9TVFJPTkc+DQoNCiAgIFRoZSBtZXNz YWdlIGlzIHNlbnQgaW4gVURQIHdpdGggYSBkZXN0aW5hdGlvbiBVRFAgcG9ydCBvZiA0MzQyIGFu ZCBhDQogICByYW5kb21seSBzZWxlY3RlZCBVRFAgc291cmNlIHBvcnQgbnVtYmVyLg0KDQogICBU aGUgTWFwLVJlZ2lzdGVyIG1lc3NhZ2UgZm9ybWF0IGlzOg0KDQogICAgICAgIDAgICAgICAgICAg ICAgICAgICAgMSAgICAgICAgICAgICAgICAgICAyICAgICAgICAgICAgICAgICAgIDMNCiAgICAg ICAgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYg NyA4IDkgMCAxDQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgICB8VHlwZT0zIHxQfCAgICAgICAgICAg IFJlc2VydmVkICAgICAgICAgICAgICAgICB8IFJlY29yZCBDb3VudCAgfA0KICAgICAgICstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rDQogICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICBOb25jZSAuIC4gLiAgICAgICAg ICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICAgIHwgICAgICAgICAg ICAgICAgICAgICAgICAgLiAuIC4gTm9uY2UgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQog ICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSsNCiAgICAgICB8ICAgICAgICAgICAgS2V5IElEICAgICAgICAgICAgIHwg IEF1dGhlbnRpY2F0aW9uIERhdGEgTGVuZ3RoICAgfA0KICAgICAgICstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgICAg fiAgICAgICAgICAgICAgICAgICAgIEF1dGhlbnRpY2F0aW9uIERhdGEgICAgICAgICAgICAgICAg ICAgICAgIH4NCiAgICstJmd0OyArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgfCAgIHwgICAgICAgICAgICAgICAgICAg ICAgICAgIFJlY29yZCAgVFRMICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICB8ICAgKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSsNCiAgIFIgICB8IExvY2F0b3IgQ291bnQgfCBFSUQgbWFzay1sZW4gIHwgQUNUIHxBfCAg ICAgIFJlc2VydmVkICAgICAgICAgfA0KICAgZSAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICBjICAgfCAgICAgICAg ICAgUmVzZXJ2ZWQgICAgICAgICAgICB8ICAgICAgICAgICAgRUlELUFGSSAgICAgICAgICAgIHwN CiAgIG8gICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKw0KICAgciAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgIEVJRC1w cmVmaXggICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICBkICAgKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgIHwg IC98ICAgIFByaW9yaXR5ICAgfCAgICBXZWlnaHQgICAgIHwgIE0gUHJpb3JpdHkgICB8ICAgTSBX ZWlnaHQgICAgfA0KICAgfCBMICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICB8IG8gfCAgICAgICAgICAgVW51c2VkIEZs YWdzICAgICAgfFJ8ICAgICAgICAgICBMb2MtQUZJICAgICAgICAgICAgIHwNCiAgIHwgYyArLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKw0KICAgfCAgXHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgIExvY2F0b3IgICAgICAg ICAgICAgICAgICAgICAgICAgICB8DQogICArLSZndDsgKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCg0KICAgUGFja2V0IGZp ZWxkIGRlc2NyaXB0aW9uczoNCg0KICAgVHlwZTogICAzIChNYXAtUmVnaXN0ZXIpDQoNCiAgIFA6 IFNldCB0byAxIGJ5IGFuIEVUUiB3aGljaCBzZW5kcyBhIE1hcC1SZWdpc3RlciBtZXNzYWdlIHJl cXVlc3RpbmcNCiAgICAgIGZvciB0aGUgTWFwLVNlcnZlciB0byBwcm94eSBNYXAtUmVwbHkuICBU aGUgTWFwLVNlcnZlciB3aWxsIHNlbmQNCiAgICAgIG5vbi1hdXRob3JpdGF0aXZlIE1hcC1SZXBs aWVzIG9uIGJlaGFsZiBvZiB0aGUgRVRSLiAgRGV0YWlscyBvbg0KICAgICAgdGhpcyB1c2FnZSB3 aWxsIGJlIHByb3ZpZGVkIGluIGEgZnV0dXJlIHZlcnNpb24gb2YgdGhpcyBkcmFmdC4NCg0KICAg UmVzZXJ2ZWQ6ICBTZXQgdG8gMCBvbiB0cmFuc21pc3Npb24gYW5kIGlnbm9yZWQgb24gcmVjZWlw dC4NCg0KICAgUmVjb3JkIENvdW50OiAgVGhlIG51bWJlciBvZiByZWNvcmRzIGluIHRoaXMgTWFw LVJlZ2lzdGVyIG1lc3NhZ2UuICBBDQogICAgICByZWNvcmQgaXMgY29tcHJpc2VkIG9mIHRoYXQg cG9ydGlvbiBvZiB0aGUgcGFja2V0IGxhYmVsZWQgJ1JlY29yZCcNCiAgICAgIGFib3ZlIGFuZCBv Y2N1cnMgdGhlIG51bWJlciBvZiB0aW1lcyBlcXVhbCB0byBSZWNvcmQgY291bnQuDQoNCiAgIE5v bmNlOiAgVGhpcyA4LWJ5dGUgTm9uY2UgZmllbGQgaXMgc2V0IHRvIDAgaW4gTWFwLVJlZ2lzdGVy IG1lc3NhZ2VzLg0KDQogICBLZXkgSUQ6ICBBIGNvbmZpZ3VyZWQgSUQgdG8gZmluZCB0aGUgY29u ZmlndXJlZCBNZXNzYWdlDQogICAgICBBdXRoZW50aWNhdGlvbiBDb2RlIChNQUMpIGFsZ29yaXRo bSBhbmQga2V5IHZhbHVlIHVzZWQgZm9yIHRoZQ0KICAgICAgYXV0aGVudGljYXRpb24gZnVuY3Rp b24uDQoNCiAgIEF1dGhlbnRpY2F0aW9uIERhdGEgTGVuZ3RoOiAgVGhlIGxlbmd0aCBpbiBieXRl cyBvZiB0aGUNCiAgICAgIEF1dGhlbnRpY2F0aW9uIERhdGEgZmllbGQgdGhhdCBmb2xsb3dzIHRo aXMgZmllbGQuICBUaGUgbGVuZ3RoIG9mDQogICAgICB0aGUgdGhlIEF1dGhlbnRpY2F0aW9uIERh dGEgZmllbGQgaXMgZGVwZW5kZW50IG9uIHRoZSBNZXNzYWdlDQogICAgICBBdXRoZW50aWNhdGlv biBDb2RlIChNQUMpIGFsZ29yaXRobSB1c2VkLiAgVGhlIGxlbmd0aCBmaWVsZCBhbGxvd3MNCiAg ICAgIGEgZGV2aWNlIHRoYXQgZG9lc24ndCBrbm93IHRoZSBNQUMgYWxnb3JpdGhtIHRvIGNvcnJl Y3RseSBwYXJzZQ0KICAgICAgdGhlIHBhY2tldC4NCg0KICAgQXV0aGVudGljYXRpb24gRGF0YTog IFRoZSBtZXNzYWdlIGRpZ2VzdCB1c2VkIGZyb20gdGhlIG91dHB1dCBvZiB0aGUNCiAgICAgIE1l c3NhZ2UgQXV0aGVudGljYXRpb24gQ29kZSAoTUFDKSBhbGdvcml0aG0uICBUaGUgZW50aXJlIE1h cC0NCiAgICAgIFJlZ2lzdGVyIHBheWxvYWQgaXMgYXV0aGVudGljYXRlZCB3aXRoIHRoaXMgZmll bGQgcHJlc2V0IHRvIDAuDQogICAgICBBZnRlciB0aGUgTUFDIGlzIGNvbXB1dGVkLCBpdCBpcyBw bGFjZWQgaW4gdGhpcyBmaWVsZC4NCiAgICAgIEltcGxlbWVudGF0aW9ucyBvZiB0aGlzIHNwZWNp ZmljYXRpb24gTVVTVCBpbmNsdWRlIHN1cHBvcnQgZm9yDQogICAgICBITUFDLVNIQS0xLTk2IFtS RkMyNDA0XSBhbmQgc3VwcG9ydCBmb3IgSE1BQy1TSEEtMTI4LTI1NiBbUkZDNDYzNF0NCiAgICAg IGlzIHJlY29tbWVuZGVkLg0KDQogICBUaGUgZGVmaW5pdGlvbiBvZiB0aGUgcmVzdCBvZiB0aGUg TWFwLVJlZ2lzdGVyIGNhbiBiZSBmb3VuZCBpbiB0aGUNCiAgIE1hcC1SZXBseSBzZWN0aW9uLiAg PFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPkhvd2V2ZXIsIHRoZSByZWNvcmQgVFRMIGZpZWxk IGlzIG5vdCB1c2VkIGFuZCBzZXQNCiAgIHRvIDAuPC9GT05UPjwvU1RST05HPg0KDQo2LjEuNy4g IEVuY2Fwc3VhbHRlZCBDb250cm9sIE1lc3NhZ2UgRm9ybWF0DQoNCiAgIEFuIEVuY2Fwc3VsYXRl ZCBDb250cm9sIE1lc3NhZ2UgaXMgdXNlZCB0byBlbmNhcHN1bGF0ZSBjb250cm9sDQogICBwYWNr ZXRzIHNlbnQgYmV0d2VlbiB4VFJzIGFuZCB0aGUgbWFwcGluZyBkYXRhYmFzZSBzeXN0ZW0gZGVz Y3JpYmVkDQogICBpbiBbTElTUC1NU10uDQoNCiAgICAgICAgMCAgICAgICAgICAgICAgICAgICAx ICAgICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAgICAgMw0KICAgICAgICAwIDEgMiAz IDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEN CiAgICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKw0KICAgICAvIHwgICAgICAgICAgICAgICAgICAgICAgIElQdjQgb3Ig SVB2NiBIZWFkZXIgICAgICAgICAgICAgICAgICAgICB8DQogICBPSCAgfCAgICAgICAgICAgICAg ICAgICAgICAodXNlcyBSTE9DIGFkZHJlc3NlcykgICAgICAgICAgICAgICAgICAgIHwNCiAgICAg XCB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgfA0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgIC8gfCAgICAgICBTb3VyY2UgUG9ydCA9 IHh4eHggICAgICB8ICAgICAgIERlc3QgUG9ydCA9IDQzNDIgICAgICAgIHwNCiAgIFVEUCArLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKw0KICAgICBcIHwgICAgICAgICAgIFVEUCBMZW5ndGggICAgICAgICAgfCAgICAgICAgVURQ IENoZWNrc3VtICAgICAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgIExIICB8VHlwZT04IHwg ICAgICAgICAgICAgICAgICAgUmVzZXJ2ZWQgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0K ICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rDQogICAgIC8gfCAgICAgICAgICAgICAgICAgICAgICAgSVB2NCBvciBJ UHY2IEhlYWRlciAgICAgICAgICAgICAgICAgICAgIHwNCiAgIElIICB8ICAgICAgICAgICAgICAg ICAgKHVzZXMgUkxPQyBvciBFSUQgYWRkcmVzc2VzKSAgICAgICAgICAgICAgICAgfA0KICAgICBc IHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgLyB8ICAgICAgIFNvdXJjZSBQb3J0ID0g eHh4eCAgICAgIHwgICAgICAgRGVzdCBQb3J0ID0geXl5eSAgICAgICAgfA0KICAgVURQICstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rDQogICAgIFwgfCAgICAgICAgICAgVURQIExlbmd0aCAgICAgICAgICB8ICAgICAgICBVRFAg Q2hlY2tzdW0gICAgICAgICAgIHwNCiAgICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgTENNIHwgICAgICAgICAg ICAgICAgICAgICAgTElTUCBDb250cm9sIE1lc3NhZ2UgICAgICAgICAgICAgICAgICAgICB8DQog ICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSsNCg0KICAgUGFja2V0IGhlYWRlciBkZXNjcmlwdGlvbnM6DQoNCiAgIE9I OiAgIFRoZSBvdXRlciBJUHY0IG9yIElQdjYgaGVhZGVyIHdoaWNoIHVzZXMgUkxPQyBhZGRyZXNz ZXMgaW4gdGhlDQogICAgICBzb3VyY2UgYW5kIGRlc3RpbmF0aW9uIGhlYWRlciBhZGRyZXNzIGZp ZWxkcy4NCg0KICAgVURQOiAgIFRoZSBvdXRlciBVRFAgaGVhZGVyIHdpdGggZGVzdGluYXRpb24g cG9ydCA0MzQyLiAgVGhlIHNvdXJjZQ0KICAgICAgcG9ydCBpcyByYW5kb21seSBhbGxvY2F0ZWQu ICBUaGUgY2hlY2tzdW0gZmllbGQgTVVTVCBiZSBub24temVyby4NCg0KICAgTEg6ICAgVHlwZSA4 IGlzIGRlZmluZWQgdG8gYmUgYSAiTElTUCBFbmNhcHN1bGF0ZWQgQ29udHJvbCBNZXNzYWdlIg0K ICAgICAgYW5kIHdoYXQgZm9sbG93cyBpcyBlaXRoZXIgYW4gSVB2NCBvciBJUHY2IGhlYWRlciBh cyBlbmNvZGVkIGJ5DQogICAgICB0aGUgZmlyc3QgNCBiaXRzIGFmdGVyIHRoZSByZXNlcnZlZCBm aWVsZC4NCg0KICAgSUg6ICAgVGhlIGlubmVyIElQdjQgb3IgSVB2NiBoZWFkZXIgd2hpY2ggY2Fu IHVzZSBlaXRoZXIgUkxPQyBvciBFSUQNCiAgICAgIGFkZHJlc3NlcyBpbiB0aGUgaGVhZGVyIGFk ZHJlc3MgZmllbGRzLiAgV2hlbiBhIE1hcC1SZXF1ZXN0IGlzDQogICAgICBlbmNhcHN1bGF0ZWQg aW4gdGhpcyBwYWNrZXQgZm9ybWF0IHRoZSBkZXN0aW5hdGlvbiBhZGRyZXNzIGluIHRoaXMNCiAg ICAgIGhlYWRlciBpcyBhbiBFSUQuDQoNCiAgIFVEUDogICBUaGUgaW5uZXIgVURQIGhlYWRlciB3 aGVyZSB0aGUgcG9ydCBhc3NpZ25tZW50cyBkZXBlbmRzIG9uIHRoZQ0KICAgICAgY29udHJvbCBw YWNrZXQgYmVpbmcgZW5jYXBzdWxhdGVkLiAgV2hlbiB0aGUgY29udHJvbCBwYWNrZXQgaXMgYQ0K ICAgICAgTWFwLVJlcXVlc3Qgb3IgTWFwLVJlZ2lzdGVyLCB0aGUgc291cmNlIHBvcnQgaXMgcmFu ZG9tbHkgYXNzaWduZWQNCiAgICAgIGFuZCB0aGUgZGVzdGluYXRpb24gcG9ydCBpcyA0MzQyLiAg V2hlbiB0aGUgY29udHJvbCBwYWNrZXQgaXMgYQ0KICAgICAgTWFwLVJlcGx5LCB0aGUgc291cmNl IHBvcnQgaXMgNDM0MiBhbmQgdGhlIGRlc3RpbmF0aW9uIHBvcnQgaXMNCiAgICAgIGFzc2lnbmVk IGZyb20gdGhlIHNvdXJjZSBwb3J0IG9mIHRoZSBpbnZva2luZyBNYXAtUmVxdWVzdC4gIFBvcnQN CiAgICAgIG51bWJlciA0MzQxIE1VU1QgTk9UIGJlIGFzc2lnbmVkIHRvIGVpdGhlciBwb3J0LiAg VGhlIGNoZWNrc3VtDQogICAgICBmaWVsZCBNVVNUIGJlIG5vbi16ZXJvLg0KDQogICBMQ006ICAg VGhlIGZvcm1hdCBpcyBvbmUgb2YgdGhlIGNvbnRyb2wgbWVzc2FnZSBmb3JtYXRzIGRlc2NyaWJl ZCBpbg0KICAgICAgdGhpcyBzZWN0aW9uLiAgQXQgdGhpcyB0aW1lLCBvbmx5IE1hcC1SZXF1ZXN0 IG1lc3NhZ2VzIGFuZCBQSU0NCiAgICAgIEpvaW4tUHJ1bmUgbWVzc2FnZXMgW01MSVNQXSBhcmUg YWxsb3dlZCB0byBiZSBlbmNhcHN1bGF0ZWQuDQogICAgICBFbmNhcHN1bGF0aW5nIG90aGVyIHR5 cGVzIG9mIExJU1AgY29udHJvbCBtZXNzYWdlcyBhcmUgZm9yIGZ1cnRoZXINCiAgICAgIHN0dWR5 LiAgPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPldoZW4gTWFwLVJlcXVlc3RzIGFyZSBzZW50 IGZvciBSTE9DLXByb2JpbmcgcHVycG9zZXMgKGkuZQ0KICAgICAgdGhlIFAtYml0IGlzIHNldCks IHRoZXkgTVVTVCBub3QgYmUgc2VudCBpbnNpZGUgRW5jYXBzdWxhdGVkDQogICAgICBDb250cm9s IE1lc3NhZ2VzLjwvRk9OVD48L1NUUk9ORz4NCg0KNi4yLiAgUm91dGluZyBMb2NhdG9yIFNlbGVj dGlvbg0KDQogICBCb3RoIGNsaWVudC1zaWRlIGFuZCBzZXJ2ZXItc2lkZSBtYXkgbmVlZCBjb250 cm9sIG92ZXIgdGhlIHNlbGVjdGlvbg0KICAgb2YgUkxPQ3MgZm9yIGNvbnZlcnNhdGlvbnMgYmV0 d2VlbiB0aGVtLiAgVGhpcyBjb250cm9sIGlzIGFjaGlldmVkIGJ5DQogICBtYW5pcHVsYXRpbmcg dGhlIFByaW9yaXR5IGFuZCBXZWlnaHQgZmllbGRzIGluIEVJRC10by1STE9DIE1hcC1SZXBseQ0K ICAgbWVzc2FnZXMuICBBbHRlcm5hdGl2ZWx5LCBSTE9DIGluZm9ybWF0aW9uIG1heSBiZSBnbGVh bmVkIGZyb20NCiAgIHJlY2VpdmVkIHR1bm5lbGVkIHBhY2tldHMgb3IgRUlELXRvLVJMT0MgTWFw LVJlcXVlc3QgbWVzc2FnZXMuDQoNCiAgIFRoZSBmb2xsb3dpbmcgZW51bWVyYXRlcyBkaWZmZXJl bnQgc2NlbmFyaW9zIGZvciBjaG9vc2luZyBSTE9DcyBhbmQNCiAgIHRoZSBjb250cm9scyB0aGF0 IGFyZSBhdmFpbGFibGU6DQoNCiAgIG8gIFNlcnZlci1zaWRlIHJldHVybnMgb25lIFJMT0MuICBD bGllbnQtc2lkZSBjYW4gb25seSB1c2Ugb25lIFJMT0MuDQogICAgICBTZXJ2ZXItc2lkZSBoYXMg Y29tcGxldGUgY29udHJvbCBvZiB0aGUgc2VsZWN0aW9uLg0KDQogICBvICBTZXJ2ZXItc2lkZSBy ZXR1cm5zIGEgbGlzdCBvZiBSTE9DIHdoZXJlIGEgc3Vic2V0IG9mIHRoZSBsaXN0IGhhcw0KICAg ICAgdGhlIHNhbWUgYmVzdCBwcmlvcml0eS4gIENsaWVudCBjYW4gb25seSB1c2UgdGhlIHN1YnNl dCBsaXN0DQogICAgICBhY2NvcmRpbmcgdG8gdGhlIHdlaWdodGluZyBhc3NpZ25lZCBieSB0aGUg c2VydmVyLXNpZGUuICBJbiB0aGlzDQogICAgICBjYXNlLCB0aGUgc2VydmVyLXNpZGUgY29udHJv bHMgYm90aCB0aGUgc3Vic2V0IGxpc3QgYW5kIGxvYWQtDQogICAgICBzcGxpdHRpbmcgYWNyb3Nz IGl0cyBtZW1iZXJzLiAgVGhlIGNsaWVudC1zaWRlIGNhbiB1c2UgUkxPQ3MNCiAgICAgIG91dHNp ZGUgb2YgdGhlIHN1YnNldCBsaXN0IGlmIGl0IGRldGVybWluZXMgdGhhdCB0aGUgc3Vic2V0IGxp c3QNCiAgICAgIGlzIHVucmVhY2hhYmxlICh1bmxlc3MgUkxPQ3MgYXJlIHNldCB0byBhIFByaW9y aXR5IG9mIDI1NSkuICBTb21lDQogICAgICBzaGFyaW5nIG9mIGNvbnRyb2wgZXhpc3RzOiB0aGUg c2VydmVyLXNpZGUgZGV0ZXJtaW5lcyB0aGUNCiAgICAgIGRlc3RpbmF0aW9uIFJMT0MgbGlzdCBh bmQgbG9hZCBkaXN0cmlidXRpb24gd2hpbGUgdGhlIGNsaWVudC1zaWRlDQogICAgICBoYXMgdGhl IG9wdGlvbiBvZiB1c2luZyBhbHRlcm5hdGl2ZXMgdG8gdGhpcyBsaXN0IGlmIFJMT0NzIGluIHRo ZQ0KICAgICAgbGlzdCBhcmUgdW5yZWFjaGFibGUuDQoNCiAgIG8gIFNlcnZlci1zaWRlIHNldHMg d2VpZ2h0IG9mIDAgZm9yIHRoZSBSTE9DIHN1YnNldCBsaXN0LiAgSW4gdGhpcw0KICAgICAgY2Fz ZSwgdGhlIGNsaWVudC1zaWRlIGNhbiBjaG9vc2UgaG93IHRoZSB0cmFmZmljIGxvYWQgaXMgc3By ZWFkDQogICAgICBhY3Jvc3MgdGhlIHN1YnNldCBsaXN0LiAgQ29udHJvbCBpcyBzaGFyZWQgYnkg dGhlIHNlcnZlci1zaWRlDQogICAgICBkZXRlcm1pbmluZyB0aGUgbGlzdCBhbmQgdGhlIGNsaWVu dCBkZXRlcm1pbmluZyBsb2FkIGRpc3RyaWJ1dGlvbi4NCiAgICAgIEFnYWluLCB0aGUgY2xpZW50 IGNhbiB1c2UgYWx0ZXJuYXRpdmUgUkxPQ3MgaWYgdGhlIHNlcnZlci1wcm92aWRlZA0KICAgICAg bGlzdCBvZiBSTE9DcyBhcmUgdW5yZWFjaGFibGUuDQoNCiAgIG8gIEVpdGhlciBzaWRlIChtb3Jl IGxpa2VseSBvbiB0aGUgc2VydmVyLXNpZGUgRVRSKSBkZWNpZGVzIG5vdCB0bw0KICAgICAgc2Vu ZCBhIE1hcC1SZXF1ZXN0LiAgRm9yIGV4YW1wbGUsIGlmIHRoZSBzZXJ2ZXItc2lkZSBFVFIgZG9l cyBub3QNCiAgICAgIHNlbmQgTWFwLVJlcXVlc3RzLCBpdCBnbGVhbnMgUkxPQ3MgZnJvbSB0aGUg Y2xpZW50LXNpZGUgSVRSLA0KICAgICAgZ2l2aW5nIHRoZSBjbGllbnQtc2lkZSBJVFIgcmVzcG9u c2liaWxpdHkgZm9yIGJpZGlyZWN0aW9uYWwgUkxPQw0KICAgICAgcmVhY2hhYmlsaXR5IGFuZCBw cmVmZXJhYmlsaXR5LiAgU2VydmVyLXNpZGUgRVRSIGdsZWFuaW5nIG9mIHRoZQ0KICAgICAgY2xp ZW50LXNpZGUgSVRSIFJMT0MgaXMgZG9uZSBieSBjYWNoaW5nIHRoZSBpbm5lciBoZWFkZXIgc291 cmNlDQogICAgICBFSUQgYW5kIHRoZSBvdXRlciBoZWFkZXIgc291cmNlIFJMT0Mgb2YgcmVjZWl2 ZWQgcGFja2V0cy4gIFRoZQ0KICAgICAgY2xpZW50LXNpZGUgSVRSIGNvbnRyb2xzIGhvdyB0cmFm ZmljIGlzIHJldHVybmVkIGFuZCBjYW4gYWx0ZXJuYXRlDQogICAgICB1c2luZyBhbiBvdXRlciBo ZWFkZXIgc291cmNlIFJMT0MsIHdoaWNoIHRoZW4gY2FuIGJlIGFkZGVkIHRvIHRoZQ0KICAgICAg bGlzdCB0aGUgc2VydmVyLXNpZGUgRVRSIHVzZXMgdG8gcmV0dXJuIHRyYWZmaWMuICBTaW5jZSBu bw0KICAgICAgUHJpb3JpdHkgb3IgV2VpZ2h0cyBhcmUgcHJvdmlkZWQgdXNpbmcgdGhpcyBtZXRo b2QsIHRoZSBzZXJ2ZXItDQogICAgICBzaWRlIEVUUiBtdXN0IGFzc3VtZSBlYWNoIGNsaWVudC1z aWRlIElUUiBSTE9DIHVzZXMgdGhlIHNhbWUgYmVzdA0KICAgICAgUHJpb3JpdHkgd2l0aCBhIFdl aWdodCBvZiB6ZXJvLiAgSW4gYWRkaXRpb24sIHNpbmNlIEVJRC1wcmVmaXgNCiAgICAgIGVuY29k aW5nIGNhbm5vdCBiZSBjb252ZXllZCBpbiBkYXRhIHBhY2tldHMsIHRoZSBFSUQtdG8tUkxPQyBj YWNoZQ0KICAgICAgb24gdHVubmVsIHJvdXRlcnMgY2FuIGdyb3cgdG8gYmUgdmVyeSBsYXJnZS4N Cg0KICAgbyAgQSAiZ2xlYW5lZCIgbWFwLWNhY2hlIGVudHJ5LCBvbmUgbGVhcm5lZCBmcm9tIHRo ZSBzb3VyY2UgUkxPQyBvZiBhDQogICAgICByZWNlaXZlZCBlbmNhcHN1bGF0ZWQgcGFja2V0LCBp cyBvbmx5IHN0b3JlZCBhbmQgdXNlZCBmb3IgYSBmZXcNCiAgICAgIHNlY29uZHMsIHBlbmRpbmcg dmVyaWZpY2F0aW9uLiAgVmVyaWZpY2F0aW9uIGlzIHBlcmZvcm1lZCBieQ0KICAgICAgc2VuZGlu ZyBhIE1hcC1SZXF1ZXN0IHRvIHRoZSBzb3VyY2UgRUlEICh0aGUgaW5uZXIgaGVhZGVyIElQDQog ICAgICBzb3VyY2UgYWRkcmVzcykgb2YgdGhlIHJlY2VpdmVkIGVuY2Fwc3VsYXRlZCBwYWNrZXQu ICBBIHJlcGx5IHRvDQogICAgICB0aGlzICJ2ZXJpZnlpbmcgTWFwLVJlcXVlc3QiIGlzIHVzZWQg dG8gZnVsbHkgcG9wdWxhdGUgdGhlIG1hcC0NCiAgICAgIGNhY2hlIGVudHJ5IGZvciB0aGUgImds ZWFuZWQiIEVJRCBhbmQgaXMgc3RvcmVkIGFuZCB1c2VkIGZvciB0aGUNCiAgICAgIHRpbWUgaW5k aWNhdGVkIGZyb20gdGhlIFRUTCBmaWVsZCBvZiBhIHJlY2VpdmVkIE1hcC1SZXBseS4gIFdoZW4g YQ0KICAgICAgdmVyaWZpZWQgbWFwLWNhY2hlIGVudHJ5IGlzIHN0b3JlZCwgZGF0YSBnbGVhbmlu ZyBubyBsb25nZXIgb2NjdXJzDQogICAgICBmb3Igc3Vic2VxdWVudCBwYWNrZXRzIHdoaWNoIGhh dmUgYSBzb3VyY2UgRUlEIHRoYXQgbWF0Y2hlcyB0aGUNCiAgICAgIEVJRC1wcmVmaXggb2YgdGhl IHZlcmlmaWVkIGVudHJ5Lg0KDQogICBSTE9DcyB0aGF0IGFwcGVhciBpbiBFSUQtdG8tUkxPQyBN YXAtUmVwbHkgbWVzc2FnZXMgYXJlIGFzc3VtZWQgdG8gYmUNCiAgIHJlYWNoYWJsZSB3aGVuIHRo ZSBSLWJpdCBmb3IgdGhlIGxvY2F0b3IgcmVjb3JkIGlzIHNldCB0byAxLiAgTmVpdGhlcg0KICAg dGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiBhIE1hcC1SZXBseSBvciB0aGF0IHN0b3JlZCBp biB0aGUNCiAgIG1hcHBpbmcgZGF0YWJhc2Ugc3lzdGVtIHByb3ZpZGUgcmVhY2hhYmlsaXR5IGlu Zm9ybWF0aW9uIGZvciBSTE9Dcy4NCiAgIFN1Y2ggcmVhY2hhYmlsaXR5IG5lZWRzIHRvIGJlIGRl dGVybWluZWQgc2VwYXJhdGVseSwgdXNpbmcgb25lIG9yDQogICBtb3JlIG9mIHRoZSBSb3V0aW5n IExvY2F0b3IgUmVhY2hhYmlsaXR5IEFsZ29yaXRobXMgZGVzY3JpYmVkIGluIHRoZQ0KICAgbmV4 dCBzZWN0aW9uLg0KDQo2LjMuICBSb3V0aW5nIExvY2F0b3IgUmVhY2hhYmlsaXR5DQoNCiAgIFNl dmVyYWwgbWVjaGFuaXNtcyBmb3IgZGV0ZXJtaW5pbmcgUkxPQyByZWFjaGFiaWxpdHkgYXJlIGN1 cnJlbnRseQ0KICAgZGVmaW5lZDoNCg0KICAgMS4gIEFuIEVUUiBtYXkgZXhhbWluZSB0aGUgTG9j LVN0YXR1cy1CaXRzIGluIHRoZSBMSVNQIGhlYWRlciBvZiBhbg0KICAgICAgIGVuY2Fwc3VsYXRl ZCBkYXRhIHBhY2tldCByZWNlaXZlZCBmcm9tIGFuIElUUi4gIElmIHRoZSBFVFIgaXMNCiAgICAg ICBhbHNvIGFjdGluZyBhcyBhbiBJVFIgYW5kIGhhcyB0cmFmZmljIHRvIHJldHVybiB0byB0aGUg b3JpZ2luYWwNCiAgICAgICBJVFIgc2l0ZSwgaXQgY2FuIHVzZSB0aGlzIHN0YXR1cyBpbmZvcm1h dGlvbiB0byBoZWxwIHNlbGVjdCBhbg0KICAgICAgIFJMT0MuDQoNCiAgIDIuICBBbiBJVFIgbWF5 IHJlY2VpdmUgYW4gSUNNUCBOZXR3b3JrIG9yIElDTVAgSG9zdCBVbnJlYWNoYWJsZQ0KICAgICAg IG1lc3NhZ2UgZm9yIGFuIFJMT0MgaXQgaXMgdXNpbmcuICBUaGlzIGluZGljYXRlcyB0aGF0IHRo ZSBSTE9DIGlzDQogICAgICAgbGlrZWx5IGRvd24uDQoNCiAgIDMuICBBbiBJVFIgd2hpY2ggcGFy dGljaXBhdGVzIGluIHRoZSBnbG9iYWwgcm91dGluZyBzeXN0ZW0gY2FuDQogICAgICAgZGV0ZXJt aW5lIHRoYXQgYW4gUkxPQyBpcyBkb3duIGlmIG5vIEJHUCBSSUIgcm91dGUgZXhpc3RzIHRoYXQN CiAgICAgICBtYXRjaGVzIHRoZSBSTE9DIElQIGFkZHJlc3MuDQoNCiAgIDQuICBBbiBJVFIgbWF5 IHJlY2VpdmUgYW4gSUNNUCBQb3J0IFVucmVhY2hhYmxlIG1lc3NhZ2UgZnJvbSBhDQogICAgICAg ZGVzdGluYXRpb24gaG9zdC4gIFRoaXMgb2NjdXJzIGlmIGFuIElUUiBhdHRlbXB0cyB0byB1c2UN CiAgICAgICBpbnRlcndvcmtpbmcgW0lOVEVSV09SS10gYW5kIExJU1AtZW5jYXBzdWxhdGVkIGRh dGEgaXMgc2VudCB0byBhDQogICAgICAgbm9uLUxJU1AtY2FwYWJsZSBzaXRlLg0KDQogICA1LiAg QW4gSVRSIG1heSByZWNlaXZlIGEgTWFwLVJlcGx5IGZyb20gYSBFVFIgaW4gcmVzcG9uc2UgdG8g YQ0KICAgICAgIHByZXZpb3VzbHkgc2VudCBNYXAtUmVxdWVzdC4gIFRoZSBSTE9DIHNvdXJjZSBv ZiB0aGUgTWFwLVJlcGx5IGlzDQogICAgICAgbGlrZWx5IHVwIHNpbmNlIHRoZSBFVFIgd2FzIGFi bGUgdG8gc2VuZCB0aGUgTWFwLVJlcGx5IHRvIHRoZQ0KICAgICAgIElUUi4NCg0KICAgNi4gIFdo ZW4gYW4gRVRSIHJlY2VpdmVzIGFuIGVuY2Fwc3VsYXRlZCBwYWNrZXQgZnJvbSBhbiBJVFIsIHRo ZQ0KICAgICAgIHNvdXJjZSBSTE9DIGZyb20gdGhlIG91dGVyIGhlYWRlciBvZiB0aGUgcGFja2V0 IGlzIGxpa2VseSB1cC4NCg0KICAgNy4gIEFuIElUUi9FVFIgcGFpciBjYW4gdXNlIHRoZSBMb2Nh dG9yIFJlYWNoYWJpbGl0eSBBbGdvcml0aG1zDQogICAgICAgZGVzY3JpYmVkIGluIHRoaXMgc2Vj dGlvbiwgbmFtZWx5IEVjaG8tTm9uY2luZyBvciBSTE9DLVByb2JpbmcuDQoNCiAgIFdoZW4gZGV0 ZXJtaW5pbmcgTG9jYXRvciB1cC9kb3duIHJlYWNoYWJpbGl0eSBieSBleGFtaW5pbmcgdGhlIExv Yy0NCiAgIFN0YXR1cy1CaXRzIGZyb20gdGhlIExJU1AgZW5jYXBzdWxhdGVkIGRhdGEgcGFja2V0 LCBhbiBFVFIgd2lsbA0KICAgcmVjZWl2ZSB1cCB0byBkYXRlIHN0YXR1cyBmcm9tIGFuIGVuY2Fw c3VsYXRpbmcgSVRSIGFib3V0DQogICByZWFjaGFiaWxpdHkgZm9yIGFsbCBFVFJzIGF0IHRoZSBz aXRlLiAgQ0UtYmFzZWQgSVRScyBhdCB0aGUgc291cmNlDQogICBzaXRlIGNhbiBkZXRlcm1pbmUg cmVhY2hhYmlsaXR5IHJlbGF0aXZlIHRvIGVhY2ggb3RoZXIgdXNpbmcgdGhlIHNpdGUNCiAgIElH UCBhcyBmb2xsb3dzOg0KDQogICBvICBVbmRlciBub3JtYWwgY2lyY3Vtc3RhbmNlcywgZWFjaCBJ VFIgd2lsbCBhZHZlcnRpc2UgYSBkZWZhdWx0DQogICAgICByb3V0ZSBpbnRvIHRoZSBzaXRlIElH UC4NCg0KICAgbyAgSWYgYW4gSVRSIGZhaWxzIG9yIGlmIHRoZSB1cHN0cmVhbSBsaW5rIHRvIGl0 cyBQRSBmYWlscywgaXRzDQogICAgICBkZWZhdWx0IHJvdXRlIHdpbGwgZWl0aGVyIHRpbWUtb3V0 IG9yIGJlIHdpdGhkcmF3bi4NCg0KICAgRWFjaCBJVFIgY2FuIHRodXMgb2JzZXJ2ZSB0aGUgcHJl c2VuY2Ugb3IgbGFjayBvZiBhIGRlZmF1bHQgcm91dGUNCiAgIG9yaWdpbmF0ZWQgYnkgdGhlIG90 aGVycyB0byBkZXRlcm1pbmUgdGhlIExvY2F0b3IgU3RhdHVzIEJpdHMgaXQgc2V0cw0KICAgZm9y IHRoZW0uDQoNCiAgIFJMT0NzIGxpc3RlZCBpbiBhIE1hcC1SZXBseSBhcmUgbnVtYmVyZWQgd2l0 aCBvcmRpbmFscyAwIHRvIG4tMS4gIFRoZQ0KICAgTG9jLVN0YXR1cy1CaXRzIGluIGEgTElTUCBl bmNhcHN1bGF0ZWQgcGFja2V0IGFyZSBudW1iZXJlZCBmcm9tIDAgdG8NCiAgIG4tMSBzdGFydGlu ZyB3aXRoIHRoZSBsZWFzdCBzaWduaWZpY2FudCBiaXQuICBGb3IgZXhhbXBsZSwgaWYgYW4gUkxP Qw0KICAgbGlzdGVkIGluIHRoZSAzcmQgcG9zaXRpb24gb2YgdGhlIE1hcC1SZXBseSBnb2VzIGRv d24gKG9yZGluYWwgdmFsdWUNCiAgIDIpLCB0aGVuIGFsbCBJVFJzIGF0IHRoZSBzaXRlIHdpbGwg Y2xlYXIgdGhlIDNyZCBsZWFzdCBzaWduaWZpY2FudA0KICAgYml0ICh4eHh4IHgweHgpIG9mIHRo ZSBMb2MtU3RhdHVzLUJpdHMgZmllbGQgZm9yIHRoZSBwYWNrZXRzIHRoZXkNCiAgIGVuY2Fwc3Vs YXRlLg0KDQogICBXaGVuIGFuIEVUUiBkZWNhcHN1bGF0ZXMgYSBwYWNrZXQsIGl0IHdpbGwgY2hl Y2sgZm9yIGFueSBjaGFuZ2UgaW4NCiAgIHRoZSBMb2MtU3RhdHVzLUJpdHMgZmllbGQuICBXaGVu IGEgYml0IGdvZXMgZnJvbSAxIHRvIDAsIHRoZSBFVFIgd2lsbA0KICAgcmVmcmFpbiBmcm9tIGVu Y2Fwc3VsYXRpbmcgcGFja2V0cyB0byBhbiBSTE9DIHRoYXQgaXMgaW5kaWNhdGVkIGFzDQogICBk b3duLiAgSXQgd2lsbCBvbmx5IHJlc3VtZSB1c2luZyB0aGF0IFJMT0MgaWYgdGhlIGNvcnJlc3Bv bmRpbmcgTG9jLQ0KICAgU3RhdHVzLUJpdCByZXR1cm5zIHRvIGEgdmFsdWUgb2YgMS4gIExvYy1T dGF0dXMtQml0cyBhcmUgYXNzb2NpYXRlZA0KICAgd2l0aCBhIGxvY2F0b3Itc2V0IHBlciBFSUQt cHJlZml4LiAgVGhlcmVmb3JlLCB3aGVuIGEgbG9jYXRvciBiZWNvbWVzDQogICB1bnJlYWNoYWJs ZSwgdGhlIExvYy1TdGF0dXMtQml0IHRoYXQgY29ycmVzcG9uZHMgdG8gdGhhdCBsb2NhdG9yJ3MN CiAgIHBvc2l0aW9uIGluIHRoZSBsaXN0IHJldHVybmVkIGJ5IHRoZSBsYXN0IE1hcC1SZXBseSB3 aWxsIGJlIHNldCB0bw0KICAgemVybyBmb3IgdGhhdCBwYXJ0aWN1bGFyIEVJRC1wcmVmaXguDQoN CiAgIFdoZW4gSVRScyBhdCB0aGUgc2l0ZSBhcmUgbm90IGRlcGxveWVkIGluIENFIHJvdXRlcnMs IHRoZSBJR1AgY2FuDQogICBzdGlsbCBiZSB1c2VkIHRvIGRldGVybWluZSB0aGUgcmVhY2hhYmls aXR5IG9mIExvY2F0b3JzIHByb3ZpZGVkIHRoZXkNCiAgIGFyZSBpbmplY3RlZCBpbnRvIHRoZSBJ R1AuICBUaGlzIGlzIHR5cGljYWxseSBkb25lIHdoZW4gYSAvMzIgYWRkcmVzcw0KICAgaXMgY29u ZmlndXJlZCBvbiBhIGxvb3BiYWNrIGludGVyZmFjZS4NCg0KICAgV2hlbiBJVFJzIHJlY2VpdmUg SUNNUCBOZXR3b3JrIG9yIEhvc3QgVW5yZWFjaGFibGUgbWVzc2FnZXMgYXMgYQ0KICAgbWV0aG9k IHRvIGRldGVybWluZSB1bnJlYWNoYWJpbGl0eSwgdGhleSB3aWxsIHJlZnJhaW4gZnJvbSB1c2lu Zw0KICAgTG9jYXRvcnMgd2hpY2ggYXJlIGRlc2NyaWJlZCBpbiBMb2NhdG9yIGxpc3RzIG9mIE1h cC1SZXBsaWVzLg0KICAgSG93ZXZlciwgdXNpbmcgdGhpcyBhcHByb2FjaCBpcyB1bnJlbGlhYmxl IGJlY2F1c2UgbWFueSBuZXR3b3JrDQogICBvcGVyYXRvcnMgdHVybiBvZmYgZ2VuZXJhdGlvbiBv ZiBJQ01QIFVucmVhY2hhYmxlIG1lc3NhZ2VzLg0KDQogICBJZiBhbiBJVFIgZG9lcyByZWNlaXZl IGFuIElDTVAgTmV0d29yayBvciBIb3N0IFVucmVhY2hhYmxlIG1lc3NhZ2UsDQogICBpdCBNQVkg b3JpZ2luYXRlIGl0cyBvd24gSUNNUCBVbnJlYWNoYWJsZSBtZXNzYWdlIGRlc3RpbmVkIGZvciB0 aGUNCiAgIGhvc3QgdGhhdCBvcmlnaW5hdGVkIHRoZSBkYXRhIHBhY2tldCB0aGUgSVRSIGVuY2Fw c3VsYXRlZC4NCg0KICAgQWxzbywgQkdQLWVuYWJsZWQgSVRScyBjYW4gdW5pbGF0ZXJhbGx5IGV4 YW1pbmUgdGhlIEJHUCBSSUIgdG8gc2VlIGlmDQogICBhIGxvY2F0b3IgYWRkcmVzcyBmcm9tIGEg bG9jYXRvci1zZXQgaW4gYSBtYXBwaW5nIGVudHJ5IG1hdGNoZXMgYQ0KICAgcHJlZml4LiAgSWYg aXQgZG9lcyBub3QgZmluZCBvbmUgYW5kIEJHUCBpcyBydW5uaW5nIGluIHRoZSBEZWZhdWx0DQog ICBGcmVlIFpvbmUgKERGWiksIGl0IGNhbiBkZWNpZGUgdG8gbm90IHVzZSB0aGUgbG9jYXRvciBl dmVuIHRob3VnaCB0aGUNCiAgIExvYy1TdGF0dXMtQml0cyBpbmRpY2F0ZSB0aGUgbG9jYXRvciBp cyB1cC4gIEluIHRoaXMgY2FzZSwgdGhlIHBhdGgNCiAgIGZyb20gdGhlIElUUiB0byB0aGUgRVRS IHRoYXQgaXMgYXNzaWduZWQgdGhlIGxvY2F0b3IgaXMgbm90DQogICBhdmFpbGFibGUuICBNb3Jl IGRldGFpbHMgYXJlIGluIFtMT0MtSUQtQVJDSF0uDQoNCiAgIE9wdGlvbmFsbHksIGFuIElUUiBj YW4gc2VuZCBhIE1hcC1SZXF1ZXN0IHRvIGEgTG9jYXRvciBhbmQgaWYgYSBNYXAtDQogICBSZXBs eSBpcyByZXR1cm5lZCwgcmVhY2hhYmlsaXR5IG9mIHRoZSBMb2NhdG9yIGhhcyBiZWVuIGRldGVy bWluZWQuDQogICBPYnZpb3VzbHksIHNlbmRpbmcgc3VjaCBwcm9iZXMgaW5jcmVhc2VzIHRoZSBu dW1iZXIgb2YgY29udHJvbA0KICAgbWVzc2FnZXMgb3JpZ2luYXRlZCBieSB0dW5uZWwgcm91dGVy cyBmb3IgYWN0aXZlIGZsb3dzLCBzbyBMb2NhdG9ycw0KICAgYXJlIGFzc3VtZWQgdG8gYmUgcmVh Y2hhYmxlIHdoZW4gdGhleSBhcmUgYWR2ZXJ0aXNlZC4NCg0KICAgVGhpcyBhc3N1bXB0aW9uIGRv ZXMgY3JlYXRlIGEgZGVwZW5kZW5jeTogTG9jYXRvciB1bnJlYWNoYWJpbGl0eSBpcw0KICAgZGV0 ZWN0ZWQgYnkgdGhlIHJlY2VpcHQgb2YgSUNNUCBIb3N0IFVucmVhY2hhYmxlIG1lc3NhZ2VzLiAg V2hlbiBhbg0KICAgTG9jYXRvciBoYXMgYmVlbiBkZXRlcm1pbmVkIHRvIGJlIHVucmVhY2hhYmxl LCBpdCBpcyBub3QgdXNlZCBmb3INCiAgIGFjdGl2ZSB0cmFmZmljOyB0aGlzIGlzIHRoZSBzYW1l IGFzIGlmIGl0IHdlcmUgbGlzdGVkIGluIGEgTWFwLVJlcGx5DQogICB3aXRoIHByaW9yaXR5IDI1 NS4NCg0KICAgVGhlIElUUiBjYW4gdGVzdCB0aGUgcmVhY2hhYmlsaXR5IG9mIHRoZSB1bnJlYWNo YWJsZSBMb2NhdG9yIGJ5DQogICBzZW5kaW5nIHBlcmlvZGljIFJlcXVlc3RzLiAgQm90aCBSZXF1 ZXN0cyBhbmQgUmVwbGllcyBNVVNUIGJlIHJhdGUtDQogICBsaW1pdGVkLiAgTG9jYXRvciByZWFj aGFiaWxpdHkgdGVzdGluZyBpcyBuZXZlciBkb25lIHdpdGggZGF0YQ0KICAgcGFja2V0cyBzaW5j ZSB0aGF0IGluY3JlYXNlcyB0aGUgcmlzayBvZiBwYWNrZXQgbG9zcyBmb3IgZW5kLXRvLWVuZA0K ICAgc2Vzc2lvbnMuDQoNCiAgIFdoZW4gYW4gRVRSIGRlY2Fwc3VsYXRlcyBhIHBhY2tldCwgaXQg a25vd3MgdGhhdCBpdCBpcyByZWFjaGFibGUgZnJvbQ0KICAgdGhlIGVuY2Fwc3VsYXRpbmcgSVRS IGJlY2F1c2UgdGhhdCBpcyBob3cgdGhlIHBhY2tldCBhcnJpdmVkLiAgSW4NCiAgIG1vc3QgY2Fz ZXMsIHRoZSBFVFIgY2FuIGFsc28gcmVhY2ggdGhlIElUUiBidXQgY2Fubm90IGFzc3VtZSB0aGlz IHRvDQogICBiZSB0cnVlIGR1ZSB0byB0aGUgcG9zc2liaWxpdHkgb2YgcGF0aCBhc3ltbWV0cnku ICBJbiB0aGUgcHJlc2VuY2Ugb2YNCiAgIHVuaWRpcmVjdGlvbmFsIHRyYWZmaWMgZmxvdyBmcm9t IGFuIElUUiB0byBhbiBFVFIsIHRoZSBJVFIgc2hvdWxkIG5vdA0KICAgdXNlIHRoZSBsYWNrIG9m IHJldHVybiB0cmFmZmljIGFzIGFuIGluZGljYXRpb24gdGhhdCB0aGUgRVRSIGlzDQogICB1bnJl YWNoYWJsZS4gIEluc3RlYWQsIGl0IG11c3QgdXNlIGFuIGFsdGVybmF0ZSBtZWNoYW5pc21zIHRv DQogICBkZXRlcm1pbmUgcmVhY2hhYmlsaXR5Lg0KDQo2LjMuMS4gIEVjaG8gTm9uY2UgQWxnb3Jp dGhtDQoNCiAgIFdoZW4gdGhlcmUgaXMgYmlkaXJlY3Rpb25hbCBkYXRhIGZsb3cgYmV0d2VlbiBh IHBhaXIgb2YgbG9jYXRvcnMsIGENCiAgIHNpbXBsZSBtZWNoYW5pc20gY2FsbGVkICJub25jZSBl Y2hvaW5nIiBjYW4gYmUgdXNlZCB0byBkZXRlcm1pbmUNCiAgIHJlYWNoYWJpbGl0eSBiZXR3ZWVu IGFuIElUUiBhbmQgRVRSLiAgV2hlbiBhbiBJVFIgd2FudHMgdG8gc29saWNpdCBhDQogICBub25j ZSBlY2hvLCBpdCBzZXRzIHRoZSBOIGFuZCBFIGJpdHMgYW5kIHBsYWNlcyBhIDI0LWJpdCBub25j ZSBpbiB0aGUNCiAgIExJU1AgaGVhZGVyIG9mIHRoZSBuZXh0IGVuY2Fwc3VsYXRlZCBkYXRhIHBh Y2tldC4NCg0KICAgV2hlbiB0aGlzIHBhY2tldCBpcyByZWNlaXZlZCBieSB0aGUgRVRSLCB0aGUg ZW5jYXBzdWxhdGVkIHBhY2tldCBpcw0KICAgZm9yd2FyZGVkIGFzIG5vcm1hbC4gIFdoZW4gdGhl IEVUUiBuZXh0IHNlbmRzIGEgZGF0YSBwYWNrZXQgdG8gdGhlDQogICBJVFIsIGl0IGluY2x1ZGVz IHRoZSBub25jZSByZWNlaXZlZCBlYXJsaWVyIHdpdGggdGhlIE4gYml0IHNldCBhbmQgRQ0KICAg Yml0IGNsZWFyZWQuICBUaGUgSVRSIHNlZXMgdGhpcyAiZWNob2VkIG5vbmNlIiBhbmQga25vd3Mg dGhlIHBhdGggdG8NCiAgIGFuZCBmcm9tIHRoZSBFVFIgaXMgdXAuDQoNCiAgIFRoZSBJVFIgd2ls bCBzZXQgdGhlIEUtYml0IGFuZCBOLWJpdCBmb3IgZXZlcnkgcGFja2V0IGl0IHNlbmRzIHdoaWxl DQogICBpbiBlY2hvLW5vbmNlLXJlcXVlc3Qgc3RhdGUuICBUaGUgdGltZSB0aGUgSVRSIHdhaXRz IHRvIHByb2Nlc3MgdGhlDQogICBlY2hvZWQgbm9uY2UgYmVmb3JlIGl0IGRldGVybWluZXMgdGhl IHBhdGggaXMgdW5yZWFjaGFibGUgaXMgdmFyaWFibGUNCiAgIGFuZCBhIGNob2ljZSBsZWZ0IGZv ciB0aGUgaW1wbGVtZW50YXRpb24uDQoNCiAgIElmIHRoZSBJVFIgaXMgcmVjZWl2aW5nIHBhY2tl dHMgZnJvbSB0aGUgRVRSIGJ1dCBkb2VzIG5vdCBzZWUgdGhlDQogICBub25jZSBlY2hvZWQgd2hp bGUgYmVpbmcgaW4gZWNoby1ub25jZS1yZXF1ZXN0IHN0YXRlLCB0aGVuIHRoZSBwYXRoDQogICB0 byB0aGUgRVRSIGlzIHVucmVhY2hhYmxlLiAgVGhpcyBkZWNpc2lvbiBtYXkgYmUgb3ZlcnJpZGRl biBieSBvdGhlcg0KICAgbG9jYXRvciByZWFjaGFiaWxpdHkgYWxnb3JpdGhtcy4gIE9uY2UgdGhl IElUUiBkZXRlcm1pbmVzIHRoZSBwYXRoIHRvDQogICB0aGUgRVRSIGlzIGRvd24gaXQgY2FuIHN3 aXRjaCB0byBhbm90aGVyIGxvY2F0b3IgZm9yIHRoYXQgRUlELXByZWZpeC4NCg0KICAgTm90ZSB0 aGF0ICJJVFIiIGFuZCAiRVRSIiBhcmUgcmVsYXRpdmUgdGVybXMgaGVyZS4gIEJvdGggZGV2aWNl cyBtdXN0DQogICBiZSBpbXBsZW1lbnRpbmcgYm90aCBJVFIgYW5kIEVUUiBmdW5jdGlvbmFsaXR5 IGZvciB0aGUgZWNobyBub25jZQ0KICAgbWVjaGFuaXNtIHRvIG9wZXJhdGUuDQoNCiAgIFRoZSBJ VFIgYW5kIEVUUiBtYXkgYm90aCBnbyBpbnRvIGVjaG8tbm9uY2UtcmVxdWVzdCBzdGF0ZSBhdCB0 aGUgc2FtZQ0KICAgdGltZS4gIFRoZSBudW1iZXIgb2YgcGFja2V0cyBzZW50IG9yIHRoZSB0aW1l IGR1cmluZyB3aGljaCBlY2hvIG5vbmNlDQogICByZXF1ZXN0cyBhcmUgc2VudCBpcyBhbiBpbXBs ZW1lbnRhdGlvbiBzcGVjaWZpYyBzZXR0aW5nLiAgSG93ZXZlciwNCiAgIHdoZW4gYW4gSVRSIGlz IGluIGVjaG8tbm9uY2UtcmVxdWVzdCBzdGF0ZSwgaXQgY2FuIGVjaG8gdGhlIEVUUidzDQogICBu b25jZSBpbiB0aGUgbmV4dCBzZXQgb2YgcGFja2V0cyB0aGF0IGl0IGVuY2Fwc3VsYXRlcyBhbmQg dGhlbg0KICAgc3Vic2VxdWVudGx5LCBjb250aW51ZSBzZW5kaW5nIGVjaG8tbm9uY2UtcmVxdWVz dCBwYWNrZXRzLg0KDQogICBUaGlzIG1lY2hhbmlzbSBkb2VzIG5vdCBjb21wbGV0ZWx5IHNvbHZl IHRoZSBmb3J3YXJkIHBhdGgNCiAgIHJlYWNoYWJpbGl0eSBwcm9ibGVtIGFzIHRyYWZmaWMgbWF5 IGJlIHVuaWRpcmVjdGlvbmFsLiAgVGhhdCBpcywgdGhlDQogICBFVFIgcmVjZWl2aW5nIHRyYWZm aWMgYXQgYSBzaXRlIG1heSBub3QgbWF5IG5vdCBiZSB0aGUgc2FtZSBkZXZpY2UgYXMNCiAgIGFu IElUUiB3aGljaCB0cmFuc21pdHMgdHJhZmZpYyBmcm9tIHRoYXQgc2l0ZSBvciB0aGUgc2l0ZSB0 byBzaXRlDQogICB0cmFmZmljIGlzIHVuaWRpcmVjdGlvbmFsIHNvIHRoZXJlIGlzIG5vIElUUiBy ZXR1cm5pbmcgdHJhZmZpYy4NCg0KICAgVGhlIGVjaG8tbm9uY2UgYWxnb3JpdGhtIGlzIGJpbGF0 ZXJhbC4gIFRoYXQgaXMsIGlmIG9uZSBzaWRlIHNldHMgdGhlDQogICBFLWJpdCBhbmQgdGhlIG90 aGVyIHNpZGUgaXMgbm90IGVuYWJsZWQgZm9yIGVjaG8tbm9uY2luZywgdGhlbiB0aGUNCiAgIGVj aG9pbmcgb2YgdGhlIG5vbmNlIGRvZXMgbm90IG9jY3VyIGFuZCB0aGUgcmVxdWVzdGluZyBzaWRl IG1heQ0KICAgcmVnYXJkIHRoZSBsb2NhdG9yIHVucmVhY2hhYmxlIGVycm9uZW91c2x5LiAgQW4g SVRSIHNob3VsZCBvbmx5IHNldA0KICAgdGhlIEUtYml0IGluIGEgZW5jYXBzdWxhdGVkIGRhdGEg cGFja2V0IHdoZW4gaXQga25vd3MgdGhlIEVUUiBpcw0KICAgZW5hYmxlZCBmb3IgZWNoby1ub25j aW5nLiAgVGhpcyBpcyBjb252ZXllZCBieSB0aGUgRS1iaXQgaW4gdGhlIE1hcC0NCiAgIFJlcGx5 IG1lc3NhZ2UuDQoNCiAgIE5vdGUgdGhhdCBvdGhlciBsb2NhdG9yIHJlYWNoYWJpbGl0eSBtZWNo YW5pc21zIGFyZSBiZWluZyByZXNlYXJjaGVkDQogICBhbmQgY2FuIGJlIHVzZWQgdG8gY29tcGxp bWVudCBvciBldmVuIG92ZXJyaWRlIHRoZSBFY2hvIE5vbmNlDQogICBBbGdvcml0aG0uICBTZWUg bmV4dCBzZWN0aW9uIGZvciBhbiBleGFtcGxlIG9mIGNvbnRyb2wtcGxhbmUgcHJvYmluZy4NCg0K Ni4zLjIuICBSTE9DIFByb2JpbmcgQWxnb3JpdGhtDQoNCiAgIFJMT0MgUHJvYmluZyBpcyBhIG1l dGhvZCB0aGF0IGFuIElUUiBvciBQVFIgY2FuIHVzZSB0byBkZXRlcm1pbmUgdGhlDQogICByZWFj aGFiaWxpdHkgc3RhdHVzIG9mIG9uZSBvciBtb3JlIGxvY2F0b3JzIHRoYXQgaXQgaGFzIGNhY2hl ZCBpbiBhDQogICBtYXAtY2FjaGUgZW50cnkuICBUaGUgUC1iaXQgKFByb2JlIEJpdCkgb2YgdGhl IE1hcC1SZXF1ZXN0IGFuZCBNYXAtDQogICBSZXBseSBtZXNzYWdlcyBhcmUgdXNlZCBmb3IgUkxP QyBQcm9iaW5nLg0KDQogICBSTE9DIHByb2JpbmcgaXMgZG9uZSBpbiB0aGUgY29udHJvbC1wbGFu ZSBvbiBhIHRpbWVyIGJhc2lzIHdoZXJlIGFuDQogICBJVFIgb3IgUFRSIHdpbGwgb3JpZ2luYXRl IGEgTWFwLVJlcXVlc3QgZGVzdGluZWQgdG8gYSBsb2NhdG9yIGFkZHJlc3MNCiAgIGZyb20gb25l IG9mIGl0cyBvd24gbG9jYXRvciBhZGRyZXNzZXMuICBBIE1hcC1SZXF1ZXN0IHVzZWQgYXMgYW4N CiAgIFJMT0MtcHJvYmUgaXMgTk9UIGVuY2Fwc3VsYXRlZCBhbmQgTk9UIHNlbnQgdG8gYSBNYXAt U2VydmVyIG9yIG9uIHRoZQ0KICAgQUxUIGxpa2Ugb25lIHdvdWxkIHdoZW4gc29saWNpdGluZyBt YXBwaW5nIGRhdGEuICBUaGUgRUlEIHJlY29yZA0KICAgZW5jb2RlZCBpbiB0aGUgTWFwLVJlcXVl c3QgaXMgdGhlIEVJRC1wcmVmaXggb2YgdGhlIG1hcC1jYWNoZSBlbnRyeQ0KICAgY2FjaGVkIGJ5 IHRoZSBJVFIgb3IgUFRSLiAgVGhlIElUUiBvciBQVFIgbWF5IGluY2x1ZGUgYSBtYXBwaW5nIGRh dGENCiAgIHJlY29yZCBmb3IgaXRzIG93biBkYXRhYmFzZSBtYXBwaW5nIGluZm9ybWF0aW9uLg0K DQogICBXaGVuIGFuIEVUUiByZWNlaXZlcyBhIE1hcC1SZXF1ZXN0IG1lc3NhZ2Ugd2l0aCB0aGUg UC1iaXQgc2V0LCBpdA0KICAgcmV0dXJucyBhIE1hcC1SZXBseSB3aXRoIHRoZSBQLWJpdCBzZXQu ICBUaGUgc291cmNlIGFkZHJlc3Mgb2YgdGhlDQogICBNYXAtUmVwbHkgaXMgc2V0IGZyb20gdGhl IGRlc3RpbmF0aW9uIGFkZHJlc3Mgb2YgdGhlIE1hcC1SZXF1ZXN0IGFuZA0KICAgdGhlIGRlc3Rp bmF0aW9uIGFkZHJlc3Mgb2YgdGhlIE1hcC1SZXBseSBpcyBzZXQgZnJvbSB0aGUgc291cmNlDQog ICBhZGRyZXNzIG9mIHRoZSBNYXAtUmVxdWVzdC4gIFRoZSBNYXAtUmVwbHkgc2hvdWxkIGNvbnRh aW4gbWFwcGluZw0KICAgZGF0YSBmb3IgdGhlIEVJRC1wcmVmaXggY29udGFpbmVkIGluIHRoZSBN YXAtUmVxdWVzdC4gIFRoaXMgcHJvdmlkZXMNCiAgIHRoZSBvcHBvcnR1bml0eSBmb3IgdGhlIElU UiBvciBQVFIsIHdoaWNoIHNlbnQgdGhlIFJMT0MtcHJvYmUgdG8gZ2V0DQogICBtYXBwaW5nIHVw ZGF0ZXMgaWYgdGhlcmUgd2VyZSBjaGFuZ2VzIHRvIHRoZSBFVFIncyBkYXRhYmFzZSBtYXBwaW5n DQogICBlbnRyaWVzLg0KDQogICBUaGVyZSBhcmUgYWR2YW50YWdlcyBhbmQgZGlzYWR2YW50YWdl cyBvZiBSTE9DIFByb2JpbmcuICBUaGUgZ3JlYXRlc3QNCiAgIGJlbmVmaXQgb2YgUkxPQyBQcm9i aW5nIGlzIHRoYXQgaXQgY2FuIGhhbmRsZSBtYW55IGZhaWx1cmUgc2NlbmFyaW9zDQogICBhbGxv d2luZyB0aGUgSVRSIHRvIGRldGVybWluZSB3aGVuIHRoZSBwYXRoIHRvIGEgc3BlY2lmaWMgbG9j YXRvciBpcw0KICAgcmVhY2hhYmxlIG9yIGhhcyBiZWNvbWUgdW5yZWFjaGFibGUsIHRodXMgcHJv dmlkaW5nIGEgcm9idXN0DQogICBtZWNoYW5pc20gZm9yIHN3aXRjaGluZyB0byB1c2luZyBhbm90 aGVyIGxvY2F0b3IgZnJvbSB0aGUgY2FjaGVkDQogICBsb2NhdG9yLiAgUkxPQyBQcm9iaW5nIGNh biBhbHNvIHByb3ZpZGUgUlRUIGVzdGltYXRlcyBiZXR3ZWVuIGEgcGFpcg0KICAgb2YgbG9jYXRv cnMgd2hpY2ggY2FuIGJlIHVzZWZ1bCBmb3IgbmV0d29yayBtYW5hZ2VtZW50IHB1cnBvc2VzIGFz DQogICB3ZWxsIGFzIGZvciBzZWxlY3RpbmcgbG93IGRlbGF5IHBhdGhzLiAgVGhlIG1ham9yIGRp c2FkdmFudGFnZSBvZg0KICAgUkxPQyBQcm9iaW5nIGlzIGluIHRoZSBudW1iZXIgb2YgY29udHJv bCBtZXNzYWdlcyByZXF1aXJlZCBhbmQgdGhlDQogICBhbW91bnQgb2YgYmFuZHdpZHRoIHVzZWQg dG8gb2J0YWluIHRob3NlIGJlbmVmaXRzLCBlc3BlY2lhbGx5IGlmIHRoZQ0KICAgcmVxdWlyZW1l bnQgZm9yIGZhaWx1cmUgZGV0ZWN0aW9uIHRpbWVzIGFyZSB2ZXJ5IHNtYWxsLg0KDQogICBDb250 aW51ZWQgcmVzZWFyY2ggYW5kIHRlc3Rpbmcgd2lsbCBhdHRlbXB0IHRvIGNoYXJhY3Rlcml6ZSB0 aGUNCiAgIHRyYWRlb2ZmcyBvZiBmYWlsdXJlIGRldGVjdGlvbiB0aW1lcyB2ZXJzdXMgbWVzc2Fn ZSBvdmVyaGVhZC4NCg0KNi40LiAgUm91dGluZyBMb2NhdG9yIEhhc2hpbmcNCg0KICAgV2hlbiBh biBFVFIgcHJvdmlkZXMgYW4gRUlELXRvLVJMT0MgbWFwcGluZyBpbiBhIE1hcC1SZXBseSBtZXNz YWdlIHRvDQogICBhIHJlcXVlc3RpbmcgSVRSLCB0aGUgbG9jYXRvci1zZXQgZm9yIHRoZSBFSUQt cHJlZml4IG1heSBjb250YWluDQogICBkaWZmZXJlbnQgcHJpb3JpdHkgdmFsdWVzIGZvciBlYWNo IGxvY2F0b3IgYWRkcmVzcy4gIFdoZW4gbW9yZSB0aGFuDQogICBvbmUgYmVzdCBwcmlvcml0eSBs b2NhdG9yIGV4aXN0cywgdGhlIElUUiBjYW4gZGVjaWRlIGhvdyB0byBsb2FkDQogICBzaGFyZSB0 cmFmZmljIGFnYWluc3QgdGhlIGNvcnJlc3BvbmRpbmcgbG9jYXRvcnMuDQoNCiAgIFRoZSBmb2xs b3dpbmcgaGFzaCBhbGdvcml0aG0gbWF5IGJlIHVzZWQgYnkgYW4gSVRSIHRvIHNlbGVjdCBhDQog ICBsb2NhdG9yIGZvciBhIHBhY2tldCBkZXN0aW5lZCB0byBhbiBFSUQgZm9yIHRoZSBFSUQtdG8t UkxPQyBtYXBwaW5nOg0KDQogICAxLiAgRWl0aGVyIGEgc291cmNlIGFuZCBkZXN0aW5hdGlvbiBh ZGRyZXNzIGhhc2ggY2FuIGJlIHVzZWQgb3IgdGhlDQogICAgICAgdHJhZGl0aW9uYWwgNS10dXBs ZSBoYXNoIHdoaWNoIGluY2x1ZGVzIHRoZSBzb3VyY2UgYW5kDQogICAgICAgZGVzdGluYXRpb24g YWRkcmVzc2VzLCBzb3VyY2UgYW5kIGRlc3RpbmF0aW9uIFRDUCwgVURQLCBvciBTQ1RQDQogICAg ICAgcG9ydCBudW1iZXJzIGFuZCB0aGUgSVAgcHJvdG9jb2wgbnVtYmVyIGZpZWxkIG9yIElQdjYg bmV4dC0NCiAgICAgICBwcm90b2NvbCBmaWVsZHMgb2YgYSBwYWNrZXQgYSBob3N0IG9yaWdpbmF0 ZXMgZnJvbSB3aXRoaW4gYSBMSVNQDQogICAgICAgc2l0ZS4gIFdoZW4gYSBwYWNrZXQgaXMgbm90 IGEgVENQLCBVRFAsIG9yIFNDVFAgcGFja2V0LCB0aGUNCiAgICAgICBzb3VyY2UgYW5kIGRlc3Rp bmF0aW9uIGFkZHJlc3NlcyBvbmx5IGZyb20gdGhlIGhlYWRlciBhcmUgdXNlZCB0bw0KICAgICAg IGNvbXB1dGUgdGhlIGhhc2guDQoNCiAgIDIuICBUYWtlIHRoZSBoYXNoIHZhbHVlIGFuZCBkaXZp ZGUgaXQgYnkgdGhlIG51bWJlciBvZiBsb2NhdG9ycw0KICAgICAgIHN0b3JlZCBpbiB0aGUgbG9j YXRvci1zZXQgZm9yIHRoZSBFSUQtdG8tUkxPQyBtYXBwaW5nLg0KDQogICAzLiAgVGhlIHJlbWFp bmRlciB3aWxsIGJlIHlpZWxkIGEgdmFsdWUgb2YgMCB0byAibnVtYmVyIG9mIGxvY2F0b3JzDQog ICAgICAgbWludXMgMSIuICBVc2UgdGhlIHJlbWFpbmRlciB0byBzZWxlY3QgdGhlIGxvY2F0b3Ig aW4gdGhlDQogICAgICAgbG9jYXRvci1zZXQuDQoNCiAgIE5vdGUgdGhhdCB3aGVuIGEgcGFja2V0 IGlzIExJU1AgZW5jYXBzdWxhdGVkLCB0aGUgc291cmNlIHBvcnQgbnVtYmVyDQogICBpbiB0aGUg b3V0ZXIgVURQIGhlYWRlciBuZWVkcyB0byBiZSBzZXQuICBTZWxlY3RpbmcgYSByYW5kb20gdmFs dWUNCiAgIGFsbG93cyBjb3JlIHJvdXRlcnMgd2hpY2ggYXJlIGF0dGFjaGVkIHRvIExpbmsgQWdn cmVnYXRpb24gR3JvdXBzDQogICAoTEFHcykgdG8gbG9hZC1zcGxpdCB0aGUgZW5jYXBzdWxhdGVk IHBhY2tldHMgYWNyb3NzIG1lbWJlciBsaW5rcyBvZg0KICAgc3VjaCBMQUdzLiAgT3RoZXJ3aXNl LCBjb3JlIHJvdXRlcnMgd291bGQgc2VlIGEgc2luZ2xlIGZsb3csIHNpbmNlDQogICBwYWNrZXRz IGhhdmUgYSBzb3VyY2UgYWRkcmVzcyBvZiB0aGUgSVRSLCBmb3IgcGFja2V0cyB3aGljaCBhcmUN CiAgIG9yaWdpbmF0ZWQgYnkgZGlmZmVyZW50IEVJRHMgYXQgdGhlIHNvdXJjZSBzaXRlLiAgQSBz dWdnZXN0ZWQgc2V0dGluZw0KICAgZm9yIHRoZSBzb3VyY2UgcG9ydCBudW1iZXIgY29tcHV0ZWQg YnkgYW4gSVRSIGlzIGEgNS10dXBsZSBoYXNoDQogICBmdW5jdGlvbiBvbiB0aGUgaW5uZXIgaGVh ZGVyLCBhcyBkZXNjcmliZWQgYWJvdmUuDQoNCiAgIE1hbnkgY29yZSByb3V0ZXIgaW1wbGVtZW50 YXRpb25zIHVzZSBhIDUtdHVwbGUgaGFzaCB0byBkZWNpZGUgaG93IHRvDQogICBiYWxhbmNlIHBh Y2tldCBsb2FkIGFjcm9zcyBtZW1iZXJzIG9mIGEgTEFHLiAgVGhlIDUtdHVwbGUgaGFzaA0KICAg aW5jbHVkZXMgdGhlIHNvdXJjZSBhbmQgZGVzdGluYXRpb24gYWRkcmVzc2VzIG9mIHRoZSBwYWNr ZXQgYW5kIHRoZQ0KICAgc291cmNlIGFuZCBkZXN0aW5hdGlvbiBwb3J0cyB3aGVuIHRoZSBwcm90 b2NvbCBudW1iZXIgaW4gdGhlIHBhY2tldA0KICAgaXMgVENQIG9yIFVEUC4gIEZvciB0aGlzIHJl YXNvbiwgVURQIGVuY29kaW5nIGlzIHVzZWQgZm9yIExJU1ANCiAgIGVuY2Fwc3VsYXRpb24uDQoN CjYuNS4gIENoYW5naW5nIHRoZSBDb250ZW50cyBvZiBFSUQtdG8tUkxPQyBNYXBwaW5ncw0KDQog ICBTaW5jZSB0aGUgTElTUCBhcmNoaXRlY3R1cmUgdXNlcyBhIGNhY2hpbmcgc2NoZW1lIHRvIHJl dHJpZXZlIGFuZA0KICAgc3RvcmUgRUlELXRvLVJMT0MgbWFwcGluZ3MsIHRoZSBvbmx5IHdheSBh biBJVFIgY2FuIGdldCBhIG1vcmUgdXAtdG8tDQogICBkYXRlIG1hcHBpbmcgaXMgdG8gcmUtcmVx dWVzdCB0aGUgbWFwcGluZy4gIEhvd2V2ZXIsIHRoZSBJVFJzIGRvIG5vdA0KICAga25vdyB3aGVu IHRoZSBtYXBwaW5ncyBjaGFuZ2UgYW5kIHRoZSBFVFJzIGRvIG5vdCBrZWVwIHRyYWNrIG9mIHdo bw0KICAgcmVxdWVzdGVkIGl0cyBtYXBwaW5ncy4gIEZvciBzY2FsYWJpbGl0eSByZWFzb25zLCB3 ZSB3YW50IHRvIG1haW50YWluDQogICB0aGlzIGFwcHJvYWNoIGJ1dCBuZWVkIHRvIHByb3ZpZGUg YSB3YXkgZm9yIEVUUnMgY2hhbmdlIHRoZWlyDQogICBtYXBwaW5ncyBhbmQgaW5mb3JtIHRoZSBz aXRlcyB0aGF0IGFyZSBjdXJyZW50bHkgY29tbXVuaWNhdGluZyB3aXRoDQogICB0aGUgRVRSIHNp dGUgdXNpbmcgc3VjaCBtYXBwaW5ncy4NCg0KICAgV2hlbiBhIGxvY2F0b3IgcmVjb3JkIGlzIGFk ZGVkIHRvIHRoZSBlbmQgb2YgYSBsb2NhdG9yLXNldCwgaXQgaXMNCiAgIGVhc3kgdG8gdXBkYXRl IG1hcHBpbmdzLiAgV2UgYXNzdW1lIG5ldyBtYXBwaW5ncyB3aWxsIG1haW50YWluIHRoZQ0KICAg c2FtZSBsb2NhdG9yIG9yZGVyaW5nIGFzIHRoZSBvbGQgbWFwcGluZyBidXQganVzdCBoYXZlIG5l dyBsb2NhdG9ycw0KICAgYXBwZW5kZWQgdG8gdGhlIGVuZCBvZiB0aGUgbGlzdC4gIFNvIHNvbWUg SVRScyBjYW4gaGF2ZSBhIG5ldyBtYXBwaW5nDQogICB3aGlsZSBvdGhlciBJVFJzIGhhdmUgb25s eSBhbiBvbGQgbWFwcGluZyB0aGF0IGlzIHVzZWQgdW50aWwgdGhleQ0KICAgdGltZSBvdXQuICBX aGVuIGFuIElUUiBoYXMgb25seSBhbiBvbGQgbWFwcGluZyBidXQgZGV0ZWN0cyBiaXRzIHNldA0K ICAgaW4gdGhlIGxvYy1zdGF0dXMtYml0cyB0aGF0IGNvcnJlc3BvbmQgdG8gbG9jYXRvcnMgYmV5 b25kIHRoZSBsaXN0IGl0DQogICBoYXMgY2FjaGVkLCBpdCBzaW1wbHkgaWdub3JlcyB0aGVtLiAg PFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPkhvd2V2ZXIsIHRoaXMgY2FuIG9ubHkgaGFwcGVu DQogICBmb3IgbG9jYXRvciBhZGRyZXNzZXMgdGhhdCBhcmUgbGV4aWNvZ3JhcGhpY2FsbHkgZ3Jl YXRlciB0aGFuIHRoZQ0KICAgbG9jYXRvciBhZGRyZXNzZXMgaW4gdGhlIGV4aXN0aW5nIGxvY2F0 b3Itc2V0LjwvRk9OVD48L1NUUk9ORz4NCg0KICAgV2hlbiBhIGxvY2F0b3IgcmVjb3JkIGlzIHJl bW92ZWQgZnJvbSBhIGxvY2F0b3Itc2V0LCBJVFJzIHRoYXQgaGF2ZQ0KICAgdGhlIG1hcHBpbmcg Y2FjaGVkIHdpbGwgbm90IHVzZSB0aGUgcmVtb3ZlZCBsb2NhdG9yIGJlY2F1c2UgdGhlIHhUUnMN CiAgIHdpbGwgc2V0IHRoZSBsb2Mtc3RhdHVzLWJpdCB0byAwLiAgU28gZXZlbiBpZiB0aGUgbG9j YXRvciBpcyBpbiB0aGUNCiAgIGxpc3QsIGl0IHdpbGwgbm90IGJlIHVzZWQuICBGb3IgbmV3IG1h cHBpbmcgcmVxdWVzdHMsIHRoZSB4VFJzIGNhbg0KICAgc2V0IHRoZSBsb2NhdG9yIDxTVFJJS0U+ PEZPTlQgY29sb3I9InJlZCI+YWRkcmVzczwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBj b2xvcj0iZ3JlZW4iPkFGSTwvRk9OVD48L1NUUk9ORz4gdG8gMCA8U1RST05HPjxGT05UIGNvbG9y PSJncmVlbiI+KGluZGljYXRpbmcgYW4gdW5zcGVjaWZpZWQgYWRkcmVzcyksPC9GT05UPjwvU1RS T05HPiBhcyB3ZWxsDQogICBhcyBzZXR0aW5nIHRoZSBjb3JyZXNwb25kaW5nIGxvYy1zdGF0dXMt Yml0IHRvIDAuICBUaGlzIGZvcmNlcyBJVFJzDQogICB3aXRoIG9sZCBvciBuZXcgbWFwcGluZ3Mg dG8gYXZvaWQgdXNpbmcgdGhlIHJlbW92ZWQgbG9jYXRvci4NCg0KICAgSWYgbWFueSBjaGFuZ2Vz IG9jY3VyIHRvIGEgbWFwcGluZyBvdmVyIGEgbG9uZyBwZXJpb2Qgb2YgdGltZSwgb25lDQogICB3 aWxsIGZpbmQgZW1wdHkgcmVjb3JkIHNsb3RzIGluIHRoZSBtaWRkbGUgb2YgdGhlIGxvY2F0b3It c2V0IGFuZCBuZXcNCiAgIHJlY29yZHMgYXBwZW5kZWQgdG8gdGhlIGxvY2F0b3Itc2V0LiAgQXQg c29tZSBwb2ludCwgaXQgd291bGQgYmUNCiAgIHVzZWZ1bCB0byBjb21wYWN0IHRoZSBsb2NhdG9y LXNldCBzbyB0aGUgbG9jLXN0YXR1cy1iaXQgc2V0dGluZ3MgY2FuDQogICBiZSBlZmZpY2llbnRs eSBwYWNrZWQuDQoNCiAgIFdlIHByb3Bvc2UgaGVyZSB0d28gYXBwcm9hY2hlcyBmb3IgbG9jYXRv ci1zZXQgY29tcGFjdGlvbiwgb25lDQogICBvcGVyYXRpb25hbCBhbmQgdGhlIG90aGVyIGEgcHJv dG9jb2wgbWVjaGFuaXNtLiAgVGhlIG9wZXJhdGlvbmFsDQogICBhcHByb2FjaCB1c2VzIGEgY2xv Y2sgc3dlZXAgbWV0aG9kLiAgVGhlIHByb3RvY29sIGFwcHJvYWNoIHVzZXMgdGhlDQogICBjb25j ZXB0IG9mIFNvbGljaXQtTWFwLVJlcXVlc3RzLg0KDQo2LjUuMS4gIENsb2NrIFN3ZWVwDQoNCiAg IFRoZSBjbG9jayBzd2VlcCBhcHByb2FjaCB1c2VzIHBsYW5uaW5nIGluIGFkdmFuY2UgYW5kIHRo ZSB1c2Ugb2YNCiAgIGNvdW50LWRvd24gVFRMcyB0byB0aW1lIG91dCBtYXBwaW5ncyB0aGF0IGhh dmUgYWxyZWFkeSBiZWVuIGNhY2hlZC4NCiAgIFRoZSBkZWZhdWx0IHNldHRpbmcgZm9yIGFuIEVJ RC10by1STE9DIG1hcHBpbmcgVFRMIGlzIDI0IGhvdXJzLiAgU28NCiAgIHRoZXJlIGlzIGEgMjQg aG91ciB3aW5kb3cgdG8gdGltZSBvdXQgb2xkIG1hcHBpbmdzLiAgVGhlIGZvbGxvd2luZw0KICAg Y2xvY2sgc3dlZXAgcHJvY2VkdXJlIGlzIHVzZWQ6DQoNCiAgIDEuICAyNCBob3VycyBiZWZvcmUg YSBtYXBwaW5nIGNoYW5nZSBpcyB0byB0YWtlIGVmZmVjdCwgYSBuZXR3b3JrDQogICAgICAgYWRt aW5pc3RyYXRvciBjb25maWd1cmVzIHRoZSBFVFJzIGF0IGEgc2l0ZSB0byBzdGFydCB0aGUgY2xv Y2sNCiAgICAgICBzd2VlcCB3aW5kb3cuDQoNCiAgIDIuICBEdXJpbmcgdGhlIGNsb2NrIHN3ZWVw IHdpbmRvdywgRVRScyBjb250aW51ZSB0byBzZW5kIE1hcC1SZXBseQ0KICAgICAgIG1lc3NhZ2Vz IHdpdGggdGhlIGN1cnJlbnQgKHVuY2hhbmdlZCkgbWFwcGluZyByZWNvcmRzLiAgVGhlIFRUTA0K ICAgICAgIGZvciB0aGVzZSBtYXBwaW5ncyBpcyBzZXQgdG8gMSBob3VyLg0KDQogICAzLiAgMjQg aG91cnMgbGF0ZXIsIGFsbCBwcmV2aW91cyBjYWNoZSBlbnRyaWVzIHdpbGwgaGF2ZSB0aW1lZCBv dXQsDQogICAgICAgYW5kIGFueSBhY3RpdmUgY2FjaGUgZW50cmllcyB3aWxsIHRpbWUgb3V0IHdp dGhpbiAxIGhvdXIuICBEdXJpbmcNCiAgICAgICB0aGlzIDEgaG91ciB3aW5kb3cgdGhlIEVUUnMg Y29udGludWUgdG8gc2VuZCBNYXAtUmVwbHkgbWVzc2FnZXMNCiAgICAgICB3aXRoIHRoZSBjdXJy ZW50ICh1bmNoYW5nZWQpIG1hcHBpbmcgcmVjb3JkcyB3aXRoIHRoZSBUVEwgc2V0IHRvDQogICAg ICAgMSBtaW51dGUuDQoNCiAgIDQuICBBdCB0aGUgZW5kIG9mIHRoZSAxIGhvdXIgd2luZG93LCB0 aGUgRVRScyB3aWxsIHNlbmQgTWFwLVJlcGx5DQogICAgICAgbWVzc2FnZXMgd2l0aCB0aGUgbmV3 IChjaGFuZ2VkKSBtYXBwaW5nIHJlY29yZHMuICBTbyBhbnkgYWN0aXZlDQogICAgICAgY2FjaGVz IGNhbiBnZXQgdGhlIG5ldyBtYXBwaW5nIGNvbnRlbnRzIHJpZ2h0IGF3YXkgaWYgbm90IGNhY2hl ZCwNCiAgICAgICBvciBpbiAxIG1pbnV0ZSBpZiB0aGV5IGhhZCB0aGUgbWFwcGluZyBjYWNoZWQu DQoNCjYuNS4yLiAgU29saWNpdC1NYXAtUmVxdWVzdCAoU01SKQ0KDQogICBTb2xpY2l0aW5nIGEg TWFwLVJlcXVlc3QgaXMgYSBzZWxlY3RpdmUgd2F5IGZvciB4VFJzLCBhdCB0aGUgc2l0ZQ0KICAg d2hlcmUgbWFwcGluZ3MgY2hhbmdlLCB0byBjb250cm9sIHRoZSByYXRlIHRoZXkgcmVjZWl2ZSBy ZXF1ZXN0cyBmb3INCiAgIE1hcC1SZXBseSBtZXNzYWdlcy4gIFNNUnMgYXJlIGFsc28gdXNlZCB0 byB0ZWxsIHJlbW90ZSBJVFJzIHRvIHVwZGF0ZQ0KICAgdGhlIG1hcHBpbmdzIHRoZXkgaGF2ZSBj YWNoZWQuDQoNCiAgIFNpbmNlIHRoZSB4VFJzIGRvbid0IGtlZXAgdHJhY2sgb2YgcmVtb3RlIElU UnMgdGhhdCBoYXZlIGNhY2hlZCB0aGVpcg0KICAgbWFwcGluZ3MsIHRoZXkgY2FuIG5vdCB0ZWxs IGV4YWN0bHkgd2hvIG5lZWRzIHRoZSBuZXcgbWFwcGluZw0KICAgZW50cmllcy4gIFNvIGFuIHhU UiB3aWxsIHNvbGljaXQgTWFwLVJlcXVlc3RzIGZyb20gc2l0ZXMgaXQgaXMNCiAgIGN1cnJlbnRs eSBzZW5kaW5nIGVuY2Fwc3VsYXRlZCBkYXRhIHRvLCBhbmQgb25seSBmcm9tIHRob3NlIHNpdGVz Lg0KICAgVGhlIHhUUnMgY2FuIGxvY2FsbHkgZGVjaWRlIHRoZSBhbGdvcml0aG0gZm9yIGhvdyBv ZnRlbiBhbmQgdG8gaG93DQogICBtYW55IHNpdGVzIGl0IHNlbmRzIFNNUiBtZXNzYWdlcy4NCg0K ICAgQW4gU01SIG1lc3NhZ2UgaXMgc2ltcGx5IGEgYml0IHNldCBpbiBhIE1hcC1SZXF1ZXN0IG1l c3NhZ2UuICBBbiBJVFINCiAgIG9yIFBUUiB3aWxsIHNlbmQgYSBNYXAtUmVxdWVzdCB3aGVuIHRo ZXkgcmVjZWl2ZSBhbiBTTVIgbWVzc2FnZS4NCiAgIEJvdGggdGhlIFNNUiBzZW5kZXIgYW5kIHRo ZSBNYXAtUmVxdWVzdCByZXNwb25kZXIgbXVzdCByYXRlLWxpbWl0ZWQNCiAgIHRoZXNlIG1lc3Nh Z2VzLg0KDQogICBUaGUgZm9sbG93aW5nIHByb2NlZHVyZSBzaG93cyBob3cgYSBTTVIgZXhjaGFu Z2Ugb2NjdXJzIHdoZW4gYSBzaXRlDQogICBpcyBkb2luZyBsb2NhdG9yLXNldCBjb21wYWN0aW9u IGZvciBhbiBFSUQtdG8tUkxPQyBtYXBwaW5nOg0KDQogICAxLiAgV2hlbiB0aGUgZGF0YWJhc2Ug bWFwcGluZ3MgaW4gYW4gRVRSIGNoYW5nZSwgdGhlIEVUUnMgYXQgdGhlIHNpdGUNCiAgICAgICBi ZWdpbiB0byBzZW5kIE1hcC1SZXF1ZXN0cyB3aXRoIHRoZSBTTVIgYml0IHNldCBmb3IgZWFjaCBs b2NhdG9yDQogICAgICAgaW4gZWFjaCBtYXAtY2FjaGUgZW50cnkgdGhlIEVUUiBjYWNoZXMuDQoN CiAgIDIuICBBIHJlbW90ZSB4VFIgd2hpY2ggcmVjZWl2ZXMgdGhlIFNNUiBtZXNzYWdlIHdpbGwg c2NoZWR1bGUgc2VuZGluZw0KICAgICAgIGEgTWFwLVJlcXVlc3QgbWVzc2FnZSB0byB0aGUgc291 cmNlIGxvY2F0b3IgYWRkcmVzcyBvZiB0aGUgU01SDQogICAgICAgbWVzc2FnZS4gIEEgbmV3bHkg YWxsb2NhdGVkIHJhbmRvbSBub25jZSBpcyBzZWxlY3RlZCBhbmQgdGhlIEVJRC0NCiAgICAgICBw cmVmaXggdXNlcyBpcyB0aGUgb25lIGNvcGllZCBmcm9tIHRoZSBTTVIgbWVzc2FnZS4NCg0KICAg My4gIFRoZSByZW1vdGUgeFRSIHJldHJhbnNtaXRzIHRoZSBNYXAtUmVxdWVzdCBzbG93bHkgdW50 aWwgaXQgZ2V0cyBhDQogICAgICAgTWFwLVJlcGx5IHdoaWxlIGNvbnRpbnVpbmcgdG8gdXNlIHRo ZSBjYWNoZWQgbWFwcGluZy4NCg0KICAgNC4gIFRoZSBFVFJzIGF0IHRoZSBzaXRlIHdpdGggdGhl IGNoYW5nZWQgbWFwcGluZyB3aWxsIHJlcGx5IHRvIHRoZQ0KICAgICAgIE1hcC1SZXF1ZXN0IHdp dGggYSBNYXAtUmVwbHkgbWVzc2FnZSBwcm92aWRlZCB0aGUgTWFwLVJlcXVlc3QNCiAgICAgICBu b25jZSBtYXRjaGVzIHRoZSBub25jZSBmcm9tIHRoZSBTTVIuICBUaGUgTWFwLVJlcGx5IG1lc3Nh Z2VzDQogICAgICAgU0hPVUxEIGJlIHJhdGUgbGltaXRlZC4gIFRoaXMgaXMgaW1wb3J0YW50IHRv IGF2b2lkIE1hcC1SZXBseQ0KICAgICAgIGltcGxvc2lvbi4NCg0KICAgNS4gIFRoZSBFVFJzLCBh dCB0aGUgc2l0ZSB3aXRoIHRoZSBjaGFuZ2VkIG1hcHBpbmcsIHJlY29yZHMgdGhlIGZhY3QNCiAg ICAgICB0aGF0IHRoZSBzaXRlIHRoYXQgc2VudCB0aGUgTWFwLVJlcXVlc3QgaGFzIHJlY2VpdmVk IHRoZSBuZXcNCiAgICAgICBtYXBwaW5nIGRhdGEgaW4gdGhlIG1hcHBpbmcgY2FjaGUgZW50cnkg Zm9yIHRoZSByZW1vdGUgc2l0ZSBzbw0KICAgICAgIHRoZSBsb2Mtc3RhdHVzLWJpdHMgYXJlIHJl ZmxlY3RpdmUgb2YgdGhlIG5ldyBtYXBwaW5nIGZvciBwYWNrZXRzDQogICAgICAgZ29pbmcgdG8g dGhlIHJlbW90ZSBzaXRlLiAgVGhlIEVUUiB0aGVuIHN0b3BzIHNlbmRpbmcgU01SDQogICAgICAg bWVzc2FnZXMuDQoNCiAgIEZvciBzZWN1cml0eSByZWFzb25zIGFuIElUUiBNVVNUIE5PVCBwcm9j ZXNzIHVuc29saWNpdGVkIE1hcC1SZXBsaWVzLg0KICAgVGhlIG5vbmNlIE1VU1QgYmUgY2Fycmll ZCBmcm9tIFNNUiBwYWNrZXQsIGludG8gdGhlIHJlc3VsdGFudCBNYXAtDQogICBSZXF1ZXN0LCBh bmQgdGhlbiBpbnRvIE1hcC1SZXBseSB0byByZWR1Y2Ugc3Bvb2ZpbmcgYXR0YWNrcy4NCg0KICAg VG8gYXZvaWQgbWFwLWNhY2hlIGVudHJ5IGNvcnJ1cHRpb24gYnkgYSB0aGlyZC1wYXJ0eSwgYSBz ZW5kZXIgb2YgYW4NCiAgIFNNUi1iYXNlZCBNYXAtUmVxdWVzdCBtdXN0IGJlIHZlcmlmaWVkLiAg SWYgYW4gSVRSIHJlY2VpdmVzIGFuIFNNUi0NCiAgIGJhc2VkIE1hcC1SZXF1ZXN0IGFuZCB0aGUg c291cmNlIGlzIG5vdCBpbiB0aGUgbG9jYXRvci1zZXQgZm9yIHRoZQ0KICAgc3RvcmVkIG1hcC1j YWNoZSBlbnRyeSwgdGhlbiB0aGUgcmVzcG9uZGluZyBNYXAtUmVxdWVzdCBNVVNUIGJlIHNlbnQN CiAgIHdpdGggYW4gRUlEIGRlc3RpbmF0aW9uIHRvIHRoZSBtYXBwaW5nIGRhdGFiYXNlIHN5c3Rl bS4gIFNpbmNlIHRoZQ0KICAgbWFwcGluZyBkYXRhYmFzZSBzeXN0ZW0gaXMgbW9yZSBzZWN1cmUg dG8gcmVhY2ggYW4gYXV0aG9yaXRhdGl2ZSBFVFIsDQogICBpdCB3aWxsIGRlbGl2ZXIgdGhlIE1h cC1SZXF1ZXN0IHRvIHRoZSBhdXRob3JpdGF0aXZlIHNvdXJjZSBvZiB0aGUNCiAgIG1hcHBpbmcg ZGF0YS4NCg0KNy4gIFJvdXRlciBQZXJmb3JtYW5jZSBDb25zaWRlcmF0aW9ucw0KDQogICBMSVNQ IGlzIGRlc2lnbmVkIHRvIGJlIHZlcnkgaGFyZHdhcmUtYmFzZWQgZm9yd2FyZGluZyBmcmllbmRs eS4gIEJ5DQogICBkb2luZyB0dW5uZWwgaGVhZGVyIHByZXBlbmRpbmcgW1JGQzE5NTVdIGFuZCBz dHJpcHBpbmcgaW5zdGVhZCBvZiByZS0NCiAgIHdyaXRpbmcgYWRkcmVzc2VzLCBleGlzdGluZyBo YXJkd2FyZSBjYW4gc3VwcG9ydCB0aGUgZm9yd2FyZGluZyBtb2RlbA0KICAgd2l0aCBsaXR0bGUg b3Igbm8gbW9kaWZpY2F0aW9uLiAgV2hlcmUgbW9kaWZpY2F0aW9ucyBhcmUgcmVxdWlyZWQsDQog ICB0aGV5IHNob3VsZCBiZSBsaW1pdGVkIHRvIHJlLXByb2dyYW1taW5nIGV4aXN0aW5nIGhhcmR3 YXJlIHJhdGhlcg0KICAgdGhhbiByZXF1aXJpbmcgZXhwZW5zaXZlIGRlc2lnbiBjaGFuZ2VzIHRv IGhhcmQtY29kZWQgYWxnb3JpdGhtcyBpbg0KICAgc2lsaWNvbi4NCg0KICAgQSBmZXcgaW1wbGVt ZW50YXRpb24gdGVjaG5pcXVlcyBjYW4gYmUgdXNlZCB0byBpbmNyZW1lbnRhbGx5DQogICBpbXBs ZW1lbnQgTElTUDoNCg0KICAgbyAgV2hlbiBhIHR1bm5lbCBlbmNhcHN1bGF0ZWQgcGFja2V0IGlz IHJlY2VpdmVkIGJ5IGFuIEVUUiwgdGhlIG91dGVyDQogICAgICBkZXN0aW5hdGlvbiBhZGRyZXNz IG1heSBub3QgYmUgdGhlIGFkZHJlc3Mgb2YgdGhlIHJvdXRlci4gIFRoaXMNCiAgICAgIG1ha2Vz IGl0IGNoYWxsZW5naW5nIGZvciB0aGUgY29udHJvbCBwbGFuZSB0byBnZXQgcGFja2V0cyBmcm9t IHRoZQ0KICAgICAgaGFyZHdhcmUuICBUaGlzIG1heSBiZSBtaXRpZ2F0ZWQgYnkgY3JlYXRpbmcg c3BlY2lhbCBGSUIgZW50cmllcw0KICAgICAgZm9yIHRoZSBFSUQtcHJlZml4ZXMgb2YgRUlEcyBz ZXJ2ZWQgYnkgdGhlIEVUUiAodGhvc2UgZm9yIHdoaWNoDQogICAgICB0aGUgcm91dGVyIHByb3Zp ZGVzIGFuIFJMT0MgdHJhbnNsYXRpb24pLiAgVGhlc2UgRklCIGVudHJpZXMgYXJlDQogICAgICBt YXJrZWQgd2l0aCBhIGZsYWcgaW5kaWNhdGluZyB0aGF0IGNvbnRyb2wgcGxhbmUgcHJvY2Vzc2lu ZyBzaG91bGQNCiAgICAgIGJlIHBlcmZvcm1lZC4gIFRoZSBmb3J3YXJkaW5nIGxvZ2ljIG9mIHRl c3RpbmcgZm9yIHBhcnRpY3VsYXIgSVANCiAgICAgIHByb3RvY29sIG51bWJlciB2YWx1ZSBpcyBu b3QgbmVjZXNzYXJ5LiAgTm8gY2hhbmdlcyB0byBleGlzdGluZywNCiAgICAgIGRlcGxveWVkIGhh cmR3YXJlIHNob3VsZCBiZSBuZWVkZWQgdG8gc3VwcG9ydCB0aGlzLg0KDQogICBvICBPbiBhbiBJ VFIsIHByZXBlbmRpbmcgYSBuZXcgSVAgaGVhZGVyIGlzIGFzIHNpbXBsZSBhcyBhZGRpbmcgbW9y ZQ0KICAgICAgYnl0ZXMgdG8gYSBNQUMgcmV3cml0ZSBzdHJpbmcgYW5kIHByZXBlbmRpbmcgdGhl IHN0cmluZyBhcyBwYXJ0IG9mDQogICAgICB0aGUgb3V0Z29pbmcgZW5jYXBzdWxhdGlvbiBwcm9j ZWR1cmUuICBNYW55IHJvdXRlcnMgdGhhdCBzdXBwb3J0DQogICAgICBHUkUgdHVubmVsaW5nIFtS RkMyNzg0XSBvciA2dG80IHR1bm5lbGluZyBbUkZDMzA1Nl0gY2FuIGFscmVhZHkNCiAgICAgIHN1 cHBvcnQgdGhpcyBhY3Rpb24uDQoNCiAgIG8gIFdoZW4gYSByZWNlaXZlZCBwYWNrZXQncyBvdXRl ciBkZXN0aW5hdGlvbiBhZGRyZXNzIGNvbnRhaW5zIGFuIEVJRA0KICAgICAgd2hpY2ggaXMgbm90 IGludGVuZGVkIHRvIGJlIGZvcndhcmRlZCBvbiB0aGUgcm91dGFibGUgdG9wb2xvZ3kNCiAgICAg IChpLmUuICBMSVNQIDEuNSksIHRoZSBzb3VyY2UgYWRkcmVzcyBvZiBhIGRhdGEgcGFja2V0IG9y IHRoZQ0KICAgICAgcm91dGVyIGludGVyZmFjZSB3aXRoIHdoaWNoIHRoZSBzb3VyY2UgaXMgYXNz b2NpYXRlZCAodGhlDQogICAgICBpbnRlcmZhY2UgZnJvbSB3aGljaCBpdCB3YXMgcmVjZWl2ZWQp IGNhbiBiZSBhc3NvY2lhdGVkIHdpdGggYSBWUkYNCiAgICAgIChWaXJ0dWFsIFJvdXRpbmcvRm9y d2FyZGluZyksIGluIHdoaWNoIGEgZGlmZmVyZW50IChpLmUuIG5vbi0NCiAgICAgIGNvbmdydWVu dCkgdG9wb2xvZ3kgY2FuIGJlIHVzZWQgdG8gZmluZCBFSUQtdG8tUkxPQyBtYXBwaW5ncy4NCg0K OC4gIERlcGxveW1lbnQgU2NlbmFyaW9zDQoNCiAgIFRoaXMgc2VjdGlvbiB3aWxsIGV4cGxvcmUg aG93IGFuZCB3aGVyZSBJVFJzIGFuZCBFVFJzIGNhbiBiZSBkZXBsb3llZA0KICAgYW5kIHdpbGwg ZGlzY3VzcyB0aGUgcHJvcyBhbmQgY29ucyBvZiBlYWNoIGRlcGxveW1lbnQgc2NlbmFyaW8uDQog ICBUaGVyZSBhcmUgdHdvIGJhc2ljIGRlcGxveW1lbnQgdHJhZGUtb2ZmcyB0byBjb25zaWRlcjog Y2VudHJhbGl6ZWQNCiAgIHZlcnN1cyBkaXN0cmlidXRlZCBjYWNoZXMgYW5kIGZsYXQsIHJlY3Vy c2l2ZSwgb3IgcmUtZW5jYXBzdWxhdGluZw0KICAgdHVubmVsaW5nLg0KDQogICBXaGVuIGRlY2lk aW5nIG9uIGNlbnRyYWxpemVkIHZlcnN1cyBkaXN0cmlidXRlZCBjYWNoaW5nLCB0aGUNCiAgIGZv bGxvd2luZyBpc3N1ZXMgc2hvdWxkIGJlIGNvbnNpZGVyZWQ6DQoNCiAgIG8gIEFyZSB0aGUgdHVu bmVsIHJvdXRlcnMgc3ByZWFkIG91dCBzbyB0aGF0IHRoZSBjYWNoZXMgYXJlIHNwcmVhZA0KICAg ICAgYWNyb3NzIGFsbCB0aGUgbWVtb3JpZXMgb2YgZWFjaCByb3V0ZXI/DQoNCiAgIG8gIFNob3Vs ZCBtYW5hZ2VtZW50ICJ0b3VjaCBwb2ludHMiIGJlIG1pbmltaXplZCBieSBjaG9vc2luZyBmZXcN CiAgICAgIHR1bm5lbCByb3V0ZXJzLCBqdXN0IGVub3VnaCBmb3IgcmVkdW5kYW5jeT8NCg0KICAg byAgSW4gZ2VuZXJhbCwgdXNpbmcgbW9yZSBJVFJzIGRvZXNuJ3QgaW5jcmVhc2UgbWFuYWdlbWVu dCBsb2FkLA0KICAgICAgc2luY2UgY2FjaGVzIGFyZSBidWlsdCBhbmQgc3RvcmVkIGR5bmFtaWNh bGx5LiAgT24gdGhlIG90aGVyIGhhbmQsDQogICAgICBtb3JlIEVUUnMgZG9lcyByZXF1aXJlIG1v cmUgbWFuYWdlbWVudCBzaW5jZSBFSUQtcHJlZml4LXRvLVJMT0MNCiAgICAgIG1hcHBpbmdzIG5l ZWQgdG8gYmUgZXhwbGljaXRseSBjb25maWd1cmVkLg0KDQogICBXaGVuIGRlY2lkaW5nIG9uIGZs YXQsIHJlY3Vyc2l2ZSwgb3IgcmUtZW5jYXBzdWxhdGlvbiB0dW5uZWxpbmcsIHRoZQ0KICAgZm9s bG93aW5nIGlzc3VlcyBzaG91bGQgYmUgY29uc2lkZXJlZDoNCg0KICAgbyAgRmxhdCB0dW5uZWxp bmcgaW1wbGVtZW50cyBhIHNpbmdsZSB0dW5uZWwgYmV0d2VlbiBzb3VyY2Ugc2l0ZSBhbmQNCiAg ICAgIGRlc3RpbmF0aW9uIHNpdGUuICBUaGlzIGdlbmVyYWxseSBvZmZlcnMgYmV0dGVyIHBhdGhz IGJldHdlZW4NCiAgICAgIHNvdXJjZXMgYW5kIGRlc3RpbmF0aW9ucyB3aXRoIGEgc2luZ2xlIHR1 bm5lbCBwYXRoLg0KDQogICBvICBSZWN1cnNpdmUgdHVubmVsaW5nIGlzIHdoZW4gdHVubmVsZWQg dHJhZmZpYyBpcyBhZ2FpbiBmdXJ0aGVyDQogICAgICBlbmNhcHN1bGF0ZWQgaW4gYW5vdGhlciB0 dW5uZWwsIGVpdGhlciB0byBpbXBsZW1lbnQgVlBOcyBvciB0bw0KICAgICAgcGVyZm9ybSBUcmFm ZmljIEVuZ2luZWVyaW5nLiAgV2hlbiBkb2luZyBWUE4tYmFzZWQgdHVubmVsaW5nLCB0aGUNCiAg ICAgIHNpdGUgaGFzIHNvbWUgY29udHJvbCBzaW5jZSB0aGUgc2l0ZSBpcyBwcmVwZW5kaW5nIGEg bmV3IHR1bm5lbA0KICAgICAgaGVhZGVyLiAgSW4gdGhlIGNhc2Ugb2YgVEUtYmFzZWQgdHVubmVs aW5nLCB0aGUgc2l0ZSBtYXkgaGF2ZQ0KICAgICAgY29udHJvbCBpZiBpdCBpcyBwcmVwZW5kaW5n IGEgbmV3IHR1bm5lbCBoZWFkZXIsIGJ1dCBpZiB0aGUgc2l0ZSdzDQogICAgICBJU1AgaXMgZG9p bmcgdGhlIFRFLCB0aGVuIHRoZSBzaXRlIGhhcyBubyBjb250cm9sLiAgUmVjdXJzaXZlDQogICAg ICB0dW5uZWxpbmcgZ2VuZXJhbGx5IHdpbGwgcmVzdWx0IGluIHN1Ym9wdGltYWwgcGF0aHMgYnV0 IGF0IHRoZQ0KICAgICAgYmVuZWZpdCBvZiBzdGVlcmluZyB0cmFmZmljIHRvIHJlc291cmNlIGF2 YWlsYWJsZSBwYXJ0cyBvZiB0aGUNCiAgICAgIG5ldHdvcmsuDQoNCiAgIG8gIFRoZSB0ZWNobmlx dWUgb2YgcmUtZW5jYXBzdWxhdGlvbiBlbnN1cmVzIHRoYXQgcGFja2V0cyBvbmx5DQogICAgICBy ZXF1aXJlIG9uZSB0dW5uZWwgaGVhZGVyLiAgU28gaWYgYSBwYWNrZXQgbmVlZHMgdG8gYmUgcmVy b3V0ZWQsDQogICAgICBpdCBpcyBmaXJzdCBkZWNhcHN1bGF0ZWQgYnkgdGhlIEVUUiBhbmQgdGhl biByZS1lbmNhcHN1bGF0ZWQgd2l0aA0KICAgICAgYSBuZXcgdHVubmVsIGhlYWRlciB1c2luZyBh IG5ldyBSTE9DLg0KDQogICBUaGUgbmV4dCBzdWItc2VjdGlvbnMgd2lsbCBkZXNjcmliZSB3aGVy ZSB0dW5uZWwgcm91dGVycyBjYW4gcmVzaWRlDQogICBpbiB0aGUgbmV0d29yay4NCg0KOC4xLiAg Rmlyc3QtaG9wL0xhc3QtaG9wIFR1bm5lbCBSb3V0ZXJzDQoNCiAgIEJ5IGxvY2F0aW5nIHR1bm5l bCByb3V0ZXJzIGNsb3NlIHRvIGhvc3RzLCB0aGUgRUlELXByZWZpeCBzZXQgaXMgYXQNCiAgIHRo ZSBncmFudWxhcml0eSBvZiBhbiBJUCBzdWJuZXQuICBTbyBhdCB0aGUgZXhwZW5zZSBvZiBtb3Jl IEVJRC0NCiAgIHByZWZpeC10by1STE9DIHNldHMgZm9yIHRoZSBzaXRlLCB0aGUgY2FjaGVzIGlu IGVhY2ggdHVubmVsIHJvdXRlcg0KICAgY2FuIHJlbWFpbiByZWxhdGl2ZWx5IHNtYWxsLiAgQnV0 IGNhY2hlcyBhbHdheXMgZGVwZW5kIG9uIHRoZSBudW1iZXINCiAgIG9mIG5vbi1hZ2dyZWdhdGVk IEVJRCBkZXN0aW5hdGlvbiBmbG93cyBhY3RpdmUgdGhyb3VnaCB0aGVzZSB0dW5uZWwNCiAgIHJv dXRlcnMuDQoNCiAgIFdpdGggbW9yZSB0dW5uZWwgcm91dGVycyBkb2luZyBlbmNhcHN1bGF0aW9u LCB0aGUgaW5jcmVhc2UgaW4gY29udHJvbA0KICAgdHJhZmZpYyBncm93cyBhcyB3ZWxsOiBzaW5j ZSB0aGUgRUlELWdyYW51bGFyaXR5IGlzIGdyZWF0ZXIsIG1vcmUNCiAgIE1hcC1SZXF1ZXN0cyBh bmQgTWFwLVJlcGxpZXMgYXJlIHRyYXZlbGluZyBiZXR3ZWVuIG1vcmUgcm91dGVycy4NCg0KICAg VGhlIGFkdmFudGFnZSBvZiBwbGFjaW5nIHRoZSBjYWNoZXMgYW5kIGRhdGFiYXNlcyBhdCB0aGVz ZSBzdHViDQogICByb3V0ZXJzIGlzIHRoYXQgdGhlIHByb2R1Y3RzIGRlcGxveWVkIGluIHRoaXMg cGFydCBvZiB0aGUgbmV0d29yaw0KICAgaGF2ZSBiZXR0ZXIgcHJpY2UtbWVtb3J5IHJhdGlvcyB0 aGVuIHRoZWlyIGNvcmUgcm91dGVyIGNvdW50ZXJwYXJ0cy4NCiAgIE1lbW9yeSBpcyB0eXBpY2Fs bHkgbGVzcyBleHBlbnNpdmUgaW4gdGhlc2UgZGV2aWNlcyBhbmQgZmV3ZXIgcm91dGVzDQogICBh cmUgc3RvcmVkIChvbmx5IElHUCByb3V0ZXMpLiAgVGhlc2UgZGV2aWNlcyB0ZW5kIHRvIGhhdmUg ZXhjZXNzDQogICBjYXBhY2l0eSwgYm90aCBmb3IgZm9yd2FyZGluZyBhbmQgcm91dGluZyBzdGF0 ZS4NCg0KICAgTElTUCBmdW5jdGlvbmFsaXR5IGNhbiBhbHNvIGJlIGRlcGxveWVkIGluIGVkZ2Ug c3dpdGNoZXMuICBUaGVzZQ0KICAgZGV2aWNlcyBnZW5lcmFsbHkgaGF2ZSBsYXllci0yIHBvcnRz IGZhY2luZyBob3N0cyBhbmQgbGF5ZXItMyBwb3J0cw0KICAgZmFjaW5nIHRoZSBJbnRlcm5ldC4g IFNwYXJlIGNhcGFjaXR5IGlzIGFsc28gb2Z0ZW4gYXZhaWxhYmxlIGluIHRoZXNlDQogICBkZXZp Y2VzIGFzIHdlbGwuDQoNCjguMi4gIEJvcmRlci9FZGdlIFR1bm5lbCBSb3V0ZXJzDQoNCiAgIFVz aW5nIGN1c3RvbWVyLWVkZ2UgKENFKSByb3V0ZXJzIGZvciB0dW5uZWwgZW5kcG9pbnRzIGFsbG93 cyB0aGUgRUlEDQogICBzcGFjZSBhc3NvY2lhdGVkIHdpdGggYSBzaXRlIHRvIGJlIHJlYWNoYWJs ZSB2aWEgYSBzbWFsbCBzZXQgb2YgUkxPQ3MNCiAgIGFzc2lnbmVkIHRvIHRoZSBDRSByb3V0ZXJz IGZvciB0aGF0IHNpdGUuDQoNCiAgIFRoaXMgb2ZmZXJzIHRoZSBvcHBvc2l0ZSBiZW5lZml0IG9m IHRoZSBmaXJzdC1ob3AvbGFzdC1ob3AgdHVubmVsDQogICByb3V0ZXIgc2NlbmFyaW86IHRoZSBu dW1iZXIgb2YgbWFwcGluZyBlbnRyaWVzIGFuZCBuZXR3b3JrIG1hbmFnZW1lbnQNCiAgIHRvdWNo IHBvaW50cyBhcmUgcmVkdWNlZCwgYWxsb3dpbmcgYmV0dGVyIHNjYWxpbmcuDQoNCiAgIE9uZSBk aXNhZHZhbnRhZ2UgaXMgdGhhdCBsZXNzIG9mIHRoZSBuZXR3b3JrJ3MgcmVzb3VyY2VzIGFyZSB1 c2VkIHRvDQogICByZWFjaCBob3N0IGVuZHBvaW50cyB0aGVyZWJ5IGNlbnRyYWxpemluZyB0aGUg cG9pbnQtb2YtZmFpbHVyZSBkb21haW4NCiAgIGFuZCBjcmVhdGluZyBuZXR3b3JrIGNob2tlIHBv aW50cyBhdCB0aGUgQ0Ugcm91dGVyLg0KDQogICBOb3RlIHRoYXQgbW9yZSB0aGFuIG9uZSBDRSBy b3V0ZXIgYXQgYSBzaXRlIGNhbiBiZSBjb25maWd1cmVkIHdpdGgNCiAgIHRoZSBzYW1lIElQIGFk ZHJlc3MuICBJbiB0aGlzIGNhc2UgYW4gUkxPQyBpcyBhbiBhbnljYXN0IGFkZHJlc3MuDQogICBU aGlzIGFsbG93cyByZXNpbGllbmNlIGJldHdlZW4gdGhlIENFIHJvdXRlcnMuICBUaGF0IGlzLCBp ZiBhIENFDQogICByb3V0ZXIgZmFpbHMsIHRyYWZmaWMgaXMgYXV0b21hdGljYWxseSByb3V0ZWQg dG8gdGhlIG90aGVyIHJvdXRlcnMNCiAgIHVzaW5nIHRoZSBzYW1lIGFueWNhc3QgYWRkcmVzcy4g IEhvd2V2ZXIsIHRoaXMgY29tZXMgd2l0aCB0aGUNCiAgIGRpc2FkdmFudGFnZSB3aGVyZSB0aGUg c2l0ZSBjYW5ub3QgY29udHJvbCB0aGUgZW50cmFuY2UgcG9pbnQgd2hlbg0KICAgdGhlIGFueWNh c3Qgcm91dGUgaXMgYWR2ZXJ0aXNlZCBvdXQgZnJvbSBhbGwgYm9yZGVyIHJvdXRlcnMuDQoNCjgu My4gIElTUCBQcm92aWRlci1FZGdlIChQRSkgVHVubmVsIFJvdXRlcnMNCg0KICAgVXNlIG9mIElT UCBQRSByb3V0ZXJzIGFzIHR1bm5lbCBlbmRwb2ludCByb3V0ZXJzIGdpdmVzIGFuIElTUCBjb250 cm9sDQogICBvdmVyIHRoZSBsb2NhdGlvbiBvZiB0aGUgZWdyZXNzIHR1bm5lbCBlbmRwb2ludHMu ICBUaGF0IGlzLCB0aGUgSVNQDQogICBjYW4gZGVjaWRlIGlmIHRoZSB0dW5uZWwgZW5kcG9pbnRz IGFyZSBpbiB0aGUgZGVzdGluYXRpb24gc2l0ZSAoaW4NCiAgIGVpdGhlciBDRSByb3V0ZXJzIG9y IGxhc3QtaG9wIHJvdXRlcnMgd2l0aGluIGEgc2l0ZSkgb3IgYXQgb3RoZXIgUEUNCiAgIGVkZ2Vz LiAgVGhlIGFkdmFudGFnZSBvZiB0aGlzIGNhc2UgaXMgdGhhdCB0d28gb3IgbW9yZSB0dW5uZWwg aGVhZGVycw0KICAgY2FuIGJlIGF2b2lkZWQuICBCeSBoYXZpbmcgdGhlIFBFIGJlIHRoZSBmaXJz dCByb3V0ZXIgb24gdGhlIHBhdGggdG8NCiAgIGVuY2Fwc3VsYXRlLCBpdCBjYW4gY2hvb3NlIGEg VEUgcGF0aCBmaXJzdCwgYW5kIHRoZSBFVFIgY2FuDQogICBkZWNhcHN1bGF0ZSBhbmQgcmUtZW5j YXBzdWxhdGUgZm9yIGEgdHVubmVsIHRvIHRoZSBkZXN0aW5hdGlvbiBlbmQNCiAgIHNpdGUuDQoN CiAgIEFuIG9idmlvdXMgZGlzYWR2YW50YWdlIGlzIHRoYXQgdGhlIGVuZCBzaXRlIGhhcyBubyBj b250cm9sIG92ZXINCiAgIHdoZXJlIGl0cyBwYWNrZXRzIGZsb3cgb3IgdGhlIFJMT0NzIHVzZWQu DQoNCiAgIEFzIG1lbnRpb25lZCBpbiBlYXJsaWVyIHNlY3Rpb25zIGEgY29tYmluYXRpb24gb2Yg dGhlc2Ugc2NlbmFyaW9zIGlzDQogICBwb3NzaWJsZSBhdCB0aGUgZXhwZW5zZSBvZiBleHRyYSBw YWNrZXQgaGVhZGVyIG92ZXJoZWFkLCBpZiBib3RoIHNpdGUNCiAgIGFuZCBwcm92aWRlciB3YW50 IGNvbnRyb2wsIHRoZW4gcmVjdXJzaXZlIG9yIHJlLWVuY2Fwc3VsYXRpbmcgdHVubmVscw0KICAg YXJlIHVzZWQuDQoNCjkuICBUcmFjZXJvdXRlIENvbnNpZGVyYXRpb25zDQoNCiAgIFdoZW4gYSBz b3VyY2UgaG9zdCBpbiBhIExJU1Agc2l0ZSBpbml0aWF0ZXMgYSB0cmFjZXJvdXRlIHRvIGENCiAg IGRlc3RpbmF0aW9uIGhvc3QgaW4gYW5vdGhlciBMSVNQIHNpdGUsIGl0IGlzIGhpZ2hseSBkZXNp cmFibGUgZm9yIGl0DQogICB0byBzZWUgdGhlIGVudGlyZSBwYXRoLiAgU2luY2UgcGFja2V0cyBh cmUgZW5jYXBzdWxhdGVkIGZyb20gSVRSIHRvDQogICBFVFIsIHRoZSBob3AgYWNyb3NzIHRoZSB0 dW5uZWwgY291bGQgYmUgdmlld2VkIGFzIGEgc2luZ2xlIGhvcC4NCiAgIEhvd2V2ZXIsIExJU1Ag dHJhY2Vyb3V0ZSB3aWxsIHByb3ZpZGUgdGhlIGVudGlyZSBwYXRoIHNvIHRoZSB1c2VyIGNhbg0K ICAgc2VlIDMgZGlzdGluY3Qgc2VnbWVudHMgb2YgdGhlIHBhdGggZnJvbSBhIHNvdXJjZSBMSVNQ IGhvc3QgdG8gYQ0KICAgZGVzdGluYXRpb24gTElTUCBob3N0Og0KDQogICAgICBTZWdtZW50IDEg KGluIHNvdXJjZSBMSVNQIHNpdGUgYmFzZWQgb24gRUlEcyk6DQoNCiAgICAgICAgICBzb3VyY2Ut aG9zdCAtLS0mZ3Q7IGZpcnN0LWhvcCAuLi4gbmV4dC1ob3AgLS0tJmd0OyBJVFINCg0KICAgICAg U2VnbWVudCAyIChpbiB0aGUgY29yZSBuZXR3b3JrIGJhc2VkIG9uIFJMT0NzKToNCg0KICAgICAg ICAgIElUUiAtLS0mZ3Q7IG5leHQtaG9wIC4uLiBuZXh0LWhvcCAtLS0mZ3Q7IEVUUg0KDQogICAg ICBTZWdtZW50IDMgKGluIHRoZSBkZXN0aW5hdGlvbiBMSVNQIHNpdGUgYmFzZWQgb24gRUlEcyk6 DQoNCiAgICAgICAgICBFVFIgLS0tJmd0OyBuZXh0LWhvcCAuLi4gbGFzdC1ob3AgLS0tJmd0OyBk ZXN0aW5hdGlvbi1ob3N0DQoNCiAgIEZvciBzZWdtZW50IDEgb2YgdGhlIHBhdGgsIElDTVAgVGlt ZSBFeGNlZWRlZCBtZXNzYWdlcyBhcmUgcmV0dXJuZWQNCiAgIGluIHRoZSBub3JtYWwgbWF0dGVy IGFzIHRoZXkgYXJlIHRvZGF5LiAgVGhlIElUUiBwZXJmb3JtcyBhIFRUTA0KICAgZGVjcmVtZW50 IGFuZCB0ZXN0IGZvciAwIGJlZm9yZSBlbmNhcHN1bGF0aW5nLiAgU28gdGhlIElUUiBob3AgaXMN CiAgIHNlZW4gYnkgdGhlIHRyYWNlcm91dGUgc291cmNlIGhhcyBhbiBFSUQgYWRkcmVzcyAodGhl IGFkZHJlc3Mgb2YNCiAgIHNpdGUtZmFjaW5nIGludGVyZmFjZSkuDQoNCiAgIEZvciBzZWdtZW50 IDIgb2YgdGhlIHBhdGgsIElDTVAgVGltZSBFeGNlZWRlZCBtZXNzYWdlcyBhcmUgcmV0dXJuZWQN CiAgIHRvIHRoZSBJVFIgYmVjYXVzZSB0aGUgVFRMIGRlY3JlbWVudCB0byAwIGlzIGRvbmUgb24g dGhlIG91dGVyDQogICBoZWFkZXIsIHNvIHRoZSBkZXN0aW5hdGlvbiBvZiB0aGUgSUNNUCBtZXNz YWdlcyBhcmUgdG8gdGhlIElUUiBSTE9DDQogICBhZGRyZXNzLCB0aGUgc291cmNlIHNvdXJjZSBS TE9DIGFkZHJlc3Mgb2YgdGhlIGVuY2Fwc3VsYXRlZA0KICAgdHJhY2Vyb3V0ZSBwYWNrZXQuICBU aGUgSVRSIGxvb2tzIGluc2lkZSBvZiB0aGUgSUNNUCBwYXlsb2FkIHRvDQogICBpbnNwZWN0IHRo ZSB0cmFjZXJvdXRlIHNvdXJjZSBzbyBpdCBjYW4gcmV0dXJuIHRoZSBJQ01QIG1lc3NhZ2UgdG8N CiAgIHRoZSBhZGRyZXNzIG9mIHRoZSB0cmFjZXJvdXRlIGNsaWVudCBhcyB3ZWxsIGFzIHJldGFp bmluZyB0aGUgY29yZQ0KICAgcm91dGVyIElQIGFkZHJlc3MgaW4gdGhlIElDTVAgbWVzc2FnZS4g IFRoaXMgaXMgc28gdGhlIHRyYWNlcm91dGUNCiAgIGNsaWVudCBjYW4gZGlzcGxheSB0aGUgY29y ZSByb3V0ZXIgYWRkcmVzcyAodGhlIFJMT0MgYWRkcmVzcykgaW4gdGhlDQogICB0cmFjZXJvdXRl IG91dHB1dC4gIFRoZSBFVFIgcmV0dXJucyBpdHMgUkxPQyBhZGRyZXNzIGFuZCByZXNwb25kcyB0 bw0KICAgdGhlIFRUTCBkZWNyZW1lbnQgdG8gMCBsaWtlIHRoZSBwcmV2aW91cyBjb3JlIHJvdXRl cnMgZGlkLg0KDQogICBGb3Igc2VnbWVudCAzLCB0aGUgbmV4dC1ob3Agcm91dGVyIGRvd25zdHJl YW0gZnJvbSB0aGUgRVRSIHdpbGwgYmUNCiAgIGRlY3JlbWVudGluZyB0aGUgVFRMIGZvciB0aGUg cGFja2V0IHRoYXQgd2FzIGVuY2Fwc3VsYXRlZCwgc2VudCBpbnRvDQogICB0aGUgY29yZSwgZGVj YXBzdWxhdGVkIGJ5IHRoZSBFVFIsIGFuZCBmb3J3YXJkZWQgYmVjYXVzZSBpdCBpc24ndCB0aGUN CiAgIGZpbmFsIGRlc3RpbmF0aW9uLiAgSWYgdGhlIFRUTCBpcyBkZWNyZW1lbnRlZCB0byAwLCBh bnkgcm91dGVyIG9uIHRoZQ0KICAgcGF0aCB0byB0aGUgZGVzdGluYXRpb24gb2YgdGhlIHRyYWNl cm91dGUsIGluY2x1ZGluZyB0aGUgbmV4dC1ob3ANCiAgIHJvdXRlciBvciBkZXN0aW5hdGlvbiwg d2lsbCBzZW5kIGFuIElDTVAgVGltZSBFeGNlZWRlZCBtZXNzYWdlIHRvIHRoZQ0KICAgc291cmNl IEVJRCBvZiB0aGUgdHJhY2Vyb3V0ZSBjbGllbnQuICBUaGUgSUNNUCBtZXNzYWdlIHdpbGwgYmUN CiAgIGVuY2Fwc3VsYXRlZCBieSB0aGUgbG9jYWwgSVRSIGFuZCBzZW50IGJhY2sgdG8gdGhlIEVU UiBpbiB0aGUNCiAgIG9yaWdpbmF0ZWQgdHJhY2Vyb3V0ZSBzb3VyY2Ugc2l0ZSwgd2hlcmUgdGhl IHBhY2tldCB3aWxsIGJlIGRlbGl2ZXJlZA0KICAgdG8gdGhlIGhvc3QuDQoNCjkuMS4gIElQdjYg VHJhY2Vyb3V0ZQ0KDQogICBJUHY2IHRyYWNlcm91dGUgZm9sbG93cyB0aGUgcHJvY2VkdXJlIGRl c2NyaWJlZCBhYm92ZSBzaW5jZSB0aGUNCiAgIGVudGlyZSB0cmFjZXJvdXRlIGRhdGEgcGFja2V0 IGlzIGluY2x1ZGVkIGluIElDTVAgVGltZSBFeGNlZWRlZA0KICAgbWVzc2FnZSBwYXlsb2FkLiAg VGhlcmVmb3JlLCBvbmx5IHRoZSBJVFIgbmVlZHMgdG8gcGF5IHNwZWNpYWwNCiAgIGF0dGVudGlv biBmb3IgZm9yd2FyZGluZyBJQ01QIG1lc3NhZ2VzIGJhY2sgdG8gdGhlIHRyYWNlcm91dGUgc291 cmNlLg0KDQo5LjIuICBJUHY0IFRyYWNlcm91dGUNCg0KICAgRm9yIElQdjQgdHJhY2Vyb3V0ZSwg d2UgY2Fubm90IGZvbGxvdyB0aGUgYWJvdmUgcHJvY2VkdXJlIHNpbmNlIElQdjQNCiAgIElDTVAg VGltZSBFeGNlZWRlZCBtZXNzYWdlcyBvbmx5IGluY2x1ZGUgdGhlIGludm9raW5nIElQIGhlYWRl ciBhbmQgOA0KICAgYnl0ZXMgdGhhdCBmb2xsb3cgdGhlIElQIGhlYWRlci4gIFRoZXJlZm9yZSwg d2hlbiBhIGNvcmUgcm91dGVyIHNlbmRzDQogICBhbiBJUHY0IFRpbWUgRXhjZWVkZWQgbWVzc2Fn ZSB0byBhbiBJVFIsIGFsbCB0aGUgSVRSIGhhcyBpbiB0aGUgSUNNUA0KICAgcGF5bG9hZCBpcyB0 aGUgZW5jYXBzdWxhdGVkIGhlYWRlciBpdCBwcmVwZW5kZWQgZm9sbG93ZWQgYnkgYSBVRFANCiAg IGhlYWRlci4gIFRoZSBvcmlnaW5hbCBpbnZva2luZyBJUCBoZWFkZXIsIGFuZCB0aGVyZWZvcmUg dGhlIGlkZW50aXR5DQogICBvZiB0aGUgdHJhY2Vyb3V0ZSBzb3VyY2UgaXMgbG9zdC4NCg0KICAg VGhlIHNvbHV0aW9uIHdlIHByb3Bvc2UgdG8gc29sdmUgdGhpcyBwcm9ibGVtIGlzIHRvIGNhY2hl IHRyYWNlcm91dGUNCiAgIElQdjQgaGVhZGVycyBpbiB0aGUgSVRSIGFuZCB0byBtYXRjaCB0aGVt IHVwIHdpdGggY29ycmVzcG9uZGluZyBJUHY0DQogICBUaW1lIEV4Y2VlZGVkIG1lc3NhZ2VzIHJl Y2VpdmVkIGZyb20gY29yZSByb3V0ZXJzIGFuZCB0aGUgRVRSLiAgVGhlDQogICBJVFIgd2lsbCB1 c2UgYSBjaXJjdWxhciBidWZmZXIgZm9yIGNhY2hpbmcgdGhlIElQdjQgYW5kIFVEUCBoZWFkZXJz DQogICBvZiB0cmFjZXJvdXRlIHBhY2tldHMuICBJdCB3aWxsIHNlbGVjdCBhIDE2LWJpdCBudW1i ZXIgYXMgYSBrZXkgdG8NCiAgIGZpbmQgdGhlbSBsYXRlciB3aGVuIHRoZSBJUHY0IFRpbWUgRXhj ZWVkZWQgbWVzc2FnZXMgYXJlIHJlY2VpdmVkLg0KICAgV2hlbiBhbiBJVFIgZW5jYXBzdWxhdGVz IGFuIElQdjQgdHJhY2Vyb3V0ZSBwYWNrZXQsIGl0IHdpbGwgdXNlIHRoZQ0KICAgMTYtYml0IG51 bWJlciBhcyB0aGUgVURQIHNvdXJjZSBwb3J0IGluIHRoZSBlbmNhcHN1bGF0aW5nIGhlYWRlci4N CiAgIFdoZW4gdGhlIElDTVAgVGltZSBFeGNlZWRlZCBtZXNzYWdlIGlzIHJldHVybmVkIHRvIHRo ZSBJVFIsIHRoZSBVRFANCiAgIGhlYWRlciBvZiB0aGUgZW5jYXBzdWxhdGluZyBoZWFkZXIgaXMg cHJlc2VudCBpbiB0aGUgSUNNUCBwYXlsb2FkDQogICB0aGVyZWJ5IGFsbG93aW5nIHRoZSBJVFIg dG8gZmluZCB0aGUgY2FjaGVkIGhlYWRlcnMgZm9yIHRoZQ0KICAgdHJhY2Vyb3V0ZSBzb3VyY2Uu ICBUaGUgSVRSIHB1dHMgdGhlIGNhY2hlZCBoZWFkZXJzIGluIHRoZSBwYXlsb2FkDQogICBhbmQg c2VuZHMgdGhlIElDTVAgVGltZSBFeGNlZWRlZCBtZXNzYWdlIHRvIHRoZSB0cmFjZXJvdXRlIHNv dXJjZQ0KICAgcmV0YWluaW5nIHRoZSBzb3VyY2UgYWRkcmVzcyBvZiB0aGUgb3JpZ2luYWwgSUNN UCBUaW1lIEV4Y2VlZGVkDQogICBtZXNzYWdlIChhIGNvcmUgcm91dGVyIG9yIHRoZSBFVFIgb2Yg dGhlIHNpdGUgb2YgdGhlIHRyYWNlcm91dGUNCiAgIGRlc3RpbmF0aW9uKS4NCg0KOS4zLiAgVHJh Y2Vyb3V0ZSB1c2luZyBNaXhlZCBMb2NhdG9ycw0KDQogICBXaGVuIGVpdGhlciBhbiBJUHY0IHRy YWNlcm91dGUgb3IgSVB2NiB0cmFjZXJvdXRlIGlzIG9yaWdpbmF0ZWQgYW5kDQogICB0aGUgSVRS IGVuY2Fwc3VsYXRlcyBpdCBpbiB0aGUgb3RoZXIgYWRkcmVzcyBmYW1pbHkgaGVhZGVyLCB5b3UN CiAgIGNhbm5vdCBnZXQgYWxsIDMgc2VnbWVudHMgb2YgdGhlIHRyYWNlcm91dGUuICBTZWdtZW50 IDIgb2YgdGhlDQogICB0cmFjZXJvdXRlIGNhbiBub3QgYmUgY29udmV5ZWQgdG8gdGhlIHRyYWNl cm91dGUgc291cmNlIHNpbmNlIGl0IGlzDQogICBleHBlY3RpbmcgYWRkcmVzc2VzIGZyb20gaW50 ZXJtZWRpYXRlIGhvcHMgaW4gdGhlIHNhbWUgYWRkcmVzcyBmb3JtYXQNCiAgIGZvciB0aGUgdHlw ZSBvZiB0cmFjZXJvdXRlIGl0IG9yaWdpbmF0ZWQuICBUaGVyZWZvcmUsIGluIHRoaXMgY2FzZSwN CiAgIHNlZ21lbnQgMiB3aWxsIG1ha2UgdGhlIHR1bm5lbCBsb29rIGxpa2Ugb25lIGhvcC4gIEFs bCB0aGUgSVRSIGhhcyB0bw0KICAgZG8gdG8gbWFrZSB0aGlzIHdvcmsgaXMgdG8gbm90IGNvcHkg dGhlIGlubmVyIFRUTCB0byB0aGUgb3V0ZXIsDQogICBlbmNhcHN1bGF0aW5nIGhlYWRlcidzIFRU TCB3aGVuIGEgdHJhY2Vyb3V0ZSBwYWNrZXQgaXMgZW5jYXBzdWxhdGVkDQogICB1c2luZyBhbiBS TE9DIGZyb20gYSBkaWZmZXJlbnQgYWRkcmVzcyBmYW1pbHkuICBUaGlzIHdpbGwgY2F1c2Ugbm8N CiAgIFRUTCBkZWNyZW1lbnQgdG8gMCB0byBvY2N1ciBpbiBjb3JlIHJvdXRlcnMgYmV0d2VlbiB0 aGUgSVRSIGFuZCBFVFIuDQoNCjEwLiAgTW9iaWxpdHkgQ29uc2lkZXJhdGlvbnMNCg0KICAgVGhl cmUgYXJlIHNldmVyYWwga2luZHMgb2YgbW9iaWxpdHkgb2Ygd2hpY2ggb25seSBzb21lIG1pZ2h0 IGJlIG9mDQogICBjb25jZXJuIHRvIExJU1AuICBFc3NlbnRpYWxseSB0aGV5IGFyZSBhcyBmb2xs b3dzLg0KDQoxMC4xLiAgU2l0ZSBNb2JpbGl0eQ0KDQogICBBIHNpdGUgd2lzaGVzIHRvIGNoYW5n ZSBpdHMgYXR0YWNobWVudCBwb2ludHMgdG8gdGhlIEludGVybmV0LCBhbmQNCiAgIGl0cyBMSVNQ IFR1bm5lbCBSb3V0ZXJzIHdpbGwgaGF2ZSBuZXcgUkxPQ3Mgd2hlbiBpdCBjaGFuZ2VzIHVwc3Ry ZWFtDQogICBwcm92aWRlcnMuICBDaGFuZ2VzIGluIEVJRC1STE9DIG1hcHBpbmdzIGZvciBzaXRl cyBhcmUgZXhwZWN0ZWQgdG8gYmUNCiAgIGhhbmRsZWQgYnkgY29uZmlndXJhdGlvbiwgb3V0c2lk ZSBvZiB0aGUgTElTUCBwcm90b2NvbC4NCg0KMTAuMi4gIFNsb3cgRW5kcG9pbnQgTW9iaWxpdHkN Cg0KICAgQW4gaW5kaXZpZHVhbCBlbmRwb2ludCB3aXNoZXMgdG8gbW92ZSwgYnV0IGlzIG5vdCBj b25jZXJuZWQgYWJvdXQNCiAgIG1haW50YWluaW5nIHNlc3Npb24gY29udGludWl0eS4gIFJlbnVt YmVyaW5nIGlzIGludm9sdmVkLiAgTElTUCBjYW4NCiAgIGhlbHAgd2l0aCB0aGUgaXNzdWVzIHN1 cnJvdW5kaW5nIHJlbnVtYmVyaW5nIFtSRkM0MTkyXSBbTElTQTk2XSBieQ0KICAgZGVjb3VwbGlu ZyB0aGUgYWRkcmVzcyBzcGFjZSB1c2VkIGJ5IGEgc2l0ZSBmcm9tIHRoZSBhZGRyZXNzIHNwYWNl cw0KICAgdXNlZCBieSBpdHMgSVNQcy4gIFtSRkM0OTg0XQ0KDQoxMC4zLiAgRmFzdCBFbmRwb2lu dCBNb2JpbGl0eQ0KDQogICBGYXN0IGVuZHBvaW50IG1vYmlsaXR5IG9jY3VycyB3aGVuIGFuIGVu ZHBvaW50IG1vdmVzIHJlbGF0aXZlbHkNCiAgIHJhcGlkbHksIGNoYW5naW5nIGl0cyBJUCBsYXll ciBuZXR3b3JrIGF0dGFjaG1lbnQgcG9pbnQuICBNYWludGVuYW5jZQ0KICAgb2Ygc2Vzc2lvbiBj b250aW51aXR5IGlzIGEgZ29hbC4gIFRoaXMgaXMgd2hlcmUgdGhlIE1vYmlsZSBJUHY0DQogICBb UkZDMzM0NGJpc10gYW5kIE1vYmlsZSBJUHY2IFtSRkMzNzc1XSBbUkZDNDg2Nl0gbWVjaGFuaXNt cyBhcmUgdXNlZCwNCiAgIGFuZCBwcmltYXJpbHkgd2hlcmUgaW50ZXJhY3Rpb25zIHdpdGggTElT UCBuZWVkIHRvIGJlIGV4cGxvcmVkLg0KDQogICBUaGUgcHJvYmxlbSBpcyB0aGF0IGFzIGFuIGVu ZHBvaW50IG1vdmVzLCBpdCBtYXkgcmVxdWlyZSBjaGFuZ2VzIHRvDQogICB0aGUgbWFwcGluZyBi ZXR3ZWVuIGl0cyBFSUQgYW5kIGEgc2V0IG9mIFJMT0NzIGZvciBpdHMgbmV3IG5ldHdvcmsNCiAg IGxvY2F0aW9uLiAgV2hlbiB0aGlzIGlzIGFkZGVkIHRvIHRoZSBvdmVyaGVhZCBvZiBtb2JpbGUg SVAgYmluZGluZw0KICAgdXBkYXRlcywgc29tZSBwYWNrZXRzIG1pZ2h0IGJlIGRlbGF5ZWQgb3Ig ZHJvcHBlZC4NCg0KICAgSW4gSVB2NCBtb2JpbGl0eSwgd2hlbiBhbiBlbmRwb2ludCBpcyBhd2F5 IGZyb20gaG9tZSwgcGFja2V0cyB0byBpdA0KICAgYXJlIGVuY2Fwc3VsYXRlZCBhbmQgZm9yd2Fy ZGVkIHZpYSBhIGhvbWUgYWdlbnQgd2hpY2ggcmVzaWRlcyBpbiB0aGUNCiAgIGhvbWUgYXJlYSB0 aGUgZW5kcG9pbnQncyBhZGRyZXNzIGJlbG9uZ3MgdG8uICBUaGUgaG9tZSBhZ2VudCB3aWxsDQog ICBlbmNhcHN1bGF0ZSBhbmQgZm9yd2FyZCBwYWNrZXRzIGVpdGhlciBkaXJlY3RseSB0byB0aGUg ZW5kcG9pbnQgb3IgdG8NCiAgIGEgZm9yZWlnbiBhZ2VudCB3aGljaCByZXNpZGVzIHdoZXJlIHRo ZSBlbmRwb2ludCBoYXMgbW92ZWQgdG8uDQogICBQYWNrZXRzIGZyb20gdGhlIGVuZHBvaW50IG1h eSBiZSBzZW50IGRpcmVjdGx5IHRvIHRoZSBjb3JyZXNwb25kZW50DQogICBub2RlLCBtYXkgYmUg c2VudCB2aWEgdGhlIGZvcmVpZ24gYWdlbnQsIG9yIG1heSBiZSByZXZlcnNlLXR1bm5lbGVkDQog ICBiYWNrIHRvIHRoZSBob21lIGFnZW50IGZvciBkZWxpdmVyeSB0byB0aGUgbW9iaWxlIG5vZGUu ICBBcyB0aGUNCiAgIG1vYmlsZSBub2RlJ3MgRUlEIG9yIGF2YWlsYWJsZSBSTE9DIGNoYW5nZXMs IExJU1AgRUlELXRvLVJMT0MNCiAgIG1hcHBpbmdzIGFyZSByZXF1aXJlZCBmb3IgY29tbXVuaWNh dGlvbiBiZXR3ZWVuIHRoZSBtb2JpbGUgbm9kZSBhbmQNCiAgIHRoZSBob21lIGFnZW50LCB3aGV0 aGVyIHZpYSBmb3JlaWduIGFnZW50IG9yIG5vdC4gIEFzIGEgbW9iaWxlDQogICBlbmRwb2ludCBj aGFuZ2VzIG5ldHdvcmtzLCB1cCB0byB0aHJlZSBMSVNQIG1hcHBpbmcgY2hhbmdlcyBtYXkgYmUN CiAgIHJlcXVpcmVkOg0KDQogICBvICBUaGUgbW9iaWxlIG5vZGUgbW92ZXMgZnJvbSBhbiBvbGQg bG9jYXRpb24gdG8gYSBuZXcgdmlzaXRlZA0KICAgICAgbmV0d29yayBsb2NhdGlvbiBhbmQgbm90 aWZpZXMgaXRzIGhvbWUgYWdlbnQgdGhhdCBpdCBoYXMgZG9uZSBzby4NCiAgICAgIFRoZSBNb2Jp bGUgSVB2NCBjb250cm9sIHBhY2tldHMgdGhlIG1vYmlsZSBub2RlIHNlbmRzIHBhc3MgdGhyb3Vn aA0KICAgICAgb25lIG9mIHRoZSBuZXcgdmlzaXRlZCBuZXR3b3JrJ3MgSVRScywgd2hpY2ggbmVl ZHMgYSBFSUQtUkxPQw0KICAgICAgbWFwcGluZyBmb3IgdGhlIGhvbWUgYWdlbnQuDQoNCiAgIG8g IFRoZSBob21lIGFnZW50IG1pZ2h0IG5vdCBoYXZlIHRoZSBFSUQtUkxPQyBtYXBwaW5ncyBmb3Ig dGhlIG1vYmlsZQ0KICAgICAgbm9kZSdzICJjYXJlLW9mIiBhZGRyZXNzIG9yIGl0cyBmb3JlaWdu IGFnZW50IGluIHRoZSBuZXcgdmlzaXRlZA0KICAgICAgbmV0d29yaywgaW4gd2hpY2ggY2FzZSBp dCB3aWxsIG5lZWQgdG8gYWNxdWlyZSB0aGVtLg0KDQogICBvICBXaGVuIHBhY2tldHMgYXJlIHNl bnQgZGlyZWN0bHkgdG8gdGhlIGNvcnJlc3BvbmRlbnQgbm9kZSwgaXQgbWF5DQogICAgICBiZSB0 aGF0IG5vIHRyYWZmaWMgaGFzIGJlZW4gc2VudCBmcm9tIHRoZSBuZXcgdmlzaXRlZCBuZXR3b3Jr IHRvDQogICAgICB0aGUgY29ycmVzcG9uZGVudCBub2RlJ3MgbmV0d29yaywgYW5kIHRoZSBuZXcg dmlzaXRlZCBuZXR3b3JrJ3MNCiAgICAgIElUUiB3aWxsIG5lZWQgdG8gb2J0YWluIGFuIEVJRC1S TE9DIG1hcHBpbmcgZm9yIHRoZSBjb3JyZXNwb25kZW50DQogICAgICBub2RlJ3Mgc2l0ZS4NCg0K ICAgSW4gYWRkaXRpb24sIGlmIHRoZSBJUHY0IGVuZHBvaW50IGlzIHNlbmRpbmcgcGFja2V0cyBm cm9tIHRoZSBuZXcNCiAgIHZpc2l0ZWQgbmV0d29yayB1c2luZyBpdHMgb3JpZ2luYWwgRUlELCB0 aGVuIExJU1Agd2lsbCBuZWVkIHRvDQogICBwZXJmb3JtIGEgcm91dGUtcmV0dXJuYWJpbGl0eSBj aGVjayBvbiB0aGUgbmV3IEVJRC1STE9DIG1hcHBpbmcgZm9yDQogICB0aGF0IEVJRC4NCg0KICAg SW4gSVB2NiBtb2JpbGl0eSwgcGFja2V0cyBjYW4gZmxvdyBkaXJlY3RseSBiZXR3ZWVuIHRoZSBt b2JpbGUgbm9kZQ0KICAgYW5kIHRoZSBjb3JyZXNwb25kZW50IG5vZGUgaW4gZWl0aGVyIGRpcmVj dGlvbi4gIFRoZSBtb2JpbGUgbm9kZSB1c2VzDQogICBpdHMgImNhcmUtb2YiIGFkZHJlc3MgKEVJ RCkuICBJbiB0aGlzIGNhc2UsIHRoZSByb3V0ZS1yZXR1cm5hYmlsaXR5DQogICBjaGVjayB3b3Vs ZCBub3QgYmUgbmVlZGVkIGJ1dCBvbmUgbW9yZSBMSVNQIG1hcHBpbmcgbG9va3VwIG1heSBiZQ0K ICAgcmVxdWlyZWQgaW5zdGVhZDoNCg0KICAgbyAgQXMgYWJvdmUsIHRocmVlIG1hcHBpbmcgY2hh bmdlcyBtYXkgYmUgbmVlZGVkIGZvciB0aGUgbW9iaWxlIG5vZGUNCiAgICAgIHRvIGNvbW11bmlj YXRlIHdpdGggaXRzIGhvbWUgYWdlbnQgYW5kIHRvIHNlbmQgcGFja2V0cyB0byB0aGUNCiAgICAg IGNvcnJlc3BvbmRlbnQgbm9kZS4NCg0KICAgbyAgSW4gYWRkaXRpb24sIGFub3RoZXIgbWFwcGlu ZyB3aWxsIGJlIG5lZWRlZCBpbiB0aGUgY29ycmVzcG9uZGVudA0KICAgICAgbm9kZSdzIElUUiwg aW4gb3JkZXIgZm9yIHRoZSBjb3JyZXNwb25kZW50IG5vZGUgdG8gc2VuZCBwYWNrZXRzIHRvDQog ICAgICB0aGUgbW9iaWxlIG5vZGUncyAiY2FyZS1vZiIgYWRkcmVzcyAoRUlEKSBhdCB0aGUgbmV3 IG5ldHdvcmsNCiAgICAgIGxvY2F0aW9uLg0KDQogICBXaGVuIGJvdGggZW5kcG9pbnRzIGFyZSBt b2JpbGUgdGhlIG51bWJlciBvZiBwb3RlbnRpYWwgbWFwcGluZw0KICAgbG9va3VwcyBpbmNyZWFz ZXMgYWNjb3JkaW5nbHkuDQoNCiAgIEFzIGEgbW9iaWxlIG5vZGUgbW92ZXMgdGhlcmUgYXJlIG5v dCBvbmx5IG1vYmlsaXR5IHN0YXRlIGNoYW5nZXMgaW4NCiAgIHRoZSBtb2JpbGUgbm9kZSwgY29y cmVzcG9uZGVudCBub2RlLCBhbmQgaG9tZSBhZ2VudCwgYnV0IGFsc28gc3RhdGUNCiAgIGNoYW5n ZXMgaW4gdGhlIElUUnMgYW5kIEVUUnMgZm9yIGF0IGxlYXN0IHNvbWUgRUlELXByZWZpeGVzLg0K DQogICBUaGUgZ29hbCBpcyB0byBzdXBwb3J0IHJhcGlkIGFkYXB0YXRpb24sIHdpdGggbGl0dGxl IGRlbGF5IG9yIHBhY2tldA0KICAgbG9zcyBmb3IgdGhlIGVudGlyZSBzeXN0ZW0uICBIZXVyaXN0 aWNzIGNhbiBiZSBhZGRlZCB0byBMSVNQIHRvDQogICByZWR1Y2UgdGhlIG51bWJlciBvZiBtYXBw aW5nIGNoYW5nZXMgcmVxdWlyZWQgYW5kIHRvIHJlZHVjZSB0aGUgZGVsYXkNCiAgIHBlciBtYXBw aW5nIGNoYW5nZS4gIEFsc28gSVAgbW9iaWxpdHkgY2FuIGJlIG1vZGlmaWVkIHRvIHJlcXVpcmUN CiAgIGZld2VyIG1hcHBpbmcgY2hhbmdlcy4gIEluIG9yZGVyIHRvIGluY3JlYXNlIG92ZXJhbGwg c3lzdGVtDQogICBwZXJmb3JtYW5jZSwgdGhlcmUgbWF5IGJlIGEgbmVlZCB0byByZWR1Y2UgdGhl IG9wdGltaXphdGlvbiBvZiBvbmUNCiAgIGFyZWEgaW4gb3JkZXIgdG8gcGxhY2UgZmV3ZXIgZGVt YW5kcyBvbiBhbm90aGVyLg0KDQogICBJbiBMSVNQLCBvbmUgcG9zc2liaWxpdHkgaXMgdG8gImds ZWFuIiBpbmZvcm1hdGlvbi4gIFdoZW4gYSBwYWNrZXQNCiAgIGFycml2ZXMsIHRoZSBFVFIgY291 bGQgZXhhbWluZSB0aGUgRUlELVJMT0MgbWFwcGluZyBhbmQgdXNlIHRoYXQNCiAgIG1hcHBpbmcg Zm9yIGFsbCBvdXRnb2luZyB0cmFmZmljIHRvIHRoYXQgRUlELiAgSXQgY2FuIGRvIHRoaXMgYWZ0 ZXINCiAgIHBlcmZvcm1pbmcgYSByb3V0ZS1yZXR1cm5hYmlsaXR5IGNoZWNrLCB0byBlbnN1cmUg dGhhdCB0aGUgbmV3DQogICBuZXR3b3JrIGxvY2F0aW9uIGRvZXMgaGF2ZSBhIGludGVybmFsIHJv dXRlIHRvIHRoYXQgZW5kcG9pbnQuDQogICBIb3dldmVyLCB0aGlzIGRvZXMgbm90IGNvdmVyIHRo ZSBjYXNlIHdoZXJlIGFuIElUUiAodGhlIG5vZGUgYXNzaWduZWQNCiAgIHRoZSBSTE9DKSBhdCB0 aGUgbW9iaWxlLW5vZGUgbG9jYXRpb24gaGFzIGJlZW4gY29tcHJvbWlzZWQuDQoNCiAgIE1vYmls ZSBJUCBwYWNrZXQgZXhjaGFuZ2UgaXMgZGVzaWduZWQgZm9yIGFuIGVudmlyb25tZW50IGluIHdo aWNoIGFsbA0KICAgcm91dGluZyBpbmZvcm1hdGlvbiBpcyBkaXNzZW1pbmF0ZWQgYmVmb3JlIHBh Y2tldHMgY2FuIGJlIGZvcndhcmRlZC4NCiAgIEluIG9yZGVyIHRvIGFsbG93IHRoZSBJbnRlcm5l dCB0byBncm93IHRvIHN1cHBvcnQgZXhwZWN0ZWQgZnV0dXJlDQogICB1c2UsIHdlIGFyZSBtb3Zp bmcgdG8gYW4gZW52aXJvbm1lbnQgd2hlcmUgc29tZSBpbmZvcm1hdGlvbiBtYXkgaGF2ZQ0KICAg dG8gYmUgb2J0YWluZWQgYWZ0ZXIgcGFja2V0cyBhcmUgaW4gZmxpZ2h0LiAgTW9kaWZpY2F0aW9u cyB0byBJUA0KICAgbW9iaWxpdHkgc2hvdWxkIGJlIGNvbnNpZGVyZWQgaW4gb3JkZXIgdG8gb3B0 aW1pemUgdGhlIGJlaGF2aW9yIG9mDQogICB0aGUgb3ZlcmFsbCBzeXN0ZW0uICBBbnl0aGluZyB3 aGljaCBkZWNyZWFzZXMgdGhlIG51bWJlciBvZiBuZXcgRUlELQ0KICAgUkxPQyBtYXBwaW5ncyBu ZWVkZWQgd2hlbiBhIG5vZGUgbW92ZXMsIG9yIG1haW50YWlucyB0aGUgdmFsaWRpdHkgb2YNCiAg IGFuIEVJRC1STE9DIG1hcHBpbmcgZm9yIGEgbG9uZ2VyIHRpbWUsIGlzIHVzZWZ1bC4NCg0KMTAu NC4gIEZhc3QgTmV0d29yayBNb2JpbGl0eQ0KDQogICBJbiBhZGRpdGlvbiB0byBlbmRwb2ludHMs IGEgbmV0d29yayBjYW4gYmUgbW9iaWxlLCBwb3NzaWJseSBjaGFuZ2luZw0KICAgeFRScy4gIEEg Im5ldHdvcmsiIGNhbiBiZSBhcyBzbWFsbCBhcyBhIHNpbmdsZSByb3V0ZXIgYW5kIGFzIGxhcmdl IGFzDQogICBhIHdob2xlIHNpdGUuICBUaGlzIGlzIGRpZmZlcmVudCBmcm9tIHNpdGUgbW9iaWxp dHkgaW4gdGhhdCBpdCBpcw0KICAgZmFzdCBhbmQgcG9zc2libHkgc2hvcnQtbGl2ZWQsIGJ1dCBk aWZmZXJlbnQgZnJvbSBlbmRwb2ludCBtb2JpbGl0eQ0KICAgaW4gdGhhdCBhIHdob2xlIHByZWZp eCBpcyBjaGFuZ2luZyBSTE9Dcy4gIEhvd2V2ZXIsIHRoZSBtZWNoYW5pc21zDQogICBhcmUgdGhl IHNhbWUgYW5kIHRoZXJlIGlzIG5vIG5ldyBvdmVyaGVhZCBpbiBMSVNQLiAgQSBtYXAgcmVxdWVz dCBmb3INCiAgIGFueSBlbmRwb2ludCB3aWxsIHJldHVybiBhIGJpbmRpbmcgZm9yIHRoZSBlbnRp cmUgbW9iaWxlIHByZWZpeC4NCg0KICAgSWYgbW9iaWxlIG5ldHdvcmtzIGJlY29tZSBhIG1vcmUg Y29tbW9uIG9jY3VycmVuY2UsIGl0IG1heSBiZSB1c2VmdWwNCiAgIHRvIHJldmlzaXQgdGhlIGRl c2lnbiBvZiB0aGUgbWFwcGluZyBzZXJ2aWNlIGFuZCBhbGxvdyBmb3IgZHluYW1pYw0KICAgdXBk YXRlcyBvZiB0aGUgZGF0YWJhc2UuDQoNCiAgIFRoZSBpc3N1ZSBvZiBpbnRlcmFjdGlvbnMgYmV0 d2VlbiBtb2JpbGl0eSBhbmQgTElTUCBuZWVkcyB0byBiZQ0KICAgZXhwbG9yZWQgZnVydGhlci4g IFNwZWNpZmljIGltcHJvdmVtZW50cyB0byB0aGUgZW50aXJlIHN5c3RlbSB3aWxsDQogICBkZXBl bmQgb24gdGhlIGRldGFpbHMgb2YgbWFwcGluZyBtZWNoYW5pc21zLiAgTWFwcGluZyBtZWNoYW5p c21zDQogICBzaG91bGQgYmUgZXZhbHVhdGVkIG9uIGhvdyB3ZWxsIHRoZXkgc3VwcG9ydCBzZXNz aW9uIGNvbnRpbnVpdHkgZm9yDQogICBtb2JpbGUgbm9kZXMuDQoNCjEwLjUuICBMSVNQIE1vYmls ZSBOb2RlIE1vYmlsaXR5DQoNCiAgIEFuIG1vYmlsZSBkZXZpY2UgY2FuIHVzZSB0aGUgTElTUCBp bmZyYXN0cnVjdHVyZSB0byBhY2hpZXZlIG1vYmlsaXR5DQogICBieSBpbXBsZW1lbnRpbmcgdGhl IExJU1AgZW5jYXBzdWxhdGlvbiBhbmQgZGVjYXBzdWxhdGlvbiBmdW5jdGlvbnMNCiAgIGFuZCBh Y3RpbmcgYXMgYSBzaW1wbGUgSVRSL0VUUi4gIEJ5IGRvaW5nIHRoaXMsIHN1Y2ggYSAiTElTUCBt b2JpbGUNCiAgIG5vZGUiIGNhbiB1c2UgdG9wb2xvZ2ljYWxseS1pbmRlcGVuZGVudCBFSUQgSVAg YWRkcmVzc2VzIHRoYXQgYXJlIG5vdA0KICAgYWR2ZXJ0aXNlZCBpbnRvIGFuZCBkbyBub3QgaW1w b3NlIGEgY29zdCBvbiB0aGUgZ2xvYmFsIHJvdXRpbmcNCiAgIHN5c3RlbS4gIFRoZXNlIEVJRHMg YXJlIG1haW50YWluZWQgYXQgdGhlIGVkZ2VzIG9mIHRoZSBtYXBwaW5nIHN5c3RlbQ0KICAgKGlu IExJU1AgTWFwLVNlcnZlcnMgYW5kIE1hcC1SZXNvbHZlcnMpIGFuZCBhcmUgcHJvdmlkZWQgb24g ZGVtYW5kIHRvDQogICBvbmx5IHRoZSBjb3JyZXNwb25kZW50cyBvZiB0aGUgTElTUCBtb2JpbGUg bm9kZS4NCg0KICAgUmVmZXIgdG8gdGhlIExJU1AgTW9iaWxpdHkgQXJjaGl0ZWN0dXJlIHNwZWNp ZmljYXRpb24gW0xJU1AtTU5dIGZvcg0KICAgbW9yZSBkZXRhaWxzLg0KDQoxMS4gIE11bHRpY2Fz dCBDb25zaWRlcmF0aW9ucw0KDQogICBBIG11bHRpY2FzdCBncm91cCBhZGRyZXNzLCBhcyBkZWZp bmVkIGluIHRoZSBvcmlnaW5hbCBJbnRlcm5ldA0KICAgYXJjaGl0ZWN0dXJlIGlzIGFuIGlkZW50 aWZpZXIgb2YgYSBncm91cGluZyBvZiB0b3BvbG9naWNhbGx5DQogICBpbmRlcGVuZGVudCByZWNl aXZlciBob3N0IGxvY2F0aW9ucy4gIFRoZSBhZGRyZXNzIGVuY29kaW5nIGl0c2VsZg0KICAgZG9l cyBub3QgZGV0ZXJtaW5lIHRoZSBsb2NhdGlvbiBvZiB0aGUgcmVjZWl2ZXIocykuICBUaGUgbXVs dGljYXN0DQogICByb3V0aW5nIHByb3RvY29sLCBhbmQgdGhlIG5ldHdvcmstYmFzZWQgc3RhdGUg dGhlIHByb3RvY29sIGNyZWF0ZXMsDQogICBkZXRlcm1pbmVzIHdoZXJlIHRoZSByZWNlaXZlcnMg YXJlIGxvY2F0ZWQuDQoNCiAgIEluIHRoZSBjb250ZXh0IG9mIExJU1AsIGEgbXVsdGljYXN0IGdy b3VwIGFkZHJlc3MgaXMgYm90aCBhbiBFSUQgYW5kDQogICBhIFJvdXRpbmcgTG9jYXRvci4gIFRo ZXJlZm9yZSwgbm8gc3BlY2lmaWMgc2VtYW50aWMgb3IgYWN0aW9uIG5lZWRzDQogICB0byBiZSB0 YWtlbiBmb3IgYSBkZXN0aW5hdGlvbiBhZGRyZXNzLCBhcyBpdCB3b3VsZCBhcHBlYXIgaW4gYW4g SVANCiAgIGhlYWRlci4gIFRoZXJlZm9yZSwgYSBncm91cCBhZGRyZXNzIHRoYXQgYXBwZWFycyBp biBhbiBpbm5lciBJUA0KICAgaGVhZGVyIGJ1aWx0IGJ5IGEgc291cmNlIGhvc3Qgd2lsbCBiZSB1 c2VkIGFzIHRoZSBkZXN0aW5hdGlvbiBFSUQuDQogICBUaGUgb3V0ZXIgSVAgaGVhZGVyICh0aGUg ZGVzdGluYXRpb24gUm91dGluZyBMb2NhdG9yIGFkZHJlc3MpLA0KICAgcHJlcGVuZGVkIGJ5IGEg TElTUCByb3V0ZXIsIHdpbGwgdXNlIHRoZSBzYW1lIGdyb3VwIGFkZHJlc3MgYXMgdGhlDQogICBk ZXN0aW5hdGlvbiBSb3V0aW5nIExvY2F0b3IuDQoNCiAgIEhhdmluZyBzYWlkIHRoYXQsIG9ubHkg dGhlIHNvdXJjZSBFSUQgYW5kIHNvdXJjZSBSb3V0aW5nIExvY2F0b3INCiAgIG5lZWRzIHRvIGJl IGRlYWx0IHdpdGguICBUaGVyZWZvcmUsIGFuIElUUiBtZXJlbHkgbmVlZHMgdG8gcHV0IGl0cw0K ICAgb3duIElQIGFkZHJlc3MgaW4gdGhlIHNvdXJjZSBSb3V0aW5nIExvY2F0b3IgZmllbGQgd2hl biBwcmVwZW5kaW5nDQogICB0aGUgb3V0ZXIgSVAgaGVhZGVyLiAgVGhpcyBzb3VyY2UgUm91dGlu ZyBMb2NhdG9yIGFkZHJlc3MsIGxpa2UgYW55DQogICBvdGhlciBSb3V0aW5nIExvY2F0b3IgYWRk cmVzcyBNVVNUIGJlIGdsb2JhbGx5IHJvdXRhYmxlLg0KDQogICBUaGVyZWZvcmUsIGFuIEVJRC10 by1STE9DIG1hcHBpbmcgZG9lcyBub3QgbmVlZCB0byBiZSBwZXJmb3JtZWQgYnkgYW4NCiAgIElU UiB3aGVuIGEgcmVjZWl2ZWQgZGF0YSBwYWNrZXQgaXMgYSBtdWx0aWNhc3QgZGF0YSBwYWNrZXQg b3Igd2hlbg0KICAgcHJvY2Vzc2luZyBhIHNvdXJjZS1zcGVjaWZpYyBKb2luIChlaXRoZXIgYnkg SUdNUHYzIG9yIFBJTSkuICBCdXQgdGhlDQogICBzb3VyY2UgUm91dGluZyBMb2NhdG9yIGlzIGRl Y2lkZWQgYnkgdGhlIG11bHRpY2FzdCByb3V0aW5nIHByb3RvY29sDQogICBpbiBhIHJlY2VpdmVy IHNpdGUuICBUaGF0IGlzLCBhbiBFSUQgdG8gUm91dGluZyBMb2NhdG9yIHRyYW5zbGF0aW9uDQog ICBpcyBkb25lIGF0IGNvbnRyb2wtdGltZS4NCg0KICAgQW5vdGhlciBhcHByb2FjaCBpcyB0byBo YXZlIHRoZSBJVFIgbm90IGVuY2Fwc3VsYXRlIGEgbXVsdGljYXN0DQogICBwYWNrZXQgYW5kIGFs bG93IHRoZSB0aGUgaG9zdCBidWlsdCBwYWNrZXQgdG8gZmxvdyBpbnRvIHRoZSBjb3JlIGV2ZW4N CiAgIGlmIHRoZSBzb3VyY2UgYWRkcmVzcyBpcyBhbGxvY2F0ZWQgb3V0IG9mIHRoZSBFSUQgbmFt ZXNwYWNlLiAgSWYgdGhlDQogICBSUEYtVmVjdG9yIFRMViBbUlBGVl0gaXMgdXNlZCBieSBQSU0g aW4gdGhlIGNvcmUsIHRoZW4gY29yZSByb3V0ZXJzDQogICBjYW4gUlBGIHRvIHRoZSBJVFIgKHRo ZSBMb2NhdG9yIGFkZHJlc3Mgd2hpY2ggaXMgaW5qZWN0ZWQgaW50byBjb3JlDQogICByb3V0aW5n KSByYXRoZXIgdGhhbiB0aGUgaG9zdCBzb3VyY2UgYWRkcmVzcyAodGhlIEVJRCBhZGRyZXNzIHdo aWNoDQogICBpcyBub3QgaW5qZWN0ZWQgaW50byBjb3JlIHJvdXRpbmcpLg0KDQogICBUbyBhdm9p ZCBhbnkgRUlELWJhc2VkIG11bHRpY2FzdCBzdGF0ZSBpbiB0aGUgbmV0d29yayBjb3JlLCB0aGUg Zmlyc3QNCiAgIGFwcHJvYWNoIGlzIGNob3NlbiBmb3IgTElTUC1NdWx0aWNhc3QuICBEZXRhaWxz IGZvciBMSVNQLU11bHRpY2FzdA0KICAgYW5kIEludGVyd29ya2luZyB3aXRoIG5vbi1MSVNQIHNp dGVzIGlzIGRlc2NyaWJlZCBpbiBzcGVjaWZpY2F0aW9uDQogICBbTUxJU1BdLg0KDQoxMi4gIFNl Y3VyaXR5IENvbnNpZGVyYXRpb25zDQoNCiAgIEl0IGlzIGJlbGlldmVkIHRoYXQgbW9zdCBvZiB0 aGUgc2VjdXJpdHkgbWVjaGFuaXNtcyB3aWxsIGJlIHBhcnQgb2YNCiAgIHRoZSBtYXBwaW5nIGRh dGFiYXNlIHNlcnZpY2Ugd2hlbiB1c2luZyBjb250cm9sIHBsYW5lIHByb2NlZHVyZXMgZm9yDQog ICBvYnRhaW5pbmcgRUlELXRvLVJMT0MgbWFwcGluZ3MuICBGb3IgZGF0YSBwbGFuZSB0cmlnZ2Vy ZWQgbWFwcGluZ3MsDQogICBhcyBkZXNjcmliZWQgaW4gdGhpcyBzcGVjaWZpY2F0aW9uLCBwcm90 ZWN0aW9uIGlzIHByb3ZpZGVkIGFnYWluc3QNCiAgIEVUUiBzcG9vZmluZyBieSB1c2luZyBSZXR1 cm4tIFJvdXRhYmlsaXR5IG1lY2hhbmlzbXMgZXZpZGVuY2VkIGJ5IHRoZQ0KICAgdXNlIG9mIGEg MjQtYml0IE5vbmNlIGZpZWxkIGluIHRoZSBMSVNQIGVuY2Fwc3VsYXRpb24gaGVhZGVyIGFuZCBh DQogICA2NC1iaXQgTm9uY2UgZmllbGQgaW4gdGhlIExJU1AgY29udHJvbCBtZXNzYWdlLiAgVGhl IG5vbmNlLCBjb3VwbGVkDQogICB3aXRoIHRoZSBJVFIgYWNjZXB0aW5nIG9ubHkgc29saWNpdGVk IE1hcC1SZXBsaWVzIGdvZXMgYSBsb25nIHdheQ0KICAgdG93YXJkIHByb3ZpZGluZyBkZWNlbnQg YXV0aGVudGljYXRpb24uDQoNCiAgIExJU1AgZG9lcyBub3QgcmVseSBvbiBhIFBLSSBpbmZyYXN0 cnVjdHVyZSBvciBhIG1vcmUgaGVhdnkgd2VpZ2h0DQogICBhdXRoZW50aWNhdGlvbiBzeXN0ZW0u ICBUaGVzZSBzeXN0ZW1zIGNoYWxsZW5nZSB0aGUgc2NhbGFiaWxpdHkgb2YNCiAgIExJU1Agd2hp Y2ggd2FzIGEgcHJpbWFyeSBkZXNpZ24gZ29hbC4NCg0KICAgRG9TIGF0dGFjayBwcmV2ZW50aW9u IHdpbGwgZGVwZW5kIG9uIGltcGxlbWVudGF0aW9ucyByYXRlLWxpbWl0aW5nDQogICBNYXAtUmVx dWVzdHMgYW5kIE1hcC1SZXBsaWVzIHRvIHRoZSBjb250cm9sIHBsYW5lIGFzIHdlbGwgYXMgcmF0 ZS0NCiAgIGxpbWl0aW5nIHRoZSBudW1iZXIgb2YgZGF0YS10cmlnZ2VyZWQgTWFwLVJlcGxpZXMu DQoNCiAgIFRvIGRlYWwgd2l0aCBtYXAtY2FjaGUgZXhoYXVzdGlvbiBhdHRlbXB0cyBpbiBhbiBJ VFIvUFRSLCB0aGUNCiAgIGltcGxlbWVudGF0aW9uIHNob3VsZCBjb25zaWRlciBwdXR0aW5nIGEg bWF4aW11bSBjYXAgb24gdGhlIG51bWJlciBvZg0KICAgZW50cmllcyBzdG9yZWQgd2l0aCBhIHJl c2VydmUgbGlzdCBmb3Igc3BlY2lhbCBvciBmcmVxdWVudGx5IGFjY2Vzc2VkDQogICBzaXRlcy4g IFRoaXMgc2hvdWxkIGJlIGEgY29uZmlndXJhdGlvbiBwb2xpY3kgY29udHJvbCBzZXQgYnkgdGhl DQogICBuZXR3b3JrIGFkbWluaXN0cmF0b3Igd2hvIG1hbmFnZXMgSVRScyBhbmQgUFRScy4NCg0K MTMuICBQcm90b3R5cGUgUGxhbnMgYW5kIFN0YXR1cw0KDQogICBUaGUgb3BlcmF0b3IgY29tbXVu aXR5IGhhcyByZXF1ZXN0ZWQgdGhhdCB0aGUgSUVURiB0YWtlIGEgcHJhY3RpY2FsDQogICBhcHBy b2FjaCB0byBzb2x2aW5nIHRoZSBzY2FsaW5nIHByb2JsZW1zIGFzc29jaWF0ZWQgd2l0aCBnbG9i YWwNCiAgIHJvdXRpbmcgc3RhdGUgZ3Jvd3RoLiAgVGhpcyBkb2N1bWVudCBvZmZlcnMgYSBzaW1w bGUgc29sdXRpb24gd2hpY2gNCiAgIGlzIGludGVuZGVkIGZvciB1c2UgaW4gYSBwaWxvdCBwcm9n cmFtIHRvIGdhaW4gZXhwZXJpZW5jZSBpbiB3b3JraW5nDQogICBvbiB0aGlzIHByb2JsZW0uDQoN CiAgIFRoZSBhdXRob3JzIGhvcGUgdGhhdCBwdWJsaXNoaW5nIHRoaXMgc3BlY2lmaWNhdGlvbiB3 aWxsIGFsbG93IHRoZQ0KICAgcmFwaWQgaW1wbGVtZW50YXRpb24gb2YgbXVsdGlwbGUgdmVuZG9y IHByb3RvdHlwZXMgYW5kIGRlcGxveW1lbnQgb24NCiAgIGEgc21hbGwgc2NhbGUuICBEb2luZyB0 aGlzIHdpbGwgaGVscCB0aGUgY29tbXVuaXR5Og0KDQogICBvICBEZWNpZGUgd2hldGhlciBhIG5l dyBFSUQtdG8tUkxPQyBtYXBwaW5nIGRhdGFiYXNlIGluZnJhc3RydWN0dXJlDQogICAgICBpcyBu ZWVkZWQgb3IgaWYgYSBzaW1wbGUsIFVEUC1iYXNlZCwgZGF0YS10cmlnZ2VyZWQgYXBwcm9hY2gg aXMNCiAgICAgIGZsZXhpYmxlIGFuZCByb2J1c3QgZW5vdWdoLg0KDQogICBvICBFeHBlcmltZW50 IHdpdGggcHJvdmlkZXItaW5kZXBlbmRlbnQgYXNzaWdubWVudCBvZiBFSURzIHdoaWxlIGF0DQog ICAgICB0aGUgc2FtZSB0aW1lIGRlY3JlYXNpbmcgdGhlIHNpemUgb2YgREZaIHJvdXRpbmcgdGFi bGVzIHRocm91Z2gNCiAgICAgIHRoZSB1c2Ugb2YgdG9wb2xvZ2ljYWxseS1hbGlnbmVkLCBwcm92 aWRlci1iYXNlZCBSTE9Dcy4NCg0KICAgbyAgRGV0ZXJtaW5lIHdoZXRoZXIgbXVsdGlwbGUgbGV2 ZWxzIG9mIHR1bm5lbGluZyBjYW4gYmUgdXNlZCBieSBJU1BzDQogICAgICB0byBhY2hpZXZlIHRo ZWlyIFRyYWZmaWMgRW5naW5lZXJpbmcgZ29hbHMgd2hpbGUgc2ltdWx0YW5lb3VzbHkNCiAgICAg IHJlbW92aW5nIHRoZSBtb3JlIHNwZWNpZmljIHJvdXRlcyBjdXJyZW50bHkgaW5qZWN0ZWQgaW50 byB0aGUNCiAgICAgIGdsb2JhbCByb3V0aW5nIHN5c3RlbSBmb3IgdGhpcyBwdXJwb3NlLg0KDQog ICBvICBFeHBlcmltZW50IHdpdGggbW9iaWxpdHkgdG8gZGV0ZXJtaW5lIGlmIGJvdGggYWNjZXB0 YWJsZQ0KICAgICAgY29udmVyZ2VuY2UgYW5kIHNlc3Npb24gY29udGludWl0eSBwcm9wZXJ0aWVz IGNhbiBiZSBzY2FsYWJseQ0KICAgICAgaW1wbGVtZW50ZWQgdG8gc3VwcG9ydCBib3RoIGluZGl2 aWR1YWwgZGV2aWNlIHJvYW1pbmcgYW5kIHNpdGUNCiAgICAgIHNlcnZpY2UgcHJvdmlkZXIgY2hh bmdlcy4NCg0KICAgSGVyZSBpcyBhIHJvdWdoIHNldCBvZiBtaWxlc3RvbmVzOg0KDQogICAxLiAg SW50ZXJvcGVyYWJsZSBpbXBsZW1lbnRhdGlvbnMgaGF2ZSBiZWVuIGF2YWlsYWJsZSBzaW5jZSB0 aGUNCiAgICAgICBiZWdpbm5pbmcgb2YgMjAwOS4gIFdlIGFyZSB0cnlpbmcgdG8gY29udmVyZ2Ug b24gYSBwYWNrZXQgZm9ybWF0DQogICAgICAgc28gaW1wbGVtZW50YXRpb25zIGNhbiBjb252ZXJn ZSBvbiB0aGUgLTA0IGFuZCBsYXRlciBkcmFmdHMuDQoNCiAgIDIuICBDb250aW51ZSBwaWxvdCBk ZXBsb3ltZW50IHVzaW5nIExJU1AtQUxUIGFzIHRoZSBkYXRhYmFzZSBtYXBwaW5nDQogICAgICAg bWVjaGFuaXNtLg0KDQogICAzLiAgQ29udGludWUgcHJvdG90eXBpbmcgYW5kIHN0dWR5aW5nIG90 aGVyIGRhdGFiYXNlIGxvb2t1cCBzY2hlbWVzLA0KICAgICAgIGJlIGl0IEROUywgREhUcywgQ09O UywgQUxULCBORVJELCBvciBvdGhlciBtZWNoYW5pc21zLg0KDQogICA0LiAgSW1wbGVtZW50IHRo ZSBMSVNQIE11bHRpY2FzdCBkcmFmdCBbTUxJU1BdLg0KDQogICA1LiAgSW1wbGVtZW50IHRoZSBM SVNQIE1vYmlsZSBOb2RlIGRyYWZ0IFtMSVNQLU1OXS4NCg0KICAgNi4gIFJlc2VhcmNoIG1vcmUg b24gaG93IHBvbGljeSBhZmZlY3RzIHdoYXQgZ2V0cyByZXR1cm5lZCBpbiBhIE1hcC0NCiAgICAg ICBSZXBseSBmcm9tIGFuIEVUUi4NCg0KICAgNy4gIENvbnRpbnVlIHRvIGV4cGVyaW1lbnQgd2l0 aCBtaXhlZCBsb2NhdG9yLXNldHMgdG8gdW5kZXJzdGFuZCBob3cNCiAgICAgICBMSVNQIGNhbiBo ZWxwIHRoZSBJUHY0IHRvIElQdjYgdHJhbnNpdGlvbi4NCg0KICAgOC4gIEFkZCBtb3JlIHJvYnVz dG5lc3MgdG8gbG9jYXRvciByZWFjaGFiaWxpdHkgYmV0d2VlbiBMSVNQIHNpdGVzLg0KDQogICA8 U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+OS4gIENvbnRpbnVlIHRoZSBkZXBsb3ltZW50IG9m IFByb3h5LUVUUnMgKFBFVFJzKSBmb3IgdXNlcyBsaWtlIHVSUEYNCiAgICAgICBhdm9pZGFuY2Us IElQdjYgY29ubmVjdGl2aXR5LCBhbmQgTElTUC1NTi48L0ZPTlQ+PC9TVFJPTkc+DQoNCiAgIEFz IG9mIHRoaXMgd3JpdGluZyB0aGUgZm9sbG93aW5nIGFjY29tcGxpc2htZW50cyBoYXZlIGJlZW4g YWNoaWV2ZWQ6DQoNCiAgIDEuICAgQSB1bml0LSBhbmQgc3lzdGVtLXRlc3RlZCBzb2Z0d2FyZSBz d2l0Y2hpbmcgaW1wbGVtZW50YXRpb24gaGFzDQogICAgICAgIGJlZW4gY29tcGxldGVkIG9uIGNp c2NvIE5YLU9TIGZvciB0aGlzIGRyYWZ0IGZvciBib3RoIElQdjQgYW5kDQogICAgICAgIElQdjYg RUlEcyB1c2luZyBhIG1peGVkIGxvY2F0b3Itc2V0IG9mIElQdjQgYW5kIElQdjYgbG9jYXRvcnMu DQoNCiAgIDIuICAgQSB1bml0LSBhbmQgc3lzdGVtLXRlc3RlZCBzb2Z0d2FyZSBzd2l0Y2hpbmcg aW1wbGVtZW50YXRpb24gb24NCiAgICAgICAgY2lzY28gTlgtT1MgaGFzIGJlZW4gY29tcGxldGVk IGZvciBkcmFmdCBbQUxUXS4NCg0KICAgMy4gICBBIHVuaXQtIGFuZCBzeXN0ZW0tdGVzdGVkIHNv ZnR3YXJlIHN3aXRjaGluZyBpbXBsZW1lbnRhdGlvbiBvbg0KICAgICAgICBjaXNjbyBOWC1PUyBo YXMgYmVlbiBjb21wbGV0ZWQgZm9yIGRyYWZ0IFtJTlRFUldPUktdLiAgU3VwcG9ydA0KICAgICAg ICBmb3IgSVB2NCB0cmFuc2xhdGlvbiBpcyBwcm92aWRlZCBhbmQgUFRSIHN1cHBvcnQgZm9yIElQ djQgYW5kDQogICAgICAgIElQdjYgaXMgcHJvdmlkZWQuDQoNCiAgIDQuICAgVGhlIGNpc2NvIE5Y LU9TIGltcGxlbWVudGF0aW9uIHN1cHBvcnRzIGFuIGV4cGVyaW1lbnRhbA0KICAgICAgICBtZWNo YW5pc20gZm9yIHNsb3cgbW9iaWxpdHkuDQoNCiAgIDUuICAgPFNUUk9ORz48Rk9OVCBjb2xvcj0i Z3JlZW4iPlRoZXJlIGFyZSA1IExJU1AgaW1wbGVtZW50YXRpb25zIHRoYXQgZXhpc3QgYW5kIHRo ZSBmaXJzdCA0DQogICAgICAgIGJlbG93IGhhdmUgZ29uZSB0aHJvdWdoIGludGVyb3BlcmFiaWxp dHkgdGVzdGluZyBhdCBJRVRGDQogICAgICAgIEhpcm9zaGltYSwgYmFzZWQgb24gdGhlIGRyYWZ0 LWlldGYtbGlzcC0wNS50eHQgc3BlYzoNCg0KICAgICAgICAxLiAgY2lzY28gTlgtT1MNCg0KICAg ICAgICAyLiAgT3BlbkxJU1ANCg0KICAgICAgICAzLiAgTElTUC1DbGljaw0KDQogICAgICAgIDQu ICBaTGlzcA0KDQogICAgICAgIDUuICBjaXNjbyBJT1MNCg0KICAgNi48L0ZPTlQ+PC9TVFJPTkc+ ICAgRGF2ZSBNZXllciwgVmluY2UgRnVsbGVyLCBEYXJyZWwgTGV3aXMsIEdyZWcgU2hlcGhlcmQs IGFuZA0KICAgICAgICBBbmRyZXcgUGFydGFuIGNvbnRpbnVlIHRvIHRlc3QgYWxsIHRoZSBmZWF0 dXJlcyBkZXNjcmliZWQgYWJvdmUNCiAgICAgICAgb24gYSBkdWFsLXN0YWNrIGluZnJhc3RydWN0 dXJlLg0KDQogICA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPjYuPC9GT05UPjwvU1RSSUtFPg0K DQogICA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+Ny48L0ZPTlQ+PC9TVFJPTkc+ICAgRGFy cmVsIExld2lzIGFuZCBEYXZlIE1leWVyIGhhdmUgZGVwbG95ZWQgYm90aCBMSVNQIHRyYW5zbGF0 aW9uDQogICAgICAgIGFuZCBMSVNQIFBUUiBzdXBwb3J0IGluIHRoZSBwaWxvdCBuZXR3b3JrLiAg UG9pbnQgeW91ciBicm93c2VyDQogICAgICAgIHRvIGh0dHA6Ly93d3cubGlzcDQubmV0IHRvIHNl ZSB0cmFuc2xhdGlvbiBoYXBwZW5pbmcgaW4gYWN0aW9uDQogICAgICAgIHNvIHlvdXIgbm9uLUxJ U1Agc2l0ZSBjYW4gYWNjZXNzIGEgd2ViIHNlcnZlciBpbiBhIExJU1Agc2l0ZS4NCg0KICAgPFNU UklLRT48Rk9OVCBjb2xvcj0icmVkIj43LjwvRk9OVD48L1NUUklLRT4NCg0KICAgPFNUUk9ORz48 Rk9OVCBjb2xvcj0iZ3JlZW4iPjguPC9GT05UPjwvU1RST05HPiAgIFNvb24gaHR0cDovL3d3dy5s aXNwNi5uZXQgd2lsbCB3b3JrIHdoZXJlIHlvdXIgSVB2NiBMSVNQIHNpdGUNCiAgICAgICAgY2Fu IHRhbGsgdG8gYSBJUHY2IHdlYiBzZXJ2ZXIgaW4gYSBMSVNQIHNpdGUgYnkgdXNpbmcgbWl4ZWQN CiAgICAgICAgYWRkcmVzcy1mYW1pbHkgYmFzZWQgbG9jYXRvcnMuDQoNCiAgIDxTVFJJS0U+PEZP TlQgY29sb3I9InJlZCI+OC48L0ZPTlQ+PC9TVFJJS0U+DQoNCiAgIDxTVFJPTkc+PEZPTlQgY29s b3I9ImdyZWVuIj45LjwvRk9OVD48L1NUUk9ORz4gICBBbiBwdWJsaWMgZG9tYWluIGltcGxlbWVu dGF0aW9uIG9mIExJU1AgaXMgdW5kZXJ3YXkuICBTZWUNCiAgICAgICAgW09QRU5MSVNQXSBmb3Ig ZGV0YWlscy4NCg0KICAgPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj45LjwvRk9OVD48L1NUUklL RT4NCg0KICAgPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPjEwLjwvRk9OVD48L1NUUk9ORz4g IFdlIGhhdmUgZGVwbG95ZWQgTWFwLVJlc29sdmVycyBhbmQgTWFwLVNlcnZlcnMgb24gdGhlIExJ U1AgcGlsb3QNCiAgICAgICAgbmV0d29yayB0byBnYXRoZXIgZXhwZXJpZW5jZSB3aXRoIFtMSVNQ LU1TXS4gIFRoZSBmaXJzdCBsYXllciBvZg0KICAgICAgICB0aGUgYXJjaGl0ZWN0dXJlIGFyZSB0 aGUgeFRScyB3aGljaCB1c2UgTWFwLVNlcnZlcnMgZm9yIEVJRC0NCiAgICAgICAgcHJlZml4IHJl Z2lzdHJhdGlvbiBhbmQgTWFwLVJlc29sdmVycyBmb3IgRUlELXRvLVJMT0MgbWFwcGluZw0KICAg ICAgICByZXNvbHV0aW9uLiAgVGhlIHNlY29uZCBsYXllciBhcmUgdGhlIE1hcC1SZXNvbHZlcnMg YW5kIE1hcC0NCiAgICAgICAgU2VydmVycyB3aGljaCBjb25uZWN0IHRvIHRoZSBBTFQgQkdQIHBl ZXJpbmcgaW5mcmFzdHJ1Y3R1cmUuDQogICAgICAgIEFuZCB0aGUgdGhpcmQgbGF5ZXIgYXJlIEFM VC1yb3V0ZXJzIHdoaWNoIGFnZ3JlZ2F0ZSBFSUQtcHJlZml4ZXMNCiAgICAgICAgYW5kIGZvcndh cmQgTWFwLVJlcXVlc3RzLg0KDQogICA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPjEwLjwvRk9O VD48L1NUUklLRT4NCg0KICAgPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPjExLjwvRk9OVD48 L1NUUk9ORz4gIEEgY2lzY28gSU9TIGltcGxlbWVudGF0aW9uIGlzIHVuZGVyd2F5IHdoaWNoIGN1 cnJlbnRseSBzdXBwb3J0cw0KICAgICAgICBJUHY0IGVuY2Fwc3VsYXRpb24gYW5kIGRlY2Fwc3Vs YXRpb24gZmVhdHVyZXMuDQoNCiAgIDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+MTEuPC9GT05U PjwvU1RSSUtFPg0KDQogICA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+MTIuPC9GT05UPjwv U1RST05HPiAgQSBMSVNQIHJvdXRlciBiYXNlZCBMSUcgaW1wbGVtZW50YXRpb24gaXMgc3VwcG9y dGVkLCBkZXBsb3llZCwNCiAgICAgICAgYW5kIHVzZWQgZGFpbHkgdG8gZGVidWcgYW5kIHRlc3Qg dGhlIExJU1AgcGlsb3QgbmV0d29yay4gIFNlZQ0KICAgICAgICBbTElHXSBmb3IgZGV0YWlscy4N Cg0KICAgPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj4xMi48L0ZPTlQ+PC9TVFJJS0U+DQoNCiAg IDxTVFJPTkc+PEZPTlQgY29sb3I9ImdyZWVuIj4xMy48L0ZPTlQ+PC9TVFJPTkc+ICBBIExpbnV4 IGltcGxlbWVudGF0aW9uIG9mIExJRyBoYXMgYmVlbiBtYWRlIGF2YWlsYWJsZSBhbmQNCiAgICAg ICAgc3VwcG9ydGVkIGJ5IERhdmUgTWV5ZXIuICBJdCBjYW4gYmUgcnVuIG9uIGFueSBMaW51eCBz eXN0ZW0NCiAgICAgICAgd2hpY2ggcmVzaWRlcyBpbiBlaXRoZXIgYSBMSVNQIHNpdGUgb3Igbm9u LUxJU1Agc2l0ZS4gIFNlZSBbTElHXQ0KICAgICAgICBmb3IgZGV0YWlscy4gIFB1YmxpYyBkb21h aW4gY29kZSBjYW4gYmUgZG93bmxvYWRlZCBmcm9tDQogICAgICAgIGh0dHA6Ly9naXRodWIuY29t L2RhdmlkbWV5ZXIvbGlnL3RyZWUvbWFzdGVyLg0KDQogICA8U1RSSUtFPjxGT05UIGNvbG9yPSJy ZWQiPjEzLjwvRk9OVD48L1NUUklLRT4NCg0KICAgPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4i PjE0LjwvRk9OVD48L1NUUk9ORz4gIEFuIGV4cGVyaW1lbnRhbCBpbXBsZW1lbnRhdGlvbiBoYXMg YmVlbiB3cml0dGVuIGZvciB0aHJlZQ0KICAgICAgICBsb2NhdG9yIHJlYWNoYWJpbGl0eSBhbGdv cml0aG1zLiAgVHdvIGFyZSB0aGUgRWNoby1Ob25jaW5nIGFuZA0KICAgICAgICBSTE9DLVByb2Jp bmcgYWxnb3JpdGhtcyB3aGljaCBhcmUgZG9jdW1lbnRlZCBpbiB0aGlzDQogICAgICAgIHNwZWNp ZmljYXRpb24uICBUaGUgdGhpcmQgaXMgY2FsbGVkIFRDUC1jb3VudHMgd2hpY2ggd2lsbCBiZQ0K ICAgICAgICBkb2N1bWVudGVkIGluIGZ1dHVyZSBkcmFmdHMuDQoNCiAgIDxTVFJJS0U+PEZPTlQg Y29sb3I9InJlZCI+MTQuPC9GT05UPjwvU1RSSUtFPg0KDQogICA8U1RST05HPjxGT05UIGNvbG9y PSJncmVlbiI+MTUuPC9GT05UPjwvU1RST05HPiAgVGhlIExJU1AgcGlsb3QgbmV0d29yayBoYXMg YmVlbiBjb252ZXJ0ZWQgZnJvbSB1c2luZyBNRDUgSE1BQw0KICAgICAgICBhdXRoZW50aWNhdGlv biBmb3IgTWFwLVJlZ2lzdGVyIG1lc3NhZ2VzIHRvIFNIQS0xIEhNQUMNCiAgICAgICAgYXV0aGVu dGljYXRpb24uICBFVFJzIHNlbmQgd2l0aCBTSEEtMSBidXQgTWFwLVNlcnZlcnMgY2FuDQogICAg ICAgIHJlY2VpdmVkIGZyb20gZWl0aGVyIGZvciBjb21wYXRpYmlsaXR5IHB1cnBvc2VzLg0KDQog ICBJZiBpbnRlcmVzdGVkIGluIHdyaXRpbmcgYSBMSVNQIGltcGxlbWVudGF0aW9uLCB0ZXN0aW5n IGFueSBvZiB0aGUNCiAgIExJU1AgaW1wbGVtZW50YXRpb25zLCBvciB3YW50IHRvIGJlIHBhcnQg b2YgdGhlIExJU1AgcGlsb3QgcHJvZ3JhbSwNCiAgIHBsZWFzZSBjb250YWN0IGxpc3BAaWV0Zi5v cmcuDQoNCjE0LiAgUmVmZXJlbmNlcw0KDQoxNC4xLiAgTm9ybWF0aXZlIFJlZmVyZW5jZXMNCg0K ICAgW1JGQzA3NjhdICBQb3N0ZWwsIEouLCAiVXNlciBEYXRhZ3JhbSBQcm90b2NvbCIsIFNURCA2 LCBSRkMgNzY4LA0KICAgICAgICAgICAgICBBdWd1c3QgMTk4MC4NCg0KICAgW1JGQzExOTFdICBN b2d1bCwgSi4gYW5kIFMuIERlZXJpbmcsICJQYXRoIE1UVSBkaXNjb3ZlcnkiLCBSRkMgMTE5MSwN CiAgICAgICAgICAgICAgTm92ZW1iZXIgMTk5MC4NCg0KICAgW1JGQzE0OThdICBTYWx0emVyLCBK LiwgIk9uIHRoZSBOYW1pbmcgYW5kIEJpbmRpbmcgb2YgTmV0d29yaw0KICAgICAgICAgICAgICBE ZXN0aW5hdGlvbnMiLCBSRkMgMTQ5OCwgQXVndXN0IDE5OTMuDQoNCiAgIFtSRkMxOTU1XSAgSGlu ZGVuLCBSLiwgIk5ldyBTY2hlbWUgZm9yIEludGVybmV0IFJvdXRpbmcgYW5kDQogICAgICAgICAg ICAgIEFkZHJlc3NpbmcgKEVOQ0FQUykgZm9yIElQTkciLCBSRkMgMTk1NSwgSnVuZSAxOTk2Lg0K DQogICBbUkZDMjExOV0gIEJyYWRuZXIsIFMuLCAiS2V5IHdvcmRzIGZvciB1c2UgaW4gUkZDcyB0 byBJbmRpY2F0ZQ0KICAgICAgICAgICAgICBSZXF1aXJlbWVudCBMZXZlbHMiLCBCQ1AgMTQsIFJG QyAyMTE5LCBNYXJjaCAxOTk3Lg0KDQogICBbUkZDMjQwNF0gIE1hZHNvbiwgQy4gYW5kIFIuIEds ZW5uLCAiVGhlIFVzZSBvZiBITUFDLVNIQS0xLTk2IHdpdGhpbg0KICAgICAgICAgICAgICBFU1Ag YW5kIEFIIiwgUkZDIDI0MDQsIE5vdmVtYmVyIDE5OTguDQoNCiAgIFtSRkMyNDM0XSAgTmFydGVu LCBULiBhbmQgSC4gQWx2ZXN0cmFuZCwgIkd1aWRlbGluZXMgZm9yIFdyaXRpbmcgYW4NCiAgICAg ICAgICAgICAgSUFOQSBDb25zaWRlcmF0aW9ucyBTZWN0aW9uIGluIFJGQ3MiLCBCQ1AgMjYsIFJG QyAyNDM0LA0KICAgICAgICAgICAgICBPY3RvYmVyIDE5OTguDQoNCiAgIFtSRkMyNzg0XSAgRmFy aW5hY2NpLCBELiwgTGksIFQuLCBIYW5rcywgUy4sIE1leWVyLCBELiwgYW5kIFAuDQogICAgICAg ICAgICAgIFRyYWluYSwgIkdlbmVyaWMgUm91dGluZyBFbmNhcHN1bGF0aW9uIChHUkUpIiwgUkZD IDI3ODQsDQogICAgICAgICAgICAgIE1hcmNoIDIwMDAuDQoNCiAgIFtSRkMzMDU2XSAgQ2FycGVu dGVyLCBCLiBhbmQgSy4gTW9vcmUsICJDb25uZWN0aW9uIG9mIElQdjYgRG9tYWlucw0KICAgICAg ICAgICAgICB2aWEgSVB2NCBDbG91ZHMiLCBSRkMgMzA1NiwgRmVicnVhcnkgMjAwMS4NCg0KICAg W1JGQzMxNjhdICBSYW1ha3Jpc2huYW4sIEsuLCBGbG95ZCwgUy4sIGFuZCBELiBCbGFjaywgIlRo ZSBBZGRpdGlvbg0KICAgICAgICAgICAgICBvZiBFeHBsaWNpdCBDb25nZXN0aW9uIE5vdGlmaWNh dGlvbiAoRUNOKSB0byBJUCIsDQogICAgICAgICAgICAgIFJGQyAzMTY4LCBTZXB0ZW1iZXIgMjAw MS4NCg0KICAgW1JGQzM3NzVdICBKb2huc29uLCBELiwgUGVya2lucywgQy4sIGFuZCBKLiBBcmtr bywgIk1vYmlsaXR5IFN1cHBvcnQNCiAgICAgICAgICAgICAgaW4gSVB2NiIsIFJGQyAzNzc1LCBK dW5lIDIwMDQuDQoNCiAgIFtSRkM0MDg2XSAgRWFzdGxha2UsIEQuLCBTY2hpbGxlciwgSi4sIGFu ZCBTLiBDcm9ja2VyLCAiUmFuZG9tbmVzcw0KICAgICAgICAgICAgICBSZXF1aXJlbWVudHMgZm9y IFNlY3VyaXR5IiwgQkNQIDEwNiwgUkZDIDQwODYsIEp1bmUgMjAwNS4NCg0KICAgW1JGQzQ0MjNd ICBNb3Nrb3dpdHosIFIuIGFuZCBQLiBOaWthbmRlciwgIkhvc3QgSWRlbnRpdHkgUHJvdG9jb2wN CiAgICAgICAgICAgICAgKEhJUCkgQXJjaGl0ZWN0dXJlIiwgUkZDIDQ0MjMsIE1heSAyMDA2Lg0K DQogICBbUkZDNDYzNF0gIEVhc3RsYWtlLCBELiBhbmQgVC4gSGFuc2VuLCAiVVMgU2VjdXJlIEhh c2ggQWxnb3JpdGhtcw0KICAgICAgICAgICAgICAoU0hBIGFuZCBITUFDLVNIQSkiLCBSRkMgNDYz NCwgSnVseSAyMDA2Lg0KDQogICBbUkZDNDg2Nl0gIEFya2tvLCBKLiwgVm9ndCwgQy4sIGFuZCBX LiBIYWRkYWQsICJFbmhhbmNlZCBSb3V0ZQ0KICAgICAgICAgICAgICBPcHRpbWl6YXRpb24gZm9y IE1vYmlsZSBJUHY2IiwgUkZDIDQ4NjYsIE1heSAyMDA3Lg0KDQogICBbUkZDNDk4NF0gIE1leWVy LCBELiwgWmhhbmcsIEwuLCBhbmQgSy4gRmFsbCwgIlJlcG9ydCBmcm9tIHRoZSBJQUINCiAgICAg ICAgICAgICAgV29ya3Nob3Agb24gUm91dGluZyBhbmQgQWRkcmVzc2luZyIsIFJGQyA0OTg0LA0K ICAgICAgICAgICAgICBTZXB0ZW1iZXIgMjAwNy4NCg0KICAgW1VEUC1UVU5ORUxTXQ0KICAgICAg ICAgICAgICBFdWJhbmtzLCBNLiBhbmQgUC4gQ2hpbWVudG8sICJVRFAgQ2hlY2tzdW1zIGZvciBU dW5uZWxlZA0KICAgICAgICAgICAgICBQYWNrZXRzIiIsIGRyYWZ0LWV1YmFua3MtY2hpbWVudG8t Nm1hbi0wMC50eHQgKHdvcmsgaW4NCiAgICAgICAgICAgICAgcHJvZ3Jlc3MpLCBGZWJydWFyeSAy MDA5Lg0KDQoxNC4yLiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcw0KDQogICBbQUZJXSAgICAgIElB TkEsICJBZGRyZXNzIEZhbWlseSBJbmRpY2F0b3JzIChBRklzKSIsIEFERFJFU1MgRkFNSUxZDQog ICAgICAgICAgICAgIE5VTUJFUlMgaHR0cDovL3d3dy5pYW5hLm9yZy9udW1iZXJzLmh0bWwsIEZl YnVhcnkgMjAwNy4NCg0KICAgW0FMVF0gICAgICBGYXJpbmFjY2ksIEQuLCBGdWxsZXIsIFYuLCBN ZXllciwgRC4sIGFuZCBELiBMZXdpcywgIkxJU1ANCiAgICAgICAgICAgICAgQWx0ZXJuYXRpdmUg VG9wb2xvZ3kgKExJU1AtQUxUKSIsDQogICAgICAgICAgICAgIDxTVFJJS0U+PEZPTlQgY29sb3I9 InJlZCI+ZHJhZnQtaWV0Zi1saXNwLWFsdC0wMS50eHQ8L0ZPTlQ+PC9TVFJJS0U+DQogICAgICAg ICAgICAgIDxTVFJPTkc+PEZPTlQgY29sb3I9ImdyZWVuIj5kcmFmdC1pZXRmLWxpc3AtYWx0LTAy LnR4dDwvRk9OVD48L1NUUk9ORz4gKHdvcmsgaW4gcHJvZ3Jlc3MpLCA8U1RSSUtFPjxGT05UIGNv bG9yPSJyZWQiPk1heSAyMDA5LjwvRk9OVD48L1NUUklLRT4NCiAgICAgICAgICAgICAgPFNUUk9O Rz48Rk9OVCBjb2xvcj0iZ3JlZW4iPkphbnVhcnkgMjAxMC48L0ZPTlQ+PC9TVFJPTkc+DQoNCiAg IFtBUFRdICAgICAgSmVuLCBELiwgTWVpc2VsLCBNLiwgTWFzc2V5LCBELiwgV2FuZywgTC4sIFpo YW5nLCBCLiwgYW5kDQogICAgICAgICAgICAgIEwuIFpoYW5nLCAiQVBUOiBBIFByYWN0aWNhbCBU cmFuc2l0IE1hcHBpbmcgU2VydmljZSIsDQogICAgICAgICAgICAgIGRyYWZ0LWplbi1hcHQtMDEu dHh0ICh3b3JrIGluIHByb2dyZXNzKSwgTm92ZW1iZXIgMjAwNy4NCg0KICAgW0NISUFQUEFdICBD aGlhcHBhLCBKLiwgIkVuZHBvaW50cyBhbmQgRW5kcG9pbnQgbmFtZXM6IEEgUHJvcG9zZWQNCiAg ICAgICAgICAgICAgRW5oYW5jZW1lbnQgdG8gdGhlIEludGVybmV0IEFyY2hpdGVjdHVyZSIsIElu dGVybmV0LQ0KICAgICAgICAgICAgICBEcmFmdCBodHRwOi8vd3d3LmNoaWFwcGEubmV0L35qbmMv dGVjaC9lbmRwb2ludHMudHh0LA0KICAgICAgICAgICAgICAxOTk5Lg0KDQogICBbQ09OU10gICAg IEZhcmluYWNjaSwgRC4sIEZ1bGxlciwgVi4sIGFuZCBELiBNZXllciwgIkxJU1AtQ09OUzogQQ0K ICAgICAgICAgICAgICBDb250ZW50IGRpc3RyaWJ1dGlvbiBPdmVybGF5IE5ldHdvcmsgIFNlcnZp Y2UgZm9yIExJU1AiLA0KICAgICAgICAgICAgICBkcmFmdC1tZXllci1saXNwLWNvbnMtMDMudHh0 ICh3b3JrIGluIHByb2dyZXNzKSwNCiAgICAgICAgICAgICAgTm92ZW1iZXIgMjAwNy4NCg0KICAg W0RIVHNdICAgICBSYXRuYXNhbXksIFMuLCBTaGVua2VyLCBTLiwgYW5kIEkuIFN0b2ljYSwgIlJv dXRpbmcNCiAgICAgICAgICAgICAgQWxnb3JpdGhtcyBmb3IgREhUczogU29tZSBPcGVuIFF1ZXN0 aW9ucyIsIFBERg0KICAgICAgICAgICAgICBmaWxlIGh0dHA6Ly93d3cuY3MucmljZS5lZHUvQ29u ZmVyZW5jZXMvSVBUUFMwMi8xNzQucGRmLg0KDQogICBbRU1BQ1NdICAgIEJyaW0sIFMuLCBGYXJp bmFjY2ksIEQuLCBNZXllciwgRC4sIGFuZCBKLiBDdXJyYW4sICJFSUQNCiAgICAgICAgICAgICAg TWFwcGluZ3MgTXVsdGljYXN0IEFjcm9zcyBDb29wZXJhdGluZyBTeXN0ZW1zIGZvciBMSVNQIiwN CiAgICAgICAgICAgICAgZHJhZnQtY3VycmFuLWxpc3AtZW1hY3MtMDAudHh0ICh3b3JrIGluIHBy b2dyZXNzKSwNCiAgICAgICAgICAgICAgTm92ZW1iZXIgMjAwNy4NCg0KICAgW0dTRV0gICAgICAi R1NFIC0gQW4gQWx0ZXJuYXRlIEFkZHJlc3NpbmcgQXJjaGl0ZWN0dXJlIGZvciAgSVB2NiIsDQog ICAgICAgICAgICAgIGRyYWZ0LWlldGYtaXBuZ3dnLWdzZWFkZHItMDAudHh0ICh3b3JrIGluIHBy b2dyZXNzKSwgMTk5Ny4NCg0KICAgW0lOVEVSV09SS10NCiAgICAgICAgICAgICAgTGV3aXMsIEQu LCBNZXllciwgRC4sIEZhcmluYWNjaSwgRC4sIGFuZCBWLiBGdWxsZXIsDQogICAgICAgICAgICAg ICJJbnRlcndvcmtpbmcgTElTUCB3aXRoIElQdjQgYW5kIElQdjYiLA0KICAgICAgICAgICAgICA8 U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPmRyYWZ0LWlldGYtbGlzcC1pbnRlcndvcmtpbmctMDAu dHh0PC9GT05UPjwvU1RSSUtFPg0KICAgICAgICAgICAgICA8U1RST05HPjxGT05UIGNvbG9yPSJn cmVlbiI+ZHJhZnQtaWV0Zi1saXNwLWludGVyd29ya2luZy0wMS50eHQ8L0ZPTlQ+PC9TVFJPTkc+ ICh3b3JrIGluIHByb2dyZXNzKSwNCiAgICAgICAgICAgICAgSmFudWFyeSA8U1RSSUtFPjxGT05U IGNvbG9yPSJyZWQiPjIwMDkuPC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJn cmVlbiI+MjAxMC48L0ZPTlQ+PC9TVFJPTkc+DQoNCiAgIFtMSUddICAgICAgRmFyaW5hY2NpLCBE LiBhbmQgRC4gTWV5ZXIsICJMSVNQIEludGVybmV0IEdyb3BlciAoTElHKSIsDQogICAgICAgICAg ICAgIGRyYWZ0LWZhcmluYWNjaS1saXNwLWxpZy0wMS50eHQgKHdvcmsgaW4gcHJvZ3Jlc3MpLA0K ICAgICAgICAgICAgICBNYXkgMjAwOS4NCg0KICAgW0xJU0E5Nl0gICBMZWFyLCBFLiwgS2F0aW5z a3ksIEouLCBDb2ZmaW4sIEouLCBhbmQgRC4gVGhhcnAsDQogICAgICAgICAgICAgICJSZW51bWJl cmluZzogVGhyZWF0IG9yIE1lbmFjZT8iLCBVc2VuaXggLCBTZXB0ZW1iZXIgMTk5Ni4NCg0KICAg W0xJU1AtTUFJTl0NCiAgICAgICAgICAgICAgRmFyaW5hY2NpLCBELiwgRnVsbGVyLCBWLiwgTWV5 ZXIsIEQuLCBhbmQgRC4gTGV3aXMsDQogICAgICAgICAgICAgICJMb2NhdG9yL0lEIFNlcGFyYXRp b24gUHJvdG9jb2wgKExJU1ApIiwNCiAgICAgICAgICAgICAgZHJhZnQtZmFyaW5hY2NpLWxpc3At MTIudHh0ICh3b3JrIGluIHByb2dyZXNzKSwNCiAgICAgICAgICAgICAgTWFyY2ggMjAwOS4NCg0K ICAgW0xJU1AtTU5dICBGYXJpbmFjY2ksIEQuLCBGdWxsZXIsIFYuLCBMZXdpcywgRC4sIGFuZCBE LiBNZXllciwgIkxJU1ANCiAgICAgICAgICAgICAgTW9iaWxpdHkgQXJjaGl0ZWN0dXJlIiwgZHJh ZnQtbWV5ZXItbGlzcC1tbi0wMC50eHQgKHdvcmsNCiAgICAgICAgICAgICAgaW4gcHJvZ3Jlc3Mp LCBKdWx5IDIwMDkuDQoNCiAgIFtMSVNQLU1TXSAgRmFyaW5hY2NpLCBELiBhbmQgVi4gRnVsbGVy LCAiTElTUCBNYXAgU2VydmVyIiwNCiAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1saXNwLW1zLTAz LnR4dCAod29yayBpbiBwcm9ncmVzcyksDQogICAgICAgICAgICAgIFNlcHRlbWJlciAyMDA5Lg0K DQogICBbTElTUDFdICAgIEZhcmluYWNjaSwgRC4sIE9yYW4sIEQuLCBGdWxsZXIsIFYuLCBhbmQg Si4gU2NoaWxsZXIsDQogICAgICAgICAgICAgICJMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9j b2wgKExJU1AxKSBbUm91dGFibGUgIElEDQogICAgICAgICAgICAgIFZlcnNpb25dIiwNCiAgICAg ICAgICAgICAgU2xpZGUtc2V0IGh0dHA6Ly93d3cuZGlub2YubmV0L35kaW5vL2lldGYvbGlzcDEu cHB0LA0KICAgICAgICAgICAgICBPY3RvYmVyIDIwMDYuDQoNCiAgIFtMSVNQMl0gICAgRmFyaW5h Y2NpLCBELiwgT3JhbiwgRC4sIEZ1bGxlciwgVi4sIGFuZCBKLiBTY2hpbGxlciwNCiAgICAgICAg ICAgICAgIkxvY2F0b3IvSUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUDIpIFtETlMtYmFzZWQN CiAgICAgICAgICAgICAgVmVyc2lvbl0iLA0KICAgICAgICAgICAgICBTbGlkZS1zZXQgaHR0cDov L3d3dy5kaW5vZi5uZXQvfmRpbm8vaWV0Zi9saXNwMi5wcHQsDQogICAgICAgICAgICAgIE5vdmVt YmVyIDIwMDYuDQoNCiAgIFtMSVNQREhUXSAgTWF0aHksIEwuLCBJYW5ub25lLCBMLiwgYW5kIE8u IEJvbmF2ZW50dXJlLCAiTElTUC1ESFQ6DQogICAgICAgICAgICAgIFRvd2FyZHMgYSBESFQgdG8g bWFwIGlkZW50aWZpZXJzIG9udG8gbG9jYXRvcnMiLA0KICAgICAgICAgICAgICBkcmFmdC1tYXRo eS1saXNwLWRodC0wMC50eHQgKHdvcmsgaW4gcHJvZ3Jlc3MpLA0KICAgICAgICAgICAgICBGZWJy dWFyeSAyMDA4Lg0KDQogICBbTE9DLUlELUFSQ0hdDQogICAgICAgICAgICAgIE1leWVyLCBELiBh bmQgRC4gTGV3aXMsICJBcmNoaXRlY3R1cmFsIEltcGxpY2F0aW9ucyBvZg0KICAgICAgICAgICAg ICBMb2NhdG9yL0lEICBTZXBhcmF0aW9uIiwNCiAgICAgICAgICAgICAgZHJhZnQtbWV5ZXItbG9j LWlkLWltcGxpY2F0aW9ucy0wMS50eHQgKHdvcmsgaW4gcHJvZ3Jlc3MpLA0KICAgICAgICAgICAg ICBKYW51YXJ5ciAyMDA5Lg0KDQogICBbTUxJU1BdICAgIEZhcmluYWNjaSwgRC4sIE1leWVyLCBE LiwgWndpZWJlbCwgSi4sIGFuZCBTLiBWZW5hYXMsDQogICAgICAgICAgICAgICJMSVNQIGZvciBN dWx0aWNhc3QgRW52aXJvbm1lbnRzIiwNCiAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1saXNwLW11 bHRpY2FzdC0wMi50eHQgKHdvcmsgaW4gcHJvZ3Jlc3MpLA0KICAgICAgICAgICAgICBTZXB0ZW1i ZXIgMjAwOS4NCg0KICAgW05FUkRdICAgICBMZWFyLCBFLiwgIk5FUkQ6IEEgTm90LXNvLW5vdmVs IEVJRCB0byBSTE9DIERhdGFiYXNlIiwNCiAgICAgICAgICAgICAgZHJhZnQtbGVhci1saXNwLW5l cmQtMDQudHh0ICh3b3JrIGluIHByb2dyZXNzKSwNCiAgICAgICAgICAgICAgQXByaWwgMjAwOC4N Cg0KICAgW09QRU5MSVNQXQ0KICAgICAgICAgICAgICBJYW5ub25lLCBMLiBhbmQgTy4gQm9uYXZl bnR1cmUsICJPcGVuTElTUCBJbXBsZW1lbnRhdGlvbg0KICAgICAgICAgICAgICBSZXBvcnQiLCBk cmFmdC1pYW5ub25lLW9wZW5saXNwLWltcGxlbWVudGF0aW9uLTAxLnR4dA0KICAgICAgICAgICAg ICAod29yayBpbiBwcm9ncmVzcyksIEp1bHkgMjAwOC4NCg0KICAgW1JBRElSXSAgICBOYXJ0ZW4s IFQuLCAiUm91dGluZyBhbmQgQWRkcmVzc2luZyBQcm9ibGVtIFN0YXRlbWVudCIsDQogICAgICAg ICAgICAgIGRyYWZ0LW5hcnRlbi1yYWRpci1wcm9ibGVtLXN0YXRlbWVudC0wMC50eHQgKHdvcmsg aW4NCiAgICAgICAgICAgICAgcHJvZ3Jlc3MpLCBKdWx5IDIwMDcuDQoNCiAgIFtSRkMzMzQ0Ymlz XQ0KICAgICAgICAgICAgICBQZXJraW5zLCBDLiwgIklQIE1vYmlsaXR5IFN1cHBvcnQgZm9yIElQ djQsIHJldmlzZWQiLA0KICAgICAgICAgICAgICBkcmFmdC1pZXRmLW1pcDQtcmZjMzM0NGJpcy0w NSAod29yayBpbiBwcm9ncmVzcyksDQogICAgICAgICAgICAgIEp1bHkgMjAwNy4NCg0KICAgW1JG QzQxOTJdICBCYWtlciwgRi4sIExlYXIsIEUuLCBhbmQgUi4gRHJvbXMsICJQcm9jZWR1cmVzIGZv cg0KICAgICAgICAgICAgICBSZW51bWJlcmluZyBhbiBJUHY2IE5ldHdvcmsgd2l0aG91dCBhIEZs YWcgRGF5IiwgUkZDIDQxOTIsDQogICAgICAgICAgICAgIFNlcHRlbWJlciAyMDA1Lg0KDQogICBb UlBGVl0gICAgIFdpam5hbmRzLCBJSi4sIEJvZXJzLCBBLiwgYW5kIEUuIFJvc2VuLCAiVGhlIFJQ RiBWZWN0b3INCiAgICAgICAgICAgICAgVExWIiwgZHJhZnQtaWV0Zi1waW0tcnBmLXZlY3Rvci0w OC50eHQgKHdvcmsgaW4gcHJvZ3Jlc3MpLA0KICAgICAgICAgICAgICBKYW51YXJ5IDIwMDkuDQoN CiAgIFtSUE1EXSAgICAgSGFuZGxleSwgTS4sIEh1aWNpLCBGLiwgYW5kIEEuIEdyZWVuaGFsZ2gs ICJSUE1EOiBQcm90b2NvbA0KICAgICAgICAgICAgICBmb3IgUm91dGluZyBQcm90b2NvbCBNZXRh LWRhdGEgIERpc3NlbWluYXRpb24iLA0KICAgICAgICAgICAgICBkcmFmdC1oYW5kbGV5LXAycHB1 c2gtdW5wdWJsaXNoZWQtMjAwNzcyNi50eHQgKHdvcmsgaW4NCiAgICAgICAgICAgICAgcHJvZ3Jl c3MpLCBKdWx5IDIwMDcuDQoNCiAgIFtTSElNNl0gICAgTm9yZG1hcmssIEUuIGFuZCBNLiBCYWdu dWxvLCAiTGV2ZWwgMyBtdWx0aWhvbWluZyBzaGltDQogICAgICAgICAgICAgIHByb3RvY29sIiwg ZHJhZnQtaWV0Zi1zaGltNi1wcm90by0wNi50eHQgKHdvcmsgaW4NCiAgICAgICAgICAgICAgcHJv Z3Jlc3MpLCBPY3RvYmVyIDIwMDYuDQoNCkFwcGVuZGl4IEEuICBBY2tub3dsZWRnbWVudHMNCg0K ICAgQW4gaW5pdGlhbCB0aGFuayB5b3UgZ29lcyB0byBEYXZlIE9yYW4gZm9yIHBsYW50aW5nIHRo ZSBzZWVkcyBmb3IgdGhlDQogICBpbml0aWFsIGlkZWFzIGZvciBMSVNQLiAgSGlzIGNvbnN1bHRh dGlvbiBjb250aW51ZXMgdG8gcHJvdmlkZSB2YWx1ZQ0KICAgdG8gdGhlIExJU1AgYXV0aG9ycy4N Cg0KICAgQSBzcGVjaWFsIGFuZCBhcHByZWNpYXRpdmUgdGhhbmsgeW91IGdvZXMgdG8gTm9lbCBD aGlhcHBhIGZvcg0KICAgcHJvdmlkaW5nIGFyY2hpdGVjdHVyYWwgaW1wZXR1cyBvdmVyIHRoZSBw YXN0IGRlY2FkZXMgb24gc2VwYXJhdGlvbg0KICAgb2YgbG9jYXRpb24gYW5kIGlkZW50aXR5LCBh cyB3ZWxsIGFzIGRldGFpbGVkIHJldmlldyBvZiB0aGUgTElTUA0KICAgYXJjaGl0ZWN0dXJlIGFu ZCBkb2N1bWVudHMsIGNvdXBsZWQgd2l0aCBlbnRodXNpYXNtIGZvciBtYWtpbmcgTElTUCBhDQog ICBwcmFjdGljYWwgYW5kIGluY3JlbWVudGFsIHRyYW5zaXRpb24gZm9yIHRoZSBJbnRlcm5ldC4N Cg0KICAgVGhlIGF1dGhvcnMgd291bGQgbGlrZSB0byA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQi PmdyYXRlZnVsbHkgYWNrbm93bGVkZ2UgbWFueSBwZW9wbGUgd2hvPC9GT05UPjwvU1RSSUtFPiA8 U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+Z3JhdGVmdWxseSBhY2tub3dsZWRnZSBtYW55IHBl b3BsZSB3aG8gaGF2ZQ0KICAgY29udHJpYnV0ZWQgZGlzY3Vzc2lvbiBhbmQgaWRlYXMgdG8gdGhl IG1ha2luZyBvZiB0aGlzIHByb3Bvc2FsLg0KICAgVGhleSBpbmNsdWRlIFNjb3R0IEJyaW0sIEFu ZHJldyBQYXJ0YW4sIEpvaG4gWndpZWJlbCwgSmFzb24gU2NoaWxsZXIsDQogICBMaXhpYSBaaGFu ZywgRG9yaWFuIEtpbSwgUGV0ZXIgU2Nob2VubWFrZXIsIFZpamF5IEdpbGwsIEdlb2ZmIEh1c3Rv biwNCiAgIERhdmlkIENvbnJhZCwgTWFyayBIYW5kbGV5LCBSb24gQm9uaWNhLCBUZWQgU2VlbHks IE1hcmsgVG93bnNsZXksDQogICBDaHJpcyBNb3Jyb3csIEJyaWFuIFdlaXMsIERhdmUgTWNHcmV3 LCBQZXRlciBMb3RoYmVyZywgRGF2ZSBUaGFsZXIsDQogICBFbGlvdCBMZWFyLCBTaGFuZSBBbWFu dGUsIFZlZCBLYWZsZSwgT2xpdmllciBCb25hdmVudHVyZSwgTHVpZ2kNCiAgIElhbm5vbmUsIFJv YmluIFdoaXR0bGUsIEJyaWFuIENhcnBlbnRlciwgSm9lbCBIYWxwZXJuLCBSb2dlcg0KICAgSm9y Z2Vuc2VuLCBSYW4gQXRraW5zb24sIFN0aWcgVmVuYWFzLCBJbGppdHNjaCB2YW4gQmVpam51bSwg Um9sYW5kDQogICBCbGVzcywgRGFuYSBCbGFpciwgQmlsbCBMeW5jaCwgTWFyYyBXb29sd2FyZCwg RGFtaWVuIFNhdWNleiwgRGFtaWFuDQogICBMZXphbWEsIEF0dGlsbGEgRGUgR3Jvb3QsIFBhcmFu dGFwIExhaGlyaSwgRGF2aWQgQmxhY2ssIFJvcXVlDQogICBHYWdsaWFubywgSXNpZG9yIEtvdXZl bGFzLCBKZXNwZXIgU2tyaXZlciwgRnJlZCBUZW1wbGluLCBNYXJnYXJldA0KICAgV2Fzc2VybWFu LCBTYW0gSGFydG1hbiwgTWljaGFlbCBIb2ZsaW5nLCBQZWRybyBNYXJxdWVzLCBKYXJpIEFya2tv LA0KICAgR3JlZ2cgU2NodWRlbCwgU3Jpbml2YXMgU3VicmFtYW5pYW4sIGFuZCBBbWl0IEphaW4u DQoNCiAgIEluIHBhcnRpY3VsYXIsIHdlIHdvdWxkIGxpa2UgdG8gdGhhbmsgRGF2ZSBNZXllciBm b3IgaGlzIGNsZXZlcg0KICAgc3VnZ2VzdGlvbiBmb3IgdGhlIG5hbWUgIkxJU1AiLiA7LSkNCg0K ICAgVGhpcyB3b3JrIG9yaWdpbmF0ZWQgaW4gdGhlIFJvdXRpbmcgUmVzZWFyY2ggR3JvdXAgKFJS Rykgb2YgdGhlIElSVEYuDQogICBUaGUgaW5kaXZpZHVhbCBzdWJtaXNzaW9uIFtMSVNQLU1BSU5d IHdhcyBjb252ZXJ0ZWQgaW50byB0aGlzIElFVEYNCiAgIExJU1Agd29ya2luZyBncm91cCBkcmFm dC4NCg0KQXBwZW5kaXggQi4gIERvY3VtZW50IENoYW5nZSBMb2cNCg0KQi4xLiAgQ2hhbmdlcyB0 byBkcmFmdC1pZXRmLWxpc3AtMDYudHh0DQoNCiAgIEVkaXRvcmlhbCBiYXNlZCBjaGFuZ2VzOg0K DQogICBvICBQb3N0ZWQgRGVjZW1iZXIgMjAwOS4NCg0KICAgbyAgRml4IHR5cG8gZm9yIHJmbGFn cyBpbiBMSVNQIGRhdGEgaGVhZGVyLiAgQ2hhbmdlZCBmcm9tICI0IiB0byAiNSIuDQoNCiAgIG8g IEFkZCB0ZXh0IHRvIGluZGljYXRlIHRoYXQgTWFwLVJlZ2lzdGVyIG1lc3NhZ2VzIG11c3QgY29u dGFpbiBhDQogICAgICBjb21wdXRlZCBVRFAgY2hlY2tzdW0uDQoNCiAgIG8gIEFkZCBkZWZpbml0 aW9ucyBmb3IgUElUUiBhbmQgUEVUUi4NCg0KICAgbyAgSW5kaWNhdGUgYW4gQUZJIHZhbHVlIG9m IDAgaXMgYW4gdW5zcGVjaWZpZWQgYWRkcmVzcy4NCg0KICAgbyAgSW5kaWNhdGUgdGhhdCB0aGUg VFRMIGZpZWxkIG9mIGEgTWFwLVJlZ2lzdGVyIGlzIG5vdCB1c2VkIGFuZCBzZXQNCiAgICAgIHRv IDAgYnkgdGhlIHNlbmRlci4gIFRoaXMgY2hhbmdlIG1ha2VzIHRoaXMgc3BlYyBjb25zaXN0ZW50 IHdpdGgNCiAgICAgIFtMSVNQLU1TXS4NCg0KICAgbyAgQ2hhbmdlICIuLi4geWllbGQgYSBwYWNr ZXQgc2l6ZSBvZiBMIGJ5dGVzIiB0byAiLi4uIHlpZWxkIGEgcGFja2V0DQogICAgICBzaXplIGdy ZWF0ZXIgdGhhbiBMIGJ5dGVzIi4NCg0KICAgbyAgQ2xhcmlmeSBzZWN0aW9uIDYuMS41IG9uIHdo YXQgYWRkcmVzc2VzIGFuZCBwb3J0cyBhcmUgdXNlZCBpbiBNYXAtDQogICAgICBSZXBseSBtZXNz YWdlcy4NCg0KICAgbyAgQ2xhcmlmeSB0aGF0IExTQnMgdGhhdCBnbyBiZXlvbmQgdGhlIG51bWJl ciBvZiBsb2NhdG9ycyBkbyBub3QgdG8NCiAgICAgIGJlIFNNUmVkIHdoZW4gdGhlIGxvY2F0b3Ig YWRkcmVzc2VzIGFyZSBncmVhdGVyIGxleGljb2dyYXBoaWNhbGx5DQogICAgICB0aGFuIHRoZSBs b2NhdG9yIGluIHRoZSBleGlzdGluZyBsb2NhdG9yLXNldC4NCg0KICAgbyAgQWRkIEdyZWdnLCBT cmluaSwgYW5kIEFtaXQgdG8gYWNrbm93bGVkZ21lbnQgc2VjdGlvbi4NCg0KICAgbyAgQ2xhcmlm eSBpbiB0aGUgZGVmaW5pdGlvbiBvZiBhIExJU1AgaGVhZGVyIHdoYXQgaXMgZm9sbG93aW5nIHRo ZQ0KICAgICAgVURQIGhlYWRlci4NCg0KICAgbyAgQ2xhcmlmeSAidmVyaWZ5aW5nIE1hcC1SZXF1 ZXN0IiB0ZXh0IGluIHNlY3Rpb24gNi4xLjMuDQoNCiAgIERlc2lnbiBiYXNlZCBjaGFuZ2VzOg0K DQogICBvICBVc2Ugc3Ryb25nZXIgbGFuZ3VhZ2UgdG88L0ZPTlQ+PC9TVFJPTkc+IGhhdmUNCiAg IDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+Y29udHJpYnV0ZWQgZGlzY3Vzc2lvbjwvRk9OVD48 L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPnRoZSBvdXRlciBJUHY0IGhlYWRl ciBzZXQgREY9MSBzbyB3ZQ0KICAgICAgY2FuIGF2b2lkIGZyYWdtZW50IHJlYXNzZW1ibHkgaW4g YW4gRVRSIG9yIFBFVFIuICBUaGlzIHdpbGwgYWxzbw0KICAgICAgbWFrZSBJUHY0PC9GT05UPjwv U1RST05HPiBhbmQgPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj5pZGVhcyB0bzwvRk9OVD48L1NU UklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPklQdjYgZW5jYXBzdWxhdGlvbiBoYXZl IGNvbnNpc3RlbnQgYmVoYXZpb3IuDQoNCiAgIG8gIE1hcC1SZXF1ZXN0cyBzaG91bGQgbm90IGJl IHNlbnQgaW4gRUNNIHdpdGg8L0ZPTlQ+PC9TVFJPTkc+IHRoZSA8U1RSSUtFPjxGT05UIGNvbG9y PSJyZWQiPm1ha2luZzwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4i PlByb2JlIGJpdCBpcyBzZXQuDQogICAgICBUaGVzZSB0eXBlPC9GT05UPjwvU1RST05HPiBvZiA8 U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPnRoaXMgcHJvcG9zYWwuDQogICBUaGV5IGluY2x1ZGUg U2NvdHQgQnJpbSwgQW5kcmV3IFBhcnRhbiwgSm9obiBad2llYmVsLCBKYXNvbiBTY2hpbGxlciwN CiAgIExpeGlhIFpoYW5nLCBEb3JpYW4gS2ltLCBQZXRlciBTY2hvZW5tYWtlciwgVmlqYXkgR2ls bCwgR2VvZmYgSHVzdG9uLA0KICAgRGF2aWQgQ29ucmFkLCBNYXJrIEhhbmRsZXksIFJvbiBCb25p Y2EsIFRlZCBTZWVseSwgTWFyayBUb3duc2xleSwNCiAgIENocmlzIE1vcnJvdywgQnJpYW4gV2Vp cywgRGF2ZSBNY0dyZXcsIFBldGVyIExvdGhiZXJnLCBEYXZlIFRoYWxlciwNCiAgIEVsaW90IExl YXIsIFNoYW5lIEFtYW50ZSwgVmVkIEthZmxlLCBPbGl2aWVyIEJvbmF2ZW50dXJlLCBMdWlnaQ0K ICAgSWFubm9uZSwgUm9iaW4gV2hpdHRsZSwgQnJpYW4gQ2FycGVudGVyLCBKb2VsIEhhbHBlcm4s IFJvZ2VyDQogICBKb3JnZW5zZW4sIFJhbiBBdGtpbnNvbiwgU3RpZyBWZW5hYXMsIElsaml0c2No IHZhbiBCZWlqbnVtLCBSb2xhbmQNCiAgIEJsZXNzLCBEYW5hIEJsYWlyLCBCaWxsIEx5bmNoLCBN YXJjIFdvb2x3YXJkLCBEYW1pZW4gU2F1Y2V6LCBEYW1pYW4NCiAgIExlemFtYSwgQXR0aWxsYSBE ZSBHcm9vdCwgUGFyYW50YXAgTGFoaXJpLCBEYXZpZCBCbGFjaywgUm9xdWUNCiAgIEdhZ2xpYW5v LCBJc2lkb3IgS291dmVsYXMsIEplc3BlciBTa3JpdmVyLCBGcmVkIFRlbXBsaW4sIE1hcmdhcmV0 DQogICBXYXNzZXJtYW4sIFNhbSBIYXJ0bWFuLCBNaWNoYWVsIEhvZmxpbmcsIFBlZHJvIE1hcnF1 ZXMsPC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+TWFwLVJlcXVl c3RzIGFyZSB1c2VkIGFzIFJMT0MtcHJvYmVzPC9GT05UPjwvU1RST05HPiBhbmQgPFNUUklLRT48 Rk9OVCBjb2xvcj0icmVkIj5KYXJpDQogICBBcmtrby4NCg0KICAgSW4gcGFydGljdWxhciwgd2Ug d291bGQgbGlrZTwvRk9OVD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPmFy ZSBzZW50DQogICAgICBkaXJlY3RseTwvRk9OVD48L1NUUk9ORz4gdG8gPFNUUklLRT48Rk9OVCBj b2xvcj0icmVkIj50aGFuayBEYXZlIE1leWVyIGZvciBoaXMgY2xldmVyDQogICBzdWdnZXN0aW9u IGZvciB0aGUgbmFtZSAiTElTUCIuIDstKQ0KDQogICBUaGlzIHdvcmsgb3JpZ2luYXRlZDwvRk9O VD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPmxvY2F0b3IgYWRkcmVzc2Vz PC9GT05UPjwvU1RST05HPiBpbiB0aGUgPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj5Sb3V0aW5n IFJlc2VhcmNoIEdyb3VwIChSUkcpPC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9y PSJncmVlbiI+dW5kZXJseWluZyBuZXR3b3JrLg0KDQogICBvICBBZGQgdGV4dCBpbiBzZWN0aW9u IDYuMS41IGFib3V0IHJldHVybmluZyBhbGwgRUlELXByZWZpeGVzIGluIGENCiAgICAgIE1hcC1S ZXBseSBzZW50IGJ5IGFuIEVUUiB3aGVuIHRoZXJlIGFyZSBvdmVybGFwcGluZyBFSUQtcHJlZml4 ZXMNCiAgICAgIGNvbmZpZ3VyZS4NCg0KICAgbyAgQWRkIHRleHQgaW4gYSBuZXcgc3Vic2VjdGlv bjwvRk9OVD48L1NUUk9ORz4gb2YgPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj50aGUgSVJURi4N CiAgIFRoZSBpbmRpdmlkdWFsIHN1Ym1pc3Npb24gW0xJU1AtTUFJTl0gd2FzIGNvbnZlcnRlZCBp bnRvIHRoaXMgSUVURg0KICAgTElTUCB3b3JraW5nIGdyb3VwIGRyYWZ0Lg0KDQpBcHBlbmRpeCBC LiAgRG9jdW1lbnQgQ2hhbmdlIExvZw0KDQpCLjEuPC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxG T05UIGNvbG9yPSJncmVlbiI+c2VjdGlvbiA2LjEuNSBhYm91dCBkZWFsaW5nIHdpdGgNCiAgICAg IE1hcC1SZXBsaWVzIHdpdGggY29hcnNlIEVJRC1wcmVmaXhlcy4NCg0KQi4yLjwvRk9OVD48L1NU Uk9ORz4gIENoYW5nZXMgdG8gZHJhZnQtaWV0Zi1saXNwLTA1LnR4dA0KDQogICBvICBQb3N0ZWQg U2VwdGVtYmVyIDIwMDkuDQoNCiAgIG8gIEFkZGVkIHRoaXMgRG9jdW1lbnQgQ2hhbmdlIExvZyBh cHBlbmRpeC4NCg0KICAgbyAgQWRkZWQgc2VjdGlvbiBpbmRpY2F0aW5nIHRoYXQgZW5jYXBzdWxh dGVkIE1hcC1SZXF1ZXN0cyBtdXN0IHVzZQ0KICAgICAgZGVzdGluYXRpb24gVURQIHBvcnQgNDM0 Mi4NCg0KICAgbyAgRG9uJ3QgdXNlIEFIIGluIE1hcC1SZWdpc3RlcnMuICBQdXQga2V5LWlkLCBh dXRoLWxlbmd0aCwgYW5kIGF1dGgtDQogICAgICBkYXRhIGluIE1hcC1SZWdpc3RlciBwYXlsb2Fk Lg0KDQogICBvICBBZGRlZCBKYXJpIHRvIGFja25vd2xlZGdtZW50IHNlY3Rpb24uDQoNCiAgIG8g IFN0YXRlIHRoZSBzb3VyY2UtRUlEIGlzIHNldCB0byAwIHdoZW4gdXNpbmcgTWFwLVJlcXVlc3Rz IHRvDQogICAgICByZWZyZXNoIG9yIFJMT0MtcHJvYmUuDQoNCiAgIG8gIE1ha2UgbW9yZSBjbGVh ciB3aGF0IHNvdXJjZS1STE9DIHNob3VsZCBiZSBmb3IgYSBNYXAtUmVxdWVzdC4NCg0KICAgbyAg VGhlIExJU1AtQ09OUyBhdXRob3JzIHRob3VnaHQgdGhhdCB0aGUgVHlwZSBkZWZpbml0aW9ucyBm b3IgQ09OUw0KICAgICAgc2hvdWxkIGJlIHJlbW92ZWQgZnJvbSB0aGlzIHNwZWNpZmljYXRpb24u DQoNCiAgIG8gIFJlbW92ZWQgbm9uY2UgZnJvbSBNYXAtUmVnaXN0ZXIgbWVzc2FnZSwgaXQgd2Fz bid0IHVzZWQgc28gbm8gbmVlZA0KICAgICAgZm9yIGl0Lg0KDQogICBvICBDbGFyaWZ5IHdoYXQg dG8gZG8gZm9yIHVuc3BlY2lmaWVkIEFjdGlvbiBiaXRzIGZvciBuZWdhdGl2ZSBNYXAtDQogICAg ICBSZXBsaWVzLiAgU2luY2UgTm8gQWN0aW9uIGlzIGEgZHJvcCwgbWFrZSB2YWx1ZSAwIERyb3Au DQoNCjxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+Qi4yLjwvRk9OVD48L1NUUklLRT4NCg0KPFNU Uk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPkIuMy48L0ZPTlQ+PC9TVFJPTkc+ICBDaGFuZ2VzIHRv IGRyYWZ0LWlldGYtbGlzcC0wNC50eHQNCg0KICAgbyAgUG9zdGVkIFNlcHRlbWJlciAyMDA5Lg0K DQogICBvICBIb3cgZG8gZGVhbCB3aXRoIHJlY29yZCBjb3VudCBncmVhdGVyIHRoYW4gMSBmb3Ig YSBNYXAtUmVxdWVzdC4NCiAgICAgIERhbWllbiBhbmQgSm9lbCBjb21tZW50LiAgSm9lbCBzdWdn ZXN0czogMSkgU3BlY2lmeSB0aGF0IHNlbmRlcnMNCiAgICAgIGNvbXBsaWFudCB3aXRoIHRoZSBj dXJyZW50IGRvY3VtZW50IHdpbGwgYWx3YXlzIHNldCB0aGUgY291bnQgdG8NCiAgICAgIDEsIGFu ZCBub3RlIHRoYXQgdGhlIGNvdW50IGlzIGluY2x1ZGVkIGZvciBmdXR1cmUgZXh0ZW5zaWJpbGl0 eS4NCiAgICAgIDIpIFNwZWNpZnkgd2hhdCBhIHJlY2VpdmVyIGNvbXBsaWFudCB3aXRoIHRoZSBk cmFmdCBzaG91bGQgZG8gaWYNCiAgICAgIGl0IHJlY2VpdmVzIGEgcmVxdWVzdCB3aXRoIGEgY291 bnQgZ3JlYXRlciB0aGFuIDEuICBQcmVzdW1hYmx5LCBpdA0KICAgICAgc2hvdWxkIHNlbmQgc29t ZSBlcnJvciBiYWNrPw0KDQogICBvICBBZGQgRnJlZCBUZW1wbGluIGluIDxTVFJJS0U+PEZPTlQg Y29sb3I9InJlZCI+YWNrPC9GT05UPjwvU1RSSUtFPiA8U1RST05HPjxGT05UIGNvbG9yPSJncmVl biI+YWNrbm93bGVkZ21lbnQ8L0ZPTlQ+PC9TVFJPTkc+IHNlY3Rpb24uDQoNCiAgIG8gIEFkZCBN YXJnYXJldCBhbmQgU2FtIHRvIHRoZSA8U1RSSUtFPjxGT05UIGNvbG9yPSJyZWQiPmFjazwvRk9O VD48L1NUUklLRT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPmFja25vd2xlZGdtZW50PC9G T05UPjwvU1RST05HPiBzZWN0aW9uIGZvciB0aGVpciBncmVhdA0KICAgICAgY29tbWVudHMuDQoN CiAgIG8gIFNheSBtb3JlIGFib3V0IExBR3MgaW4gdGhlIFVEUCBzZWN0aW9uIHBlciBTYW0gSGFy dG1hbidzIGNvbW1lbnQuDQoNCiAgIG8gIFNhbSB3YW50cyB0byB1c2UgTUFZIGluc3RlYWQgb2Yg U0hPVUxEIGZvciBpZ25vcmluZyBjaGVja3N1bXMgb24NCiAgICAgIEVUUi4gIEZyb20gdGhlIG1h aWxpbmcgbGlzdDogIllvdSdkIG5lZWQgdG8gd29yZCBpdCBhcyBhbiBJVFIgTUFZDQogICAgICBz ZW5kIGEgemVybyBjaGVja3N1bSwgYW4gRVRSIE1VU1QgYWNjZXB0IGEgMCBjaGVja3N1bSBhbmQg TUFZDQogICAgICBpZ25vcmUgdGhlIGNoZWNrc3VtIGNvbXBsZXRlbHkuICBBbmQgb2YgY291cnNl IHdlJ2QgbmVlZCB0bw0KICAgICAgY29uZmlybSB0aGF0IGNhbiBhY3R1YWxseSBiZSBpbXBsZW1l bnRlZC4gIEluIHBhcnRpY3VsYXIsIGhhcmR3YXJlDQogICAgICB0aGF0IHZlcmlmaWVzIFVEUCBj aGVja3N1bXMgb24gcmVjZWl2ZSBuZWVkcyB0byBiZSBjaGVja2VkIHRvIG1ha2UNCiAgICAgIHN1 cmUgaXQgcGVybWl0cyAwIGNoZWNrc3Vtcy4iDQoNCiAgIG8gIE1hcmdhcmV0IHdhbnRzIGEgcmVm ZXJlbmNlIHRvDQogICAgICBodHRwOi8vd3d3LmlldGYub3JnL2lkL2RyYWZ0LWV1YmFua3MtY2hp bWVudG8tNm1hbi0wMC50eHQuDQoNCiAgIG8gIEZpeCBkZXNjcmlwdGlvbiBpbiBNYXAtUmVxdWVz dCBzZWN0aW9uLiAgV2hlcmUgd2UgZGVzY3JpYmUgTWFwLQ0KICAgICAgUmVwbHkgUmVjb3JkLCBj aGFuZ2UgIlItYml0IiB0byAiTS1iaXQiLg0KDQogICBvICBBZGQgdGhlIG1vYmlsaXR5IGJpdCB0 byBNYXAtUmVwbGllcy4gIFNvIFBUUnMgZG9uJ3QgcHJvYmUgc28gb2Z0ZW4NCiAgICAgIGZvciBN TnMgYnV0IG9mdGVuIGVub3VnaCB0byBnZXQgbWFwcGluZyB1cGRhdGVzLg0KDQogICBvICBJbmRp Y2F0ZSBTSEExIGNhbiBiZSB1c2VkIGFzIHdlbGwgZm9yIE1hcC1SZWdpc3RlcnMuDQoNCiAgIG8g IE1vcmUgRnJlZCBjb21tZW50cyBvbiBNVFUgaGFuZGxpbmcuDQoNCiAgIG8gIElzaWRvciBjb21t ZW50IGFib3V0IDxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+c3BlY2luZzwvRk9OVD48L1NUUklL RT4gPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPnNwZWMnaW5nPC9GT05UPjwvU1RST05HPiBi ZXR0ZXIgcGVyaW9kaWMgTWFwLVJlZ2lzdGVycy4gIFdpbGwNCiAgICAgIGJlIGZpeGVkIGluIGRy YWZ0LWlldGYtbGlzcC1tcy0wMi50eHQuDQoNCiAgIG8gIE1hcmdhcmV0J3MgY29tbWVudCBvbiBn bGVhbmluZzogIlRoZSBjdXJyZW50IHNwZWNpZmljYXRpb24gZG9lcw0KICAgICAgbm90IG1ha2Ug aXQgY2xlYXIgaG93IGxvbmcgZ2xlYW5lZCBtYXAgZW50cmllcyBzaG91bGQgYmUgcmV0YWluZWQN CiAgICAgIGluIHRoZSBjYWNoZSwgbm9yIGRvZXMgaXQgbWFrZSBpdCBjbGVhciBob3cvIHdoZW4g dGhleSB3aWxsIGJlDQogICAgICB2YWxpZGF0ZWQuICBUaGUgTElTUCBzcGVjIHNob3VsZCwgYXQg dGhlIHZlcnkgbGVhc3QsIGluY2x1ZGUgYQ0KICAgICAgKHNob3J0KSBkZWZhdWx0IGxpZmV0aW1l IGZvciBnbGVhbmVkIGVudHJpZXMsIHJlcXVpcmUgdGhhdCB0aGV5IGJlDQogICAgICB2YWxpZGF0 ZWQgd2l0aGluIGEgc2hvcnQgcGVyaW9kIG9mIHRpbWUsIGFuZCBzdGF0ZSB0aGF0IGEgbmV3DQog ICAgICBnbGVhbmVkIGVudHJ5IHNob3VsZCBuZXZlciBvdmVyd3JpdGUgYW4gZW50cnkgdGhhdCB3 YXMgb2J0YWluZWQNCiAgICAgIGZyb20gdGhlIG1hcHBpbmcgc3lzdGVtLiAgVGhlIHNlY3VyaXR5 IGltcGxpY2F0aW9ucyBvZiBzdG9yaW5nDQogICAgICAiZ2xlYW5lZCIgZW50cmllcyBzaG91bGQg YWxzbyBiZSBleHBsb3JlZCBpbiBkZXRhaWwuIg0KDQogICBvICBBZGQgc2VjdGlvbiBvbiBSTE9D LXByb2JpbmcgcGVyIHdvcmtpbmcgZ3JvdXAgZmVlZGJhY2suDQoNCiAgIG8gIENoYW5nZSAibG9j LXJlYWNoLWJpdHMiIHRvICJsb2Mtc3RhdHVzLWJpdHMiIHBlciBjb21tZW50IGZyb20NCiAgICAg IE5vZWwuDQoNCiAgIG8gIFJlbW92ZSBTTVItYml0IGZyb20gZGF0YS1wbGFuZS4gIERpbm8gcHJl ZmVycyB0byBoYXZlIGl0IGluIHRoZQ0KICAgICAgY29udHJvbCBwbGFuZSBvbmx5Lg0KDQogICBv ICBDaGFuZ2UgTElTUCBoZWFkZXIgdG8gYWxsb3cgYSAiUmVzZWFyY2ggQml0IiBzbyB0aGUgTm9u Y2UgYW5kIExTQg0KICAgICAgZmllbGRzIGNhbiBiZSB0dXJuZWQgb2ZmIGFuZCB1c2VkIGZvciBh bm90aGVyIGZ1dHVyZSBwdXJwb3NlLiAgRm9yDQogICAgICBMdWlnaSBldCBhbCB2ZXJzaW9uaW5n IGNvbnZlcmdlbmNlLg0KDQogICBvICBBZGQgYSBOLWJpdCB0byB0aGUgZGF0YSBoZWFkZXIgc3Vn Z2VzdGVkIGJ5IE5vZWwuICBUaGVuIHRoZSBub25jZQ0KICAgICAgZmllbGQgY291bGQgYmUgdXNl ZCB3aGVuIE4gaXMgbm90IDEuDQoNCiAgIG8gIENsYXJpZnkgdGhhdCB3aGVuIEUtYml0IGlzIDAs IHRoZSBub25jZSBmaWVsZCBjYW4gYmUgYW4gZWNob2VkDQogICAgICBub25jZSBvciBhIHJhbmRv bSBub25jZS4gIENvbW1lbnQgZnJvbSBKZXNwZXIuDQoNCiAgIG8gIEluZGljYXRlIHdoZW4gZG9p bmcgZGF0YS1nbGVhbmluZyB0aGF0IGEgdmVyaWZ5aW5nIE1hcC1SZXF1ZXN0IGlzDQogICAgICBz ZW50IHRvIHRoZSBzb3VyY2UtRUlEIG9mIHRoZSBnbGVhbmVkIGRhdGEgcGFja2V0IHNvIHdlIGNh biBhdm9pZA0KICAgICAgbWFwLWNhY2hlIGNvcnJ1cHRpb24gYnkgYSAzcmQgcGFydHkuICBDb21t ZW50IGZyb20gUGVkcm8uDQoNCiAgIG8gIEluZGljYXRlIHRoYXQgYSB2ZXJpZnlpbmcgTWFwLVJl cXVlc3QsIGZvciBhY2NlcHRpbmcgbWFwcGluZyBkYXRhLA0KICAgICAgc2hvdWxkIGJlIHNlbnQg b3ZlciB0aGUgdGhlIEFMVCAob3IgdG8gdGhlIEVJRCkuDQoNCiAgIG8gIFJlZmVyZW5jZSBJUHNl YyBSRkMgNDMwMi4gIENvbW1lbnQgZnJvbSBTYW0gYW5kIEJyaWFuIFdlaXMuDQoNCiAgIG8gIFB1 dCBFLWJpdCBpbiBNYXAtUmVwbHkgdG8gdGVsbCBJVFJzIHRoYXQgdGhlIEVUUiBzdXBwb3J0cyBl Y2hvLQ0KICAgICAgbm9uY2luZy4gIENvbW1lbnQgYnkgUGVkcm8gYW5kIERpbm8uDQoNCiAgIG8g IEplc3BlciBtYWRlIGEgY29tbWVudCB0byBsb29zZW4gdGhlIGxhbmd1YWdlIGFib3V0IHJlcXVp cmluZyB0aGUNCiAgICAgIGNvcHkgb2YgaW5uZXIgVFRMIHRvIG91dGVyIFRUTCBzaW5jZSB0aGUg dGV4dCB0byBnZXQgbWl4ZWQtQUYNCiAgICAgIHRyYWNlcm91dGUgdG8gd29yayB3b3VsZCB2aW9s YXRlIHRoZSAiTVVTVCIgY2xhdXNlLiAgQ2hhbmdlZCBmcm9tDQogICAgICBNVVNUIHRvIFNIT1VM RCBpbiBzZWN0aW9uIDUuMy4NCg0KPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj5CLjMuPC9GT05U PjwvU1RSSUtFPg0KDQo8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+Qi40LjwvRk9OVD48L1NU Uk9ORz4gIENoYW5nZXMgdG8gZHJhZnQtaWV0Zi1saXNwLTAzLnR4dA0KDQogICBvICBQb3N0ZWQg SnVseSAyMDA5Lg0KDQogICBvICBSZW1vdmVkIGxvYy1yZWFjaC1iaXRzIGxvbmd3b3JkIGZyb20g Y29udHJvbCBwYWNrZXRzIHBlciBEYW1pZW4NCiAgICAgIGNvbW1lbnQuDQoNCiAgIG8gIENsYXJp ZmljYXRpb25zIGluIE1UVSB0ZXh0IGZyb20gUm9xdWUuDQoNCiAgIG8gIEFkZGVkIHRleHQgdG8g aW5kaWNhdGUgdGhhdCB0aGUgbG9jYXRvci1zZXQgYmUgc29ydGVkIGJ5IGxvY2F0b3INCiAgICAg IGFkZHJlc3MgZnJvbSBJc2lkb3IuDQoNCiAgIG8gIENsYXJpZmljYXRpb24gdGV4dCBmcm9tIDxT VFJJS0U+PEZPTlQgY29sb3I9InJlZCI+Sm9oblo8L0ZPTlQ+PC9TVFJJS0U+IDxTVFJPTkc+PEZP TlQgY29sb3I9ImdyZWVuIj5Kb2huIFp3aWViZWw8L0ZPTlQ+PC9TVFJPTkc+IGluIEVjaG8tTm9u Y2Ugc2VjdGlvbi4NCg0KPFNUUklLRT48Rk9OVCBjb2xvcj0icmVkIj5CLjQuPC9GT05UPjwvU1RS SUtFPg0KDQo8U1RST05HPjxGT05UIGNvbG9yPSJncmVlbiI+Qi41LjwvRk9OVD48L1NUUk9ORz4g IENoYW5nZXMgdG8gZHJhZnQtaWV0Zi1saXNwLTAyLnR4dA0KDQogICBvICBQb3N0ZWQgSnVseSAy MDA5Lg0KDQogICBvICBFbmNhcHN1bGF0aW9uIHBhY2tldCBmb3JtYXQgY2hhbmdlIHRvIGFkZCBF LWJpdCBhbmQgbWFrZSBsb2MtDQogICAgICByZWFjaC1iaXRzIDMyLWJpdHMgaW4gbGVuZ3RoLg0K DQogICBvICBBZGRlZCBFY2hvLU5vbmNlIEFsZ29yaXRobSBzZWN0aW9uLg0KDQogICBvICBDbGFy aWZpY2F0aW9uIGhvdyBFQ04gYml0cyBhcmUgY29waWVkLg0KDQogICBvICBNb3ZlZCBTLWJpdCBp biBNYXAtUmVxdWVzdC4NCg0KICAgbyAgQWRkZWQgUC1iaXQgaW4gTWFwLVJlcXVlc3QgYW5kIE1h cC1SZXBseSBtZXNzYWdlcyB0byBhbnRpY2lwYXRlDQogICAgICBSTE9DLVByb2JlIEFsZ29yaXRo bS4NCg0KICAgbyAgQWRkZWQgdG8gTW9iaWxpdHkgc2VjdGlvbiB0byByZWZlcmVuY2UgZHJhZnQt bWV5ZXItbGlzcC1tbi0wMC50eHQuDQoNCjxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+Qi41Ljwv Rk9OVD48L1NUUklLRT4NCg0KPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPkIuNi48L0ZPTlQ+ PC9TVFJPTkc+ICBDaGFuZ2VzIHRvIGRyYWZ0LWlldGYtbGlzcC0wMS50eHQNCg0KICAgbyAgUG9z dGVkIDIgZGF5cyBhZnRlciBkcmFmdC1pZXRmLWxpc3AtMDAudHh0IGluIE1heSAyMDA5Lg0KDQog ICBvICBEZWZpbmVkIExFSUQgdG8gYmUgYSAiTElTUCBFSUQiLg0KDQogICBvICBJbmRpY2F0ZSBl bmNhcHN1bGF0aW9uIHVzZSBJUHY0IERGPTAuDQoNCiAgIG8gIEFkZGVkIG5lZ2F0aXZlIE1hcC1S ZXBseSBtZXNzYWdlcyB3aXRoIGRyb3AsIG5hdGl2ZS1mb3J3YXJkLCBhbmQNCiAgICAgIHNlbmQt bWFwLXJlcXVlc3QgYWN0aW9ucy4NCg0KICAgbyAgQWRkZWQgUHJveHktTWFwLVJlcGx5IGJpdCB0 byBNYXAtUmVnaXN0ZXIuDQoNCjxTVFJJS0U+PEZPTlQgY29sb3I9InJlZCI+Qi42LjwvRk9OVD48 L1NUUklLRT4NCg0KPFNUUk9ORz48Rk9OVCBjb2xvcj0iZ3JlZW4iPkIuNy48L0ZPTlQ+PC9TVFJP Tkc+ICBDaGFuZ2VzIHRvIGRyYWZ0LWlldGYtbGlzcC0wMC50eHQNCg0KICAgbyAgUG9zdGVkIE1h eSAyMDA5Lg0KDQogICBvICBSZW5hbWUgb2YgZHJhZnQtZmFyaW5hY2NpLWxpc3AtMTIudHh0Lg0K DQogICBvICBBY2tub3dsZWRnbWVudCB0byBSUkcuDQoNCkF1dGhvcnMnIEFkZHJlc3Nlcw0KDQog ICBEaW5vIEZhcmluYWNjaQ0KICAgY2lzY28gU3lzdGVtcw0KICAgVGFzbWFuIERyaXZlDQogICBT YW4gSm9zZSwgQ0EgIDk1MTM0DQogICBVU0ENCg0KICAgRW1haWw6IGRpbm9AY2lzY28uY29tDQoN CiAgIFZpbmNlIEZ1bGxlcg0KICAgY2lzY28gU3lzdGVtcw0KICAgVGFzbWFuIERyaXZlDQogICBT YW4gSm9zZSwgQ0EgIDk1MTM0DQogICBVU0ENCg0KICAgRW1haWw6IHZhZkBjaXNjby5jb20NCg0K ICAgRGF2ZSBNZXllcg0KICAgY2lzY28gU3lzdGVtcw0KICAgMTcwIFRhc21hbiBEcml2ZQ0KICAg U2FuIEpvc2UsIENBDQogICBVU0ENCg0KICAgRW1haWw6IGRtbUBjaXNjby5jb20NCg0KICAgRGFy cmVsIExld2lzDQogICBjaXNjbyBTeXN0ZW1zDQogICAxNzAgVGFzbWFuIERyaXZlDQogICBTYW4g Sm9zZSwgQ0ENCiAgIFVTQQ0KDQogICBFbWFpbDogZGFybGV3aXNAY2lzY28uY29tDQo8L1BSRT4N Cg0KPC9CT0RZPjwvSFRNTD4= ------_=_NextPart_001_01CA93D8.AC0D6C98 Content-Type: text/plain; name="draft-ietf-lisp-06.txt" Content-Transfer-Encoding: base64 Content-Description: draft-ietf-lisp-06.txt Content-Disposition: attachment; filename="draft-ietf-lisp-06.txt" DQoNCg0KTmV0d29yayBXb3JraW5nIEdyb3VwICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgRC4gRmFyaW5hY2NpDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBWLiBGdWxsZXINCkludGVuZGVkIHN0YXR1czog RXhwZXJpbWVudGFsICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBELiBNZXllcg0K RXhwaXJlczogSnVseSAxNiwgMjAxMCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIEQuIExld2lzDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIGNpc2NvIFN5c3RlbXMNCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSmFudWFyeSAxMiwgMjAxMA0KDQoNCiAg ICAgICAgICAgICAgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKQ0KICAg ICAgICAgICAgICAgICAgICAgICAgIGRyYWZ0LWlldGYtbGlzcC0wNi50eHQNCg0KU3RhdHVzIG9m IHRoaXMgTWVtbw0KDQogICBUaGlzIEludGVybmV0LURyYWZ0IGlzIHN1Ym1pdHRlZCB0byBJRVRG IGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0aGUNCiAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4IGFu ZCBCQ1AgNzkuDQoNCiAgIEludGVybmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1bWVudHMgb2Yg dGhlIEludGVybmV0IEVuZ2luZWVyaW5nDQogICBUYXNrIEZvcmNlIChJRVRGKSwgaXRzIGFyZWFz LCBhbmQgaXRzIHdvcmtpbmcgZ3JvdXBzLiAgTm90ZSB0aGF0DQogICBvdGhlciBncm91cHMgbWF5 IGFsc28gZGlzdHJpYnV0ZSB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC0NCiAgIERyYWZ0 cy4NCg0KICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEg bWF4aW11bSBvZiBzaXggbW9udGhzDQogICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBv ciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueQ0KICAgdGltZS4gIEl0IGlzIGlu YXBwcm9wcmlhdGUgdG8gdXNlIEludGVybmV0LURyYWZ0cyBhcyByZWZlcmVuY2UNCiAgIG1hdGVy aWFsIG9yIHRvIGNpdGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGluIHByb2dyZXNzLiINCg0K ICAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC1EcmFmdHMgY2FuIGJlIGFjY2Vzc2VkIGF0 DQogICBodHRwOi8vd3d3LmlldGYub3JnL2lldGYvMWlkLWFic3RyYWN0cy50eHQuDQoNCiAgIFRo ZSBsaXN0IG9mIEludGVybmV0LURyYWZ0IFNoYWRvdyBEaXJlY3RvcmllcyBjYW4gYmUgYWNjZXNz ZWQgYXQNCiAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcvc2hhZG93Lmh0bWwuDQoNCiAgIFRoaXMgSW50 ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gSnVseSAxNiwgMjAxMC4NCg0KQ29weXJpZ2h0IE5v dGljZQ0KDQogICBDb3B5cmlnaHQgKGMpIDIwMTAgSUVURiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMg aWRlbnRpZmllZCBhcyB0aGUNCiAgIGRvY3VtZW50IGF1dGhvcnMuICBBbGwgcmlnaHRzIHJlc2Vy dmVkLg0KDQogICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3QgdG8gQkNQIDc4IGFuZCB0aGUgSUVU RiBUcnVzdCdzIExlZ2FsDQogICBQcm92aXNpb25zIFJlbGF0aW5nIHRvIElFVEYgRG9jdW1lbnRz IGluIGVmZmVjdCBvbiB0aGUgZGF0ZSBvZg0KICAgcHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVu dCAoaHR0cDovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKS4NCiAgIFBsZWFzZSByZXZp ZXcgdGhlc2UgZG9jdW1lbnRzIGNhcmVmdWxseSwgYXMgdGhleSBkZXNjcmliZSB5b3VyIHJpZ2h0 cw0KICAgYW5kIHJlc3RyaWN0aW9ucyB3aXRoIHJlc3BlY3QgdG8gdGhpcyBkb2N1bWVudC4NCg0K DQoNCg0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1bHkgMTYsIDIw MTAgICAgICAgICAgICAgICAgIFtQYWdlIDFdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICBMb2NhdG9y L0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTANCg0KDQpBYnN0 cmFjdA0KDQogICBUaGlzIGRyYWZ0IGRlc2NyaWJlcyBhIHNpbXBsZSwgaW5jcmVtZW50YWwsIG5l dHdvcmstYmFzZWQgcHJvdG9jb2wgdG8NCiAgIGltcGxlbWVudCBzZXBhcmF0aW9uIG9mIEludGVy bmV0IGFkZHJlc3NlcyBpbnRvIEVuZHBvaW50IElkZW50aWZpZXJzDQogICAoRUlEcykgYW5kIFJv dXRpbmcgTG9jYXRvcnMgKFJMT0NzKS4gIFRoaXMgbWVjaGFuaXNtIHJlcXVpcmVzIG5vDQogICBj aGFuZ2VzIHRvIGhvc3Qgc3RhY2tzIGFuZCBubyBtYWpvciBjaGFuZ2VzIHRvIGV4aXN0aW5nIGRh dGFiYXNlDQogICBpbmZyYXN0cnVjdHVyZXMuICBUaGUgcHJvcG9zZWQgcHJvdG9jb2wgY2FuIGJl IGltcGxlbWVudGVkIGluIGENCiAgIHJlbGF0aXZlbHkgc21hbGwgbnVtYmVyIG9mIHJvdXRlcnMu DQoNCiAgIFRoaXMgcHJvcG9zYWwgd2FzIHN0aW11bGF0ZWQgYnkgdGhlIHByb2JsZW0gc3RhdGVt ZW50IGVmZm9ydCBhdCB0aGUNCiAgIEFtc3RlcmRhbSBJQUIgUm91dGluZyBhbmQgQWRkcmVzc2lu ZyBXb3Jrc2hvcCAoUkFXUyksIHdoaWNoIHRvb2sNCiAgIHBsYWNlIGluIE9jdG9iZXIgMjAwNi4N Cg0KDQpUYWJsZSBvZiBDb250ZW50cw0KDQogICAxLiAgUmVxdWlyZW1lbnRzIE5vdGF0aW9uICAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDQNCiAgIDIuICBJbnRyb2R1 Y3Rpb24gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg NQ0KICAgMy4gIERlZmluaXRpb24gb2YgVGVybXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICA4DQogICA0LiAgQmFzaWMgT3ZlcnZpZXcgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTINCiAgICAgNC4xLiAgUGFja2V0IEZs b3cgU2VxdWVuY2UgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxNA0KICAg NS4gIFR1bm5lbGluZyBEZXRhaWxzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIDE2DQogICAgIDUuMS4gIExJU1AgSVB2NC1pbi1JUHY0IEhlYWRlciBGb3JtYXQg IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTcNCiAgICAgNS4yLiAgTElTUCBJUHY2LWluLUlQ djYgSGVhZGVyIEZvcm1hdCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxOA0KICAgICA1LjMu ICBUdW5uZWwgSGVhZGVyIEZpZWxkIERlc2NyaXB0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIDE5DQogICAgIDUuNC4gIERlYWxpbmcgd2l0aCBMYXJnZSBFbmNhcHN1bGF0ZWQgUGFja2V0 cyAgLiAuIC4gLiAuIC4gLiAuIC4gMjENCiAgICAgICA1LjQuMS4gIEEgU3RhdGVsZXNzIFNvbHV0 aW9uIHRvIE1UVSBIYW5kbGluZyAuIC4gLiAuIC4gLiAuIC4gLiAyMg0KICAgICAgIDUuNC4yLiAg QSBTdGF0ZWZ1bCBTb2x1dGlvbiB0byBNVFUgSGFuZGxpbmcgIC4gLiAuIC4gLiAuIC4gLiAuIDIy DQogICA2LiAgRUlELXRvLVJMT0MgTWFwcGluZyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gMjQNCiAgICAgNi4xLiAgTElTUCBJUHY0IGFuZCBJUHY2IENvbnRyb2wg UGxhbmUgUGFja2V0IEZvcm1hdHMgIC4gLiAuIC4gLiAyNA0KICAgICAgIDYuMS4xLiAgTElTUCBQ YWNrZXQgVHlwZSBBbGxvY2F0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDI2DQogICAg ICAgNi4xLjIuICBNYXAtUmVxdWVzdCBNZXNzYWdlIEZvcm1hdCAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gMjYNCiAgICAgICA2LjEuMy4gIEVJRC10by1STE9DIFVEUCBNYXAtUmVxdWVzdCBN ZXNzYWdlICAuIC4gLiAuIC4gLiAuIC4gLiAyOA0KICAgICAgIDYuMS40LiAgTWFwLVJlcGx5IE1l c3NhZ2UgRm9ybWF0IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDMwDQogICAgICAgNi4x LjUuICBFSUQtdG8tUkxPQyBVRFAgTWFwLVJlcGx5IE1lc3NhZ2UgIC4gLiAuIC4gLiAuIC4gLiAu IC4gMzMNCiAgICAgICA2LjEuNi4gIE1hcC1SZWdpc3RlciBNZXNzYWdlIEZvcm1hdCAgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAzNQ0KICAgICAgIDYuMS43LiAgRW5jYXBzdWFsdGVkIENvbnRy b2wgTWVzc2FnZSBGb3JtYXQgIC4gLiAuIC4gLiAuIC4gLiAuIDM3DQogICAgIDYuMi4gIFJvdXRp bmcgTG9jYXRvciBTZWxlY3Rpb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMzkN CiAgICAgNi4zLiAgUm91dGluZyBMb2NhdG9yIFJlYWNoYWJpbGl0eSAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiA0MA0KICAgICAgIDYuMy4xLiAgRWNobyBOb25jZSBBbGdvcml0aG0gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDQzDQogICAgICAgNi4zLjIuICBSTE9DIFBy b2JpbmcgQWxnb3JpdGhtIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gNDQNCiAgICAg Ni40LiAgUm91dGluZyBMb2NhdG9yIEhhc2hpbmcgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiA0NQ0KICAgICA2LjUuICBDaGFuZ2luZyB0aGUgQ29udGVudHMgb2YgRUlELXRvLVJM T0MgTWFwcGluZ3MgIC4gLiAuIC4gLiAuIDQ2DQogICAgICAgNi41LjEuICBDbG9jayBTd2VlcCAg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gNDYNCiAgICAgICA2LjUu Mi4gIFNvbGljaXQtTWFwLVJlcXVlc3QgKFNNUikgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiA0Nw0KICAgNy4gIFJvdXRlciBQZXJmb3JtYW5jZSBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIDQ5DQogICA4LiAgRGVwbG95bWVudCBTY2VuYXJpb3MgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gNTANCiAgICAgOC4xLiAgRmlyc3Qt aG9wL0xhc3QtaG9wIFR1bm5lbCBSb3V0ZXJzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA1MQ0K DQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAgICAg ICAgICAgICAgICAgIFtQYWdlIDJdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICBMb2NhdG9yL0lEIFNl cGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTANCg0KDQogICAgIDguMi4g IEJvcmRlci9FZGdlIFR1bm5lbCBSb3V0ZXJzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gNTENCiAgICAgOC4zLiAgSVNQIFByb3ZpZGVyLUVkZ2UgKFBFKSBUdW5uZWwgUm91dGVycyAg LiAuIC4gLiAuIC4gLiAuIC4gLiA1Mg0KICAgOS4gIFRyYWNlcm91dGUgQ29uc2lkZXJhdGlvbnMg IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDUzDQogICAgIDkuMS4gIElQdjYg VHJhY2Vyb3V0ZSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gNTQN CiAgICAgOS4yLiAgSVB2NCBUcmFjZXJvdXRlICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiA1NA0KICAgICA5LjMuICBUcmFjZXJvdXRlIHVzaW5nIE1peGVkIExvY2F0 b3JzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDU0DQogICAxMC4gTW9iaWxpdHkgQ29uc2lk ZXJhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gNTYNCiAgICAg MTAuMS4gU2l0ZSBNb2JpbGl0eSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiA1Ng0KICAgICAxMC4yLiBTbG93IEVuZHBvaW50IE1vYmlsaXR5IC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDU2DQogICAgIDEwLjMuIEZhc3QgRW5kcG9pbnQgTW9i aWxpdHkgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gNTYNCiAgICAgMTAuNC4g RmFzdCBOZXR3b3JrIE1vYmlsaXR5ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiA1OA0KICAgICAxMC41LiBMSVNQIE1vYmlsZSBOb2RlIE1vYmlsaXR5ICAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIDU4DQogICAxMS4gTXVsdGljYXN0IENvbnNpZGVyYXRpb25zIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gNjANCiAgIDEyLiBTZWN1cml0eSBD b25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA2MQ0K ICAgMTMuIFByb3RvdHlwZSBQbGFucyBhbmQgU3RhdHVzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIDYyDQogICAxNC4gUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gNjUNCiAgICAgMTQuMS4gTm9ybWF0aXZlIFJl ZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA2NQ0KICAgICAx NC4yLiBJbmZvcm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIDY2DQogICBBcHBlbmRpeCBBLiAgQWNrbm93bGVkZ21lbnRzIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gNjkNCiAgIEFwcGVuZGl4IEIuICBEb2N1bWVudCBDaGFu Z2UgTG9nIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA3MA0KICAgICBCLjEuICBD aGFuZ2VzIHRvIGRyYWZ0LWlldGYtbGlzcC0wNi50eHQgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IDcwDQogICAgIEIuMi4gIENoYW5nZXMgdG8gZHJhZnQtaWV0Zi1saXNwLTA1LnR4dCAgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gNzENCiAgICAgQi4zLiAgQ2hhbmdlcyB0byBkcmFmdC1pZXRmLWxp c3AtMDQudHh0ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA3MQ0KICAgICBCLjQuICBDaGFuZ2Vz IHRvIGRyYWZ0LWlldGYtbGlzcC0wMy50eHQgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDczDQog ICAgIEIuNS4gIENoYW5nZXMgdG8gZHJhZnQtaWV0Zi1saXNwLTAyLnR4dCAgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gNzMNCiAgICAgQi42LiAgQ2hhbmdlcyB0byBkcmFmdC1pZXRmLWxpc3AtMDEu dHh0ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA3NA0KICAgICBCLjcuICBDaGFuZ2VzIHRvIGRy YWZ0LWlldGYtbGlzcC0wMC50eHQgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDc0DQogICBBdXRo b3JzJyBBZGRyZXNzZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gNzUNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpG YXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMgSnVseSAxNiwgMjAxMCAgICAgICAgICAg ICAgICAgW1BhZ2UgM10NCgwNCkludGVybmV0LURyYWZ0ICAgIExvY2F0b3IvSUQgU2VwYXJhdGlv biBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAxMA0KDQoNCjEuICBSZXF1aXJlbWVudHMg Tm90YXRpb24NCg0KICAgVGhlIGtleSB3b3JkcyAiTVVTVCIsICJNVVNUIE5PVCIsICJSRVFVSVJF RCIsICJTSEFMTCIsICJTSEFMTCBOT1QiLA0KICAgIlNIT1VMRCIsICJTSE9VTEQgTk9UIiwgIlJF Q09NTUVOREVEIiwgIk1BWSIsIGFuZCAiT1BUSU9OQUwiIGluIHRoaXMNCiAgIGRvY3VtZW50IGFy ZSB0byBiZSBpbnRlcnByZXRlZCBhcyBkZXNjcmliZWQgaW4gW1JGQzIxMTldLg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGly ZXMgSnVseSAxNiwgMjAxMCAgICAgICAgICAgICAgICAgW1BhZ2UgNF0NCgwNCkludGVybmV0LURy YWZ0ICAgIExvY2F0b3IvSUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkg MjAxMA0KDQoNCjIuICBJbnRyb2R1Y3Rpb24NCg0KICAgTWFueSB5ZWFycyBvZiBkaXNjdXNzaW9u IGFib3V0IHRoZSBjdXJyZW50IElQIHJvdXRpbmcgYW5kIGFkZHJlc3NpbmcNCiAgIGFyY2hpdGVj dHVyZSBoYXZlIG5vdGVkIHRoYXQgaXRzIHVzZSBvZiBhIHNpbmdsZSBudW1iZXJpbmcgc3BhY2Ug KHRoZQ0KICAgIklQIGFkZHJlc3MiKSBmb3IgYm90aCBob3N0IHRyYW5zcG9ydCBzZXNzaW9uIGlk ZW50aWZpY2F0aW9uIGFuZA0KICAgbmV0d29yayByb3V0aW5nIGNyZWF0ZXMgc2NhbGluZyBpc3N1 ZXMgKHNlZSBbQ0hJQVBQQV0gYW5kIFtSRkMxNDk4XSkuDQogICBBIG51bWJlciBvZiBzY2FsaW5n IGJlbmVmaXRzIHdvdWxkIGJlIHJlYWxpemVkIGJ5IHNlcGFyYXRpbmcgdGhlDQogICBjdXJyZW50 IElQIGFkZHJlc3MgaW50byBzZXBhcmF0ZSBzcGFjZXMgZm9yIEVuZHBvaW50IElkZW50aWZpZXJz DQogICAoRUlEcykgYW5kIFJvdXRpbmcgTG9jYXRvcnMgKFJMT0NzKTsgYW1vbmcgdGhlbSBhcmU6 DQoNCiAgIDEuICBSZWR1Y3Rpb24gb2Ygcm91dGluZyB0YWJsZSBzaXplIGluIHRoZSAiZGVmYXVs dC1mcmVlIHpvbmUiIChERlopLg0KICAgICAgIFVzZSBvZiBhIHNlcGFyYXRlIG51bWJlcmluZyBz cGFjZSBmb3IgUkxPQ3Mgd2lsbCBhbGxvdyB0aGVtIHRvIGJlDQogICAgICAgYXNzaWduZWQgdG9w b2xvZ2ljYWxseSAoaW4gdG9kYXkncyBJbnRlcm5ldCwgUkxPQ3Mgd291bGQgYmUNCiAgICAgICBh c3NpZ25lZCBieSBwcm92aWRlcnMgYXQgY2xpZW50IG5ldHdvcmsgYXR0YWNobWVudCBwb2ludHMp LA0KICAgICAgIGdyZWF0bHkgaW1wcm92aW5nIGFnZ3JlZ2F0aW9uIGFuZCByZWR1Y2luZyB0aGUg bnVtYmVyIG9mDQogICAgICAgZ2xvYmFsbHktdmlzaWJsZSwgcm91dGFibGUgcHJlZml4ZXMuDQoN CiAgIDIuICBNb3JlIGNvc3QtZWZmZWN0aXZlIG11bHRpaG9taW5nIGZvciBzaXRlcyB0aGF0IGNv bm5lY3QgdG8NCiAgICAgICBkaWZmZXJlbnQgc2VydmljZSBwcm92aWRlcnMgd2hlcmUgdGhleSBj YW4gY29udHJvbCB0aGVpciBvd24NCiAgICAgICBwb2xpY2llcyBmb3IgcGFja2V0IGZsb3cgaW50 byB0aGUgc2l0ZSB3aXRob3V0IHVzaW5nIGV4dHJhDQogICAgICAgcm91dGluZyB0YWJsZSByZXNv dXJjZXMgb2YgY29yZSByb3V0ZXJzLg0KDQogICAzLiAgRWFzaW5nIG9mIHJlbnVtYmVyaW5nIGJ1 cmRlbiB3aGVuIGNsaWVudHMgY2hhbmdlIHByb3ZpZGVycy4NCiAgICAgICBCZWNhdXNlIGhvc3Qg RUlEcyBhcmUgbnVtYmVyZWQgZnJvbSBhIHNlcGFyYXRlLCBub24tcHJvdmlkZXItDQogICAgICAg YXNzaWduZWQgYW5kIG5vbi10b3BvbG9naWNhbGx5LWJvdW5kIHNwYWNlLCB0aGV5IGRvIG5vdCBu ZWVkIHRvDQogICAgICAgYmUgcmVudW1iZXJlZCB3aGVuIGEgY2xpZW50IHNpdGUgY2hhbmdlcyBp dHMgYXR0YWNobWVudCBwb2ludHMgdG8NCiAgICAgICB0aGUgbmV0d29yay4NCg0KICAgNC4gIFRy YWZmaWMgZW5naW5lZXJpbmcgY2FwYWJpbGl0aWVzIHRoYXQgY2FuIGJlIHBlcmZvcm1lZCBieSBu ZXR3b3JrDQogICAgICAgZWxlbWVudHMgYW5kIGRvIG5vdCBkZXBlbmQgb24gaW5qZWN0aW5nIGFk ZGl0aW9uYWwgc3RhdGUgaW50byB0aGUNCiAgICAgICByb3V0aW5nIHN5c3RlbS4gIFRoaXMgd2ls bCBmYWxsIG91dCBvZiB0aGUgbWVjaGFuaXNtIHRoYXQgaXMgdXNlZA0KICAgICAgIHRvIGltcGxl bWVudCB0aGUgRUlEL1JMT0Mgc3BsaXQgKHNlZSBTZWN0aW9uIDQpLg0KDQogICA1LiAgTW9iaWxp dHkgd2l0aG91dCBhZGRyZXNzIGNoYW5naW5nLiAgRXhpc3RpbmcgbW9iaWxpdHkgbWVjaGFuaXNt cw0KICAgICAgIHdpbGwgYmUgYWJsZSB0byB3b3JrIGluIGEgbG9jYXRvci9JRCBzZXBhcmF0aW9u IHNjZW5hcmlvLiAgSXQNCiAgICAgICB3aWxsIGJlIHBvc3NpYmxlIGZvciBhIGhvc3QgKG9yIGEg Y29sbGVjdGlvbiBvZiBob3N0cykgdG8gbW92ZSB0bw0KICAgICAgIGEgZGlmZmVyZW50IHBvaW50 IGluIHRoZSBuZXR3b3JrIHRvcG9sb2d5IGVpdGhlciByZXRhaW5pbmcgaXRzDQogICAgICAgaG9t ZS1iYXNlZCBhZGRyZXNzIG9yIGFjcXVpcmluZyBhIG5ldyBhZGRyZXNzIGJhc2VkIG9uIHRoZSBu ZXcNCiAgICAgICBuZXR3b3JrIGxvY2F0aW9uLiAgQSBuZXcgbmV0d29yayBsb2NhdGlvbiBjb3Vs ZCBiZSBhIHBoeXNpY2FsbHkNCiAgICAgICBkaWZmZXJlbnQgcG9pbnQgaW4gdGhlIG5ldHdvcmsg dG9wb2xvZ3kgb3IgdGhlIHNhbWUgcGh5c2ljYWwNCiAgICAgICBwb2ludCBvZiB0aGUgdG9wb2xv Z3kgd2l0aCBhIGRpZmZlcmVudCBwcm92aWRlci4NCg0KICAgVGhpcyBkcmFmdCBkZXNjcmliZXMg cHJvdG9jb2wgbWVjaGFuaXNtcyB0byBhY2hpZXZlIHRoZSBkZXNpcmVkDQogICBmdW5jdGlvbmFs IHNlcGFyYXRpb24uICBGb3IgZmxleGliaWxpdHksIHRoZSBtZWNoYW5pc20gdXNlZCBmb3INCiAg IGZvcndhcmRpbmcgcGFja2V0cyBpcyBkZWNvdXBsZWQgZnJvbSB0aGF0IHVzZWQgdG8gZGV0ZXJt aW5lIEVJRCB0bw0KICAgUkxPQyBtYXBwaW5ncy4gIFRoaXMgZG9jdW1lbnQgY292ZXJzIHRoZSBm b3JtZXIuICBGb3IgdGhlIGxhdGVyLCBzZWUNCiAgIFtDT05TXSwgW0FMVF0sIFtFTUFDU10sIFtS UE1EXSwgYW5kIFtORVJEXS4gIFRoaXMgd29yayBpcyBpbiByZXNwb25zZQ0KICAgdG8gYW5kIGlu dGVuZGVkIHRvIGFkZHJlc3MgdGhlIHByb2JsZW0gc3RhdGVtZW50IHRoYXQgY2FtZSBvdXQgb2Yg dGhlDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMgSnVseSAxNiwgMjAx MCAgICAgICAgICAgICAgICAgW1BhZ2UgNV0NCgwNCkludGVybmV0LURyYWZ0ICAgIExvY2F0b3Iv SUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAxMA0KDQoNCiAgIFJB V1MgZWZmb3J0IFtSRkM0OTg0XS4NCg0KICAgVGhlIFJvdXRpbmcgYW5kIEFkZHJlc3NpbmcgcHJv YmxlbSBzdGF0ZW1lbnQgY2FuIGJlIGZvdW5kIGluIFtSQURJUl0uDQoNCiAgIFRoaXMgZHJhZnQg Zm9jdXNlcyBvbiBhIHJvdXRlci1iYXNlZCBzb2x1dGlvbi4gIEJ1aWxkaW5nIHRoZSBzb2x1dGlv bg0KICAgaW50byB0aGUgbmV0d29yayB3aWxsIGZhY2lsaXRhdGUgaW5jcmVtZW50YWwgZGVwbG95 bWVudCBvZiB0aGUNCiAgIHRlY2hub2xvZ3kgb24gdGhlIEludGVybmV0LiAgTm90ZSB0aGF0IHdo aWxlIHRoZSBkZXRhaWxlZCBwcm90b2NvbA0KICAgc3BlY2lmaWNhdGlvbiBhbmQgZXhhbXBsZXMg aW4gdGhpcyBkb2N1bWVudCBhc3N1bWUgSVAgdmVyc2lvbiA0DQogICAoSVB2NCksIHRoZXJlIGlz IG5vdGhpbmcgaW4gdGhlIGRlc2lnbiB0aGF0IHByZWNsdWRlcyB1c2Ugb2YgdGhlIHNhbWUNCiAg IHRlY2huaXF1ZXMgYW5kIG1lY2hhbmlzbXMgZm9yIElQdjYuICBJdCBzaG91bGQgYmUgcG9zc2li bGUgZm9yIElQdjQNCiAgIHBhY2tldHMgdG8gdXNlIElQdjYgUkxPQ3MgYW5kIGZvciBJUHY2IEVJ RHMgdG8gYmUgbWFwcGVkIHRvIElQdjQNCiAgIFJMT0NzLg0KDQogICBSZWxhdGVkIHdvcmsgb24g aG9zdC1iYXNlZCBzb2x1dGlvbnMgaXMgZGVzY3JpYmVkIGluIFNoaW02IFtTSElNNl0NCiAgIGFu ZCBISVAgW1JGQzQ0MjNdLiAgUmVsYXRlZCB3b3JrIG9uIGEgcm91dGVyLWJhc2VkIHNvbHV0aW9u IGlzDQogICBkZXNjcmliZWQgaW4gW0dTRV0uICBUaGlzIGRyYWZ0IGF0dGVtcHRzIHRvIG5vdCBj b21wZXRlIG9yIG92ZXJsYXANCiAgIHdpdGggc3VjaCBzb2x1dGlvbnMgYW5kIHRoZSBwcm9wb3Nl ZCBwcm90b2NvbCBjaGFuZ2VzIGFyZSBleHBlY3RlZCB0bw0KICAgY29tcGxlbWVudCBhIGhvc3Qt YmFzZWQgbWVjaGFuaXNtIHdoZW4gVHJhZmZpYyBFbmdpbmVlcmluZw0KICAgZnVuY3Rpb25hbGl0 eSBpcyBkZXNpcmVkLg0KDQogICBTb21lIG9mIHRoZSBkZXNpZ24gZ29hbHMgb2YgdGhpcyBwcm9w b3NhbCBpbmNsdWRlOg0KDQogICAxLiAgUmVxdWlyZSBubyBoYXJkd2FyZSBvciBzb2Z0d2FyZSBj aGFuZ2VzIHRvIGVuZC1zeXN0ZW1zIChob3N0cykuDQoNCiAgIDIuICBNaW5pbWl6ZSByZXF1aXJl ZCBjaGFuZ2VzIHRvIEludGVybmV0IGluZnJhc3RydWN0dXJlLg0KDQogICAzLiAgQmUgaW5jcmVt ZW50YWxseSBkZXBsb3lhYmxlLg0KDQogICA0LiAgUmVxdWlyZSBubyByb3V0ZXIgaGFyZHdhcmUg Y2hhbmdlcy4NCg0KICAgNS4gIE1pbmltaXplIHRoZSBudW1iZXIgb2Ygcm91dGVycyB3aGljaCBo YXZlIHRvIGJlIG1vZGlmaWVkLiAgSW4NCiAgICAgICBwYXJ0aWN1bGFyLCBtb3N0IGN1c3RvbWVy IHNpdGUgcm91dGVycyBhbmQgbm8gY29yZSByb3V0ZXJzDQogICAgICAgcmVxdWlyZSBjaGFuZ2Vz Lg0KDQogICA2LiAgTWluaW1pemUgcm91dGVyIHNvZnR3YXJlIGNoYW5nZXMgaW4gdGhvc2Ugcm91 dGVycyB3aGljaCBhcmUNCiAgICAgICBhZmZlY3RlZC4NCg0KICAgNy4gIEF2b2lkIG9yIG1pbmlt aXplIHBhY2tldCBsb3NzIHdoZW4gRUlELXRvLVJMT0MgbWFwcGluZ3MgbmVlZCB0bw0KICAgICAg IGJlIHBlcmZvcm1lZC4NCg0KICAgVGhlcmUgYXJlIDQgdmFyaWFudHMgb2YgTElTUCwgd2hpY2gg ZGlmZmVyIGFsb25nIGEgc3BlY3RydW0gb2Ygc3Ryb25nDQogICB0byB3ZWFrIGRlcGVuZGVuY2Ug b24gdGhlIHRvcG9sb2dpY2FsIG5hdHVyZSBhbmQgcG9zc2libGUgbmVlZCBmb3INCiAgIHJvdXRh YmlsaXR5IG9mIEVJRHMuICBUaGUgdmFyaWFudHMgYXJlOg0KDQoNCg0KDQoNCg0KDQoNCkZhcmlu YWNjaSwgZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAg ICBbUGFnZSA2XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFBy b3RvY29sIChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoNCg0KICAgTElTUCAxOiAgdXNlcyBFSURz IHRoYXQgYXJlIHJvdXRhYmxlIHRocm91Z2ggdGhlIFJMT0MgdG9wb2xvZ3kgZm9yDQogICAgICBi b290c3RyYXBwaW5nIEVJRC10by1STE9DIG1hcHBpbmdzLiAgW0xJU1AxXSBUaGlzIHdhcyBpbnRl bmRlZCBhcw0KICAgICAgYSBwcm90b3R5cGluZyBtZWNoYW5pc20gZm9yIGVhcmx5IHByb3RvY29s IGltcGxlbWVudGF0aW9uLiAgSXQgaXMNCiAgICAgIG5vdyBkZXByZWNhdGVkIGFuZCBzaG91bGQg bm90IGJlIGRlcGxveWVkLg0KDQogICBMSVNQIDEuNTogIHVzZXMgRUlEcyB0aGF0IGFyZSByb3V0 YWJsZSBmb3IgYm9vdHN0cmFwcGluZyBFSUQtdG8tUkxPQw0KICAgICAgbWFwcGluZ3M7IHN1Y2gg cm91dGluZyBpcyB2aWEgYSBzZXBhcmF0ZSB0b3BvbG9neS4NCg0KICAgTElTUCAyOiAgdXNlcyBF SURTIHRoYXQgYXJlIG5vdCByb3V0YWJsZSBhbmQgRUlELXRvLVJMT0MgbWFwcGluZ3MgYXJlDQog ICAgICBpbXBsZW1lbnRlZCB3aXRoaW4gdGhlIEROUy4gIFtMSVNQMl0NCg0KICAgTElTUCAzOiAg dXNlcyBub24tcm91dGFibGUgRUlEcyB0aGF0IGFyZSB1c2VkIGFzIGxvb2t1cCBrZXlzIGZvciBh DQogICAgICBuZXcgRUlELXRvLVJMT0MgbWFwcGluZyBkYXRhYmFzZS4gIFVzZSBvZiBEaXN0cmli dXRlZCBIYXNoIFRhYmxlcw0KICAgICAgW0RIVHNdIFtMSVNQREhUXSB0byBpbXBsZW1lbnQgc3Vj aCBhIGRhdGFiYXNlIHdvdWxkIGJlIGFuIGFyZWEgdG8NCiAgICAgIGV4cGxvcmUuICBPdGhlciBl eGFtcGxlcyBvZiBuZXcgbWFwcGluZyBkYXRhYmFzZSBzZXJ2aWNlcyBhcmUNCiAgICAgIFtDT05T XSwgW0FMVF0sIFtSUE1EXSwgW05FUkRdLCBhbmQgW0FQVF0uDQoNCiAgIFRoaXMgZG9jdW1lbnQg b24gTElTUCAxLjUsIGFuZCBMSVNQIDMgdmFyaWFudHMsIGJvdGggb2Ygd2hpY2ggcmVseSBvbg0K ICAgYSByb3V0ZXItYmFzZWQgZGlzdHJpYnV0ZWQgY2FjaGUgYW5kIGRhdGFiYXNlIGZvciBFSUQt dG8tUkxPQw0KICAgbWFwcGluZ3MuICBUaGUgTElTUCAxLjAgbWVjaGFuaXNtIHdvcmtzIGJ1dCBk b2VzIG5vdCBhbGxvdyByZWR1Y3Rpb24NCiAgIG9mIHJvdXRpbmcgaW5mb3JtYXRpb24gaW4gdGhl IGRlZmF1bHQtZnJlZS16b25lIG9mIHRoZSBJbnRlcm5ldC4gIFRoZQ0KICAgTElTUCAyIG1lY2hh bmlzbXMgYXJlIHB1dCBvbiBob2xkIGFuZCBtYXkgbmV2ZXIgY29tZSB0byBmcnVpdGlvbg0KICAg c2luY2UgaXQgaXMgbm90IGFyY2hpdGVjdHVyYWxseSBwdXJlIHRvIGhhdmUgcm91dGluZyBkZXBl bmQgb24NCiAgIGRpcmVjdG9yeSBhbmQgZGlyZWN0b3J5IGRlcGVuZCBvbiByb3V0aW5nLiAgVGhl IExJU1AgMyBtZWNoYW5pc21zDQogICB3aWxsIGJlIGRvY3VtZW50ZWQgZWxzZXdoZXJlIGJ1dCBt YXkgdXNlIHRoZSBjb250cm9sLXBsYW5lIG9wdGlvbnMNCiAgIHNwZWNpZmllZCBpbiB0aGlzIHNw ZWNpZmljYXRpb24uDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAg ICAgICAgICAgICAgICBbUGFnZSA3XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBT ZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoNCg0KMy4gIERlZmlu aXRpb24gb2YgVGVybXMNCg0KICAgUHJvdmlkZXIgSW5kZXBlbmRlbnQgKFBJKSBBZGRyZXNzZXM6 ICAgYW4gYWRkcmVzcyBibG9jayBhc3NpZ25lZCBmcm9tDQogICAgICBhIHBvb2wgd2hlcmUgYmxv Y2tzIGFyZSBub3QgYXNzb2NpYXRlZCB3aXRoIGFueSBwYXJ0aWN1bGFyDQogICAgICBsb2NhdGlv biBpbiB0aGUgbmV0d29yayAoZS5nLiBmcm9tIGEgcGFydGljdWxhciBzZXJ2aWNlIHByb3ZpZGVy KSwNCiAgICAgIGFuZCBpcyB0aGVyZWZvcmUgbm90IHRvcG9sb2dpY2FsbHkgYWdncmVnYXRhYmxl IGluIHRoZSByb3V0aW5nDQogICAgICBzeXN0ZW0uDQoNCiAgIFByb3ZpZGVyIEFzc2lnbmVkIChQ QSkgQWRkcmVzc2VzOiAgIGEgYmxvY2sgb2YgSVAgYWRkcmVzc2VzIHRoYXQgYXJlDQogICAgICBh c3NpZ25lZCB0byBhIHNpdGUgYnkgZWFjaCBzZXJ2aWNlIHByb3ZpZGVyIHRvIHdoaWNoIGEgc2l0 ZQ0KICAgICAgY29ubmVjdHMuICBUeXBpY2FsbHksIGVhY2ggYmxvY2sgaXMgc3ViLWJsb2NrIG9m IGEgc2VydmljZQ0KICAgICAgcHJvdmlkZXIgQ0lEUiBibG9jayBhbmQgaXMgYWdncmVnYXRlZCBp bnRvIHRoZSBsYXJnZXIgYmxvY2sgYmVmb3JlDQogICAgICBiZWluZyBhZHZlcnRpc2VkIGludG8g dGhlIGdsb2JhbCBJbnRlcm5ldC4gIFRyYWRpdGlvbmFsbHksIElQDQogICAgICBtdWx0aWhvbWlu ZyBoYXMgYmVlbiBpbXBsZW1lbnRlZCBieSBlYWNoIG11bHRpLWhvbWVkIHNpdGUNCiAgICAgIGFj cXVpcmluZyBpdHMgb3duLCBnbG9iYWxseS12aXNpYmxlIHByZWZpeC4gIExJU1AgdXNlcyBvbmx5 DQogICAgICB0b3BvbG9naWNhbGx5LWFzc2lnbmVkIGFuZCBhZ2dyZWdhdGFibGUgYWRkcmVzcyBi bG9ja3MgZm9yIFJMT0NzLA0KICAgICAgZWxpbWluYXRpbmcgdGhpcyBkZW1vbnN0cmFibHkgbm9u LXNjYWxhYmxlIHByYWN0aWNlLg0KDQogICBSb3V0aW5nIExvY2F0b3IgKFJMT0MpOiAgIHRoZSBJ UHY0IG9yIElQdjYgYWRkcmVzcyBvZiBhbiBlZ3Jlc3MNCiAgICAgIHR1bm5lbCByb3V0ZXIgKEVU UikuICBJdCBpcyB0aGUgb3V0cHV0IG9mIGEgRUlELXRvLVJMT0MgbWFwcGluZw0KICAgICAgbG9v a3VwLiAgQW4gRUlEIG1hcHMgdG8gb25lIG9yIG1vcmUgUkxPQ3MuICBUeXBpY2FsbHksIFJMT0Nz IGFyZQ0KICAgICAgbnVtYmVyZWQgZnJvbSB0b3BvbG9naWNhbGx5LWFnZ3JlZ2F0YWJsZSBibG9j a3MgdGhhdCBhcmUgYXNzaWduZWQNCiAgICAgIHRvIGEgc2l0ZSBhdCBlYWNoIHBvaW50IHRvIHdo aWNoIGl0IGF0dGFjaGVzIHRvIHRoZSBnbG9iYWwNCiAgICAgIEludGVybmV0OyB3aGVyZSB0aGUg dG9wb2xvZ3kgaXMgZGVmaW5lZCBieSB0aGUgY29ubmVjdGl2aXR5IG9mDQogICAgICBwcm92aWRl ciBuZXR3b3JrcywgUkxPQ3MgY2FuIGJlIHRob3VnaHQgb2YgYXMgUEEgYWRkcmVzc2VzLg0KICAg ICAgTXVsdGlwbGUgUkxPQ3MgY2FuIGJlIGFzc2lnbmVkIHRvIHRoZSBzYW1lIEVUUiBkZXZpY2Ug b3IgdG8NCiAgICAgIG11bHRpcGxlIEVUUiBkZXZpY2VzIGF0IGEgc2l0ZS4NCg0KICAgRW5kcG9p bnQgSUQgKEVJRCk6ICAgYSAzMi1iaXQgKGZvciBJUHY0KSBvciAxMjgtYml0IChmb3IgSVB2Nikg dmFsdWUNCiAgICAgIHVzZWQgaW4gdGhlIHNvdXJjZSBhbmQgZGVzdGluYXRpb24gYWRkcmVzcyBm aWVsZHMgb2YgdGhlIGZpcnN0DQogICAgICAobW9zdCBpbm5lcikgTElTUCBoZWFkZXIgb2YgYSBw YWNrZXQuICBUaGUgaG9zdCBvYnRhaW5zIGENCiAgICAgIGRlc3RpbmF0aW9uIEVJRCB0aGUgc2Ft ZSB3YXkgaXQgb2J0YWlucyBhbiBkZXN0aW5hdGlvbiBhZGRyZXNzDQogICAgICB0b2RheSwgZm9y IGV4YW1wbGUgdGhyb3VnaCBhIEROUyBsb29rdXAgb3IgU0lQIGV4Y2hhbmdlLiAgVGhlDQogICAg ICBzb3VyY2UgRUlEIGlzIG9idGFpbmVkIHZpYSBleGlzdGluZyBtZWNoYW5pc21zIHVzZWQgdG8g c2V0IGENCiAgICAgIGhvc3QncyAibG9jYWwiIElQIGFkZHJlc3MuICBBbiBFSUQgaXMgYWxsb2Nh dGVkIHRvIGEgaG9zdCBmcm9tIGFuDQogICAgICBFSUQtcHJlZml4IGJsb2NrIGFzc29jaWF0ZWQg d2l0aCB0aGUgc2l0ZSB3aGVyZSB0aGUgaG9zdCBpcw0KICAgICAgbG9jYXRlZC4gIEFuIEVJRCBj YW4gYmUgdXNlZCBieSBhIGhvc3QgdG8gcmVmZXIgdG8gb3RoZXIgaG9zdHMuDQogICAgICBFSURz IE1VU1QgTk9UIGJlIHVzZWQgYXMgTElTUCBSTE9Dcy4gIE5vdGUgdGhhdCBFSUQgYmxvY2tzIG1h eSBiZQ0KICAgICAgYXNzaWduZWQgaW4gYSBoaWVyYXJjaGljYWwgbWFubmVyLCBpbmRlcGVuZGVu dCBvZiB0aGUgbmV0d29yaw0KICAgICAgdG9wb2xvZ3ksIHRvIGZhY2lsaXRhdGUgc2NhbGluZyBv ZiB0aGUgbWFwcGluZyBkYXRhYmFzZS4gIEluDQogICAgICBhZGRpdGlvbiwgYW4gRUlEIGJsb2Nr IGFzc2lnbmVkIHRvIGEgc2l0ZSBtYXkgaGF2ZSBzaXRlLWxvY2FsDQogICAgICBzdHJ1Y3R1cmUg KHN1Ym5ldHRpbmcpIGZvciByb3V0aW5nIHdpdGhpbiB0aGUgc2l0ZTsgdGhpcyBzdHJ1Y3R1cmUN CiAgICAgIGlzIG5vdCB2aXNpYmxlIHRvIHRoZSBnbG9iYWwgcm91dGluZyBzeXN0ZW0uICBXaGVu IHVzZWQgaW4NCiAgICAgIGRpc2N1c3Npb25zIHdpdGggb3RoZXIgTG9jYXRvci9JRCBzZXBhcmF0 aW9uIHByb3Bvc2FscywgYSBMSVNQIEVJRA0KICAgICAgd2lsbCBiZSBjYWxsZWQgYSAiTEVJRCIu ICBUaHJvdWdob3V0IHRoaXMgZG9jdW1lbnQsIGFueSByZWZlcmVuY2VzDQogICAgICB0byAiRUlE IiByZWZlcnMgdG8gYW4gTEVJRC4NCg0KDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAg IEV4cGlyZXMgSnVseSAxNiwgMjAxMCAgICAgICAgICAgICAgICAgW1BhZ2UgOF0NCgwNCkludGVy bmV0LURyYWZ0ICAgIExvY2F0b3IvSUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEph bnVhcnkgMjAxMA0KDQoNCiAgIEVJRC1wcmVmaXg6ICAgQSBwb3dlci1vZi0yIGJsb2NrIG9mIEVJ RHMgd2hpY2ggYXJlIGFsbG9jYXRlZCB0byBhDQogICAgICBzaXRlIGJ5IGFuIGFkZHJlc3MgYWxs b2NhdGlvbiBhdXRob3JpdHkuICBFSUQtcHJlZml4ZXMgYXJlDQogICAgICBhc3NvY2lhdGVkIHdp dGggYSBzZXQgb2YgUkxPQyBhZGRyZXNzZXMgd2hpY2ggbWFrZSB1cCBhICJkYXRhYmFzZQ0KICAg ICAgbWFwcGluZyIuICBFSUQtcHJlZml4IGFsbG9jYXRpb25zIGNhbiBiZSBicm9rZW4gdXAgaW50 byBzbWFsbGVyDQogICAgICBibG9ja3Mgd2hlbiBhbiBSTE9DIHNldCBpcyB0byBiZSBhc3NvY2lh dGVkIHdpdGggdGhlIHNtYWxsZXIgRUlELQ0KICAgICAgcHJlZml4LiAgQSBnbG9iYWxseSByb3V0 ZWQgYWRkcmVzcyBibG9jayAod2hldGhlciBQSSBvciBQQSkgaXMgbm90DQogICAgICBhbiBFSUQt cHJlZml4LiAgSG93ZXZlciwgYSBnbG9iYWxseSByb3V0ZWQgYWRkcmVzcyBibG9jayBtYXkgYmUN CiAgICAgIHJlbW92ZWQgZnJvbSBnbG9iYWwgcm91dGluZyBhbmQgcmV1c2VkIGFzIGFuIEVJRC1w cmVmaXguICBBIHNpdGUNCiAgICAgIHRoYXQgcmVjZWl2ZXMgYW4gZXhwbGljaXRseSBhbGxvY2F0 ZWQgRUlELXByZWZpeCBtYXkgbm90IHVzZSB0aGF0DQogICAgICBFSUQtcHJlZml4IGFzIGEgZ2xv YmFsbHkgcm91dGVkIHByZWZpeCBhc3NpZ25lZCB0byBSTE9Dcy4NCg0KICAgRW5kLXN5c3RlbTog ICBpcyBhbiBJUHY0IG9yIElQdjYgZGV2aWNlIHRoYXQgb3JpZ2luYXRlcyBwYWNrZXRzIHdpdGgN CiAgICAgIGEgc2luZ2xlIElQdjQgb3IgSVB2NiBoZWFkZXIuICBUaGUgZW5kLXN5c3RlbSBzdXBw bGllcyBhbiBFSUQNCiAgICAgIHZhbHVlIGZvciB0aGUgZGVzdGluYXRpb24gYWRkcmVzcyBmaWVs ZCBvZiB0aGUgSVAgaGVhZGVyIHdoZW4NCiAgICAgIGNvbW11bmljYXRpbmcgZ2xvYmFsbHkgKGku ZS4gb3V0c2lkZSBvZiBpdHMgcm91dGluZyBkb21haW4pLiAgQW4NCiAgICAgIGVuZC1zeXN0ZW0g Y2FuIGJlIGEgaG9zdCBjb21wdXRlciwgYSBzd2l0Y2ggb3Igcm91dGVyIGRldmljZSwgb3INCiAg ICAgIGFueSBuZXR3b3JrIGFwcGxpYW5jZS4NCg0KICAgSW5ncmVzcyBUdW5uZWwgUm91dGVyIChJ VFIpOiAgIGEgcm91dGVyIHdoaWNoIGFjY2VwdHMgYW4gSVAgcGFja2V0DQogICAgICB3aXRoIGEg c2luZ2xlIElQIGhlYWRlciAobW9yZSBwcmVjaXNlbHksIGFuIElQIHBhY2tldCB0aGF0IGRvZXMN CiAgICAgIG5vdCBjb250YWluIGEgTElTUCBoZWFkZXIpLiAgVGhlIHJvdXRlciB0cmVhdHMgdGhp cyAiaW5uZXIiIElQDQogICAgICBkZXN0aW5hdGlvbiBhZGRyZXNzIGFzIGFuIEVJRCBhbmQgcGVy Zm9ybXMgYW4gRUlELXRvLVJMT0MgbWFwcGluZw0KICAgICAgbG9va3VwLiAgVGhlIHJvdXRlciB0 aGVuIHByZXBlbmRzIGFuICJvdXRlciIgSVAgaGVhZGVyIHdpdGggb25lIG9mDQogICAgICBpdHMg Z2xvYmFsbHktcm91dGFibGUgUkxPQ3MgaW4gdGhlIHNvdXJjZSBhZGRyZXNzIGZpZWxkIGFuZCB0 aGUNCiAgICAgIHJlc3VsdCBvZiB0aGUgbWFwcGluZyBsb29rdXAgaW4gdGhlIGRlc3RpbmF0aW9u IGFkZHJlc3MgZmllbGQuDQogICAgICBOb3RlIHRoYXQgdGhpcyBkZXN0aW5hdGlvbiBSTE9DIG1h eSBiZSBhbiBpbnRlcm1lZGlhdGUsIHByb3h5DQogICAgICBkZXZpY2UgdGhhdCBoYXMgYmV0dGVy IGtub3dsZWRnZSBvZiB0aGUgRUlELXRvLVJMT0MgbWFwcGluZyBjbG9zZXINCiAgICAgIHRvIHRo ZSBkZXN0aW5hdGlvbiBFSUQuICBJbiBnZW5lcmFsLCBhbiBJVFIgcmVjZWl2ZXMgSVAgcGFja2V0 cw0KICAgICAgZnJvbSBzaXRlIGVuZC1zeXN0ZW1zIG9uIG9uZSBzaWRlIGFuZCBzZW5kcyBMSVNQ LWVuY2Fwc3VsYXRlZCBJUA0KICAgICAgcGFja2V0cyB0b3dhcmQgdGhlIEludGVybmV0IG9uIHRo ZSBvdGhlciBzaWRlLg0KDQogICAgICBTcGVjaWZpY2FsbHksIHdoZW4gYSBzZXJ2aWNlIHByb3Zp ZGVyIHByZXBlbmRzIGEgTElTUCBoZWFkZXIgZm9yDQogICAgICBUcmFmZmljIEVuZ2luZWVyaW5n IHB1cnBvc2VzLCB0aGUgcm91dGVyIHRoYXQgZG9lcyB0aGlzIGlzIGFsc28NCiAgICAgIHJlZ2Fy ZGVkIGFzIGFuIElUUi4gIFRoZSBvdXRlciBSTE9DIHRoZSBJU1AgSVRSIHVzZXMgY2FuIGJlIGJh c2VkDQogICAgICBvbiB0aGUgb3V0ZXIgZGVzdGluYXRpb24gYWRkcmVzcyAodGhlIG9yaWdpbmF0 aW5nIElUUidzIHN1cHBsaWVkDQogICAgICBSTE9DKSBvciB0aGUgaW5uZXIgZGVzdGluYXRpb24g YWRkcmVzcyAodGhlIG9yaWdpbmF0aW5nIGhvc3RzDQogICAgICBzdXBwbGllZCBFSUQpLg0KDQog ICBURS1JVFI6ICAgaXMgYW4gSVRSIHRoYXQgaXMgZGVwbG95ZWQgaW4gYSBzZXJ2aWNlIHByb3Zp ZGVyIG5ldHdvcmsNCiAgICAgIHRoYXQgcHJlcGVuZHMgYW4gYWRkaXRpb25hbCBMSVNQIGhlYWRl ciBmb3IgVHJhZmZpYyBFbmdpbmVlcmluZw0KICAgICAgcHVycG9zZXMuDQoNCiAgIEVncmVzcyBU dW5uZWwgUm91dGVyIChFVFIpOiAgIGEgcm91dGVyIHRoYXQgYWNjZXB0cyBhbiBJUCBwYWNrZXQN CiAgICAgIHdoZXJlIHRoZSBkZXN0aW5hdGlvbiBhZGRyZXNzIGluIHRoZSAib3V0ZXIiIElQIGhl YWRlciBpcyBvbmUgb2YNCiAgICAgIGl0cyBvd24gUkxPQ3MuICBUaGUgcm91dGVyIHN0cmlwcyB0 aGUgIm91dGVyIiBoZWFkZXIgYW5kIGZvcndhcmRzDQogICAgICB0aGUgcGFja2V0IGJhc2VkIG9u IHRoZSBuZXh0IElQIGhlYWRlciBmb3VuZC4gIEluIGdlbmVyYWwsIGFuIEVUUg0KICAgICAgcmVj ZWl2ZXMgTElTUC1lbmNhcHN1bGF0ZWQgSVAgcGFja2V0cyBmcm9tIHRoZSBJbnRlcm5ldCBvbiBv bmUNCiAgICAgIHNpZGUgYW5kIHNlbmRzIGRlY2Fwc3VsYXRlZCBJUCBwYWNrZXRzIHRvIHNpdGUg ZW5kLXN5c3RlbXMgb24gdGhlDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGly ZXMgSnVseSAxNiwgMjAxMCAgICAgICAgICAgICAgICAgW1BhZ2UgOV0NCgwNCkludGVybmV0LURy YWZ0ICAgIExvY2F0b3IvSUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkg MjAxMA0KDQoNCiAgICAgIG90aGVyIHNpZGUuICBFVFIgZnVuY3Rpb25hbGl0eSBkb2VzIG5vdCBo YXZlIHRvIGJlIGxpbWl0ZWQgdG8gYQ0KICAgICAgcm91dGVyIGRldmljZS4gIEEgc2VydmVyIGhv c3QgY2FuIGJlIHRoZSBlbmRwb2ludCBvZiBhIExJU1AgdHVubmVsDQogICAgICBhcyB3ZWxsLg0K DQogICBURS1FVFI6ICAgaXMgYW4gRVRSIHRoYXQgaXMgZGVwbG95ZWQgaW4gYSBzZXJ2aWNlIHBy b3ZpZGVyIG5ldHdvcmsNCiAgICAgIHRoYXQgc3RyaXBzIGFuIG91dGVyIExJU1AgaGVhZGVyIGZv ciBUcmFmZmljIEVuZ2luZWVyaW5nIHB1cnBvc2VzLg0KDQogICB4VFI6ICAgaXMgYSByZWZlcmVu Y2UgdG8gYW4gSVRSIG9yIEVUUiB3aGVuIGRpcmVjdGlvbiBvZiBkYXRhIGZsb3cgaXMNCiAgICAg IG5vdCBwYXJ0IG9mIHRoZSBjb250ZXh0IGRlc2NyaXB0aW9uLiB4VFIgcmVmZXJzIHRvIHRoZSBy b3V0ZXIgdGhhdA0KICAgICAgaXMgdGhlIHR1bm5lbCBlbmRwb2ludC4gIFVzZWQgc3lub255bW91 c2x5IHdpdGggdGhlIHRlcm0gIlR1bm5lbA0KICAgICAgUm91dGVyIi4gIEZvciBleGFtcGxlLCAi QW4geFRSIGNhbiBiZSBsb2NhdGVkIGF0IHRoZSBDdXN0b21lciBFZGdlDQogICAgICAoQ0UpIHJv dXRlciIsIG1lYW5pbmcgYm90aCBJVFIgYW5kIEVUUiBmdW5jdGlvbmFsaXR5IGlzIGF0IHRoZSBD RQ0KICAgICAgcm91dGVyLg0KDQogICBFSUQtdG8tUkxPQyBDYWNoZTogICBhIHNob3J0LWxpdmVk LCBvbi1kZW1hbmQgdGFibGUgaW4gYW4gSVRSIHRoYXQNCiAgICAgIHN0b3JlcywgdHJhY2tzLCBh bmQgaXMgcmVzcG9uc2libGUgZm9yIHRpbWluZy1vdXQgYW5kIG90aGVyd2lzZQ0KICAgICAgdmFs aWRhdGluZyBFSUQtdG8tUkxPQyBtYXBwaW5ncy4gIFRoaXMgY2FjaGUgaXMgZGlzdGluY3QgZnJv bSB0aGUNCiAgICAgIGZ1bGwgImRhdGFiYXNlIiBvZiBFSUQtdG8tUkxPQyBtYXBwaW5ncywgaXQg aXMgZHluYW1pYywgbG9jYWwgdG8NCiAgICAgIHRoZSBJVFIocyksIGFuZCByZWxhdGl2ZWx5IHNt YWxsIHdoaWxlIHRoZSBkYXRhYmFzZSBpcw0KICAgICAgZGlzdHJpYnV0ZWQsIHJlbGF0aXZlbHkg c3RhdGljLCBhbmQgbXVjaCBtb3JlIGdsb2JhbCBpbiBzY29wZS4NCg0KICAgRUlELXRvLVJMT0Mg RGF0YWJhc2U6ICAgYSBnbG9iYWwgZGlzdHJpYnV0ZWQgZGF0YWJhc2UgdGhhdCBjb250YWlucw0K ICAgICAgYWxsIGtub3duIEVJRC1wcmVmaXggdG8gUkxPQyBtYXBwaW5ncy4gIEVhY2ggcG90ZW50 aWFsIEVUUg0KICAgICAgdHlwaWNhbGx5IGNvbnRhaW5zIGEgc21hbGwgcGllY2Ugb2YgdGhlIGRh dGFiYXNlOiB0aGUgRUlELXRvLVJMT0MNCiAgICAgIG1hcHBpbmdzIGZvciB0aGUgRUlEIHByZWZp eGVzICJiZWhpbmQiIHRoZSByb3V0ZXIuICBUaGVzZSBtYXAgdG8NCiAgICAgIG9uZSBvZiB0aGUg cm91dGVyJ3Mgb3duLCBnbG9iYWxseS12aXNpYmxlLCBJUCBhZGRyZXNzZXMuDQoNCiAgIFJlY3Vy c2l2ZSBUdW5uZWxpbmc6ICAgd2hlbiBhIHBhY2tldCBoYXMgbW9yZSB0aGFuIG9uZSBMSVNQIElQ DQogICAgICBoZWFkZXIuICBBZGRpdGlvbmFsIGxheWVycyBvZiB0dW5uZWxpbmcgbWF5IGJlIGVt cGxveWVkIHRvDQogICAgICBpbXBsZW1lbnQgdHJhZmZpYyBlbmdpbmVlcmluZyBvciBvdGhlciBy ZS1yb3V0aW5nIGFzIG5lZWRlZC4gIFdoZW4NCiAgICAgIHRoaXMgaXMgZG9uZSwgYW4gYWRkaXRp b25hbCAib3V0ZXIiIExJU1AgaGVhZGVyIGlzIGFkZGVkIGFuZCB0aGUNCiAgICAgIG9yaWdpbmFs IFJMT0NzIGFyZSBwcmVzZXJ2ZWQgaW4gdGhlICJpbm5lciIgaGVhZGVyLiAgQW55DQogICAgICBy ZWZlcmVuY2VzIHRvIHR1bm5lbHMgaW4gdGhpcyBzcGVjaWZpY2F0aW9uIHJlZmVycyB0byBkeW5h bWljDQogICAgICBlbmNhcHN1bGF0aW5nIHR1bm5lbHMgYW5kIG5ldmVyIGFyZSB0aGV5IHN0YXRp Y2FsbHkgY29uZmlndXJlZC4NCg0KICAgUmVlbmNhcHN1bGF0aW5nIFR1bm5lbHM6ICAgd2hlbiBh IHBhY2tldCBoYXMgbm8gbW9yZSB0aGFuIG9uZSBMSVNQIElQDQogICAgICBoZWFkZXIgKHR3byBJ UCBoZWFkZXJzIHRvdGFsKSBhbmQgd2hlbiBpdCBuZWVkcyB0byBiZSBkaXZlcnRlZCB0bw0KICAg ICAgbmV3IFJMT0MsIGFuIEVUUiBjYW4gZGVjYXBzdWxhdGUgdGhlIHBhY2tldCAocmVtb3ZlIHRo ZSBMSVNQDQogICAgICBoZWFkZXIpIGFuZCBwcmVwZW5kcyBhIG5ldyB0dW5uZWwgaGVhZGVyLCB3 aXRoIG5ldyBSTE9DLCBvbiB0byB0aGUNCiAgICAgIHBhY2tldC4gIERvaW5nIHRoaXMgYWxsb3dz IGEgcGFja2V0IHRvIGJlIHJlLXJvdXRlZCBieSB0aGUgcmUtDQogICAgICBlbmNhcHN1bGF0aW5n IHJvdXRlciB3aXRob3V0IGFkZGluZyB0aGUgb3ZlcmhlYWQgb2YgYWRkaXRpb25hbA0KICAgICAg dHVubmVsIGhlYWRlcnMuICBBbnkgcmVmZXJlbmNlcyB0byB0dW5uZWxzIGluIHRoaXMgc3BlY2lm aWNhdGlvbg0KICAgICAgcmVmZXJzIHRvIGR5bmFtaWMgZW5jYXBzdWxhdGluZyB0dW5uZWxzIGFu ZCBuZXZlciBhcmUgdGhleQ0KICAgICAgc3RhdGljYWxseSBjb25maWd1cmVkLg0KDQoNCg0KDQoN Cg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMgSnVseSAxNiwgMjAxMCAgICAg ICAgICAgICAgICBbUGFnZSAxMF0NCgwNCkludGVybmV0LURyYWZ0ICAgIExvY2F0b3IvSUQgU2Vw YXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAxMA0KDQoNCiAgIExJU1AgSGVh ZGVyOiAgIGEgdGVybSB1c2VkIGluIHRoaXMgZG9jdW1lbnQgdG8gcmVmZXIgdG8gdGhlIG91dGVy DQogICAgICBJUHY0IG9yIElQdjYgaGVhZGVyLCBhIFVEUCBoZWFkZXIsIGFuZCBhIExJU1Atc3Bl Y2lmaWMgOC1ieXRlDQogICAgICBoZWFkZXIgdGhhdCBmb2xsb3dzIHRoZSBVRFAgaGVhZGVyLCBh biBJVFIgcHJlcGVuZHMgb3IgYW4gRVRSDQogICAgICBzdHJpcHMuDQoNCiAgIEFkZHJlc3MgRmFt aWx5IEluZGljYXRvciAoQUZJKTogICBhIHRlcm0gdXNlZCB0byBkZXNjcmliZSBhbiBhZGRyZXNz DQogICAgICBlbmNvZGluZyBpbiBhIHBhY2tldC4gIEFuIGFkZHJlc3MgZmFtaWx5IGN1cnJlbnRs eSBwZXJ0YWlucyB0byBhbg0KICAgICAgSVB2NCBvciBJUHY2IGFkZHJlc3MuICBTZWUgW0FGSV0g Zm9yIGRldGFpbHMuICBBbiBBRkkgdmFsdWUgb2YgMA0KICAgICAgdXNlZCBpbiB0aGlzIHNwZWNp ZmljYXRpb24gaW5kaWNhdGVzIGFuIHVuc3BlY2lmaWVkIGVuY29kZWQNCiAgICAgIGFkZHJlc3Mg d2hlcmUgdGhlIHRoZSBsZW5ndGggb2YgdGhlIGFkZHJlc3MgaXMgMCBieXRlcyBmb2xsb3dpbmcN CiAgICAgIHRoZSAxNi1iaXQgQUZJIHZhbHVlIG9mIDAuDQoNCiAgIE5lZ2F0aXZlIE1hcHBpbmcg RW50cnk6ICAgYWxzbyBrbm93biBhcyBhIG5lZ2F0aXZlIGNhY2hlIGVudHJ5LCBpcyBhbg0KICAg ICAgRUlELXRvLVJMT0MgZW50cnkgd2hlcmUgYW4gRUlELXByZWZpeCBpcyBhZHZlcnRpc2VkIG9y IHN0b3JlZCB3aXRoDQogICAgICBubyBSTE9Dcy4gIFRoYXQgaXMsIHRoZSBsb2NhdG9yLXNldCBm b3IgdGhlIEVJRC10by1STE9DIGVudHJ5IGlzDQogICAgICBlbXB0eSBvciBoYXMgYW4gZW5jb2Rl ZCBsb2NhdG9yIGNvdW50IG9mIDAuICBUaGlzIHR5cGUgb2YgZW50cnkNCiAgICAgIGNvdWxkIGJl IHVzZWQgdG8gZGVzY3JpYmUgYSBwcmVmaXggZnJvbSBhIG5vbi1MSVNQIHNpdGUsIHdoaWNoIGlz DQogICAgICBleHBsaWNpdGx5IG5vdCBpbiB0aGUgbWFwcGluZyBkYXRhYmFzZS4gIFRoZXJlIGFy ZSBhIHNldCBvZiB3ZWxsDQogICAgICBkZWZpbmVkIGFjdGlvbnMgdGhhdCBhcmUgZW5jb2RlZCBp biBhIE5lZ2F0aXZlIE1hcC1SZXBseS4NCg0KICAgRGF0YSBQcm9iZTogICBhIExJU1AtZW5jYXBz dWxhdGVkIGRhdGEgcGFja2V0IHdoZXJlIHRoZSBpbm5lciBoZWFkZXINCiAgICAgIGRlc3RpbmF0 aW9uIGFkZHJlc3MgZXF1YWxzIHRoZSBvdXRlciBoZWFkZXIgZGVzdGluYXRpb24gYWRkcmVzcw0K ICAgICAgdXNlZCB0byB0cmlnZ2VyIGEgTWFwLVJlcGx5IGJ5IGEgZGVjYXBzdWxhdGluZyBFVFIu ICBJbiBhZGRpdGlvbiwNCiAgICAgIHRoZSBvcmlnaW5hbCBwYWNrZXQgaXMgZGVjYXBzdWxhdGVk IGFuZCBkZWxpdmVyZWQgdG8gdGhlDQogICAgICBkZXN0aW5hdGlvbiBob3N0LiAgQSBEYXRhIFBy b2JlIGlzIHVzZWQgaW4gc29tZSBvZiB0aGUgbWFwcGluZw0KICAgICAgZGF0YWJhc2UgZGVzaWdu cyB0byAicHJvYmUiIG9yIHJlcXVlc3QgYSBNYXAtUmVwbHkgZnJvbSBhbiBFVFI7IGluDQogICAg ICBvdGhlciBjYXNlcywgTWFwLVJlcXVlc3RzIGFyZSB1c2VkLiAgU2VlIGVhY2ggbWFwcGluZyBk YXRhYmFzZQ0KICAgICAgZGVzaWduIGZvciBkZXRhaWxzLg0KDQogICBQcm94eSBJVFIgKFBJVFIp OiAgIGFsc28ga25vd24gYXMgYSBQVFIgaXMgZGVmaW5lZCBhbmQgZGVzY3JpYmVkIGluDQogICAg ICBbSU5URVJXT1JLXSwgYSBQSVRSIGFjdHMgbGlrZSBhbiBJVFIgYnV0IGRvZXMgc28gb24gYmVo YWxmIG9mIG5vbi0NCiAgICAgIExJU1Agc2l0ZXMgd2hpY2ggc2VuZCBwYWNrZXRzIHRvIGRlc3Rp bmF0aW9ucyBhdCBMSVNQIHNpdGVzLg0KDQogICBQcm94eSBFVFIgKFBFVFIpOiAgIGlzIGRlZmlu ZWQgYW5kIGRlc2NyaWJlZCBpbiBbSU5URVJXT1JLXSwgYSBQRVRSDQogICAgICBhY3RzIGxpa2Ug YW4gRVRSIGJ1dCBkb2VzIHNvIG9uIGJlaGFsZiBvZiBMSVNQIHNpdGVzIHdoaWNoIHNlbmQNCiAg ICAgIHBhY2tldHMgdG8gZGVzdGluYXRpb25zIGF0IG5vbi1MSVNQIHNpdGVzLg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1 bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1BhZ2UgMTFdDQoMDQpJbnRlcm5ldC1EcmFmdCAg ICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTAN Cg0KDQo0LiAgQmFzaWMgT3ZlcnZpZXcNCg0KICAgT25lIGtleSBjb25jZXB0IG9mIExJU1AgaXMg dGhhdCBlbmQtc3lzdGVtcyAoaG9zdHMpIG9wZXJhdGUgdGhlIHNhbWUNCiAgIHdheSB0aGV5IGRv IHRvZGF5LiAgVGhlIElQIGFkZHJlc3NlcyB0aGF0IGhvc3RzIHVzZSBmb3IgdHJhY2tpbmcNCiAg IHNvY2tldHMsIGNvbm5lY3Rpb25zLCBhbmQgZm9yIHNlbmRpbmcgYW5kIHJlY2VpdmluZyBwYWNr ZXRzIGRvIG5vdA0KICAgY2hhbmdlLiAgSW4gTElTUCB0ZXJtaW5vbG9neSwgdGhlc2UgSVAgYWRk cmVzc2VzIGFyZSBjYWxsZWQgRW5kcG9pbnQNCiAgIElkZW50aWZpZXJzIChFSURzKS4NCg0KICAg Um91dGVycyBjb250aW51ZSB0byBmb3J3YXJkIHBhY2tldHMgYmFzZWQgb24gSVAgZGVzdGluYXRp b24NCiAgIGFkZHJlc3Nlcy4gIFdoZW4gYSBwYWNrZXQgaXMgTElTUCBlbmNhcHN1bGF0ZWQsIHRo ZXNlIGFkZHJlc3NlcyBhcmUNCiAgIHJlZmVycmVkIHRvIGFzIFJvdXRpbmcgTG9jYXRvcnMgKFJM T0NzKS4gIE1vc3Qgcm91dGVycyBhbG9uZyBhIHBhdGgNCiAgIGJldHdlZW4gdHdvIGhvc3RzIHdp bGwgbm90IGNoYW5nZTsgdGhleSBjb250aW51ZSB0byBwZXJmb3JtIHJvdXRpbmcvDQogICBmb3J3 YXJkaW5nIGxvb2t1cHMgb24gdGhlIGRlc3RpbmF0aW9uIGFkZHJlc3Nlcy4gIEZvciByb3V0ZXJz IGJldHdlZW4NCiAgIHRoZSBzb3VyY2UgaG9zdCBhbmQgdGhlIElUUiBhcyB3ZWxsIGFzIHJvdXRl cnMgZnJvbSB0aGUgRVRSIHRvIHRoZQ0KICAgZGVzdGluYXRpb24gaG9zdCwgdGhlIGRlc3RpbmF0 aW9uIGFkZHJlc3MgaXMgYW4gRUlELiAgRm9yIHRoZSByb3V0ZXJzDQogICBiZXR3ZWVuIHRoZSBJ VFIgYW5kIHRoZSBFVFIsIHRoZSBkZXN0aW5hdGlvbiBhZGRyZXNzIGlzIGFuIFJMT0MuDQoNCiAg IFRoaXMgZGVzaWduIGludHJvZHVjZXMgIlR1bm5lbCBSb3V0ZXJzIiwgd2hpY2ggcHJlcGVuZHMg TElTUCBoZWFkZXJzDQogICBvbiBob3N0LW9yaWdpbmF0ZWQgcGFja2V0cyBhbmQgc3RyaXAgdGhl bSBwcmlvciB0byBmaW5hbCBkZWxpdmVyeSB0bw0KICAgdGhlaXIgZGVzdGluYXRpb24uICBUaGUg SVAgYWRkcmVzc2VzIGluIHRoaXMgIm91dGVyIGhlYWRlciIgYXJlDQogICBSTE9Dcy4gIER1cmlu ZyBlbmQtdG8tZW5kIHBhY2tldCBleGNoYW5nZSBiZXR3ZWVuIHR3byBJbnRlcm5ldCBob3N0cywN CiAgIGFuIElUUiBwcmVwZW5kcyBhIG5ldyBMSVNQIGhlYWRlciB0byBlYWNoIHBhY2tldCBhbmQg YW4gZWdyZXNzIHR1bm5lbA0KICAgcm91dGVyIHN0cmlwcyB0aGUgbmV3IGhlYWRlci4gIFRoZSBJ VFIgcGVyZm9ybXMgRUlELXRvLVJMT0MgbG9va3Vwcw0KICAgdG8gZGV0ZXJtaW5lIHRoZSByb3V0 aW5nIHBhdGggdG8gdGhlIHRoZSBFVFIsIHdoaWNoIGhhcyB0aGUgUkxPQyBhcw0KICAgb25lIG9m IGl0cyBJUCBhZGRyZXNzZXMuDQoNCiAgIFNvbWUgYmFzaWMgcnVsZXMgZ292ZXJuaW5nIExJU1Ag YXJlOg0KDQogICBvICBFbmQtc3lzdGVtcyAoaG9zdHMpIG9ubHkgc2VuZCB0byBhZGRyZXNzZXMg d2hpY2ggYXJlIEVJRHMuICBUaGV5DQogICAgICBkb24ndCBrbm93IGFkZHJlc3NlcyBhcmUgRUlE cyB2ZXJzdXMgUkxPQ3MgYnV0IGFzc3VtZSBwYWNrZXRzIGdldA0KICAgICAgdG8gTElTUCByb3V0 ZXJzLCB3aGljaCBpbiB0dXJuLCBkZWxpdmVyIHBhY2tldHMgdG8gdGhlIGRlc3RpbmF0aW9uDQog ICAgICB0aGUgZW5kLXN5c3RlbSBoYXMgc3BlY2lmaWVkLg0KDQogICBvICBFSURzIGFyZSBhbHdh eXMgSVAgYWRkcmVzc2VzIGFzc2lnbmVkIHRvIGhvc3RzLg0KDQogICBvICBMSVNQIHJvdXRlcnMg bW9zdGx5IGRlYWwgd2l0aCBSb3V0aW5nIExvY2F0b3IgYWRkcmVzc2VzLiAgU2VlDQogICAgICBk ZXRhaWxzIGxhdGVyIGluIFNlY3Rpb24gNC4xIHRvIGNsYXJpZnkgd2hhdCBpcyBtZWFudCBieSAi bW9zdGx5Ii4NCg0KICAgbyAgUkxPQ3MgYXJlIGFsd2F5cyBJUCBhZGRyZXNzZXMgYXNzaWduZWQg dG8gcm91dGVyczsgcHJlZmVyYWJseSwNCiAgICAgIHRvcG9sb2dpY2FsbHktb3JpZW50ZWQgYWRk cmVzc2VzIGZyb20gcHJvdmlkZXIgQ0lEUiBibG9ja3MuDQoNCiAgIG8gIFdoZW4gYSByb3V0ZXIg b3JpZ2luYXRlcyBwYWNrZXRzIGl0IG1heSB1c2UgYXMgYSBzb3VyY2UgYWRkcmVzcw0KICAgICAg ZWl0aGVyIGFuIEVJRCBvciBSTE9DLiAgV2hlbiBhY3RpbmcgYXMgYSBob3N0IChlLmcuIHdoZW4N CiAgICAgIHRlcm1pbmF0aW5nIGEgdHJhbnNwb3J0IHNlc3Npb24gc3VjaCBhcyBTU0gsIFRFTE5F VCwgb3IgU05NUCksIGl0DQogICAgICBtYXkgdXNlIGFuIEVJRCB0aGF0IGlzIGV4cGxpY2l0bHkg YXNzaWduZWQgZm9yIHRoYXQgcHVycG9zZS4gIEFuDQogICAgICBFSUQgdGhhdCBpZGVudGlmaWVz IHRoZSByb3V0ZXIgYXMgYSBob3N0IE1VU1QgTk9UIGJlIHVzZWQgYXMgYW4NCiAgICAgIFJMT0M7 IGFuIEVJRCBpcyBvbmx5IHJvdXRhYmxlIHdpdGhpbiB0aGUgc2NvcGUgb2YgYSBzaXRlLiAgQQ0K ICAgICAgdHlwaWNhbCBCR1AgY29uZmlndXJhdGlvbiBtaWdodCBkZW1vbnN0cmF0ZSB0aGlzICJo eWJyaWQiIEVJRC9STE9DDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMg SnVseSAxNiwgMjAxMCAgICAgICAgICAgICAgICBbUGFnZSAxMl0NCgwNCkludGVybmV0LURyYWZ0 ICAgIExvY2F0b3IvSUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAx MA0KDQoNCiAgICAgIHVzYWdlIHdoZXJlIGEgcm91dGVyIGNvdWxkIHVzZSBpdHMgImhvc3QtbGlr ZSIgRUlEIHRvIHRlcm1pbmF0ZQ0KICAgICAgaUJHUCBzZXNzaW9ucyB0byBvdGhlciByb3V0ZXJz IGluIGEgc2l0ZSB3aGlsZSBhdCB0aGUgc2FtZSB0aW1lDQogICAgICB1c2luZyBSTE9DcyB0byB0 ZXJtaW5hdGUgZUJHUCBzZXNzaW9ucyB0byByb3V0ZXJzIG91dHNpZGUgdGhlDQogICAgICBzaXRl Lg0KDQogICBvICBFSURzIGFyZSBub3QgZXhwZWN0ZWQgdG8gYmUgdXNhYmxlIGZvciBnbG9iYWwg ZW5kLXRvLWVuZA0KICAgICAgY29tbXVuaWNhdGlvbiBpbiB0aGUgYWJzZW5jZSBvZiBhbiBFSUQt dG8tUkxPQyBtYXBwaW5nIG9wZXJhdGlvbi4NCiAgICAgIFRoZXkgYXJlIGV4cGVjdGVkIHRvIGJl IHVzZWQgbG9jYWxseSBmb3IgaW50cmEtc2l0ZSBjb21tdW5pY2F0aW9uLg0KDQogICBvICBFSUQg cHJlZml4ZXMgYXJlIGxpa2VseSB0byBiZSBoaWVyYXJjaGljYWxseSBhc3NpZ25lZCBpbiBhIG1h bm5lcg0KICAgICAgd2hpY2ggaXMgb3B0aW1pemVkIGZvciBhZG1pbmlzdHJhdGl2ZSBjb252ZW5p ZW5jZSBhbmQgdG8NCiAgICAgIGZhY2lsaXRhdGUgc2NhbGluZyBvZiB0aGUgRUlELXRvLVJMT0Mg bWFwcGluZyBkYXRhYmFzZS4gIFRoZQ0KICAgICAgaGllcmFyY2h5IGlzIGJhc2VkIG9uIGEgYWRk cmVzcyBhbGxvY2F0aW9uIGhpZXJhcmNoeSB3aGljaCBpcyBub3QNCiAgICAgIGRlcGVuZGVudCBv biB0aGUgbmV0d29yayB0b3BvbG9neS4NCg0KICAgbyAgRUlEcyBtYXkgYWxzbyBiZSBzdHJ1Y3R1 cmVkIChzdWJuZXR0ZWQpIGluIGEgbWFubmVyIHN1aXRhYmxlIGZvcg0KICAgICAgbG9jYWwgcm91 dGluZyB3aXRoaW4gYW4gYXV0b25vbW91cyBzeXN0ZW0uDQoNCiAgIEFuIGFkZGl0aW9uYWwgTElT UCBoZWFkZXIgbWF5IGJlIHByZXBlbmRlZCB0byBwYWNrZXRzIGJ5IGEgdHJhbnNpdA0KICAgcm91 dGVyIChpLmUuICBURS1JVFIpIHdoZW4gcmUtcm91dGluZyBvZiB0aGUgcGF0aCBmb3IgYSBwYWNr ZXQgaXMNCiAgIGRlc2lyZWQuICBBbiBvYnZpb3VzIGluc3RhbmNlIG9mIHRoaXMgd291bGQgYmUg YW4gSVNQIHJvdXRlciB0aGF0DQogICBuZWVkcyB0byBwZXJmb3JtIHRyYWZmaWMgZW5naW5lZXJp bmcgZm9yIHBhY2tldHMgaW4gZmxvdyB0aHJvdWdoIGl0cw0KICAgbmV0d29yay4gIEluIHN1Y2gg YSBzaXR1YXRpb24sIHRlcm1lZCBSZWN1cnNpdmUgVHVubmVsaW5nLCBhbiBJU1ANCiAgIHRyYW5z aXQgYWN0cyBhcyBhbiBhZGRpdGlvbmFsIGluZ3Jlc3MgdHVubmVsIHJvdXRlciBhbmQgdGhlIFJM T0MgaXQNCiAgIHVzZXMgZm9yIHRoZSBuZXcgcHJlcGVuZGVkIGhlYWRlciB3b3VsZCBiZSBlaXRo ZXIgYSBURS1FVFIgd2l0aGluIHRoZQ0KICAgSVNQIChhbG9uZyBpbnRyYS1JU1AgdHJhZmZpYyBl bmdpbmVlcmVkIHBhdGgpIG9yIGEgVEUtRVRSIHdpdGhpbg0KICAgYW5vdGhlciBJU1AgKGFuIGlu dGVyLUlTUCB0cmFmZmljIGVuZ2luZWVyZWQgcGF0aCwgd2hlcmUgYW4gYWdyZWVtZW50DQogICB0 byBidWlsZCBzdWNoIGEgcGF0aCBleGlzdHMpLg0KDQogICBUaGlzIHNwZWNpZmljYXRpb24gbWFu ZGF0ZXMgdGhhdCBubyBtb3JlIHRoYW4gdHdvIExJU1AgaGVhZGVycyBnZXQNCiAgIHByZXBlbmRl ZCB0byBhIHBhY2tldC4gIFRoaXMgYXZvaWRzIGV4Y2Vzc2l2ZSBwYWNrZXQgb3ZlcmhlYWQgYXMg d2VsbA0KICAgYXMgcG9zc2libGUgZW5jYXBzdWxhdGlvbiBsb29wcy4gIEl0IGlzIGJlbGlldmVk IHR3byBoZWFkZXJzIGlzDQogICBzdWZmaWNpZW50LCB3aGVyZSB0aGUgZmlyc3QgcHJlcGVuZGVk IGhlYWRlciBpcyB1c2VkIGF0IGEgc2l0ZSBmb3INCiAgIExvY2F0aW9uL0lkZW50aXR5IHNlcGFy YXRpb24gYW5kIHNlY29uZCBwcmVwZW5kZWQgaGVhZGVyIGlzIHVzZWQNCiAgIGluc2lkZSBhIHNl cnZpY2UgcHJvdmlkZXIgZm9yIFRyYWZmaWMgRW5naW5lZXJpbmcgcHVycG9zZXMuDQoNCiAgIFR1 bm5lbCBSb3V0ZXJzIGNhbiBiZSBwbGFjZWQgZmFpcmx5IGZsZXhpYmx5IGluIGEgbXVsdGktQVMg dG9wb2xvZ3kuDQogICBGb3IgZXhhbXBsZSwgdGhlIElUUiBmb3IgYSBwYXJ0aWN1bGFyIGVuZC10 by1lbmQgcGFja2V0IGV4Y2hhbmdlDQogICBtaWdodCBiZSB0aGUgZmlyc3QtaG9wIG9yIGRlZmF1 bHQgcm91dGVyIHdpdGhpbiBhIHNpdGUgZm9yIHRoZSBzb3VyY2UNCiAgIGhvc3QuICBTaW1pbGFy bHksIHRoZSBlZ3Jlc3MgdHVubmVsIHJvdXRlciBtaWdodCBiZSB0aGUgbGFzdC1ob3ANCiAgIHJv dXRlciBkaXJlY3RseS1jb25uZWN0ZWQgdG8gdGhlIGRlc3RpbmF0aW9uIGhvc3QuICBBbm90aGVy IGV4YW1wbGUsDQogICBwZXJoYXBzIGZvciBhIFZQTiBzZXJ2aWNlIG91dC1zb3VyY2VkIHRvIGFu IElTUCBieSBhIHNpdGUsIHRoZSBJVFINCiAgIGNvdWxkIGJlIHRoZSBzaXRlJ3MgYm9yZGVyIHJv dXRlciBhdCB0aGUgc2VydmljZSBwcm92aWRlciBhdHRhY2htZW50DQogICBwb2ludC4gIE1peGlu ZyBhbmQgbWF0Y2hpbmcgb2Ygc2l0ZS1vcGVyYXRlZCwgSVNQLW9wZXJhdGVkLCBhbmQgb3RoZXIN CiAgIHR1bm5lbCByb3V0ZXJzIGlzIGFsbG93ZWQgZm9yIG1heGltdW0gZmxleGliaWxpdHkuICBT ZWUgU2VjdGlvbiA4IGZvcg0KICAgbW9yZSBkZXRhaWxzLg0KDQoNCg0KDQoNCkZhcmluYWNjaSwg ZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdl IDEzXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29s IChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoNCg0KNC4xLiAgUGFja2V0IEZsb3cgU2VxdWVuY2UN Cg0KICAgVGhpcyBzZWN0aW9uIHByb3ZpZGVzIGFuIGV4YW1wbGUgb2YgdGhlIHVuaWNhc3QgcGFj a2V0IGZsb3cgd2l0aCB0aGUNCiAgIGZvbGxvd2luZyBjb25kaXRpb25zOg0KDQogICBvICBTb3Vy Y2UgaG9zdCAiaG9zdDEuYWJjLmNvbSIgaXMgc2VuZGluZyBhIHBhY2tldCB0bw0KICAgICAgImhv c3QyLnh5ei5jb20iLCBleGFjdGx5IHdoYXQgaG9zdDEgd291bGQgZG8gaWYgdGhlIHNpdGUgd2Fz IG5vdA0KICAgICAgdXNpbmcgTElTUC4NCg0KICAgbyAgRWFjaCBzaXRlIGlzIG11bHRpLWhvbWVk LCBzbyBlYWNoIHR1bm5lbCByb3V0ZXIgaGFzIGFuIGFkZHJlc3MNCiAgICAgIChSTE9DKSBhc3Np Z25lZCBmcm9tIHRoZSBzZXJ2aWNlIHByb3ZpZGVyIGFkZHJlc3MgYmxvY2sgZm9yIGVhY2gNCiAg ICAgIHByb3ZpZGVyIHRvIHdoaWNoIHRoYXQgcGFydGljdWxhciB0dW5uZWwgcm91dGVyIGlzIGF0 dGFjaGVkLg0KDQogICBvICBUaGUgSVRSKHMpIGFuZCBFVFIocykgYXJlIGRpcmVjdGx5IGNvbm5l Y3RlZCB0byB0aGUgc291cmNlIGFuZA0KICAgICAgZGVzdGluYXRpb24sIHJlc3BlY3RpdmVseS4N Cg0KICAgbyAgRGF0YSBQcm9iZXMgYXJlIHVzZWQgdG8gc29saWNpdCBNYXAtUmVwbGllcyB2ZXJz dXMgdXNpbmcgTWFwLQ0KICAgICAgUmVxdWVzdHMuICBBbmQgdGhlIERhdGEgUHJvYmVzIGFyZSBz ZW50IG9uIHRoZSB1bmRlcmx5aW5nIHRvcG9sb2d5DQogICAgICAodGhlIExJU1AgMS4wIHZhcmlh bnQpIGJ1dCBjb3VsZCBhbHNvIGJlIHNlbnQgb3ZlciBhbiBhbHRlcm5hdGl2ZQ0KICAgICAgdG9w b2xvZ3kgKHRoZSBMSVNQIDEuNSB2YXJpYW50KSBhcyBpdCB3b3VsZCBpbiBbQUxUXS4NCg0KICAg Q2xpZW50IGhvc3QxLmFiYy5jb20gd2FudHMgdG8gY29tbXVuaWNhdGUgd2l0aCBzZXJ2ZXIgaG9z dDIueHl6LmNvbToNCg0KICAgMS4gIGhvc3QxLmFiYy5jb20gd2FudHMgdG8gb3BlbiBhIFRDUCBj b25uZWN0aW9uIHRvIGhvc3QyLnh5ei5jb20uDQogICAgICAgSXQgZG9lcyBhIEROUyBsb29rdXAg b24gaG9zdDIueHl6LmNvbS4gIEFuIEEvQUFBQSByZWNvcmQgaXMNCiAgICAgICByZXR1cm5lZC4g IFRoaXMgYWRkcmVzcyBpcyB1c2VkIGFzIHRoZSBkZXN0aW5hdGlvbiBFSUQgYW5kIHRoZQ0KICAg ICAgIGxvY2FsbHktYXNzaWduZWQgYWRkcmVzcyBvZiBob3N0MS5hYmMuY29tIGlzIHVzZWQgYXMg dGhlIHNvdXJjZQ0KICAgICAgIEVJRC4gIEFuIElQdjQgb3IgSVB2NiBwYWNrZXQgaXMgYnVpbHQg dXNpbmcgdGhlIEVJRHMgaW4gdGhlIElQdjQNCiAgICAgICBvciBJUHY2IGhlYWRlciBhbmQgc2Vu dCB0byB0aGUgZGVmYXVsdCByb3V0ZXIuDQoNCiAgIDIuICBUaGUgZGVmYXVsdCByb3V0ZXIgaXMg Y29uZmlndXJlZCBhcyBhbiBJVFIuICBUaGUgSVRSIG11c3QgYmUgYWJsZQ0KICAgICAgIHRvIG1h cCB0aGUgRUlEIGRlc3RpbmF0aW9uIHRvIGFuIFJMT0Mgb2YgdGhlIEVUUiBhdCB0aGUNCiAgICAg ICBkZXN0aW5hdGlvbiBzaXRlLiAgVGhlIElUUiBwcmVwZW5kcyBhIExJU1AgaGVhZGVyIHRvIHRo ZSBwYWNrZXQsDQogICAgICAgd2l0aCBvbmUgb2YgaXRzIFJMT0NzIGFzIHRoZSBzb3VyY2UgSVB2 NCBvciBJUHY2IGFkZHJlc3MuICBUaGUNCiAgICAgICBkZXN0aW5hdGlvbiBFSUQgZnJvbSB0aGUg b3JpZ2luYWwgcGFja2V0IGhlYWRlciBpcyB1c2VkIGFzIHRoZQ0KICAgICAgIGRlc3RpbmF0aW9u IElQdjQgb3IgSVB2NiBpbiB0aGUgcHJlcGVuZGVkIExJU1AgaGVhZGVyLg0KICAgICAgIFN1YnNl cXVlbnQgcGFja2V0cywgd2hlcmUgdGhlIG91dGVyIGRlc3RpbmF0aW9uIGFkZHJlc3MgaXMgdGhl DQogICAgICAgZGVzdGluYXRpb24gRUlEIHdpbGwgYmUgc2VudCB1bnRpbCBFSUQtdG8tUkxPQyBt YXBwaW5nIGlzDQogICAgICAgbGVhcm5lZC4NCg0KICAgMy4gIEluIExJU1AgMSwgdGhlIHBhY2tl dCBpcyByb3V0ZWQgdGhyb3VnaCB0aGUgSW50ZXJuZXQgYXMgaXQgaXMNCiAgICAgICB0b2RheS4g IEluIExJU1AgMS41LCB0aGUgcGFja2V0IGlzIHJvdXRlZCBvbiBhIGRpZmZlcmVudCB0b3BvbG9n eQ0KICAgICAgIHdoaWNoIG1heSBoYXZlIEVJRCBwcmVmaXhlcyBkaXN0cmlidXRlZCBhbmQgYWR2 ZXJ0aXNlZCBpbiBhbg0KICAgICAgIGFnZ3JlZ2F0YWJsZSBmYXNoaW9uLiAgSW4gZWl0aGVyIGNh c2UsIHRoZSBwYWNrZXQgYXJyaXZlcyBhdCB0aGUNCiAgICAgICBFVFIuICBUaGUgcm91dGVyIGlz IGNvbmZpZ3VyZWQgdG8gInB1bnQiIHRoZSBwYWNrZXQgdG8gdGhlDQogICAgICAgcm91dGVyJ3Mg cHJvY2Vzc29yLiAgU2VlIFNlY3Rpb24gNyBmb3IgbW9yZSBkZXRhaWxzLiAgRm9yIExJU1ANCiAg ICAgICAyLjAgYW5kIDMuMCwgdGhlIGJlaGF2aW9yIGlzIG5vdCBmdWxseSBkZWZpbmVkIHlldC4N Cg0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAg ICAgICAgICAgICAgICAgW1BhZ2UgMTRdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICBMb2NhdG9yL0lE IFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTANCg0KDQogICA0LiAg VGhlIExJU1AgaGVhZGVyIGlzIHN0cmlwcGVkIHNvIHRoYXQgdGhlIHBhY2tldCBjYW4gYmUgZm9y d2FyZGVkDQogICAgICAgYnkgdGhlIHJvdXRlciBjb250cm9sIHBsYW5lLiAgVGhlIHJvdXRlciBs b29rcyB1cCB0aGUgZGVzdGluYXRpb24NCiAgICAgICBFSUQgaW4gdGhlIHJvdXRlcidzIEVJRC10 by1STE9DIGRhdGFiYXNlIChub3QgdGhlIGNhY2hlLCBidXQgdGhlDQogICAgICAgY29uZmlndXJl ZCBkYXRhIHN0cnVjdHVyZSBvZiBSTE9DcykuICBBbiBFSUQtdG8tUkxPQyBNYXAtUmVwbHkNCiAg ICAgICBtZXNzYWdlIGlzIG9yaWdpbmF0ZWQgYnkgdGhlIEVUUiBhbmQgaXMgYWRkcmVzc2VkIHRv IHRoZSBzb3VyY2UNCiAgICAgICBSTE9DIGluIHRoZSBMSVNQIGhlYWRlciBvZiB0aGUgb3JpZ2lu YWwgcGFja2V0ICh0aGlzIGlzIHRoZSBJVFIpLg0KICAgICAgIFRoZSBzb3VyY2UgUkxPQyBvZiB0 aGUgTWFwLVJlcGx5IGlzIG9uZSBvZiB0aGUgRVRSJ3MgUkxPQ3MuDQoNCiAgIDUuICBUaGUgSVRS IHJlY2VpdmVzIHRoZSBNYXAtUmVwbHkgbWVzc2FnZSwgcGFyc2VzIHRoZSBtZXNzYWdlICh0bw0K ICAgICAgIGNoZWNrIGZvciBmb3JtYXQgdmFsaWRpdHkpIGFuZCBzdG9yZXMgdGhlIG1hcHBpbmcg aW5mb3JtYXRpb24NCiAgICAgICBmcm9tIHRoZSBwYWNrZXQuICBUaGlzIGluZm9ybWF0aW9uIGlz IHB1dCBpbiB0aGUgSVRSJ3MgRUlELXRvLQ0KICAgICAgIFJMT0MgbWFwcGluZyBjYWNoZSAodGhp cyBpcyB0aGUgb24tZGVtYW5kIGNhY2hlLCB0aGUgY2FjaGUgd2hlcmUNCiAgICAgICBlbnRyaWVz IHRpbWUgb3V0IGR1ZSB0byBpbmFjdGl2aXR5KS4NCg0KICAgNi4gIFN1YnNlcXVlbnQgcGFja2V0 cyBmcm9tIGhvc3QxLmFiYy5jb20gdG8gaG9zdDIueHl6LmNvbSB3aWxsIGhhdmUNCiAgICAgICBh IExJU1AgaGVhZGVyIHByZXBlbmRlZCBieSB0aGUgSVRSIHVzaW5nIHRoZSBhcHByb3ByaWF0ZSBS TE9DIGFzDQogICAgICAgdGhlIExJU1AgaGVhZGVyIGRlc3RpbmF0aW9uIGFkZHJlc3MgbGVhcm5l ZCBmcm9tIHRoZSBFVFIuICBOb3RlLA0KICAgICAgIHRoZSBwYWNrZXQgbWF5IGJlIHNlbnQgdG8g YSBkaWZmZXJlbnQgRVRSIHRoYW4gdGhlIG9uZSB3aGljaA0KICAgICAgIHJldHVybmVkIHRoZSBN YXAtUmVwbHkgZHVlIHRvIHRoZSBzb3VyY2Ugc2l0ZSdzIGhhc2hpbmcgcG9saWN5IG9yDQogICAg ICAgdGhlIGRlc3RpbmF0aW9uIHNpdGUncyBsb2NhdG9yLXNldCBwb2xpY3kuDQoNCiAgIDcuICBU aGUgRVRSIHJlY2VpdmVzIHRoZXNlIHBhY2tldHMgZGlyZWN0bHkgKHNpbmNlIHRoZSBkZXN0aW5h dGlvbg0KICAgICAgIGFkZHJlc3MgaXMgb25lIG9mIGl0cyBhc3NpZ25lZCBJUCBhZGRyZXNzZXMp LCBzdHJpcHMgdGhlIExJU1ANCiAgICAgICBoZWFkZXIgYW5kIGZvcndhcmRzIHRoZSBwYWNrZXRz IHRvIHRoZSBhdHRhY2hlZCBkZXN0aW5hdGlvbiBob3N0Lg0KDQogICBJbiBvcmRlciB0byBlbGlt aW5hdGUgdGhlIG5lZWQgZm9yIGEgbWFwcGluZyBsb29rdXAgaW4gdGhlIHJldmVyc2UNCiAgIGRp cmVjdGlvbiwgYW4gRVRSIE1BWSBjcmVhdGUgYSBjYWNoZSBlbnRyeSB0aGF0IG1hcHMgdGhlIHNv dXJjZSBFSUQNCiAgIChpbm5lciBoZWFkZXIgc291cmNlIElQIGFkZHJlc3MpIHRvIHRoZSBzb3Vy Y2UgUkxPQyAob3V0ZXIgaGVhZGVyDQogICBzb3VyY2UgSVAgYWRkcmVzcykgaW4gYSByZWNlaXZl ZCBMSVNQIHBhY2tldC4gIFN1Y2ggYSBjYWNoZSBlbnRyeSBpcw0KICAgdGVybWVkIGEgImdsZWFu ZWQiIG1hcHBpbmcgYW5kIG9ubHkgY29udGFpbnMgYSBzaW5nbGUgUkxPQyBmb3IgdGhlDQogICBF SUQgaW4gcXVlc3Rpb24uICBNb3JlIGNvbXBsZXRlIGluZm9ybWF0aW9uIGFib3V0IGFkZGl0aW9u YWwgUkxPQ3MNCiAgIFNIT1VMRCBiZSB2ZXJpZmllZCBieSBzZW5kaW5nIGEgTElTUCBNYXAtUmVx dWVzdCBmb3IgdGhhdCBFSUQuICBCb3RoDQogICBJVFIgYW5kIHRoZSBFVFIgbWF5IGFsc28gaW5m bHVlbmNlIHRoZSBkZWNpc2lvbiB0aGUgb3RoZXIgbWFrZXMgaW4NCiAgIHNlbGVjdGluZyBhbiBS TE9DLiAgU2VlIFNlY3Rpb24gNiBmb3IgbW9yZSBkZXRhaWxzLg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5IDE2 LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdlIDE1XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgTG9j YXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoNCg0K NS4gIFR1bm5lbGluZyBEZXRhaWxzDQoNCiAgIFRoaXMgc2VjdGlvbiBkZXNjcmliZXMgdGhlIExJ U1AgRGF0YSBNZXNzYWdlIHdoaWNoIGRlZmluZXMgdGhlDQogICB0dW5uZWxpbmcgaGVhZGVyIHVz ZWQgdG8gZW5jYXBzdWxhdGUgSVB2NCBhbmQgSVB2NiBwYWNrZXRzIHdoaWNoDQogICBjb250YWlu IEVJRCBhZGRyZXNzZXMuICBFdmVuIHRob3VnaCB0aGUgZm9sbG93aW5nIGZvcm1hdHMgaWxsdXN0 cmF0ZQ0KICAgSVB2NC1pbi1JUHY0IGFuZCBJUHY2LWluLUlQdjYgZW5jYXBzdWxhdGlvbnMsIHRo ZSBvdGhlciAyDQogICBjb21iaW5hdGlvbnMgYXJlIHN1cHBvcnRlZCBhcyB3ZWxsLg0KDQogICBT aW5jZSBhZGRpdGlvbmFsIHR1bm5lbCBoZWFkZXJzIGFyZSBwcmVwZW5kZWQsIHRoZSBwYWNrZXQg YmVjb21lcw0KICAgbGFyZ2VyIGFuZCBpbiB0aGVvcnkgY2FuIGV4Y2VlZCB0aGUgTVRVIG9mIGFu eSBsaW5rIHRyYXZlcnNlZCBmcm9tDQogICB0aGUgSVRSIHRvIHRoZSBFVFIuICBJdCBpcyByZWNv bW1lbmRlZCwgaW4gSVB2NCB0aGF0IHBhY2tldHMgZG8gbm90DQogICBnZXQgZnJhZ21lbnRlZCBh cyB0aGV5IGFyZSBlbmNhcHN1bGF0ZWQgYnkgdGhlIElUUi4gIEluc3RlYWQsIHRoZQ0KICAgcGFj a2V0IGlzIGRyb3BwZWQgYW5kIGFuIElDTVAgVG9vIEJpZyBtZXNzYWdlIGlzIHJldHVybmVkIHRv IHRoZQ0KICAgc291cmNlLg0KDQogICBCYXNlZCBvbiBpbmZvcm1hbCBzdXJ2ZXlzIG9mIGxhcmdl IElTUCB0cmFmZmljIHBhdHRlcm5zLCBpdCBhcHBlYXJzDQogICB0aGF0IG1vc3QgdHJhbnNpdCBw YXRocyBjYW4gYWNjb21tb2RhdGUgYSBwYXRoIE1UVSBvZiBhdCBsZWFzdCA0NDcwDQogICBieXRl cy4gIFRoZSBleGNlcHRpb25zLCBpbiB0ZXJtcyBvZiBkYXRhIHJhdGUsIG51bWJlciBvZiBob3N0 cw0KICAgYWZmZWN0ZWQsIG9yIGFueSBvdGhlciBtZXRyaWMgYXJlIGV4cGVjdGVkIHRvIGJlIHZh bmlzaGluZ2x5IHNtYWxsLg0KDQogICBUbyBhZGRyZXNzIE1UVSBjb25jZXJucywgbWFpbmx5IHJh aXNlZCBvbiB0aGUgUlJHIG1haWxpbmcgbGlzdCwgdGhlDQogICBMSVNQIGRlcGxveW1lbnQgcHJv Y2VzcyB3aWxsIGluY2x1ZGUgY29sbGVjdGluZyBkYXRhIGR1cmluZyBpdHMgcGlsb3QNCiAgIHBo YXNlIHRvIGVpdGhlciB2ZXJpZnkgb3IgcmVmdXRlIHRoZSBhc3N1bXB0aW9uIGFib3V0IG1pbmlt dW0NCiAgIGF2YWlsYWJsZSBNVFUuICBJZiB0aGUgYXNzdW1wdGlvbiBwcm92ZXMgdHJ1ZSBhbmQg dHJhbnNpdCBuZXR3b3Jrcw0KICAgd2l0aCBsaW5rcyBsaW1pdGVkIHRvIDE1MDAgYnl0ZSBNVFVz IGFyZSBjb3JuZXIgY2FzZXMsIGl0IHdvdWxkIHNlZW0NCiAgIG1vcmUgY29zdC1lZmZlY3RpdmUg dG8gZWl0aGVyIHVwZ3JhZGUgb3IgbW9kaWZ5IHRoZSBlcXVpcG1lbnQgaW4NCiAgIHRob3NlIHRy YW5zaXQgbmV0d29ya3MgdG8gc3VwcG9ydCBsYXJnZXIgTVRVcyBvciB0byB1c2UgZXhpc3RpbmcN CiAgIG1lY2hhbmlzbXMgZm9yIGFjY29tbW9kYXRpbmcgcGFja2V0cyB0aGF0IGFyZSB0b28gbGFy Z2UuDQoNCiAgIEZvciB0aGlzIHJlYXNvbiwgdGhlcmUgaXMgY3VycmVudGx5IG5vIHBsYW4gZm9y IExJU1AgdG8gYWRkIGFueSBuZXcNCiAgIGFkZGl0aW9uYWwsIGNvbXBsZXggbWVjaGFuaXNtIGZv ciBpbXBsZW1lbnRpbmcgZnJhZ21lbnRhdGlvbiBhbmQNCiAgIHJlYXNzZW1ibHkgaW4gdGhlIGZh Y2Ugb2YgbGltaXRlZC1NVFUgdHJhbnNpdCBsaW5rcy4gIElmIGFuYWx5c2lzDQogICBkdXJpbmcg TElTUCBwaWxvdCBkZXBsb3ltZW50IHJldmVhbHMgdGhhdCB0aGUgYXNzdW1wdGlvbiBvZg0KICAg ZXNzZW50aWFsbHkgdWJpcXVpdG91cywgNDQ3MCsgYnl0ZSB0cmFuc2l0IHBhdGggTVRVcywgaXMg aW5jb3JyZWN0LA0KICAgdGhlbiBMSVNQIGNhbiBiZSBtb2RpZmllZCBwcmlvciB0byBwcm90b2Nv bCBzdGFuZGFyZGl6YXRpb24gdG8gYWRkDQogICBzdXBwb3J0IGZvciBvbmUgb2YgdGhlIHByb3Bv c2VkIGZyYWdtZW50YXRpb24gYW5kIHJlYXNzZW1ibHkgc2NoZW1lcy4NCiAgIE5vdGUgdGhhdCB0 d28gc2ltcGxlIGV4aXN0aW5nIHNjaGVtZXMgYXJlIGRldGFpbGVkIGluIFNlY3Rpb24gNS40Lg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAgICAgICAgRXhw aXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdlIDE2XQ0KDA0KSW50ZXJuZXQt RHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAgICAgSmFudWFy eSAyMDEwDQoNCg0KNS4xLiAgTElTUCBJUHY0LWluLUlQdjQgSGVhZGVyIEZvcm1hdA0KDQoNCg0K ICAgICAgICAwICAgICAgICAgICAgICAgICAgIDEgICAgICAgICAgICAgICAgICAgMiAgICAgICAg ICAgICAgICAgICAzDQogICAgICAgIDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3 IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMQ0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgIC8gfFZl cnNpb258ICBJSEwgIHxUeXBlIG9mIFNlcnZpY2V8ICAgICAgICAgIFRvdGFsIExlbmd0aCAgICAg ICAgIHwNCiAgICAvICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgfCAgIHwgICAgICAgICBJZGVudGlmaWNhdGlvbiAg ICAgICAgfEZsYWdzfCAgICAgIEZyYWdtZW50IE9mZnNldCAgICB8DQogICB8ICAgKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsN CiAgIE9IICB8ICBUaW1lIHRvIExpdmUgfCBQcm90b2NvbCA9IDE3IHwgICAgICAgICBIZWFkZXIg Q2hlY2tzdW0gICAgICAgfA0KICAgfCAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICB8ICAgfCAgICAgICAgICAgICAg ICAgICAgU291cmNlIFJvdXRpbmcgTG9jYXRvciAgICAgICAgICAgICAgICAgICAgIHwNCiAgICBc ICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKw0KICAgICBcIHwgICAgICAgICAgICAgICAgIERlc3RpbmF0aW9uIFJvdXRpbmcg TG9jYXRvciAgICAgICAgICAgICAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgLyB8ICAg ICAgIFNvdXJjZSBQb3J0ID0geHh4eCAgICAgIHwgICAgICAgRGVzdCBQb3J0ID0gNDM0MSAgICAg ICAgfA0KICAgVURQICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rDQogICAgIFwgfCAgICAgICAgICAgVURQIExlbmd0aCAgICAg ICAgICB8ICAgICAgICBVRFAgQ2hlY2tzdW0gICAgICAgICAgIHwNCiAgICAgICArLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0K ICAgTCAgIHxOfEx8RXwgIHJmbGFncyB8ICAgICAgICAgICAgICAgICBOb25jZSAgICAgICAgICAg ICAgICAgICAgICAgICB8DQogICBJIFwgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgIFMgLyB8ICAgICAgICAgICAgICAg ICAgICAgICBMb2NhdG9yIFN0YXR1cyBCaXRzICAgICAgICAgICAgICAgICAgICAgfA0KICAgUCAg ICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rDQogICAgIC8gfFZlcnNpb258ICBJSEwgIHxUeXBlIG9mIFNlcnZpY2V8ICAgICAg ICAgIFRvdGFsIExlbmd0aCAgICAgICAgIHwNCiAgICAvICArLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgfCAgIHwgICAg ICAgICBJZGVudGlmaWNhdGlvbiAgICAgICAgfEZsYWdzfCAgICAgIEZyYWdtZW50IE9mZnNldCAg ICB8DQogICB8ICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSsNCiAgIElIICB8ICBUaW1lIHRvIExpdmUgfCAgICBQcm90b2Nv bCAgIHwgICAgICAgICBIZWFkZXIgQ2hlY2tzdW0gICAgICAgfA0KICAgfCAgICstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQog ICB8ICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgIFNvdXJjZSBFSUQgICAgICAgICAgICAg ICAgICAgICAgICAgIHwNCiAgICBcICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICBcIHwgICAgICAgICAgICAgICAg ICAgICAgICAgRGVzdGluYXRpb24gRUlEICAgICAgICAgICAgICAgICAgICAgICB8DQogICAgICAg Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSsNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KRmFyaW5hY2NpLCBldCBh bC4gICAgICAgICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1BhZ2UgMTdd DQoMDQpJbnRlcm5ldC1EcmFmdCAgICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJ U1ApICAgICBKYW51YXJ5IDIwMTANCg0KDQo1LjIuICBMSVNQIElQdjYtaW4tSVB2NiBIZWFkZXIg Rm9ybWF0DQoNCg0KDQogICAgICAgIDAgICAgICAgICAgICAgICAgICAgMSAgICAgICAgICAgICAg ICAgICAyICAgICAgICAgICAgICAgICAgIDMNCiAgICAgICAgMCAxIDIgMyA0IDUgNiA3IDggOSAw IDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxDQogICAgICAgKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSsNCiAgICAgLyB8VmVyc2lvbnwgVHJhZmZpYyBDbGFzcyB8ICAgICAgICAgICBGbG93IExhYmVs ICAgICAgICAgICAgICAgICAgfA0KICAgIC8gICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICB8ICAgfCAgICAgICAgIFBh eWxvYWQgTGVuZ3RoICAgICAgICB8IE5leHQgSGVhZGVyPTE3fCAgIEhvcCBMaW1pdCAgIHwNCiAg IHYgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKw0KICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICBPICAgKyAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICsNCiAgIHUgICB8 ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgfA0KICAgdCAgICsgICAgICAgICAgICAgICAgICAgICBTb3VyY2UgUm91dGluZyBMb2Nh dG9yICAgICAgICAgICAgICAgICAgICArDQogICBlICAgfCAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgIHIgICArICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Kw0KICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICB8DQogICBIICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgIGQgICB8ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAg ciAgICsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICArDQogICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgIF4gICArICAgICAgICAgICAgICAgICAg RGVzdGluYXRpb24gUm91dGluZyBMb2NhdG9yICAgICAgICAgICAgICAgICAgKw0KICAgfCAgIHwg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICB8DQogICAgXCAgKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICsNCiAgICAgXCB8ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r DQogICAgIC8gfCAgICAgICBTb3VyY2UgUG9ydCA9IHh4eHggICAgICB8ICAgICAgIERlc3QgUG9y dCA9IDQzNDEgICAgICAgIHwNCiAgIFVEUCArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICBcIHwgICAgICAgICAgIFVE UCBMZW5ndGggICAgICAgICAgfCAgICAgICAgVURQIENoZWNrc3VtICAgICAgICAgICB8DQogICAg ICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSsNCiAgIEwgICB8TnxMfEV8ICByZmxhZ3MgfCAgICAgICAgICAgICAgICAgTm9u Y2UgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgSSBcICstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICBTIC8gfCAg ICAgICAgICAgICAgICAgICAgICAgTG9jYXRvciBTdGF0dXMgQml0cyAgICAgICAgICAgICAgICAg ICAgIHwNCiAgIFAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICAvIHxWZXJzaW9ufCBUcmFmZmljIENsYXNzIHwg ICAgICAgICAgIEZsb3cgTGFiZWwgICAgICAgICAgICAgICAgICB8DQogICAgLyAgKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsN CiAgIC8gICB8ICAgICAgICAgUGF5bG9hZCBMZW5ndGggICAgICAgIHwgIE5leHQgSGVhZGVyICB8 ICAgSG9wIExpbWl0ICAgfA0KICAgdiAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgICAgfCAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgIEkg ICArICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgKw0KICAgbiAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICBuICAgKyAgICAgICAgICAgICAgICAgICAg ICAgICAgU291cmNlIEVJRCAgICAgICAgICAgICAgICAgICAgICAgICAgICsNCiAgIGUgICB8ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgfA0KICAgciAgICsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICArDQogICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgIEggICArLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0K ICAgZCAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICB8DQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMg SnVseSAxNiwgMjAxMCAgICAgICAgICAgICAgICBbUGFnZSAxOF0NCgwNCkludGVybmV0LURyYWZ0 ICAgIExvY2F0b3IvSUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAx MA0KDQoNCiAgIHIgICArICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgKw0KICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICBeICAgKyAgICAgICAg ICAgICAgICAgICAgICAgIERlc3RpbmF0aW9uIEVJRCAgICAgICAgICAgICAgICAgICAgICAgICsN CiAgIFwgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgfA0KICAgIFwgICsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICArDQogICAgIFwgfCAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAg ICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKw0KDQoNCjUuMy4gIFR1bm5lbCBIZWFkZXIgRmllbGQgRGVzY3JpcHRpb25zDQoN CiAgIElubmVyIEhlYWRlcjogIGlzIHRoZSBpbm5lciBoZWFkZXIsIHByZXNlcnZlZCBmcm9tIHRo ZSBkYXRhZ3JhbQ0KICAgICAgcmVjZWl2ZWQgZnJvbSB0aGUgb3JpZ2luYXRpbmcgaG9zdC4gIFRo ZSBzb3VyY2UgYW5kIGRlc3RpbmF0aW9uIElQDQogICAgICBhZGRyZXNzZXMgYXJlIEVJRHMuDQoN CiAgIE91dGVyIEhlYWRlcjogIGlzIHRoZSBvdXRlciBoZWFkZXIgcHJlcGVuZGVkIGJ5IGFuIElU Ui4gIFRoZSBhZGRyZXNzDQogICAgICBmaWVsZHMgY29udGFpbiBSTE9DcyBvYnRhaW5lZCBmcm9t IHRoZSBpbmdyZXNzIHJvdXRlcidzIEVJRC10by0NCiAgICAgIFJMT0MgY2FjaGUuICBUaGUgSVAg cHJvdG9jb2wgbnVtYmVyIGlzICJVRFAgKDE3KSIgZnJvbSBbUkZDMDc2OF0uDQogICAgICBUaGUg REYgYml0IG9mIHRoZSBGbGFncyBmaWVsZCBpcyBzZXQgdG8gMCB3aGVuIHRoZSBtZXRob2QgaW4N CiAgICAgIFNlY3Rpb24gNS40LjEgaXMgdXNlZCBhbmQgc2V0IHRvIDEgd2hlbiB0aGUgbWV0aG9k IGluDQogICAgICBTZWN0aW9uIDUuNC4yIGlzIHVzZWQuDQoNCiAgIFVEUCBIZWFkZXI6ICBjb250 YWlucyBhIElUUiBzZWxlY3RlZCBzb3VyY2UgcG9ydCB3aGVuIGVuY2Fwc3VsYXRpbmcgYQ0KICAg ICAgcGFja2V0LiAgU2VlIFNlY3Rpb24gNi40IGZvciBkZXRhaWxzIG9uIHRoZSBoYXNoIGFsZ29y aXRobSB1c2VkDQogICAgICBzZWxlY3QgYSBzb3VyY2UgcG9ydCBiYXNlZCBvbiB0aGUgNS10dXBs ZSBvZiB0aGUgaW5uZXIgaGVhZGVyLg0KICAgICAgVGhlIGRlc3RpbmF0aW9uIHBvcnQgTVVTVCBi ZSBzZXQgdG8gdGhlIHdlbGwta25vd24gSUFOQSBhc3NpZ25lZA0KICAgICAgcG9ydCB2YWx1ZSA0 MzQxLg0KDQogICBVRFAgQ2hlY2tzdW06ICB0aGlzIGZpZWxkIFNIT1VMRCBiZSB0cmFuc21pdHRl ZCBhcyB6ZXJvIGJ5IGFuIElUUiBmb3INCiAgICAgIGVpdGhlciBJUHY0IFtSRkMwNzY4XSBvciBJ UHY2IGVuY2Fwc3VsYXRpb24gW1VEUC1UVU5ORUxTXS4gIFdoZW4gYQ0KICAgICAgcGFja2V0IHdp dGggYSB6ZXJvIFVEUCBjaGVja3N1bSBpcyByZWNlaXZlZCBieSBhbiBFVFIsIHRoZSBFVFINCiAg ICAgIE1VU1QgYWNjZXB0IHRoZSBwYWNrZXQgZm9yIGRlY2Fwc3VsYXRpb24uICBXaGVuIGFuIElU UiB0cmFuc21pdHMgYQ0KICAgICAgbm9uLXplcm8gdmFsdWUgZm9yIHRoZSBVRFAgY2hlY2tzdW0s IGl0IE1VU1Qgc2VuZCBhIGNvcnJlY3RseQ0KICAgICAgY29tcHV0ZWQgdmFsdWUgaW4gdGhpcyBm aWVsZC4gIFdoZW4gYW4gRVRSIHJlY2VpdmVzIGEgcGFja2V0IHdpdGgNCiAgICAgIGEgbm9uLXpl cm8gVURQIGNoZWNrc3VtLCBpdCBNQVkgY2hvb3NlIHRvIHZlcmlmeSB0aGUgY2hlY2tzdW0NCiAg ICAgIHZhbHVlLiAgSWYgaXQgY2hvb3NlcyB0byBwZXJmb3JtIHN1Y2ggdmVyaWZpY2F0aW9uLCBh bmQgdGhlDQogICAgICB2ZXJpZmljYXRpb24gZmFpbHMsIHRoZSBwYWNrZXQgTVVTVCBiZSBzaWxl bnRseSBkcm9wcGVkLiAgSWYgdGhlDQogICAgICBFVFIgY2hvb3NlcyBub3QgdG8gcGVyZm9ybSB0 aGUgdmVyaWZpY2F0aW9uLCBvciBwZXJmb3JtcyB0aGUNCiAgICAgIHZlcmlmaWNhdGlvbiBzdWNj ZXNzZnVsbHksIHRoZSBwYWNrZXQgTVVTVCBiZSBhY2NlcHRlZCBmb3INCiAgICAgIGRlY2Fwc3Vs YXRpb24uICBUaGUgaGFuZGxpbmcgb2YgVURQIGNoZWNrc3VtcyBmb3IgYWxsIHR1bm5lbGluZw0K ICAgICAgcHJvdG9jb2xzLCBpbmNsdWRpbmcgTElTUCwgaXMgdW5kZXIgYWN0aXZlIGRpc2N1c3Np b24gd2l0aGluIHRoZQ0KICAgICAgSUVURi4gIFdoZW4gdGhhdCBkaXNjdXNzaW9uIGNvbmNsdWRl cywgYW55IG5lY2Vzc2FyeSBjaGFuZ2VzIHdpbGwNCiAgICAgIGJlIG1hZGUgdG8gYWxpZ24gTElT UCB3aXRoIHRoZSBvdXRjb21lIG9mIHRoZSBicm9hZGVyIGRpc2N1c3Npb24uDQoNCiAgIFVEUCBM ZW5ndGg6ICBmb3IgYW4gSVB2NCBlbmNhcHN1bGF0ZWQgcGFja2V0LCB0aGUgaW5uZXIgaGVhZGVy IFRvdGFsDQogICAgICBMZW5ndGggcGx1cyB0aGUgVURQIGFuZCBMSVNQIGhlYWRlciBsZW5ndGhz IGFyZSB1c2VkLiAgRm9yIGFuIElQdjYNCiAgICAgIGVuY2Fwc3VsYXRlZCBwYWNrZXQsIHRoZSBp bm5lciBoZWFkZXIgUGF5bG9hZCBMZW5ndGggcGx1cyB0aGUgc2l6ZQ0KICAgICAgb2YgdGhlIElQ djYgaGVhZGVyICg0MCBieXRlcykgcGx1cyB0aGUgc2l6ZSBvZiB0aGUgVURQIGFuZCBMSVNQDQoN Cg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMgSnVseSAxNiwgMjAxMCAgICAg ICAgICAgICAgICBbUGFnZSAxOV0NCgwNCkludGVybmV0LURyYWZ0ICAgIExvY2F0b3IvSUQgU2Vw YXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAxMA0KDQoNCiAgICAgIGhlYWRl cnMgYXJlIHVzZWQuICBUaGUgVURQIGhlYWRlciBsZW5ndGggaXMgOCBieXRlcy4NCg0KICAgTjog dGhpcyBpcyB0aGUgbm9uY2UtcHJlc2VudCBiaXQuICBXaGVuIHRoaXMgYml0IGlzIHNldCB0byAx LCB0aGUNCiAgICAgIGxvdy1vcmRlciAyNC1iaXRzIG9mIHRoZSBmaXJzdCAzMi1iaXRzIG9mIHRo ZSBMSVNQIGhlYWRlciBjb250YWlucw0KICAgICAgYSBOb25jZS4gIFNlZSBzZWN0aW9uIFNlY3Rp b24gNi4zLjEgZm9yIGRldGFpbHMuDQoNCiAgIEw6IHRoaXMgaXMgdGhlIExvY2F0b3ItU3RhdHVz LUJpdHMgZmllbGQgZW5hYmxlZCBiaXQuICBXaGVuIHRoaXMgYml0DQogICAgICBpcyBzZXQgdG8g MSwgdGhlIExvY2F0b3ItU3RhdHVzLUJpdHMgaW4gdGhlIHNlY29uZCAzMi1iaXRzIG9mIHRoZQ0K ICAgICAgTElTUCBoZWFkZXIgYXJlIGluIHVzZS4NCg0KICAgRTogdGhpcyBpcyB0aGUgZWNoby1u b25jZS1yZXF1ZXN0IGJpdC4gIFdoZW4gdGhpcyBiaXQgaXMgc2V0IHRvIDEsDQogICAgICB0aGUg TiBiaXQgbXVzdCBiZSAxLiAgVGhpcyBiaXQgc2hvdWxkIGJlIGlnbm9yZWQgYW5kIGhhcyBubw0K ICAgICAgbWVhbmluZyB3aGVuIHRoZSBOIGJpdCBpcyBzZXQgdG8gMC4gIFNlZSBzZWN0aW9uIFNl Y3Rpb24gNi4zLjEgZm9yDQogICAgICBkZXRhaWxzLg0KDQogICByZmxhZ3M6ICB0aGlzIDUtYml0 IGZpZWxkIGlzIHJlc2VydmVkIGZvciBmdXR1cmUgZmxhZyB1c2UuICBJdCBpcyBzZXQNCiAgICAg IHRvIDAgb24gdHJhbnNtaXQgYW5kIGlnbm9yZWQgb24gcmVjZWlwdC4NCg0KICAgTElTUCBOb25j ZTogIGlzIGEgMjQtYml0IHZhbHVlIHRoYXQgaXMgcmFuZG9tbHkgZ2VuZXJhdGVkIGJ5IGFuIElU Ug0KICAgICAgd2hlbiB0aGUgTi1iaXQgaXMgc2V0IHRvIDEuICBUaGUgbm9uY2UgaXMgYWxzbyB1 c2VkIHdoZW4gdGhlIEUtYml0DQogICAgICBpcyBzZXQgdG8gcmVxdWVzdCB0aGUgbm9uY2UgdmFs dWUgdG8gYmUgZWNob2VkIGJ5IHRoZSBvdGhlciBzaWRlDQogICAgICB3aGVuIHBhY2tldHMgYXJl IHJldHVybmVkLiAgV2hlbiB0aGUgRS1iaXQgaXMgY2xlYXIgYnV0IHRoZSBOLWJpdA0KICAgICAg aXMgc2V0LCBhIHJlbW90ZSBJVFIgaXMgZWl0aGVyIGVjaG9pbmcgYSBwcmV2aW91c2x5IHJlcXVl c3RlZA0KICAgICAgZWNoby1ub25jZSBvciBwcm92aWRpbmcgYSByYW5kb20gbm9uY2UuICBTZWUg c2VjdGlvbiBTZWN0aW9uIDYuMy4xDQogICAgICBmb3IgbW9yZSBkZXRhaWxzLg0KDQogICBMSVNQ IExvY2F0b3IgU3RhdHVzIEJpdHM6ICBpbiB0aGUgTElTUCBoZWFkZXIgYXJlIHNldCBieSBhbiBJ VFIgdG8NCiAgICAgIGluZGljYXRlIHRvIGFuIEVUUiB0aGUgdXAvZG93biBzdGF0dXMgb2YgdGhl IExvY2F0b3JzIGluIHRoZQ0KICAgICAgc291cmNlIHNpdGUuICBFYWNoIFJMT0MgaW4gYSBNYXAt UmVwbHkgaXMgYXNzaWduZWQgYW4gb3JkaW5hbA0KICAgICAgdmFsdWUgZnJvbSAwIHRvIG4tMSAo d2hlbiB0aGVyZSBhcmUgbiBSTE9DcyBpbiBhIG1hcHBpbmcgZW50cnkpLg0KICAgICAgVGhlIExv Y2F0b3IgU3RhdHVzIEJpdHMgYXJlIG51bWJlcmVkIGZyb20gMCB0byBuLTEgZnJvbSB0aGUgbGVh c3QNCiAgICAgIHNpZ25pZmljYW50IGJpdCBvZiB0aGUgMzItYml0IGZpZWxkLiAgV2hlbiBhIGJp dCBpcyBzZXQgdG8gMSwgdGhlDQogICAgICBJVFIgaXMgaW5kaWNhdGluZyB0byB0aGUgRVRSIHRo ZSBSTE9DIGFzc29jaWF0ZWQgd2l0aCB0aGUgYml0DQogICAgICBvcmRpbmFsIGhhcyB1cCBzdGF0 dXMuICBTZWUgU2VjdGlvbiA2LjMgZm9yIGRldGFpbHMgb24gaG93IGFuIElUUg0KICAgICAgY2Fu IGRldGVybWluZSBvdGhlciBJVFJzIGF0IHRoZSBzaXRlIGFyZSByZWFjaGFibGUuICBXaGVuIGEg c2l0ZQ0KICAgICAgaGFzIG11bHRpcGxlIEVJRC1wcmVmaXhlcyB3aGljaCByZXN1bHQgaW4gbXVs dGlwbGUgbWFwcGluZ3MgKHdoZXJlDQogICAgICBlYWNoIGNvdWxkIGhhdmUgYSBkaWZmZXJlbnQg bG9jYXRvci1zZXQpLCB0aGUgTG9jYXRvciBTdGF0dXMgQml0cw0KICAgICAgc2V0dGluZyBpbiBh biBlbmNhcHN1bGF0ZWQgcGFja2V0IE1VU1QgcmVmbGVjdCB0aGUgbWFwcGluZyBmb3IgdGhlDQog ICAgICBFSUQtcHJlZml4IHRoYXQgdGhlIGlubmVyLWhlYWRlciBzb3VyY2UgRUlEIGFkZHJlc3Mg bWF0Y2hlcy4NCg0KICAgV2hlbiBkb2luZyBSZWN1cnNpdmUgVHVubmVsaW5nIG9yIElUUi9QVFIg ZW5jYXBzdWxhdGlvbjoNCg0KICAgbyAgVGhlIG91dGVyIGhlYWRlciBUaW1lIHRvIExpdmUgZmll bGQgKG9yIEhvcCBMaW1pdCBmaWVsZCwgaW4gY2FzZQ0KICAgICAgb2YgSVB2NikgU0hPVUxEIGJl IGNvcGllZCBmcm9tIHRoZSBpbm5lciBoZWFkZXIgVGltZSB0byBMaXZlDQogICAgICBmaWVsZC4N Cg0KICAgbyAgVGhlIG91dGVyIGhlYWRlciBUeXBlIG9mIFNlcnZpY2UgZmllbGQgKG9yIHRoZSBU cmFmZmljIENsYXNzDQogICAgICBmaWVsZCwgaW4gdGhlIGNhc2Ugb2YgSVB2NikgU0hPVUxEIGJl IGNvcGllZCBmcm9tIHRoZSBpbm5lciBoZWFkZXINCg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAg ICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdlIDIwXQ0KDA0K SW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAg ICAgSmFudWFyeSAyMDEwDQoNCg0KICAgICAgVHlwZSBvZiBTZXJ2aWNlIGZpZWxkICh3aXRoIG9u ZSBjYXZlYXQsIHNlZSBiZWxvdykuDQoNCiAgIFdoZW4gZG9pbmcgUmUtZW5jYXBzdWxhdGVkIFR1 bm5lbGluZzoNCg0KICAgbyAgVGhlIG5ldyBvdXRlciBoZWFkZXIgVGltZSB0byBMaXZlIGZpZWxk IFNIT1VMRCBiZSBjb3BpZWQgZnJvbSB0aGUNCiAgICAgIHN0cmlwcGVkIG91dGVyIGhlYWRlciBU aW1lIHRvIExpdmUgZmllbGQuDQoNCiAgIG8gIFRoZSBuZXcgb3V0ZXIgaGVhZGVyIFR5cGUgb2Yg U2VydmljZSBmaWVsZCBTSE9VTEQgYmUgY29waWVkIGZyb20NCiAgICAgIHRoZSBzdHJpcHBlZCBP SCBoZWFkZXIgVHlwZSBvZiBTZXJ2aWNlIGZpZWxkICh3aXRoIG9uZSBjYXZlYXQsIHNlZQ0KICAg ICAgYmVsb3cpLg0KDQogICBDb3B5aW5nIHRoZSBUVEwgc2VydmVzIHR3byBwdXJwb3NlczogZmly c3QsIGl0IHByZXNlcnZlcyB0aGUgZGlzdGFuY2UNCiAgIHRoZSBob3N0IGludGVuZGVkIHRoZSBw YWNrZXQgdG8gdHJhdmVsOyBzZWNvbmQsIGFuZCBtb3JlIGltcG9ydGFudGx5LA0KICAgaXQgcHJv dmlkZXMgZm9yIHN1cHByZXNzaW9uIG9mIGxvb3BpbmcgcGFja2V0cyBpbiB0aGUgZXZlbnQgdGhl cmUgaXMNCiAgIGEgbG9vcCBvZiBjb25jYXRlbmF0ZWQgdHVubmVscyBkdWUgdG8gbWlzY29uZmln dXJhdGlvbi4NCg0KICAgVGhlIEVDTiBmaWVsZCBvY2N1cGllcyBiaXRzIDYgYW5kIDcgb2YgYm90 aCB0aGUgSVB2NCBUeXBlIG9mIFNlcnZpY2UNCiAgIGZpZWxkIGFuZCB0aGUgSVB2NiBUcmFmZmlj IENsYXNzIGZpZWxkIFtSRkMzMTY4XS4gIFRoZSBFQ04gZmllbGQNCiAgIHJlcXVpcmVzIHNwZWNp YWwgdHJlYXRtZW50IGluIG9yZGVyIHRvIGF2b2lkIGRpc2NhcmRpbmcgaW5kaWNhdGlvbnMNCiAg IG9mIGNvbmdlc3Rpb24gW1JGQzMxNjhdLiAgSVRSIGVuY2Fwc3VsYXRpb24gTVVTVCBjb3B5IHRo ZSAyLWJpdCBFQ04NCiAgIGZpZWxkIGZyb20gdGhlIGlubmVyIGhlYWRlciB0byB0aGUgb3V0ZXIg aGVhZGVyLiAgUmUtZW5jYXBzdWxhdGlvbg0KICAgTVVTVCBjb3B5IHRoZSAyLWJpdCBFQ04gZmll bGQgZnJvbSB0aGUgc3RyaXBwZWQgb3V0ZXIgaGVhZGVyIHRvIHRoZQ0KICAgbmV3IG91dGVyIGhl YWRlci4gIElmIHRoZSBFQ04gZmllbGQgY29udGFpbnMgYSBjb25nZXN0aW9uIGluZGljYXRpb24N CiAgIGNvZGVwb2ludCAodGhlIHZhbHVlIGlzICcxMScsIHRoZSBDb25nZXN0aW9uIEV4cGVyaWVu Y2VkIChDRSkNCiAgIGNvZGVwb2ludCksIHRoZW4gRVRSIGRlY2Fwc3VsYXRpb24gTVVTVCBjb3B5 IHRoZSAyLWJpdCBFQ04gZmllbGQgZnJvbQ0KICAgdGhlIHN0cmlwcGVkIG91dGVyIGhlYWRlciB0 byB0aGUgc3Vydml2aW5nIGlubmVyIGhlYWRlciB0aGF0IGlzIHVzZWQNCiAgIHRvIGZvcndhcmQg dGhlIHBhY2tldCBiZXlvbmQgdGhlIEVUUi4gIFRoZXNlIHJlcXVpcmVtZW50cyBwcmVzZXJ2ZQ0K ICAgQ29uZ2VzdGlvbiBFeHBlcmllbmNlZCAoQ0UpIGluZGljYXRpb25zIHdoZW4gYSBwYWNrZXQg dGhhdCB1c2VzIEVDTg0KICAgdHJhdmVyc2VzIGEgTElTUCB0dW5uZWwgYW5kIGJlY29tZXMgbWFy a2VkIHdpdGggYSBDRSBpbmRpY2F0aW9uIGR1ZQ0KICAgdG8gY29uZ2VzdGlvbiBiZXR3ZWVuIHRo ZSB0dW5uZWwgZW5kcG9pbnRzLg0KDQo1LjQuICBEZWFsaW5nIHdpdGggTGFyZ2UgRW5jYXBzdWxh dGVkIFBhY2tldHMNCg0KICAgSW4gdGhlIGV2ZW50IHRoYXQgdGhlIE1UVSBpc3N1ZXMgbWVudGlv bmVkIGFib3ZlIHByb3ZlIHRvIGJlIG1vcmUNCiAgIHNlcmlvdXMgdGhhbiBleHBlY3RlZCwgdGhp cyBzZWN0aW9uIHByb3Bvc2VzIDIgc2ltcGxlIG1lY2hhbmlzbXMgdG8NCiAgIGRlYWwgd2l0aCBs YXJnZSBwYWNrZXRzLiAgT25lIGlzIHN0YXRlbGVzcyB1c2luZyBJUCBmcmFnbWVudGF0aW9uIGFu ZA0KICAgdGhlIG90aGVyIGlzIHN0YXRlZnVsIHVzaW5nIFBhdGggTVRVIERpc2NvdmVyeSBbUkZD MTE5MV0uDQoNCiAgIEl0IGlzIGxlZnQgdG8gdGhlIGltcGxlbWVudG9yIHRvIGRlY2lkZSBpZiB0 aGUgc3RhdGVsZXNzIG9yIHN0YXRlZnVsDQogICBtZWNoYW5pc20gc2hvdWxkIGJlIGltcGxlbWVu dGVkLiAgQm90aCBvciBuZWl0aGVyIGNhbiBiZSBkZWNpZGVkIGFzDQogICB3ZWxsIHNpbmNlIGl0 IGlzIGEgbG9jYWwgZGVjaXNpb24gaW4gdGhlIElUUiByZWdhcmRpbmcgaG93IHRvIGRlYWwNCiAg IHdpdGggTVRVIGlzc3Vlcy4gIFNpdGVzIGNhbiBpbnRlcm9wZXJhdGUgd2l0aCBkaWZmZXJpbmcg bWVjaGFuaXNtcy4NCg0KICAgQm90aCBzdGF0ZWxlc3MgYW5kIHN0YXRlZnVsIG1lY2hhbmlzbXMg YWxzbyBhcHBseSB0byBSZWVuY2Fwc3VsYXRpbmcNCiAgIGFuZCBSZWN1cnNpdmUgVHVubmVsaW5n LiAgU28gYW55IGFjdGlvbnMgcmVmZXJlbmNlIGJlbG93IHRvIGFuIElUUg0KICAgYWxzbyBhcHBs eSB0byBhbiBURS1JVFIuDQoNCg0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBp cmVzIEp1bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1BhZ2UgMjFdDQoMDQpJbnRlcm5ldC1E cmFmdCAgICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5 IDIwMTANCg0KDQo1LjQuMS4gIEEgU3RhdGVsZXNzIFNvbHV0aW9uIHRvIE1UVSBIYW5kbGluZw0K DQogICBBbiBJVFIgc3RhdGVsZXNzIHNvbHV0aW9uIHRvIGhhbmRsZSBNVFUgaXNzdWVzIGlzIGRl c2NyaWJlZCBhcw0KICAgZm9sbG93czoNCg0KICAgMS4gIERlZmluZSBhbiBhcmNoaXRlY3R1cmFs IGNvbnN0YW50IFMgZm9yIHRoZSBtYXhpbXVtIHNpemUgb2YgYQ0KICAgICAgIHBhY2tldCwgaW4g Ynl0ZXMsIGFuIElUUiB3b3VsZCByZWNlaXZlIGZyb20gYSBzb3VyY2UgaW5zaWRlIG9mDQogICAg ICAgaXRzIHNpdGUuDQoNCiAgIDIuICBEZWZpbmUgTCB0byBiZSB0aGUgbWF4aW11bSBzaXplLCBp biBieXRlcywgYSBwYWNrZXQgb2Ygc2l6ZSBTDQogICAgICAgd291bGQgYmUgYWZ0ZXIgdGhlIElU UiBwcmVwZW5kcyB0aGUgTElTUCBoZWFkZXIsIFVEUCBoZWFkZXIsIGFuZA0KICAgICAgIG91dGVy IG5ldHdvcmsgbGF5ZXIgaGVhZGVyIG9mIHNpemUgSC4NCg0KICAgMy4gIENhbGN1bGF0ZTogUyAr IEggPSBMLg0KDQogICBXaGVuIGFuIElUUiByZWNlaXZlcyBhIHBhY2tldCBmcm9tIGEgc2l0ZS1m YWNpbmcgaW50ZXJmYWNlIGFuZCBhZGRzIEgNCiAgIGJ5dGVzIHdvcnRoIG9mIGVuY2Fwc3VsYXRp b24gdG8geWllbGQgYSBwYWNrZXQgc2l6ZSBncmVhdGVyIHRoYW4gTA0KICAgYnl0ZXMsIGl0IHJl c29sdmVzIHRoZSBNVFUgaXNzdWUgYnkgZmlyc3Qgc3BsaXR0aW5nIHRoZSBvcmlnaW5hbA0KICAg cGFja2V0IGludG8gMiBlcXVhbC1zaXplZCBmcmFnbWVudHMuICBBIExJU1AgaGVhZGVyIGlzIHRo ZW4gcHJlcGVuZGVkDQogICB0byBlYWNoIGZyYWdtZW50LiAgVGhpcyB3aWxsIGVuc3VyZSB0aGF0 IHRoZSBuZXcsIGVuY2Fwc3VsYXRlZA0KICAgcGFja2V0cyBhcmUgb2Ygc2l6ZSAoUy8yICsgSCks IHdoaWNoIGlzIGFsd2F5cyBiZWxvdyB0aGUgZWZmZWN0aXZlDQogICB0dW5uZWwgTVRVLg0KDQog ICBXaGVuIGFuIEVUUiByZWNlaXZlcyBlbmNhcHN1bGF0ZWQgZnJhZ21lbnRzLCBpdCB0cmVhdHMg dGhlbSBhcyB0d28NCiAgIGluZGl2aWR1YWxseSBlbmNhcHN1bGF0ZWQgcGFja2V0cy4gIEl0IHN0 cmlwcyB0aGUgTElTUCBoZWFkZXJzIHRoZW4NCiAgIGZvcndhcmRzIGVhY2ggZnJhZ21lbnQgdG8g dGhlIGRlc3RpbmF0aW9uIGhvc3Qgb2YgdGhlIGRlc3RpbmF0aW9uDQogICBzaXRlLiAgVGhlIHR3 byBmcmFnbWVudHMgYXJlIHJlYXNzZW1ibGVkIGF0IHRoZSBkZXN0aW5hdGlvbiBob3N0IGludG8N CiAgIHRoZSBzaW5nbGUgSVAgZGF0YWdyYW0gdGhhdCB3YXMgb3JpZ2luYXRlZCBieSB0aGUgc291 cmNlIGhvc3QuDQoNCiAgIFRoaXMgYmVoYXZpb3IgaXMgcGVyZm9ybWVkIGJ5IHRoZSBJVFIgd2hl biB0aGUgc291cmNlIGhvc3Qgb3JpZ2luYXRlcw0KICAgYSBwYWNrZXQgd2l0aCB0aGUgREYgZmll bGQgb2YgdGhlIElQIGhlYWRlciBpcyBzZXQgdG8gMC4gIFdoZW4gdGhlIERGDQogICBmaWVsZCBv ZiB0aGUgSVAgaGVhZGVyIGlzIHNldCB0byAxLCBvciB0aGUgcGFja2V0IGlzIGFuIElQdjYgcGFj a2V0DQogICBvcmlnaW5hdGVkIGJ5IHRoZSBzb3VyY2UgaG9zdCwgdGhlIElUUiB3aWxsIGRyb3Ag dGhlIHBhY2tldCB3aGVuIHRoZQ0KICAgc2l6ZSBpcyBncmVhdGVyIHRoYW4gTCwgYW5kIHNlbmRz IGFuIElDTVAgVG9vIEJpZyBtZXNzYWdlIHRvIHRoZQ0KICAgc291cmNlIHdpdGggYSB2YWx1ZSBv ZiBTLCB3aGVyZSBTIGlzIChMIC0gSCkuDQoNCiAgIFdoZW4gdGhlIG91dGVyIGhlYWRlciBlbmNh cHN1bGF0aW9uIHVzZXMgYW4gSVB2NCBoZWFkZXIsIGFuDQogICBpbXBsZW1lbnRhdGlvbiBzaG91 bGQgY29uc2lkZXIgdGhlIGNob2ljZSBvZiBkZWZhdWx0IHNldHRpbmcgdGhlIERGDQogICBiaXQg dG8gMSBzbyBFVFIgcGFja2V0IGZyYWdtZW50IHJlYXNzZW1ibHkgY2FuIGJlIGF2b2lkZWQuDQoN CiAgIFRoaXMgc3BlY2lmaWNhdGlvbiByZWNvbW1lbmRzIHRoYXQgTCBiZSBkZWZpbmVkIGFzIDE1 MDAuDQoNCjUuNC4yLiAgQSBTdGF0ZWZ1bCBTb2x1dGlvbiB0byBNVFUgSGFuZGxpbmcNCg0KICAg QW4gSVRSIHN0YXRlZnVsIHNvbHV0aW9uIHRvIGhhbmRsZSBNVFUgaXNzdWVzIGlzIGRlc2NyaWJl ZCBhcyBmb2xsb3dzDQogICBhbmQgd2FzIGZpcnN0IGludHJvZHVjZWQgaW4gW09QRU5MSVNQXToN Cg0KDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMgSnVseSAxNiwgMjAx MCAgICAgICAgICAgICAgICBbUGFnZSAyMl0NCgwNCkludGVybmV0LURyYWZ0ICAgIExvY2F0b3Iv SUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAxMA0KDQoNCiAgIDEu ICBUaGUgSVRSIHdpbGwga2VlcCBzdGF0ZSBvZiB0aGUgZWZmZWN0aXZlIE1UVSBmb3IgZWFjaCBs b2NhdG9yIHBlcg0KICAgICAgIG1hcHBpbmcgY2FjaGUgZW50cnkuICBUaGUgZWZmZWN0aXZlIE1U VSBpcyB3aGF0IHRoZSBjb3JlIG5ldHdvcmsNCiAgICAgICBjYW4gZGVsaXZlciBhbG9uZyB0aGUg cGF0aCBiZXR3ZWVuIElUUiBhbmQgRVRSLg0KDQogICAyLiAgV2hlbiBhbiBJUHY2IGVuY2Fwc3Vs YXRlZCBwYWNrZXQgb3IgYW4gSVB2NCBlbmNhcHN1bGF0ZWQgcGFja2V0DQogICAgICAgd2l0aCBE RiBiaXQgc2V0IHRvIDEsIGV4Y2VlZHMgd2hhdCB0aGUgY29yZSBuZXR3b3JrIGNhbiBkZWxpdmVy LA0KICAgICAgIG9uZSBvZiB0aGUgaW50ZXJtZWRpYXRlIHJvdXRlcnMgb24gdGhlIHBhdGggd2ls bCBzZW5kIGFuIElDTVAgVG9vDQogICAgICAgQmlnIG1lc3NhZ2UgdG8gdGhlIElUUi4gIFRoZSBJ VFIgd2lsbCBwYXJzZSB0aGUgSUNNUCBtZXNzYWdlIHRvDQogICAgICAgZGV0ZXJtaW5lIHdoaWNo IGxvY2F0b3IgaXMgYWZmZWN0ZWQgYnkgdGhlIGVmZmVjdGl2ZSBNVFUgY2hhbmdlDQogICAgICAg YW5kIHRoZW4gcmVjb3JkIHRoZSBuZXcgZWZmZWN0aXZlIE1UVSB2YWx1ZSBpbiB0aGUgbWFwcGlu ZyBjYWNoZQ0KICAgICAgIGVudHJ5Lg0KDQogICAzLiAgV2hlbiBhIHBhY2tldCBpcyByZWNlaXZl ZCBieSB0aGUgSVRSIGZyb20gYSBzb3VyY2UgaW5zaWRlIG9mIHRoZQ0KICAgICAgIHNpdGUgYW5k IHRoZSBzaXplIG9mIHRoZSBwYWNrZXQgaXMgZ3JlYXRlciB0aGFuIHRoZSBlZmZlY3RpdmUgTVRV DQogICAgICAgc3RvcmVkIHdpdGggdGhlIG1hcHBpbmcgY2FjaGUgZW50cnkgYXNzb2NpYXRlZCB3 aXRoIHRoZQ0KICAgICAgIGRlc3RpbmF0aW9uIEVJRCB0aGUgcGFja2V0IGlzIGZvciwgdGhlIElU UiB3aWxsIHNlbmQgYW4gSUNNUCBUb28NCiAgICAgICBCaWcgbWVzc2FnZSBiYWNrIHRvIHRoZSBz b3VyY2UuICBUaGUgcGFja2V0IHNpemUgYWR2ZXJ0aXNlZCBieQ0KICAgICAgIHRoZSBJVFIgaW4g dGhlIElDTVAgVG9vIEJpZyBtZXNzYWdlIGlzIHRoZSBlZmZlY3RpdmUgTVRVIG1pbnVzDQogICAg ICAgdGhlIExJU1AgZW5jYXBzdWxhdGlvbiBsZW5ndGguDQoNCiAgIEV2ZW4gdGhvdWdoIHRoaXMg bWVjaGFuaXNtIGlzIHN0YXRlZnVsLCBpdCBoYXMgYWR2YW50YWdlcyBvdmVyIHRoZQ0KICAgc3Rh dGVsZXNzIElQIGZyYWdtZW50YXRpb24gbWVjaGFuaXNtLCBieSBub3QgaW52b2x2aW5nIHRoZQ0K ICAgZGVzdGluYXRpb24gaG9zdCB3aXRoIHJlYXNzZW1ibHkgb2YgSVRSIGZyYWdtZW50ZWQgcGFj a2V0cy4NCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAgICAg ICAgICAgICAgICAgW1BhZ2UgMjNdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICBMb2NhdG9yL0lEIFNl cGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTANCg0KDQo2LiAgRUlELXRv LVJMT0MgTWFwcGluZw0KDQo2LjEuICBMSVNQIElQdjQgYW5kIElQdjYgQ29udHJvbCBQbGFuZSBQ YWNrZXQgRm9ybWF0cw0KDQogICBUaGUgZm9sbG93aW5nIG5ldyBVRFAgcGFja2V0IHR5cGVzIGFy ZSB1c2VkIHRvIHJldHJpZXZlIEVJRC10by1STE9DDQogICBtYXBwaW5nczoNCg0KDQogICAgICAg MCAgICAgICAgICAgICAgICAgICAxICAgICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAg ICAgMw0KICAgICAgIDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEg MiAzIDQgNSA2IDcgOCA5IDAgMQ0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgICAgfFZlcnNpb258ICBJ SEwgIHxUeXBlIG9mIFNlcnZpY2V8ICAgICAgICAgIFRvdGFsIExlbmd0aCAgICAgICAgIHwNCiAg ICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKw0KICAgICAgIHwgICAgICAgICBJZGVudGlmaWNhdGlvbiAgICAgICAgfEZs YWdzfCAgICAgIEZyYWdtZW50IE9mZnNldCAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgICB8 ICBUaW1lIHRvIExpdmUgfCBQcm90b2NvbCA9IDE3IHwgICAgICAgICBIZWFkZXIgQ2hlY2tzdW0g ICAgICAgfA0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgICAgfCAgICAgICAgICAgICAgICAgICAgU291 cmNlIFJvdXRpbmcgTG9jYXRvciAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICArLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Kw0KICAgICAgIHwgICAgICAgICAgICAgICAgIERlc3RpbmF0aW9uIFJvdXRpbmcgTG9jYXRvciAg ICAgICAgICAgICAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgLyB8ICAgICAgICAgICBT b3VyY2UgUG9ydCAgICAgICAgIHwgICAgICAgICBEZXN0IFBvcnQgICAgICAgICAgICAgfA0KICAg VURQICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rDQogICAgIFwgfCAgICAgICAgICAgVURQIExlbmd0aCAgICAgICAgICB8ICAg ICAgICBVRFAgQ2hlY2tzdW0gICAgICAgICAgIHwNCiAgICAgICArLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICAgIHwg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICB8DQogICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICBMSVNQIE1lc3NhZ2UgICAg ICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r DQoNCg0KICAgICAgICAwICAgICAgICAgICAgICAgICAgIDEgICAgICAgICAgICAgICAgICAgMiAg ICAgICAgICAgICAgICAgICAzDQogICAgICAgIDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0 IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMQ0KICAgICAgICstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAg ICAgfFZlcnNpb258IFRyYWZmaWMgQ2xhc3MgfCAgICAgICAgICAgRmxvdyBMYWJlbCAgICAgICAg ICAgICAgICAgIHwNCiAgICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICAgIHwgICAgICAgICBQYXlsb2FkIExl bmd0aCAgICAgICAgfCBOZXh0IEhlYWRlcj0xN3wgICBIb3AgTGltaXQgICB8DQogICAgICAgKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSsNCiAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICsgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICArDQogICAgICAgfCAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwN CiAgICAgICArICAgICAgICAgICAgICAgICAgICAgU291cmNlIFJvdXRpbmcgTG9jYXRvciAgICAg ICAgICAgICAgICAgICAgKw0KICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICAgICAgKyAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICsNCiAgICAg ICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgfA0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgICAgfCAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICArICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgKw0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1bHkgMTYsIDIw MTAgICAgICAgICAgICAgICAgW1BhZ2UgMjRdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICBMb2NhdG9y L0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTANCg0KDQogICAg ICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIHwNCiAgICAgICArICAgICAgICAgICAgICAgICAgRGVzdGluYXRpb24gUm91dGlu ZyBMb2NhdG9yICAgICAgICAgICAgICAgICAgKw0KICAgICAgIHwgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICAgICAgKyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICsNCiAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgIC8gfCAgICAgICAg ICAgU291cmNlIFBvcnQgICAgICAgICB8ICAgICAgICAgRGVzdCBQb3J0ICAgICAgICAgICAgIHwN CiAgIFVEUCArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKw0KICAgICBcIHwgICAgICAgICAgIFVEUCBMZW5ndGggICAgICAgICAg fCAgICAgICAgVURQIENoZWNrc3VtICAgICAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAg ICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgfA0KICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgTElTUCBNZXNzYWdl ICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICAgICAgfCAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICArLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKw0KDQoNCiAgIFRoZSBMSVNQIFVEUC1iYXNlZCBtZXNzYWdlcyBhcmUgdGhlIE1hcC1SZXF1 ZXN0IGFuZCBNYXAtUmVwbHkNCiAgIG1lc3NhZ2VzLiAgV2hlbiBhIFVEUCBNYXAtUmVxdWVzdCBp cyBzZW50LCB0aGUgVURQIHNvdXJjZSBwb3J0IGlzDQogICBjaG9zZW4gYnkgdGhlIHNlbmRlciBh bmQgdGhlIGRlc3RpbmF0aW9uIFVEUCBwb3J0IG51bWJlciBpcyBzZXQgdG8NCiAgIDQzNDIuICBX aGVuIGEgVURQIE1hcC1SZXBseSBpcyBzZW50LCB0aGUgc291cmNlIFVEUCBwb3J0IG51bWJlciBp cw0KICAgc2V0IHRvIDQzNDIgYW5kIHRoZSBkZXN0aW5hdGlvbiBVRFAgcG9ydCBudW1iZXIgaXMg Y29waWVkIGZyb20gdGhlDQogICBzb3VyY2UgcG9ydCBvZiBlaXRoZXIgdGhlIE1hcC1SZXF1ZXN0 IG9yIHRoZSBpbnZva2luZyBkYXRhIHBhY2tldC4NCg0KICAgVGhlIFVEUCBMZW5ndGggZmllbGQg d2lsbCByZWZsZWN0IHRoZSBsZW5ndGggb2YgdGhlIFVEUCBoZWFkZXIgYW5kDQogICB0aGUgTElT UCBNZXNzYWdlIHBheWxvYWQuDQoNCiAgIFRoZSBVRFAgQ2hlY2tzdW0gaXMgY29tcHV0ZWQgYW5k IHNldCB0byBub24temVybyBmb3IgTWFwLVJlcXVlc3QsDQogICBNYXAtUmVwbHksIE1hcC1SZWdp c3RlciBhbmQgRUNNIGNvbnRyb2wgbWVzc2FnZXMuICBJdCBNVVNUIGJlIGNoZWNrZWQNCiAgIG9u IHJlY2VpcHQgYW5kIGlmIHRoZSBjaGVja3N1bSBmYWlscywgdGhlIHBhY2tldCBNVVNUIGJlIGRy b3BwZWQuDQoNCiAgIExJU1AtQ09OUyBbQ09OU10gdXNlIFRDUCB0byBzZW5kIExJU1AgY29udHJv bCBtZXNzYWdlcy4gIFRoZSBmb3JtYXQNCiAgIG9mIGNvbnRyb2wgbWVzc2FnZXMgaW5jbHVkZXMg dGhlIFVEUCBoZWFkZXIgc28gdGhlIGNoZWNrc3VtIGFuZA0KICAgbGVuZ3RoIGZpZWxkcyBjYW4g YmUgdXNlZCB0byBwcm90ZWN0IGFuZCBkZWxpbWl0IG1lc3NhZ2UgYm91bmRhcmllcy4NCg0KICAg VGhpcyBtYWluIExJU1Agc3BlY2lmaWNhdGlvbiBpcyB0aGUgYXV0aG9yaXRhdGl2ZSBzb3VyY2Ug Zm9yIG1lc3NhZ2UNCiAgIGZvcm1hdCBkZWZpbml0aW9ucyBmb3IgdGhlIE1hcC1SZXF1ZXN0IGFu ZCBNYXAtUmVwbHkgbWVzc2FnZXMuDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpGYXJp bmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMgSnVseSAxNiwgMjAxMCAgICAgICAgICAgICAg ICBbUGFnZSAyNV0NCgwNCkludGVybmV0LURyYWZ0ICAgIExvY2F0b3IvSUQgU2VwYXJhdGlvbiBQ cm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAxMA0KDQoNCjYuMS4xLiAgTElTUCBQYWNrZXQg VHlwZSBBbGxvY2F0aW9ucw0KDQogICBUaGlzIHNlY3Rpb24gd2lsbCBiZSB0aGUgYXV0aG9yaXRh dGl2ZSBzb3VyY2UgZm9yIGFsbG9jYXRpbmcgTElTUA0KICAgVHlwZSB2YWx1ZXMuICBDdXJyZW50 IGFsbG9jYXRpb25zIGFyZToNCg0KDQogICAgICAgUmVzZXJ2ZWQ6ICAgICAgICAgICAgICAgICAg ICAgICAgICAwICAgIGInMDAwMCcNCiAgICAgICBMSVNQIE1hcC1SZXF1ZXN0OiAgICAgICAgICAg ICAgICAgIDEgICAgYicwMDAxJw0KICAgICAgIExJU1AgTWFwLVJlcGx5OiAgICAgICAgICAgICAg ICAgICAgMiAgICBiJzAwMTAnDQogICAgICAgTElTUCBNYXAtUmVnaXN0ZXI6ICAgICAgICAgICAg ICAgICAzICAgIGInMDAxMScNCiAgICAgICBMSVNQIEVuY2Fwc3VsYXRlZCBDb250cm9sIE1lc3Nh Z2U6IDggICAgYicxMDAwJw0KDQoNCjYuMS4yLiAgTWFwLVJlcXVlc3QgTWVzc2FnZSBGb3JtYXQN Cg0KDQoNCiAgICAgICAgMCAgICAgICAgICAgICAgICAgICAxICAgICAgICAgICAgICAgICAgIDIg ICAgICAgICAgICAgICAgICAgMw0KICAgICAgICAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMg NCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDENCiAgICAgICArLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAg ICAgIHxUeXBlPTEgfEF8TXxQfFN8ICAgICAgICAgICBSZXNlcnZlZCAgICAgICAgICAgIHwgUmVj b3JkIENvdW50ICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgICB8ICAgICAgICAgICAgICAgICAg ICAgICAgIE5vbmNlIC4gLiAuICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rDQogICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAuIC4gLiBOb25jZSAgICAg ICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICAgIHwgICAgICAg ICBTb3VyY2UtRUlELUFGSSAgICAgICAgfCAgICAgICAgICAgIElUUi1BRkkgICAgICAgICAgICB8 DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSsNCiAgICAgICB8ICAgICAgICAgICAgICAgICAgIFNvdXJjZSBFSUQg QWRkcmVzcyAgLi4uICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAg ICAgfCAgICAgICAgICAgICAgICBPcmlnaW5hdGluZyBJVFIgUkxPQyBBZGRyZXNzIC4uLiAgICAg ICAgICAgICAgIHwNCiAgICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICAvIHwgICBSZXNlcnZlZCAgICB8IEVJ RCBtYXNrLWxlbiAgfCAgICAgICAgRUlELXByZWZpeC1BRkkgICAgICAgICB8DQogICBSZWMgKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSsNCiAgICAgXCB8ICAgICAgICAgICAgICAgICAgICAgICBFSUQtcHJlZml4ICAuLi4gICAg ICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICAgICAgfCAgICAgICAg ICAgICAgICAgICBNYXAtUmVwbHkgUmVjb3JkICAuLi4gICAgICAgICAgICAgICAgICAgICAgIHwN CiAgICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKw0KICAgICAgIHwgICAgICAgICAgICAgICAgICAgICBNYXBwaW5nIFBy b3RvY29sIERhdGEgICAgICAgICAgICAgICAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCg0KDQog ICBQYWNrZXQgZmllbGQgZGVzY3JpcHRpb25zOg0KDQoNCg0KDQoNCg0KDQoNCkZhcmluYWNjaSwg ZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdl IDI2XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29s IChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoNCg0KICAgVHlwZTogICAxIChNYXAtUmVxdWVzdCkN Cg0KICAgQTogVGhpcyBpcyBhbiBhdXRob3JpdGF0aXZlIGJpdCwgd2hpY2ggaXMgc2V0IHRvIDAg Zm9yIFVEUC1iYXNlZCBNYXAtDQogICAgICBSZXF1ZXN0cyBzZW50IGJ5IGFuIElUUi4NCg0KICAg TTogV2hlbiBzZXQsIGl0IGluZGljYXRlcyBhIE1hcC1SZXBseSBSZWNvcmQgc2VnbWVudCBpcyBp bmNsdWRlZCBpbg0KICAgICAgdGhlIE1hcC1SZXF1ZXN0Lg0KDQogICBQOiBJbmRpY2F0ZXMgdGhh dCBhIE1hcC1SZXF1ZXN0IHNob3VsZCBiZSB0cmVhdGVkIGFzIGEgInBpZ2d5YmFjayINCiAgICAg IGxvY2F0b3IgcmVhY2hhYmlsaXR5IHByb2JlLiAgVGhlIHJlY2VpdmVyIHNob3VsZCByZXNwb25k IHdpdGggYQ0KICAgICAgTWFwLVJlcGx5IHdpdGggdGhlIFAgYml0IHNldCBhbmQgdGhlIG5vbmNl IGNvcGllZCBmcm9tIHRoZSBNYXAtDQogICAgICBSZXF1ZXN0LiAgU2VlIHNlY3Rpb24gU2VjdGlv biA2LjMuMiBmb3IgbW9yZSBkZXRhaWxzLg0KDQogICBTOiBUaGlzIGlzIHRoZSBTTVIgYml0LiAg U2VlIFNlY3Rpb24gNi41LjIgZm9yIGRldGFpbHMuDQoNCiAgIFJlc2VydmVkOiAgU2V0IHRvIDAg b24gdHJhbnNtaXNzaW9uIGFuZCBpZ25vcmVkIG9uIHJlY2VpcHQuDQoNCiAgIFJlY29yZCBDb3Vu dDogIFRoZSBudW1iZXIgb2YgcmVjb3JkcyBpbiB0aGlzIE1hcC1SZXF1ZXN0IG1lc3NhZ2UuICBB DQogICAgICByZWNvcmQgaXMgY29tcHJpc2VkIG9mIHRoZSBwb3J0aW9uIG9mIHRoZSBwYWNrZXQg dGhhdCBpcyBsYWJlbGVkDQogICAgICAnUmVjJyBhYm92ZSBhbmQgb2NjdXJzIHRoZSBudW1iZXIg b2YgdGltZXMgZXF1YWwgdG8gUmVjb3JkIENvdW50Lg0KICAgICAgRm9yIHRoaXMgdmVyc2lvbiBv ZiB0aGUgcHJvdG9jb2wsIGEgcmVjZWl2ZXIgTVVTVCBhY2NlcHQgYW5kDQogICAgICBwcm9jZXNz IE1hcC1SZXF1ZXN0cyB0aGF0IGNvbnRhaW4gb25lIG9yIG1vcmUgcmVjb3JkcywgYnV0IGENCiAg ICAgIHNlbmRlciBNVVNUIG9ubHkgc2VuZCBNYXAtUmVxdWVzdHMgY29udGFpbmluZyBvbmUgcmVj b3JkLiAgU3VwcG9ydA0KICAgICAgZm9yIHJlcXVlc3RpbmcgbXVsdGlwbGUgRUlEcyBpbiBhIHNp bmdsZSBNYXAtUmVxdWVzdCBtZXNzYWdlIHdpbGwNCiAgICAgIGJlIHNwZWNpZmllZCBpbiBhIGZ1 dHVyZSB2ZXJzaW9uIG9mIHRoZSBwcm90b2NvbC4NCg0KICAgTm9uY2U6ICBBbiA4LWJ5dGUgcmFu ZG9tIHZhbHVlIGNyZWF0ZWQgYnkgdGhlIHNlbmRlciBvZiB0aGUgTWFwLQ0KICAgICAgUmVxdWVz dC4gIFRoaXMgbm9uY2Ugd2lsbCBiZSByZXR1cm5lZCBpbiB0aGUgTWFwLVJlcGx5LiAgVGhlDQog ICAgICBzZWN1cml0eSBvZiB0aGUgTElTUCBtYXBwaW5nIHByb3RvY29sIGRlcGVuZHMgY3JpdGlj YWxseSBvbiB0aGUNCiAgICAgIHN0cmVuZ3RoIG9mIHRoZSBub25jZSBpbiB0aGUgTWFwLVJlcXVl c3QgbWVzc2FnZS4gIFRoZSBub25jZQ0KICAgICAgU0hPVUxEIGJlIGdlbmVyYXRlZCBieSBhIHBy b3Blcmx5IHNlZWRlZCBwc2V1ZG8tcmFuZG9tIChvciBzdHJvbmcNCiAgICAgIHJhbmRvbSkgc291 cmNlLiAgU2VlIFtSRkM0MDg2XSBmb3IgYWR2aWNlIG9uIGdlbmVyYXRpbmcgc2VjdXJpdHktDQog ICAgICBzZW5zaXRpdmUgcmFuZG9tIGRhdGEuDQoNCiAgIFNvdXJjZS1FSUQtQUZJOiAgQWRkcmVz cyBmYW1pbHkgb2YgdGhlICJTb3VyY2UgRUlEIEFkZHJlc3MiIGZpZWxkLg0KDQogICBJVFItQUZJ OiAgQWRkcmVzcyBmYW1pbHkgb2YgdGhlICJPcmlnaW5hdGluZyBJVFIgUkxPQyBBZGRyZXNzIiBm aWVsZC4NCg0KICAgU291cmNlIEVJRCBBZGRyZXNzOiAgVGhpcyBpcyB0aGUgRUlEIG9mIHRoZSBz b3VyY2UgaG9zdCB3aGljaA0KICAgICAgb3JpZ2luYXRlZCB0aGUgcGFja2V0IHdoaWNoIGlzIGlu dm9raW5nIHRoaXMgTWFwLVJlcXVlc3QuICBXaGVuDQogICAgICBNYXAtUmVxdWVzdHMgYXJlIHVz ZWQgZm9yIHJlZnJlc2hpbmcgYSBtYXAtY2FjaGUgZW50cnkgb3IgZm9yDQogICAgICBSTE9DLXBy b2JpbmcsIHRoZSB2YWx1ZSAwIGlzIHVzZWQuDQoNCiAgIE9yaWdpbmF0aW5nIElUUiBSTE9DIEFk ZHJlc3M6ICBVc2VkIHRvIGdpdmUgdGhlIEVUUiB0aGUgb3B0aW9uIG9mDQogICAgICByZXR1cm5p bmcgYSBNYXAtUmVwbHkgaW4gdGhlIGFkZHJlc3MtZmFtaWx5IG9mIHRoaXMgbG9jYXRvci4NCg0K DQoNCg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEw ICAgICAgICAgICAgICAgIFtQYWdlIDI3XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9J RCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoNCg0KICAgRUlE IG1hc2stbGVuOiAgTWFzayBsZW5ndGggZm9yIEVJRCBwcmVmaXguDQoNCiAgIEVJRC1BRkk6ICBB ZGRyZXNzIGZhbWlseSBvZiBFSUQtcHJlZml4IGFjY29yZGluZyB0byBbUkZDMjQzNF0NCg0KICAg RUlELXByZWZpeDogIDQgYnl0ZXMgaWYgYW4gSVB2NCBhZGRyZXNzLWZhbWlseSwgMTYgYnl0ZXMg aWYgYW4gSVB2Ng0KICAgICAgYWRkcmVzcy1mYW1pbHkuICBXaGVuIGEgTWFwLVJlcXVlc3QgaXMg c2VudCBieSBhbiBJVFIgYmVjYXVzZSBhDQogICAgICBkYXRhIHBhY2tldCBpcyByZWNlaXZlZCBm b3IgYSBkZXN0aW5hdGlvbiB3aGVyZSB0aGVyZSBpcyBubw0KICAgICAgbWFwcGluZyBlbnRyeSwg dGhlIEVJRC1wcmVmaXggaXMgc2V0IHRvIHRoZSBkZXN0aW5hdGlvbiBJUCBhZGRyZXNzDQogICAg ICBvZiB0aGUgZGF0YSBwYWNrZXQuICBBbmQgdGhlICdFSUQgbWFzay1sZW4nIGlzIHNldCB0byAz MiBvciAxMjgNCiAgICAgIGZvciBJUHY0IG9yIElQdjYsIHJlc3BlY3RpdmVseS4gIFdoZW4gYW4g eFRSIHdhbnRzIHRvIHF1ZXJ5IGEgc2l0ZQ0KICAgICAgYWJvdXQgdGhlIHN0YXR1cyBvZiBhIG1h cHBpbmcgaXQgYWxyZWFkeSBoYXMgY2FjaGVkLCB0aGUgRUlELQ0KICAgICAgcHJlZml4IHVzZWQg aW4gdGhlIE1hcC1SZXF1ZXN0IGhhcyB0aGUgc2FtZSBtYXNrLWxlbmd0aCBhcyB0aGUNCiAgICAg IEVJRC1wcmVmaXggcmV0dXJuZWQgZnJvbSB0aGUgc2l0ZSB3aGVuIGl0IHNlbnQgYSBNYXAtUmVw bHkNCiAgICAgIG1lc3NhZ2UuDQoNCiAgIE1hcC1SZXBseSBSZWNvcmQ6ICBXaGVuIHRoZSBNIGJp dCBpcyBzZXQsIHRoaXMgZmllbGQgaXMgdGhlIHNpemUgb2YNCiAgICAgIHRoZSAiUmVjb3JkIiBm aWVsZCBpbiB0aGUgTWFwLVJlcGx5IGZvcm1hdC4gIFRoaXMgTWFwLVJlcGx5IHJlY29yZA0KICAg ICAgY29udGFpbnMgdGhlIEVJRC10by1STE9DIG1hcHBpbmcgZW50cnkgYXNzb2NpYXRlZCB3aXRo IHRoZSBTb3VyY2UNCiAgICAgIEVJRC4gIFRoaXMgYWxsb3dzIHRoZSBFVFIgd2hpY2ggd2lsbCBy ZWNlaXZlIHRoaXMgTWFwLVJlcXVlc3QgdG8NCiAgICAgIGNhY2hlIHRoZSBkYXRhIGlmIGl0IGNo b29zZXMgdG8gZG8gc28uDQoNCiAgIE1hcHBpbmcgUHJvdG9jb2wgRGF0YTogIFNlZSBbQ09OU10g b3IgW0FMVF0gZm9yIGRldGFpbHMuICBUaGlzIGZpZWxkDQogICAgICBpcyBvcHRpb25hbCBhbmQg cHJlc2VudCB3aGVuIHRoZSBVRFAgbGVuZ3RoIGluZGljYXRlcyB0aGVyZSBpcw0KICAgICAgZW5v dWdoIHNwYWNlIGluIHRoZSBwYWNrZXQgdG8gaW5jbHVkZSBpdC4NCg0KNi4xLjMuICBFSUQtdG8t UkxPQyBVRFAgTWFwLVJlcXVlc3QgTWVzc2FnZQ0KDQogICBBIE1hcC1SZXF1ZXN0IGlzIHNlbnQg ZnJvbSBhbiBJVFIgd2hlbiBpdCBuZWVkcyBhIG1hcHBpbmcgZm9yIGFuIEVJRCwNCiAgIHdhbnRz IHRvIHRlc3QgYW4gUkxPQyBmb3IgcmVhY2hhYmlsaXR5LCBvciB3YW50cyB0byByZWZyZXNoIGEg bWFwcGluZw0KICAgYmVmb3JlIFRUTCBleHBpcmF0aW9uLiAgRm9yIHRoZSBpbml0aWFsIGNhc2Us IHRoZSBkZXN0aW5hdGlvbiBJUA0KICAgYWRkcmVzcyB1c2VkIGZvciB0aGUgTWFwLVJlcXVlc3Qg aXMgdGhlIGRlc3RpbmF0aW9uLUVJRCBmcm9tIHRoZQ0KICAgcGFja2V0IHdoaWNoIGhhZCBhIG1h cHBpbmcgY2FjaGUgbG9va3VwIGZhaWx1cmUuICBGb3IgdGhlIGxhdGVyIDINCiAgIGNhc2VzLCB0 aGUgZGVzdGluYXRpb24gSVAgYWRkcmVzcyB1c2VkIGZvciB0aGUgTWFwLVJlcXVlc3QgaXMgb25l IG9mDQogICB0aGUgUkxPQyBhZGRyZXNzZXMgZnJvbSB0aGUgbG9jYXRvci1zZXQgb2YgdGhlIG1h cCBjYWNoZSBlbnRyeS4gIFRoZQ0KICAgc291cmNlIGFkZHJlc3MgaXMgZWl0aGVyIGFuIElQdjQg b3IgSVB2NiBSTE9DIGFkZHJlc3MgZGVwZW5kaW5nIGlmDQogICB0aGUgTWFwLVJlcXVlc3QgaXMg dXNpbmcgYW4gSVB2NCB2ZXJzdXMgSVB2NiBoZWFkZXIsIHJlc3BlY3RpdmVseS4NCiAgIEluIGFs bCBjYXNlcywgdGhlIFVEUCBzb3VyY2UgcG9ydCBudW1iZXIgZm9yIHRoZSBNYXAtUmVxdWVzdCBt ZXNzYWdlDQogICBpcyBhIHJhbmRvbWx5IGFsbG9jYXRlZCAxNi1iaXQgdmFsdWUgYW5kIHRoZSBV RFAgZGVzdGluYXRpb24gcG9ydA0KICAgbnVtYmVyIGlzIHNldCB0byB0aGUgd2VsbC1rbm93biBk ZXN0aW5hdGlvbiBwb3J0IG51bWJlciA0MzQyLiAgQQ0KICAgc3VjY2Vzc2Z1bCBNYXAtUmVwbHkg dXBkYXRlcyB0aGUgY2FjaGVkIHNldCBvZiBSTE9DcyBhc3NvY2lhdGVkIHdpdGgNCiAgIHRoZSBF SUQgcHJlZml4IHJhbmdlLg0KDQogICBNYXAtUmVxdWVzdHMgY2FuIGFsc28gYmUgTElTUCBlbmNh cHN1bGF0ZWQgdXNpbmcgVURQIGRlc3RpbmF0aW9uIHBvcnQNCiAgIDQzNDIgd2l0aCBhIExJU1Ag dHlwZSB2YWx1ZSBzZXQgdG8gIkVuY2Fwc3VsYXRlZCBDb250cm9sIE1lc3NhZ2UiLA0KICAgd2hl biBzZW50IGZyb20gYW4gSVRSIHRvIGEgTWFwLVJlc29sdmVyLiAgTGlrZXdpc2UsIE1hcC1SZXF1 ZXN0cyBhcmUNCiAgIExJU1AgZW5jYXBzdWxhdGVkIHRoZSBzYW1lIHdheSBmcm9tIGEgTWFwLVNl cnZlciB0byBhbiBFVFIuICBEZXRhaWxzDQogICBvbiBlbmNhcHN1bGF0ZWQgTWFwLVJlcXVlc3Rz IGFuZCBNYXAtUmVzb2x2ZXJzIGNhbiBiZSBmb3VuZCBpbg0KICAgW0xJU1AtTVNdLg0KDQoNCg0K RmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAgICAgICAgICAg ICAgICAgW1BhZ2UgMjhdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICBMb2NhdG9yL0lEIFNlcGFyYXRp b24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTANCg0KDQogICBNYXAtUmVxdWVzdHMg TVVTVCBiZSByYXRlLWxpbWl0ZWQuICBJdCBpcyByZWNvbW1lbmRlZCB0aGF0IGEgTWFwLQ0KICAg UmVxdWVzdCBmb3IgdGhlIHNhbWUgRUlELXByZWZpeCBiZSBzZW50IG5vIG1vcmUgdGhhbiBvbmNl IHBlciBzZWNvbmQuDQoNCiAgIEFuIElUUiB0aGF0IGlzIGNvbmZpZ3VyZWQgd2l0aCBtYXBwaW5n IGRhdGFiYXNlIGluZm9ybWF0aW9uIChpLmUuIGl0DQogICBpcyBhbHNvIGFuIEVUUikgbWF5IG9w dGlvbmFsbHkgaW5jbHVkZSB0aG9zZSBtYXBwaW5ncyBpbiBhIE1hcC0NCiAgIFJlcXVlc3QuICBX aGVuIGFuIEVUUiBjb25maWd1cmVkIHRvIGFjY2VwdCBhbmQgdmVyaWZ5IHN1Y2gNCiAgICJwaWdn eWJhY2tlZCIgbWFwcGluZyBkYXRhIHJlY2VpdmVzIHN1Y2ggYSBNYXAtUmVxdWVzdCBhbmQgaXQg ZG9lcw0KICAgbm90IGhhdmUgdGhpcyBtYXBwaW5nIGluIHRoZSBtYXAtY2FjaGUsIGl0IG1heSBv cmlnaW5hdGUgYSAidmVyaWZ5aW5nDQogICBNYXAtUmVxdWVzdCIsIGFkZHJlc3NlZCB0byB0aGUg bWFwLXJlcXVlc3RpbmcgSVRSLiAgSWYgdGhlIEVUUiBoYXMgYQ0KICAgbWFwLWNhY2hlIGVudHJ5 IHRoYXQgbWF0Y2hlcyB0aGUgInBpZ2d5YmFja2VkIiBFSUQgYW5kIHRoZSBSTE9DIGlzIGluDQog ICB0aGUgbG9jYXRvci1zZXQgZm9yIHRoZSBlbnRyeSwgdGhlbiBpdCBtYXkgc2VuZCB0aGUgInZl cmlmeWluZyBNYXAtDQogICBSZXF1ZXN0IiBkaXJlY3RseSB0byB0aGUgb3JpZ2luYXRpbmcgTWFw LVJlcXVlc3Qgc291cmNlLiAgSWYgdGhlIFJMT0MNCiAgIGlzIG5vdCBpbiB0aGUgbG9jYXRvci1z ZXQsIHRoZW4gdGhlIEVUUiBNVVNUIHNlbmQgdGhlICJ2ZXJpZnlpbmcgTWFwLQ0KICAgUmVxdWVz dCIgdG8gdGhlICJwaWdneWJhY2tlZCIgRUlELiAgRG9pbmcgdGhpcyBmb3JjZXMgdGhlICJ2ZXJp ZnlpbmcNCiAgIE1hcC1SZXF1ZXN0IiB0byBnbyB0aHJvdWdoIHRoZSBtYXBwaW5nIGRhdGFiYXNl IHN5c3RlbSB0byByZWFjaCB0aGUNCiAgIGF1dGhvcml0YXRpdmUgc291cmNlIG9mIGluZm9ybWF0 aW9uIGFib3V0IHRoYXQgRUlELCBndWFyZGluZyBhZ2FpbnN0DQogICBSTE9DLXNwb29maW5nIGlu IGluIHRoZSAicGlnZ3liYWNrZWQiIG1hcHBpbmcgZGF0YS4NCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KRmFyaW5hY2Np LCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1Bh Z2UgMjldDQoMDQpJbnRlcm5ldC1EcmFmdCAgICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9j b2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTANCg0KDQo2LjEuNC4gIE1hcC1SZXBseSBNZXNzYWdl IEZvcm1hdA0KDQoNCg0KICAgICAgICAwICAgICAgICAgICAgICAgICAgIDEgICAgICAgICAgICAg ICAgICAgMiAgICAgICAgICAgICAgICAgICAzDQogICAgICAgIDAgMSAyIDMgNCA1IDYgNyA4IDkg MCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMQ0KICAgICAgICstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rDQogICAgICAgfFR5cGU9MiB8UHxFfCAgICAgICAgICAgIFJlc2VydmVkICAgICAgICAgICAg ICAgfCBSZWNvcmQgQ291bnQgIHwNCiAgICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICAgIHwgICAgICAgICAg ICAgICAgICAgICAgICAgTm9uY2UgLiAuIC4gICAgICAgICAgICAgICAgICAgICAgICAgICB8DQog ICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSsNCiAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgIC4gLiAuIE5v bmNlICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgKy0+ICstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICB8ICAg fCAgICAgICAgICAgICAgICAgICAgICAgICAgUmVjb3JkICBUVEwgICAgICAgICAgICAgICAgICAg ICAgICAgIHwNCiAgIHwgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgUiAgIHwgTG9jYXRvciBDb3VudCB8IEVJRCBt YXNrLWxlbiAgfCBBQ1QgfEF8ICAgICAgUmVzZXJ2ZWQgICAgICAgICB8DQogICBlICAgKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSsNCiAgIGMgICB8ICAgICAgICAgICBSZXNlcnZlZCAgICAgICAgICAgIHwgICAgICAgICAgICBF SUQtQUZJICAgICAgICAgICAgfA0KICAgbyAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICByICAgfCAgICAgICAgICAg ICAgICAgICAgICAgICAgRUlELXByZWZpeCAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAg IGQgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKw0KICAgfCAgL3wgICAgUHJpb3JpdHkgICB8ICAgIFdlaWdodCAgICAgfCAg TSBQcmlvcml0eSAgIHwgICBNIFdlaWdodCAgICB8DQogICB8IEwgKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgIHwgbyB8 ICAgICAgICAgICBVbnVzZWQgRmxhZ3MgICAgICB8UnwgICAgICAgICAgIExvYy1BRkkgICAgICAg ICAgICAgfA0KICAgfCBjICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICB8ICBcfCAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgTG9jYXRvciAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICstPiArLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Kw0KICAgICAgIHwgICAgICAgICAgICAgICAgICAgICBNYXBwaW5nIFByb3RvY29sIERhdGEgICAg ICAgICAgICAgICAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCg0KDQogICBQYWNrZXQgZmllbGQg ZGVzY3JpcHRpb25zOg0KDQogICBUeXBlOiAgIDIgKE1hcC1SZXBseSkNCg0KICAgUDogSW5kaWNh dGVzIHRoYXQgdGhlIE1hcC1SZXBseSBpcyBpbiByZXNwb25zZSB0byBhICJwaWdneWJhY2siDQog ICAgICBsb2NhdG9yIHJlYWNoYWJpbGl0eSBNYXAtUmVxdWVzdC4gIFRoZSBub25jZSBmaWVsZCBz aG91bGQgY29udGFpbg0KICAgICAgYSBjb3B5IG9mIHRoZSBub25jZSB2YWx1ZSBmcm9tIHRoZSBv cmlnaW5hbCBNYXAtUmVxdWVzdC4gIFNlZQ0KICAgICAgc2VjdGlvbiBTZWN0aW9uIDYuMy4yIGZv ciBtb3JlIGRldGFpbHMuDQoNCiAgIEU6IEluZGljYXRlcyB0aGF0IHRoZSBFVFIgd2hpY2ggc2Vu ZHMgdGhpcyBNYXAtUmVwbHkgbWVzc2FnZSBpcw0KICAgICAgYWR2ZXJ0aXNpbmcgdGhhdCB0aGUg c2l0ZSBpcyBlbmFibGVkIGZvciB0aGUgRWNoby1Ob25jZSBsb2NhdG9yDQogICAgICByZWFjaGFi aWxpdHkgYWxnb3JpdGhtLiAgU2VlIFNlY3Rpb24gNi4zLjEgZm9yIG1vcmUgZGV0YWlscy4NCg0K ICAgUmVzZXJ2ZWQ6ICBTZXQgdG8gMCBvbiB0cmFuc21pc3Npb24gYW5kIGlnbm9yZWQgb24gcmVj ZWlwdC4NCg0KDQoNCg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5 IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdlIDMwXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAg TG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoN Cg0KICAgUmVjb3JkIENvdW50OiAgVGhlIG51bWJlciBvZiByZWNvcmRzIGluIHRoaXMgcmVwbHkg bWVzc2FnZS4gIEEgcmVjb3JkDQogICAgICBpcyBjb21wcmlzZWQgb2YgdGhhdCBwb3J0aW9uIG9m IHRoZSBwYWNrZXQgbGFiZWxlZCAnUmVjb3JkJyBhYm92ZQ0KICAgICAgYW5kIG9jY3VycyB0aGUg bnVtYmVyIG9mIHRpbWVzIGVxdWFsIHRvIFJlY29yZCBjb3VudC4NCg0KICAgTm9uY2U6ICBBIDI0 LWJpdCB2YWx1ZSBzZXQgaW4gYSBEYXRhLVByb2JlIHBhY2tldCBvciBhIDY0LWJpdCB2YWx1ZQ0K ICAgICAgZnJvbSB0aGUgTWFwLVJlcXVlc3QgaXMgZWNob2VkIGluIHRoaXMgTm9uY2UgZmllbGQg b2YgdGhlIE1hcC0NCiAgICAgIFJlcGx5Lg0KDQogICBSZWNvcmQgVFRMOiAgVGhlIHRpbWUgaW4g bWludXRlcyB0aGUgcmVjaXBpZW50IG9mIHRoZSBNYXAtUmVwbHkgd2lsbA0KICAgICAgc3RvcmUg dGhlIG1hcHBpbmcuICBJZiB0aGUgVFRMIGlzIDAsIHRoZSBlbnRyeSBzaG91bGQgYmUgcmVtb3Zl ZA0KICAgICAgZnJvbSB0aGUgY2FjaGUgaW1tZWRpYXRlbHkuICBJZiB0aGUgdmFsdWUgaXMgMHhm ZmZmZmZmZiwgdGhlDQogICAgICByZWNpcGllbnQgY2FuIGRlY2lkZSBsb2NhbGx5IGhvdyBsb25n IHRvIHN0b3JlIHRoZSBtYXBwaW5nLg0KDQogICBMb2NhdG9yIENvdW50OiAgVGhlIG51bWJlciBv ZiBMb2NhdG9yIGVudHJpZXMuICBBIGxvY2F0b3IgZW50cnkNCiAgICAgIGNvbXByaXNlcyB3aGF0 IGlzIGxhYmVsZWQgYWJvdmUgYXMgJ0xvYycuICBUaGUgbG9jYXRvciBjb3VudCBjYW4NCiAgICAg IGJlIDAgaW5kaWNhdGluZyB0aGVyZSBhcmUgbm8gbG9jYXRvcnMgZm9yIHRoZSBFSUQtcHJlZml4 Lg0KDQogICBFSUQgbWFzay1sZW46ICBNYXNrIGxlbmd0aCBmb3IgRUlEIHByZWZpeC4NCg0KICAg QUNUOiAgVGhpcyAzLWJpdCBmaWVsZCBkZXNjcmliZXMgbmVnYXRpdmUgTWFwLVJlcGx5IGFjdGlv bnMuICBUaGVzZQ0KICAgICAgYml0cyBhcmUgdXNlZCBvbmx5IHdoZW4gdGhlICdMb2NhdG9yIENv dW50JyBmaWVsZCBpcyBzZXQgdG8gMC4NCiAgICAgIFRoZSBhY3Rpb24gYml0cyBhcmUgZW5jb2Rl ZCBvbmx5IGluIE1hcC1SZXBseSBtZXNzYWdlcy4gIFRoZQ0KICAgICAgYWN0aW9ucyBkZWZpbmVk IGFyZSB1c2VkIGJ5IGFuIElUUiBvciBQVFIgd2hlbiBhIGRlc3RpbmF0aW9uIEVJRA0KICAgICAg bWF0Y2hlcyBhIG5lZ2F0aXZlIG1hcHBpbmcgY2FjaGUgZW50cnkuICBVbmFzc2lnbmVkIHZhbHVl cyBzaG91bGQNCiAgICAgIGNhdXNlIGEgbWFwLWNhY2hlIGVudHJ5IHRvIGJlIGNyZWF0ZWQgYW5k LCB3aGVuIHBhY2tldHMgbWF0Y2ggdGhpcw0KICAgICAgbmVnYXRpdmUgY2FjaGUgZW50cnksIHRo ZXkgd2lsbCBiZSBkcm9wcGVkLiAgVGhlIGN1cnJlbnQgYXNzaWduZWQNCiAgICAgIHZhbHVlcyBh cmU6DQoNCg0KDQogICAgICAoMCkgRHJvcDogIFRoZSBwYWNrZXQgaXMgZHJvcHBlZCBzaWxlbnRs eS4NCg0KICAgICAgKDEpIE5hdGl2ZWx5LUZvcndhcmQ6ICBUaGUgcGFja2V0IGlzIG5vdCBlbmNh cHN1bGF0ZWQgb3IgZHJvcHBlZA0KICAgICAgICAgYnV0IG5hdGl2ZWx5IGZvcndhcmRlZC4NCg0K ICAgICAgKDIpIFNlbmQtTWFwLVJlcXVlc3Q6ICBUaGUgcGFja2V0IGludm9rZXMgc2VuZGluZyBh IE1hcC1SZXF1ZXN0Lg0KDQogICBBOiBUaGUgQXV0aG9yaXRhdGl2ZSBiaXQsIHdoZW4gc2VudCBi eSBhIFVEUC1iYXNlZCBtZXNzYWdlIGlzIGFsd2F5cw0KICAgICAgc2V0IGJ5IHRoZSBFVFIuICBT ZWUgW0NPTlNdIGZvciBUQ1AtYmFzZWQgTWFwLVJlcGxpZXMuDQoNCiAgIEVJRC1BRkk6ICBBZGRy ZXNzIGZhbWlseSBvZiBFSUQtcHJlZml4IGFjY29yZGluZyB0byBbUkZDMjQzNF0uDQoNCiAgIEVJ RC1wcmVmaXg6ICA0IGJ5dGVzIGlmIGFuIElQdjQgYWRkcmVzcy1mYW1pbHksIDE2IGJ5dGVzIGlm IGFuIElQdjYNCiAgICAgIGFkZHJlc3MtZmFtaWx5Lg0KDQoNCg0KDQoNCg0KDQpGYXJpbmFjY2ks IGV0IGFsLiAgICAgICAgIEV4cGlyZXMgSnVseSAxNiwgMjAxMCAgICAgICAgICAgICAgICBbUGFn ZSAzMV0NCgwNCkludGVybmV0LURyYWZ0ICAgIExvY2F0b3IvSUQgU2VwYXJhdGlvbiBQcm90b2Nv bCAoTElTUCkgICAgIEphbnVhcnkgMjAxMA0KDQoNCiAgIFByaW9yaXR5OiAgZWFjaCBSTE9DIGlz IGFzc2lnbmVkIGEgdW5pY2FzdCBwcmlvcml0eS4gIExvd2VyIHZhbHVlcw0KICAgICAgYXJlIG1v cmUgcHJlZmVyYWJsZS4gIFdoZW4gbXVsdGlwbGUgUkxPQ3MgaGF2ZSB0aGUgc2FtZSBwcmlvcml0 eSwNCiAgICAgIHRoZXkgbWF5IGJlIHVzZWQgaW4gYSBsb2FkLXNwbGl0IGZhc2hpb24uICBBIHZh bHVlIG9mIDI1NSBtZWFucw0KICAgICAgdGhlIFJMT0MgTVVTVCBOT1QgYmUgdXNlZCBmb3IgdW5p Y2FzdCBmb3J3YXJkaW5nLg0KDQogICBXZWlnaHQ6ICB3aGVuIHByaW9yaXRpZXMgYXJlIHRoZSBz YW1lIGZvciBtdWx0aXBsZSBSTE9DcywgdGhlIHdlaWdodA0KICAgICAgaW5kaWNhdGVzIGhvdyB0 byBiYWxhbmNlIHVuaWNhc3QgdHJhZmZpYyBiZXR3ZWVuIHRoZW0uICBXZWlnaHQgaXMNCiAgICAg IGVuY29kZWQgYXMgYSBwZXJjZW50YWdlIG9mIHRvdGFsIHVuaWNhc3QgcGFja2V0cyB0aGF0IG1h dGNoIHRoZQ0KICAgICAgbWFwcGluZyBlbnRyeS4gIElmIGEgbm9uLXplcm8gd2VpZ2h0IHZhbHVl IGlzIHVzZWQgZm9yIGFueSBSTE9DLA0KICAgICAgdGhlbiBhbGwgUkxPQ3MgbXVzdCB1c2UgYSBu b24temVybyB3ZWlnaHQgdmFsdWUgYW5kIHRoZW4gdGhlIHN1bQ0KICAgICAgb2YgYWxsIHdlaWdo dCB2YWx1ZXMgTVVTVCBlcXVhbCAxMDAuICBJZiBhIHplcm8gdmFsdWUgaXMgdXNlZCBmb3INCiAg ICAgIGFueSBSTE9DIHdlaWdodCwgdGhlbiBhbGwgd2VpZ2h0cyBNVVNUIGJlIHplcm8gYW5kIHRo ZSByZWNlaXZlciBvZg0KICAgICAgdGhlIE1hcC1SZXBseSB3aWxsIGRlY2lkZSBob3cgdG8gbG9h ZC1zcGxpdCB0cmFmZmljLiAgU2VlDQogICAgICBTZWN0aW9uIDYuNCBmb3IgYSBzdWdnZXN0ZWQg aGFzaCBhbGdvcml0aG0gdG8gZGlzdHJpYnV0ZSBsb2FkDQogICAgICBhY3Jvc3MgbG9jYXRvcnMg d2l0aCBzYW1lIHByaW9yaXR5IGFuZCBlcXVhbCB3ZWlnaHQgdmFsdWVzLiAgV2hlbg0KICAgICAg YSBzaW5nbGUgUkxPQyBleGlzdHMgaW4gYSBtYXBwaW5nIGVudHJ5LCB0aGUgd2VpZ2h0IHZhbHVl IE1VU1QgYmUNCiAgICAgIHNldCB0byAxMDAgYW5kIGlnbm9yZWQgb24gcmVjZWlwdC4NCg0KICAg TSBQcmlvcml0eTogIGVhY2ggUkxPQyBpcyBhc3NpZ25lZCBhIG11bHRpY2FzdCBwcmlvcml0eSB1 c2VkIGJ5IGFuDQogICAgICBFVFIgaW4gYSByZWNlaXZlciBtdWx0aWNhc3Qgc2l0ZSB0byBzZWxl Y3QgYW4gSVRSIGluIGEgc291cmNlDQogICAgICBtdWx0aWNhc3Qgc2l0ZSBmb3IgYnVpbGRpbmcg bXVsdGljYXN0IGRpc3RyaWJ1dGlvbiB0cmVlcy4gIEEgdmFsdWUNCiAgICAgIG9mIDI1NSBtZWFu cyB0aGUgUkxPQyBNVVNUIE5PVCBiZSB1c2VkIGZvciBqb2luaW5nIGEgbXVsdGljYXN0DQogICAg ICBkaXN0cmlidXRpb24gdHJlZS4NCg0KICAgTSBXZWlnaHQ6ICB3aGVuIHByaW9yaXRpZXMgYXJl IHRoZSBzYW1lIGZvciBtdWx0aXBsZSBSTE9DcywgdGhlDQogICAgICB3ZWlnaHQgaW5kaWNhdGVz IGhvdyB0byBiYWxhbmNlIGJ1aWxkaW5nIG11bHRpY2FzdCBkaXN0cmlidXRpb24NCiAgICAgIHRy ZWVzIGFjcm9zcyBtdWx0aXBsZSBJVFJzLiAgVGhlIHdlaWdodCBpcyBlbmNvZGVkIGFzIGEgcGVy Y2VudGFnZQ0KICAgICAgb2YgdG90YWwgbnVtYmVyIG9mIHRyZWVzIGJ1aWxkIHRvIHRoZSBzb3Vy Y2Ugc2l0ZSBpZGVudGlmaWVkIGJ5DQogICAgICB0aGUgRUlELXByZWZpeC4gIElmIGEgbm9uLXpl cm8gd2VpZ2h0IHZhbHVlIGlzIHVzZWQgZm9yIGFueSBSTE9DLA0KICAgICAgdGhlbiBhbGwgUkxP Q3MgbXVzdCB1c2UgYSBub24temVybyB3ZWlnaHQgdmFsdWUgYW5kIHRoZW4gdGhlIHN1bQ0KICAg ICAgb2YgYWxsIHdlaWdodCB2YWx1ZXMgTVVTVCBlcXVhbCAxMDAuICBJZiBhIHplcm8gdmFsdWUg aXMgdXNlZCBmb3INCiAgICAgIGFueSBSTE9DIHdlaWdodCwgdGhlbiBhbGwgd2VpZ2h0cyBNVVNU IGJlIHplcm8gYW5kIHRoZSByZWNlaXZlciBvZg0KICAgICAgdGhlIE1hcC1SZXBseSB3aWxsIGRl Y2lkZSBob3cgdG8gZGlzdHJpYnV0ZSBtdWx0aWNhc3Qgc3RhdGUgYWNyb3NzDQogICAgICBJVFJz Lg0KDQogICBVbnVzZWQgRmxhZ3M6ICBzZXQgdG8gMCB3aGVuIHNlbmRpbmcgYW5kIGlnbm9yZWQg b24gcmVjZWlwdC4NCg0KICAgUjogd2hlbiB0aGlzIGJpdCBpcyBzZXQsIHRoZSBsb2NhdG9yIGlz IGtub3duIHRvIGJlIHJlYWNoYWJsZSBmcm9tDQogICAgICB0aGUgTWFwLVJlcGx5IHNlbmRlcidz IHBlcnNwZWN0aXZlLg0KDQogICBMb2NhdG9yOiAgYW4gSVB2NCBvciBJUHY2IGFkZHJlc3MgKGFz IGVuY29kZWQgYnkgdGhlICdMb2MtQUZJJyBmaWVsZCkNCiAgICAgIGFzc2lnbmVkIHRvIGFuIEVU UiBvciByb3V0ZXIgYWN0aW5nIGFzIGEgcHJveHkgcmVwbGllciBmb3IgdGhlDQogICAgICBFSUQt cHJlZml4LiAgTm90ZSB0aGF0IHRoZSBkZXN0aW5hdGlvbiBSTE9DIGFkZHJlc3MgTUFZIGJlIGFu DQogICAgICBhbnljYXN0IGFkZHJlc3MuICBBIHNvdXJjZSBSTE9DIGNhbiBiZSBhbiBhbnljYXN0 IGFkZHJlc3MgYXMgd2VsbC4NCiAgICAgIFRoZSBzb3VyY2Ugb3IgZGVzdGluYXRpb24gUkxPQyBN VVNUIE5PVCBiZSB0aGUgYnJvYWRjYXN0IGFkZHJlc3MNCiAgICAgICgyNTUuMjU1LjI1NS4yNTUg b3IgYW55IHN1Ym5ldCBicm9hZGNhc3QgYWRkcmVzcyBrbm93biB0byB0aGUNCiAgICAgIHJvdXRl ciksIGFuZCBNVVNUIE5PVCBiZSBhIGxpbmstbG9jYWwgbXVsdGljYXN0IGFkZHJlc3MuICBUaGUN CiAgICAgIHNvdXJjZSBSTE9DIE1VU1QgTk9UIGJlIGEgbXVsdGljYXN0IGFkZHJlc3MuICBUaGUg ZGVzdGluYXRpb24gUkxPQw0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVz IEp1bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1BhZ2UgMzJdDQoMDQpJbnRlcm5ldC1EcmFm dCAgICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIw MTANCg0KDQogICAgICBTSE9VTEQgYmUgYSBtdWx0aWNhc3QgYWRkcmVzcyBpZiBpdCBpcyBiZWlu ZyBtYXBwZWQgZnJvbSBhDQogICAgICBtdWx0aWNhc3QgZGVzdGluYXRpb24gRUlELg0KDQogICBN YXBwaW5nIFByb3RvY29sIERhdGE6ICBTZWUgW0NPTlNdIG9yIFtBTFRdIGZvciBkZXRhaWxzLiAg VGhpcyBmaWVsZA0KICAgICAgaXMgb3B0aW9uYWwgYW5kIHByZXNlbnQgd2hlbiB0aGUgVURQIGxl bmd0aCBpbmRpY2F0ZXMgdGhlcmUgaXMNCiAgICAgIGVub3VnaCBzcGFjZSBpbiB0aGUgcGFja2V0 IHRvIGluY2x1ZGUgaXQuDQoNCjYuMS41LiAgRUlELXRvLVJMT0MgVURQIE1hcC1SZXBseSBNZXNz YWdlDQoNCiAgIFdoZW4gYSBEYXRhIFByb2JlIHBhY2tldCBvciBhIE1hcC1SZXF1ZXN0IHRyaWdn ZXJzIGEgTWFwLVJlcGx5IHRvIGJlDQogICBzZW50LCB0aGUgUkxPQ3MgYXNzb2NpYXRlZCB3aXRo IHRoZSBFSUQtcHJlZml4IG1hdGNoZWQgYnkgdGhlIEVJRCBpbg0KICAgdGhlIG9yaWdpbmFsIHBh Y2tldCBkZXN0aW5hdGlvbiBJUCBhZGRyZXNzIGZpZWxkIHdpbGwgYmUgcmV0dXJuZWQuDQogICBU aGUgUkxPQ3MgaW4gdGhlIE1hcC1SZXBseSBhcmUgdGhlIGdsb2JhbGx5LXJvdXRhYmxlIElQIGFk ZHJlc3NlcyBvZg0KICAgdGhlIEVUUiBidXQgYXJlIG5vdCBuZWNlc3NhcmlseSByZWFjaGFibGU7 IHNlcGFyYXRlIHRlc3Rpbmcgb2YNCiAgIHJlYWNoYWJpbGl0eSBpcyByZXF1aXJlZC4NCg0KICAg Tm90ZSB0aGF0IGEgTWFwLVJlcGx5IG1heSBjb250YWluIGRpZmZlcmVudCBFSUQtcHJlZml4IGdy YW51bGFyaXR5DQogICAocHJlZml4ICsgbGVuZ3RoKSB0aGFuIHRoZSBNYXAtUmVxdWVzdCB3aGlj aCB0cmlnZ2VycyBpdC4gIFRoaXMgbWlnaHQNCiAgIG9jY3VyIGlmIGEgTWFwLVJlcXVlc3Qgd2Vy ZSBmb3IgYSBwcmVmaXggdGhhdCBoYWQgYmVlbiByZXR1cm5lZCBieSBhbg0KICAgZWFybGllciBN YXAtUmVwbHkuICBJbiBzdWNoIGEgY2FzZSwgdGhlIHJlcXVlc3RlciB1cGRhdGVzIGl0cyBjYWNo ZQ0KICAgd2l0aCB0aGUgbmV3IHByZWZpeCBpbmZvcm1hdGlvbiBhbmQgZ3JhbnVsYXJpdHkuICBG b3IgZXhhbXBsZSwgYQ0KICAgcmVxdWVzdGVyIHdpdGggdHdvIGNhY2hlZCBFSUQtcHJlZml4ZXMg dGhhdCBhcmUgY292ZXJlZCBieSBhIE1hcC0NCiAgIFJlcGx5IGNvbnRhaW5pbmcgb25lLCBsZXNz LXNwZWNpZmljIHByZWZpeCwgcmVwbGFjZXMgdGhlIGVudHJ5IHdpdGgNCiAgIHRoZSBsZXNzLXNw ZWNpZmljIEVJRC1wcmVmaXguICBOb3RlIHRoYXQgdGhlIHJldmVyc2UsIHJlcGxhY2VtZW50IG9m DQogICBvbmUgbGVzcy1zcGVjaWZpYyBwcmVmaXggd2l0aCBtdWx0aXBsZSBtb3JlLXNwZWNpZmlj IHByZWZpeGVzLCBjYW4NCiAgIGFsc28gb2NjdXIgYnV0IG5vdCBieSByZW1vdmluZyB0aGUgbGVz cy1zcGVjaWZpYyBwcmVmaXggcmF0aGVyIGJ5DQogICBhZGRpbmcgdGhlIG1vcmUtc3BlY2lmaWMg cHJlZml4ZXMgd2hpY2ggZHVyaW5nIGEgbG9va3VwIHdpbGwgb3ZlcnJpZGUNCiAgIHRoZSBsZXNz LXNwZWNpZmljIHByZWZpeC4NCg0KICAgV2hlbiBhbiBFVFIgaXMgY29uZmlndXJlZCB3aXRoIG92 ZXJsYXBwaW5nIEVJRC1wcmVmaXhlcywgYSBNYXAtDQogICBSZXF1ZXN0IHdpdGggYW4gRUlEIHRo YXQgbG9uZ2VzdCBtYXRjaGVzIGFueSBFSUQtcHJlZml4IE1VU1QgYmUNCiAgIHJldHVybmVkIGlu IGEgc2luZ2xlIE1hcC1SZXBseSBtZXNzYWdlLiAgRm9yIGluc3RhbmNlLCBpZiBhbiBFVFIgaGFk DQogICBkYXRhYmFzZSBtYXBwaW5nIGVudHJpZXMgZm9yIEVJRC1wcmVmaXhlczoNCg0KDQogICAg IDEwLjAuMC4wLzgNCiAgICAgMTAuMS4wLjAvMTYNCiAgICAgMTAuMS4xLjAvMjQNCiAgICAgMTAu MS4yLjAvMjQNCg0KICAgQSBNYXAtUmVxdWVzdCBmb3IgRUlEIDEwLjEuMS4xIHdvdWxkIGNhdXNl IGEgTWFwLVJlcGx5IHdpdGggYSByZWNvcmQNCiAgIGNvdW50IG9mIDEgdG8gYmUgcmV0dXJuZWQg d2l0aCBhIG1hcHBpbmcgcmVjb3JkIEVJRC1wcmVmaXggb2YNCiAgIDEwLjEuMS4wLzI0Lg0KDQog ICBBIE1hcC1SZXF1ZXN0IGZvciBFSUQgMTAuMS41LjUsIHdvdWxkIGNhdXNlIGEgTWFwLVJlcGx5 IHdpdGggYSByZWNvcmQNCiAgIGNvdW50IG9mIDMgdG8gYmUgcmV0dXJuZWQgd2l0aCBtYXBwaW5n IHJlY29yZHMgZm9yIEVJRC1wcmVmaXhlcw0KICAgMTAuMS4wLjAvMTYsIDEwLjEuMS4wLzI0LCBh bmQgMTAuMS4yLjAvMjQuDQoNCg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAgICAgICAgRXhwaXJl cyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdlIDMzXQ0KDA0KSW50ZXJuZXQtRHJh ZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAgICAgSmFudWFyeSAy MDEwDQoNCg0KICAgTm90ZSB0aGF0IG5vdCBhbGwgb3ZlcmxhcHBpbmcgRUlELXByZWZpeGVzIG5l ZWQgdG8gYmUgcmV0dXJuZWQsIG9ubHkNCiAgIHRoZSBtb3JlIHNwZWNpZmljcyAobm90ZSBpbiB0 aGUgc2Vjb25kIGV4YW1wbGUgYWJvdmUgMTAuMC4wLjAvOCB3YXMNCiAgIG5vdCByZXR1cm5lZCBm b3IgcmVxdWVzdGluZyBFSUQgMTAuMS41LjUpIGVudHJpZXMgZm9yIHRoZSBtYXRjaGluZw0KICAg RUlELXByZWZpeCBvZiB0aGUgcmVxdWVzdGluZyBFSUQuICBXaGVuIG1vcmUgdGhhbiBvbmUgRUlE LXByZWZpeCBpcw0KICAgcmV0dXJuZWQsIGFsbCBTSE9VTEQgdXNlIHRoZSBzYW1lIFRpbWUtdG8t TGl2ZSB2YWx1ZSBzbyB0aGV5IGNhbiBhbGwNCiAgIHRpbWUgb3V0IGF0IHRoZSBzYW1lIHRpbWUu ICBBbmQgd2hlbiBlaXRoZXIgYSBtb3JlIHNwZWNpZmljIG9yIGEgbGVzcw0KICAgc3BlY2lmaWMg RUlELXByZWZpeCBpcyByZWNlaXZlZCBsYXRlciwgdGhlbiB0aGV5IFNIT1VMRCBiZSBjYWNoZWQN CiAgIHdpdGggdGhlIFRpbWUtdG8tTGl2ZSBvZiB0aGUgcHJldmlvdXMgb3ZlcmxhcHBpbmcgRUlE LXByZWZpeGVzDQogICBjYWNoZWQuDQoNCiAgIE1hcC1SZXBsaWVzIFNIT1VMRCBiZSBzZW50IGZv ciBhbiBFSUQtcHJlZml4IG5vIG1vcmUgb2Z0ZW4gdGhhbiBvbmNlDQogICBwZXIgc2Vjb25kIHRv IHRoZSBzYW1lIHJlcXVlc3Rpbmcgcm91dGVyLiAgRm9yIHNjYWxhYmlsaXR5LCBpdCBpcw0KICAg ZXhwZWN0ZWQgdGhhdCBhZ2dyZWdhdGlvbiBvZiBFSUQgYWRkcmVzc2VzIGludG8gRUlELXByZWZp eGVzIHdpbGwNCiAgIGFsbG93IG9uZSBNYXAtUmVwbHkgdG8gc2F0aXNmeSBhIG1hcHBpbmcgZm9y IHRoZSBFSUQgYWRkcmVzc2VzIGluIHRoZQ0KICAgcHJlZml4IHJhbmdlIHRoZXJlYnkgcmVkdWNp bmcgdGhlIG51bWJlciBvZiBNYXAtUmVxdWVzdCBtZXNzYWdlcy4NCg0KICAgTWFwLVJlcGx5IHJl Y29yZHMgY2FuIGhhdmUgYW4gZW1wdHkgbG9jYXRvci1zZXQuICBUaGlzIHR5cGUgb2YgYSBNYXAt DQogICBSZXBseSBpcyBjYWxsZWQgYSBOZWdhdGl2ZSBNYXAtUmVwbHkuICBOZWdhdGl2ZSBNYXAt UmVwbGllcyBjb252ZXkNCiAgIHNwZWNpYWwgYWN0aW9ucyBieSB0aGUgc2VuZGVyIHRvIHRoZSBJ VFIgb3IgUFRSIHdoaWNoIGhhdmUgc29saWNpdGVkDQogICB0aGUgTWFwLVJlcGx5LiAgVGhlcmUg YXJlIHR3byBwcmltYXJ5IGFwcGxpY2F0aW9ucyBmb3IgTmVnYXRpdmUgTWFwLQ0KICAgUmVwbGll cy4gIFRoZSBmaXJzdCBpcyBmb3IgYSBNYXAtUmVzb2x2ZXIgdG8gaW5zdHJ1Y3QgYW4gSVRSIG9y IFBUUg0KICAgd2hlbiBhIGRlc3RpbmF0aW9uIGlzIGZvciBhIExJU1Agc2l0ZSB2ZXJzdXMgYSBu b24tTElTUCBzaXRlLiAgQW5kDQogICB0aGUgb3RoZXIgaXMgdG8gc291cmNlIHF1ZW5jaCBNYXAt UmVxdWVzdHMgd2hpY2ggYXJlIHNlbnQgZm9yIG5vbi0NCiAgIGFsbG9jYXRlZCBFSURzLg0KDQog ICBGb3IgZWFjaCBNYXAtUmVwbHkgcmVjb3JkLCB0aGUgbGlzdCBvZiBsb2NhdG9ycyBpbiBhIGxv Y2F0b3Itc2V0IE1VU1QNCiAgIGFwcGVhciBpbiB0aGUgc2FtZSBvcmRlciBmb3IgZWFjaCBFVFIg dGhhdCBvcmlnaW5hdGVzIGEgTWFwLVJlcGx5DQogICBtZXNzYWdlLiAgVGhlIGxvY2F0b3Itc2V0 IE1VU1QgYmUgc29ydGVkIGluIG9yZGVyIG9mIGFzY2VuZGluZyBJUA0KICAgYWRkcmVzcyB3aGVy ZSBhbiBJUHY0IGxvY2F0b3IgYWRkcmVzcyBpcyBjb25zaWRlcmVkIG51bWVyaWNhbGx5ICdsZXNz DQogICB0aGFuJyBhbiBJUHY2IGxvY2F0b3IgYWRkcmVzcy4NCg0KICAgV2hlbiBzZW5kaW5nIGEg TWFwLVJlcGx5IG1lc3NhZ2UsIHRoZSBkZXN0aW5hdGlvbiBhZGRyZXNzIGlzIGNvcGllZA0KICAg ZnJvbSB0aGUgc291cmNlIGFkZHJlc3Mgb2YgdGhlIE1hcC1SZXF1ZXN0IG9yIERhdGEtUHJvYmUg bWVzc2FnZQ0KICAgd2hpY2ggaXMgaW52b2tpbmcgdGhlIHJlcGx5LiAgVGhlIHNvdXJjZSBhZGRy ZXNzIG9mIHRoZSBNYXAtUmVwbHkgaXMNCiAgIG9uZSBvZiB0aGUgbG9jYWwgbG9jYXRvciBhZGRy ZXNzZXMgbGlzdGVkIGluIHRoZSBsb2NhdG9yLXNldCBvZiBhbnkNCiAgIG1hcHBpbmcgcmVjb3Jk IGluIHRoZSBtZXNzYWdlLiAgVGhlIGRlc3RpbmF0aW9uIHBvcnQgb2YgYSBNYXAtUmVwbHkNCiAg IG1lc3NhZ2UgaXMgY29waWVkIGZyb20gdGhlIHNvdXJjZSBwb3J0IG9mIHRoZSBNYXAtUmVxdWVz dCBvciBEYXRhLQ0KICAgUHJvYmUgYW5kIHRoZSBzb3VyY2UgcG9ydCBvZiB0aGUgTWFwLVJlcGx5 IG1lc3NhZ2UgaXMgc2V0IHRvIHRoZQ0KICAgd2VsbC1rbm93biBVRFAgcG9ydCA0MzQyLg0KDQo2 LjEuNS4xLiAgVHJhZmZpYyBSZWRpcmVjdGlvbiB3aXRoIENvYXJzZSBFSUQtUHJlZml4ZXMNCg0K ICAgV2hlbiBhbiBFVFIgaXMgbWlzY29uZmlndXJlZCBvciBjb21wcm9taXNlZCwgaXQgY291bGQg cmV0dXJuIGNvYXJzZQ0KICAgRUlELXByZWZpeGVzIGluIE1hcC1SZXBseSBtZXNzYWdlcyBpdCBz ZW5kcy4gIFRoZSBFSUQtcHJlZml4IGNvdWxkDQogICBjb3ZlciBFSUQtcHJlZml4ZXMgd2hpY2gg YXJlIGFsbG9jYXRlZCB0byBvdGhlciBzaXRlcyByZWRpcmVjdGluZw0KICAgdGhlaXIgdHJhZmZp YyB0byB0aGUgbG9jYXRvcnMgb2YgdGhlIGNvbXByb21pc2VkIHNpdGUuDQoNCiAgIFRvIHNvbHZl IHRoaXMgcHJvYmxlbSwgdGhlcmUgYXJlIHR3byBiYXNpYyBzb2x1dGlvbnMgdGhhdCBjb3VsZCBi ZQ0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAg ICAgICAgICAgICAgICAgW1BhZ2UgMzRdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICBMb2NhdG9yL0lE IFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTANCg0KDQogICB1c2Vk LiAgVGhlIGZpcnN0IGlzIHRvIGhhdmUgTWFwLVNlcnZlcnMgcHJveHktcmVwbHkgb24gYmVoYWxm IG9mIEVUUnMNCiAgIHNvIHRoZWlyIHJlZ2lzdGVyZWQgRUlELXByZWZpeGVzIGFyZSB0aGUgb25l cyByZXR1cm5lZCBpbiBNYXAtDQogICBSZXBsaWVzLiAgU2luY2UgdGhlIGludGVyYWN0aW9uIGJl dHdlZW4gYW4gRVRSIGFuZCBNYXAtU2VydmVyIGlzDQogICBzZWN1cmVkIHdpdGggc2hhcmVkLWtl eXMsIGl0IGlzIG1vcmUgZGlmZmljdWx0IGZvciBhbiBFVFIgdG8NCiAgIG1pc2JlaGF2ZS4gIFRo ZSBzZWNvbmQgc29sdXRpb24gaXMgdG8gaGF2ZSBJVFJzIGFuZCBQVFJzIGNhY2hlIEVJRC0NCiAg IHByZWZpeGVzIHdpdGggbWFzay1sZW5ndGhzIHRoYXQgYXJlIGdyZWF0ZXIgdGhhbiBvciBlcXVh bCB0byBhDQogICBjb25maWd1cmVkIHByZWZpeCBsZW5ndGguICBUaGlzIGxpbWl0cyB0aGUgZGFt YWdlIHRvIGEgc3BlY2lmaWMgd2lkdGgNCiAgIG9mIGFueSBFSUQtcHJlZml4IGFkdmVydGlzZWQs IGJ1dCBuZWVkcyB0byBiZSBjb29yZGluYXRlZCB3aXRoIHRoZQ0KICAgYWxsb2NhdGlvbiBvZiBz aXRlIHByZWZpeGVzLiAgVGhlc2Ugc29sdXRpb25zIGNhbiBiZSB1c2VkDQogICBpbmRlcGVuZGVu dGx5IG9yIGF0IHRoZSBzYW1lIHRpbWUuDQoNCiAgIEF0IHRoZSB0aW1lIG9mIHRoaXMgd3JpdGlu Zywgb3RoZXIgYXBwcm9hY2hlcyBhcmUgYmVpbmcgY29uc2lkZXJlZA0KICAgYW5kIHJlc2VhcmNo ZWQuDQoNCjYuMS42LiAgTWFwLVJlZ2lzdGVyIE1lc3NhZ2UgRm9ybWF0DQoNCiAgIFRoZSB1c2Fn ZSBkZXRhaWxzIG9mIHRoZSBNYXAtUmVnaXN0ZXIgbWVzc2FnZSBjYW4gYmUgZm91bmQgaW4NCiAg IHNwZWNpZmljYXRpb24gW0xJU1AtTVNdLiAgVGhpcyBzZWN0aW9uIHNvbGVseSBkZWZpbmVzIHRo ZSBtZXNzYWdlDQogICBmb3JtYXQuDQoNCiAgIFRoZSBtZXNzYWdlIGlzIHNlbnQgaW4gVURQIHdp dGggYSBkZXN0aW5hdGlvbiBVRFAgcG9ydCBvZiA0MzQyIGFuZCBhDQogICByYW5kb21seSBzZWxl Y3RlZCBVRFAgc291cmNlIHBvcnQgbnVtYmVyLg0KDQogICBUaGUgTWFwLVJlZ2lzdGVyIG1lc3Nh Z2UgZm9ybWF0IGlzOg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1bHkgMTYsIDIw MTAgICAgICAgICAgICAgICAgW1BhZ2UgMzVdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICBMb2NhdG9y L0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTANCg0KDQogICAg ICAgIDAgICAgICAgICAgICAgICAgICAgMSAgICAgICAgICAgICAgICAgICAyICAgICAgICAgICAg ICAgICAgIDMNCiAgICAgICAgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5 IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxDQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgICB8VHlwZT0z IHxQfCAgICAgICAgICAgIFJlc2VydmVkICAgICAgICAgICAgICAgICB8IFJlY29yZCBDb3VudCAg fA0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rDQogICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICBOb25j ZSAuIC4gLiAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICArLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAg ICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgLiAuIC4gTm9uY2UgICAgICAgICAgICAgICAg ICAgICAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAgICB8ICAgICAgICAgICAgS2V5IElE ICAgICAgICAgICAgIHwgIEF1dGhlbnRpY2F0aW9uIERhdGEgTGVuZ3RoICAgfA0KICAgICAgICst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rDQogICAgICAgfiAgICAgICAgICAgICAgICAgICAgIEF1dGhlbnRpY2F0aW9uIERhdGEg ICAgICAgICAgICAgICAgICAgICAgIH4NCiAgICstPiArLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgfCAgIHwgICAgICAg ICAgICAgICAgICAgICAgICAgIFJlY29yZCAgVFRMICAgICAgICAgICAgICAgICAgICAgICAgICB8 DQogICB8ICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSsNCiAgIFIgICB8IExvY2F0b3IgQ291bnQgfCBFSUQgbWFzay1sZW4g IHwgQUNUIHxBfCAgICAgIFJlc2VydmVkICAgICAgICAgfA0KICAgZSAgICstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICBj ICAgfCAgICAgICAgICAgUmVzZXJ2ZWQgICAgICAgICAgICB8ICAgICAgICAgICAgRUlELUFGSSAg ICAgICAgICAgIHwNCiAgIG8gICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgciAgIHwgICAgICAgICAgICAgICAgICAg ICAgICAgIEVJRC1wcmVmaXggICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICBkICAgKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSsNCiAgIHwgIC98ICAgIFByaW9yaXR5ICAgfCAgICBXZWlnaHQgICAgIHwgIE0gUHJpb3Jp dHkgICB8ICAgTSBXZWlnaHQgICAgfA0KICAgfCBMICstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICB8IG8gfCAgICAgICAg ICAgVW51c2VkIEZsYWdzICAgICAgfFJ8ICAgICAgICAgICBMb2MtQUZJICAgICAgICAgICAgIHwN CiAgIHwgYyArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKw0KICAgfCAgXHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgIExv Y2F0b3IgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICArLT4gKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCg0KDQog ICBQYWNrZXQgZmllbGQgZGVzY3JpcHRpb25zOg0KDQogICBUeXBlOiAgIDMgKE1hcC1SZWdpc3Rl cikNCg0KICAgUDogU2V0IHRvIDEgYnkgYW4gRVRSIHdoaWNoIHNlbmRzIGEgTWFwLVJlZ2lzdGVy IG1lc3NhZ2UgcmVxdWVzdGluZw0KICAgICAgZm9yIHRoZSBNYXAtU2VydmVyIHRvIHByb3h5IE1h cC1SZXBseS4gIFRoZSBNYXAtU2VydmVyIHdpbGwgc2VuZA0KICAgICAgbm9uLWF1dGhvcml0YXRp dmUgTWFwLVJlcGxpZXMgb24gYmVoYWxmIG9mIHRoZSBFVFIuICBEZXRhaWxzIG9uDQogICAgICB0 aGlzIHVzYWdlIHdpbGwgYmUgcHJvdmlkZWQgaW4gYSBmdXR1cmUgdmVyc2lvbiBvZiB0aGlzIGRy YWZ0Lg0KDQogICBSZXNlcnZlZDogIFNldCB0byAwIG9uIHRyYW5zbWlzc2lvbiBhbmQgaWdub3Jl ZCBvbiByZWNlaXB0Lg0KDQogICBSZWNvcmQgQ291bnQ6ICBUaGUgbnVtYmVyIG9mIHJlY29yZHMg aW4gdGhpcyBNYXAtUmVnaXN0ZXIgbWVzc2FnZS4gIEENCiAgICAgIHJlY29yZCBpcyBjb21wcmlz ZWQgb2YgdGhhdCBwb3J0aW9uIG9mIHRoZSBwYWNrZXQgbGFiZWxlZCAnUmVjb3JkJw0KICAgICAg YWJvdmUgYW5kIG9jY3VycyB0aGUgbnVtYmVyIG9mIHRpbWVzIGVxdWFsIHRvIFJlY29yZCBjb3Vu dC4NCg0KICAgTm9uY2U6ICBUaGlzIDgtYnl0ZSBOb25jZSBmaWVsZCBpcyBzZXQgdG8gMCBpbiBN YXAtUmVnaXN0ZXIgbWVzc2FnZXMuDQoNCg0KDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAg ICAgIEV4cGlyZXMgSnVseSAxNiwgMjAxMCAgICAgICAgICAgICAgICBbUGFnZSAzNl0NCgwNCklu dGVybmV0LURyYWZ0ICAgIExvY2F0b3IvSUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAg IEphbnVhcnkgMjAxMA0KDQoNCiAgIEtleSBJRDogIEEgY29uZmlndXJlZCBJRCB0byBmaW5kIHRo ZSBjb25maWd1cmVkIE1lc3NhZ2UNCiAgICAgIEF1dGhlbnRpY2F0aW9uIENvZGUgKE1BQykgYWxn b3JpdGhtIGFuZCBrZXkgdmFsdWUgdXNlZCBmb3IgdGhlDQogICAgICBhdXRoZW50aWNhdGlvbiBm dW5jdGlvbi4NCg0KICAgQXV0aGVudGljYXRpb24gRGF0YSBMZW5ndGg6ICBUaGUgbGVuZ3RoIGlu IGJ5dGVzIG9mIHRoZQ0KICAgICAgQXV0aGVudGljYXRpb24gRGF0YSBmaWVsZCB0aGF0IGZvbGxv d3MgdGhpcyBmaWVsZC4gIFRoZSBsZW5ndGggb2YNCiAgICAgIHRoZSB0aGUgQXV0aGVudGljYXRp b24gRGF0YSBmaWVsZCBpcyBkZXBlbmRlbnQgb24gdGhlIE1lc3NhZ2UNCiAgICAgIEF1dGhlbnRp Y2F0aW9uIENvZGUgKE1BQykgYWxnb3JpdGhtIHVzZWQuICBUaGUgbGVuZ3RoIGZpZWxkIGFsbG93 cw0KICAgICAgYSBkZXZpY2UgdGhhdCBkb2Vzbid0IGtub3cgdGhlIE1BQyBhbGdvcml0aG0gdG8g Y29ycmVjdGx5IHBhcnNlDQogICAgICB0aGUgcGFja2V0Lg0KDQogICBBdXRoZW50aWNhdGlvbiBE YXRhOiAgVGhlIG1lc3NhZ2UgZGlnZXN0IHVzZWQgZnJvbSB0aGUgb3V0cHV0IG9mIHRoZQ0KICAg ICAgTWVzc2FnZSBBdXRoZW50aWNhdGlvbiBDb2RlIChNQUMpIGFsZ29yaXRobS4gIFRoZSBlbnRp cmUgTWFwLQ0KICAgICAgUmVnaXN0ZXIgcGF5bG9hZCBpcyBhdXRoZW50aWNhdGVkIHdpdGggdGhp cyBmaWVsZCBwcmVzZXQgdG8gMC4NCiAgICAgIEFmdGVyIHRoZSBNQUMgaXMgY29tcHV0ZWQsIGl0 IGlzIHBsYWNlZCBpbiB0aGlzIGZpZWxkLg0KICAgICAgSW1wbGVtZW50YXRpb25zIG9mIHRoaXMg c3BlY2lmaWNhdGlvbiBNVVNUIGluY2x1ZGUgc3VwcG9ydCBmb3INCiAgICAgIEhNQUMtU0hBLTEt OTYgW1JGQzI0MDRdIGFuZCBzdXBwb3J0IGZvciBITUFDLVNIQS0xMjgtMjU2IFtSRkM0NjM0XQ0K ICAgICAgaXMgcmVjb21tZW5kZWQuDQoNCiAgIFRoZSBkZWZpbml0aW9uIG9mIHRoZSByZXN0IG9m IHRoZSBNYXAtUmVnaXN0ZXIgY2FuIGJlIGZvdW5kIGluIHRoZQ0KICAgTWFwLVJlcGx5IHNlY3Rp b24uICBIb3dldmVyLCB0aGUgcmVjb3JkIFRUTCBmaWVsZCBpcyBub3QgdXNlZCBhbmQgc2V0DQog ICB0byAwLg0KDQo2LjEuNy4gIEVuY2Fwc3VhbHRlZCBDb250cm9sIE1lc3NhZ2UgRm9ybWF0DQoN CiAgIEFuIEVuY2Fwc3VsYXRlZCBDb250cm9sIE1lc3NhZ2UgaXMgdXNlZCB0byBlbmNhcHN1bGF0 ZSBjb250cm9sDQogICBwYWNrZXRzIHNlbnQgYmV0d2VlbiB4VFJzIGFuZCB0aGUgbWFwcGluZyBk YXRhYmFzZSBzeXN0ZW0gZGVzY3JpYmVkDQogICBpbiBbTElTUC1NU10uDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAg ICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1BhZ2UgMzddDQoMDQpJbnRl cm5ldC1EcmFmdCAgICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBK YW51YXJ5IDIwMTANCg0KDQogICAgICAgIDAgICAgICAgICAgICAgICAgICAgMSAgICAgICAgICAg ICAgICAgICAyICAgICAgICAgICAgICAgICAgIDMNCiAgICAgICAgMCAxIDIgMyA0IDUgNiA3IDgg OSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxDQogICAgICAgKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSsNCiAgICAgLyB8ICAgICAgICAgICAgICAgICAgICAgICBJUHY0IG9yIElQdjYgSGVhZGVy ICAgICAgICAgICAgICAgICAgICAgfA0KICAgT0ggIHwgICAgICAgICAgICAgICAgICAgICAgKHVz ZXMgUkxPQyBhZGRyZXNzZXMpICAgICAgICAgICAgICAgICAgICB8DQogICAgIFwgfCAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwN CiAgICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKw0KICAgICAvIHwgICAgICAgU291cmNlIFBvcnQgPSB4eHh4ICAgICAg fCAgICAgICBEZXN0IFBvcnQgPSA0MzQyICAgICAgICB8DQogICBVRFAgKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgICAg XCB8ICAgICAgICAgICBVRFAgTGVuZ3RoICAgICAgICAgIHwgICAgICAgIFVEUCBDaGVja3N1bSAg ICAgICAgICAgfA0KICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQogICBMSCAgfFR5cGU9OCB8ICAgICAgICAgICAg ICAgICAgIFJlc2VydmVkICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICArLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKw0KICAgICAvIHwgICAgICAgICAgICAgICAgICAgICAgIElQdjQgb3IgSVB2NiBIZWFkZXIg ICAgICAgICAgICAgICAgICAgICB8DQogICBJSCAgfCAgICAgICAgICAgICAgICAgICh1c2VzIFJM T0Mgb3IgRUlEIGFkZHJlc3NlcykgICAgICAgICAgICAgICAgIHwNCiAgICAgXCB8ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0K ICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rDQogICAgIC8gfCAgICAgICBTb3VyY2UgUG9ydCA9IHh4eHggICAgICB8 ICAgICAgIERlc3QgUG9ydCA9IHl5eXkgICAgICAgIHwNCiAgIFVEUCArLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0KICAgICBc IHwgICAgICAgICAgIFVEUCBMZW5ndGggICAgICAgICAgfCAgICAgICAgVURQIENoZWNrc3VtICAg ICAgICAgICB8DQogICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNCiAgIExDTSB8ICAgICAgICAgICAgICAgICAgICAg IExJU1AgQ29udHJvbCBNZXNzYWdlICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rDQoNCiAgIFBhY2tldCBoZWFkZXIgZGVzY3JpcHRpb25zOg0KDQogICBPSDogICBUaGUgb3V0 ZXIgSVB2NCBvciBJUHY2IGhlYWRlciB3aGljaCB1c2VzIFJMT0MgYWRkcmVzc2VzIGluIHRoZQ0K ICAgICAgc291cmNlIGFuZCBkZXN0aW5hdGlvbiBoZWFkZXIgYWRkcmVzcyBmaWVsZHMuDQoNCiAg IFVEUDogICBUaGUgb3V0ZXIgVURQIGhlYWRlciB3aXRoIGRlc3RpbmF0aW9uIHBvcnQgNDM0Mi4g IFRoZSBzb3VyY2UNCiAgICAgIHBvcnQgaXMgcmFuZG9tbHkgYWxsb2NhdGVkLiAgVGhlIGNoZWNr c3VtIGZpZWxkIE1VU1QgYmUgbm9uLXplcm8uDQoNCiAgIExIOiAgIFR5cGUgOCBpcyBkZWZpbmVk IHRvIGJlIGEgIkxJU1AgRW5jYXBzdWxhdGVkIENvbnRyb2wgTWVzc2FnZSINCiAgICAgIGFuZCB3 aGF0IGZvbGxvd3MgaXMgZWl0aGVyIGFuIElQdjQgb3IgSVB2NiBoZWFkZXIgYXMgZW5jb2RlZCBi eQ0KICAgICAgdGhlIGZpcnN0IDQgYml0cyBhZnRlciB0aGUgcmVzZXJ2ZWQgZmllbGQuDQoNCiAg IElIOiAgIFRoZSBpbm5lciBJUHY0IG9yIElQdjYgaGVhZGVyIHdoaWNoIGNhbiB1c2UgZWl0aGVy IFJMT0Mgb3IgRUlEDQogICAgICBhZGRyZXNzZXMgaW4gdGhlIGhlYWRlciBhZGRyZXNzIGZpZWxk cy4gIFdoZW4gYSBNYXAtUmVxdWVzdCBpcw0KICAgICAgZW5jYXBzdWxhdGVkIGluIHRoaXMgcGFj a2V0IGZvcm1hdCB0aGUgZGVzdGluYXRpb24gYWRkcmVzcyBpbiB0aGlzDQogICAgICBoZWFkZXIg aXMgYW4gRUlELg0KDQogICBVRFA6ICAgVGhlIGlubmVyIFVEUCBoZWFkZXIgd2hlcmUgdGhlIHBv cnQgYXNzaWdubWVudHMgZGVwZW5kcyBvbiB0aGUNCiAgICAgIGNvbnRyb2wgcGFja2V0IGJlaW5n IGVuY2Fwc3VsYXRlZC4gIFdoZW4gdGhlIGNvbnRyb2wgcGFja2V0IGlzIGENCiAgICAgIE1hcC1S ZXF1ZXN0IG9yIE1hcC1SZWdpc3RlciwgdGhlIHNvdXJjZSBwb3J0IGlzIHJhbmRvbWx5IGFzc2ln bmVkDQogICAgICBhbmQgdGhlIGRlc3RpbmF0aW9uIHBvcnQgaXMgNDM0Mi4gIFdoZW4gdGhlIGNv bnRyb2wgcGFja2V0IGlzIGENCiAgICAgIE1hcC1SZXBseSwgdGhlIHNvdXJjZSBwb3J0IGlzIDQz NDIgYW5kIHRoZSBkZXN0aW5hdGlvbiBwb3J0IGlzDQogICAgICBhc3NpZ25lZCBmcm9tIHRoZSBz b3VyY2UgcG9ydCBvZiB0aGUgaW52b2tpbmcgTWFwLVJlcXVlc3QuICBQb3J0DQogICAgICBudW1i ZXIgNDM0MSBNVVNUIE5PVCBiZSBhc3NpZ25lZCB0byBlaXRoZXIgcG9ydC4gIFRoZSBjaGVja3N1 bQ0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAg ICAgICAgICAgICAgICAgW1BhZ2UgMzhdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICBMb2NhdG9yL0lE IFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTANCg0KDQogICAgICBm aWVsZCBNVVNUIGJlIG5vbi16ZXJvLg0KDQogICBMQ006ICAgVGhlIGZvcm1hdCBpcyBvbmUgb2Yg dGhlIGNvbnRyb2wgbWVzc2FnZSBmb3JtYXRzIGRlc2NyaWJlZCBpbg0KICAgICAgdGhpcyBzZWN0 aW9uLiAgQXQgdGhpcyB0aW1lLCBvbmx5IE1hcC1SZXF1ZXN0IG1lc3NhZ2VzIGFuZCBQSU0NCiAg ICAgIEpvaW4tUHJ1bmUgbWVzc2FnZXMgW01MSVNQXSBhcmUgYWxsb3dlZCB0byBiZSBlbmNhcHN1 bGF0ZWQuDQogICAgICBFbmNhcHN1bGF0aW5nIG90aGVyIHR5cGVzIG9mIExJU1AgY29udHJvbCBt ZXNzYWdlcyBhcmUgZm9yIGZ1cnRoZXINCiAgICAgIHN0dWR5LiAgV2hlbiBNYXAtUmVxdWVzdHMg YXJlIHNlbnQgZm9yIFJMT0MtcHJvYmluZyBwdXJwb3NlcyAoaS5lDQogICAgICB0aGUgUC1iaXQg aXMgc2V0KSwgdGhleSBNVVNUIG5vdCBiZSBzZW50IGluc2lkZSBFbmNhcHN1bGF0ZWQNCiAgICAg IENvbnRyb2wgTWVzc2FnZXMuDQoNCjYuMi4gIFJvdXRpbmcgTG9jYXRvciBTZWxlY3Rpb24NCg0K ICAgQm90aCBjbGllbnQtc2lkZSBhbmQgc2VydmVyLXNpZGUgbWF5IG5lZWQgY29udHJvbCBvdmVy IHRoZSBzZWxlY3Rpb24NCiAgIG9mIFJMT0NzIGZvciBjb252ZXJzYXRpb25zIGJldHdlZW4gdGhl bS4gIFRoaXMgY29udHJvbCBpcyBhY2hpZXZlZCBieQ0KICAgbWFuaXB1bGF0aW5nIHRoZSBQcmlv cml0eSBhbmQgV2VpZ2h0IGZpZWxkcyBpbiBFSUQtdG8tUkxPQyBNYXAtUmVwbHkNCiAgIG1lc3Nh Z2VzLiAgQWx0ZXJuYXRpdmVseSwgUkxPQyBpbmZvcm1hdGlvbiBtYXkgYmUgZ2xlYW5lZCBmcm9t DQogICByZWNlaXZlZCB0dW5uZWxlZCBwYWNrZXRzIG9yIEVJRC10by1STE9DIE1hcC1SZXF1ZXN0 IG1lc3NhZ2VzLg0KDQogICBUaGUgZm9sbG93aW5nIGVudW1lcmF0ZXMgZGlmZmVyZW50IHNjZW5h cmlvcyBmb3IgY2hvb3NpbmcgUkxPQ3MgYW5kDQogICB0aGUgY29udHJvbHMgdGhhdCBhcmUgYXZh aWxhYmxlOg0KDQogICBvICBTZXJ2ZXItc2lkZSByZXR1cm5zIG9uZSBSTE9DLiAgQ2xpZW50LXNp ZGUgY2FuIG9ubHkgdXNlIG9uZSBSTE9DLg0KICAgICAgU2VydmVyLXNpZGUgaGFzIGNvbXBsZXRl IGNvbnRyb2wgb2YgdGhlIHNlbGVjdGlvbi4NCg0KICAgbyAgU2VydmVyLXNpZGUgcmV0dXJucyBh IGxpc3Qgb2YgUkxPQyB3aGVyZSBhIHN1YnNldCBvZiB0aGUgbGlzdCBoYXMNCiAgICAgIHRoZSBz YW1lIGJlc3QgcHJpb3JpdHkuICBDbGllbnQgY2FuIG9ubHkgdXNlIHRoZSBzdWJzZXQgbGlzdA0K ICAgICAgYWNjb3JkaW5nIHRvIHRoZSB3ZWlnaHRpbmcgYXNzaWduZWQgYnkgdGhlIHNlcnZlci1z aWRlLiAgSW4gdGhpcw0KICAgICAgY2FzZSwgdGhlIHNlcnZlci1zaWRlIGNvbnRyb2xzIGJvdGgg dGhlIHN1YnNldCBsaXN0IGFuZCBsb2FkLQ0KICAgICAgc3BsaXR0aW5nIGFjcm9zcyBpdHMgbWVt YmVycy4gIFRoZSBjbGllbnQtc2lkZSBjYW4gdXNlIFJMT0NzDQogICAgICBvdXRzaWRlIG9mIHRo ZSBzdWJzZXQgbGlzdCBpZiBpdCBkZXRlcm1pbmVzIHRoYXQgdGhlIHN1YnNldCBsaXN0DQogICAg ICBpcyB1bnJlYWNoYWJsZSAodW5sZXNzIFJMT0NzIGFyZSBzZXQgdG8gYSBQcmlvcml0eSBvZiAy NTUpLiAgU29tZQ0KICAgICAgc2hhcmluZyBvZiBjb250cm9sIGV4aXN0czogdGhlIHNlcnZlci1z aWRlIGRldGVybWluZXMgdGhlDQogICAgICBkZXN0aW5hdGlvbiBSTE9DIGxpc3QgYW5kIGxvYWQg ZGlzdHJpYnV0aW9uIHdoaWxlIHRoZSBjbGllbnQtc2lkZQ0KICAgICAgaGFzIHRoZSBvcHRpb24g b2YgdXNpbmcgYWx0ZXJuYXRpdmVzIHRvIHRoaXMgbGlzdCBpZiBSTE9DcyBpbiB0aGUNCiAgICAg IGxpc3QgYXJlIHVucmVhY2hhYmxlLg0KDQogICBvICBTZXJ2ZXItc2lkZSBzZXRzIHdlaWdodCBv ZiAwIGZvciB0aGUgUkxPQyBzdWJzZXQgbGlzdC4gIEluIHRoaXMNCiAgICAgIGNhc2UsIHRoZSBj bGllbnQtc2lkZSBjYW4gY2hvb3NlIGhvdyB0aGUgdHJhZmZpYyBsb2FkIGlzIHNwcmVhZA0KICAg ICAgYWNyb3NzIHRoZSBzdWJzZXQgbGlzdC4gIENvbnRyb2wgaXMgc2hhcmVkIGJ5IHRoZSBzZXJ2 ZXItc2lkZQ0KICAgICAgZGV0ZXJtaW5pbmcgdGhlIGxpc3QgYW5kIHRoZSBjbGllbnQgZGV0ZXJt aW5pbmcgbG9hZCBkaXN0cmlidXRpb24uDQogICAgICBBZ2FpbiwgdGhlIGNsaWVudCBjYW4gdXNl IGFsdGVybmF0aXZlIFJMT0NzIGlmIHRoZSBzZXJ2ZXItcHJvdmlkZWQNCiAgICAgIGxpc3Qgb2Yg UkxPQ3MgYXJlIHVucmVhY2hhYmxlLg0KDQogICBvICBFaXRoZXIgc2lkZSAobW9yZSBsaWtlbHkg b24gdGhlIHNlcnZlci1zaWRlIEVUUikgZGVjaWRlcyBub3QgdG8NCiAgICAgIHNlbmQgYSBNYXAt UmVxdWVzdC4gIEZvciBleGFtcGxlLCBpZiB0aGUgc2VydmVyLXNpZGUgRVRSIGRvZXMgbm90DQog ICAgICBzZW5kIE1hcC1SZXF1ZXN0cywgaXQgZ2xlYW5zIFJMT0NzIGZyb20gdGhlIGNsaWVudC1z aWRlIElUUiwNCiAgICAgIGdpdmluZyB0aGUgY2xpZW50LXNpZGUgSVRSIHJlc3BvbnNpYmlsaXR5 IGZvciBiaWRpcmVjdGlvbmFsIFJMT0MNCiAgICAgIHJlYWNoYWJpbGl0eSBhbmQgcHJlZmVyYWJp bGl0eS4gIFNlcnZlci1zaWRlIEVUUiBnbGVhbmluZyBvZiB0aGUNCg0KDQoNCkZhcmluYWNjaSwg ZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdl IDM5XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29s IChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoNCg0KICAgICAgY2xpZW50LXNpZGUgSVRSIFJMT0Mg aXMgZG9uZSBieSBjYWNoaW5nIHRoZSBpbm5lciBoZWFkZXIgc291cmNlDQogICAgICBFSUQgYW5k IHRoZSBvdXRlciBoZWFkZXIgc291cmNlIFJMT0Mgb2YgcmVjZWl2ZWQgcGFja2V0cy4gIFRoZQ0K ICAgICAgY2xpZW50LXNpZGUgSVRSIGNvbnRyb2xzIGhvdyB0cmFmZmljIGlzIHJldHVybmVkIGFu ZCBjYW4gYWx0ZXJuYXRlDQogICAgICB1c2luZyBhbiBvdXRlciBoZWFkZXIgc291cmNlIFJMT0Ms IHdoaWNoIHRoZW4gY2FuIGJlIGFkZGVkIHRvIHRoZQ0KICAgICAgbGlzdCB0aGUgc2VydmVyLXNp ZGUgRVRSIHVzZXMgdG8gcmV0dXJuIHRyYWZmaWMuICBTaW5jZSBubw0KICAgICAgUHJpb3JpdHkg b3IgV2VpZ2h0cyBhcmUgcHJvdmlkZWQgdXNpbmcgdGhpcyBtZXRob2QsIHRoZSBzZXJ2ZXItDQog ICAgICBzaWRlIEVUUiBtdXN0IGFzc3VtZSBlYWNoIGNsaWVudC1zaWRlIElUUiBSTE9DIHVzZXMg dGhlIHNhbWUgYmVzdA0KICAgICAgUHJpb3JpdHkgd2l0aCBhIFdlaWdodCBvZiB6ZXJvLiAgSW4g YWRkaXRpb24sIHNpbmNlIEVJRC1wcmVmaXgNCiAgICAgIGVuY29kaW5nIGNhbm5vdCBiZSBjb252 ZXllZCBpbiBkYXRhIHBhY2tldHMsIHRoZSBFSUQtdG8tUkxPQyBjYWNoZQ0KICAgICAgb24gdHVu bmVsIHJvdXRlcnMgY2FuIGdyb3cgdG8gYmUgdmVyeSBsYXJnZS4NCg0KICAgbyAgQSAiZ2xlYW5l ZCIgbWFwLWNhY2hlIGVudHJ5LCBvbmUgbGVhcm5lZCBmcm9tIHRoZSBzb3VyY2UgUkxPQyBvZiBh DQogICAgICByZWNlaXZlZCBlbmNhcHN1bGF0ZWQgcGFja2V0LCBpcyBvbmx5IHN0b3JlZCBhbmQg dXNlZCBmb3IgYSBmZXcNCiAgICAgIHNlY29uZHMsIHBlbmRpbmcgdmVyaWZpY2F0aW9uLiAgVmVy aWZpY2F0aW9uIGlzIHBlcmZvcm1lZCBieQ0KICAgICAgc2VuZGluZyBhIE1hcC1SZXF1ZXN0IHRv IHRoZSBzb3VyY2UgRUlEICh0aGUgaW5uZXIgaGVhZGVyIElQDQogICAgICBzb3VyY2UgYWRkcmVz cykgb2YgdGhlIHJlY2VpdmVkIGVuY2Fwc3VsYXRlZCBwYWNrZXQuICBBIHJlcGx5IHRvDQogICAg ICB0aGlzICJ2ZXJpZnlpbmcgTWFwLVJlcXVlc3QiIGlzIHVzZWQgdG8gZnVsbHkgcG9wdWxhdGUg dGhlIG1hcC0NCiAgICAgIGNhY2hlIGVudHJ5IGZvciB0aGUgImdsZWFuZWQiIEVJRCBhbmQgaXMg c3RvcmVkIGFuZCB1c2VkIGZvciB0aGUNCiAgICAgIHRpbWUgaW5kaWNhdGVkIGZyb20gdGhlIFRU TCBmaWVsZCBvZiBhIHJlY2VpdmVkIE1hcC1SZXBseS4gIFdoZW4gYQ0KICAgICAgdmVyaWZpZWQg bWFwLWNhY2hlIGVudHJ5IGlzIHN0b3JlZCwgZGF0YSBnbGVhbmluZyBubyBsb25nZXIgb2NjdXJz DQogICAgICBmb3Igc3Vic2VxdWVudCBwYWNrZXRzIHdoaWNoIGhhdmUgYSBzb3VyY2UgRUlEIHRo YXQgbWF0Y2hlcyB0aGUNCiAgICAgIEVJRC1wcmVmaXggb2YgdGhlIHZlcmlmaWVkIGVudHJ5Lg0K DQogICBSTE9DcyB0aGF0IGFwcGVhciBpbiBFSUQtdG8tUkxPQyBNYXAtUmVwbHkgbWVzc2FnZXMg YXJlIGFzc3VtZWQgdG8gYmUNCiAgIHJlYWNoYWJsZSB3aGVuIHRoZSBSLWJpdCBmb3IgdGhlIGxv Y2F0b3IgcmVjb3JkIGlzIHNldCB0byAxLiAgTmVpdGhlcg0KICAgdGhlIGluZm9ybWF0aW9uIGNv bnRhaW5lZCBpbiBhIE1hcC1SZXBseSBvciB0aGF0IHN0b3JlZCBpbiB0aGUNCiAgIG1hcHBpbmcg ZGF0YWJhc2Ugc3lzdGVtIHByb3ZpZGUgcmVhY2hhYmlsaXR5IGluZm9ybWF0aW9uIGZvciBSTE9D cy4NCiAgIFN1Y2ggcmVhY2hhYmlsaXR5IG5lZWRzIHRvIGJlIGRldGVybWluZWQgc2VwYXJhdGVs eSwgdXNpbmcgb25lIG9yDQogICBtb3JlIG9mIHRoZSBSb3V0aW5nIExvY2F0b3IgUmVhY2hhYmls aXR5IEFsZ29yaXRobXMgZGVzY3JpYmVkIGluIHRoZQ0KICAgbmV4dCBzZWN0aW9uLg0KDQo2LjMu ICBSb3V0aW5nIExvY2F0b3IgUmVhY2hhYmlsaXR5DQoNCiAgIFNldmVyYWwgbWVjaGFuaXNtcyBm b3IgZGV0ZXJtaW5pbmcgUkxPQyByZWFjaGFiaWxpdHkgYXJlIGN1cnJlbnRseQ0KICAgZGVmaW5l ZDoNCg0KICAgMS4gIEFuIEVUUiBtYXkgZXhhbWluZSB0aGUgTG9jLVN0YXR1cy1CaXRzIGluIHRo ZSBMSVNQIGhlYWRlciBvZiBhbg0KICAgICAgIGVuY2Fwc3VsYXRlZCBkYXRhIHBhY2tldCByZWNl aXZlZCBmcm9tIGFuIElUUi4gIElmIHRoZSBFVFIgaXMNCiAgICAgICBhbHNvIGFjdGluZyBhcyBh biBJVFIgYW5kIGhhcyB0cmFmZmljIHRvIHJldHVybiB0byB0aGUgb3JpZ2luYWwNCiAgICAgICBJ VFIgc2l0ZSwgaXQgY2FuIHVzZSB0aGlzIHN0YXR1cyBpbmZvcm1hdGlvbiB0byBoZWxwIHNlbGVj dCBhbg0KICAgICAgIFJMT0MuDQoNCiAgIDIuICBBbiBJVFIgbWF5IHJlY2VpdmUgYW4gSUNNUCBO ZXR3b3JrIG9yIElDTVAgSG9zdCBVbnJlYWNoYWJsZQ0KICAgICAgIG1lc3NhZ2UgZm9yIGFuIFJM T0MgaXQgaXMgdXNpbmcuICBUaGlzIGluZGljYXRlcyB0aGF0IHRoZSBSTE9DIGlzDQogICAgICAg bGlrZWx5IGRvd24uDQoNCiAgIDMuICBBbiBJVFIgd2hpY2ggcGFydGljaXBhdGVzIGluIHRoZSBn bG9iYWwgcm91dGluZyBzeXN0ZW0gY2FuDQogICAgICAgZGV0ZXJtaW5lIHRoYXQgYW4gUkxPQyBp cyBkb3duIGlmIG5vIEJHUCBSSUIgcm91dGUgZXhpc3RzIHRoYXQNCg0KDQoNCkZhcmluYWNjaSwg ZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdl IDQwXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29s IChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoNCg0KICAgICAgIG1hdGNoZXMgdGhlIFJMT0MgSVAg YWRkcmVzcy4NCg0KICAgNC4gIEFuIElUUiBtYXkgcmVjZWl2ZSBhbiBJQ01QIFBvcnQgVW5yZWFj aGFibGUgbWVzc2FnZSBmcm9tIGENCiAgICAgICBkZXN0aW5hdGlvbiBob3N0LiAgVGhpcyBvY2N1 cnMgaWYgYW4gSVRSIGF0dGVtcHRzIHRvIHVzZQ0KICAgICAgIGludGVyd29ya2luZyBbSU5URVJX T1JLXSBhbmQgTElTUC1lbmNhcHN1bGF0ZWQgZGF0YSBpcyBzZW50IHRvIGENCiAgICAgICBub24t TElTUC1jYXBhYmxlIHNpdGUuDQoNCiAgIDUuICBBbiBJVFIgbWF5IHJlY2VpdmUgYSBNYXAtUmVw bHkgZnJvbSBhIEVUUiBpbiByZXNwb25zZSB0byBhDQogICAgICAgcHJldmlvdXNseSBzZW50IE1h cC1SZXF1ZXN0LiAgVGhlIFJMT0Mgc291cmNlIG9mIHRoZSBNYXAtUmVwbHkgaXMNCiAgICAgICBs aWtlbHkgdXAgc2luY2UgdGhlIEVUUiB3YXMgYWJsZSB0byBzZW5kIHRoZSBNYXAtUmVwbHkgdG8g dGhlDQogICAgICAgSVRSLg0KDQogICA2LiAgV2hlbiBhbiBFVFIgcmVjZWl2ZXMgYW4gZW5jYXBz dWxhdGVkIHBhY2tldCBmcm9tIGFuIElUUiwgdGhlDQogICAgICAgc291cmNlIFJMT0MgZnJvbSB0 aGUgb3V0ZXIgaGVhZGVyIG9mIHRoZSBwYWNrZXQgaXMgbGlrZWx5IHVwLg0KDQogICA3LiAgQW4g SVRSL0VUUiBwYWlyIGNhbiB1c2UgdGhlIExvY2F0b3IgUmVhY2hhYmlsaXR5IEFsZ29yaXRobXMN CiAgICAgICBkZXNjcmliZWQgaW4gdGhpcyBzZWN0aW9uLCBuYW1lbHkgRWNoby1Ob25jaW5nIG9y IFJMT0MtUHJvYmluZy4NCg0KICAgV2hlbiBkZXRlcm1pbmluZyBMb2NhdG9yIHVwL2Rvd24gcmVh Y2hhYmlsaXR5IGJ5IGV4YW1pbmluZyB0aGUgTG9jLQ0KICAgU3RhdHVzLUJpdHMgZnJvbSB0aGUg TElTUCBlbmNhcHN1bGF0ZWQgZGF0YSBwYWNrZXQsIGFuIEVUUiB3aWxsDQogICByZWNlaXZlIHVw IHRvIGRhdGUgc3RhdHVzIGZyb20gYW4gZW5jYXBzdWxhdGluZyBJVFIgYWJvdXQNCiAgIHJlYWNo YWJpbGl0eSBmb3IgYWxsIEVUUnMgYXQgdGhlIHNpdGUuICBDRS1iYXNlZCBJVFJzIGF0IHRoZSBz b3VyY2UNCiAgIHNpdGUgY2FuIGRldGVybWluZSByZWFjaGFiaWxpdHkgcmVsYXRpdmUgdG8gZWFj aCBvdGhlciB1c2luZyB0aGUgc2l0ZQ0KICAgSUdQIGFzIGZvbGxvd3M6DQoNCiAgIG8gIFVuZGVy IG5vcm1hbCBjaXJjdW1zdGFuY2VzLCBlYWNoIElUUiB3aWxsIGFkdmVydGlzZSBhIGRlZmF1bHQN CiAgICAgIHJvdXRlIGludG8gdGhlIHNpdGUgSUdQLg0KDQogICBvICBJZiBhbiBJVFIgZmFpbHMg b3IgaWYgdGhlIHVwc3RyZWFtIGxpbmsgdG8gaXRzIFBFIGZhaWxzLCBpdHMNCiAgICAgIGRlZmF1 bHQgcm91dGUgd2lsbCBlaXRoZXIgdGltZS1vdXQgb3IgYmUgd2l0aGRyYXduLg0KDQogICBFYWNo IElUUiBjYW4gdGh1cyBvYnNlcnZlIHRoZSBwcmVzZW5jZSBvciBsYWNrIG9mIGEgZGVmYXVsdCBy b3V0ZQ0KICAgb3JpZ2luYXRlZCBieSB0aGUgb3RoZXJzIHRvIGRldGVybWluZSB0aGUgTG9jYXRv ciBTdGF0dXMgQml0cyBpdCBzZXRzDQogICBmb3IgdGhlbS4NCg0KICAgUkxPQ3MgbGlzdGVkIGlu IGEgTWFwLVJlcGx5IGFyZSBudW1iZXJlZCB3aXRoIG9yZGluYWxzIDAgdG8gbi0xLiAgVGhlDQog ICBMb2MtU3RhdHVzLUJpdHMgaW4gYSBMSVNQIGVuY2Fwc3VsYXRlZCBwYWNrZXQgYXJlIG51bWJl cmVkIGZyb20gMCB0bw0KICAgbi0xIHN0YXJ0aW5nIHdpdGggdGhlIGxlYXN0IHNpZ25pZmljYW50 IGJpdC4gIEZvciBleGFtcGxlLCBpZiBhbiBSTE9DDQogICBsaXN0ZWQgaW4gdGhlIDNyZCBwb3Np dGlvbiBvZiB0aGUgTWFwLVJlcGx5IGdvZXMgZG93biAob3JkaW5hbCB2YWx1ZQ0KICAgMiksIHRo ZW4gYWxsIElUUnMgYXQgdGhlIHNpdGUgd2lsbCBjbGVhciB0aGUgM3JkIGxlYXN0IHNpZ25pZmlj YW50DQogICBiaXQgKHh4eHggeDB4eCkgb2YgdGhlIExvYy1TdGF0dXMtQml0cyBmaWVsZCBmb3Ig dGhlIHBhY2tldHMgdGhleQ0KICAgZW5jYXBzdWxhdGUuDQoNCiAgIFdoZW4gYW4gRVRSIGRlY2Fw c3VsYXRlcyBhIHBhY2tldCwgaXQgd2lsbCBjaGVjayBmb3IgYW55IGNoYW5nZSBpbg0KICAgdGhl IExvYy1TdGF0dXMtQml0cyBmaWVsZC4gIFdoZW4gYSBiaXQgZ29lcyBmcm9tIDEgdG8gMCwgdGhl IEVUUiB3aWxsDQogICByZWZyYWluIGZyb20gZW5jYXBzdWxhdGluZyBwYWNrZXRzIHRvIGFuIFJM T0MgdGhhdCBpcyBpbmRpY2F0ZWQgYXMNCiAgIGRvd24uICBJdCB3aWxsIG9ubHkgcmVzdW1lIHVz aW5nIHRoYXQgUkxPQyBpZiB0aGUgY29ycmVzcG9uZGluZyBMb2MtDQogICBTdGF0dXMtQml0IHJl dHVybnMgdG8gYSB2YWx1ZSBvZiAxLiAgTG9jLVN0YXR1cy1CaXRzIGFyZSBhc3NvY2lhdGVkDQoN Cg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMgSnVseSAxNiwgMjAxMCAgICAg ICAgICAgICAgICBbUGFnZSA0MV0NCgwNCkludGVybmV0LURyYWZ0ICAgIExvY2F0b3IvSUQgU2Vw YXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAxMA0KDQoNCiAgIHdpdGggYSBs b2NhdG9yLXNldCBwZXIgRUlELXByZWZpeC4gIFRoZXJlZm9yZSwgd2hlbiBhIGxvY2F0b3IgYmVj b21lcw0KICAgdW5yZWFjaGFibGUsIHRoZSBMb2MtU3RhdHVzLUJpdCB0aGF0IGNvcnJlc3BvbmRz IHRvIHRoYXQgbG9jYXRvcidzDQogICBwb3NpdGlvbiBpbiB0aGUgbGlzdCByZXR1cm5lZCBieSB0 aGUgbGFzdCBNYXAtUmVwbHkgd2lsbCBiZSBzZXQgdG8NCiAgIHplcm8gZm9yIHRoYXQgcGFydGlj dWxhciBFSUQtcHJlZml4Lg0KDQogICBXaGVuIElUUnMgYXQgdGhlIHNpdGUgYXJlIG5vdCBkZXBs b3llZCBpbiBDRSByb3V0ZXJzLCB0aGUgSUdQIGNhbg0KICAgc3RpbGwgYmUgdXNlZCB0byBkZXRl cm1pbmUgdGhlIHJlYWNoYWJpbGl0eSBvZiBMb2NhdG9ycyBwcm92aWRlZCB0aGV5DQogICBhcmUg aW5qZWN0ZWQgaW50byB0aGUgSUdQLiAgVGhpcyBpcyB0eXBpY2FsbHkgZG9uZSB3aGVuIGEgLzMy IGFkZHJlc3MNCiAgIGlzIGNvbmZpZ3VyZWQgb24gYSBsb29wYmFjayBpbnRlcmZhY2UuDQoNCiAg IFdoZW4gSVRScyByZWNlaXZlIElDTVAgTmV0d29yayBvciBIb3N0IFVucmVhY2hhYmxlIG1lc3Nh Z2VzIGFzIGENCiAgIG1ldGhvZCB0byBkZXRlcm1pbmUgdW5yZWFjaGFiaWxpdHksIHRoZXkgd2ls bCByZWZyYWluIGZyb20gdXNpbmcNCiAgIExvY2F0b3JzIHdoaWNoIGFyZSBkZXNjcmliZWQgaW4g TG9jYXRvciBsaXN0cyBvZiBNYXAtUmVwbGllcy4NCiAgIEhvd2V2ZXIsIHVzaW5nIHRoaXMgYXBw cm9hY2ggaXMgdW5yZWxpYWJsZSBiZWNhdXNlIG1hbnkgbmV0d29yaw0KICAgb3BlcmF0b3JzIHR1 cm4gb2ZmIGdlbmVyYXRpb24gb2YgSUNNUCBVbnJlYWNoYWJsZSBtZXNzYWdlcy4NCg0KICAgSWYg YW4gSVRSIGRvZXMgcmVjZWl2ZSBhbiBJQ01QIE5ldHdvcmsgb3IgSG9zdCBVbnJlYWNoYWJsZSBt ZXNzYWdlLA0KICAgaXQgTUFZIG9yaWdpbmF0ZSBpdHMgb3duIElDTVAgVW5yZWFjaGFibGUgbWVz c2FnZSBkZXN0aW5lZCBmb3IgdGhlDQogICBob3N0IHRoYXQgb3JpZ2luYXRlZCB0aGUgZGF0YSBw YWNrZXQgdGhlIElUUiBlbmNhcHN1bGF0ZWQuDQoNCiAgIEFsc28sIEJHUC1lbmFibGVkIElUUnMg Y2FuIHVuaWxhdGVyYWxseSBleGFtaW5lIHRoZSBCR1AgUklCIHRvIHNlZSBpZg0KICAgYSBsb2Nh dG9yIGFkZHJlc3MgZnJvbSBhIGxvY2F0b3Itc2V0IGluIGEgbWFwcGluZyBlbnRyeSBtYXRjaGVz IGENCiAgIHByZWZpeC4gIElmIGl0IGRvZXMgbm90IGZpbmQgb25lIGFuZCBCR1AgaXMgcnVubmlu ZyBpbiB0aGUgRGVmYXVsdA0KICAgRnJlZSBab25lIChERlopLCBpdCBjYW4gZGVjaWRlIHRvIG5v dCB1c2UgdGhlIGxvY2F0b3IgZXZlbiB0aG91Z2ggdGhlDQogICBMb2MtU3RhdHVzLUJpdHMgaW5k aWNhdGUgdGhlIGxvY2F0b3IgaXMgdXAuICBJbiB0aGlzIGNhc2UsIHRoZSBwYXRoDQogICBmcm9t IHRoZSBJVFIgdG8gdGhlIEVUUiB0aGF0IGlzIGFzc2lnbmVkIHRoZSBsb2NhdG9yIGlzIG5vdA0K ICAgYXZhaWxhYmxlLiAgTW9yZSBkZXRhaWxzIGFyZSBpbiBbTE9DLUlELUFSQ0hdLg0KDQogICBP cHRpb25hbGx5LCBhbiBJVFIgY2FuIHNlbmQgYSBNYXAtUmVxdWVzdCB0byBhIExvY2F0b3IgYW5k IGlmIGEgTWFwLQ0KICAgUmVwbHkgaXMgcmV0dXJuZWQsIHJlYWNoYWJpbGl0eSBvZiB0aGUgTG9j YXRvciBoYXMgYmVlbiBkZXRlcm1pbmVkLg0KICAgT2J2aW91c2x5LCBzZW5kaW5nIHN1Y2ggcHJv YmVzIGluY3JlYXNlcyB0aGUgbnVtYmVyIG9mIGNvbnRyb2wNCiAgIG1lc3NhZ2VzIG9yaWdpbmF0 ZWQgYnkgdHVubmVsIHJvdXRlcnMgZm9yIGFjdGl2ZSBmbG93cywgc28gTG9jYXRvcnMNCiAgIGFy ZSBhc3N1bWVkIHRvIGJlIHJlYWNoYWJsZSB3aGVuIHRoZXkgYXJlIGFkdmVydGlzZWQuDQoNCiAg IFRoaXMgYXNzdW1wdGlvbiBkb2VzIGNyZWF0ZSBhIGRlcGVuZGVuY3k6IExvY2F0b3IgdW5yZWFj aGFiaWxpdHkgaXMNCiAgIGRldGVjdGVkIGJ5IHRoZSByZWNlaXB0IG9mIElDTVAgSG9zdCBVbnJl YWNoYWJsZSBtZXNzYWdlcy4gIFdoZW4gYW4NCiAgIExvY2F0b3IgaGFzIGJlZW4gZGV0ZXJtaW5l ZCB0byBiZSB1bnJlYWNoYWJsZSwgaXQgaXMgbm90IHVzZWQgZm9yDQogICBhY3RpdmUgdHJhZmZp YzsgdGhpcyBpcyB0aGUgc2FtZSBhcyBpZiBpdCB3ZXJlIGxpc3RlZCBpbiBhIE1hcC1SZXBseQ0K ICAgd2l0aCBwcmlvcml0eSAyNTUuDQoNCiAgIFRoZSBJVFIgY2FuIHRlc3QgdGhlIHJlYWNoYWJp bGl0eSBvZiB0aGUgdW5yZWFjaGFibGUgTG9jYXRvciBieQ0KICAgc2VuZGluZyBwZXJpb2RpYyBS ZXF1ZXN0cy4gIEJvdGggUmVxdWVzdHMgYW5kIFJlcGxpZXMgTVVTVCBiZSByYXRlLQ0KICAgbGlt aXRlZC4gIExvY2F0b3IgcmVhY2hhYmlsaXR5IHRlc3RpbmcgaXMgbmV2ZXIgZG9uZSB3aXRoIGRh dGENCiAgIHBhY2tldHMgc2luY2UgdGhhdCBpbmNyZWFzZXMgdGhlIHJpc2sgb2YgcGFja2V0IGxv c3MgZm9yIGVuZC10by1lbmQNCiAgIHNlc3Npb25zLg0KDQogICBXaGVuIGFuIEVUUiBkZWNhcHN1 bGF0ZXMgYSBwYWNrZXQsIGl0IGtub3dzIHRoYXQgaXQgaXMgcmVhY2hhYmxlIGZyb20NCiAgIHRo ZSBlbmNhcHN1bGF0aW5nIElUUiBiZWNhdXNlIHRoYXQgaXMgaG93IHRoZSBwYWNrZXQgYXJyaXZl ZC4gIEluDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMgSnVseSAxNiwg MjAxMCAgICAgICAgICAgICAgICBbUGFnZSA0Ml0NCgwNCkludGVybmV0LURyYWZ0ICAgIExvY2F0 b3IvSUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAxMA0KDQoNCiAg IG1vc3QgY2FzZXMsIHRoZSBFVFIgY2FuIGFsc28gcmVhY2ggdGhlIElUUiBidXQgY2Fubm90IGFz c3VtZSB0aGlzIHRvDQogICBiZSB0cnVlIGR1ZSB0byB0aGUgcG9zc2liaWxpdHkgb2YgcGF0aCBh c3ltbWV0cnkuICBJbiB0aGUgcHJlc2VuY2Ugb2YNCiAgIHVuaWRpcmVjdGlvbmFsIHRyYWZmaWMg ZmxvdyBmcm9tIGFuIElUUiB0byBhbiBFVFIsIHRoZSBJVFIgc2hvdWxkIG5vdA0KICAgdXNlIHRo ZSBsYWNrIG9mIHJldHVybiB0cmFmZmljIGFzIGFuIGluZGljYXRpb24gdGhhdCB0aGUgRVRSIGlz DQogICB1bnJlYWNoYWJsZS4gIEluc3RlYWQsIGl0IG11c3QgdXNlIGFuIGFsdGVybmF0ZSBtZWNo YW5pc21zIHRvDQogICBkZXRlcm1pbmUgcmVhY2hhYmlsaXR5Lg0KDQo2LjMuMS4gIEVjaG8gTm9u Y2UgQWxnb3JpdGhtDQoNCiAgIFdoZW4gdGhlcmUgaXMgYmlkaXJlY3Rpb25hbCBkYXRhIGZsb3cg YmV0d2VlbiBhIHBhaXIgb2YgbG9jYXRvcnMsIGENCiAgIHNpbXBsZSBtZWNoYW5pc20gY2FsbGVk ICJub25jZSBlY2hvaW5nIiBjYW4gYmUgdXNlZCB0byBkZXRlcm1pbmUNCiAgIHJlYWNoYWJpbGl0 eSBiZXR3ZWVuIGFuIElUUiBhbmQgRVRSLiAgV2hlbiBhbiBJVFIgd2FudHMgdG8gc29saWNpdCBh DQogICBub25jZSBlY2hvLCBpdCBzZXRzIHRoZSBOIGFuZCBFIGJpdHMgYW5kIHBsYWNlcyBhIDI0 LWJpdCBub25jZSBpbiB0aGUNCiAgIExJU1AgaGVhZGVyIG9mIHRoZSBuZXh0IGVuY2Fwc3VsYXRl ZCBkYXRhIHBhY2tldC4NCg0KICAgV2hlbiB0aGlzIHBhY2tldCBpcyByZWNlaXZlZCBieSB0aGUg RVRSLCB0aGUgZW5jYXBzdWxhdGVkIHBhY2tldCBpcw0KICAgZm9yd2FyZGVkIGFzIG5vcm1hbC4g IFdoZW4gdGhlIEVUUiBuZXh0IHNlbmRzIGEgZGF0YSBwYWNrZXQgdG8gdGhlDQogICBJVFIsIGl0 IGluY2x1ZGVzIHRoZSBub25jZSByZWNlaXZlZCBlYXJsaWVyIHdpdGggdGhlIE4gYml0IHNldCBh bmQgRQ0KICAgYml0IGNsZWFyZWQuICBUaGUgSVRSIHNlZXMgdGhpcyAiZWNob2VkIG5vbmNlIiBh bmQga25vd3MgdGhlIHBhdGggdG8NCiAgIGFuZCBmcm9tIHRoZSBFVFIgaXMgdXAuDQoNCiAgIFRo ZSBJVFIgd2lsbCBzZXQgdGhlIEUtYml0IGFuZCBOLWJpdCBmb3IgZXZlcnkgcGFja2V0IGl0IHNl bmRzIHdoaWxlDQogICBpbiBlY2hvLW5vbmNlLXJlcXVlc3Qgc3RhdGUuICBUaGUgdGltZSB0aGUg SVRSIHdhaXRzIHRvIHByb2Nlc3MgdGhlDQogICBlY2hvZWQgbm9uY2UgYmVmb3JlIGl0IGRldGVy bWluZXMgdGhlIHBhdGggaXMgdW5yZWFjaGFibGUgaXMgdmFyaWFibGUNCiAgIGFuZCBhIGNob2lj ZSBsZWZ0IGZvciB0aGUgaW1wbGVtZW50YXRpb24uDQoNCiAgIElmIHRoZSBJVFIgaXMgcmVjZWl2 aW5nIHBhY2tldHMgZnJvbSB0aGUgRVRSIGJ1dCBkb2VzIG5vdCBzZWUgdGhlDQogICBub25jZSBl Y2hvZWQgd2hpbGUgYmVpbmcgaW4gZWNoby1ub25jZS1yZXF1ZXN0IHN0YXRlLCB0aGVuIHRoZSBw YXRoDQogICB0byB0aGUgRVRSIGlzIHVucmVhY2hhYmxlLiAgVGhpcyBkZWNpc2lvbiBtYXkgYmUg b3ZlcnJpZGRlbiBieSBvdGhlcg0KICAgbG9jYXRvciByZWFjaGFiaWxpdHkgYWxnb3JpdGhtcy4g IE9uY2UgdGhlIElUUiBkZXRlcm1pbmVzIHRoZSBwYXRoIHRvDQogICB0aGUgRVRSIGlzIGRvd24g aXQgY2FuIHN3aXRjaCB0byBhbm90aGVyIGxvY2F0b3IgZm9yIHRoYXQgRUlELXByZWZpeC4NCg0K ICAgTm90ZSB0aGF0ICJJVFIiIGFuZCAiRVRSIiBhcmUgcmVsYXRpdmUgdGVybXMgaGVyZS4gIEJv dGggZGV2aWNlcyBtdXN0DQogICBiZSBpbXBsZW1lbnRpbmcgYm90aCBJVFIgYW5kIEVUUiBmdW5j dGlvbmFsaXR5IGZvciB0aGUgZWNobyBub25jZQ0KICAgbWVjaGFuaXNtIHRvIG9wZXJhdGUuDQoN CiAgIFRoZSBJVFIgYW5kIEVUUiBtYXkgYm90aCBnbyBpbnRvIGVjaG8tbm9uY2UtcmVxdWVzdCBz dGF0ZSBhdCB0aGUgc2FtZQ0KICAgdGltZS4gIFRoZSBudW1iZXIgb2YgcGFja2V0cyBzZW50IG9y IHRoZSB0aW1lIGR1cmluZyB3aGljaCBlY2hvIG5vbmNlDQogICByZXF1ZXN0cyBhcmUgc2VudCBp cyBhbiBpbXBsZW1lbnRhdGlvbiBzcGVjaWZpYyBzZXR0aW5nLiAgSG93ZXZlciwNCiAgIHdoZW4g YW4gSVRSIGlzIGluIGVjaG8tbm9uY2UtcmVxdWVzdCBzdGF0ZSwgaXQgY2FuIGVjaG8gdGhlIEVU UidzDQogICBub25jZSBpbiB0aGUgbmV4dCBzZXQgb2YgcGFja2V0cyB0aGF0IGl0IGVuY2Fwc3Vs YXRlcyBhbmQgdGhlbg0KICAgc3Vic2VxdWVudGx5LCBjb250aW51ZSBzZW5kaW5nIGVjaG8tbm9u Y2UtcmVxdWVzdCBwYWNrZXRzLg0KDQogICBUaGlzIG1lY2hhbmlzbSBkb2VzIG5vdCBjb21wbGV0 ZWx5IHNvbHZlIHRoZSBmb3J3YXJkIHBhdGgNCiAgIHJlYWNoYWJpbGl0eSBwcm9ibGVtIGFzIHRy YWZmaWMgbWF5IGJlIHVuaWRpcmVjdGlvbmFsLiAgVGhhdCBpcywgdGhlDQogICBFVFIgcmVjZWl2 aW5nIHRyYWZmaWMgYXQgYSBzaXRlIG1heSBub3QgbWF5IG5vdCBiZSB0aGUgc2FtZSBkZXZpY2Ug YXMNCiAgIGFuIElUUiB3aGljaCB0cmFuc21pdHMgdHJhZmZpYyBmcm9tIHRoYXQgc2l0ZSBvciB0 aGUgc2l0ZSB0byBzaXRlDQogICB0cmFmZmljIGlzIHVuaWRpcmVjdGlvbmFsIHNvIHRoZXJlIGlz IG5vIElUUiByZXR1cm5pbmcgdHJhZmZpYy4NCg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAgICAg ICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdlIDQzXQ0KDA0KSW50 ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAgICAg SmFudWFyeSAyMDEwDQoNCg0KICAgVGhlIGVjaG8tbm9uY2UgYWxnb3JpdGhtIGlzIGJpbGF0ZXJh bC4gIFRoYXQgaXMsIGlmIG9uZSBzaWRlIHNldHMgdGhlDQogICBFLWJpdCBhbmQgdGhlIG90aGVy IHNpZGUgaXMgbm90IGVuYWJsZWQgZm9yIGVjaG8tbm9uY2luZywgdGhlbiB0aGUNCiAgIGVjaG9p bmcgb2YgdGhlIG5vbmNlIGRvZXMgbm90IG9jY3VyIGFuZCB0aGUgcmVxdWVzdGluZyBzaWRlIG1h eQ0KICAgcmVnYXJkIHRoZSBsb2NhdG9yIHVucmVhY2hhYmxlIGVycm9uZW91c2x5LiAgQW4gSVRS IHNob3VsZCBvbmx5IHNldA0KICAgdGhlIEUtYml0IGluIGEgZW5jYXBzdWxhdGVkIGRhdGEgcGFj a2V0IHdoZW4gaXQga25vd3MgdGhlIEVUUiBpcw0KICAgZW5hYmxlZCBmb3IgZWNoby1ub25jaW5n LiAgVGhpcyBpcyBjb252ZXllZCBieSB0aGUgRS1iaXQgaW4gdGhlIE1hcC0NCiAgIFJlcGx5IG1l c3NhZ2UuDQoNCiAgIE5vdGUgdGhhdCBvdGhlciBsb2NhdG9yIHJlYWNoYWJpbGl0eSBtZWNoYW5p c21zIGFyZSBiZWluZyByZXNlYXJjaGVkDQogICBhbmQgY2FuIGJlIHVzZWQgdG8gY29tcGxpbWVu dCBvciBldmVuIG92ZXJyaWRlIHRoZSBFY2hvIE5vbmNlDQogICBBbGdvcml0aG0uICBTZWUgbmV4 dCBzZWN0aW9uIGZvciBhbiBleGFtcGxlIG9mIGNvbnRyb2wtcGxhbmUgcHJvYmluZy4NCg0KNi4z LjIuICBSTE9DIFByb2JpbmcgQWxnb3JpdGhtDQoNCiAgIFJMT0MgUHJvYmluZyBpcyBhIG1ldGhv ZCB0aGF0IGFuIElUUiBvciBQVFIgY2FuIHVzZSB0byBkZXRlcm1pbmUgdGhlDQogICByZWFjaGFi aWxpdHkgc3RhdHVzIG9mIG9uZSBvciBtb3JlIGxvY2F0b3JzIHRoYXQgaXQgaGFzIGNhY2hlZCBp biBhDQogICBtYXAtY2FjaGUgZW50cnkuICBUaGUgUC1iaXQgKFByb2JlIEJpdCkgb2YgdGhlIE1h cC1SZXF1ZXN0IGFuZCBNYXAtDQogICBSZXBseSBtZXNzYWdlcyBhcmUgdXNlZCBmb3IgUkxPQyBQ cm9iaW5nLg0KDQogICBSTE9DIHByb2JpbmcgaXMgZG9uZSBpbiB0aGUgY29udHJvbC1wbGFuZSBv biBhIHRpbWVyIGJhc2lzIHdoZXJlIGFuDQogICBJVFIgb3IgUFRSIHdpbGwgb3JpZ2luYXRlIGEg TWFwLVJlcXVlc3QgZGVzdGluZWQgdG8gYSBsb2NhdG9yIGFkZHJlc3MNCiAgIGZyb20gb25lIG9m IGl0cyBvd24gbG9jYXRvciBhZGRyZXNzZXMuICBBIE1hcC1SZXF1ZXN0IHVzZWQgYXMgYW4NCiAg IFJMT0MtcHJvYmUgaXMgTk9UIGVuY2Fwc3VsYXRlZCBhbmQgTk9UIHNlbnQgdG8gYSBNYXAtU2Vy dmVyIG9yIG9uIHRoZQ0KICAgQUxUIGxpa2Ugb25lIHdvdWxkIHdoZW4gc29saWNpdGluZyBtYXBw aW5nIGRhdGEuICBUaGUgRUlEIHJlY29yZA0KICAgZW5jb2RlZCBpbiB0aGUgTWFwLVJlcXVlc3Qg aXMgdGhlIEVJRC1wcmVmaXggb2YgdGhlIG1hcC1jYWNoZSBlbnRyeQ0KICAgY2FjaGVkIGJ5IHRo ZSBJVFIgb3IgUFRSLiAgVGhlIElUUiBvciBQVFIgbWF5IGluY2x1ZGUgYSBtYXBwaW5nIGRhdGEN CiAgIHJlY29yZCBmb3IgaXRzIG93biBkYXRhYmFzZSBtYXBwaW5nIGluZm9ybWF0aW9uLg0KDQog ICBXaGVuIGFuIEVUUiByZWNlaXZlcyBhIE1hcC1SZXF1ZXN0IG1lc3NhZ2Ugd2l0aCB0aGUgUC1i aXQgc2V0LCBpdA0KICAgcmV0dXJucyBhIE1hcC1SZXBseSB3aXRoIHRoZSBQLWJpdCBzZXQuICBU aGUgc291cmNlIGFkZHJlc3Mgb2YgdGhlDQogICBNYXAtUmVwbHkgaXMgc2V0IGZyb20gdGhlIGRl c3RpbmF0aW9uIGFkZHJlc3Mgb2YgdGhlIE1hcC1SZXF1ZXN0IGFuZA0KICAgdGhlIGRlc3RpbmF0 aW9uIGFkZHJlc3Mgb2YgdGhlIE1hcC1SZXBseSBpcyBzZXQgZnJvbSB0aGUgc291cmNlDQogICBh ZGRyZXNzIG9mIHRoZSBNYXAtUmVxdWVzdC4gIFRoZSBNYXAtUmVwbHkgc2hvdWxkIGNvbnRhaW4g bWFwcGluZw0KICAgZGF0YSBmb3IgdGhlIEVJRC1wcmVmaXggY29udGFpbmVkIGluIHRoZSBNYXAt UmVxdWVzdC4gIFRoaXMgcHJvdmlkZXMNCiAgIHRoZSBvcHBvcnR1bml0eSBmb3IgdGhlIElUUiBv ciBQVFIsIHdoaWNoIHNlbnQgdGhlIFJMT0MtcHJvYmUgdG8gZ2V0DQogICBtYXBwaW5nIHVwZGF0 ZXMgaWYgdGhlcmUgd2VyZSBjaGFuZ2VzIHRvIHRoZSBFVFIncyBkYXRhYmFzZSBtYXBwaW5nDQog ICBlbnRyaWVzLg0KDQogICBUaGVyZSBhcmUgYWR2YW50YWdlcyBhbmQgZGlzYWR2YW50YWdlcyBv ZiBSTE9DIFByb2JpbmcuICBUaGUgZ3JlYXRlc3QNCiAgIGJlbmVmaXQgb2YgUkxPQyBQcm9iaW5n IGlzIHRoYXQgaXQgY2FuIGhhbmRsZSBtYW55IGZhaWx1cmUgc2NlbmFyaW9zDQogICBhbGxvd2lu ZyB0aGUgSVRSIHRvIGRldGVybWluZSB3aGVuIHRoZSBwYXRoIHRvIGEgc3BlY2lmaWMgbG9jYXRv ciBpcw0KICAgcmVhY2hhYmxlIG9yIGhhcyBiZWNvbWUgdW5yZWFjaGFibGUsIHRodXMgcHJvdmlk aW5nIGEgcm9idXN0DQogICBtZWNoYW5pc20gZm9yIHN3aXRjaGluZyB0byB1c2luZyBhbm90aGVy IGxvY2F0b3IgZnJvbSB0aGUgY2FjaGVkDQogICBsb2NhdG9yLiAgUkxPQyBQcm9iaW5nIGNhbiBh bHNvIHByb3ZpZGUgUlRUIGVzdGltYXRlcyBiZXR3ZWVuIGEgcGFpcg0KICAgb2YgbG9jYXRvcnMg d2hpY2ggY2FuIGJlIHVzZWZ1bCBmb3IgbmV0d29yayBtYW5hZ2VtZW50IHB1cnBvc2VzIGFzDQog ICB3ZWxsIGFzIGZvciBzZWxlY3RpbmcgbG93IGRlbGF5IHBhdGhzLiAgVGhlIG1ham9yIGRpc2Fk dmFudGFnZSBvZg0KICAgUkxPQyBQcm9iaW5nIGlzIGluIHRoZSBudW1iZXIgb2YgY29udHJvbCBt ZXNzYWdlcyByZXF1aXJlZCBhbmQgdGhlDQogICBhbW91bnQgb2YgYmFuZHdpZHRoIHVzZWQgdG8g b2J0YWluIHRob3NlIGJlbmVmaXRzLCBlc3BlY2lhbGx5IGlmIHRoZQ0KDQoNCg0KRmFyaW5hY2Np LCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1Bh Z2UgNDRdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9j b2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTANCg0KDQogICByZXF1aXJlbWVudCBmb3IgZmFpbHVy ZSBkZXRlY3Rpb24gdGltZXMgYXJlIHZlcnkgc21hbGwuDQoNCiAgIENvbnRpbnVlZCByZXNlYXJj aCBhbmQgdGVzdGluZyB3aWxsIGF0dGVtcHQgdG8gY2hhcmFjdGVyaXplIHRoZQ0KICAgdHJhZGVv ZmZzIG9mIGZhaWx1cmUgZGV0ZWN0aW9uIHRpbWVzIHZlcnN1cyBtZXNzYWdlIG92ZXJoZWFkLg0K DQo2LjQuICBSb3V0aW5nIExvY2F0b3IgSGFzaGluZw0KDQogICBXaGVuIGFuIEVUUiBwcm92aWRl cyBhbiBFSUQtdG8tUkxPQyBtYXBwaW5nIGluIGEgTWFwLVJlcGx5IG1lc3NhZ2UgdG8NCiAgIGEg cmVxdWVzdGluZyBJVFIsIHRoZSBsb2NhdG9yLXNldCBmb3IgdGhlIEVJRC1wcmVmaXggbWF5IGNv bnRhaW4NCiAgIGRpZmZlcmVudCBwcmlvcml0eSB2YWx1ZXMgZm9yIGVhY2ggbG9jYXRvciBhZGRy ZXNzLiAgV2hlbiBtb3JlIHRoYW4NCiAgIG9uZSBiZXN0IHByaW9yaXR5IGxvY2F0b3IgZXhpc3Rz LCB0aGUgSVRSIGNhbiBkZWNpZGUgaG93IHRvIGxvYWQNCiAgIHNoYXJlIHRyYWZmaWMgYWdhaW5z dCB0aGUgY29ycmVzcG9uZGluZyBsb2NhdG9ycy4NCg0KICAgVGhlIGZvbGxvd2luZyBoYXNoIGFs Z29yaXRobSBtYXkgYmUgdXNlZCBieSBhbiBJVFIgdG8gc2VsZWN0IGENCiAgIGxvY2F0b3IgZm9y IGEgcGFja2V0IGRlc3RpbmVkIHRvIGFuIEVJRCBmb3IgdGhlIEVJRC10by1STE9DIG1hcHBpbmc6 DQoNCiAgIDEuICBFaXRoZXIgYSBzb3VyY2UgYW5kIGRlc3RpbmF0aW9uIGFkZHJlc3MgaGFzaCBj YW4gYmUgdXNlZCBvciB0aGUNCiAgICAgICB0cmFkaXRpb25hbCA1LXR1cGxlIGhhc2ggd2hpY2gg aW5jbHVkZXMgdGhlIHNvdXJjZSBhbmQNCiAgICAgICBkZXN0aW5hdGlvbiBhZGRyZXNzZXMsIHNv dXJjZSBhbmQgZGVzdGluYXRpb24gVENQLCBVRFAsIG9yIFNDVFANCiAgICAgICBwb3J0IG51bWJl cnMgYW5kIHRoZSBJUCBwcm90b2NvbCBudW1iZXIgZmllbGQgb3IgSVB2NiBuZXh0LQ0KICAgICAg IHByb3RvY29sIGZpZWxkcyBvZiBhIHBhY2tldCBhIGhvc3Qgb3JpZ2luYXRlcyBmcm9tIHdpdGhp biBhIExJU1ANCiAgICAgICBzaXRlLiAgV2hlbiBhIHBhY2tldCBpcyBub3QgYSBUQ1AsIFVEUCwg b3IgU0NUUCBwYWNrZXQsIHRoZQ0KICAgICAgIHNvdXJjZSBhbmQgZGVzdGluYXRpb24gYWRkcmVz c2VzIG9ubHkgZnJvbSB0aGUgaGVhZGVyIGFyZSB1c2VkIHRvDQogICAgICAgY29tcHV0ZSB0aGUg aGFzaC4NCg0KICAgMi4gIFRha2UgdGhlIGhhc2ggdmFsdWUgYW5kIGRpdmlkZSBpdCBieSB0aGUg bnVtYmVyIG9mIGxvY2F0b3JzDQogICAgICAgc3RvcmVkIGluIHRoZSBsb2NhdG9yLXNldCBmb3Ig dGhlIEVJRC10by1STE9DIG1hcHBpbmcuDQoNCiAgIDMuICBUaGUgcmVtYWluZGVyIHdpbGwgYmUg eWllbGQgYSB2YWx1ZSBvZiAwIHRvICJudW1iZXIgb2YgbG9jYXRvcnMNCiAgICAgICBtaW51cyAx Ii4gIFVzZSB0aGUgcmVtYWluZGVyIHRvIHNlbGVjdCB0aGUgbG9jYXRvciBpbiB0aGUNCiAgICAg ICBsb2NhdG9yLXNldC4NCg0KICAgTm90ZSB0aGF0IHdoZW4gYSBwYWNrZXQgaXMgTElTUCBlbmNh cHN1bGF0ZWQsIHRoZSBzb3VyY2UgcG9ydCBudW1iZXINCiAgIGluIHRoZSBvdXRlciBVRFAgaGVh ZGVyIG5lZWRzIHRvIGJlIHNldC4gIFNlbGVjdGluZyBhIHJhbmRvbSB2YWx1ZQ0KICAgYWxsb3dz IGNvcmUgcm91dGVycyB3aGljaCBhcmUgYXR0YWNoZWQgdG8gTGluayBBZ2dyZWdhdGlvbiBHcm91 cHMNCiAgIChMQUdzKSB0byBsb2FkLXNwbGl0IHRoZSBlbmNhcHN1bGF0ZWQgcGFja2V0cyBhY3Jv c3MgbWVtYmVyIGxpbmtzIG9mDQogICBzdWNoIExBR3MuICBPdGhlcndpc2UsIGNvcmUgcm91dGVy cyB3b3VsZCBzZWUgYSBzaW5nbGUgZmxvdywgc2luY2UNCiAgIHBhY2tldHMgaGF2ZSBhIHNvdXJj ZSBhZGRyZXNzIG9mIHRoZSBJVFIsIGZvciBwYWNrZXRzIHdoaWNoIGFyZQ0KICAgb3JpZ2luYXRl ZCBieSBkaWZmZXJlbnQgRUlEcyBhdCB0aGUgc291cmNlIHNpdGUuICBBIHN1Z2dlc3RlZCBzZXR0 aW5nDQogICBmb3IgdGhlIHNvdXJjZSBwb3J0IG51bWJlciBjb21wdXRlZCBieSBhbiBJVFIgaXMg YSA1LXR1cGxlIGhhc2gNCiAgIGZ1bmN0aW9uIG9uIHRoZSBpbm5lciBoZWFkZXIsIGFzIGRlc2Ny aWJlZCBhYm92ZS4NCg0KICAgTWFueSBjb3JlIHJvdXRlciBpbXBsZW1lbnRhdGlvbnMgdXNlIGEg NS10dXBsZSBoYXNoIHRvIGRlY2lkZSBob3cgdG8NCiAgIGJhbGFuY2UgcGFja2V0IGxvYWQgYWNy b3NzIG1lbWJlcnMgb2YgYSBMQUcuICBUaGUgNS10dXBsZSBoYXNoDQogICBpbmNsdWRlcyB0aGUg c291cmNlIGFuZCBkZXN0aW5hdGlvbiBhZGRyZXNzZXMgb2YgdGhlIHBhY2tldCBhbmQgdGhlDQog ICBzb3VyY2UgYW5kIGRlc3RpbmF0aW9uIHBvcnRzIHdoZW4gdGhlIHByb3RvY29sIG51bWJlciBp biB0aGUgcGFja2V0DQogICBpcyBUQ1Agb3IgVURQLiAgRm9yIHRoaXMgcmVhc29uLCBVRFAgZW5j b2RpbmcgaXMgdXNlZCBmb3IgTElTUA0KICAgZW5jYXBzdWxhdGlvbi4NCg0KDQoNCkZhcmluYWNj aSwgZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQ YWdlIDQ1XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3Rv Y29sIChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoNCg0KNi41LiAgQ2hhbmdpbmcgdGhlIENvbnRl bnRzIG9mIEVJRC10by1STE9DIE1hcHBpbmdzDQoNCiAgIFNpbmNlIHRoZSBMSVNQIGFyY2hpdGVj dHVyZSB1c2VzIGEgY2FjaGluZyBzY2hlbWUgdG8gcmV0cmlldmUgYW5kDQogICBzdG9yZSBFSUQt dG8tUkxPQyBtYXBwaW5ncywgdGhlIG9ubHkgd2F5IGFuIElUUiBjYW4gZ2V0IGEgbW9yZSB1cC10 by0NCiAgIGRhdGUgbWFwcGluZyBpcyB0byByZS1yZXF1ZXN0IHRoZSBtYXBwaW5nLiAgSG93ZXZl ciwgdGhlIElUUnMgZG8gbm90DQogICBrbm93IHdoZW4gdGhlIG1hcHBpbmdzIGNoYW5nZSBhbmQg dGhlIEVUUnMgZG8gbm90IGtlZXAgdHJhY2sgb2Ygd2hvDQogICByZXF1ZXN0ZWQgaXRzIG1hcHBp bmdzLiAgRm9yIHNjYWxhYmlsaXR5IHJlYXNvbnMsIHdlIHdhbnQgdG8gbWFpbnRhaW4NCiAgIHRo aXMgYXBwcm9hY2ggYnV0IG5lZWQgdG8gcHJvdmlkZSBhIHdheSBmb3IgRVRScyBjaGFuZ2UgdGhl aXINCiAgIG1hcHBpbmdzIGFuZCBpbmZvcm0gdGhlIHNpdGVzIHRoYXQgYXJlIGN1cnJlbnRseSBj b21tdW5pY2F0aW5nIHdpdGgNCiAgIHRoZSBFVFIgc2l0ZSB1c2luZyBzdWNoIG1hcHBpbmdzLg0K DQogICBXaGVuIGEgbG9jYXRvciByZWNvcmQgaXMgYWRkZWQgdG8gdGhlIGVuZCBvZiBhIGxvY2F0 b3Itc2V0LCBpdCBpcw0KICAgZWFzeSB0byB1cGRhdGUgbWFwcGluZ3MuICBXZSBhc3N1bWUgbmV3 IG1hcHBpbmdzIHdpbGwgbWFpbnRhaW4gdGhlDQogICBzYW1lIGxvY2F0b3Igb3JkZXJpbmcgYXMg dGhlIG9sZCBtYXBwaW5nIGJ1dCBqdXN0IGhhdmUgbmV3IGxvY2F0b3JzDQogICBhcHBlbmRlZCB0 byB0aGUgZW5kIG9mIHRoZSBsaXN0LiAgU28gc29tZSBJVFJzIGNhbiBoYXZlIGEgbmV3IG1hcHBp bmcNCiAgIHdoaWxlIG90aGVyIElUUnMgaGF2ZSBvbmx5IGFuIG9sZCBtYXBwaW5nIHRoYXQgaXMg dXNlZCB1bnRpbCB0aGV5DQogICB0aW1lIG91dC4gIFdoZW4gYW4gSVRSIGhhcyBvbmx5IGFuIG9s ZCBtYXBwaW5nIGJ1dCBkZXRlY3RzIGJpdHMgc2V0DQogICBpbiB0aGUgbG9jLXN0YXR1cy1iaXRz IHRoYXQgY29ycmVzcG9uZCB0byBsb2NhdG9ycyBiZXlvbmQgdGhlIGxpc3QgaXQNCiAgIGhhcyBj YWNoZWQsIGl0IHNpbXBseSBpZ25vcmVzIHRoZW0uICBIb3dldmVyLCB0aGlzIGNhbiBvbmx5IGhh cHBlbg0KICAgZm9yIGxvY2F0b3IgYWRkcmVzc2VzIHRoYXQgYXJlIGxleGljb2dyYXBoaWNhbGx5 IGdyZWF0ZXIgdGhhbiB0aGUNCiAgIGxvY2F0b3IgYWRkcmVzc2VzIGluIHRoZSBleGlzdGluZyBs b2NhdG9yLXNldC4NCg0KICAgV2hlbiBhIGxvY2F0b3IgcmVjb3JkIGlzIHJlbW92ZWQgZnJvbSBh IGxvY2F0b3Itc2V0LCBJVFJzIHRoYXQgaGF2ZQ0KICAgdGhlIG1hcHBpbmcgY2FjaGVkIHdpbGwg bm90IHVzZSB0aGUgcmVtb3ZlZCBsb2NhdG9yIGJlY2F1c2UgdGhlIHhUUnMNCiAgIHdpbGwgc2V0 IHRoZSBsb2Mtc3RhdHVzLWJpdCB0byAwLiAgU28gZXZlbiBpZiB0aGUgbG9jYXRvciBpcyBpbiB0 aGUNCiAgIGxpc3QsIGl0IHdpbGwgbm90IGJlIHVzZWQuICBGb3IgbmV3IG1hcHBpbmcgcmVxdWVz dHMsIHRoZSB4VFJzIGNhbg0KICAgc2V0IHRoZSBsb2NhdG9yIEFGSSB0byAwIChpbmRpY2F0aW5n IGFuIHVuc3BlY2lmaWVkIGFkZHJlc3MpLCBhcyB3ZWxsDQogICBhcyBzZXR0aW5nIHRoZSBjb3Jy ZXNwb25kaW5nIGxvYy1zdGF0dXMtYml0IHRvIDAuICBUaGlzIGZvcmNlcyBJVFJzDQogICB3aXRo IG9sZCBvciBuZXcgbWFwcGluZ3MgdG8gYXZvaWQgdXNpbmcgdGhlIHJlbW92ZWQgbG9jYXRvci4N Cg0KICAgSWYgbWFueSBjaGFuZ2VzIG9jY3VyIHRvIGEgbWFwcGluZyBvdmVyIGEgbG9uZyBwZXJp b2Qgb2YgdGltZSwgb25lDQogICB3aWxsIGZpbmQgZW1wdHkgcmVjb3JkIHNsb3RzIGluIHRoZSBt aWRkbGUgb2YgdGhlIGxvY2F0b3Itc2V0IGFuZCBuZXcNCiAgIHJlY29yZHMgYXBwZW5kZWQgdG8g dGhlIGxvY2F0b3Itc2V0LiAgQXQgc29tZSBwb2ludCwgaXQgd291bGQgYmUNCiAgIHVzZWZ1bCB0 byBjb21wYWN0IHRoZSBsb2NhdG9yLXNldCBzbyB0aGUgbG9jLXN0YXR1cy1iaXQgc2V0dGluZ3Mg Y2FuDQogICBiZSBlZmZpY2llbnRseSBwYWNrZWQuDQoNCiAgIFdlIHByb3Bvc2UgaGVyZSB0d28g YXBwcm9hY2hlcyBmb3IgbG9jYXRvci1zZXQgY29tcGFjdGlvbiwgb25lDQogICBvcGVyYXRpb25h bCBhbmQgdGhlIG90aGVyIGEgcHJvdG9jb2wgbWVjaGFuaXNtLiAgVGhlIG9wZXJhdGlvbmFsDQog ICBhcHByb2FjaCB1c2VzIGEgY2xvY2sgc3dlZXAgbWV0aG9kLiAgVGhlIHByb3RvY29sIGFwcHJv YWNoIHVzZXMgdGhlDQogICBjb25jZXB0IG9mIFNvbGljaXQtTWFwLVJlcXVlc3RzLg0KDQo2LjUu MS4gIENsb2NrIFN3ZWVwDQoNCiAgIFRoZSBjbG9jayBzd2VlcCBhcHByb2FjaCB1c2VzIHBsYW5u aW5nIGluIGFkdmFuY2UgYW5kIHRoZSB1c2Ugb2YNCiAgIGNvdW50LWRvd24gVFRMcyB0byB0aW1l IG91dCBtYXBwaW5ncyB0aGF0IGhhdmUgYWxyZWFkeSBiZWVuIGNhY2hlZC4NCiAgIFRoZSBkZWZh dWx0IHNldHRpbmcgZm9yIGFuIEVJRC10by1STE9DIG1hcHBpbmcgVFRMIGlzIDI0IGhvdXJzLiAg U28NCiAgIHRoZXJlIGlzIGEgMjQgaG91ciB3aW5kb3cgdG8gdGltZSBvdXQgb2xkIG1hcHBpbmdz LiAgVGhlIGZvbGxvd2luZw0KICAgY2xvY2sgc3dlZXAgcHJvY2VkdXJlIGlzIHVzZWQ6DQoNCg0K DQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMgSnVseSAxNiwgMjAxMCAgICAgICAg ICAgICAgICBbUGFnZSA0Nl0NCgwNCkludGVybmV0LURyYWZ0ICAgIExvY2F0b3IvSUQgU2VwYXJh dGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAxMA0KDQoNCiAgIDEuICAyNCBob3Vy cyBiZWZvcmUgYSBtYXBwaW5nIGNoYW5nZSBpcyB0byB0YWtlIGVmZmVjdCwgYSBuZXR3b3JrDQog ICAgICAgYWRtaW5pc3RyYXRvciBjb25maWd1cmVzIHRoZSBFVFJzIGF0IGEgc2l0ZSB0byBzdGFy dCB0aGUgY2xvY2sNCiAgICAgICBzd2VlcCB3aW5kb3cuDQoNCiAgIDIuICBEdXJpbmcgdGhlIGNs b2NrIHN3ZWVwIHdpbmRvdywgRVRScyBjb250aW51ZSB0byBzZW5kIE1hcC1SZXBseQ0KICAgICAg IG1lc3NhZ2VzIHdpdGggdGhlIGN1cnJlbnQgKHVuY2hhbmdlZCkgbWFwcGluZyByZWNvcmRzLiAg VGhlIFRUTA0KICAgICAgIGZvciB0aGVzZSBtYXBwaW5ncyBpcyBzZXQgdG8gMSBob3VyLg0KDQog ICAzLiAgMjQgaG91cnMgbGF0ZXIsIGFsbCBwcmV2aW91cyBjYWNoZSBlbnRyaWVzIHdpbGwgaGF2 ZSB0aW1lZCBvdXQsDQogICAgICAgYW5kIGFueSBhY3RpdmUgY2FjaGUgZW50cmllcyB3aWxsIHRp bWUgb3V0IHdpdGhpbiAxIGhvdXIuICBEdXJpbmcNCiAgICAgICB0aGlzIDEgaG91ciB3aW5kb3cg dGhlIEVUUnMgY29udGludWUgdG8gc2VuZCBNYXAtUmVwbHkgbWVzc2FnZXMNCiAgICAgICB3aXRo IHRoZSBjdXJyZW50ICh1bmNoYW5nZWQpIG1hcHBpbmcgcmVjb3JkcyB3aXRoIHRoZSBUVEwgc2V0 IHRvDQogICAgICAgMSBtaW51dGUuDQoNCiAgIDQuICBBdCB0aGUgZW5kIG9mIHRoZSAxIGhvdXIg d2luZG93LCB0aGUgRVRScyB3aWxsIHNlbmQgTWFwLVJlcGx5DQogICAgICAgbWVzc2FnZXMgd2l0 aCB0aGUgbmV3IChjaGFuZ2VkKSBtYXBwaW5nIHJlY29yZHMuICBTbyBhbnkgYWN0aXZlDQogICAg ICAgY2FjaGVzIGNhbiBnZXQgdGhlIG5ldyBtYXBwaW5nIGNvbnRlbnRzIHJpZ2h0IGF3YXkgaWYg bm90IGNhY2hlZCwNCiAgICAgICBvciBpbiAxIG1pbnV0ZSBpZiB0aGV5IGhhZCB0aGUgbWFwcGlu ZyBjYWNoZWQuDQoNCjYuNS4yLiAgU29saWNpdC1NYXAtUmVxdWVzdCAoU01SKQ0KDQogICBTb2xp Y2l0aW5nIGEgTWFwLVJlcXVlc3QgaXMgYSBzZWxlY3RpdmUgd2F5IGZvciB4VFJzLCBhdCB0aGUg c2l0ZQ0KICAgd2hlcmUgbWFwcGluZ3MgY2hhbmdlLCB0byBjb250cm9sIHRoZSByYXRlIHRoZXkg cmVjZWl2ZSByZXF1ZXN0cyBmb3INCiAgIE1hcC1SZXBseSBtZXNzYWdlcy4gIFNNUnMgYXJlIGFs c28gdXNlZCB0byB0ZWxsIHJlbW90ZSBJVFJzIHRvIHVwZGF0ZQ0KICAgdGhlIG1hcHBpbmdzIHRo ZXkgaGF2ZSBjYWNoZWQuDQoNCiAgIFNpbmNlIHRoZSB4VFJzIGRvbid0IGtlZXAgdHJhY2sgb2Yg cmVtb3RlIElUUnMgdGhhdCBoYXZlIGNhY2hlZCB0aGVpcg0KICAgbWFwcGluZ3MsIHRoZXkgY2Fu IG5vdCB0ZWxsIGV4YWN0bHkgd2hvIG5lZWRzIHRoZSBuZXcgbWFwcGluZw0KICAgZW50cmllcy4g IFNvIGFuIHhUUiB3aWxsIHNvbGljaXQgTWFwLVJlcXVlc3RzIGZyb20gc2l0ZXMgaXQgaXMNCiAg IGN1cnJlbnRseSBzZW5kaW5nIGVuY2Fwc3VsYXRlZCBkYXRhIHRvLCBhbmQgb25seSBmcm9tIHRo b3NlIHNpdGVzLg0KICAgVGhlIHhUUnMgY2FuIGxvY2FsbHkgZGVjaWRlIHRoZSBhbGdvcml0aG0g Zm9yIGhvdyBvZnRlbiBhbmQgdG8gaG93DQogICBtYW55IHNpdGVzIGl0IHNlbmRzIFNNUiBtZXNz YWdlcy4NCg0KICAgQW4gU01SIG1lc3NhZ2UgaXMgc2ltcGx5IGEgYml0IHNldCBpbiBhIE1hcC1S ZXF1ZXN0IG1lc3NhZ2UuICBBbiBJVFINCiAgIG9yIFBUUiB3aWxsIHNlbmQgYSBNYXAtUmVxdWVz dCB3aGVuIHRoZXkgcmVjZWl2ZSBhbiBTTVIgbWVzc2FnZS4NCiAgIEJvdGggdGhlIFNNUiBzZW5k ZXIgYW5kIHRoZSBNYXAtUmVxdWVzdCByZXNwb25kZXIgbXVzdCByYXRlLWxpbWl0ZWQNCiAgIHRo ZXNlIG1lc3NhZ2VzLg0KDQogICBUaGUgZm9sbG93aW5nIHByb2NlZHVyZSBzaG93cyBob3cgYSBT TVIgZXhjaGFuZ2Ugb2NjdXJzIHdoZW4gYSBzaXRlDQogICBpcyBkb2luZyBsb2NhdG9yLXNldCBj b21wYWN0aW9uIGZvciBhbiBFSUQtdG8tUkxPQyBtYXBwaW5nOg0KDQogICAxLiAgV2hlbiB0aGUg ZGF0YWJhc2UgbWFwcGluZ3MgaW4gYW4gRVRSIGNoYW5nZSwgdGhlIEVUUnMgYXQgdGhlIHNpdGUN CiAgICAgICBiZWdpbiB0byBzZW5kIE1hcC1SZXF1ZXN0cyB3aXRoIHRoZSBTTVIgYml0IHNldCBm b3IgZWFjaCBsb2NhdG9yDQogICAgICAgaW4gZWFjaCBtYXAtY2FjaGUgZW50cnkgdGhlIEVUUiBj YWNoZXMuDQoNCiAgIDIuICBBIHJlbW90ZSB4VFIgd2hpY2ggcmVjZWl2ZXMgdGhlIFNNUiBtZXNz YWdlIHdpbGwgc2NoZWR1bGUgc2VuZGluZw0KICAgICAgIGEgTWFwLVJlcXVlc3QgbWVzc2FnZSB0 byB0aGUgc291cmNlIGxvY2F0b3IgYWRkcmVzcyBvZiB0aGUgU01SDQogICAgICAgbWVzc2FnZS4g IEEgbmV3bHkgYWxsb2NhdGVkIHJhbmRvbSBub25jZSBpcyBzZWxlY3RlZCBhbmQgdGhlIEVJRC0N Cg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAg ICAgICAgICAgICAgIFtQYWdlIDQ3XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBT ZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoNCg0KICAgICAgIHBy ZWZpeCB1c2VzIGlzIHRoZSBvbmUgY29waWVkIGZyb20gdGhlIFNNUiBtZXNzYWdlLg0KDQogICAz LiAgVGhlIHJlbW90ZSB4VFIgcmV0cmFuc21pdHMgdGhlIE1hcC1SZXF1ZXN0IHNsb3dseSB1bnRp bCBpdCBnZXRzIGENCiAgICAgICBNYXAtUmVwbHkgd2hpbGUgY29udGludWluZyB0byB1c2UgdGhl IGNhY2hlZCBtYXBwaW5nLg0KDQogICA0LiAgVGhlIEVUUnMgYXQgdGhlIHNpdGUgd2l0aCB0aGUg Y2hhbmdlZCBtYXBwaW5nIHdpbGwgcmVwbHkgdG8gdGhlDQogICAgICAgTWFwLVJlcXVlc3Qgd2l0 aCBhIE1hcC1SZXBseSBtZXNzYWdlIHByb3ZpZGVkIHRoZSBNYXAtUmVxdWVzdA0KICAgICAgIG5v bmNlIG1hdGNoZXMgdGhlIG5vbmNlIGZyb20gdGhlIFNNUi4gIFRoZSBNYXAtUmVwbHkgbWVzc2Fn ZXMNCiAgICAgICBTSE9VTEQgYmUgcmF0ZSBsaW1pdGVkLiAgVGhpcyBpcyBpbXBvcnRhbnQgdG8g YXZvaWQgTWFwLVJlcGx5DQogICAgICAgaW1wbG9zaW9uLg0KDQogICA1LiAgVGhlIEVUUnMsIGF0 IHRoZSBzaXRlIHdpdGggdGhlIGNoYW5nZWQgbWFwcGluZywgcmVjb3JkcyB0aGUgZmFjdA0KICAg ICAgIHRoYXQgdGhlIHNpdGUgdGhhdCBzZW50IHRoZSBNYXAtUmVxdWVzdCBoYXMgcmVjZWl2ZWQg dGhlIG5ldw0KICAgICAgIG1hcHBpbmcgZGF0YSBpbiB0aGUgbWFwcGluZyBjYWNoZSBlbnRyeSBm b3IgdGhlIHJlbW90ZSBzaXRlIHNvDQogICAgICAgdGhlIGxvYy1zdGF0dXMtYml0cyBhcmUgcmVm bGVjdGl2ZSBvZiB0aGUgbmV3IG1hcHBpbmcgZm9yIHBhY2tldHMNCiAgICAgICBnb2luZyB0byB0 aGUgcmVtb3RlIHNpdGUuICBUaGUgRVRSIHRoZW4gc3RvcHMgc2VuZGluZyBTTVINCiAgICAgICBt ZXNzYWdlcy4NCg0KICAgRm9yIHNlY3VyaXR5IHJlYXNvbnMgYW4gSVRSIE1VU1QgTk9UIHByb2Nl c3MgdW5zb2xpY2l0ZWQgTWFwLVJlcGxpZXMuDQogICBUaGUgbm9uY2UgTVVTVCBiZSBjYXJyaWVk IGZyb20gU01SIHBhY2tldCwgaW50byB0aGUgcmVzdWx0YW50IE1hcC0NCiAgIFJlcXVlc3QsIGFu ZCB0aGVuIGludG8gTWFwLVJlcGx5IHRvIHJlZHVjZSBzcG9vZmluZyBhdHRhY2tzLg0KDQogICBU byBhdm9pZCBtYXAtY2FjaGUgZW50cnkgY29ycnVwdGlvbiBieSBhIHRoaXJkLXBhcnR5LCBhIHNl bmRlciBvZiBhbg0KICAgU01SLWJhc2VkIE1hcC1SZXF1ZXN0IG11c3QgYmUgdmVyaWZpZWQuICBJ ZiBhbiBJVFIgcmVjZWl2ZXMgYW4gU01SLQ0KICAgYmFzZWQgTWFwLVJlcXVlc3QgYW5kIHRoZSBz b3VyY2UgaXMgbm90IGluIHRoZSBsb2NhdG9yLXNldCBmb3IgdGhlDQogICBzdG9yZWQgbWFwLWNh Y2hlIGVudHJ5LCB0aGVuIHRoZSByZXNwb25kaW5nIE1hcC1SZXF1ZXN0IE1VU1QgYmUgc2VudA0K ICAgd2l0aCBhbiBFSUQgZGVzdGluYXRpb24gdG8gdGhlIG1hcHBpbmcgZGF0YWJhc2Ugc3lzdGVt LiAgU2luY2UgdGhlDQogICBtYXBwaW5nIGRhdGFiYXNlIHN5c3RlbSBpcyBtb3JlIHNlY3VyZSB0 byByZWFjaCBhbiBhdXRob3JpdGF0aXZlIEVUUiwNCiAgIGl0IHdpbGwgZGVsaXZlciB0aGUgTWFw LVJlcXVlc3QgdG8gdGhlIGF1dGhvcml0YXRpdmUgc291cmNlIG9mIHRoZQ0KICAgbWFwcGluZyBk YXRhLg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KRmFyaW5hY2Np LCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1Bh Z2UgNDhdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9j b2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTANCg0KDQo3LiAgUm91dGVyIFBlcmZvcm1hbmNlIENv bnNpZGVyYXRpb25zDQoNCiAgIExJU1AgaXMgZGVzaWduZWQgdG8gYmUgdmVyeSBoYXJkd2FyZS1i YXNlZCBmb3J3YXJkaW5nIGZyaWVuZGx5LiAgQnkNCiAgIGRvaW5nIHR1bm5lbCBoZWFkZXIgcHJl cGVuZGluZyBbUkZDMTk1NV0gYW5kIHN0cmlwcGluZyBpbnN0ZWFkIG9mIHJlLQ0KICAgd3JpdGlu ZyBhZGRyZXNzZXMsIGV4aXN0aW5nIGhhcmR3YXJlIGNhbiBzdXBwb3J0IHRoZSBmb3J3YXJkaW5n IG1vZGVsDQogICB3aXRoIGxpdHRsZSBvciBubyBtb2RpZmljYXRpb24uICBXaGVyZSBtb2RpZmlj YXRpb25zIGFyZSByZXF1aXJlZCwNCiAgIHRoZXkgc2hvdWxkIGJlIGxpbWl0ZWQgdG8gcmUtcHJv Z3JhbW1pbmcgZXhpc3RpbmcgaGFyZHdhcmUgcmF0aGVyDQogICB0aGFuIHJlcXVpcmluZyBleHBl bnNpdmUgZGVzaWduIGNoYW5nZXMgdG8gaGFyZC1jb2RlZCBhbGdvcml0aG1zIGluDQogICBzaWxp Y29uLg0KDQogICBBIGZldyBpbXBsZW1lbnRhdGlvbiB0ZWNobmlxdWVzIGNhbiBiZSB1c2VkIHRv IGluY3JlbWVudGFsbHkNCiAgIGltcGxlbWVudCBMSVNQOg0KDQogICBvICBXaGVuIGEgdHVubmVs IGVuY2Fwc3VsYXRlZCBwYWNrZXQgaXMgcmVjZWl2ZWQgYnkgYW4gRVRSLCB0aGUgb3V0ZXINCiAg ICAgIGRlc3RpbmF0aW9uIGFkZHJlc3MgbWF5IG5vdCBiZSB0aGUgYWRkcmVzcyBvZiB0aGUgcm91 dGVyLiAgVGhpcw0KICAgICAgbWFrZXMgaXQgY2hhbGxlbmdpbmcgZm9yIHRoZSBjb250cm9sIHBs YW5lIHRvIGdldCBwYWNrZXRzIGZyb20gdGhlDQogICAgICBoYXJkd2FyZS4gIFRoaXMgbWF5IGJl IG1pdGlnYXRlZCBieSBjcmVhdGluZyBzcGVjaWFsIEZJQiBlbnRyaWVzDQogICAgICBmb3IgdGhl IEVJRC1wcmVmaXhlcyBvZiBFSURzIHNlcnZlZCBieSB0aGUgRVRSICh0aG9zZSBmb3Igd2hpY2gN CiAgICAgIHRoZSByb3V0ZXIgcHJvdmlkZXMgYW4gUkxPQyB0cmFuc2xhdGlvbikuICBUaGVzZSBG SUIgZW50cmllcyBhcmUNCiAgICAgIG1hcmtlZCB3aXRoIGEgZmxhZyBpbmRpY2F0aW5nIHRoYXQg Y29udHJvbCBwbGFuZSBwcm9jZXNzaW5nIHNob3VsZA0KICAgICAgYmUgcGVyZm9ybWVkLiAgVGhl IGZvcndhcmRpbmcgbG9naWMgb2YgdGVzdGluZyBmb3IgcGFydGljdWxhciBJUA0KICAgICAgcHJv dG9jb2wgbnVtYmVyIHZhbHVlIGlzIG5vdCBuZWNlc3NhcnkuICBObyBjaGFuZ2VzIHRvIGV4aXN0 aW5nLA0KICAgICAgZGVwbG95ZWQgaGFyZHdhcmUgc2hvdWxkIGJlIG5lZWRlZCB0byBzdXBwb3J0 IHRoaXMuDQoNCiAgIG8gIE9uIGFuIElUUiwgcHJlcGVuZGluZyBhIG5ldyBJUCBoZWFkZXIgaXMg YXMgc2ltcGxlIGFzIGFkZGluZyBtb3JlDQogICAgICBieXRlcyB0byBhIE1BQyByZXdyaXRlIHN0 cmluZyBhbmQgcHJlcGVuZGluZyB0aGUgc3RyaW5nIGFzIHBhcnQgb2YNCiAgICAgIHRoZSBvdXRn b2luZyBlbmNhcHN1bGF0aW9uIHByb2NlZHVyZS4gIE1hbnkgcm91dGVycyB0aGF0IHN1cHBvcnQN CiAgICAgIEdSRSB0dW5uZWxpbmcgW1JGQzI3ODRdIG9yIDZ0bzQgdHVubmVsaW5nIFtSRkMzMDU2 XSBjYW4gYWxyZWFkeQ0KICAgICAgc3VwcG9ydCB0aGlzIGFjdGlvbi4NCg0KICAgbyAgV2hlbiBh IHJlY2VpdmVkIHBhY2tldCdzIG91dGVyIGRlc3RpbmF0aW9uIGFkZHJlc3MgY29udGFpbnMgYW4g RUlEDQogICAgICB3aGljaCBpcyBub3QgaW50ZW5kZWQgdG8gYmUgZm9yd2FyZGVkIG9uIHRoZSBy b3V0YWJsZSB0b3BvbG9neQ0KICAgICAgKGkuZS4gIExJU1AgMS41KSwgdGhlIHNvdXJjZSBhZGRy ZXNzIG9mIGEgZGF0YSBwYWNrZXQgb3IgdGhlDQogICAgICByb3V0ZXIgaW50ZXJmYWNlIHdpdGgg d2hpY2ggdGhlIHNvdXJjZSBpcyBhc3NvY2lhdGVkICh0aGUNCiAgICAgIGludGVyZmFjZSBmcm9t IHdoaWNoIGl0IHdhcyByZWNlaXZlZCkgY2FuIGJlIGFzc29jaWF0ZWQgd2l0aCBhIFZSRg0KICAg ICAgKFZpcnR1YWwgUm91dGluZy9Gb3J3YXJkaW5nKSwgaW4gd2hpY2ggYSBkaWZmZXJlbnQgKGku ZS4gbm9uLQ0KICAgICAgY29uZ3J1ZW50KSB0b3BvbG9neSBjYW4gYmUgdXNlZCB0byBmaW5kIEVJ RC10by1STE9DIG1hcHBpbmdzLg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCkZhcmluYWNj aSwgZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQ YWdlIDQ5XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3Rv Y29sIChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoNCg0KOC4gIERlcGxveW1lbnQgU2NlbmFyaW9z DQoNCiAgIFRoaXMgc2VjdGlvbiB3aWxsIGV4cGxvcmUgaG93IGFuZCB3aGVyZSBJVFJzIGFuZCBF VFJzIGNhbiBiZSBkZXBsb3llZA0KICAgYW5kIHdpbGwgZGlzY3VzcyB0aGUgcHJvcyBhbmQgY29u cyBvZiBlYWNoIGRlcGxveW1lbnQgc2NlbmFyaW8uDQogICBUaGVyZSBhcmUgdHdvIGJhc2ljIGRl cGxveW1lbnQgdHJhZGUtb2ZmcyB0byBjb25zaWRlcjogY2VudHJhbGl6ZWQNCiAgIHZlcnN1cyBk aXN0cmlidXRlZCBjYWNoZXMgYW5kIGZsYXQsIHJlY3Vyc2l2ZSwgb3IgcmUtZW5jYXBzdWxhdGlu Zw0KICAgdHVubmVsaW5nLg0KDQogICBXaGVuIGRlY2lkaW5nIG9uIGNlbnRyYWxpemVkIHZlcnN1 cyBkaXN0cmlidXRlZCBjYWNoaW5nLCB0aGUNCiAgIGZvbGxvd2luZyBpc3N1ZXMgc2hvdWxkIGJl IGNvbnNpZGVyZWQ6DQoNCiAgIG8gIEFyZSB0aGUgdHVubmVsIHJvdXRlcnMgc3ByZWFkIG91dCBz byB0aGF0IHRoZSBjYWNoZXMgYXJlIHNwcmVhZA0KICAgICAgYWNyb3NzIGFsbCB0aGUgbWVtb3Jp ZXMgb2YgZWFjaCByb3V0ZXI/DQoNCiAgIG8gIFNob3VsZCBtYW5hZ2VtZW50ICJ0b3VjaCBwb2lu dHMiIGJlIG1pbmltaXplZCBieSBjaG9vc2luZyBmZXcNCiAgICAgIHR1bm5lbCByb3V0ZXJzLCBq dXN0IGVub3VnaCBmb3IgcmVkdW5kYW5jeT8NCg0KICAgbyAgSW4gZ2VuZXJhbCwgdXNpbmcgbW9y ZSBJVFJzIGRvZXNuJ3QgaW5jcmVhc2UgbWFuYWdlbWVudCBsb2FkLA0KICAgICAgc2luY2UgY2Fj aGVzIGFyZSBidWlsdCBhbmQgc3RvcmVkIGR5bmFtaWNhbGx5LiAgT24gdGhlIG90aGVyIGhhbmQs DQogICAgICBtb3JlIEVUUnMgZG9lcyByZXF1aXJlIG1vcmUgbWFuYWdlbWVudCBzaW5jZSBFSUQt cHJlZml4LXRvLVJMT0MNCiAgICAgIG1hcHBpbmdzIG5lZWQgdG8gYmUgZXhwbGljaXRseSBjb25m aWd1cmVkLg0KDQogICBXaGVuIGRlY2lkaW5nIG9uIGZsYXQsIHJlY3Vyc2l2ZSwgb3IgcmUtZW5j YXBzdWxhdGlvbiB0dW5uZWxpbmcsIHRoZQ0KICAgZm9sbG93aW5nIGlzc3VlcyBzaG91bGQgYmUg Y29uc2lkZXJlZDoNCg0KICAgbyAgRmxhdCB0dW5uZWxpbmcgaW1wbGVtZW50cyBhIHNpbmdsZSB0 dW5uZWwgYmV0d2VlbiBzb3VyY2Ugc2l0ZSBhbmQNCiAgICAgIGRlc3RpbmF0aW9uIHNpdGUuICBU aGlzIGdlbmVyYWxseSBvZmZlcnMgYmV0dGVyIHBhdGhzIGJldHdlZW4NCiAgICAgIHNvdXJjZXMg YW5kIGRlc3RpbmF0aW9ucyB3aXRoIGEgc2luZ2xlIHR1bm5lbCBwYXRoLg0KDQogICBvICBSZWN1 cnNpdmUgdHVubmVsaW5nIGlzIHdoZW4gdHVubmVsZWQgdHJhZmZpYyBpcyBhZ2FpbiBmdXJ0aGVy DQogICAgICBlbmNhcHN1bGF0ZWQgaW4gYW5vdGhlciB0dW5uZWwsIGVpdGhlciB0byBpbXBsZW1l bnQgVlBOcyBvciB0bw0KICAgICAgcGVyZm9ybSBUcmFmZmljIEVuZ2luZWVyaW5nLiAgV2hlbiBk b2luZyBWUE4tYmFzZWQgdHVubmVsaW5nLCB0aGUNCiAgICAgIHNpdGUgaGFzIHNvbWUgY29udHJv bCBzaW5jZSB0aGUgc2l0ZSBpcyBwcmVwZW5kaW5nIGEgbmV3IHR1bm5lbA0KICAgICAgaGVhZGVy LiAgSW4gdGhlIGNhc2Ugb2YgVEUtYmFzZWQgdHVubmVsaW5nLCB0aGUgc2l0ZSBtYXkgaGF2ZQ0K ICAgICAgY29udHJvbCBpZiBpdCBpcyBwcmVwZW5kaW5nIGEgbmV3IHR1bm5lbCBoZWFkZXIsIGJ1 dCBpZiB0aGUgc2l0ZSdzDQogICAgICBJU1AgaXMgZG9pbmcgdGhlIFRFLCB0aGVuIHRoZSBzaXRl IGhhcyBubyBjb250cm9sLiAgUmVjdXJzaXZlDQogICAgICB0dW5uZWxpbmcgZ2VuZXJhbGx5IHdp bGwgcmVzdWx0IGluIHN1Ym9wdGltYWwgcGF0aHMgYnV0IGF0IHRoZQ0KICAgICAgYmVuZWZpdCBv ZiBzdGVlcmluZyB0cmFmZmljIHRvIHJlc291cmNlIGF2YWlsYWJsZSBwYXJ0cyBvZiB0aGUNCiAg ICAgIG5ldHdvcmsuDQoNCiAgIG8gIFRoZSB0ZWNobmlxdWUgb2YgcmUtZW5jYXBzdWxhdGlvbiBl bnN1cmVzIHRoYXQgcGFja2V0cyBvbmx5DQogICAgICByZXF1aXJlIG9uZSB0dW5uZWwgaGVhZGVy LiAgU28gaWYgYSBwYWNrZXQgbmVlZHMgdG8gYmUgcmVyb3V0ZWQsDQogICAgICBpdCBpcyBmaXJz dCBkZWNhcHN1bGF0ZWQgYnkgdGhlIEVUUiBhbmQgdGhlbiByZS1lbmNhcHN1bGF0ZWQgd2l0aA0K ICAgICAgYSBuZXcgdHVubmVsIGhlYWRlciB1c2luZyBhIG5ldyBSTE9DLg0KDQogICBUaGUgbmV4 dCBzdWItc2VjdGlvbnMgd2lsbCBkZXNjcmliZSB3aGVyZSB0dW5uZWwgcm91dGVycyBjYW4gcmVz aWRlDQogICBpbiB0aGUgbmV0d29yay4NCg0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAg ICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1BhZ2UgNTBdDQoMDQpJbnRl cm5ldC1EcmFmdCAgICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBK YW51YXJ5IDIwMTANCg0KDQo4LjEuICBGaXJzdC1ob3AvTGFzdC1ob3AgVHVubmVsIFJvdXRlcnMN Cg0KICAgQnkgbG9jYXRpbmcgdHVubmVsIHJvdXRlcnMgY2xvc2UgdG8gaG9zdHMsIHRoZSBFSUQt cHJlZml4IHNldCBpcyBhdA0KICAgdGhlIGdyYW51bGFyaXR5IG9mIGFuIElQIHN1Ym5ldC4gIFNv IGF0IHRoZSBleHBlbnNlIG9mIG1vcmUgRUlELQ0KICAgcHJlZml4LXRvLVJMT0Mgc2V0cyBmb3Ig dGhlIHNpdGUsIHRoZSBjYWNoZXMgaW4gZWFjaCB0dW5uZWwgcm91dGVyDQogICBjYW4gcmVtYWlu IHJlbGF0aXZlbHkgc21hbGwuICBCdXQgY2FjaGVzIGFsd2F5cyBkZXBlbmQgb24gdGhlIG51bWJl cg0KICAgb2Ygbm9uLWFnZ3JlZ2F0ZWQgRUlEIGRlc3RpbmF0aW9uIGZsb3dzIGFjdGl2ZSB0aHJv dWdoIHRoZXNlIHR1bm5lbA0KICAgcm91dGVycy4NCg0KICAgV2l0aCBtb3JlIHR1bm5lbCByb3V0 ZXJzIGRvaW5nIGVuY2Fwc3VsYXRpb24sIHRoZSBpbmNyZWFzZSBpbiBjb250cm9sDQogICB0cmFm ZmljIGdyb3dzIGFzIHdlbGw6IHNpbmNlIHRoZSBFSUQtZ3JhbnVsYXJpdHkgaXMgZ3JlYXRlciwg bW9yZQ0KICAgTWFwLVJlcXVlc3RzIGFuZCBNYXAtUmVwbGllcyBhcmUgdHJhdmVsaW5nIGJldHdl ZW4gbW9yZSByb3V0ZXJzLg0KDQogICBUaGUgYWR2YW50YWdlIG9mIHBsYWNpbmcgdGhlIGNhY2hl cyBhbmQgZGF0YWJhc2VzIGF0IHRoZXNlIHN0dWINCiAgIHJvdXRlcnMgaXMgdGhhdCB0aGUgcHJv ZHVjdHMgZGVwbG95ZWQgaW4gdGhpcyBwYXJ0IG9mIHRoZSBuZXR3b3JrDQogICBoYXZlIGJldHRl ciBwcmljZS1tZW1vcnkgcmF0aW9zIHRoZW4gdGhlaXIgY29yZSByb3V0ZXIgY291bnRlcnBhcnRz Lg0KICAgTWVtb3J5IGlzIHR5cGljYWxseSBsZXNzIGV4cGVuc2l2ZSBpbiB0aGVzZSBkZXZpY2Vz IGFuZCBmZXdlciByb3V0ZXMNCiAgIGFyZSBzdG9yZWQgKG9ubHkgSUdQIHJvdXRlcykuICBUaGVz ZSBkZXZpY2VzIHRlbmQgdG8gaGF2ZSBleGNlc3MNCiAgIGNhcGFjaXR5LCBib3RoIGZvciBmb3J3 YXJkaW5nIGFuZCByb3V0aW5nIHN0YXRlLg0KDQogICBMSVNQIGZ1bmN0aW9uYWxpdHkgY2FuIGFs c28gYmUgZGVwbG95ZWQgaW4gZWRnZSBzd2l0Y2hlcy4gIFRoZXNlDQogICBkZXZpY2VzIGdlbmVy YWxseSBoYXZlIGxheWVyLTIgcG9ydHMgZmFjaW5nIGhvc3RzIGFuZCBsYXllci0zIHBvcnRzDQog ICBmYWNpbmcgdGhlIEludGVybmV0LiAgU3BhcmUgY2FwYWNpdHkgaXMgYWxzbyBvZnRlbiBhdmFp bGFibGUgaW4gdGhlc2UNCiAgIGRldmljZXMgYXMgd2VsbC4NCg0KOC4yLiAgQm9yZGVyL0VkZ2Ug VHVubmVsIFJvdXRlcnMNCg0KICAgVXNpbmcgY3VzdG9tZXItZWRnZSAoQ0UpIHJvdXRlcnMgZm9y IHR1bm5lbCBlbmRwb2ludHMgYWxsb3dzIHRoZSBFSUQNCiAgIHNwYWNlIGFzc29jaWF0ZWQgd2l0 aCBhIHNpdGUgdG8gYmUgcmVhY2hhYmxlIHZpYSBhIHNtYWxsIHNldCBvZiBSTE9Dcw0KICAgYXNz aWduZWQgdG8gdGhlIENFIHJvdXRlcnMgZm9yIHRoYXQgc2l0ZS4NCg0KICAgVGhpcyBvZmZlcnMg dGhlIG9wcG9zaXRlIGJlbmVmaXQgb2YgdGhlIGZpcnN0LWhvcC9sYXN0LWhvcCB0dW5uZWwNCiAg IHJvdXRlciBzY2VuYXJpbzogdGhlIG51bWJlciBvZiBtYXBwaW5nIGVudHJpZXMgYW5kIG5ldHdv cmsgbWFuYWdlbWVudA0KICAgdG91Y2ggcG9pbnRzIGFyZSByZWR1Y2VkLCBhbGxvd2luZyBiZXR0 ZXIgc2NhbGluZy4NCg0KICAgT25lIGRpc2FkdmFudGFnZSBpcyB0aGF0IGxlc3Mgb2YgdGhlIG5l dHdvcmsncyByZXNvdXJjZXMgYXJlIHVzZWQgdG8NCiAgIHJlYWNoIGhvc3QgZW5kcG9pbnRzIHRo ZXJlYnkgY2VudHJhbGl6aW5nIHRoZSBwb2ludC1vZi1mYWlsdXJlIGRvbWFpbg0KICAgYW5kIGNy ZWF0aW5nIG5ldHdvcmsgY2hva2UgcG9pbnRzIGF0IHRoZSBDRSByb3V0ZXIuDQoNCiAgIE5vdGUg dGhhdCBtb3JlIHRoYW4gb25lIENFIHJvdXRlciBhdCBhIHNpdGUgY2FuIGJlIGNvbmZpZ3VyZWQg d2l0aA0KICAgdGhlIHNhbWUgSVAgYWRkcmVzcy4gIEluIHRoaXMgY2FzZSBhbiBSTE9DIGlzIGFu IGFueWNhc3QgYWRkcmVzcy4NCiAgIFRoaXMgYWxsb3dzIHJlc2lsaWVuY2UgYmV0d2VlbiB0aGUg Q0Ugcm91dGVycy4gIFRoYXQgaXMsIGlmIGEgQ0UNCiAgIHJvdXRlciBmYWlscywgdHJhZmZpYyBp cyBhdXRvbWF0aWNhbGx5IHJvdXRlZCB0byB0aGUgb3RoZXIgcm91dGVycw0KICAgdXNpbmcgdGhl IHNhbWUgYW55Y2FzdCBhZGRyZXNzLiAgSG93ZXZlciwgdGhpcyBjb21lcyB3aXRoIHRoZQ0KICAg ZGlzYWR2YW50YWdlIHdoZXJlIHRoZSBzaXRlIGNhbm5vdCBjb250cm9sIHRoZSBlbnRyYW5jZSBw b2ludCB3aGVuDQogICB0aGUgYW55Y2FzdCByb3V0ZSBpcyBhZHZlcnRpc2VkIG91dCBmcm9tIGFs bCBib3JkZXIgcm91dGVycy4NCg0KDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4 cGlyZXMgSnVseSAxNiwgMjAxMCAgICAgICAgICAgICAgICBbUGFnZSA1MV0NCgwNCkludGVybmV0 LURyYWZ0ICAgIExvY2F0b3IvSUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVh cnkgMjAxMA0KDQoNCjguMy4gIElTUCBQcm92aWRlci1FZGdlIChQRSkgVHVubmVsIFJvdXRlcnMN Cg0KICAgVXNlIG9mIElTUCBQRSByb3V0ZXJzIGFzIHR1bm5lbCBlbmRwb2ludCByb3V0ZXJzIGdp dmVzIGFuIElTUCBjb250cm9sDQogICBvdmVyIHRoZSBsb2NhdGlvbiBvZiB0aGUgZWdyZXNzIHR1 bm5lbCBlbmRwb2ludHMuICBUaGF0IGlzLCB0aGUgSVNQDQogICBjYW4gZGVjaWRlIGlmIHRoZSB0 dW5uZWwgZW5kcG9pbnRzIGFyZSBpbiB0aGUgZGVzdGluYXRpb24gc2l0ZSAoaW4NCiAgIGVpdGhl ciBDRSByb3V0ZXJzIG9yIGxhc3QtaG9wIHJvdXRlcnMgd2l0aGluIGEgc2l0ZSkgb3IgYXQgb3Ro ZXIgUEUNCiAgIGVkZ2VzLiAgVGhlIGFkdmFudGFnZSBvZiB0aGlzIGNhc2UgaXMgdGhhdCB0d28g b3IgbW9yZSB0dW5uZWwgaGVhZGVycw0KICAgY2FuIGJlIGF2b2lkZWQuICBCeSBoYXZpbmcgdGhl IFBFIGJlIHRoZSBmaXJzdCByb3V0ZXIgb24gdGhlIHBhdGggdG8NCiAgIGVuY2Fwc3VsYXRlLCBp dCBjYW4gY2hvb3NlIGEgVEUgcGF0aCBmaXJzdCwgYW5kIHRoZSBFVFIgY2FuDQogICBkZWNhcHN1 bGF0ZSBhbmQgcmUtZW5jYXBzdWxhdGUgZm9yIGEgdHVubmVsIHRvIHRoZSBkZXN0aW5hdGlvbiBl bmQNCiAgIHNpdGUuDQoNCiAgIEFuIG9idmlvdXMgZGlzYWR2YW50YWdlIGlzIHRoYXQgdGhlIGVu ZCBzaXRlIGhhcyBubyBjb250cm9sIG92ZXINCiAgIHdoZXJlIGl0cyBwYWNrZXRzIGZsb3cgb3Ig dGhlIFJMT0NzIHVzZWQuDQoNCiAgIEFzIG1lbnRpb25lZCBpbiBlYXJsaWVyIHNlY3Rpb25zIGEg Y29tYmluYXRpb24gb2YgdGhlc2Ugc2NlbmFyaW9zIGlzDQogICBwb3NzaWJsZSBhdCB0aGUgZXhw ZW5zZSBvZiBleHRyYSBwYWNrZXQgaGVhZGVyIG92ZXJoZWFkLCBpZiBib3RoIHNpdGUNCiAgIGFu ZCBwcm92aWRlciB3YW50IGNvbnRyb2wsIHRoZW4gcmVjdXJzaXZlIG9yIHJlLWVuY2Fwc3VsYXRp bmcgdHVubmVscw0KICAgYXJlIHVzZWQuDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAg ICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1BhZ2UgNTJdDQoMDQpJbnRl cm5ldC1EcmFmdCAgICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBK YW51YXJ5IDIwMTANCg0KDQo5LiAgVHJhY2Vyb3V0ZSBDb25zaWRlcmF0aW9ucw0KDQogICBXaGVu IGEgc291cmNlIGhvc3QgaW4gYSBMSVNQIHNpdGUgaW5pdGlhdGVzIGEgdHJhY2Vyb3V0ZSB0byBh DQogICBkZXN0aW5hdGlvbiBob3N0IGluIGFub3RoZXIgTElTUCBzaXRlLCBpdCBpcyBoaWdobHkg ZGVzaXJhYmxlIGZvciBpdA0KICAgdG8gc2VlIHRoZSBlbnRpcmUgcGF0aC4gIFNpbmNlIHBhY2tl dHMgYXJlIGVuY2Fwc3VsYXRlZCBmcm9tIElUUiB0bw0KICAgRVRSLCB0aGUgaG9wIGFjcm9zcyB0 aGUgdHVubmVsIGNvdWxkIGJlIHZpZXdlZCBhcyBhIHNpbmdsZSBob3AuDQogICBIb3dldmVyLCBM SVNQIHRyYWNlcm91dGUgd2lsbCBwcm92aWRlIHRoZSBlbnRpcmUgcGF0aCBzbyB0aGUgdXNlciBj YW4NCiAgIHNlZSAzIGRpc3RpbmN0IHNlZ21lbnRzIG9mIHRoZSBwYXRoIGZyb20gYSBzb3VyY2Ug TElTUCBob3N0IHRvIGENCiAgIGRlc3RpbmF0aW9uIExJU1AgaG9zdDoNCg0KDQogICAgICBTZWdt ZW50IDEgKGluIHNvdXJjZSBMSVNQIHNpdGUgYmFzZWQgb24gRUlEcyk6DQoNCiAgICAgICAgICBz b3VyY2UtaG9zdCAtLS0+IGZpcnN0LWhvcCAuLi4gbmV4dC1ob3AgLS0tPiBJVFINCg0KICAgICAg U2VnbWVudCAyIChpbiB0aGUgY29yZSBuZXR3b3JrIGJhc2VkIG9uIFJMT0NzKToNCg0KICAgICAg ICAgIElUUiAtLS0+IG5leHQtaG9wIC4uLiBuZXh0LWhvcCAtLS0+IEVUUg0KDQogICAgICBTZWdt ZW50IDMgKGluIHRoZSBkZXN0aW5hdGlvbiBMSVNQIHNpdGUgYmFzZWQgb24gRUlEcyk6DQoNCiAg ICAgICAgICBFVFIgLS0tPiBuZXh0LWhvcCAuLi4gbGFzdC1ob3AgLS0tPiBkZXN0aW5hdGlvbi1o b3N0DQoNCiAgIEZvciBzZWdtZW50IDEgb2YgdGhlIHBhdGgsIElDTVAgVGltZSBFeGNlZWRlZCBt ZXNzYWdlcyBhcmUgcmV0dXJuZWQNCiAgIGluIHRoZSBub3JtYWwgbWF0dGVyIGFzIHRoZXkgYXJl IHRvZGF5LiAgVGhlIElUUiBwZXJmb3JtcyBhIFRUTA0KICAgZGVjcmVtZW50IGFuZCB0ZXN0IGZv ciAwIGJlZm9yZSBlbmNhcHN1bGF0aW5nLiAgU28gdGhlIElUUiBob3AgaXMNCiAgIHNlZW4gYnkg dGhlIHRyYWNlcm91dGUgc291cmNlIGhhcyBhbiBFSUQgYWRkcmVzcyAodGhlIGFkZHJlc3Mgb2YN CiAgIHNpdGUtZmFjaW5nIGludGVyZmFjZSkuDQoNCiAgIEZvciBzZWdtZW50IDIgb2YgdGhlIHBh dGgsIElDTVAgVGltZSBFeGNlZWRlZCBtZXNzYWdlcyBhcmUgcmV0dXJuZWQNCiAgIHRvIHRoZSBJ VFIgYmVjYXVzZSB0aGUgVFRMIGRlY3JlbWVudCB0byAwIGlzIGRvbmUgb24gdGhlIG91dGVyDQog ICBoZWFkZXIsIHNvIHRoZSBkZXN0aW5hdGlvbiBvZiB0aGUgSUNNUCBtZXNzYWdlcyBhcmUgdG8g dGhlIElUUiBSTE9DDQogICBhZGRyZXNzLCB0aGUgc291cmNlIHNvdXJjZSBSTE9DIGFkZHJlc3Mg b2YgdGhlIGVuY2Fwc3VsYXRlZA0KICAgdHJhY2Vyb3V0ZSBwYWNrZXQuICBUaGUgSVRSIGxvb2tz IGluc2lkZSBvZiB0aGUgSUNNUCBwYXlsb2FkIHRvDQogICBpbnNwZWN0IHRoZSB0cmFjZXJvdXRl IHNvdXJjZSBzbyBpdCBjYW4gcmV0dXJuIHRoZSBJQ01QIG1lc3NhZ2UgdG8NCiAgIHRoZSBhZGRy ZXNzIG9mIHRoZSB0cmFjZXJvdXRlIGNsaWVudCBhcyB3ZWxsIGFzIHJldGFpbmluZyB0aGUgY29y ZQ0KICAgcm91dGVyIElQIGFkZHJlc3MgaW4gdGhlIElDTVAgbWVzc2FnZS4gIFRoaXMgaXMgc28g dGhlIHRyYWNlcm91dGUNCiAgIGNsaWVudCBjYW4gZGlzcGxheSB0aGUgY29yZSByb3V0ZXIgYWRk cmVzcyAodGhlIFJMT0MgYWRkcmVzcykgaW4gdGhlDQogICB0cmFjZXJvdXRlIG91dHB1dC4gIFRo ZSBFVFIgcmV0dXJucyBpdHMgUkxPQyBhZGRyZXNzIGFuZCByZXNwb25kcyB0bw0KICAgdGhlIFRU TCBkZWNyZW1lbnQgdG8gMCBsaWtlIHRoZSBwcmV2aW91cyBjb3JlIHJvdXRlcnMgZGlkLg0KDQog ICBGb3Igc2VnbWVudCAzLCB0aGUgbmV4dC1ob3Agcm91dGVyIGRvd25zdHJlYW0gZnJvbSB0aGUg RVRSIHdpbGwgYmUNCiAgIGRlY3JlbWVudGluZyB0aGUgVFRMIGZvciB0aGUgcGFja2V0IHRoYXQg d2FzIGVuY2Fwc3VsYXRlZCwgc2VudCBpbnRvDQogICB0aGUgY29yZSwgZGVjYXBzdWxhdGVkIGJ5 IHRoZSBFVFIsIGFuZCBmb3J3YXJkZWQgYmVjYXVzZSBpdCBpc24ndCB0aGUNCiAgIGZpbmFsIGRl c3RpbmF0aW9uLiAgSWYgdGhlIFRUTCBpcyBkZWNyZW1lbnRlZCB0byAwLCBhbnkgcm91dGVyIG9u IHRoZQ0KICAgcGF0aCB0byB0aGUgZGVzdGluYXRpb24gb2YgdGhlIHRyYWNlcm91dGUsIGluY2x1 ZGluZyB0aGUgbmV4dC1ob3ANCiAgIHJvdXRlciBvciBkZXN0aW5hdGlvbiwgd2lsbCBzZW5kIGFu IElDTVAgVGltZSBFeGNlZWRlZCBtZXNzYWdlIHRvIHRoZQ0KICAgc291cmNlIEVJRCBvZiB0aGUg dHJhY2Vyb3V0ZSBjbGllbnQuICBUaGUgSUNNUCBtZXNzYWdlIHdpbGwgYmUNCg0KDQoNCkZhcmlu YWNjaSwgZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAg IFtQYWdlIDUzXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFBy b3RvY29sIChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoNCg0KICAgZW5jYXBzdWxhdGVkIGJ5IHRo ZSBsb2NhbCBJVFIgYW5kIHNlbnQgYmFjayB0byB0aGUgRVRSIGluIHRoZQ0KICAgb3JpZ2luYXRl ZCB0cmFjZXJvdXRlIHNvdXJjZSBzaXRlLCB3aGVyZSB0aGUgcGFja2V0IHdpbGwgYmUgZGVsaXZl cmVkDQogICB0byB0aGUgaG9zdC4NCg0KOS4xLiAgSVB2NiBUcmFjZXJvdXRlDQoNCiAgIElQdjYg dHJhY2Vyb3V0ZSBmb2xsb3dzIHRoZSBwcm9jZWR1cmUgZGVzY3JpYmVkIGFib3ZlIHNpbmNlIHRo ZQ0KICAgZW50aXJlIHRyYWNlcm91dGUgZGF0YSBwYWNrZXQgaXMgaW5jbHVkZWQgaW4gSUNNUCBU aW1lIEV4Y2VlZGVkDQogICBtZXNzYWdlIHBheWxvYWQuICBUaGVyZWZvcmUsIG9ubHkgdGhlIElU UiBuZWVkcyB0byBwYXkgc3BlY2lhbA0KICAgYXR0ZW50aW9uIGZvciBmb3J3YXJkaW5nIElDTVAg bWVzc2FnZXMgYmFjayB0byB0aGUgdHJhY2Vyb3V0ZSBzb3VyY2UuDQoNCjkuMi4gIElQdjQgVHJh Y2Vyb3V0ZQ0KDQogICBGb3IgSVB2NCB0cmFjZXJvdXRlLCB3ZSBjYW5ub3QgZm9sbG93IHRoZSBh Ym92ZSBwcm9jZWR1cmUgc2luY2UgSVB2NA0KICAgSUNNUCBUaW1lIEV4Y2VlZGVkIG1lc3NhZ2Vz IG9ubHkgaW5jbHVkZSB0aGUgaW52b2tpbmcgSVAgaGVhZGVyIGFuZCA4DQogICBieXRlcyB0aGF0 IGZvbGxvdyB0aGUgSVAgaGVhZGVyLiAgVGhlcmVmb3JlLCB3aGVuIGEgY29yZSByb3V0ZXIgc2Vu ZHMNCiAgIGFuIElQdjQgVGltZSBFeGNlZWRlZCBtZXNzYWdlIHRvIGFuIElUUiwgYWxsIHRoZSBJ VFIgaGFzIGluIHRoZSBJQ01QDQogICBwYXlsb2FkIGlzIHRoZSBlbmNhcHN1bGF0ZWQgaGVhZGVy IGl0IHByZXBlbmRlZCBmb2xsb3dlZCBieSBhIFVEUA0KICAgaGVhZGVyLiAgVGhlIG9yaWdpbmFs IGludm9raW5nIElQIGhlYWRlciwgYW5kIHRoZXJlZm9yZSB0aGUgaWRlbnRpdHkNCiAgIG9mIHRo ZSB0cmFjZXJvdXRlIHNvdXJjZSBpcyBsb3N0Lg0KDQogICBUaGUgc29sdXRpb24gd2UgcHJvcG9z ZSB0byBzb2x2ZSB0aGlzIHByb2JsZW0gaXMgdG8gY2FjaGUgdHJhY2Vyb3V0ZQ0KICAgSVB2NCBo ZWFkZXJzIGluIHRoZSBJVFIgYW5kIHRvIG1hdGNoIHRoZW0gdXAgd2l0aCBjb3JyZXNwb25kaW5n IElQdjQNCiAgIFRpbWUgRXhjZWVkZWQgbWVzc2FnZXMgcmVjZWl2ZWQgZnJvbSBjb3JlIHJvdXRl cnMgYW5kIHRoZSBFVFIuICBUaGUNCiAgIElUUiB3aWxsIHVzZSBhIGNpcmN1bGFyIGJ1ZmZlciBm b3IgY2FjaGluZyB0aGUgSVB2NCBhbmQgVURQIGhlYWRlcnMNCiAgIG9mIHRyYWNlcm91dGUgcGFj a2V0cy4gIEl0IHdpbGwgc2VsZWN0IGEgMTYtYml0IG51bWJlciBhcyBhIGtleSB0bw0KICAgZmlu ZCB0aGVtIGxhdGVyIHdoZW4gdGhlIElQdjQgVGltZSBFeGNlZWRlZCBtZXNzYWdlcyBhcmUgcmVj ZWl2ZWQuDQogICBXaGVuIGFuIElUUiBlbmNhcHN1bGF0ZXMgYW4gSVB2NCB0cmFjZXJvdXRlIHBh Y2tldCwgaXQgd2lsbCB1c2UgdGhlDQogICAxNi1iaXQgbnVtYmVyIGFzIHRoZSBVRFAgc291cmNl IHBvcnQgaW4gdGhlIGVuY2Fwc3VsYXRpbmcgaGVhZGVyLg0KICAgV2hlbiB0aGUgSUNNUCBUaW1l IEV4Y2VlZGVkIG1lc3NhZ2UgaXMgcmV0dXJuZWQgdG8gdGhlIElUUiwgdGhlIFVEUA0KICAgaGVh ZGVyIG9mIHRoZSBlbmNhcHN1bGF0aW5nIGhlYWRlciBpcyBwcmVzZW50IGluIHRoZSBJQ01QIHBh eWxvYWQNCiAgIHRoZXJlYnkgYWxsb3dpbmcgdGhlIElUUiB0byBmaW5kIHRoZSBjYWNoZWQgaGVh ZGVycyBmb3IgdGhlDQogICB0cmFjZXJvdXRlIHNvdXJjZS4gIFRoZSBJVFIgcHV0cyB0aGUgY2Fj aGVkIGhlYWRlcnMgaW4gdGhlIHBheWxvYWQNCiAgIGFuZCBzZW5kcyB0aGUgSUNNUCBUaW1lIEV4 Y2VlZGVkIG1lc3NhZ2UgdG8gdGhlIHRyYWNlcm91dGUgc291cmNlDQogICByZXRhaW5pbmcgdGhl IHNvdXJjZSBhZGRyZXNzIG9mIHRoZSBvcmlnaW5hbCBJQ01QIFRpbWUgRXhjZWVkZWQNCiAgIG1l c3NhZ2UgKGEgY29yZSByb3V0ZXIgb3IgdGhlIEVUUiBvZiB0aGUgc2l0ZSBvZiB0aGUgdHJhY2Vy b3V0ZQ0KICAgZGVzdGluYXRpb24pLg0KDQo5LjMuICBUcmFjZXJvdXRlIHVzaW5nIE1peGVkIExv Y2F0b3JzDQoNCiAgIFdoZW4gZWl0aGVyIGFuIElQdjQgdHJhY2Vyb3V0ZSBvciBJUHY2IHRyYWNl cm91dGUgaXMgb3JpZ2luYXRlZCBhbmQNCiAgIHRoZSBJVFIgZW5jYXBzdWxhdGVzIGl0IGluIHRo ZSBvdGhlciBhZGRyZXNzIGZhbWlseSBoZWFkZXIsIHlvdQ0KICAgY2Fubm90IGdldCBhbGwgMyBz ZWdtZW50cyBvZiB0aGUgdHJhY2Vyb3V0ZS4gIFNlZ21lbnQgMiBvZiB0aGUNCiAgIHRyYWNlcm91 dGUgY2FuIG5vdCBiZSBjb252ZXllZCB0byB0aGUgdHJhY2Vyb3V0ZSBzb3VyY2Ugc2luY2UgaXQg aXMNCiAgIGV4cGVjdGluZyBhZGRyZXNzZXMgZnJvbSBpbnRlcm1lZGlhdGUgaG9wcyBpbiB0aGUg c2FtZSBhZGRyZXNzIGZvcm1hdA0KICAgZm9yIHRoZSB0eXBlIG9mIHRyYWNlcm91dGUgaXQgb3Jp Z2luYXRlZC4gIFRoZXJlZm9yZSwgaW4gdGhpcyBjYXNlLA0KICAgc2VnbWVudCAyIHdpbGwgbWFr ZSB0aGUgdHVubmVsIGxvb2sgbGlrZSBvbmUgaG9wLiAgQWxsIHRoZSBJVFIgaGFzIHRvDQogICBk byB0byBtYWtlIHRoaXMgd29yayBpcyB0byBub3QgY29weSB0aGUgaW5uZXIgVFRMIHRvIHRoZSBv dXRlciwNCg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5IDE2LCAy MDEwICAgICAgICAgICAgICAgIFtQYWdlIDU0XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgTG9jYXRv ci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoNCg0KICAg ZW5jYXBzdWxhdGluZyBoZWFkZXIncyBUVEwgd2hlbiBhIHRyYWNlcm91dGUgcGFja2V0IGlzIGVu Y2Fwc3VsYXRlZA0KICAgdXNpbmcgYW4gUkxPQyBmcm9tIGEgZGlmZmVyZW50IGFkZHJlc3MgZmFt aWx5LiAgVGhpcyB3aWxsIGNhdXNlIG5vDQogICBUVEwgZGVjcmVtZW50IHRvIDAgdG8gb2NjdXIg aW4gY29yZSByb3V0ZXJzIGJldHdlZW4gdGhlIElUUiBhbmQgRVRSLg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVz IEp1bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1BhZ2UgNTVdDQoMDQpJbnRlcm5ldC1EcmFm dCAgICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIw MTANCg0KDQoxMC4gIE1vYmlsaXR5IENvbnNpZGVyYXRpb25zDQoNCiAgIFRoZXJlIGFyZSBzZXZl cmFsIGtpbmRzIG9mIG1vYmlsaXR5IG9mIHdoaWNoIG9ubHkgc29tZSBtaWdodCBiZSBvZg0KICAg Y29uY2VybiB0byBMSVNQLiAgRXNzZW50aWFsbHkgdGhleSBhcmUgYXMgZm9sbG93cy4NCg0KMTAu MS4gIFNpdGUgTW9iaWxpdHkNCg0KICAgQSBzaXRlIHdpc2hlcyB0byBjaGFuZ2UgaXRzIGF0dGFj aG1lbnQgcG9pbnRzIHRvIHRoZSBJbnRlcm5ldCwgYW5kDQogICBpdHMgTElTUCBUdW5uZWwgUm91 dGVycyB3aWxsIGhhdmUgbmV3IFJMT0NzIHdoZW4gaXQgY2hhbmdlcyB1cHN0cmVhbQ0KICAgcHJv dmlkZXJzLiAgQ2hhbmdlcyBpbiBFSUQtUkxPQyBtYXBwaW5ncyBmb3Igc2l0ZXMgYXJlIGV4cGVj dGVkIHRvIGJlDQogICBoYW5kbGVkIGJ5IGNvbmZpZ3VyYXRpb24sIG91dHNpZGUgb2YgdGhlIExJ U1AgcHJvdG9jb2wuDQoNCjEwLjIuICBTbG93IEVuZHBvaW50IE1vYmlsaXR5DQoNCiAgIEFuIGlu ZGl2aWR1YWwgZW5kcG9pbnQgd2lzaGVzIHRvIG1vdmUsIGJ1dCBpcyBub3QgY29uY2VybmVkIGFi b3V0DQogICBtYWludGFpbmluZyBzZXNzaW9uIGNvbnRpbnVpdHkuICBSZW51bWJlcmluZyBpcyBp bnZvbHZlZC4gIExJU1AgY2FuDQogICBoZWxwIHdpdGggdGhlIGlzc3VlcyBzdXJyb3VuZGluZyBy ZW51bWJlcmluZyBbUkZDNDE5Ml0gW0xJU0E5Nl0gYnkNCiAgIGRlY291cGxpbmcgdGhlIGFkZHJl c3Mgc3BhY2UgdXNlZCBieSBhIHNpdGUgZnJvbSB0aGUgYWRkcmVzcyBzcGFjZXMNCiAgIHVzZWQg YnkgaXRzIElTUHMuICBbUkZDNDk4NF0NCg0KMTAuMy4gIEZhc3QgRW5kcG9pbnQgTW9iaWxpdHkN Cg0KICAgRmFzdCBlbmRwb2ludCBtb2JpbGl0eSBvY2N1cnMgd2hlbiBhbiBlbmRwb2ludCBtb3Zl cyByZWxhdGl2ZWx5DQogICByYXBpZGx5LCBjaGFuZ2luZyBpdHMgSVAgbGF5ZXIgbmV0d29yayBh dHRhY2htZW50IHBvaW50LiAgTWFpbnRlbmFuY2UNCiAgIG9mIHNlc3Npb24gY29udGludWl0eSBp cyBhIGdvYWwuICBUaGlzIGlzIHdoZXJlIHRoZSBNb2JpbGUgSVB2NA0KICAgW1JGQzMzNDRiaXNd IGFuZCBNb2JpbGUgSVB2NiBbUkZDMzc3NV0gW1JGQzQ4NjZdIG1lY2hhbmlzbXMgYXJlIHVzZWQs DQogICBhbmQgcHJpbWFyaWx5IHdoZXJlIGludGVyYWN0aW9ucyB3aXRoIExJU1AgbmVlZCB0byBi ZSBleHBsb3JlZC4NCg0KICAgVGhlIHByb2JsZW0gaXMgdGhhdCBhcyBhbiBlbmRwb2ludCBtb3Zl cywgaXQgbWF5IHJlcXVpcmUgY2hhbmdlcyB0bw0KICAgdGhlIG1hcHBpbmcgYmV0d2VlbiBpdHMg RUlEIGFuZCBhIHNldCBvZiBSTE9DcyBmb3IgaXRzIG5ldyBuZXR3b3JrDQogICBsb2NhdGlvbi4g IFdoZW4gdGhpcyBpcyBhZGRlZCB0byB0aGUgb3ZlcmhlYWQgb2YgbW9iaWxlIElQIGJpbmRpbmcN CiAgIHVwZGF0ZXMsIHNvbWUgcGFja2V0cyBtaWdodCBiZSBkZWxheWVkIG9yIGRyb3BwZWQuDQoN CiAgIEluIElQdjQgbW9iaWxpdHksIHdoZW4gYW4gZW5kcG9pbnQgaXMgYXdheSBmcm9tIGhvbWUs IHBhY2tldHMgdG8gaXQNCiAgIGFyZSBlbmNhcHN1bGF0ZWQgYW5kIGZvcndhcmRlZCB2aWEgYSBo b21lIGFnZW50IHdoaWNoIHJlc2lkZXMgaW4gdGhlDQogICBob21lIGFyZWEgdGhlIGVuZHBvaW50 J3MgYWRkcmVzcyBiZWxvbmdzIHRvLiAgVGhlIGhvbWUgYWdlbnQgd2lsbA0KICAgZW5jYXBzdWxh dGUgYW5kIGZvcndhcmQgcGFja2V0cyBlaXRoZXIgZGlyZWN0bHkgdG8gdGhlIGVuZHBvaW50IG9y IHRvDQogICBhIGZvcmVpZ24gYWdlbnQgd2hpY2ggcmVzaWRlcyB3aGVyZSB0aGUgZW5kcG9pbnQg aGFzIG1vdmVkIHRvLg0KICAgUGFja2V0cyBmcm9tIHRoZSBlbmRwb2ludCBtYXkgYmUgc2VudCBk aXJlY3RseSB0byB0aGUgY29ycmVzcG9uZGVudA0KICAgbm9kZSwgbWF5IGJlIHNlbnQgdmlhIHRo ZSBmb3JlaWduIGFnZW50LCBvciBtYXkgYmUgcmV2ZXJzZS10dW5uZWxlZA0KICAgYmFjayB0byB0 aGUgaG9tZSBhZ2VudCBmb3IgZGVsaXZlcnkgdG8gdGhlIG1vYmlsZSBub2RlLiAgQXMgdGhlDQog ICBtb2JpbGUgbm9kZSdzIEVJRCBvciBhdmFpbGFibGUgUkxPQyBjaGFuZ2VzLCBMSVNQIEVJRC10 by1STE9DDQogICBtYXBwaW5ncyBhcmUgcmVxdWlyZWQgZm9yIGNvbW11bmljYXRpb24gYmV0d2Vl biB0aGUgbW9iaWxlIG5vZGUgYW5kDQogICB0aGUgaG9tZSBhZ2VudCwgd2hldGhlciB2aWEgZm9y ZWlnbiBhZ2VudCBvciBub3QuICBBcyBhIG1vYmlsZQ0KICAgZW5kcG9pbnQgY2hhbmdlcyBuZXR3 b3JrcywgdXAgdG8gdGhyZWUgTElTUCBtYXBwaW5nIGNoYW5nZXMgbWF5IGJlDQogICByZXF1aXJl ZDoNCg0KDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMgSnVseSAxNiwg MjAxMCAgICAgICAgICAgICAgICBbUGFnZSA1Nl0NCgwNCkludGVybmV0LURyYWZ0ICAgIExvY2F0 b3IvSUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAxMA0KDQoNCiAg IG8gIFRoZSBtb2JpbGUgbm9kZSBtb3ZlcyBmcm9tIGFuIG9sZCBsb2NhdGlvbiB0byBhIG5ldyB2 aXNpdGVkDQogICAgICBuZXR3b3JrIGxvY2F0aW9uIGFuZCBub3RpZmllcyBpdHMgaG9tZSBhZ2Vu dCB0aGF0IGl0IGhhcyBkb25lIHNvLg0KICAgICAgVGhlIE1vYmlsZSBJUHY0IGNvbnRyb2wgcGFj a2V0cyB0aGUgbW9iaWxlIG5vZGUgc2VuZHMgcGFzcyB0aHJvdWdoDQogICAgICBvbmUgb2YgdGhl IG5ldyB2aXNpdGVkIG5ldHdvcmsncyBJVFJzLCB3aGljaCBuZWVkcyBhIEVJRC1STE9DDQogICAg ICBtYXBwaW5nIGZvciB0aGUgaG9tZSBhZ2VudC4NCg0KICAgbyAgVGhlIGhvbWUgYWdlbnQgbWln aHQgbm90IGhhdmUgdGhlIEVJRC1STE9DIG1hcHBpbmdzIGZvciB0aGUgbW9iaWxlDQogICAgICBu b2RlJ3MgImNhcmUtb2YiIGFkZHJlc3Mgb3IgaXRzIGZvcmVpZ24gYWdlbnQgaW4gdGhlIG5ldyB2 aXNpdGVkDQogICAgICBuZXR3b3JrLCBpbiB3aGljaCBjYXNlIGl0IHdpbGwgbmVlZCB0byBhY3F1 aXJlIHRoZW0uDQoNCiAgIG8gIFdoZW4gcGFja2V0cyBhcmUgc2VudCBkaXJlY3RseSB0byB0aGUg Y29ycmVzcG9uZGVudCBub2RlLCBpdCBtYXkNCiAgICAgIGJlIHRoYXQgbm8gdHJhZmZpYyBoYXMg YmVlbiBzZW50IGZyb20gdGhlIG5ldyB2aXNpdGVkIG5ldHdvcmsgdG8NCiAgICAgIHRoZSBjb3Jy ZXNwb25kZW50IG5vZGUncyBuZXR3b3JrLCBhbmQgdGhlIG5ldyB2aXNpdGVkIG5ldHdvcmsncw0K ICAgICAgSVRSIHdpbGwgbmVlZCB0byBvYnRhaW4gYW4gRUlELVJMT0MgbWFwcGluZyBmb3IgdGhl IGNvcnJlc3BvbmRlbnQNCiAgICAgIG5vZGUncyBzaXRlLg0KDQogICBJbiBhZGRpdGlvbiwgaWYg dGhlIElQdjQgZW5kcG9pbnQgaXMgc2VuZGluZyBwYWNrZXRzIGZyb20gdGhlIG5ldw0KICAgdmlz aXRlZCBuZXR3b3JrIHVzaW5nIGl0cyBvcmlnaW5hbCBFSUQsIHRoZW4gTElTUCB3aWxsIG5lZWQg dG8NCiAgIHBlcmZvcm0gYSByb3V0ZS1yZXR1cm5hYmlsaXR5IGNoZWNrIG9uIHRoZSBuZXcgRUlE LVJMT0MgbWFwcGluZyBmb3INCiAgIHRoYXQgRUlELg0KDQogICBJbiBJUHY2IG1vYmlsaXR5LCBw YWNrZXRzIGNhbiBmbG93IGRpcmVjdGx5IGJldHdlZW4gdGhlIG1vYmlsZSBub2RlDQogICBhbmQg dGhlIGNvcnJlc3BvbmRlbnQgbm9kZSBpbiBlaXRoZXIgZGlyZWN0aW9uLiAgVGhlIG1vYmlsZSBu b2RlIHVzZXMNCiAgIGl0cyAiY2FyZS1vZiIgYWRkcmVzcyAoRUlEKS4gIEluIHRoaXMgY2FzZSwg dGhlIHJvdXRlLXJldHVybmFiaWxpdHkNCiAgIGNoZWNrIHdvdWxkIG5vdCBiZSBuZWVkZWQgYnV0 IG9uZSBtb3JlIExJU1AgbWFwcGluZyBsb29rdXAgbWF5IGJlDQogICByZXF1aXJlZCBpbnN0ZWFk Og0KDQogICBvICBBcyBhYm92ZSwgdGhyZWUgbWFwcGluZyBjaGFuZ2VzIG1heSBiZSBuZWVkZWQg Zm9yIHRoZSBtb2JpbGUgbm9kZQ0KICAgICAgdG8gY29tbXVuaWNhdGUgd2l0aCBpdHMgaG9tZSBh Z2VudCBhbmQgdG8gc2VuZCBwYWNrZXRzIHRvIHRoZQ0KICAgICAgY29ycmVzcG9uZGVudCBub2Rl Lg0KDQogICBvICBJbiBhZGRpdGlvbiwgYW5vdGhlciBtYXBwaW5nIHdpbGwgYmUgbmVlZGVkIGlu IHRoZSBjb3JyZXNwb25kZW50DQogICAgICBub2RlJ3MgSVRSLCBpbiBvcmRlciBmb3IgdGhlIGNv cnJlc3BvbmRlbnQgbm9kZSB0byBzZW5kIHBhY2tldHMgdG8NCiAgICAgIHRoZSBtb2JpbGUgbm9k ZSdzICJjYXJlLW9mIiBhZGRyZXNzIChFSUQpIGF0IHRoZSBuZXcgbmV0d29yaw0KICAgICAgbG9j YXRpb24uDQoNCiAgIFdoZW4gYm90aCBlbmRwb2ludHMgYXJlIG1vYmlsZSB0aGUgbnVtYmVyIG9m IHBvdGVudGlhbCBtYXBwaW5nDQogICBsb29rdXBzIGluY3JlYXNlcyBhY2NvcmRpbmdseS4NCg0K ICAgQXMgYSBtb2JpbGUgbm9kZSBtb3ZlcyB0aGVyZSBhcmUgbm90IG9ubHkgbW9iaWxpdHkgc3Rh dGUgY2hhbmdlcyBpbg0KICAgdGhlIG1vYmlsZSBub2RlLCBjb3JyZXNwb25kZW50IG5vZGUsIGFu ZCBob21lIGFnZW50LCBidXQgYWxzbyBzdGF0ZQ0KICAgY2hhbmdlcyBpbiB0aGUgSVRScyBhbmQg RVRScyBmb3IgYXQgbGVhc3Qgc29tZSBFSUQtcHJlZml4ZXMuDQoNCiAgIFRoZSBnb2FsIGlzIHRv IHN1cHBvcnQgcmFwaWQgYWRhcHRhdGlvbiwgd2l0aCBsaXR0bGUgZGVsYXkgb3IgcGFja2V0DQog ICBsb3NzIGZvciB0aGUgZW50aXJlIHN5c3RlbS4gIEhldXJpc3RpY3MgY2FuIGJlIGFkZGVkIHRv IExJU1AgdG8NCiAgIHJlZHVjZSB0aGUgbnVtYmVyIG9mIG1hcHBpbmcgY2hhbmdlcyByZXF1aXJl ZCBhbmQgdG8gcmVkdWNlIHRoZSBkZWxheQ0KICAgcGVyIG1hcHBpbmcgY2hhbmdlLiAgQWxzbyBJ UCBtb2JpbGl0eSBjYW4gYmUgbW9kaWZpZWQgdG8gcmVxdWlyZQ0KICAgZmV3ZXIgbWFwcGluZyBj aGFuZ2VzLiAgSW4gb3JkZXIgdG8gaW5jcmVhc2Ugb3ZlcmFsbCBzeXN0ZW0NCg0KDQoNCkZhcmlu YWNjaSwgZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAg IFtQYWdlIDU3XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFBy b3RvY29sIChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoNCg0KICAgcGVyZm9ybWFuY2UsIHRoZXJl IG1heSBiZSBhIG5lZWQgdG8gcmVkdWNlIHRoZSBvcHRpbWl6YXRpb24gb2Ygb25lDQogICBhcmVh IGluIG9yZGVyIHRvIHBsYWNlIGZld2VyIGRlbWFuZHMgb24gYW5vdGhlci4NCg0KICAgSW4gTElT UCwgb25lIHBvc3NpYmlsaXR5IGlzIHRvICJnbGVhbiIgaW5mb3JtYXRpb24uICBXaGVuIGEgcGFj a2V0DQogICBhcnJpdmVzLCB0aGUgRVRSIGNvdWxkIGV4YW1pbmUgdGhlIEVJRC1STE9DIG1hcHBp bmcgYW5kIHVzZSB0aGF0DQogICBtYXBwaW5nIGZvciBhbGwgb3V0Z29pbmcgdHJhZmZpYyB0byB0 aGF0IEVJRC4gIEl0IGNhbiBkbyB0aGlzIGFmdGVyDQogICBwZXJmb3JtaW5nIGEgcm91dGUtcmV0 dXJuYWJpbGl0eSBjaGVjaywgdG8gZW5zdXJlIHRoYXQgdGhlIG5ldw0KICAgbmV0d29yayBsb2Nh dGlvbiBkb2VzIGhhdmUgYSBpbnRlcm5hbCByb3V0ZSB0byB0aGF0IGVuZHBvaW50Lg0KICAgSG93 ZXZlciwgdGhpcyBkb2VzIG5vdCBjb3ZlciB0aGUgY2FzZSB3aGVyZSBhbiBJVFIgKHRoZSBub2Rl IGFzc2lnbmVkDQogICB0aGUgUkxPQykgYXQgdGhlIG1vYmlsZS1ub2RlIGxvY2F0aW9uIGhhcyBi ZWVuIGNvbXByb21pc2VkLg0KDQogICBNb2JpbGUgSVAgcGFja2V0IGV4Y2hhbmdlIGlzIGRlc2ln bmVkIGZvciBhbiBlbnZpcm9ubWVudCBpbiB3aGljaCBhbGwNCiAgIHJvdXRpbmcgaW5mb3JtYXRp b24gaXMgZGlzc2VtaW5hdGVkIGJlZm9yZSBwYWNrZXRzIGNhbiBiZSBmb3J3YXJkZWQuDQogICBJ biBvcmRlciB0byBhbGxvdyB0aGUgSW50ZXJuZXQgdG8gZ3JvdyB0byBzdXBwb3J0IGV4cGVjdGVk IGZ1dHVyZQ0KICAgdXNlLCB3ZSBhcmUgbW92aW5nIHRvIGFuIGVudmlyb25tZW50IHdoZXJlIHNv bWUgaW5mb3JtYXRpb24gbWF5IGhhdmUNCiAgIHRvIGJlIG9idGFpbmVkIGFmdGVyIHBhY2tldHMg YXJlIGluIGZsaWdodC4gIE1vZGlmaWNhdGlvbnMgdG8gSVANCiAgIG1vYmlsaXR5IHNob3VsZCBi ZSBjb25zaWRlcmVkIGluIG9yZGVyIHRvIG9wdGltaXplIHRoZSBiZWhhdmlvciBvZg0KICAgdGhl IG92ZXJhbGwgc3lzdGVtLiAgQW55dGhpbmcgd2hpY2ggZGVjcmVhc2VzIHRoZSBudW1iZXIgb2Yg bmV3IEVJRC0NCiAgIFJMT0MgbWFwcGluZ3MgbmVlZGVkIHdoZW4gYSBub2RlIG1vdmVzLCBvciBt YWludGFpbnMgdGhlIHZhbGlkaXR5IG9mDQogICBhbiBFSUQtUkxPQyBtYXBwaW5nIGZvciBhIGxv bmdlciB0aW1lLCBpcyB1c2VmdWwuDQoNCjEwLjQuICBGYXN0IE5ldHdvcmsgTW9iaWxpdHkNCg0K ICAgSW4gYWRkaXRpb24gdG8gZW5kcG9pbnRzLCBhIG5ldHdvcmsgY2FuIGJlIG1vYmlsZSwgcG9z c2libHkgY2hhbmdpbmcNCiAgIHhUUnMuICBBICJuZXR3b3JrIiBjYW4gYmUgYXMgc21hbGwgYXMg YSBzaW5nbGUgcm91dGVyIGFuZCBhcyBsYXJnZSBhcw0KICAgYSB3aG9sZSBzaXRlLiAgVGhpcyBp cyBkaWZmZXJlbnQgZnJvbSBzaXRlIG1vYmlsaXR5IGluIHRoYXQgaXQgaXMNCiAgIGZhc3QgYW5k IHBvc3NpYmx5IHNob3J0LWxpdmVkLCBidXQgZGlmZmVyZW50IGZyb20gZW5kcG9pbnQgbW9iaWxp dHkNCiAgIGluIHRoYXQgYSB3aG9sZSBwcmVmaXggaXMgY2hhbmdpbmcgUkxPQ3MuICBIb3dldmVy LCB0aGUgbWVjaGFuaXNtcw0KICAgYXJlIHRoZSBzYW1lIGFuZCB0aGVyZSBpcyBubyBuZXcgb3Zl cmhlYWQgaW4gTElTUC4gIEEgbWFwIHJlcXVlc3QgZm9yDQogICBhbnkgZW5kcG9pbnQgd2lsbCBy ZXR1cm4gYSBiaW5kaW5nIGZvciB0aGUgZW50aXJlIG1vYmlsZSBwcmVmaXguDQoNCiAgIElmIG1v YmlsZSBuZXR3b3JrcyBiZWNvbWUgYSBtb3JlIGNvbW1vbiBvY2N1cnJlbmNlLCBpdCBtYXkgYmUg dXNlZnVsDQogICB0byByZXZpc2l0IHRoZSBkZXNpZ24gb2YgdGhlIG1hcHBpbmcgc2VydmljZSBh bmQgYWxsb3cgZm9yIGR5bmFtaWMNCiAgIHVwZGF0ZXMgb2YgdGhlIGRhdGFiYXNlLg0KDQogICBU aGUgaXNzdWUgb2YgaW50ZXJhY3Rpb25zIGJldHdlZW4gbW9iaWxpdHkgYW5kIExJU1AgbmVlZHMg dG8gYmUNCiAgIGV4cGxvcmVkIGZ1cnRoZXIuICBTcGVjaWZpYyBpbXByb3ZlbWVudHMgdG8gdGhl IGVudGlyZSBzeXN0ZW0gd2lsbA0KICAgZGVwZW5kIG9uIHRoZSBkZXRhaWxzIG9mIG1hcHBpbmcg bWVjaGFuaXNtcy4gIE1hcHBpbmcgbWVjaGFuaXNtcw0KICAgc2hvdWxkIGJlIGV2YWx1YXRlZCBv biBob3cgd2VsbCB0aGV5IHN1cHBvcnQgc2Vzc2lvbiBjb250aW51aXR5IGZvcg0KICAgbW9iaWxl IG5vZGVzLg0KDQoxMC41LiAgTElTUCBNb2JpbGUgTm9kZSBNb2JpbGl0eQ0KDQogICBBbiBtb2Jp bGUgZGV2aWNlIGNhbiB1c2UgdGhlIExJU1AgaW5mcmFzdHJ1Y3R1cmUgdG8gYWNoaWV2ZSBtb2Jp bGl0eQ0KICAgYnkgaW1wbGVtZW50aW5nIHRoZSBMSVNQIGVuY2Fwc3VsYXRpb24gYW5kIGRlY2Fw c3VsYXRpb24gZnVuY3Rpb25zDQogICBhbmQgYWN0aW5nIGFzIGEgc2ltcGxlIElUUi9FVFIuICBC eSBkb2luZyB0aGlzLCBzdWNoIGEgIkxJU1AgbW9iaWxlDQogICBub2RlIiBjYW4gdXNlIHRvcG9s b2dpY2FsbHktaW5kZXBlbmRlbnQgRUlEIElQIGFkZHJlc3NlcyB0aGF0IGFyZSBub3QNCiAgIGFk dmVydGlzZWQgaW50byBhbmQgZG8gbm90IGltcG9zZSBhIGNvc3Qgb24gdGhlIGdsb2JhbCByb3V0 aW5nDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMgSnVseSAxNiwgMjAx MCAgICAgICAgICAgICAgICBbUGFnZSA1OF0NCgwNCkludGVybmV0LURyYWZ0ICAgIExvY2F0b3Iv SUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAxMA0KDQoNCiAgIHN5 c3RlbS4gIFRoZXNlIEVJRHMgYXJlIG1haW50YWluZWQgYXQgdGhlIGVkZ2VzIG9mIHRoZSBtYXBw aW5nIHN5c3RlbQ0KICAgKGluIExJU1AgTWFwLVNlcnZlcnMgYW5kIE1hcC1SZXNvbHZlcnMpIGFu ZCBhcmUgcHJvdmlkZWQgb24gZGVtYW5kIHRvDQogICBvbmx5IHRoZSBjb3JyZXNwb25kZW50cyBv ZiB0aGUgTElTUCBtb2JpbGUgbm9kZS4NCg0KICAgUmVmZXIgdG8gdGhlIExJU1AgTW9iaWxpdHkg QXJjaGl0ZWN0dXJlIHNwZWNpZmljYXRpb24gW0xJU1AtTU5dIGZvcg0KICAgbW9yZSBkZXRhaWxz Lg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAg ICAgICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1BhZ2UgNTldDQoMDQpJ bnRlcm5ldC1EcmFmdCAgICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAg ICBKYW51YXJ5IDIwMTANCg0KDQoxMS4gIE11bHRpY2FzdCBDb25zaWRlcmF0aW9ucw0KDQogICBB IG11bHRpY2FzdCBncm91cCBhZGRyZXNzLCBhcyBkZWZpbmVkIGluIHRoZSBvcmlnaW5hbCBJbnRl cm5ldA0KICAgYXJjaGl0ZWN0dXJlIGlzIGFuIGlkZW50aWZpZXIgb2YgYSBncm91cGluZyBvZiB0 b3BvbG9naWNhbGx5DQogICBpbmRlcGVuZGVudCByZWNlaXZlciBob3N0IGxvY2F0aW9ucy4gIFRo ZSBhZGRyZXNzIGVuY29kaW5nIGl0c2VsZg0KICAgZG9lcyBub3QgZGV0ZXJtaW5lIHRoZSBsb2Nh dGlvbiBvZiB0aGUgcmVjZWl2ZXIocykuICBUaGUgbXVsdGljYXN0DQogICByb3V0aW5nIHByb3Rv Y29sLCBhbmQgdGhlIG5ldHdvcmstYmFzZWQgc3RhdGUgdGhlIHByb3RvY29sIGNyZWF0ZXMsDQog ICBkZXRlcm1pbmVzIHdoZXJlIHRoZSByZWNlaXZlcnMgYXJlIGxvY2F0ZWQuDQoNCiAgIEluIHRo ZSBjb250ZXh0IG9mIExJU1AsIGEgbXVsdGljYXN0IGdyb3VwIGFkZHJlc3MgaXMgYm90aCBhbiBF SUQgYW5kDQogICBhIFJvdXRpbmcgTG9jYXRvci4gIFRoZXJlZm9yZSwgbm8gc3BlY2lmaWMgc2Vt YW50aWMgb3IgYWN0aW9uIG5lZWRzDQogICB0byBiZSB0YWtlbiBmb3IgYSBkZXN0aW5hdGlvbiBh ZGRyZXNzLCBhcyBpdCB3b3VsZCBhcHBlYXIgaW4gYW4gSVANCiAgIGhlYWRlci4gIFRoZXJlZm9y ZSwgYSBncm91cCBhZGRyZXNzIHRoYXQgYXBwZWFycyBpbiBhbiBpbm5lciBJUA0KICAgaGVhZGVy IGJ1aWx0IGJ5IGEgc291cmNlIGhvc3Qgd2lsbCBiZSB1c2VkIGFzIHRoZSBkZXN0aW5hdGlvbiBF SUQuDQogICBUaGUgb3V0ZXIgSVAgaGVhZGVyICh0aGUgZGVzdGluYXRpb24gUm91dGluZyBMb2Nh dG9yIGFkZHJlc3MpLA0KICAgcHJlcGVuZGVkIGJ5IGEgTElTUCByb3V0ZXIsIHdpbGwgdXNlIHRo ZSBzYW1lIGdyb3VwIGFkZHJlc3MgYXMgdGhlDQogICBkZXN0aW5hdGlvbiBSb3V0aW5nIExvY2F0 b3IuDQoNCiAgIEhhdmluZyBzYWlkIHRoYXQsIG9ubHkgdGhlIHNvdXJjZSBFSUQgYW5kIHNvdXJj ZSBSb3V0aW5nIExvY2F0b3INCiAgIG5lZWRzIHRvIGJlIGRlYWx0IHdpdGguICBUaGVyZWZvcmUs IGFuIElUUiBtZXJlbHkgbmVlZHMgdG8gcHV0IGl0cw0KICAgb3duIElQIGFkZHJlc3MgaW4gdGhl IHNvdXJjZSBSb3V0aW5nIExvY2F0b3IgZmllbGQgd2hlbiBwcmVwZW5kaW5nDQogICB0aGUgb3V0 ZXIgSVAgaGVhZGVyLiAgVGhpcyBzb3VyY2UgUm91dGluZyBMb2NhdG9yIGFkZHJlc3MsIGxpa2Ug YW55DQogICBvdGhlciBSb3V0aW5nIExvY2F0b3IgYWRkcmVzcyBNVVNUIGJlIGdsb2JhbGx5IHJv dXRhYmxlLg0KDQogICBUaGVyZWZvcmUsIGFuIEVJRC10by1STE9DIG1hcHBpbmcgZG9lcyBub3Qg bmVlZCB0byBiZSBwZXJmb3JtZWQgYnkgYW4NCiAgIElUUiB3aGVuIGEgcmVjZWl2ZWQgZGF0YSBw YWNrZXQgaXMgYSBtdWx0aWNhc3QgZGF0YSBwYWNrZXQgb3Igd2hlbg0KICAgcHJvY2Vzc2luZyBh IHNvdXJjZS1zcGVjaWZpYyBKb2luIChlaXRoZXIgYnkgSUdNUHYzIG9yIFBJTSkuICBCdXQgdGhl DQogICBzb3VyY2UgUm91dGluZyBMb2NhdG9yIGlzIGRlY2lkZWQgYnkgdGhlIG11bHRpY2FzdCBy b3V0aW5nIHByb3RvY29sDQogICBpbiBhIHJlY2VpdmVyIHNpdGUuICBUaGF0IGlzLCBhbiBFSUQg dG8gUm91dGluZyBMb2NhdG9yIHRyYW5zbGF0aW9uDQogICBpcyBkb25lIGF0IGNvbnRyb2wtdGlt ZS4NCg0KICAgQW5vdGhlciBhcHByb2FjaCBpcyB0byBoYXZlIHRoZSBJVFIgbm90IGVuY2Fwc3Vs YXRlIGEgbXVsdGljYXN0DQogICBwYWNrZXQgYW5kIGFsbG93IHRoZSB0aGUgaG9zdCBidWlsdCBw YWNrZXQgdG8gZmxvdyBpbnRvIHRoZSBjb3JlIGV2ZW4NCiAgIGlmIHRoZSBzb3VyY2UgYWRkcmVz cyBpcyBhbGxvY2F0ZWQgb3V0IG9mIHRoZSBFSUQgbmFtZXNwYWNlLiAgSWYgdGhlDQogICBSUEYt VmVjdG9yIFRMViBbUlBGVl0gaXMgdXNlZCBieSBQSU0gaW4gdGhlIGNvcmUsIHRoZW4gY29yZSBy b3V0ZXJzDQogICBjYW4gUlBGIHRvIHRoZSBJVFIgKHRoZSBMb2NhdG9yIGFkZHJlc3Mgd2hpY2gg aXMgaW5qZWN0ZWQgaW50byBjb3JlDQogICByb3V0aW5nKSByYXRoZXIgdGhhbiB0aGUgaG9zdCBz b3VyY2UgYWRkcmVzcyAodGhlIEVJRCBhZGRyZXNzIHdoaWNoDQogICBpcyBub3QgaW5qZWN0ZWQg aW50byBjb3JlIHJvdXRpbmcpLg0KDQogICBUbyBhdm9pZCBhbnkgRUlELWJhc2VkIG11bHRpY2Fz dCBzdGF0ZSBpbiB0aGUgbmV0d29yayBjb3JlLCB0aGUgZmlyc3QNCiAgIGFwcHJvYWNoIGlzIGNo b3NlbiBmb3IgTElTUC1NdWx0aWNhc3QuICBEZXRhaWxzIGZvciBMSVNQLU11bHRpY2FzdA0KICAg YW5kIEludGVyd29ya2luZyB3aXRoIG5vbi1MSVNQIHNpdGVzIGlzIGRlc2NyaWJlZCBpbiBzcGVj aWZpY2F0aW9uDQogICBbTUxJU1BdLg0KDQoNCg0KDQoNCg0KDQoNCkZhcmluYWNjaSwgZXQgYWwu ICAgICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdlIDYwXQ0K DA0KSW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQ KSAgICAgSmFudWFyeSAyMDEwDQoNCg0KMTIuICBTZWN1cml0eSBDb25zaWRlcmF0aW9ucw0KDQog ICBJdCBpcyBiZWxpZXZlZCB0aGF0IG1vc3Qgb2YgdGhlIHNlY3VyaXR5IG1lY2hhbmlzbXMgd2ls bCBiZSBwYXJ0IG9mDQogICB0aGUgbWFwcGluZyBkYXRhYmFzZSBzZXJ2aWNlIHdoZW4gdXNpbmcg Y29udHJvbCBwbGFuZSBwcm9jZWR1cmVzIGZvcg0KICAgb2J0YWluaW5nIEVJRC10by1STE9DIG1h cHBpbmdzLiAgRm9yIGRhdGEgcGxhbmUgdHJpZ2dlcmVkIG1hcHBpbmdzLA0KICAgYXMgZGVzY3Jp YmVkIGluIHRoaXMgc3BlY2lmaWNhdGlvbiwgcHJvdGVjdGlvbiBpcyBwcm92aWRlZCBhZ2FpbnN0 DQogICBFVFIgc3Bvb2ZpbmcgYnkgdXNpbmcgUmV0dXJuLSBSb3V0YWJpbGl0eSBtZWNoYW5pc21z IGV2aWRlbmNlZCBieSB0aGUNCiAgIHVzZSBvZiBhIDI0LWJpdCBOb25jZSBmaWVsZCBpbiB0aGUg TElTUCBlbmNhcHN1bGF0aW9uIGhlYWRlciBhbmQgYQ0KICAgNjQtYml0IE5vbmNlIGZpZWxkIGlu IHRoZSBMSVNQIGNvbnRyb2wgbWVzc2FnZS4gIFRoZSBub25jZSwgY291cGxlZA0KICAgd2l0aCB0 aGUgSVRSIGFjY2VwdGluZyBvbmx5IHNvbGljaXRlZCBNYXAtUmVwbGllcyBnb2VzIGEgbG9uZyB3 YXkNCiAgIHRvd2FyZCBwcm92aWRpbmcgZGVjZW50IGF1dGhlbnRpY2F0aW9uLg0KDQogICBMSVNQ IGRvZXMgbm90IHJlbHkgb24gYSBQS0kgaW5mcmFzdHJ1Y3R1cmUgb3IgYSBtb3JlIGhlYXZ5IHdl aWdodA0KICAgYXV0aGVudGljYXRpb24gc3lzdGVtLiAgVGhlc2Ugc3lzdGVtcyBjaGFsbGVuZ2Ug dGhlIHNjYWxhYmlsaXR5IG9mDQogICBMSVNQIHdoaWNoIHdhcyBhIHByaW1hcnkgZGVzaWduIGdv YWwuDQoNCiAgIERvUyBhdHRhY2sgcHJldmVudGlvbiB3aWxsIGRlcGVuZCBvbiBpbXBsZW1lbnRh dGlvbnMgcmF0ZS1saW1pdGluZw0KICAgTWFwLVJlcXVlc3RzIGFuZCBNYXAtUmVwbGllcyB0byB0 aGUgY29udHJvbCBwbGFuZSBhcyB3ZWxsIGFzIHJhdGUtDQogICBsaW1pdGluZyB0aGUgbnVtYmVy IG9mIGRhdGEtdHJpZ2dlcmVkIE1hcC1SZXBsaWVzLg0KDQogICBUbyBkZWFsIHdpdGggbWFwLWNh Y2hlIGV4aGF1c3Rpb24gYXR0ZW1wdHMgaW4gYW4gSVRSL1BUUiwgdGhlDQogICBpbXBsZW1lbnRh dGlvbiBzaG91bGQgY29uc2lkZXIgcHV0dGluZyBhIG1heGltdW0gY2FwIG9uIHRoZSBudW1iZXIg b2YNCiAgIGVudHJpZXMgc3RvcmVkIHdpdGggYSByZXNlcnZlIGxpc3QgZm9yIHNwZWNpYWwgb3Ig ZnJlcXVlbnRseSBhY2Nlc3NlZA0KICAgc2l0ZXMuICBUaGlzIHNob3VsZCBiZSBhIGNvbmZpZ3Vy YXRpb24gcG9saWN5IGNvbnRyb2wgc2V0IGJ5IHRoZQ0KICAgbmV0d29yayBhZG1pbmlzdHJhdG9y IHdobyBtYW5hZ2VzIElUUnMgYW5kIFBUUnMuDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVz IEp1bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1BhZ2UgNjFdDQoMDQpJbnRlcm5ldC1EcmFm dCAgICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIw MTANCg0KDQoxMy4gIFByb3RvdHlwZSBQbGFucyBhbmQgU3RhdHVzDQoNCiAgIFRoZSBvcGVyYXRv ciBjb21tdW5pdHkgaGFzIHJlcXVlc3RlZCB0aGF0IHRoZSBJRVRGIHRha2UgYSBwcmFjdGljYWwN CiAgIGFwcHJvYWNoIHRvIHNvbHZpbmcgdGhlIHNjYWxpbmcgcHJvYmxlbXMgYXNzb2NpYXRlZCB3 aXRoIGdsb2JhbA0KICAgcm91dGluZyBzdGF0ZSBncm93dGguICBUaGlzIGRvY3VtZW50IG9mZmVy cyBhIHNpbXBsZSBzb2x1dGlvbiB3aGljaA0KICAgaXMgaW50ZW5kZWQgZm9yIHVzZSBpbiBhIHBp bG90IHByb2dyYW0gdG8gZ2FpbiBleHBlcmllbmNlIGluIHdvcmtpbmcNCiAgIG9uIHRoaXMgcHJv YmxlbS4NCg0KICAgVGhlIGF1dGhvcnMgaG9wZSB0aGF0IHB1Ymxpc2hpbmcgdGhpcyBzcGVjaWZp Y2F0aW9uIHdpbGwgYWxsb3cgdGhlDQogICByYXBpZCBpbXBsZW1lbnRhdGlvbiBvZiBtdWx0aXBs ZSB2ZW5kb3IgcHJvdG90eXBlcyBhbmQgZGVwbG95bWVudCBvbg0KICAgYSBzbWFsbCBzY2FsZS4g IERvaW5nIHRoaXMgd2lsbCBoZWxwIHRoZSBjb21tdW5pdHk6DQoNCiAgIG8gIERlY2lkZSB3aGV0 aGVyIGEgbmV3IEVJRC10by1STE9DIG1hcHBpbmcgZGF0YWJhc2UgaW5mcmFzdHJ1Y3R1cmUNCiAg ICAgIGlzIG5lZWRlZCBvciBpZiBhIHNpbXBsZSwgVURQLWJhc2VkLCBkYXRhLXRyaWdnZXJlZCBh cHByb2FjaCBpcw0KICAgICAgZmxleGlibGUgYW5kIHJvYnVzdCBlbm91Z2guDQoNCiAgIG8gIEV4 cGVyaW1lbnQgd2l0aCBwcm92aWRlci1pbmRlcGVuZGVudCBhc3NpZ25tZW50IG9mIEVJRHMgd2hp bGUgYXQNCiAgICAgIHRoZSBzYW1lIHRpbWUgZGVjcmVhc2luZyB0aGUgc2l6ZSBvZiBERlogcm91 dGluZyB0YWJsZXMgdGhyb3VnaA0KICAgICAgdGhlIHVzZSBvZiB0b3BvbG9naWNhbGx5LWFsaWdu ZWQsIHByb3ZpZGVyLWJhc2VkIFJMT0NzLg0KDQogICBvICBEZXRlcm1pbmUgd2hldGhlciBtdWx0 aXBsZSBsZXZlbHMgb2YgdHVubmVsaW5nIGNhbiBiZSB1c2VkIGJ5IElTUHMNCiAgICAgIHRvIGFj aGlldmUgdGhlaXIgVHJhZmZpYyBFbmdpbmVlcmluZyBnb2FscyB3aGlsZSBzaW11bHRhbmVvdXNs eQ0KICAgICAgcmVtb3ZpbmcgdGhlIG1vcmUgc3BlY2lmaWMgcm91dGVzIGN1cnJlbnRseSBpbmpl Y3RlZCBpbnRvIHRoZQ0KICAgICAgZ2xvYmFsIHJvdXRpbmcgc3lzdGVtIGZvciB0aGlzIHB1cnBv c2UuDQoNCiAgIG8gIEV4cGVyaW1lbnQgd2l0aCBtb2JpbGl0eSB0byBkZXRlcm1pbmUgaWYgYm90 aCBhY2NlcHRhYmxlDQogICAgICBjb252ZXJnZW5jZSBhbmQgc2Vzc2lvbiBjb250aW51aXR5IHBy b3BlcnRpZXMgY2FuIGJlIHNjYWxhYmx5DQogICAgICBpbXBsZW1lbnRlZCB0byBzdXBwb3J0IGJv dGggaW5kaXZpZHVhbCBkZXZpY2Ugcm9hbWluZyBhbmQgc2l0ZQ0KICAgICAgc2VydmljZSBwcm92 aWRlciBjaGFuZ2VzLg0KDQogICBIZXJlIGlzIGEgcm91Z2ggc2V0IG9mIG1pbGVzdG9uZXM6DQoN CiAgIDEuICBJbnRlcm9wZXJhYmxlIGltcGxlbWVudGF0aW9ucyBoYXZlIGJlZW4gYXZhaWxhYmxl IHNpbmNlIHRoZQ0KICAgICAgIGJlZ2lubmluZyBvZiAyMDA5LiAgV2UgYXJlIHRyeWluZyB0byBj b252ZXJnZSBvbiBhIHBhY2tldCBmb3JtYXQNCiAgICAgICBzbyBpbXBsZW1lbnRhdGlvbnMgY2Fu IGNvbnZlcmdlIG9uIHRoZSAtMDQgYW5kIGxhdGVyIGRyYWZ0cy4NCg0KICAgMi4gIENvbnRpbnVl IHBpbG90IGRlcGxveW1lbnQgdXNpbmcgTElTUC1BTFQgYXMgdGhlIGRhdGFiYXNlIG1hcHBpbmcN CiAgICAgICBtZWNoYW5pc20uDQoNCiAgIDMuICBDb250aW51ZSBwcm90b3R5cGluZyBhbmQgc3R1 ZHlpbmcgb3RoZXIgZGF0YWJhc2UgbG9va3VwIHNjaGVtZXMsDQogICAgICAgYmUgaXQgRE5TLCBE SFRzLCBDT05TLCBBTFQsIE5FUkQsIG9yIG90aGVyIG1lY2hhbmlzbXMuDQoNCiAgIDQuICBJbXBs ZW1lbnQgdGhlIExJU1AgTXVsdGljYXN0IGRyYWZ0IFtNTElTUF0uDQoNCiAgIDUuICBJbXBsZW1l bnQgdGhlIExJU1AgTW9iaWxlIE5vZGUgZHJhZnQgW0xJU1AtTU5dLg0KDQogICA2LiAgUmVzZWFy Y2ggbW9yZSBvbiBob3cgcG9saWN5IGFmZmVjdHMgd2hhdCBnZXRzIHJldHVybmVkIGluIGEgTWFw LQ0KICAgICAgIFJlcGx5IGZyb20gYW4gRVRSLg0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAg ICAgICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1BhZ2UgNjJdDQoMDQpJ bnRlcm5ldC1EcmFmdCAgICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAg ICBKYW51YXJ5IDIwMTANCg0KDQogICA3LiAgQ29udGludWUgdG8gZXhwZXJpbWVudCB3aXRoIG1p eGVkIGxvY2F0b3Itc2V0cyB0byB1bmRlcnN0YW5kIGhvdw0KICAgICAgIExJU1AgY2FuIGhlbHAg dGhlIElQdjQgdG8gSVB2NiB0cmFuc2l0aW9uLg0KDQogICA4LiAgQWRkIG1vcmUgcm9idXN0bmVz cyB0byBsb2NhdG9yIHJlYWNoYWJpbGl0eSBiZXR3ZWVuIExJU1Agc2l0ZXMuDQoNCiAgIDkuICBD b250aW51ZSB0aGUgZGVwbG95bWVudCBvZiBQcm94eS1FVFJzIChQRVRScykgZm9yIHVzZXMgbGlr ZSB1UlBGDQogICAgICAgYXZvaWRhbmNlLCBJUHY2IGNvbm5lY3Rpdml0eSwgYW5kIExJU1AtTU4u DQoNCiAgIEFzIG9mIHRoaXMgd3JpdGluZyB0aGUgZm9sbG93aW5nIGFjY29tcGxpc2htZW50cyBo YXZlIGJlZW4gYWNoaWV2ZWQ6DQoNCiAgIDEuICAgQSB1bml0LSBhbmQgc3lzdGVtLXRlc3RlZCBz b2Z0d2FyZSBzd2l0Y2hpbmcgaW1wbGVtZW50YXRpb24gaGFzDQogICAgICAgIGJlZW4gY29tcGxl dGVkIG9uIGNpc2NvIE5YLU9TIGZvciB0aGlzIGRyYWZ0IGZvciBib3RoIElQdjQgYW5kDQogICAg ICAgIElQdjYgRUlEcyB1c2luZyBhIG1peGVkIGxvY2F0b3Itc2V0IG9mIElQdjQgYW5kIElQdjYg bG9jYXRvcnMuDQoNCiAgIDIuICAgQSB1bml0LSBhbmQgc3lzdGVtLXRlc3RlZCBzb2Z0d2FyZSBz d2l0Y2hpbmcgaW1wbGVtZW50YXRpb24gb24NCiAgICAgICAgY2lzY28gTlgtT1MgaGFzIGJlZW4g Y29tcGxldGVkIGZvciBkcmFmdCBbQUxUXS4NCg0KICAgMy4gICBBIHVuaXQtIGFuZCBzeXN0ZW0t dGVzdGVkIHNvZnR3YXJlIHN3aXRjaGluZyBpbXBsZW1lbnRhdGlvbiBvbg0KICAgICAgICBjaXNj byBOWC1PUyBoYXMgYmVlbiBjb21wbGV0ZWQgZm9yIGRyYWZ0IFtJTlRFUldPUktdLiAgU3VwcG9y dA0KICAgICAgICBmb3IgSVB2NCB0cmFuc2xhdGlvbiBpcyBwcm92aWRlZCBhbmQgUFRSIHN1cHBv cnQgZm9yIElQdjQgYW5kDQogICAgICAgIElQdjYgaXMgcHJvdmlkZWQuDQoNCiAgIDQuICAgVGhl IGNpc2NvIE5YLU9TIGltcGxlbWVudGF0aW9uIHN1cHBvcnRzIGFuIGV4cGVyaW1lbnRhbA0KICAg ICAgICBtZWNoYW5pc20gZm9yIHNsb3cgbW9iaWxpdHkuDQoNCiAgIDUuICAgVGhlcmUgYXJlIDUg TElTUCBpbXBsZW1lbnRhdGlvbnMgdGhhdCBleGlzdCBhbmQgdGhlIGZpcnN0IDQNCiAgICAgICAg YmVsb3cgaGF2ZSBnb25lIHRocm91Z2ggaW50ZXJvcGVyYWJpbGl0eSB0ZXN0aW5nIGF0IElFVEYN CiAgICAgICAgSGlyb3NoaW1hLCBiYXNlZCBvbiB0aGUgZHJhZnQtaWV0Zi1saXNwLTA1LnR4dCBz cGVjOg0KDQogICAgICAgIDEuICBjaXNjbyBOWC1PUw0KDQogICAgICAgIDIuICBPcGVuTElTUA0K DQogICAgICAgIDMuICBMSVNQLUNsaWNrDQoNCiAgICAgICAgNC4gIFpMaXNwDQoNCiAgICAgICAg NS4gIGNpc2NvIElPUw0KDQogICA2LiAgIERhdmUgTWV5ZXIsIFZpbmNlIEZ1bGxlciwgRGFycmVs IExld2lzLCBHcmVnIFNoZXBoZXJkLCBhbmQNCiAgICAgICAgQW5kcmV3IFBhcnRhbiBjb250aW51 ZSB0byB0ZXN0IGFsbCB0aGUgZmVhdHVyZXMgZGVzY3JpYmVkIGFib3ZlDQogICAgICAgIG9uIGEg ZHVhbC1zdGFjayBpbmZyYXN0cnVjdHVyZS4NCg0KICAgNy4gICBEYXJyZWwgTGV3aXMgYW5kIERh dmUgTWV5ZXIgaGF2ZSBkZXBsb3llZCBib3RoIExJU1AgdHJhbnNsYXRpb24NCiAgICAgICAgYW5k IExJU1AgUFRSIHN1cHBvcnQgaW4gdGhlIHBpbG90IG5ldHdvcmsuICBQb2ludCB5b3VyIGJyb3dz ZXINCiAgICAgICAgdG8gaHR0cDovL3d3dy5saXNwNC5uZXQgdG8gc2VlIHRyYW5zbGF0aW9uIGhh cHBlbmluZyBpbiBhY3Rpb24NCiAgICAgICAgc28geW91ciBub24tTElTUCBzaXRlIGNhbiBhY2Nl c3MgYSB3ZWIgc2VydmVyIGluIGEgTElTUCBzaXRlLg0KDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFs LiAgICAgICAgIEV4cGlyZXMgSnVseSAxNiwgMjAxMCAgICAgICAgICAgICAgICBbUGFnZSA2M10N CgwNCkludGVybmV0LURyYWZ0ICAgIExvY2F0b3IvSUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElT UCkgICAgIEphbnVhcnkgMjAxMA0KDQoNCiAgIDguICAgU29vbiBodHRwOi8vd3d3Lmxpc3A2Lm5l dCB3aWxsIHdvcmsgd2hlcmUgeW91ciBJUHY2IExJU1Agc2l0ZQ0KICAgICAgICBjYW4gdGFsayB0 byBhIElQdjYgd2ViIHNlcnZlciBpbiBhIExJU1Agc2l0ZSBieSB1c2luZyBtaXhlZA0KICAgICAg ICBhZGRyZXNzLWZhbWlseSBiYXNlZCBsb2NhdG9ycy4NCg0KICAgOS4gICBBbiBwdWJsaWMgZG9t YWluIGltcGxlbWVudGF0aW9uIG9mIExJU1AgaXMgdW5kZXJ3YXkuICBTZWUNCiAgICAgICAgW09Q RU5MSVNQXSBmb3IgZGV0YWlscy4NCg0KICAgMTAuICBXZSBoYXZlIGRlcGxveWVkIE1hcC1SZXNv bHZlcnMgYW5kIE1hcC1TZXJ2ZXJzIG9uIHRoZSBMSVNQIHBpbG90DQogICAgICAgIG5ldHdvcmsg dG8gZ2F0aGVyIGV4cGVyaWVuY2Ugd2l0aCBbTElTUC1NU10uICBUaGUgZmlyc3QgbGF5ZXIgb2YN CiAgICAgICAgdGhlIGFyY2hpdGVjdHVyZSBhcmUgdGhlIHhUUnMgd2hpY2ggdXNlIE1hcC1TZXJ2 ZXJzIGZvciBFSUQtDQogICAgICAgIHByZWZpeCByZWdpc3RyYXRpb24gYW5kIE1hcC1SZXNvbHZl cnMgZm9yIEVJRC10by1STE9DIG1hcHBpbmcNCiAgICAgICAgcmVzb2x1dGlvbi4gIFRoZSBzZWNv bmQgbGF5ZXIgYXJlIHRoZSBNYXAtUmVzb2x2ZXJzIGFuZCBNYXAtDQogICAgICAgIFNlcnZlcnMg d2hpY2ggY29ubmVjdCB0byB0aGUgQUxUIEJHUCBwZWVyaW5nIGluZnJhc3RydWN0dXJlLg0KICAg ICAgICBBbmQgdGhlIHRoaXJkIGxheWVyIGFyZSBBTFQtcm91dGVycyB3aGljaCBhZ2dyZWdhdGUg RUlELXByZWZpeGVzDQogICAgICAgIGFuZCBmb3J3YXJkIE1hcC1SZXF1ZXN0cy4NCg0KICAgMTEu ICBBIGNpc2NvIElPUyBpbXBsZW1lbnRhdGlvbiBpcyB1bmRlcndheSB3aGljaCBjdXJyZW50bHkg c3VwcG9ydHMNCiAgICAgICAgSVB2NCBlbmNhcHN1bGF0aW9uIGFuZCBkZWNhcHN1bGF0aW9uIGZl YXR1cmVzLg0KDQogICAxMi4gIEEgTElTUCByb3V0ZXIgYmFzZWQgTElHIGltcGxlbWVudGF0aW9u IGlzIHN1cHBvcnRlZCwgZGVwbG95ZWQsDQogICAgICAgIGFuZCB1c2VkIGRhaWx5IHRvIGRlYnVn IGFuZCB0ZXN0IHRoZSBMSVNQIHBpbG90IG5ldHdvcmsuICBTZWUNCiAgICAgICAgW0xJR10gZm9y IGRldGFpbHMuDQoNCiAgIDEzLiAgQSBMaW51eCBpbXBsZW1lbnRhdGlvbiBvZiBMSUcgaGFzIGJl ZW4gbWFkZSBhdmFpbGFibGUgYW5kDQogICAgICAgIHN1cHBvcnRlZCBieSBEYXZlIE1leWVyLiAg SXQgY2FuIGJlIHJ1biBvbiBhbnkgTGludXggc3lzdGVtDQogICAgICAgIHdoaWNoIHJlc2lkZXMg aW4gZWl0aGVyIGEgTElTUCBzaXRlIG9yIG5vbi1MSVNQIHNpdGUuICBTZWUgW0xJR10NCiAgICAg ICAgZm9yIGRldGFpbHMuICBQdWJsaWMgZG9tYWluIGNvZGUgY2FuIGJlIGRvd25sb2FkZWQgZnJv bQ0KICAgICAgICBodHRwOi8vZ2l0aHViLmNvbS9kYXZpZG1leWVyL2xpZy90cmVlL21hc3Rlci4N Cg0KICAgMTQuICBBbiBleHBlcmltZW50YWwgaW1wbGVtZW50YXRpb24gaGFzIGJlZW4gd3JpdHRl biBmb3IgdGhyZWUNCiAgICAgICAgbG9jYXRvciByZWFjaGFiaWxpdHkgYWxnb3JpdGhtcy4gIFR3 byBhcmUgdGhlIEVjaG8tTm9uY2luZyBhbmQNCiAgICAgICAgUkxPQy1Qcm9iaW5nIGFsZ29yaXRo bXMgd2hpY2ggYXJlIGRvY3VtZW50ZWQgaW4gdGhpcw0KICAgICAgICBzcGVjaWZpY2F0aW9uLiAg VGhlIHRoaXJkIGlzIGNhbGxlZCBUQ1AtY291bnRzIHdoaWNoIHdpbGwgYmUNCiAgICAgICAgZG9j dW1lbnRlZCBpbiBmdXR1cmUgZHJhZnRzLg0KDQogICAxNS4gIFRoZSBMSVNQIHBpbG90IG5ldHdv cmsgaGFzIGJlZW4gY29udmVydGVkIGZyb20gdXNpbmcgTUQ1IEhNQUMNCiAgICAgICAgYXV0aGVu dGljYXRpb24gZm9yIE1hcC1SZWdpc3RlciBtZXNzYWdlcyB0byBTSEEtMSBITUFDDQogICAgICAg IGF1dGhlbnRpY2F0aW9uLiAgRVRScyBzZW5kIHdpdGggU0hBLTEgYnV0IE1hcC1TZXJ2ZXJzIGNh bg0KICAgICAgICByZWNlaXZlZCBmcm9tIGVpdGhlciBmb3IgY29tcGF0aWJpbGl0eSBwdXJwb3Nl cy4NCg0KICAgSWYgaW50ZXJlc3RlZCBpbiB3cml0aW5nIGEgTElTUCBpbXBsZW1lbnRhdGlvbiwg dGVzdGluZyBhbnkgb2YgdGhlDQogICBMSVNQIGltcGxlbWVudGF0aW9ucywgb3Igd2FudCB0byBi ZSBwYXJ0IG9mIHRoZSBMSVNQIHBpbG90IHByb2dyYW0sDQogICBwbGVhc2UgY29udGFjdCBsaXNw QGlldGYub3JnLg0KDQoNCg0KDQoNCg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAgICAgICAgRXhw aXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdlIDY0XQ0KDA0KSW50ZXJuZXQt RHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAgICAgSmFudWFy eSAyMDEwDQoNCg0KMTQuICBSZWZlcmVuY2VzDQoNCjE0LjEuICBOb3JtYXRpdmUgUmVmZXJlbmNl cw0KDQogICBbUkZDMDc2OF0gIFBvc3RlbCwgSi4sICJVc2VyIERhdGFncmFtIFByb3RvY29sIiwg U1REIDYsIFJGQyA3NjgsDQogICAgICAgICAgICAgIEF1Z3VzdCAxOTgwLg0KDQogICBbUkZDMTE5 MV0gIE1vZ3VsLCBKLiBhbmQgUy4gRGVlcmluZywgIlBhdGggTVRVIGRpc2NvdmVyeSIsIFJGQyAx MTkxLA0KICAgICAgICAgICAgICBOb3ZlbWJlciAxOTkwLg0KDQogICBbUkZDMTQ5OF0gIFNhbHR6 ZXIsIEouLCAiT24gdGhlIE5hbWluZyBhbmQgQmluZGluZyBvZiBOZXR3b3JrDQogICAgICAgICAg ICAgIERlc3RpbmF0aW9ucyIsIFJGQyAxNDk4LCBBdWd1c3QgMTk5My4NCg0KICAgW1JGQzE5NTVd ICBIaW5kZW4sIFIuLCAiTmV3IFNjaGVtZSBmb3IgSW50ZXJuZXQgUm91dGluZyBhbmQNCiAgICAg ICAgICAgICAgQWRkcmVzc2luZyAoRU5DQVBTKSBmb3IgSVBORyIsIFJGQyAxOTU1LCBKdW5lIDE5 OTYuDQoNCiAgIFtSRkMyMTE5XSAgQnJhZG5lciwgUy4sICJLZXkgd29yZHMgZm9yIHVzZSBpbiBS RkNzIHRvIEluZGljYXRlDQogICAgICAgICAgICAgIFJlcXVpcmVtZW50IExldmVscyIsIEJDUCAx NCwgUkZDIDIxMTksIE1hcmNoIDE5OTcuDQoNCiAgIFtSRkMyNDA0XSAgTWFkc29uLCBDLiBhbmQg Ui4gR2xlbm4sICJUaGUgVXNlIG9mIEhNQUMtU0hBLTEtOTYgd2l0aGluDQogICAgICAgICAgICAg IEVTUCBhbmQgQUgiLCBSRkMgMjQwNCwgTm92ZW1iZXIgMTk5OC4NCg0KICAgW1JGQzI0MzRdICBO YXJ0ZW4sIFQuIGFuZCBILiBBbHZlc3RyYW5kLCAiR3VpZGVsaW5lcyBmb3IgV3JpdGluZyBhbg0K ICAgICAgICAgICAgICBJQU5BIENvbnNpZGVyYXRpb25zIFNlY3Rpb24gaW4gUkZDcyIsIEJDUCAy NiwgUkZDIDI0MzQsDQogICAgICAgICAgICAgIE9jdG9iZXIgMTk5OC4NCg0KICAgW1JGQzI3ODRd ICBGYXJpbmFjY2ksIEQuLCBMaSwgVC4sIEhhbmtzLCBTLiwgTWV5ZXIsIEQuLCBhbmQgUC4NCiAg ICAgICAgICAgICAgVHJhaW5hLCAiR2VuZXJpYyBSb3V0aW5nIEVuY2Fwc3VsYXRpb24gKEdSRSki LCBSRkMgMjc4NCwNCiAgICAgICAgICAgICAgTWFyY2ggMjAwMC4NCg0KICAgW1JGQzMwNTZdICBD YXJwZW50ZXIsIEIuIGFuZCBLLiBNb29yZSwgIkNvbm5lY3Rpb24gb2YgSVB2NiBEb21haW5zDQog ICAgICAgICAgICAgIHZpYSBJUHY0IENsb3VkcyIsIFJGQyAzMDU2LCBGZWJydWFyeSAyMDAxLg0K DQogICBbUkZDMzE2OF0gIFJhbWFrcmlzaG5hbiwgSy4sIEZsb3lkLCBTLiwgYW5kIEQuIEJsYWNr LCAiVGhlIEFkZGl0aW9uDQogICAgICAgICAgICAgIG9mIEV4cGxpY2l0IENvbmdlc3Rpb24gTm90 aWZpY2F0aW9uIChFQ04pIHRvIElQIiwNCiAgICAgICAgICAgICAgUkZDIDMxNjgsIFNlcHRlbWJl ciAyMDAxLg0KDQogICBbUkZDMzc3NV0gIEpvaG5zb24sIEQuLCBQZXJraW5zLCBDLiwgYW5kIEou IEFya2tvLCAiTW9iaWxpdHkgU3VwcG9ydA0KICAgICAgICAgICAgICBpbiBJUHY2IiwgUkZDIDM3 NzUsIEp1bmUgMjAwNC4NCg0KICAgW1JGQzQwODZdICBFYXN0bGFrZSwgRC4sIFNjaGlsbGVyLCBK LiwgYW5kIFMuIENyb2NrZXIsICJSYW5kb21uZXNzDQogICAgICAgICAgICAgIFJlcXVpcmVtZW50 cyBmb3IgU2VjdXJpdHkiLCBCQ1AgMTA2LCBSRkMgNDA4NiwgSnVuZSAyMDA1Lg0KDQogICBbUkZD NDQyM10gIE1vc2tvd2l0eiwgUi4gYW5kIFAuIE5pa2FuZGVyLCAiSG9zdCBJZGVudGl0eSBQcm90 b2NvbA0KICAgICAgICAgICAgICAoSElQKSBBcmNoaXRlY3R1cmUiLCBSRkMgNDQyMywgTWF5IDIw MDYuDQoNCiAgIFtSRkM0NjM0XSAgRWFzdGxha2UsIEQuIGFuZCBULiBIYW5zZW4sICJVUyBTZWN1 cmUgSGFzaCBBbGdvcml0aG1zDQogICAgICAgICAgICAgIChTSEEgYW5kIEhNQUMtU0hBKSIsIFJG QyA0NjM0LCBKdWx5IDIwMDYuDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGly ZXMgSnVseSAxNiwgMjAxMCAgICAgICAgICAgICAgICBbUGFnZSA2NV0NCgwNCkludGVybmV0LURy YWZ0ICAgIExvY2F0b3IvSUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkg MjAxMA0KDQoNCiAgIFtSRkM0ODY2XSAgQXJra28sIEouLCBWb2d0LCBDLiwgYW5kIFcuIEhhZGRh ZCwgIkVuaGFuY2VkIFJvdXRlDQogICAgICAgICAgICAgIE9wdGltaXphdGlvbiBmb3IgTW9iaWxl IElQdjYiLCBSRkMgNDg2NiwgTWF5IDIwMDcuDQoNCiAgIFtSRkM0OTg0XSAgTWV5ZXIsIEQuLCBa aGFuZywgTC4sIGFuZCBLLiBGYWxsLCAiUmVwb3J0IGZyb20gdGhlIElBQg0KICAgICAgICAgICAg ICBXb3Jrc2hvcCBvbiBSb3V0aW5nIGFuZCBBZGRyZXNzaW5nIiwgUkZDIDQ5ODQsDQogICAgICAg ICAgICAgIFNlcHRlbWJlciAyMDA3Lg0KDQogICBbVURQLVRVTk5FTFNdDQogICAgICAgICAgICAg IEV1YmFua3MsIE0uIGFuZCBQLiBDaGltZW50bywgIlVEUCBDaGVja3N1bXMgZm9yIFR1bm5lbGVk DQogICAgICAgICAgICAgIFBhY2tldHMiIiwgZHJhZnQtZXViYW5rcy1jaGltZW50by02bWFuLTAw LnR4dCAod29yayBpbg0KICAgICAgICAgICAgICBwcm9ncmVzcyksIEZlYnJ1YXJ5IDIwMDkuDQoN CjE0LjIuICBJbmZvcm1hdGl2ZSBSZWZlcmVuY2VzDQoNCiAgIFtBRkldICAgICAgSUFOQSwgIkFk ZHJlc3MgRmFtaWx5IEluZGljYXRvcnMgKEFGSXMpIiwgQUREUkVTUyBGQU1JTFkNCiAgICAgICAg ICAgICAgTlVNQkVSUyBodHRwOi8vd3d3LmlhbmEub3JnL251bWJlcnMuaHRtbCwgRmVidWFyeSAy MDA3Lg0KDQogICBbQUxUXSAgICAgIEZhcmluYWNjaSwgRC4sIEZ1bGxlciwgVi4sIE1leWVyLCBE LiwgYW5kIEQuIExld2lzLCAiTElTUA0KICAgICAgICAgICAgICBBbHRlcm5hdGl2ZSBUb3BvbG9n eSAoTElTUC1BTFQpIiwNCiAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1saXNwLWFsdC0wMi50eHQg KHdvcmsgaW4gcHJvZ3Jlc3MpLA0KICAgICAgICAgICAgICBKYW51YXJ5IDIwMTAuDQoNCiAgIFtB UFRdICAgICAgSmVuLCBELiwgTWVpc2VsLCBNLiwgTWFzc2V5LCBELiwgV2FuZywgTC4sIFpoYW5n LCBCLiwgYW5kDQogICAgICAgICAgICAgIEwuIFpoYW5nLCAiQVBUOiBBIFByYWN0aWNhbCBUcmFu c2l0IE1hcHBpbmcgU2VydmljZSIsDQogICAgICAgICAgICAgIGRyYWZ0LWplbi1hcHQtMDEudHh0 ICh3b3JrIGluIHByb2dyZXNzKSwgTm92ZW1iZXIgMjAwNy4NCg0KICAgW0NISUFQUEFdICBDaGlh cHBhLCBKLiwgIkVuZHBvaW50cyBhbmQgRW5kcG9pbnQgbmFtZXM6IEEgUHJvcG9zZWQNCiAgICAg ICAgICAgICAgRW5oYW5jZW1lbnQgdG8gdGhlIEludGVybmV0IEFyY2hpdGVjdHVyZSIsIEludGVy bmV0LQ0KICAgICAgICAgICAgICBEcmFmdCBodHRwOi8vd3d3LmNoaWFwcGEubmV0L35qbmMvdGVj aC9lbmRwb2ludHMudHh0LA0KICAgICAgICAgICAgICAxOTk5Lg0KDQogICBbQ09OU10gICAgIEZh cmluYWNjaSwgRC4sIEZ1bGxlciwgVi4sIGFuZCBELiBNZXllciwgIkxJU1AtQ09OUzogQQ0KICAg ICAgICAgICAgICBDb250ZW50IGRpc3RyaWJ1dGlvbiBPdmVybGF5IE5ldHdvcmsgIFNlcnZpY2Ug Zm9yIExJU1AiLA0KICAgICAgICAgICAgICBkcmFmdC1tZXllci1saXNwLWNvbnMtMDMudHh0ICh3 b3JrIGluIHByb2dyZXNzKSwNCiAgICAgICAgICAgICAgTm92ZW1iZXIgMjAwNy4NCg0KICAgW0RI VHNdICAgICBSYXRuYXNhbXksIFMuLCBTaGVua2VyLCBTLiwgYW5kIEkuIFN0b2ljYSwgIlJvdXRp bmcNCiAgICAgICAgICAgICAgQWxnb3JpdGhtcyBmb3IgREhUczogU29tZSBPcGVuIFF1ZXN0aW9u cyIsIFBERg0KICAgICAgICAgICAgICBmaWxlIGh0dHA6Ly93d3cuY3MucmljZS5lZHUvQ29uZmVy ZW5jZXMvSVBUUFMwMi8xNzQucGRmLg0KDQogICBbRU1BQ1NdICAgIEJyaW0sIFMuLCBGYXJpbmFj Y2ksIEQuLCBNZXllciwgRC4sIGFuZCBKLiBDdXJyYW4sICJFSUQNCiAgICAgICAgICAgICAgTWFw cGluZ3MgTXVsdGljYXN0IEFjcm9zcyBDb29wZXJhdGluZyBTeXN0ZW1zIGZvciBMSVNQIiwNCiAg ICAgICAgICAgICAgZHJhZnQtY3VycmFuLWxpc3AtZW1hY3MtMDAudHh0ICh3b3JrIGluIHByb2dy ZXNzKSwNCiAgICAgICAgICAgICAgTm92ZW1iZXIgMjAwNy4NCg0KICAgW0dTRV0gICAgICAiR1NF IC0gQW4gQWx0ZXJuYXRlIEFkZHJlc3NpbmcgQXJjaGl0ZWN0dXJlIGZvciAgSVB2NiIsDQogICAg ICAgICAgICAgIGRyYWZ0LWlldGYtaXBuZ3dnLWdzZWFkZHItMDAudHh0ICh3b3JrIGluIHByb2dy ZXNzKSwgMTk5Ny4NCg0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1 bHkgMTYsIDIwMTAgICAgICAgICAgICAgICAgW1BhZ2UgNjZdDQoMDQpJbnRlcm5ldC1EcmFmdCAg ICBMb2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTAN Cg0KDQogICBbSU5URVJXT1JLXQ0KICAgICAgICAgICAgICBMZXdpcywgRC4sIE1leWVyLCBELiwg RmFyaW5hY2NpLCBELiwgYW5kIFYuIEZ1bGxlciwNCiAgICAgICAgICAgICAgIkludGVyd29ya2lu ZyBMSVNQIHdpdGggSVB2NCBhbmQgSVB2NiIsDQogICAgICAgICAgICAgIGRyYWZ0LWlldGYtbGlz cC1pbnRlcndvcmtpbmctMDEudHh0ICh3b3JrIGluIHByb2dyZXNzKSwNCiAgICAgICAgICAgICAg SmFudWFyeSAyMDEwLg0KDQogICBbTElHXSAgICAgIEZhcmluYWNjaSwgRC4gYW5kIEQuIE1leWVy LCAiTElTUCBJbnRlcm5ldCBHcm9wZXIgKExJRykiLA0KICAgICAgICAgICAgICBkcmFmdC1mYXJp bmFjY2ktbGlzcC1saWctMDEudHh0ICh3b3JrIGluIHByb2dyZXNzKSwNCiAgICAgICAgICAgICAg TWF5IDIwMDkuDQoNCiAgIFtMSVNBOTZdICAgTGVhciwgRS4sIEthdGluc2t5LCBKLiwgQ29mZmlu LCBKLiwgYW5kIEQuIFRoYXJwLA0KICAgICAgICAgICAgICAiUmVudW1iZXJpbmc6IFRocmVhdCBv ciBNZW5hY2U/IiwgVXNlbml4ICwgU2VwdGVtYmVyIDE5OTYuDQoNCiAgIFtMSVNQLU1BSU5dDQog ICAgICAgICAgICAgIEZhcmluYWNjaSwgRC4sIEZ1bGxlciwgVi4sIE1leWVyLCBELiwgYW5kIEQu IExld2lzLA0KICAgICAgICAgICAgICAiTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChM SVNQKSIsDQogICAgICAgICAgICAgIGRyYWZ0LWZhcmluYWNjaS1saXNwLTEyLnR4dCAod29yayBp biBwcm9ncmVzcyksDQogICAgICAgICAgICAgIE1hcmNoIDIwMDkuDQoNCiAgIFtMSVNQLU1OXSAg RmFyaW5hY2NpLCBELiwgRnVsbGVyLCBWLiwgTGV3aXMsIEQuLCBhbmQgRC4gTWV5ZXIsICJMSVNQ DQogICAgICAgICAgICAgIE1vYmlsaXR5IEFyY2hpdGVjdHVyZSIsIGRyYWZ0LW1leWVyLWxpc3At bW4tMDAudHh0ICh3b3JrDQogICAgICAgICAgICAgIGluIHByb2dyZXNzKSwgSnVseSAyMDA5Lg0K DQogICBbTElTUC1NU10gIEZhcmluYWNjaSwgRC4gYW5kIFYuIEZ1bGxlciwgIkxJU1AgTWFwIFNl cnZlciIsDQogICAgICAgICAgICAgIGRyYWZ0LWlldGYtbGlzcC1tcy0wMy50eHQgKHdvcmsgaW4g cHJvZ3Jlc3MpLA0KICAgICAgICAgICAgICBTZXB0ZW1iZXIgMjAwOS4NCg0KICAgW0xJU1AxXSAg ICBGYXJpbmFjY2ksIEQuLCBPcmFuLCBELiwgRnVsbGVyLCBWLiwgYW5kIEouIFNjaGlsbGVyLA0K ICAgICAgICAgICAgICAiTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQMSkgW1Jv dXRhYmxlICBJRA0KICAgICAgICAgICAgICBWZXJzaW9uXSIsDQogICAgICAgICAgICAgIFNsaWRl LXNldCBodHRwOi8vd3d3LmRpbm9mLm5ldC9+ZGluby9pZXRmL2xpc3AxLnBwdCwNCiAgICAgICAg ICAgICAgT2N0b2JlciAyMDA2Lg0KDQogICBbTElTUDJdICAgIEZhcmluYWNjaSwgRC4sIE9yYW4s IEQuLCBGdWxsZXIsIFYuLCBhbmQgSi4gU2NoaWxsZXIsDQogICAgICAgICAgICAgICJMb2NhdG9y L0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1AyKSBbRE5TLWJhc2VkDQogICAgICAgICAgICAg IFZlcnNpb25dIiwNCiAgICAgICAgICAgICAgU2xpZGUtc2V0IGh0dHA6Ly93d3cuZGlub2YubmV0 L35kaW5vL2lldGYvbGlzcDIucHB0LA0KICAgICAgICAgICAgICBOb3ZlbWJlciAyMDA2Lg0KDQog ICBbTElTUERIVF0gIE1hdGh5LCBMLiwgSWFubm9uZSwgTC4sIGFuZCBPLiBCb25hdmVudHVyZSwg IkxJU1AtREhUOg0KICAgICAgICAgICAgICBUb3dhcmRzIGEgREhUIHRvIG1hcCBpZGVudGlmaWVy cyBvbnRvIGxvY2F0b3JzIiwNCiAgICAgICAgICAgICAgZHJhZnQtbWF0aHktbGlzcC1kaHQtMDAu dHh0ICh3b3JrIGluIHByb2dyZXNzKSwNCiAgICAgICAgICAgICAgRmVicnVhcnkgMjAwOC4NCg0K ICAgW0xPQy1JRC1BUkNIXQ0KICAgICAgICAgICAgICBNZXllciwgRC4gYW5kIEQuIExld2lzLCAi QXJjaGl0ZWN0dXJhbCBJbXBsaWNhdGlvbnMgb2YNCiAgICAgICAgICAgICAgTG9jYXRvci9JRCAg U2VwYXJhdGlvbiIsDQogICAgICAgICAgICAgIGRyYWZ0LW1leWVyLWxvYy1pZC1pbXBsaWNhdGlv bnMtMDEudHh0ICh3b3JrIGluIHByb2dyZXNzKSwNCg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAg ICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdlIDY3XQ0KDA0K SW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAg ICAgSmFudWFyeSAyMDEwDQoNCg0KICAgICAgICAgICAgICBKYW51YXJ5ciAyMDA5Lg0KDQogICBb TUxJU1BdICAgIEZhcmluYWNjaSwgRC4sIE1leWVyLCBELiwgWndpZWJlbCwgSi4sIGFuZCBTLiBW ZW5hYXMsDQogICAgICAgICAgICAgICJMSVNQIGZvciBNdWx0aWNhc3QgRW52aXJvbm1lbnRzIiwN CiAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1saXNwLW11bHRpY2FzdC0wMi50eHQgKHdvcmsgaW4g cHJvZ3Jlc3MpLA0KICAgICAgICAgICAgICBTZXB0ZW1iZXIgMjAwOS4NCg0KICAgW05FUkRdICAg ICBMZWFyLCBFLiwgIk5FUkQ6IEEgTm90LXNvLW5vdmVsIEVJRCB0byBSTE9DIERhdGFiYXNlIiwN CiAgICAgICAgICAgICAgZHJhZnQtbGVhci1saXNwLW5lcmQtMDQudHh0ICh3b3JrIGluIHByb2dy ZXNzKSwNCiAgICAgICAgICAgICAgQXByaWwgMjAwOC4NCg0KICAgW09QRU5MSVNQXQ0KICAgICAg ICAgICAgICBJYW5ub25lLCBMLiBhbmQgTy4gQm9uYXZlbnR1cmUsICJPcGVuTElTUCBJbXBsZW1l bnRhdGlvbg0KICAgICAgICAgICAgICBSZXBvcnQiLCBkcmFmdC1pYW5ub25lLW9wZW5saXNwLWlt cGxlbWVudGF0aW9uLTAxLnR4dA0KICAgICAgICAgICAgICAod29yayBpbiBwcm9ncmVzcyksIEp1 bHkgMjAwOC4NCg0KICAgW1JBRElSXSAgICBOYXJ0ZW4sIFQuLCAiUm91dGluZyBhbmQgQWRkcmVz c2luZyBQcm9ibGVtIFN0YXRlbWVudCIsDQogICAgICAgICAgICAgIGRyYWZ0LW5hcnRlbi1yYWRp ci1wcm9ibGVtLXN0YXRlbWVudC0wMC50eHQgKHdvcmsgaW4NCiAgICAgICAgICAgICAgcHJvZ3Jl c3MpLCBKdWx5IDIwMDcuDQoNCiAgIFtSRkMzMzQ0YmlzXQ0KICAgICAgICAgICAgICBQZXJraW5z LCBDLiwgIklQIE1vYmlsaXR5IFN1cHBvcnQgZm9yIElQdjQsIHJldmlzZWQiLA0KICAgICAgICAg ICAgICBkcmFmdC1pZXRmLW1pcDQtcmZjMzM0NGJpcy0wNSAod29yayBpbiBwcm9ncmVzcyksDQog ICAgICAgICAgICAgIEp1bHkgMjAwNy4NCg0KICAgW1JGQzQxOTJdICBCYWtlciwgRi4sIExlYXIs IEUuLCBhbmQgUi4gRHJvbXMsICJQcm9jZWR1cmVzIGZvcg0KICAgICAgICAgICAgICBSZW51bWJl cmluZyBhbiBJUHY2IE5ldHdvcmsgd2l0aG91dCBhIEZsYWcgRGF5IiwgUkZDIDQxOTIsDQogICAg ICAgICAgICAgIFNlcHRlbWJlciAyMDA1Lg0KDQogICBbUlBGVl0gICAgIFdpam5hbmRzLCBJSi4s IEJvZXJzLCBBLiwgYW5kIEUuIFJvc2VuLCAiVGhlIFJQRiBWZWN0b3INCiAgICAgICAgICAgICAg VExWIiwgZHJhZnQtaWV0Zi1waW0tcnBmLXZlY3Rvci0wOC50eHQgKHdvcmsgaW4gcHJvZ3Jlc3Mp LA0KICAgICAgICAgICAgICBKYW51YXJ5IDIwMDkuDQoNCiAgIFtSUE1EXSAgICAgSGFuZGxleSwg TS4sIEh1aWNpLCBGLiwgYW5kIEEuIEdyZWVuaGFsZ2gsICJSUE1EOiBQcm90b2NvbA0KICAgICAg ICAgICAgICBmb3IgUm91dGluZyBQcm90b2NvbCBNZXRhLWRhdGEgIERpc3NlbWluYXRpb24iLA0K ICAgICAgICAgICAgICBkcmFmdC1oYW5kbGV5LXAycHB1c2gtdW5wdWJsaXNoZWQtMjAwNzcyNi50 eHQgKHdvcmsgaW4NCiAgICAgICAgICAgICAgcHJvZ3Jlc3MpLCBKdWx5IDIwMDcuDQoNCiAgIFtT SElNNl0gICAgTm9yZG1hcmssIEUuIGFuZCBNLiBCYWdudWxvLCAiTGV2ZWwgMyBtdWx0aWhvbWlu ZyBzaGltDQogICAgICAgICAgICAgIHByb3RvY29sIiwgZHJhZnQtaWV0Zi1zaGltNi1wcm90by0w Ni50eHQgKHdvcmsgaW4NCiAgICAgICAgICAgICAgcHJvZ3Jlc3MpLCBPY3RvYmVyIDIwMDYuDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAgICAgICAgRXhwaXJlcyBKdWx5 IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdlIDY4XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAg TG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAgICAgSmFudWFyeSAyMDEwDQoN Cg0KQXBwZW5kaXggQS4gIEFja25vd2xlZGdtZW50cw0KDQogICBBbiBpbml0aWFsIHRoYW5rIHlv dSBnb2VzIHRvIERhdmUgT3JhbiBmb3IgcGxhbnRpbmcgdGhlIHNlZWRzIGZvciB0aGUNCiAgIGlu aXRpYWwgaWRlYXMgZm9yIExJU1AuICBIaXMgY29uc3VsdGF0aW9uIGNvbnRpbnVlcyB0byBwcm92 aWRlIHZhbHVlDQogICB0byB0aGUgTElTUCBhdXRob3JzLg0KDQogICBBIHNwZWNpYWwgYW5kIGFw cHJlY2lhdGl2ZSB0aGFuayB5b3UgZ29lcyB0byBOb2VsIENoaWFwcGEgZm9yDQogICBwcm92aWRp bmcgYXJjaGl0ZWN0dXJhbCBpbXBldHVzIG92ZXIgdGhlIHBhc3QgZGVjYWRlcyBvbiBzZXBhcmF0 aW9uDQogICBvZiBsb2NhdGlvbiBhbmQgaWRlbnRpdHksIGFzIHdlbGwgYXMgZGV0YWlsZWQgcmV2 aWV3IG9mIHRoZSBMSVNQDQogICBhcmNoaXRlY3R1cmUgYW5kIGRvY3VtZW50cywgY291cGxlZCB3 aXRoIGVudGh1c2lhc20gZm9yIG1ha2luZyBMSVNQIGENCiAgIHByYWN0aWNhbCBhbmQgaW5jcmVt ZW50YWwgdHJhbnNpdGlvbiBmb3IgdGhlIEludGVybmV0Lg0KDQogICBUaGUgYXV0aG9ycyB3b3Vs ZCBsaWtlIHRvIGdyYXRlZnVsbHkgYWNrbm93bGVkZ2UgbWFueSBwZW9wbGUgd2hvIGhhdmUNCiAg IGNvbnRyaWJ1dGVkIGRpc2N1c3Npb24gYW5kIGlkZWFzIHRvIHRoZSBtYWtpbmcgb2YgdGhpcyBw cm9wb3NhbC4NCiAgIFRoZXkgaW5jbHVkZSBTY290dCBCcmltLCBBbmRyZXcgUGFydGFuLCBKb2hu IFp3aWViZWwsIEphc29uIFNjaGlsbGVyLA0KICAgTGl4aWEgWmhhbmcsIERvcmlhbiBLaW0sIFBl dGVyIFNjaG9lbm1ha2VyLCBWaWpheSBHaWxsLCBHZW9mZiBIdXN0b24sDQogICBEYXZpZCBDb25y YWQsIE1hcmsgSGFuZGxleSwgUm9uIEJvbmljYSwgVGVkIFNlZWx5LCBNYXJrIFRvd25zbGV5LA0K ICAgQ2hyaXMgTW9ycm93LCBCcmlhbiBXZWlzLCBEYXZlIE1jR3JldywgUGV0ZXIgTG90aGJlcmcs IERhdmUgVGhhbGVyLA0KICAgRWxpb3QgTGVhciwgU2hhbmUgQW1hbnRlLCBWZWQgS2FmbGUsIE9s aXZpZXIgQm9uYXZlbnR1cmUsIEx1aWdpDQogICBJYW5ub25lLCBSb2JpbiBXaGl0dGxlLCBCcmlh biBDYXJwZW50ZXIsIEpvZWwgSGFscGVybiwgUm9nZXINCiAgIEpvcmdlbnNlbiwgUmFuIEF0a2lu c29uLCBTdGlnIFZlbmFhcywgSWxqaXRzY2ggdmFuIEJlaWpudW0sIFJvbGFuZA0KICAgQmxlc3Ms IERhbmEgQmxhaXIsIEJpbGwgTHluY2gsIE1hcmMgV29vbHdhcmQsIERhbWllbiBTYXVjZXosIERh bWlhbg0KICAgTGV6YW1hLCBBdHRpbGxhIERlIEdyb290LCBQYXJhbnRhcCBMYWhpcmksIERhdmlk IEJsYWNrLCBSb3F1ZQ0KICAgR2FnbGlhbm8sIElzaWRvciBLb3V2ZWxhcywgSmVzcGVyIFNrcml2 ZXIsIEZyZWQgVGVtcGxpbiwgTWFyZ2FyZXQNCiAgIFdhc3Nlcm1hbiwgU2FtIEhhcnRtYW4sIE1p Y2hhZWwgSG9mbGluZywgUGVkcm8gTWFycXVlcywgSmFyaSBBcmtrbywNCiAgIEdyZWdnIFNjaHVk ZWwsIFNyaW5pdmFzIFN1YnJhbWFuaWFuLCBhbmQgQW1pdCBKYWluLg0KDQogICBJbiBwYXJ0aWN1 bGFyLCB3ZSB3b3VsZCBsaWtlIHRvIHRoYW5rIERhdmUgTWV5ZXIgZm9yIGhpcyBjbGV2ZXINCiAg IHN1Z2dlc3Rpb24gZm9yIHRoZSBuYW1lICJMSVNQIi4gOy0pDQoNCiAgIFRoaXMgd29yayBvcmln aW5hdGVkIGluIHRoZSBSb3V0aW5nIFJlc2VhcmNoIEdyb3VwIChSUkcpIG9mIHRoZSBJUlRGLg0K ICAgVGhlIGluZGl2aWR1YWwgc3VibWlzc2lvbiBbTElTUC1NQUlOXSB3YXMgY29udmVydGVkIGlu dG8gdGhpcyBJRVRGDQogICBMSVNQIHdvcmtpbmcgZ3JvdXAgZHJhZnQuDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMg SnVseSAxNiwgMjAxMCAgICAgICAgICAgICAgICBbUGFnZSA2OV0NCgwNCkludGVybmV0LURyYWZ0 ICAgIExvY2F0b3IvSUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAx MA0KDQoNCkFwcGVuZGl4IEIuICBEb2N1bWVudCBDaGFuZ2UgTG9nDQoNCkIuMS4gIENoYW5nZXMg dG8gZHJhZnQtaWV0Zi1saXNwLTA2LnR4dA0KDQogICBFZGl0b3JpYWwgYmFzZWQgY2hhbmdlczoN Cg0KICAgbyAgUG9zdGVkIERlY2VtYmVyIDIwMDkuDQoNCiAgIG8gIEZpeCB0eXBvIGZvciByZmxh Z3MgaW4gTElTUCBkYXRhIGhlYWRlci4gIENoYW5nZWQgZnJvbSAiNCIgdG8gIjUiLg0KDQogICBv ICBBZGQgdGV4dCB0byBpbmRpY2F0ZSB0aGF0IE1hcC1SZWdpc3RlciBtZXNzYWdlcyBtdXN0IGNv bnRhaW4gYQ0KICAgICAgY29tcHV0ZWQgVURQIGNoZWNrc3VtLg0KDQogICBvICBBZGQgZGVmaW5p dGlvbnMgZm9yIFBJVFIgYW5kIFBFVFIuDQoNCiAgIG8gIEluZGljYXRlIGFuIEFGSSB2YWx1ZSBv ZiAwIGlzIGFuIHVuc3BlY2lmaWVkIGFkZHJlc3MuDQoNCiAgIG8gIEluZGljYXRlIHRoYXQgdGhl IFRUTCBmaWVsZCBvZiBhIE1hcC1SZWdpc3RlciBpcyBub3QgdXNlZCBhbmQgc2V0DQogICAgICB0 byAwIGJ5IHRoZSBzZW5kZXIuICBUaGlzIGNoYW5nZSBtYWtlcyB0aGlzIHNwZWMgY29uc2lzdGVu dCB3aXRoDQogICAgICBbTElTUC1NU10uDQoNCiAgIG8gIENoYW5nZSAiLi4uIHlpZWxkIGEgcGFj a2V0IHNpemUgb2YgTCBieXRlcyIgdG8gIi4uLiB5aWVsZCBhIHBhY2tldA0KICAgICAgc2l6ZSBn cmVhdGVyIHRoYW4gTCBieXRlcyIuDQoNCiAgIG8gIENsYXJpZnkgc2VjdGlvbiA2LjEuNSBvbiB3 aGF0IGFkZHJlc3NlcyBhbmQgcG9ydHMgYXJlIHVzZWQgaW4gTWFwLQ0KICAgICAgUmVwbHkgbWVz c2FnZXMuDQoNCiAgIG8gIENsYXJpZnkgdGhhdCBMU0JzIHRoYXQgZ28gYmV5b25kIHRoZSBudW1i ZXIgb2YgbG9jYXRvcnMgZG8gbm90IHRvDQogICAgICBiZSBTTVJlZCB3aGVuIHRoZSBsb2NhdG9y IGFkZHJlc3NlcyBhcmUgZ3JlYXRlciBsZXhpY29ncmFwaGljYWxseQ0KICAgICAgdGhhbiB0aGUg bG9jYXRvciBpbiB0aGUgZXhpc3RpbmcgbG9jYXRvci1zZXQuDQoNCiAgIG8gIEFkZCBHcmVnZywg U3JpbmksIGFuZCBBbWl0IHRvIGFja25vd2xlZGdtZW50IHNlY3Rpb24uDQoNCiAgIG8gIENsYXJp ZnkgaW4gdGhlIGRlZmluaXRpb24gb2YgYSBMSVNQIGhlYWRlciB3aGF0IGlzIGZvbGxvd2luZyB0 aGUNCiAgICAgIFVEUCBoZWFkZXIuDQoNCiAgIG8gIENsYXJpZnkgInZlcmlmeWluZyBNYXAtUmVx dWVzdCIgdGV4dCBpbiBzZWN0aW9uIDYuMS4zLg0KDQogICBEZXNpZ24gYmFzZWQgY2hhbmdlczoN Cg0KICAgbyAgVXNlIHN0cm9uZ2VyIGxhbmd1YWdlIHRvIGhhdmUgdGhlIG91dGVyIElQdjQgaGVh ZGVyIHNldCBERj0xIHNvIHdlDQogICAgICBjYW4gYXZvaWQgZnJhZ21lbnQgcmVhc3NlbWJseSBp biBhbiBFVFIgb3IgUEVUUi4gIFRoaXMgd2lsbCBhbHNvDQogICAgICBtYWtlIElQdjQgYW5kIElQ djYgZW5jYXBzdWxhdGlvbiBoYXZlIGNvbnNpc3RlbnQgYmVoYXZpb3IuDQoNCiAgIG8gIE1hcC1S ZXF1ZXN0cyBzaG91bGQgbm90IGJlIHNlbnQgaW4gRUNNIHdpdGggdGhlIFByb2JlIGJpdCBpcyBz ZXQuDQogICAgICBUaGVzZSB0eXBlIG9mIE1hcC1SZXF1ZXN0cyBhcmUgdXNlZCBhcyBSTE9DLXBy b2JlcyBhbmQgYXJlIHNlbnQNCiAgICAgIGRpcmVjdGx5IHRvIGxvY2F0b3IgYWRkcmVzc2VzIGlu IHRoZSB1bmRlcmx5aW5nIG5ldHdvcmsuDQoNCg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAgICAg ICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdlIDcwXQ0KDA0KSW50 ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAgICAg SmFudWFyeSAyMDEwDQoNCg0KICAgbyAgQWRkIHRleHQgaW4gc2VjdGlvbiA2LjEuNSBhYm91dCBy ZXR1cm5pbmcgYWxsIEVJRC1wcmVmaXhlcyBpbiBhDQogICAgICBNYXAtUmVwbHkgc2VudCBieSBh biBFVFIgd2hlbiB0aGVyZSBhcmUgb3ZlcmxhcHBpbmcgRUlELXByZWZpeGVzDQogICAgICBjb25m aWd1cmUuDQoNCiAgIG8gIEFkZCB0ZXh0IGluIGEgbmV3IHN1YnNlY3Rpb24gb2Ygc2VjdGlvbiA2 LjEuNSBhYm91dCBkZWFsaW5nIHdpdGgNCiAgICAgIE1hcC1SZXBsaWVzIHdpdGggY29hcnNlIEVJ RC1wcmVmaXhlcy4NCg0KQi4yLiAgQ2hhbmdlcyB0byBkcmFmdC1pZXRmLWxpc3AtMDUudHh0DQoN CiAgIG8gIFBvc3RlZCBTZXB0ZW1iZXIgMjAwOS4NCg0KICAgbyAgQWRkZWQgdGhpcyBEb2N1bWVu dCBDaGFuZ2UgTG9nIGFwcGVuZGl4Lg0KDQogICBvICBBZGRlZCBzZWN0aW9uIGluZGljYXRpbmcg dGhhdCBlbmNhcHN1bGF0ZWQgTWFwLVJlcXVlc3RzIG11c3QgdXNlDQogICAgICBkZXN0aW5hdGlv biBVRFAgcG9ydCA0MzQyLg0KDQogICBvICBEb24ndCB1c2UgQUggaW4gTWFwLVJlZ2lzdGVycy4g IFB1dCBrZXktaWQsIGF1dGgtbGVuZ3RoLCBhbmQgYXV0aC0NCiAgICAgIGRhdGEgaW4gTWFwLVJl Z2lzdGVyIHBheWxvYWQuDQoNCiAgIG8gIEFkZGVkIEphcmkgdG8gYWNrbm93bGVkZ21lbnQgc2Vj dGlvbi4NCg0KICAgbyAgU3RhdGUgdGhlIHNvdXJjZS1FSUQgaXMgc2V0IHRvIDAgd2hlbiB1c2lu ZyBNYXAtUmVxdWVzdHMgdG8NCiAgICAgIHJlZnJlc2ggb3IgUkxPQy1wcm9iZS4NCg0KICAgbyAg TWFrZSBtb3JlIGNsZWFyIHdoYXQgc291cmNlLVJMT0Mgc2hvdWxkIGJlIGZvciBhIE1hcC1SZXF1 ZXN0Lg0KDQogICBvICBUaGUgTElTUC1DT05TIGF1dGhvcnMgdGhvdWdodCB0aGF0IHRoZSBUeXBl IGRlZmluaXRpb25zIGZvciBDT05TDQogICAgICBzaG91bGQgYmUgcmVtb3ZlZCBmcm9tIHRoaXMg c3BlY2lmaWNhdGlvbi4NCg0KICAgbyAgUmVtb3ZlZCBub25jZSBmcm9tIE1hcC1SZWdpc3RlciBt ZXNzYWdlLCBpdCB3YXNuJ3QgdXNlZCBzbyBubyBuZWVkDQogICAgICBmb3IgaXQuDQoNCiAgIG8g IENsYXJpZnkgd2hhdCB0byBkbyBmb3IgdW5zcGVjaWZpZWQgQWN0aW9uIGJpdHMgZm9yIG5lZ2F0 aXZlIE1hcC0NCiAgICAgIFJlcGxpZXMuICBTaW5jZSBObyBBY3Rpb24gaXMgYSBkcm9wLCBtYWtl IHZhbHVlIDAgRHJvcC4NCg0KQi4zLiAgQ2hhbmdlcyB0byBkcmFmdC1pZXRmLWxpc3AtMDQudHh0 DQoNCiAgIG8gIFBvc3RlZCBTZXB0ZW1iZXIgMjAwOS4NCg0KICAgbyAgSG93IGRvIGRlYWwgd2l0 aCByZWNvcmQgY291bnQgZ3JlYXRlciB0aGFuIDEgZm9yIGEgTWFwLVJlcXVlc3QuDQogICAgICBE YW1pZW4gYW5kIEpvZWwgY29tbWVudC4gIEpvZWwgc3VnZ2VzdHM6IDEpIFNwZWNpZnkgdGhhdCBz ZW5kZXJzDQogICAgICBjb21wbGlhbnQgd2l0aCB0aGUgY3VycmVudCBkb2N1bWVudCB3aWxsIGFs d2F5cyBzZXQgdGhlIGNvdW50IHRvDQogICAgICAxLCBhbmQgbm90ZSB0aGF0IHRoZSBjb3VudCBp cyBpbmNsdWRlZCBmb3IgZnV0dXJlIGV4dGVuc2liaWxpdHkuDQogICAgICAyKSBTcGVjaWZ5IHdo YXQgYSByZWNlaXZlciBjb21wbGlhbnQgd2l0aCB0aGUgZHJhZnQgc2hvdWxkIGRvIGlmDQogICAg ICBpdCByZWNlaXZlcyBhIHJlcXVlc3Qgd2l0aCBhIGNvdW50IGdyZWF0ZXIgdGhhbiAxLiAgUHJl c3VtYWJseSwgaXQNCiAgICAgIHNob3VsZCBzZW5kIHNvbWUgZXJyb3IgYmFjaz8NCg0KDQoNCg0K DQpGYXJpbmFjY2ksIGV0IGFsLiAgICAgICAgIEV4cGlyZXMgSnVseSAxNiwgMjAxMCAgICAgICAg ICAgICAgICBbUGFnZSA3MV0NCgwNCkludGVybmV0LURyYWZ0ICAgIExvY2F0b3IvSUQgU2VwYXJh dGlvbiBQcm90b2NvbCAoTElTUCkgICAgIEphbnVhcnkgMjAxMA0KDQoNCiAgIG8gIEFkZCBGcmVk IFRlbXBsaW4gaW4gYWNrbm93bGVkZ21lbnQgc2VjdGlvbi4NCg0KICAgbyAgQWRkIE1hcmdhcmV0 IGFuZCBTYW0gdG8gdGhlIGFja25vd2xlZGdtZW50IHNlY3Rpb24gZm9yIHRoZWlyIGdyZWF0DQog ICAgICBjb21tZW50cy4NCg0KICAgbyAgU2F5IG1vcmUgYWJvdXQgTEFHcyBpbiB0aGUgVURQIHNl Y3Rpb24gcGVyIFNhbSBIYXJ0bWFuJ3MgY29tbWVudC4NCg0KICAgbyAgU2FtIHdhbnRzIHRvIHVz ZSBNQVkgaW5zdGVhZCBvZiBTSE9VTEQgZm9yIGlnbm9yaW5nIGNoZWNrc3VtcyBvbg0KICAgICAg RVRSLiAgRnJvbSB0aGUgbWFpbGluZyBsaXN0OiAiWW91J2QgbmVlZCB0byB3b3JkIGl0IGFzIGFu IElUUiBNQVkNCiAgICAgIHNlbmQgYSB6ZXJvIGNoZWNrc3VtLCBhbiBFVFIgTVVTVCBhY2NlcHQg YSAwIGNoZWNrc3VtIGFuZCBNQVkNCiAgICAgIGlnbm9yZSB0aGUgY2hlY2tzdW0gY29tcGxldGVs eS4gIEFuZCBvZiBjb3Vyc2Ugd2UnZCBuZWVkIHRvDQogICAgICBjb25maXJtIHRoYXQgY2FuIGFj dHVhbGx5IGJlIGltcGxlbWVudGVkLiAgSW4gcGFydGljdWxhciwgaGFyZHdhcmUNCiAgICAgIHRo YXQgdmVyaWZpZXMgVURQIGNoZWNrc3VtcyBvbiByZWNlaXZlIG5lZWRzIHRvIGJlIGNoZWNrZWQg dG8gbWFrZQ0KICAgICAgc3VyZSBpdCBwZXJtaXRzIDAgY2hlY2tzdW1zLiINCg0KICAgbyAgTWFy Z2FyZXQgd2FudHMgYSByZWZlcmVuY2UgdG8NCiAgICAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcvaWQv ZHJhZnQtZXViYW5rcy1jaGltZW50by02bWFuLTAwLnR4dC4NCg0KICAgbyAgRml4IGRlc2NyaXB0 aW9uIGluIE1hcC1SZXF1ZXN0IHNlY3Rpb24uICBXaGVyZSB3ZSBkZXNjcmliZSBNYXAtDQogICAg ICBSZXBseSBSZWNvcmQsIGNoYW5nZSAiUi1iaXQiIHRvICJNLWJpdCIuDQoNCiAgIG8gIEFkZCB0 aGUgbW9iaWxpdHkgYml0IHRvIE1hcC1SZXBsaWVzLiAgU28gUFRScyBkb24ndCBwcm9iZSBzbyBv ZnRlbg0KICAgICAgZm9yIE1OcyBidXQgb2Z0ZW4gZW5vdWdoIHRvIGdldCBtYXBwaW5nIHVwZGF0 ZXMuDQoNCiAgIG8gIEluZGljYXRlIFNIQTEgY2FuIGJlIHVzZWQgYXMgd2VsbCBmb3IgTWFwLVJl Z2lzdGVycy4NCg0KICAgbyAgTW9yZSBGcmVkIGNvbW1lbnRzIG9uIE1UVSBoYW5kbGluZy4NCg0K ICAgbyAgSXNpZG9yIGNvbW1lbnQgYWJvdXQgc3BlYydpbmcgYmV0dGVyIHBlcmlvZGljIE1hcC1S ZWdpc3RlcnMuICBXaWxsDQogICAgICBiZSBmaXhlZCBpbiBkcmFmdC1pZXRmLWxpc3AtbXMtMDIu dHh0Lg0KDQogICBvICBNYXJnYXJldCdzIGNvbW1lbnQgb24gZ2xlYW5pbmc6ICJUaGUgY3VycmVu dCBzcGVjaWZpY2F0aW9uIGRvZXMNCiAgICAgIG5vdCBtYWtlIGl0IGNsZWFyIGhvdyBsb25nIGds ZWFuZWQgbWFwIGVudHJpZXMgc2hvdWxkIGJlIHJldGFpbmVkDQogICAgICBpbiB0aGUgY2FjaGUs IG5vciBkb2VzIGl0IG1ha2UgaXQgY2xlYXIgaG93LyB3aGVuIHRoZXkgd2lsbCBiZQ0KICAgICAg dmFsaWRhdGVkLiAgVGhlIExJU1Agc3BlYyBzaG91bGQsIGF0IHRoZSB2ZXJ5IGxlYXN0LCBpbmNs dWRlIGENCiAgICAgIChzaG9ydCkgZGVmYXVsdCBsaWZldGltZSBmb3IgZ2xlYW5lZCBlbnRyaWVz LCByZXF1aXJlIHRoYXQgdGhleSBiZQ0KICAgICAgdmFsaWRhdGVkIHdpdGhpbiBhIHNob3J0IHBl cmlvZCBvZiB0aW1lLCBhbmQgc3RhdGUgdGhhdCBhIG5ldw0KICAgICAgZ2xlYW5lZCBlbnRyeSBz aG91bGQgbmV2ZXIgb3ZlcndyaXRlIGFuIGVudHJ5IHRoYXQgd2FzIG9idGFpbmVkDQogICAgICBm cm9tIHRoZSBtYXBwaW5nIHN5c3RlbS4gIFRoZSBzZWN1cml0eSBpbXBsaWNhdGlvbnMgb2Ygc3Rv cmluZw0KICAgICAgImdsZWFuZWQiIGVudHJpZXMgc2hvdWxkIGFsc28gYmUgZXhwbG9yZWQgaW4g ZGV0YWlsLiINCg0KICAgbyAgQWRkIHNlY3Rpb24gb24gUkxPQy1wcm9iaW5nIHBlciB3b3JraW5n IGdyb3VwIGZlZWRiYWNrLg0KDQogICBvICBDaGFuZ2UgImxvYy1yZWFjaC1iaXRzIiB0byAibG9j LXN0YXR1cy1iaXRzIiBwZXIgY29tbWVudCBmcm9tDQogICAgICBOb2VsLg0KDQogICBvICBSZW1v dmUgU01SLWJpdCBmcm9tIGRhdGEtcGxhbmUuICBEaW5vIHByZWZlcnMgdG8gaGF2ZSBpdCBpbiB0 aGUNCiAgICAgIGNvbnRyb2wgcGxhbmUgb25seS4NCg0KDQoNCkZhcmluYWNjaSwgZXQgYWwuICAg ICAgICAgRXhwaXJlcyBKdWx5IDE2LCAyMDEwICAgICAgICAgICAgICAgIFtQYWdlIDcyXQ0KDA0K SW50ZXJuZXQtRHJhZnQgICAgTG9jYXRvci9JRCBTZXBhcmF0aW9uIFByb3RvY29sIChMSVNQKSAg ICAgSmFudWFyeSAyMDEwDQoNCg0KICAgbyAgQ2hhbmdlIExJU1AgaGVhZGVyIHRvIGFsbG93IGEg IlJlc2VhcmNoIEJpdCIgc28gdGhlIE5vbmNlIGFuZCBMU0INCiAgICAgIGZpZWxkcyBjYW4gYmUg dHVybmVkIG9mZiBhbmQgdXNlZCBmb3IgYW5vdGhlciBmdXR1cmUgcHVycG9zZS4gIEZvcg0KICAg ICAgTHVpZ2kgZXQgYWwgdmVyc2lvbmluZyBjb252ZXJnZW5jZS4NCg0KICAgbyAgQWRkIGEgTi1i aXQgdG8gdGhlIGRhdGEgaGVhZGVyIHN1Z2dlc3RlZCBieSBOb2VsLiAgVGhlbiB0aGUgbm9uY2UN CiAgICAgIGZpZWxkIGNvdWxkIGJlIHVzZWQgd2hlbiBOIGlzIG5vdCAxLg0KDQogICBvICBDbGFy aWZ5IHRoYXQgd2hlbiBFLWJpdCBpcyAwLCB0aGUgbm9uY2UgZmllbGQgY2FuIGJlIGFuIGVjaG9l ZA0KICAgICAgbm9uY2Ugb3IgYSByYW5kb20gbm9uY2UuICBDb21tZW50IGZyb20gSmVzcGVyLg0K DQogICBvICBJbmRpY2F0ZSB3aGVuIGRvaW5nIGRhdGEtZ2xlYW5pbmcgdGhhdCBhIHZlcmlmeWlu ZyBNYXAtUmVxdWVzdCBpcw0KICAgICAgc2VudCB0byB0aGUgc291cmNlLUVJRCBvZiB0aGUgZ2xl YW5lZCBkYXRhIHBhY2tldCBzbyB3ZSBjYW4gYXZvaWQNCiAgICAgIG1hcC1jYWNoZSBjb3JydXB0 aW9uIGJ5IGEgM3JkIHBhcnR5LiAgQ29tbWVudCBmcm9tIFBlZHJvLg0KDQogICBvICBJbmRpY2F0 ZSB0aGF0IGEgdmVyaWZ5aW5nIE1hcC1SZXF1ZXN0LCBmb3IgYWNjZXB0aW5nIG1hcHBpbmcgZGF0 YSwNCiAgICAgIHNob3VsZCBiZSBzZW50IG92ZXIgdGhlIHRoZSBBTFQgKG9yIHRvIHRoZSBFSUQp Lg0KDQogICBvICBSZWZlcmVuY2UgSVBzZWMgUkZDIDQzMDIuICBDb21tZW50IGZyb20gU2FtIGFu ZCBCcmlhbiBXZWlzLg0KDQogICBvICBQdXQgRS1iaXQgaW4gTWFwLVJlcGx5IHRvIHRlbGwgSVRS cyB0aGF0IHRoZSBFVFIgc3VwcG9ydHMgZWNoby0NCiAgICAgIG5vbmNpbmcuICBDb21tZW50IGJ5 IFBlZHJvIGFuZCBEaW5vLg0KDQogICBvICBKZXNwZXIgbWFkZSBhIGNvbW1lbnQgdG8gbG9vc2Vu IHRoZSBsYW5ndWFnZSBhYm91dCByZXF1aXJpbmcgdGhlDQogICAgICBjb3B5IG9mIGlubmVyIFRU TCB0byBvdXRlciBUVEwgc2luY2UgdGhlIHRleHQgdG8gZ2V0IG1peGVkLUFGDQogICAgICB0cmFj ZXJvdXRlIHRvIHdvcmsgd291bGQgdmlvbGF0ZSB0aGUgIk1VU1QiIGNsYXVzZS4gIENoYW5nZWQg ZnJvbQ0KICAgICAgTVVTVCB0byBTSE9VTEQgaW4gc2VjdGlvbiA1LjMuDQoNCkIuNC4gIENoYW5n ZXMgdG8gZHJhZnQtaWV0Zi1saXNwLTAzLnR4dA0KDQogICBvICBQb3N0ZWQgSnVseSAyMDA5Lg0K DQogICBvICBSZW1vdmVkIGxvYy1yZWFjaC1iaXRzIGxvbmd3b3JkIGZyb20gY29udHJvbCBwYWNr ZXRzIHBlciBEYW1pZW4NCiAgICAgIGNvbW1lbnQuDQoNCiAgIG8gIENsYXJpZmljYXRpb25zIGlu IE1UVSB0ZXh0IGZyb20gUm9xdWUuDQoNCiAgIG8gIEFkZGVkIHRleHQgdG8gaW5kaWNhdGUgdGhh dCB0aGUgbG9jYXRvci1zZXQgYmUgc29ydGVkIGJ5IGxvY2F0b3INCiAgICAgIGFkZHJlc3MgZnJv bSBJc2lkb3IuDQoNCiAgIG8gIENsYXJpZmljYXRpb24gdGV4dCBmcm9tIEpvaG4gWndpZWJlbCBp biBFY2hvLU5vbmNlIHNlY3Rpb24uDQoNCkIuNS4gIENoYW5nZXMgdG8gZHJhZnQtaWV0Zi1saXNw LTAyLnR4dA0KDQogICBvICBQb3N0ZWQgSnVseSAyMDA5Lg0KDQogICBvICBFbmNhcHN1bGF0aW9u IHBhY2tldCBmb3JtYXQgY2hhbmdlIHRvIGFkZCBFLWJpdCBhbmQgbWFrZSBsb2MtDQogICAgICBy ZWFjaC1iaXRzIDMyLWJpdHMgaW4gbGVuZ3RoLg0KDQoNCg0KDQpGYXJpbmFjY2ksIGV0IGFsLiAg ICAgICAgIEV4cGlyZXMgSnVseSAxNiwgMjAxMCAgICAgICAgICAgICAgICBbUGFnZSA3M10NCgwN CkludGVybmV0LURyYWZ0ICAgIExvY2F0b3IvSUQgU2VwYXJhdGlvbiBQcm90b2NvbCAoTElTUCkg ICAgIEphbnVhcnkgMjAxMA0KDQoNCiAgIG8gIEFkZGVkIEVjaG8tTm9uY2UgQWxnb3JpdGhtIHNl Y3Rpb24uDQoNCiAgIG8gIENsYXJpZmljYXRpb24gaG93IEVDTiBiaXRzIGFyZSBjb3BpZWQuDQoN CiAgIG8gIE1vdmVkIFMtYml0IGluIE1hcC1SZXF1ZXN0Lg0KDQogICBvICBBZGRlZCBQLWJpdCBp biBNYXAtUmVxdWVzdCBhbmQgTWFwLVJlcGx5IG1lc3NhZ2VzIHRvIGFudGljaXBhdGUNCiAgICAg IFJMT0MtUHJvYmUgQWxnb3JpdGhtLg0KDQogICBvICBBZGRlZCB0byBNb2JpbGl0eSBzZWN0aW9u IHRvIHJlZmVyZW5jZSBkcmFmdC1tZXllci1saXNwLW1uLTAwLnR4dC4NCg0KQi42LiAgQ2hhbmdl cyB0byBkcmFmdC1pZXRmLWxpc3AtMDEudHh0DQoNCiAgIG8gIFBvc3RlZCAyIGRheXMgYWZ0ZXIg ZHJhZnQtaWV0Zi1saXNwLTAwLnR4dCBpbiBNYXkgMjAwOS4NCg0KICAgbyAgRGVmaW5lZCBMRUlE IHRvIGJlIGEgIkxJU1AgRUlEIi4NCg0KICAgbyAgSW5kaWNhdGUgZW5jYXBzdWxhdGlvbiB1c2Ug SVB2NCBERj0wLg0KDQogICBvICBBZGRlZCBuZWdhdGl2ZSBNYXAtUmVwbHkgbWVzc2FnZXMgd2l0 aCBkcm9wLCBuYXRpdmUtZm9yd2FyZCwgYW5kDQogICAgICBzZW5kLW1hcC1yZXF1ZXN0IGFjdGlv bnMuDQoNCiAgIG8gIEFkZGVkIFByb3h5LU1hcC1SZXBseSBiaXQgdG8gTWFwLVJlZ2lzdGVyLg0K DQpCLjcuICBDaGFuZ2VzIHRvIGRyYWZ0LWlldGYtbGlzcC0wMC50eHQNCg0KICAgbyAgUG9zdGVk IE1heSAyMDA5Lg0KDQogICBvICBSZW5hbWUgb2YgZHJhZnQtZmFyaW5hY2NpLWxpc3AtMTIudHh0 Lg0KDQogICBvICBBY2tub3dsZWRnbWVudCB0byBSUkcuDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KRmFyaW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1bHkg MTYsIDIwMTAgICAgICAgICAgICAgICAgW1BhZ2UgNzRdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICBM b2NhdG9yL0lEIFNlcGFyYXRpb24gUHJvdG9jb2wgKExJU1ApICAgICBKYW51YXJ5IDIwMTANCg0K DQpBdXRob3JzJyBBZGRyZXNzZXMNCg0KICAgRGlubyBGYXJpbmFjY2kNCiAgIGNpc2NvIFN5c3Rl bXMNCiAgIFRhc21hbiBEcml2ZQ0KICAgU2FuIEpvc2UsIENBICA5NTEzNA0KICAgVVNBDQoNCiAg IEVtYWlsOiBkaW5vQGNpc2NvLmNvbQ0KDQoNCiAgIFZpbmNlIEZ1bGxlcg0KICAgY2lzY28gU3lz dGVtcw0KICAgVGFzbWFuIERyaXZlDQogICBTYW4gSm9zZSwgQ0EgIDk1MTM0DQogICBVU0ENCg0K ICAgRW1haWw6IHZhZkBjaXNjby5jb20NCg0KDQogICBEYXZlIE1leWVyDQogICBjaXNjbyBTeXN0 ZW1zDQogICAxNzAgVGFzbWFuIERyaXZlDQogICBTYW4gSm9zZSwgQ0ENCiAgIFVTQQ0KDQogICBF bWFpbDogZG1tQGNpc2NvLmNvbQ0KDQoNCiAgIERhcnJlbCBMZXdpcw0KICAgY2lzY28gU3lzdGVt cw0KICAgMTcwIFRhc21hbiBEcml2ZQ0KICAgU2FuIEpvc2UsIENBDQogICBVU0ENCg0KICAgRW1h aWw6IGRhcmxld2lzQGNpc2NvLmNvbQ0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KRmFy aW5hY2NpLCBldCBhbC4gICAgICAgICBFeHBpcmVzIEp1bHkgMTYsIDIwMTAgICAgICAgICAgICAg ICAgW1BhZ2UgNzVdDQoMDQo= ------_=_NextPart_001_01CA93D8.AC0D6C98-- From darlewis@cisco.com Tue Jan 12 15:09:24 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B69593A67FE for ; Tue, 12 Jan 2010 15:09:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FTS0NdrpCn3H for ; Tue, 12 Jan 2010 15:09:24 -0800 (PST) Received: from sj-iport-3.cisco.com (sj-iport-3.cisco.com [171.71.176.72]) by core3.amsl.com (Postfix) with ESMTP id EC8863A67F3 for ; Tue, 12 Jan 2010 15:09:23 -0800 (PST) Authentication-Results: sj-iport-3.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAK+PTEurR7H+/2dsb2JhbADBeJR1hDAE X-IronPort-AV: E=Sophos;i="4.49,264,1262563200"; d="scan'208";a="207379613" Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-3.cisco.com with ESMTP; 12 Jan 2010 23:09:21 +0000 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id o0CN9Li0011233; Tue, 12 Jan 2010 23:09:21 GMT Received: from xmb-sjc-213.amer.cisco.com ([171.70.151.153]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 12 Jan 2010 15:09:21 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Tue, 12 Jan 2010 15:09:20 -0800 Message-ID: In-Reply-To: <4B4CF565.60405@joelhalpern.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Designdiscussion -06-(3) -> returnalloverlapping prefixes Thread-Index: AcqT1Usa5Nwj7xXwTKqKzUInETVL3QABqA2w References: <20100112220727.7CF6A6BE597@mercury.lcs.mit.edu> <4B4CF565.60405@joelhalpern.com> From: "Darrel Lewis (darlewis)" To: "Joel M. Halpern" , X-OriginalArrivalTime: 12 Jan 2010 23:09:21.0449 (UTC) FILETIME=[4644E990:01CA93DC] Subject: Re: [lisp] Designdiscussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 23:09:24 -0000 >=20 > I thought we could use the appropriate negative response from=20 > the ALT to=20 > determine that there was no such EID, and therefore the ITR=20 > would know=20 > to send the packet(s) normally for that destination address from then=20 > on? ( Yes. This does mean that packets to the regular Internet=20 > incur a higher=20 > probability of needing a query, unless we can somehow=20 > generate negative=20 > blocks=20 No higher than positive entries... >(which we can't in the current format, as the negative has no=20 > block as I udnerstand it.) The negative block is infered by the 'holes' in the alt routing table. >=20 > Thanks, > Joel >=20 >=20 > Noel Chiappa wrote: > > > From: Dino Farinacci > >=20 > > > In an ITR-only system, we need the database-mapping=20 > command to know > > > which packets are candidates for encapsulation > >=20 > > I suspect that that is, in part, because you're working with an > > operational model where your xTRs are immersed in a sea of 'normal' > > Internet around them, and the LISP 'backbone' is totally=20 > virtual. I.e. > > there is no such thing as '_the_ interface to the LISP backbone'. > >=20 > > I am really hoping that we soon get to the point where=20 > there really _is_ a > > 'LISP backbone', on which the only routes that circulate at=20 > for RLOCs, > > etc. But I digress... > >=20 > > > The ITRs also use the "database-mapping" command for setting > > > locator-status-bits for packets they encapsulate. > >=20 > > Yeah, that I can understand - although presumably they have=20 > to have some > > mechanism to monitor their neighbour xTRs so they can make sure the > > Locator-Status-bits are filled in with good, up-to-date, info. > >=20 > > Noel > > _______________________________________________ > > lisp mailing list > > lisp@ietf.org > > https://www.ietf.org/mailman/listinfo/lisp > >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp >=20 From jnc@mercury.lcs.mit.edu Tue Jan 12 15:28:59 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 38D353A688C for ; Tue, 12 Jan 2010 15:28:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SaLssH8TfSQm for ; Tue, 12 Jan 2010 15:28:58 -0800 (PST) Received: from mercury.lcs.mit.edu (mercury.lcs.mit.edu [18.26.0.122]) by core3.amsl.com (Postfix) with ESMTP id 7FA5B3A6862 for ; Tue, 12 Jan 2010 15:28:58 -0800 (PST) Received: by mercury.lcs.mit.edu (Postfix, from userid 11178) id 5339C6BE5A3; Tue, 12 Jan 2010 18:28:55 -0500 (EST) To: lisp@ietf.org Message-Id: <20100112232855.5339C6BE5A3@mercury.lcs.mit.edu> Date: Tue, 12 Jan 2010 18:28:55 -0500 (EST) From: jnc@mercury.lcs.mit.edu (Noel Chiappa) Cc: jnc@mercury.lcs.mit.edu Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jan 2010 23:28:59 -0000 > From: "Joel M. Halpern" > I thought we could use the appropriate negative response from the ALT > to determine that there was no such EID Hunh? This was all in the context of spoof attacks, and so it's the _source_ EID we would be concerned with, not the destination. We do not, AKAIK, look up source EIDs in the mapping system. Noel From jmh@joelhalpern.com Tue Jan 12 18:17:39 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A4C523A681E for ; Tue, 12 Jan 2010 18:17:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.408 X-Spam-Level: X-Spam-Status: No, score=-3.408 tagged_above=-999 required=5 tests=[AWL=0.191, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id frAGogOXbCKo for ; Tue, 12 Jan 2010 18:17:38 -0800 (PST) Received: from hermes.mail.tigertech.net (hermes.mail.tigertech.net [64.62.209.72]) by core3.amsl.com (Postfix) with ESMTP id E435E3A6778 for ; Tue, 12 Jan 2010 18:17:38 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hermes.tigertech.net (Postfix) with ESMTP id CABD0430468; Tue, 12 Jan 2010 18:17:36 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at hermes.tigertech.net Received: from [10.10.10.102] (pool-71-161-51-192.clppva.btas.verizon.net [71.161.51.192]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hermes.tigertech.net (Postfix) with ESMTP id 3B1D54303C1; Tue, 12 Jan 2010 18:17:36 -0800 (PST) Message-ID: <4B4D2D40.5010405@joelhalpern.com> Date: Tue, 12 Jan 2010 21:17:36 -0500 From: "Joel M. Halpern" User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Noel Chiappa References: <20100112232855.5339C6BE5A3@mercury.lcs.mit.edu> In-Reply-To: <20100112232855.5339C6BE5A3@mercury.lcs.mit.edu> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Jan 2010 02:17:39 -0000 Sorry, I got sources and dests mixed up. For normal ITRs, I can't see why the ITR would have any source problem. It would presumably be configured with the EIDs it is serving. (It would not need an ALT lookup at all.) I guess that is what they meant by the mapping database. But that data is not for mapping in an ALT. Noel Chiappa wrote: > > From: "Joel M. Halpern" > > > I thought we could use the appropriate negative response from the ALT > > to determine that there was no such EID > > Hunh? This was all in the context of spoof attacks, and so it's the _source_ > EID we would be concerned with, not the destination. We do not, AKAIK, look up > source EIDs in the mapping system. > > Noel > From luigi@net.t-labs.tu-berlin.de Wed Jan 13 00:59:42 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9F1573A68E9 for ; Wed, 13 Jan 2010 00:59:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.142 X-Spam-Level: X-Spam-Status: No, score=-2.142 tagged_above=-999 required=5 tests=[AWL=0.107, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aQ680HxBr6Wi for ; Wed, 13 Jan 2010 00:59:41 -0800 (PST) Received: from mail.net.t-labs.tu-berlin.de (mail.net.t-labs.tu-berlin.de [130.149.220.252]) by core3.amsl.com (Postfix) with ESMTP id 7AC673A685A for ; Wed, 13 Jan 2010 00:59:41 -0800 (PST) Received: from dyn100.net.t-labs.tu-berlin.de (dyn100.net.t-labs.tu-berlin.de [130.149.220.100]) by mail.net.t-labs.tu-berlin.de (Postfix) with ESMTP id B893B700D284; Wed, 13 Jan 2010 09:59:37 +0100 (CET) Mime-Version: 1.0 (Apple Message framework v1077) Content-Type: text/plain; charset=us-ascii From: Luigi Iannone In-Reply-To: <20100112220449.0BEB66BE597@mercury.lcs.mit.edu> Date: Wed, 13 Jan 2010 09:59:37 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <1E355D3D-DB32-4484-8C2E-3D14BA6F360E@net.t-labs.tu-berlin.de> References: <20100112220449.0BEB66BE597@mercury.lcs.mit.edu> To: Noel Chiappa X-Mailer: Apple Mail (2.1077) Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Jan 2010 08:59:42 -0000 Hi Noel, On Jan 12, 2010, at 23:04 , Noel Chiappa wrote: >> From: Luigi Iannone >=20 >>>>> ITRs could refuse to forward traffic from sources they are not >>>>> supposed to handle, but the problem is 'how do they know what >>>>> sources they are supposed to be handling'? >=20 > Well, you all may understand this, but I'm still sort of confused. :-) = So let > me try this again. (Although, to be brutally honest, I have now = forgotten what > the basic point was here! Was it something about DoS attacks, maybe?) >=20 >> AFAIK the Cisco and the OpenLISP implementations do the check on the >> ITRs. >=20 > Yes, _if_ your ITR is configured with the EID ranges it should > accept/process/encapsulate traffic for, for whatever reason it has = that > configuration (perhaps it's also an ETR), then yes, you can do such a = check. >=20 > However, I'm still not sure I understand why a box which is just an = ITR > would _have_ to have such information configured - and if it is a > requirement, we need to document that in the spec at some point. >=20 > I mean, I can imagine an ITR which is only configured with 'this is = the > local, non-LISP-encapsulated interface', 'this is the external, > LISP-encapsulated interface', along with appropriate initial = configuration > (e.g. the address(es) of Map-Resolvers, etc). That configuration might > even be implicit, as it is with the small NAT/router boxes that are = sold > today, which come wiht a 'WAN interface' port and 'LAN interface' = ports. >=20 So, basically you are proposing that traffic coming from interface X is = encapsulated (no matter what) by using a mapping in the cache (if it is = the first packet then you query the mapping system). Do I understand correctly? Assuming this is what you mean, in the current spec there is not such a = thing. Nowhere is written that you can use interfaces to decide whether = to encap or not. My understanding of the specs is that you use a mapping from the = database to select the outgoing interface (RLOC). There can be some routing issues, i.e. the source RLOC should be = consistent with the outgoing interface if several interfaces/RLOC are = available. But let's keep it simple What if you have 2 EID-Prefix behind a single router with a single = "local" interface and two RLOCs but for any reason you want that each = EID-Prefix is sent out from different RLOCs? Don't we need a mapping for that? In OpenLISP we first check if a mapping is available in the database, if = the source address is covered by a mapping in the database then the = packet is suitable for encap. Then we check the cache. Let's assume there is a mapping for the = destination EID. We select an RLOC based on priority/weight. We check then the routing table to see which is the outgoing interface = for the selected destination RLOC and we check if the address (or one of = the addresses) of the selected outgoing interface is in the set of = RLOCs of the mapping that has been found in the database.=20 If everything is ok packet is encapsulated and sent. Hope the procedure that I described is clear. May be Dino can clarify if this is the intended behaviour or I = misinterpreted something. Ciao Luigi=20 >=20 >> Further, even if the ITRs are not authoritative in replying to >> Map-Request >=20 > Umm, ITRs don't reply to Map-Requests? >=20 >> they still have the knowledge, since they have to have an entry in >> the LISP Database >=20 > Why/where does an ITR appear in any LISP database? >=20 >> otherwise how would an ITR select which RLOC to use as a source RLOC? >=20 > A simple ITR would just use its WAN interface address as its RLOC, no? >=20 > Yes, more complicated configurations (e.g. an ITR supports a number of = a > different sites, and has some reason to use different RLOCs for each = site) > would need something more complicated, but that's just gratuitous > complexity... >=20 > Noel > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From dino@cisco.com Wed Jan 13 22:34:41 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BDAD33A68F7 for ; Wed, 13 Jan 2010 22:34:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.506 X-Spam-Level: X-Spam-Status: No, score=-10.506 tagged_above=-999 required=5 tests=[AWL=0.093, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y+JvocawTyIk for ; Wed, 13 Jan 2010 22:34:41 -0800 (PST) Received: from sj-iport-2.cisco.com (sj-iport-2.cisco.com [171.71.176.71]) by core3.amsl.com (Postfix) with ESMTP id 175763A68A7 for ; Wed, 13 Jan 2010 22:34:41 -0800 (PST) Authentication-Results: sj-iport-2.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAHFJTkurR7Ht/2dsb2JhbADCTpUHhDAE X-IronPort-AV: E=Sophos;i="4.49,273,1262563200"; d="scan'208";a="232780293" Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-2.cisco.com with ESMTP; 14 Jan 2010 06:34:38 +0000 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id o0E6YcAn010131; Thu, 14 Jan 2010 06:34:38 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 13 Jan 2010 22:34:38 -0800 Received: from [192.168.1.3] ([10.21.116.42]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 13 Jan 2010 22:34:37 -0800 Message-Id: From: Dino Farinacci To: Luigi Iannone In-Reply-To: <1E355D3D-DB32-4484-8C2E-3D14BA6F360E@net.t-labs.tu-berlin.de> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) Date: Wed, 13 Jan 2010 22:34:37 -0800 References: <20100112220449.0BEB66BE597@mercury.lcs.mit.edu> <1E355D3D-DB32-4484-8C2E-3D14BA6F360E@net.t-labs.tu-berlin.de> X-Mailer: Apple Mail (2.936) X-OriginalArrivalTime: 14 Jan 2010 06:34:38.0012 (UTC) FILETIME=[A4FEA7C0:01CA94E3] Cc: Noel Chiappa , lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> returnalloverlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Jan 2010 06:34:41 -0000 > May be Dino can clarify if this is the intended behaviour or I > misinterpreted something. You cannot do source interface based decisions. You want packets to come into a CPE router on an interface for both hosts that are addressed from EID space and from RLOC space. The spec is written to allow this. Also, you want to allow this CPE router to route packets for all combinations of local traffic within a site: (1) source-EID to destination-EID (2) source-EID to destination-RLOC (3) source-RLOC to destination-RLOC (4) source-RLOC to destination-EID Dino From jmh@joelhalpern.com Thu Jan 14 15:24:33 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DF5DC3A67AA for ; Thu, 14 Jan 2010 15:24:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.437 X-Spam-Level: X-Spam-Status: No, score=-3.437 tagged_above=-999 required=5 tests=[AWL=0.162, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qJwVRM-Jck-V for ; Thu, 14 Jan 2010 15:24:33 -0800 (PST) Received: from hermes.mail.tigertech.net (hermes.mail.tigertech.net [64.62.209.72]) by core3.amsl.com (Postfix) with ESMTP id 331B93A67B0 for ; Thu, 14 Jan 2010 15:24:30 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hermes.tigertech.net (Postfix) with ESMTP id BBBAB43B313 for ; Thu, 14 Jan 2010 15:24:27 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at hermes.tigertech.net Received: from [10.10.10.102] (pool-71-161-51-192.clppva.btas.verizon.net [71.161.51.192]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hermes.tigertech.net (Postfix) with ESMTP id 5364E43B30F for ; Thu, 14 Jan 2010 15:24:27 -0800 (PST) Message-ID: <4B4FA7AA.1090204@joelhalpern.com> Date: Thu, 14 Jan 2010 18:24:26 -0500 From: "Joel M. Halpern" User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: "lisp@ietf.org" Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: [lisp] WG Secretary X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Jan 2010 23:24:34 -0000 At IETF meetings, there is often the interesting spot at the beginning of meetings while the chairs look for a minute taker. There are also times between meetings when it is helpful to have someone who has committed to take notes of things. The practice has started developing to appoint working group secretaries. This person is acknowledged in the Charter for the Working Group. This person commits to coming to the meeting and taking notes, and to helping the chairs out somewhat in between. It is generally good if this is NOT someone who is presenting a lot, since it is rather difficult to take notes and present at the same time. Terry and I are looking for a volunteer to step forward and assit the group in the role of WG secretary. Please! Yours, Joel (and Terry) From darlewis@cisco.com Thu Jan 14 21:44:40 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B60FA28C0F1 for ; Thu, 14 Jan 2010 21:44:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h7KqzlWx+X8J for ; Thu, 14 Jan 2010 21:44:39 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id DAAAF28C0EF for ; Thu, 14 Jan 2010 21:44:39 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAKuPT0urR7H+/2dsb2JhbADCNpUYhDEEjUQ X-IronPort-AV: E=Sophos;i="4.49,280,1262563200"; d="scan'208";a="467200285" Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-6.cisco.com with ESMTP; 15 Jan 2010 05:44:37 +0000 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id o0F5ibnZ007629; Fri, 15 Jan 2010 05:44:37 GMT Received: from xmb-sjc-213.amer.cisco.com ([171.70.151.153]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 14 Jan 2010 21:44:37 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Thu, 14 Jan 2010 21:44:37 -0800 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Design discussion -06-(3) -> return all overlapping prefixes Thread-Index: AcqTFpqbHR7EiunCQO2D+E5t61Jg5ACjxyOw References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> From: "Darrel Lewis (darlewis)" To: "Sam Hartman" X-OriginalArrivalTime: 15 Jan 2010 05:44:37.0172 (UTC) FILETIME=[D2C48F40:01CA95A5] Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jan 2010 05:44:40 -0000 > >>>>> "Darrel" =3D=3D Darrel Lewis (darlewis) = writes: >=20 > Thinking of this further I would suggest that all the overlapping > Darrel> EID-prefixes returned in the map-reply should=20 > have the same > Darrel> TTL. >=20 >=20 > Why is this? > Won't you want lover TTLs for your MN entries than fixed node entries? >=20 MN entries are not 'overlapping' in the sense that they are their own EID block (a /32 or /128). Rather than nested inside another EID block. -Darrel From hartmans@mit.edu Fri Jan 15 08:29:29 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1DE033A6907 for ; Fri, 15 Jan 2010 08:29:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.028 X-Spam-Level: X-Spam-Status: No, score=-2.028 tagged_above=-999 required=5 tests=[AWL=0.237, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tZOxfwiutLKO for ; Fri, 15 Jan 2010 08:29:28 -0800 (PST) Received: from mail.suchdamage.org (permutation-city.suchdamage.org [69.25.196.28]) by core3.amsl.com (Postfix) with ESMTP id 783F33A6782 for ; Fri, 15 Jan 2010 08:29:28 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.suchdamage.org (Postfix) with ESMTPS id E75F4209B8; Fri, 15 Jan 2010 11:29:24 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 4F3D6412A; Fri, 15 Jan 2010 11:28:55 -0500 (EST) From: Sam Hartman To: "Darrel Lewis \(darlewis\)" References: <8E6702C4-81EE-4343-B783-7B135B7AD466@cisco.com> Date: Fri, 15 Jan 2010 11:28:55 -0500 In-Reply-To: (Darrel Lewis's message of "Thu, 14 Jan 2010 21:44:37 -0800") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: lisp@ietf.org Subject: Re: [lisp] Design discussion -06-(3) -> return all overlapping prefixes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jan 2010 16:29:29 -0000 Depending on topology and how likely it is that MNs would be away from the site, I actually think you might well want to nest them. However another note you sent to the list explained why that introduces problems when the shorter TTL entries expire. Obviously, for the MN case, there are solutions we could adopt--the site could route the packets using some sort of triangle routing like a HA does and send you a SMR for that longer prefix, but that's a *lot* of complexity. Your solution of using the TTL is far simpler. From dino@cisco.com Mon Jan 18 17:56:19 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 04BAF3A696E for ; Mon, 18 Jan 2010 17:56:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.519 X-Spam-Level: X-Spam-Status: No, score=-10.519 tagged_above=-999 required=5 tests=[AWL=0.080, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AWFp-hytzU-A for ; Mon, 18 Jan 2010 17:56:17 -0800 (PST) Received: from sj-iport-5.cisco.com (sj-iport-5.cisco.com [171.68.10.87]) by core3.amsl.com (Postfix) with ESMTP id 40D763A6969 for ; Mon, 18 Jan 2010 17:56:17 -0800 (PST) Authentication-Results: sj-iport-5.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEADugVEurRN+K/2dsb2JhbADAaJRxhDME X-IronPort-AV: E=Sophos;i="4.49,300,1262563200"; d="scan'208";a="135992932" Received: from sj-core-4.cisco.com ([171.68.223.138]) by sj-iport-5.cisco.com with ESMTP; 19 Jan 2010 01:56:13 +0000 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-4.cisco.com (8.13.8/8.14.3) with ESMTP id o0J1uDm7001103 for ; Tue, 19 Jan 2010 01:56:13 GMT Received: from xfe-sjc-212.amer.cisco.com ([171.70.151.187]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 18 Jan 2010 17:56:13 -0800 Received: from [192.168.1.3] ([10.21.127.149]) by xfe-sjc-212.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 18 Jan 2010 17:56:13 -0800 Message-Id: <09B72F1B-99C2-486B-B575-17023F0138F4@cisco.com> From: Dino Farinacci To: lisp@ietf.org Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) Date: Mon, 18 Jan 2010 17:56:12 -0800 References: X-Mailer: Apple Mail (2.936) X-OriginalArrivalTime: 19 Jan 2010 01:56:13.0560 (UTC) FILETIME=[946E4F80:01CA98AA] Subject: [lisp] Fwd: [rrg] Summary of "Enhanced Efficiency of Mapping Distribution Protocols in Map-and-Encap Schemes" X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2010 01:56:19 -0000 FYI. Dino Begin forwarded message: > From: "Sriram, Kotikalapudi" > Date: January 18, 2010 4:07:09 PM PST > To: "rrg@irtf.org" > Subject: Re: [rrg] Summary of "Enhanced Efficiency of Mapping > Distribution Protocols in Map-and-Encap Schemes" > > I am forwarding some comments from Dino on the proposal > that I submitted to RRG. I have his permission to post them to this > list. > Dino and I had a several follow up emails between us. > I will try to summarize them later for this list. > For now I am forwarding only his first email to me > with his detailed comments. > > The slides Dino is referring to are at: > http://www.antd.nist.gov/~ksriram/MDP_Dublin_KS_Slides.pdf > > Sriram > > ________________________________________ > From: Dino Farinacci [dino@cisco.com] > Sent: Monday, January 18, 2010 2:09 AM > To: Sriram, Kotikalapudi > Subject: Re: [rrg] Summary of "Enhanced Efficiency of Mapping > Distribution > Protocols in Map-and-Encap Schemes" > > Sorry for the delay. Here are my comments on the MDP slides. I hope it > is okay I copied by LISP colleagues on this reply. Thanks. > > Slide 6, the problem itself. > Sriram, I am not even convinced this is going to be a real > problem. I do not know why > a registry would allocate a more-specific when it already > allocated a less-specific to > another site. You tell me why you think that would be useful. > > Slide 7. > In LISP-ALT, the Map-Request would follow the /24 site and not > the /20 since they would > both be in the mapping system. That is assuming a Map-Request is > sent for an EID that > matches the /24. If a site requested an EID that matched the /20, > then yes, the re- > encapsulating path would occur. But the mapping system, could > indicate there are more > specifics to the /20. > > Slide 9. > Yes, the nature solution is to have the coarser site tell you > about the more specifics. > But I like to couch the problem this way: if cisco had the /20, > you think it would want > to provide resources for the /24s that belong to Juniper? So, I > am not sure how this could > work in the real world. > > Slide 11. > So one case we, the LISP team, were worried about is the sheer > number of more-specifics. > What if a companies mobile-node EIDs came out of their corporate > EID-prefix. Then the > number of EIDs could be in the 10s of thousands. So a scheme that > returns all more specifics > is probably not a good idea. In the LISP -06 spec we indicate > this but are hoping that the > MNs come out of their own EID-prefix allocation which is made up > of only /32s. > > Slide 15. > Approach 2 is better but still may be too many entries for an ILM- > R to store. > > Slide 17. > If the more-specifics have a common width, and it is communicated > to the ITR from the ILMs, > then the ITR could see that a different, say /24 is being > encapsulated and then send the > Map-Request for it even though there is a /20 cached. > > So rather than saying there are more specifics, indicate what the > mask-lengths are. We > could have more than one as long as a small number. For IPv4, > that number is pretty small > but not for IPv6. > > Slide 23, this is a good idea. > And we believe LISP can support this as specified. > > Thanks and nice concise work, > Dino > >> _______________________________________ >> From: Sriram, Kotikalapudi >> Sent: Tuesday, December 22, 2009 10:44 PM >> To: Lixia Zhang; rrg@irtf.org >> Cc: Tony Li >> Subject: Summary of "Enhanced Efficiency of Mapping Distribution >> Protocols in Map-and-Encap Schemes" >> >> Lixia: >> Tony: >> >> As you would remember, I had presented this work at Dublin RRG >> meeting. >> I do not intend it to be a contribution for the mainstream set of >> proposals >> for a solution for scalability. Also, it relates in part to making >> mapping distribution >> more efficient -- I have followed some of the discussion about >> relevance of including >> "mapping systems" between you, Michael Menth, Biran and others. >> Well, this is not a proposal for a new type of "mapping system" >> but it is about making map-and-encap (LISP type of) schemes >> more efficient by suitable enhancements to the mapping distribution >> protocol. There is a part of this proposal which deals with >> hierarchy of >> locators (ETRs) for hierarchical map-and-encap schemes (there is >> some possible >> conceptual overlap with the GLI-Split proposal). >> >> My main intent in submitting this proposal/document is for archival >> value. >> As the RRG work moves further along, I would be happy if we can >> revisit the ideas presented here. At that point, I would also plan >> to further assist >> with more details and performance modeling of this proposal. >> >> Sriram >> >> Summary (980 words) follows. >> --------------------------------------------------------------------------------------------------------- >> Summary of >> "Enhanced Efficiency of Mapping Distribution Protocols in Map-and- >> Encap Schemes" >> >> We present some architectural principles pertaining to the mapping >> distribution protocols, especially applicable to map-and-encap >> (e.g., LISP) type of protocols. These principles enhance the >> efficiency of the map-and-encap protocols in terms of (1) better >> utilization of resources (e.g., processing and memory) at Ingress >> Tunnel Routers (ITRs) and mapping servers, and consequently, (2) >> reduction of response time (e.g., first packet delay). We consider >> how Egress Tunnel Routers (ETRs) can perform aggregation of end- >> point ID (EID) address space belonging to their downstream delivery >> networks, in spite of migration/re-homing of some subprefixes to >> other ETRs. This aggregation may be useful for reducing the >> processing load and memory consumption associated with map messages, >> especially at some resource-constrained ITRs and subsystems of the >> mapping distribution system. We also consider another architectural >> concept where the ETRs are organized in a hierarchical manner for >> the poten >> tial benefit of aggregation of their EID address spaces. The two key >> architectural ideas are discussed in some more detail below. A more >> complete description can be found in a document that was presented >> at the RRG meeting in Dublin. Links to the document and slides >> presented at Dublin RRG meeting are: >> Document: >> http://www.antd.nist.gov/~ksriram/NGRA_map_mgmt.pdf >> Presentation slides: >> http://www.antd.nist.gov/~ksriram/MDP_Dublin_KS_Slides.pdf >> >> It will be helpful to refer to Figures 1, 2, and 3 in the document >> noted above for some of the discussions that follow here below. >> >> A. Management of Mapping Distribution of Subprefixes Spread >> Across Multiple ETRs >> >> To assist in this discussion, we start with the high level >> architecture of a map-and-encap approach (it would be helpful to see >> Fig. 1 in the document mentioned above). In this architecture we >> have the usual ITRs, ETRs, delivery networks, etc. In addition, we >> have the ID-Locator Mapping (ILM) servers which are repositories for >> complete mapping information, while the ILM-Regional (ILM-R) servers >> can contain partial and/or regionally relevant mapping information. >> >> While a large endpoint address space contained in a prefix may be >> mostly associated with the delivery networks served by one ETR, some >> fragments (subprefixes) of that address space may be located >> elsewhere at other ETRs. Let a/20 denote a prefix that is >> conceptually viewed as composed of 16 subnets of /24 size that are >> denoted as a1/24, a2/24, :::, a16/24. For example, a/20 is mostly at >> ETR1, while only two of its subprefixes a8/24 and a15/24 are >> elsewhere at ETR3 and ETR2, respectively (see Fig. 2 in the >> document). From the point of view of efficiency of the mapping >> distribution protocol, it may be beneficial for ETR1 to announce a >> map for the entire space a/20 (rather than fragment it into a >> multitude of more-specific prefixes), and provide the necessary >> exceptions in the map information. Thus the map message could be in >> the form of Map:(a/20, ETR1; Exceptions: a8/24, a15/24). In >> addition, ETR2 and ETR3 announce the maps for a15/24 and a8/24, >> respectively, and so the ILMs k >> now where the exception EID addresses are located. Now consider a >> host associated with ITR1 initiating a packet destined for an >> address a7(1), which is in a7/24 that is not in the exception >> portion of a/20. Now a question arises as to which of the following >> approaches would be the best choice: >> >> 1) ILM-R provides the complete mapping information for a/20 to ITR1 >> including all maps for relevant exception subprefixes. >> 2) ILM-R provides only the directly relevant map to ITR1 which in >> this case is (a/20, ETR1). >> >> In the first approach, the advantage is that ITR1 would have the >> complete mapping for a/20 (including exception subnets), and it >> would not have to generate queries for subsequent first packets that >> are destined to any address in a/20, including a8/24 and a15/24. >> However, the disadvantage is that if there is a significant number >> of exception subprefixes, then the very first packet destined for a/ >> 20 will experience a long delay, and also the processors at ITR1 and >> ILM-R can experience overload. In addition, the memory usage at ITR1 >> can be very inefficient as well. The advantage of the second >> approach above is that the ILM-R does not overload resources at ITR1 >> both in terms of processing and memory usage but it needs an >> enhanced map response in of the form Map:(a/20, ETR1, MS=1), where >> MS (more specific) indicator is set to 1 to indicate to ITR1 that >> not all subnets in a/20 map to ETR1. The key idea is that >> aggregation is beneficial and subnet exceptions must be handled with >> add >> itional messages or indicators in the maps. >> >> B. Management of Mapping Distribution for Scenarios with Hierarchy >> of ETRs and Multi-Homing >> >> Now we highlight another architectural concept related to mapping >> management (helpful here to refer to Fig. 3 in the document). Here >> we consider the possibility that ETRs may be organized in a >> hierarchical manner. For instance ETR7 is higher in hierarchy >> relative to ETR1, ETR2, and ETR3, and like-wise ETR8 is higher >> relative to ETR4, ETR5, and ETR6. For instance, ETRs 1 through 3 can >> relegate locator role to ETR7 for their EID address space. In >> essence, they can allow ETR7 to act as the locator for the delivery >> networks in their purview. ETR7 keeps a local mapping table for >> mapping the appropriate EID address space to specific ETRs that are >> hierarchically associated with it in the level below. In this >> situation, ETR7 can perform EID address space aggregation across >> ETRs 1 through 3 and can also include its own immediate EID address >> space for the purpose of that aggregation. The many details related >> to this approach and special circumstances involving multi-homing of >> subnets a >> re discussed in detail in the detailed document noted earlier. The >> hierarchical organization of ETRs and delivery networks should help >> in the future growth and scalability of ETRs and mapping >> distribution networks. This is essentially recursive map-and-encap, >> and some of the mapping distribution and management functionality >> will remain local to topologically neighboring delivery networks >> which are hierarchically underneath ETRs. > > _______________________________________________ > rrg mailing list > rrg@irtf.org > http://www.irtf.org/mailman/listinfo/rrg From vaf@cisco.com Wed Jan 20 12:28:27 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8E03228C0E8 for ; Wed, 20 Jan 2010 12:28:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.835 X-Spam-Level: X-Spam-Status: No, score=-8.835 tagged_above=-999 required=5 tests=[AWL=-0.503, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_43=0.6, RCVD_IN_DNSWL_HI=-8, SARE_HTML_SINGLETS=1.666] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2z9tzY8vfhPR for ; Wed, 20 Jan 2010 12:28:21 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 02E063A63EC for ; Wed, 20 Jan 2010 12:28:21 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: None : None X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAJf2VkurR7H+/2dsb2JhbADFFokZjE2CPIF6BA X-IronPort-AV: E=Sophos;i="4.49,312,1262563200"; d="txt'?html'217?scan'217,208,217";a="470031258" Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-6.cisco.com with ESMTP; 20 Jan 2010 20:28:03 +0000 Received: from vaf-lnx1 (vaf-lnx1.cisco.com [128.107.165.254]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id o0KKS3sA027616 for ; Wed, 20 Jan 2010 20:28:03 GMT Received: by vaf-lnx1 (Postfix, from userid 113818) id 6F7E020733; Wed, 20 Jan 2010 12:25:52 -0800 (PST) Date: Wed, 20 Jan 2010 12:25:52 -0800 From: Vince Fuller To: lisp@ietf.org Message-ID: <20100120202552.GC31265@vaf-lnx1.cisco.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="G4iJoqBmSsgzjUCe" Content-Disposition: inline User-Agent: Mutt/1.5.20 (2009-06-14) Subject: [lisp] Reminder: proposed draft-ietf-lisp-alt-02 draft comment period X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2010 20:28:27 -0000 --G4iJoqBmSsgzjUCe Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Just a quick reminder that the comment period for draft-ietf-lisp-alt-02 ends on Friday, January 22nd. If you'd like to see anything added or changed, please respond by then. The new draft will be posted to the Internet-Drafts repository by the end of the business day Friday (5:00PM-PDT, UTC-8). --Vince (for the other ALT authors) --G4iJoqBmSsgzjUCe Content-Type: message/rfc822 Content-Disposition: inline Received: from email.cisco.com [171.70.151.132] by vaf-lnx1 with IMAP (fetchmail-6.3.9-rc2) for (single-drop); Fri, 08 Jan 2010 14:52:23 -0800 (PST) Received: from xbh-sjc-221.amer.cisco.com ([128.107.191.63]) by xmb-sjc-21e.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 8 Jan 2010 14:53:32 -0800 Received: from sj-iport-1.cisco.com ([171.71.176.70]) by xbh-sjc-221.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 8 Jan 2010 14:53:31 -0800 Authentication-Results: sj-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: rfcdiff-alt-01-to-02.html, draft-ietf-lisp-alt-02.txt : 53343, 48035 Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-1.cisco.com with ESMTP; 08 Jan 2010 22:53:31 +0000 Received: from sj-inbound-a.cisco.com (sj-inbound-a.cisco.com [128.107.234.204]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id o08MrSqb019138; Fri, 8 Jan 2010 22:53:31 GMT X-from-outside-Cisco: 64.170.98.32 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ar0AAGFGR0tAqmIgjmdsb2JhbACbWQEBAQEJCwgJEQeldokBiw2COYF2BA X-IronPort-AV: E=Sophos;i="4.49,244,1262563200"; d="txt'?html'217?scan'217,208,217";a="185735667" Received: from mail.ietf.org ([64.170.98.32]) by sj-inbound-a.cisco.com with ESMTP; 08 Jan 2010 22:53:21 +0000 Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E4B203A6859; Fri, 8 Jan 2010 14:53:22 -0800 (PST) X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DDC903A67B3 for ; Fri, 8 Jan 2010 14:53:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.332 X-Spam-Level: X-Spam-Status: No, score=-8.332 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_43=0.6, RCVD_IN_DNSWL_HI=-8, SARE_HTML_SINGLETS=1.666] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P3BneBtrOhdQ for ; Fri, 8 Jan 2010 14:53:14 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 25DCD3A67A2 for ; Fri, 8 Jan 2010 14:53:13 -0800 (PST) X-Files: rfcdiff-alt-01-to-02.html, draft-ietf-lisp-alt-02.txt : 53343, 48035 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAGFGR0urR7Hu/2dsb2JhbADCEIkBiw2COYF2BA X-IronPort-AV: E=Sophos;i="4.49,244,1262563200"; d="txt'?html'217?scan'217,208,217";a="463926807" Received: from sj-core-5.cisco.com ([171.71.177.238]) by sj-iport-6.cisco.com with ESMTP; 08 Jan 2010 22:53:11 +0000 Received: from vaf-lnx1 (vaf-lnx1.cisco.com [128.107.165.254]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id o08MrBQN024596 for ; Fri, 8 Jan 2010 22:53:11 GMT Received: by vaf-lnx1 (Postfix, from userid 113818) id 601452077F; Fri, 8 Jan 2010 14:51:26 -0800 (PST) Date: Fri, 8 Jan 2010 14:51:26 -0800 From: Vince Fuller To: lisp@ietf.org Message-ID: <20100108225126.GA16683@vaf-lnx1.cisco.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="u3/rZRmxL6MmkK24" Content-Disposition: inline User-Agent: Mutt/1.5.20 (2009-06-14) Subject: [lisp] proposed draft-ietf-lisp-alt-02 draft X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: lisp-bounces@ietf.org Errors-To: lisp-bounces@ietf.org Return-Path: lisp-bounces@ietf.org X-OriginalArrivalTime: 08 Jan 2010 22:53:31.0518 (UTC) FILETIME=[6669F1E0:01CA90B5] --u3/rZRmxL6MmkK24 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Here is an updated version of the LISP+ALT specification that I'd like to publish to the Internet Drafts repository. Changes reflect comments from this list and elsewhere through the end of 2009. There are no modifications to the protocol only clarifications and editorial changes. Both html diffs and the full text of the new draft are attached. Comments appreciated. I'd like to get this posted within two weeks (by Friday, January 22nd). --Vince (for the other ALT authors: Dino, Dave, and Darrel) --u3/rZRmxL6MmkK24 Content-Type: text/html; charset=us-ascii Content-Disposition: attachment; filename="rfcdiff-alt-01-to-02.html" wdiff draft-ietf-lisp-alt-01.txt draft-ietf-lisp-alt-02.txt 

Network Working Group                                          V. Fuller
Internet-Draft                                              D. Farinacci
Intended status: Experimental                                   D. Meyer
Expires: November 27, 2009 July 9, 2010                                           D. Lewis
                                                                   Cisco
                                                            May 26, 2009
                                                         January 5, 2010

                  LISP Alternative Topology (LISP+ALT)
                       draft-ietf-lisp-alt-01.txt
                       draft-ietf-lisp-alt-02.txt

Abstract

   This document describes a method of building an alternative, logical
   topology for managing Endpoint Identifier to Routing Locator mappings
   using the Locator/ID Separation Protocol.  The logical network is
   built as an overlay on the public Internet using existing
   technologies and tools, specifically the Border Gateway Protocol and
   the Generic Routing Encapsulation.  An important design goal for
   LISP+ALT is to allow for the relatively easy deployment of an
   efficient mapping system while minimizing changes to existing
   hardware and software.

Status of this Memo

   This Internet-Draft is submitted to IETF in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF), its areas, and its working groups.  Note that
   other groups may also distribute working documents as Internet-
   Drafts.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   The list of current Internet-Drafts can be accessed at
   http://www.ietf.org/ietf/1id-abstracts.txt.

   The list of Internet-Draft Shadow Directories can be accessed at
   http://www.ietf.org/shadow.html.

   This Internet-Draft will expire on November 27, 2009. July 9, 2010.

Copyright Notice
   Copyright (c) 2009 2010 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document (http://trustee.ietf.org/license-info). document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.

Abstract

   This  Code Components extracted from this document describes a method of building an alternative, logical
   topology for managing Endpoint Identifier to Routing Locator mappings
   using the Locator/ID Separation Protocol.  The logical network is
   built must
   include Simplified BSD License text as an overlay on the public Internet using existing
   technologies and tools, specifically described in Section 4.e of
   the Border Gateway Protocol Trust Legal Provisions and are provided without warranty as
   described in the Generic Routing Encapsulation.  An important design goal for
   LISP+ALT is to allow for the relatively easy deployment of an
   efficient mapping system while minimizing changes to existing
   hardware and software. BSD License.

Table of Contents

   1.  Requirements Notation  . . . . . . . . . . . . . . . . . . . .  4
   2.  Introduction . . . . . . . . . . . . . . . . . . . . . . . . .  5
   3.  Definition of Terms  . . . . . . . . . . . . . . . . . . . . .  6
   4.  The LISP 1.5 model . . . . . . . . . . . . . . . . . . . . . .  8
     4.1.  Routeability of EIDs . . . . . . . . . . . . . . . . . . .  8
     4.2.  Connectivity to non-LISP sites . . . . . . . . . . . . . .  8
     4.2.  9
     4.3.  Caveats on the use of Data Probes  . . . . . . . . . . . .  9
   5.  LISP+ALT: Overview . . . . . . . . . . . . . . . . . . . . . . 10
     5.1.  ITR traffic handling . . . . . . . . . . . . . . . . . . . 10 11
     5.2.  EID Assignment - Hierarchy and Topology  . . . . . . . . . 11
     5.3.  LISP+ALT Router  . . . . . . . . . . . . . (or ALT router for short)  . . . . . . . . 12
     5.4.  ITR and ETR in a LISP+ALT Environment  . . . . . . . . . . 12 13
     5.5.  Use of GRE and BGP between LISP+ALT Routers  . . . . . . . 13
   6.  EID Prefix Propagation and Map-Request Forwarding  . . . . . . 14
     6.1.  Changes to ITR behavior with LISP+ALT  . . . . . . . . . . 14
     6.2.  Changes to ETR behavior with LISP+ALT  . . . . . . . . . . 14
   7.  BGP configuration and protocol considerations  . . . . . . . . 16
     7.1.  Autonomous System Numbers (ASNs) in LISP+ALT . . . . . . . 16
     7.2.  Sub-Address Family Identifier (SAFI) for LISP+ALT  . . . . 16
   8.  EID-Prefix Aggregation . . . . . . . . . . . . . . . . . . . . 17
     8.1.  Traffic engineering with LISP and LISP+ALT . . . . . . . . 17
     8.2.  Edge aggregation and dampening . . . . . . . . . . . . . . 18
   9.  Connecting sites to the ALT network  . . . . . . . . . . . . . 19
     9.1.  ETRs originating information into the ALT  . . . . . . . . 19
     9.2.  ITRs Using the ALT . . . . . . . . . . . . . . . . . . . . 19
   10. IANA Considerations  . . . . . . . . . . . . . . . . . . . . . 21
   11. Security Considerations  . . . . . . . . . . . . . . . . . . . 22
     11.1. Apparent LISP+ALT Vulnerabilities  . . . . . . . . . . . . 22
     11.2. Survey of LISP+ALT Security Mechanisms . . . . . . . . . . 23
     11.3. Using existing BGP Security mechanisms . . . . . . . . . . 23
   12. Acknowledgments  . . . . . . . . . . . . . . . . . . . . . . . 24
   13. References . . . . . . . . . . . . . . . . . . . . . . . . . . 25
     13.1. Normative References . . . . . . . . . . . . . . . . . . . 25
     13.2. Informative References . . . . . . . . . . . . . . . . . . 25
   Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 26

1.  Requirements Notation

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
   document are to be interpreted as described in [RFC2119].

2.  Introduction

   This document describes a method of building an alternative logical
   topology for managing Endpoint identifier to Routing Locator mappings
   using the Locator/ID Separation Protocol [LISP].  This logical
   topology uses existing technology and tools, specifically the Border
   Gateway Protocol [RFC4271] and its multi-protocol extension
   [RFC2858], along with the Generic Routing Encapsulation [RFC2784]
   protocol to construct an overlay network of devices that advertise
   EID-prefixes only.  These Endpoint Identifier Prefix Aggregators hold
   hierarchically-assigned pieces of the Endpoint Identifier space
   (i.e., prefixes) and their next hops toward the network element which
   is authoritative for Endpoint Identifier-to-Routing Locator mapping
   for that prefix.  Tunnel routers can use this overlay to make queries
   against and respond to mapping requests made against the distributed
   Endpoint Identifier-to-Routing Locator mapping database.  Note the
   database is distributed (as described in [LISP]) and is stored in the
   ETRs.

   Note that an important design goal of LISP+ALT is to minimize the
   number of changes to existing hardware and/or software that are
   required to deploy the mapping system.  It is envisioned that in most
   cases existing technology can be used to implement and deploy LISP+
   ALT.  Since the deployment of LISP+ALT adds new devices to the
   network, existing devices not need changes or upgrades.  They can
   function as they are to realize an underlying and robust physical
   topology.

   The remainder of this document is organized as follows: Section 3
   provides the definitions of terms used in this document.  Section 4
   outlines the basic LISP 1.5 model.  Section 5 provides a basic
   overview of the LISP Alternate Topology architecture, and Section 6
   describes how the ALT uses BGP to propagate Endpoint Identifier
   reachability over the overlay network.  Section 8 describes the
   construction of the ALT aggregation hierarchy, and Section 9
   discusses how LISP+ALT elements are connected to form the overlay
   network.

3.  Definition of Terms

   LISP+ALT operates on two name spaces and introduces a new network
   element, the LISP+ALT Router (see below).  This section provides
   high-level definitions of the LISP+ALT name spaces, network elements,
   and message types.

   The Alternative Logical Topology (ALT):  The virtual overlay network
      made up of tunnels between EID Prefix Aggregators.  The Border
      Gateway Protocol (BGP) runs between LISP+ALT ALT routers and is used to
      carry reachability information for EID prefixes.

   Legacy Internet:  The portion of the Internet which does not run LISP
      and does not participate in LISP+ALT.

   LISP+ALT Router:  The devices which run on the ALT.  The ALT is a
      static network built using tunnels between LISP+ALT routers.
      These routers are deployed in a hierarchy in which routers at each
      level in the this hierarchy are responsible for aggregating all
      EID prefixes learned from those logically "below" them and
      advertising summary prefixes to the routers logically "above"
      them.  All prefix learning and propagation between levels is done
      using BGP.  A LISP+ALT routers router at the lowest level, or "edge", "edge" of
      the ALT learn ALT, learns EID prefixes either over from its "client" ETRs.  See
      Section 4.1 for a BGP session to ETRs or
      through static routes (in description of how EID prefixes are learned at
      the case "edge" of the "low-opex ETR"). ALT.  See also Section 7 for details on how BGP
      is configured between the different network elements.

      The primary function of LISP+ALT routers is to provide a
      lightweight forwarding infrastructure for LISP control-plane
      messages (Map-Request and Map-Reply), and to transport data
      packets when the packet has the same destination address in both
      the inner (encapsulating) destination and outer destination
      addresses ((i.e., a Data Probe packet).

    Endpoint ID (EID):  A 32-bit (for IPv4) or 128-bit (for ipv6) value
      used in the source and destination address fields of the first
      (most inner) LISP header of a packet.  A packet that is emitted by
      a system contains EIDs in its headers and LISP headers are
      prepended only when the packet reaches an Ingress Tunnel Router
      (ITR) on the data path to the destination EID.

      In LISP+ALT, EID-prefixes MUST BE assigned in a hierarchical
      manner (in power-of-two) such that they can be aggregated by LISP+
      ALT routers.  In addition, a site may have site-local structure in
      how EIDs are topologically organized (subnetting) for routing
      within the site; this structure is not visible to the global
      routing system.

   EID-Prefix Aggregate:  A set of EID-prefixes said to be aggregatable
      in the [RFC4632] sense.  That is, an EID-Prefix aggregate is
      defined to be a single contiguous power-of-two EID-prefix block.
      Such a block is characterized by a prefix and a length.

   Routing Locator (RLOC):  An IP address of an egress tunnel router
      (ETR).  It is the output of a EID-to-RLOC mapping lookup.  An EID
      maps to one or more RLOCs.  Typically, RLOCs are numbered from
      topologically-aggregatable blocks that are assigned to a site at
      each point to which it attaches to the global Internet; where the
      topology is defined by the connectivity of provider networks,
      RLOCs can be thought of as Provider Aggregatable (PA) addresses.
      Note that in LISP+ALT, RLOCs are not carried by LISP+ALT routers.

    EID-to-RLOC Mapping:  A binding between an EID and the RLOC-set that
      can be used to reach the EID.  The term "mapping" refers to an
      EID-to-RLOC mapping.

    EID Prefix Reachability:  An EID prefix is said to be "reachable" if
      one or more of its locators are reachable.  That is, an EID prefix
      is reachable if the ETR (or its proxy) that is authoritative for a
      given EID-to-RLOC mapping is reachable.

    Default Mapping:  A Default Mapping is a mapping entry for EID-
      prefix 0.0.0.0/0. 0.0.0.0/0 (0::/0 for ipv6).  It maps to a locator-set used
      for all EIDs in the Internet.  If there is a more specific EID-prefix EID-
      prefix in the mapping cache it overrides the Default Mapping
      entry.  The Default Mapping route can be learned by configuration
      or from a Map-Reply message.

    Default Route:  A Default Route in the context of LISP+ALT is a EID-
      prefix value of 0.0.0.0/0 (or 0::/0 for ipv6) which is advertised
      by BGP on top of the ALT.  The Default Route is used to realize create a
      forwarding path for Data Probe
      or Map-Request packets. a packet to be sent into the ALT (and ALT
      datagram) on a router which does not have a full ALT forwarding
      database.

4.  The LISP 1.5 model

   As documented in [LISP], the LISP 1.5 model uses the same basic
   query/response protocol machinery as LISP 1.0.  In particular, LISP+
   ALT provides two mechanisms for an ITR to obtain EID-to-RLOC mappings
   (both of these techniques are described in more detail in
   Section 9.2):

   Data Probe:  An ITR may send the first few data packets into the ALT
      to minimize packet loss and to probe for the mapping; the
      authoritative ETR will respond to the ITR with a Map-Reply message
      when it receives the data packet over the ALT.  Note that in this
      case, the inner Destination Address (DA), which is an EID, is
      copied to the outer DA and is routed over the ALT.

   Map-Request:  An ITR may also send a Map-Request message into the ALT
      to request the mapping.  As in the Data Probe case, the
      authoritative ETR will respond to the ITR with a Map-Reply
      message.  In this case,  Since the ALT only forwards on EID destinations, the DA
      of the Map-Request sent in to the ALT MUST be an EID.  See [LISP]
      for the format of Map-Request and Map-Reply packets.

   ALT datagram:  A Map-Request or Data Probe to be sent into or
      forwarded on the ALT.

4.1.  Routeability of EIDs

   As with LISP 1.0, EIDs are routable and can be used, unaltered, as
   the source and destination addresses in IP datagrams.  Unlike in LISP
   1.0, LISP 1.5 EIDs are not routable on the public Internet; instead,
   they are only routed over a separate, virtual topology referred to as
   the LISP Alternative Virtual Network.  This network is built as an
   overlay on the public Internet using tunnels to interconnect LISP+ALT
   routers.  BGP is run over these tunnels to propagate the information
   needed to route Data Probes and Map-Request/Replies. ALT datagrams.  Importantly, while the ETRs are the
   source(s) of the unaggregated EID prefix data, LISP+ALT uses existing
   BGP mechanisms to aggressively aggregate this information.  Note that ETRs are
   an ETR is not required to participate (or prevented from
   participating) in LISP+ALT; they an ETR may choose to communicate their its
   mappings to their its serving LISP+ALT router(s) at using subscription time via configuration.  ITRs are also not required to
   participate
   static configuration or through a dynamic mechanism such as that
   described in (nor prevented from [LISP-MS].  An ITR may similarly use a static EID
   "default route" or other configuration as described in [LISP-MS] to
   avoid the complexity of participating in) LISP+ALT.

4.1. in the ALT.

4.2.  Connectivity to non-LISP sites

   As stated above, EIDs used as IP addresses by LISP sites are not
   routable on the public Internet.  This implies that, absent a
   mechanism for communication between LISP and non-LISP sites,
   connectivity between them is not possible.  To resolve this problem,
   an "interworking" technology has been defined; see [Interworking] for
   details.

4.2.

4.3.  Caveats on the use of Data Probes

   It is worth noting that there has been a great deal of discussion and
   controversy about whether Data Probes are a good idea.  On the one
   hand, using them offers a method of avoiding the "first packet drop"
   problem when an ITR does not have a mapping for a particular EID-
   prefix.  On the other hand, forwarding data packets on the ALT would
   require that it either be engineered to support relatively high
   traffic rates, which is not generally feasible for a tunneled
   network, or that it be carefully designed to aggressively rate- limit
   traffic to avoid congestion or DoS attacks.  There are also other
   issues involving latency or other differences between the ALT path
   that initial a Data Probe would take and the path that subsequent
   packets on the same flow would take once a mapping were in place on
   an ITR.  For these and other reasons use of Data Probes should be
   considered experimental and should be disabled by default in all ITR
   implementations.

5.  LISP+ALT: Overview

   LISP+ALT is a hybrid push/pull architecture.  Aggregated EID prefixes
   are "pushed" among the LISP+ALT routers and, optionally, out to ITRs
   (which may elect to receive the aggregated information, as opposed to
   simply using a default mapping).  Specific EID-to-RLOC mappings are
   "pulled" by ITRs when they either send explicit LISP requests or data
   packets on the alternate topology that result in triggered replies
   being generated by ETRs.

   The basic idea embodied in LISP+ALT is to use BGP, running over
   tunneled overlay network, to establish reachability required to route
   Data Probes and Map-Requests
   ALT datagrams over an alternate logical topology (ALT).  The ALT
   BGPRoute Information Base (RIB) is comprised of EID prefixes and
   associated next hops.  LISP+ALT routers interconnect using eBGP and
   propagate EID prefix updates, which are learned over eBGP connections
   to authoritative ETRs, or by static configuration.  ITRs may also
   eBGP peer with one or more LISP+ALT to learn the best ALT router to
   use to forward a Data Proble or Map-Request an ALT datagram for a particular prefix; in most
   cases, an ITR will have a default EID mapping pointing to one or more
   LISP+ALT routers.

   Note that while this document specifies the use of Generic Routing
   Encapsulation (GRE) as a tunneling mechanism, there is no reason that
   an ALT cannot be built using other tunneling technologies.  In cases
   where GRE does not meet security, management, or other operational
   requirements, it is reasonable to use another tunneling technology
   that does.  References to "GRE tunnel" in later sections of this
   document should therefore not be taken as prohibiting or precluding
   the use of other, available tunneling mechanisms.  Note also that two
   LISP+ALT routers that are directly adjacent (with no layer-3 router
   hops between them) need not use a tunnel between them; in this case,
   BGP may be configured across the interfaces that connect to their
   common subnet and that subnet is considered to be part of the ALT
   topology.  Use of techniques, such as "eBGP multihop", to forward ALT
   datagrams through routers that do not participate in ALT routing, is
   not recommended.

   In summary, LISP+ALT uses BGP to propagate EID-prefix update
   information to facilitate forwarding a Map-Reqeusts or Data Probe an ALT datagram to the ETR that
   holds the EID-to-RLOC mapping for that EID-prefix.  This reachability
   is carried as IPv4 or IPv6 NLRI without modification (since an EID
   prefix has the same syntax as IPv4 or IPv6 address prefix).  LISP+ALT
   routers eBGP peer with one another, forming the ALT.  A LISP+ALT
   router near the edge learns near the edge learns EID prefixes originated by authoritative
   ETRs.  This may be via eBGP with the ETRs, by static configuration,
   or through some other dynamic mechanism such as that defined in
   [LISP-MS].  A LISP+ALT router may also be configured to aggregate EID
   prefixes originated
   by authoritative ETRs, either by eBGP peering with them received from ETRs or by
   configuration. from other LISP+ALT routers aggregate EID prefixes, and forward
   Data Probes and Map-Requests. that are
   topologically "downstream" from it.

5.1.  ITR traffic handling

   When an ITR receives a packet originated by an end system within its
   site (i.e. a host for which the ITR is the exit path out of the site)
   and the destination for that packet is not known in the ITR's mapping
   cache, the ITR encapsulates the packet in a LISP header, copying the
   inner destination address (EID) to the outer destination address
   (RLOC), and transmits it through a GRE tunnel to a LISP+ALT router in
   the ALT. ALT (see also [LISP-MS] for non-ALT-connected ITRs, noting that
   an ITR cannot send Data Probes to a Map-Server).  This "first hop"
   LISP+ALT router uses EID-prefix routing information learned from
   other LISP+ALT routers via BGP to guide the packet to the ETR which
   "owns" the prefix.  Upon receipt by the ETR, normal LISP processing
   occurs: the ETR responds to the ITR with a LISP Map-Reply that lists
   the RLOCs (and, thus, the ETRs to use) for the EID prefix.  The ETR
   also de-encapsulates the packet and transmits it toward its
   destination.

   Upon receipt of the Map-Reply, the ITR installs the RLOC information
   for a given prefix into a local mapping database.  With these mapping
   entries stored, additional packets destined to the given EID prefix
   are routed directly to a viable ETR without use of the ALT, until
   either the entry's TTL has expired, or the ITR can otherwise find no
   reachable ETR.  Note that a valid mapping (not timed-out) may exist
   that contains no reachable RLOCs (i.e. all paths to that ETR are
   down); in this case, packets destined to the EID prefix are dropped,
   not routed through the ALT.

   Traffic routed over the ALT therefore consists of:

   o  EID prefix Map-Requests, and

   o  data packets destined for those EID prefixes while the ITR awaits
      map replies

5.2.  EID Assignment - Hierarchy and Topology

   EID-prefixes will be allocated to a LISP site by Internet Registries.
   Multiple allocations may not be in power-of-2 blocks.  But when they
   are, they will be aggregated into a single, advertised EID-prefix.
   The ALT network is built in a tree-structured hierarchy to allow
   aggregation at merge points in the tree.  Building such a structure
   should minimize the number of EID-prefixes carried by LISP+ALT nodes
   near the top of the hierarchy.

   Since the ALT will not need to change due to subscription or policy
   reasons, the topology can remain relatively static and aggregation
   can be sustained.  Because routing on the ALT uses BGP, the same
   rules apply for generating aggregates; in particular, a LISP+ALT
   router should only be configured to generate an aggregate if it is
   configured with BGP sessions to all of the originators of components
   (more-specifics prefixes) of that aggregae; aggregate; not all of the
   components of need to be present for the aggregate to be originated
   (some may be holes in the covering prefix and some may be down) but
   the aggregating router must be configured to learn the state of all
   of the components.

   As an example, consider ETRs that are originating EID prefixes for
   10.1.0.0/24, 10.1.64.0/24, 10.1.128.0/24, and 10.1.192.0/24.  An ALT
   router should only be configured to generate an aggregate for
   10.1.0.0/16 if it has BGP sessions configured with all of these ETRs,
   in other words, only if it has sufficient knowledge about the state
   of those prefixes to summarize them.

   Under what circumstances the ALT router actually generates the
   aggregate is a matter of local policy: in some cases, it will be
   statically configured to do so at all times with a "static discard"
   route.  In other cases, it may be configured to only generate the
   aggregate prefix if at least one of the components of the aggregate
   is learned via BGP.

   This implies that two ALTs ALT routers that share an overlapping set of
   prefixes must exchange those prefixes if either is to generate and
   export a covering aggregate for those prefixes.  It also implies that
   an ETR
   that originates a prefix which connects to the ALT using BGP must maintain BGP sessions
   with all of the ALT routers that are configured to originate an
   aggregate which covers that prefix.  See also [LISP-MS] for an
   example of other ways that prefix origin consistency and aggregation
   are maintained.

   Note: much is currently uncertain about the best way to build the ALT
   network; as testing and prototype deployment proceeds, a guide to how
   to best build the ALT network will be developed.

5.3.  LISP+ALT Router (or ALT router for short)

   A LISP+ALT Router has the following functionality:

   1.  It runs, at a minimum, the eBGP part of the BGP protocol.

   2.  It supports a separate RIB which uses next-hop GRE tunnel
       interfaces for forwarding Data Probes and Map-Requests. ALT datagrams.

   3.  It can act as a "proxy-ITR" to support non-LISP sites.

   4.  It can act as an ETR, or as a recursive or re-encapsulating ITR
       to reduce mapping tables in site-based LISP routers.

5.4.  ITR and ETR in a LISP+ALT Environment

   An ITR using LISP+ALT may have additional functionality as follows:

   1.  If it is also acting as a LISP+ALT Router, it sends Data Probes
       or Map-Requests ALT datagrams
       on the BGP best path computed GRE tunnel for each EID prefix.

   2.  When acting solely as a ITR, it sends Data Probes or Map-Requests ALT datagrams directly to a
       configured LISP+ALT router.

   An ETR using LISP+ALT may also behave slightly differently:

   1.  If it is also acting as a LISP+ALT router, it advertises its
       configured EID-prefixes into BGP for distribution through the
       ALT.

   2.  It receives Data Probes and Map-Requests ALT datagrams only from its "upstream" LISP+ALT
       routers over the GRE tunnel(s) configured to its "upstream" LISP+ALT router(s) and it/them.  It
       responds with Map-
       Replies Map-Replies for the EID prefixes that it "owns".

5.5.  Use of GRE and BGP between LISP+ALT Routers

   The ALT network is built using GRE tunnels between LISP+ALT routers.
   eBGP sessions are configured over those tunnels, with each LISP+ALT
   router acting as a separate AS "hop" in a Path Vector for BGP.  For
   the purposes of LISP+ALT, the AS-path is used solely as a shortest-
   path determination and loop-avoidance mechanism.  Because all next-
   hops are on tunnel interfaces, no IGP is required to resolve those
   next-hops to exit interfaces.

   LISP+ALT's use of GRE and BGP reduces provider Operational Expense
   (OPEX) because no new protocols need to be either defined or used on
   the overlay topology.  Also, since tunnel IP addresses are local in
   scope, no coordination is needed for their assignment; any addressing
   scheme (including private addressing) can be used for tunnel
   addressing.

6.  EID Prefix Propagation and Map-Request Forwarding

   As described in Section 9.2, an ITR may send either a Map-Request or
   a data probe to find a given EID-to-RLOC mapping.  The ALT provides
   the infrastructure that allows these requests to reach the
   authoritative ETR.

   Note that, under normal circumstances, Map-Replies are not sent over
   the ALT - an ETR sends a Map-Reply to the source RLOC learned from
   the original Map-Request.  There may be scenarios, perhaps to
   encourage caching of EID-to-RLOC mappings by ALT routers, where Map-
   Replies could be sent over the ALT or where a "first-hop" ALT router
   might modify the originating RLOC on a Map-Request received from an
   ITR to force the Map-Reply to be sent to it; these cases will not be
   supported by initial LISP+ALT implementations but may be subject to
   future experimentation.

   LISP+ALT routers propagate mapping information for use by ITRs (when
   making Map-Requests or
   sending Data Probes) ALT datagrams) using eBGP [RFC4271]. eBGP is run on the
   inter-LISP+ALT router links, and and possibly between an edge ("last
   hop") LISP+ALT router and an ETR or between an edge ("first hop")
   LISP+ALT router and an ITR.  The ALT eBGP RIB consists of aggregated
   EID prefixes and their next hops toward the authoritative ETR for
   that EID prefix.

6.1.  Changes to ITR behavior with LISP+ALT

   When using LISP+ALT, an ITR always sends either Data Probes or Map-
   Requests ALT datagrams to one of its
   "upstream" LISP+ALT routers. routers; these are sent only to obtain new EID-
   to-RLOC mappings - RLOC probe and cache TTL refresh Map-Requests are
   not sent on the ALT.  As in basic LISP, it should use one of its
   RLOCs as the source address of these queries; it should explicitly
   not use a tunnel interface as the source address as doing so will
   cause replies to be forwarded over the tunneled topology and may be
   problematic if the tunnel interface address is not explicitly routed
   throughout the ALT.  If the ITR is running BGP with the LISP+ALT
   router(s), it selects the appropriate LISP+ALT router based on the
   BGP information received.  If it is not running BGP, it uses static
   configuration to select a LISP+ALT router; in the general case, this
   will effectively be an "EID-prefix default route".

6.2.  Changes to ETR behavior with LISP+ALT

   If an ETR connects using BGP to one or more LISP+ALT router(s), it
   simply announces its EID-prefix to those LISP+ALT routers.  In the
   "low-opex" case, where the ETR does not use BGP, it will still have a
   GRE tunnel to one or more LISP+ALT routers; these LISP+ALT router(s)
   the ETR must route Map-Requests and Data Probes to the ETR and
   contain configuration (in effect, static routes) for the ETR's EID-
   prefixes.  Note that in either case,
   when an ETR generates a Map-
   Reply Map-Reply message to return to a querying
   ITR, it sends it to the ITR's source-RLOC (i.e., on the underlying
   Internet topology, not on the ALT; this avoids any latency penalty
   (or "stretch") that might be incurred by routing over the ALT).

   See also Section 9 for more details about the "low-opex" ETR and ITR
   configurations.

7.  BGP configuration and protocol considerations

7.1.  Autonomous System Numbers (ASNs) in LISP+ALT

   The primary use of BGP today is to define the global Internet routing
   topology in terms of its participants, known as Autonomous Systems.
   LISP+ALT specifies the use of BGP to create a global EID-to-RLOC
   mapping database which, while related to the global routing database,
   serves a very different purpose and is organized into a very
   different hierarchy.  Because LISP+ALT does use BGP, however, it uses
   ASNs in the paths that are propagated among LISP+ALT routers.  To
   avoid confusion, it needs to be stressed that that these LISP+ALT
   ASNs use a new numbering space that is unrelated to the ASNs used by
   the global routing system.  Exactly how this new space will be
   assigned and managed will be determined during experimental
   deployment of LISP+ALT.

   Note that the LISP+ALT routers that make up the "core" of the ALT
   will not be associated with any existing core-Internet ASN because
   topology, hierarchy, and aggregation boundaries are completely
   separate from and independent of the global Internet routing system.

7.2.  Sub-Address Family Identifier (SAFI) for LISP+ALT

   As defined by this document, LISP+ALT may be implemented using BGP
   without modification.  Given the fundamental operational difference
   between propagating global Internet routing information (the current,
   dominant use of BGP) and managing the global EID-to-RLOC database
   (the use of BGP proposed by this document), it may be desirable to
   assign a new SAFI [RFC2858] to prevent operational confusion and
   difficulties, including the inadvertent leaking of information from
   one domain to the other.  At present, this document does not require
   the assignment of a new SAFI but the authors anticipate that
   experimentation may suggest the need for one in the future.

8.  EID-Prefix Aggregation

   The ALT BGP peering topology should be arranged in a tree-like
   fashion (with some meshiness), with redundancy to deal with node and
   link failures.  A basic assumption is that as long as the routers are
   up and running, the underlying topology will provide alternative
   routes to maintain BGP connectivity among LISP+ALT routers.

   Note that, as mentioned in Section 5.2, the use of BGP by LISP+ALT
   requires that information can only be aggregated where all active
   more-specific prefixes of a generated aggregate prefix are known.
   This implies, for example, that if a given set of prefixes is used by
   multiple, ALT networks, those networks must interconnect and share
   information about all of the prefixes if either were to generate an
   aggregate prefix that covered all of them.  This is no different than
   the way that BGP route aggregation works in the existing global
   routing system: a service provider only generates an aggregate route
   if it is configured to learn to all prefixes that make up that
   aggregate.

8.1.  Traffic engineering with LISP and LISP+ALT

   It is worth noting that LISP+ALT does not directly propagate EID-to-
   RLOC mappings.  What it does is provide a mechanism for a LISP ITR to
   find the ETR that holds the mapping for a particular EID prefix.
   This distinction is important for several reasons.  First, it means
   that the reachability of RLOCs is learned through the LISP ITR-ETR
   exchange so "flapping" of state information through BGP is not likely
   nor can mapping information become "stale" by slow propagation
   through the ALT BGP mesh.  Second, by deferring EID-to-RLOC mapping
   to an ITR-ETR exchange, it is possible to perform site-to-site
   traffic engineering through a combination of setting the preference
   and weight fields and by returning more-specific EID-to-RLOC
   information in LISP Map-Reply messages.  This is a powerful mechanism
   that can conceivably replace the traditional practice of routing
   prefix deaggregation for traffic engineering purposes.  Rather than
   propagating more-specific information into the global routing system
   for local- or regional-optimization of traffic flows, such more-
   specific information can be exchanged, through LISP (not LISP+ALT),
   on an as-needed basis between only those ITRs/ETRs (and, thus, site
   pairs) that need it; should a receiving ITR decide that it does not
   wish to store such more-specific information, it has the option of
   discarding it as long as a shorter, covering EID prefix exists.  Not
   only does this greatly improve the scalability of the global routing
   system but it also allows improved traffic engineering techniques by
   allowing richer and more fine-grained policies to be applied.

8.2.  Edge aggregation and dampening

   Note also that normal BGP best common practices apply to the ALT
   network.  In particular, first-hop ALT routers will aggregate EID
   prefixes and dampen changes to them in the face of excessive updates.
   Since EID prefix assignments are not expected to change with anywhere
   as frequently BGP prefix reachability on the Internet, such dampening
   should be very rare and might be worthy of logging as an exceptional
   event.  It is again worth noting that the ALT carries only EID
   prefixes, along with BGP-generated paths to the ETRs that source
   those prefixes as advertisements travel over the logical topology;
   this set of information is considerablly less volitile volatile than the
   actual EID-to-RLOC mappings.

9.  Connecting sites to the ALT network

9.1.  ETRs originating information into the ALT

   EID prefix information is originated into the ALT by two different
   mechanisms:

   eBGP:  An ETR may participate usually participates in the LISP+ALT overlay network by
      running eBGP to one or more LISP+ALT router(s) over GRE tunnel(s).
      In this case, the
      The ETR advertises reachability for its EID prefixes over these
      eBGP connection(s).  The LISP+ALT router(s) that receive(s) these
      prefixes then propagate(s) them into the ALT.  Here the ETR is
      simply an eBGP peer of LISP+ALT router(s) at the edge of the ALT.
      Where possible, a LISP+ALT router that receives EID prefixes from
      an ETR via eBGP should aggregate that information.

   Configuration:  One or more LISP+ALT router(s) may be configured to
      originate an EID prefix on behalf of the non-BGP-speaking ETR that
      is authoritative for a prefix.  As in the case above, the ETR is
      connected to LISP+ALT router(s) using GRE tunnel(s) but rather
      than BGP being used, the LISP+ALT router(s) are configured with
      what are in effect "static routes" for the EID prefixes "owned" by
      the ETR.  The GRE tunnel is used to route Map-Requests to the ETR.
      Note that the LISP+ALT router could also serve as a proxy for its
      TCP-connected ETRs.

   Note:  in both cases, an ETR may have connections to to multiple
      LISP+ALT routers for the following reasons:

      *  redundancy, so that a particular ETR is still reachable through
         the ALT even if one path or tunnel is unavailable.

      *  to connect to different parts of the ALT hierarchy if the ETR
         "owns" multiple EID-to-RLOC mappings for EID prefixes that
         cannot be aggregated by the same LISP+ALT router (i.e. are not
         topologically "close" to each other in the ALT).

9.2.  ITRs Using the ALT

   In order to source Map-Requests to the ALT or to route a Data Probe
   packet over the ALT, each ITR participating in the ALT establishes a
   connection to one or more LISP+ALT routers.  These connections can be
   either eBGP or TCP (as described above).

   In the case in which the ITR is running eBGP, the peer LISP+ALT
   routers use these connections to advertise highly aggregated EID-
   prefixes to the peer ITRs.  The ITR then installs the received
   prefixes into a forwarding table that is used to to send LISP Map-
   Requests to the appropriate LISP+ALT router.  In most cases, a LISP+
   ALT router will send a default mapping to its client ITRs so that
   they can send request for any EID prefix into the ALT.

   In the case in which the ITR is connected to some set of LISP+ALT
   routers without eBGP, the ITR sends Map-Requests to any of its
   connected LISP+ALT routers.

   An ITR may also choose to send the first few data packets over the
   ALT to minimize packet loss and reduce mapping latency.  In this
   case, the data packet serves as a mapping probe (Data Probe) and the
   ETR which receives the data packet (over the ALT) responds with a
   Map-Reply is sent to the ITR's source-RLOC using the underlying
   topology.  Note that the use of Data Probes is discouraged at this
   time (see Section 4.2). 4.3).

   In general, an ITR will establish connections only to LISP+ALT
   routers at the "edge" of the ALT (typically two for redundancy) but
   there may also be situations where an ITR would connect to other
   LISP+ALT routers to receive additional, shorter path information
   about a portion of the ALT of interest to it.  This can be
   accomplished by establishing GRE tunnels between the ITR and the set
   of LISP+ALT routers with the additional information.  This is a
   purely local policy issue between the ITR and the LISP+ALT routers in
   question.

10.  IANA Considerations

   This document makes no request of the IANA.

11.  Security Considerations

   LISP+ALT shares many of the security characteristics of BGP.  Its
   security mechanisms are comprised of existing technologies in wide
   operational use today.  Securing LISP+ALT is much simpler than
   securing BGP.

   Compared to BGP, LISP+ALT routers are not topologically bound,
   allowing them to be put in locations away from the vulnerable AS
   border (unlike eBGP speakers).

11.1.  Apparent LISP+ALT Vulnerabilities

   This section briefly lists of the apparent vulnerabilities of LISP+
   ALT.

   Mapping Integrity:  Can an attacker insert bogus mappings to black-
      hole (create a DoS) or intercept LISP data-plane packets?

   LISP+ALT router Availability:  Can an attacker DoS the LISP+ALT
      routers connected to a given ETR? without access to its mappings,
      a site is essentially unavailable.

   ITR Mapping/Resources:  Can an attacker force an ITR or LISP+ALT
      router to drop legitimate mapping requests by flooding it with
      random destinations that it will have to query for.  Further study
      is required to see the impact of admission control on the overlay
      network.

   EID Map-Request Exploits for Reconnaissance:  Can an attacker learn
      about a LISP destination sites' TE policy by sending legitimate
      mapping requests messages and then observing the RLOC mapping
      replies?  Is this information useful in attacking or subverting
      peer relationships?  Note that LISP 1.0 has a similar data-plane
      reconnaissance issue.

   Scaling of LISP+ALT router Resources:  Paths through the ALT may be
      of lesser bandwidth than more "direct" paths; this may make them
      more prone to high-volume denial-of-service attacks.  For this
      reason, all components of the ALT (ETRs and ALT routers) should be
      prepared to rate-limit traffic (ALT datagrams) that could be
      received across the
      ALT (Map-Requests and Data Probes). ALT.

   UDP Map-Reply from ETR:  Since Map-Replies packets are sent directly
      from the ETR to the ITR's RLOC, the ITR's RLOC may be vulnerable
      to various types of DoS attacks.

11.2.  Survey of LISP+ALT Security Mechanisms

   Explicit peering:  The devices themselves can both prioritize
      incoming packets as well as potentially do key checks in hardware
      to protect the control plane.

   Use of TCP to connect elements:  This makes it difficult for third
      parties to inject packets.

   Use of HMAC Protected TCP Connections:  HMAC is used to verify
      message integrity and authenticity, making it nearly impossible
      for third party devices to either insert or modify messages.

   Message Sequence Numbers and Nonce Values in Messages:  This allows
      for devices to verify that the mapping-reply packet was in
      response to the mapping-request that they sent.

11.3.  Using existing BGP Security mechanisms

   LISP+ALT's use of BGP allows for the ALT to take advantage of BGP
   security features designed for existing Internet BGP use.

   For example, should either sBGP [I-D.murphy-bgp-secr] or soBGP
   [I-D.white-sobgparchitecture] become widely deployed it expected that
   LISP+ALT could use these mechanisms to provide authentication of EID-
   to-RLOC mappings, and EID origination.

12.  Acknowledgments

   Many of the ideas described in this document were developed during
   detailed discussions with Scott Brim and Darrel Lewis, who made many
   insightful comments on earlier versions of this document.  Aditional
   thanks are due to Hannu Flinck and Amit Jain who offered many helpful
   suggestions for the -02 version.

13.  References

13.1.  Normative References

   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
              Requirement Levels", BCP 14, RFC 2119, March 1997.

   [RFC2784]  Farinacci, D., Li, T., Hanks, S., Meyer, D., and P.
              Traina, "Generic Routing Encapsulation (GRE)", RFC 2784,
              March 2000.

   [RFC2858]  Bates, T., Rekhter, Y., Chandra, R., and D. Katz,
              "Multiprotocol Extensions for BGP-4", RFC 2858, June 2000.

   [RFC4271]  Rekhter, Y., Li, T., and S. Hares, "A Border Gateway
              Protocol 4 (BGP-4)", RFC 4271, January 2006.

   [RFC4632]  Fuller, V. and T. Li, "Classless Inter-domain Routing
              (CIDR): The Internet Address Assignment and Aggregation
              Plan", BCP 122, RFC 4632, August 2006.

13.2.  Informative References

   [I-D.murphy-bgp-secr]
              Murphy, S., "BGP Security Analysis",
              draft-murphy-bgp-secr-04 (work in progress),
              November 2001.

   [I-D.white-sobgparchitecture]
              White, R., "Architecture and Deployment Considerations for
              Secure Origin BGP (soBGP)",
              draft-white-sobgparchitecture-00 (work in progress),
              May 2004.

   [Interworking]
              Lewis, D., Meyer, D., Farinacci, D., and V. Fuller,
              "Interworking LISP with IPv4 and ipv6",
              draft-ietf-lisp-interworking-00.txt
              draft-ietf-lisp-interworking-01.txt (work in progress),
              May 2009.
              January 2010.

   [LISP]     Farinacci, D., Fuller, V., Meyer, D., and D. Lewis,
              "Locator/ID Separation Protocol (LISP)",
              draft-ietf-lisp-00.txt
              draft-ietf-lisp-06.txt (work in progress), May January 2010.

   [LISP-MS]  Fuller, V. and D. Farinacci, "LISP Map Server",
              draft-ietf-lisp-ms-04.txt (work in progress),
              October 2009.

Authors' Addresses

   Vince Fuller
   Cisco
   Tasman Drive
   San Jose, CA  95134
   USA

   Email: vaf@cisco.com

   Dino Farinacci
   Cisco
   Tasman Drive
   San Jose, CA  95134
   USA

   Email: dino@cisco.com

   Dave Meyer
   Cisco
   Tasman Drive
   San Jose, CA  95134
   USA

   Email: dmm@cisco.com

   Darrel Lewis
   Cisco
   Tasman Drive
   San Jose, CA  95134
   USA

   Email: darlewis@cisco.com
--u3/rZRmxL6MmkK24 Content-Type: text/plain; charset=us-ascii Content-Disposition: attachment; filename="draft-ietf-lisp-alt-02.txt" Network Working Group V. Fuller Internet-Draft D. Farinacci Intended status: Experimental D. Meyer Expires: July 9, 2010 D. Lewis Cisco January 5, 2010 LISP Alternative Topology (LISP+ALT) draft-ietf-lisp-alt-02.txt Abstract This document describes a method of building an alternative, logical topology for managing Endpoint Identifier to Routing Locator mappings using the Locator/ID Separation Protocol. The logical network is built as an overlay on the public Internet using existing technologies and tools, specifically the Border Gateway Protocol and the Generic Routing Encapsulation. An important design goal for LISP+ALT is to allow for the relatively easy deployment of an efficient mapping system while minimizing changes to existing hardware and software. Status of this Memo This Internet-Draft is submitted to IETF in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet- Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt. The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. This Internet-Draft will expire on July 9, 2010. Copyright Notice Fuller, et al. Expires July 9, 2010 [Page 1] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 Copyright (c) 2010 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the BSD License. Fuller, et al. Expires July 9, 2010 [Page 2] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 Table of Contents 1. Requirements Notation . . . . . . . . . . . . . . . . . . . . 4 2. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 5 3. Definition of Terms . . . . . . . . . . . . . . . . . . . . . 6 4. The LISP 1.5 model . . . . . . . . . . . . . . . . . . . . . . 8 4.1. Routeability of EIDs . . . . . . . . . . . . . . . . . . . 8 4.2. Connectivity to non-LISP sites . . . . . . . . . . . . . . 9 4.3. Caveats on the use of Data Probes . . . . . . . . . . . . 9 5. LISP+ALT: Overview . . . . . . . . . . . . . . . . . . . . . . 10 5.1. ITR traffic handling . . . . . . . . . . . . . . . . . . . 11 5.2. EID Assignment - Hierarchy and Topology . . . . . . . . . 11 5.3. LISP+ALT Router (or ALT router for short) . . . . . . . . 12 5.4. ITR and ETR in a LISP+ALT Environment . . . . . . . . . . 13 5.5. Use of GRE and BGP between LISP+ALT Routers . . . . . . . 13 6. EID Prefix Propagation and Map-Request Forwarding . . . . . . 14 6.1. Changes to ITR behavior with LISP+ALT . . . . . . . . . . 14 6.2. Changes to ETR behavior with LISP+ALT . . . . . . . . . . 14 7. BGP configuration and protocol considerations . . . . . . . . 16 7.1. Autonomous System Numbers (ASNs) in LISP+ALT . . . . . . . 16 7.2. Sub-Address Family Identifier (SAFI) for LISP+ALT . . . . 16 8. EID-Prefix Aggregation . . . . . . . . . . . . . . . . . . . . 17 8.1. Traffic engineering with LISP and LISP+ALT . . . . . . . . 17 8.2. Edge aggregation and dampening . . . . . . . . . . . . . . 18 9. Connecting sites to the ALT network . . . . . . . . . . . . . 19 9.1. ETRs originating information into the ALT . . . . . . . . 19 9.2. ITRs Using the ALT . . . . . . . . . . . . . . . . . . . . 19 10. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 21 11. Security Considerations . . . . . . . . . . . . . . . . . . . 22 11.1. Apparent LISP+ALT Vulnerabilities . . . . . . . . . . . . 22 11.2. Survey of LISP+ALT Security Mechanisms . . . . . . . . . . 23 11.3. Using existing BGP Security mechanisms . . . . . . . . . . 23 12. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . 24 13. References . . . . . . . . . . . . . . . . . . . . . . . . . . 25 13.1. Normative References . . . . . . . . . . . . . . . . . . . 25 13.2. Informative References . . . . . . . . . . . . . . . . . . 25 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 26 Fuller, et al. Expires July 9, 2010 [Page 3] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 1. Requirements Notation The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [RFC2119]. Fuller, et al. Expires July 9, 2010 [Page 4] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 2. Introduction This document describes a method of building an alternative logical topology for managing Endpoint identifier to Routing Locator mappings using the Locator/ID Separation Protocol [LISP]. This logical topology uses existing technology and tools, specifically the Border Gateway Protocol [RFC4271] and its multi-protocol extension [RFC2858], along with the Generic Routing Encapsulation [RFC2784] protocol to construct an overlay network of devices that advertise EID-prefixes only. These Endpoint Identifier Prefix Aggregators hold hierarchically-assigned pieces of the Endpoint Identifier space (i.e., prefixes) and their next hops toward the network element which is authoritative for Endpoint Identifier-to-Routing Locator mapping for that prefix. Tunnel routers can use this overlay to make queries against and respond to mapping requests made against the distributed Endpoint Identifier-to-Routing Locator mapping database. Note the database is distributed (as described in [LISP]) and is stored in the ETRs. Note that an important design goal of LISP+ALT is to minimize the number of changes to existing hardware and/or software that are required to deploy the mapping system. It is envisioned that in most cases existing technology can be used to implement and deploy LISP+ ALT. Since the deployment of LISP+ALT adds new devices to the network, existing devices not need changes or upgrades. They can function as they are to realize an underlying and robust physical topology. The remainder of this document is organized as follows: Section 3 provides the definitions of terms used in this document. Section 4 outlines the basic LISP 1.5 model. Section 5 provides a basic overview of the LISP Alternate Topology architecture, and Section 6 describes how the ALT uses BGP to propagate Endpoint Identifier reachability over the overlay network. Section 8 describes the construction of the ALT aggregation hierarchy, and Section 9 discusses how LISP+ALT elements are connected to form the overlay network. Fuller, et al. Expires July 9, 2010 [Page 5] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 3. Definition of Terms LISP+ALT operates on two name spaces and introduces a new network element, the LISP+ALT Router (see below). This section provides high-level definitions of the LISP+ALT name spaces, network elements, and message types. The Alternative Logical Topology (ALT): The virtual overlay network made up of tunnels between EID Prefix Aggregators. The Border Gateway Protocol (BGP) runs between ALT routers and is used to carry reachability information for EID prefixes. Legacy Internet: The portion of the Internet which does not run LISP and does not participate in LISP+ALT. LISP+ALT Router: The devices which run on the ALT. The ALT is a static network built using tunnels between LISP+ALT routers. These routers are deployed in a hierarchy in which routers at each level in the this hierarchy are responsible for aggregating all EID prefixes learned from those logically "below" them and advertising summary prefixes to the routers logically "above" them. All prefix learning and propagation between levels is done using BGP. A LISP+ALT router at the lowest level, or "edge" of the ALT, learns EID prefixes from its "client" ETRs. See Section 4.1 for a description of how EID prefixes are learned at the "edge" of the ALT. See also Section 7 for details on how BGP is configured between the different network elements. The primary function of LISP+ALT routers is to provide a lightweight forwarding infrastructure for LISP control-plane messages (Map-Request and Map-Reply), and to transport data packets when the packet has the same destination address in both the inner (encapsulating) destination and outer destination addresses ((i.e., a Data Probe packet). Endpoint ID (EID): A 32-bit (for IPv4) or 128-bit (for ipv6) value used in the source and destination address fields of the first (most inner) LISP header of a packet. A packet that is emitted by a system contains EIDs in its headers and LISP headers are prepended only when the packet reaches an Ingress Tunnel Router (ITR) on the data path to the destination EID. In LISP+ALT, EID-prefixes MUST BE assigned in a hierarchical manner (in power-of-two) such that they can be aggregated by LISP+ ALT routers. In addition, a site may have site-local structure in how EIDs are topologically organized (subnetting) for routing within the site; this structure is not visible to the global routing system. Fuller, et al. Expires July 9, 2010 [Page 6] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 EID-Prefix Aggregate: A set of EID-prefixes said to be aggregatable in the [RFC4632] sense. That is, an EID-Prefix aggregate is defined to be a single contiguous power-of-two EID-prefix block. Such a block is characterized by a prefix and a length. Routing Locator (RLOC): An IP address of an egress tunnel router (ETR). It is the output of a EID-to-RLOC mapping lookup. An EID maps to one or more RLOCs. Typically, RLOCs are numbered from topologically-aggregatable blocks that are assigned to a site at each point to which it attaches to the global Internet; where the topology is defined by the connectivity of provider networks, RLOCs can be thought of as Provider Aggregatable (PA) addresses. Note that in LISP+ALT, RLOCs are not carried by LISP+ALT routers. EID-to-RLOC Mapping: A binding between an EID and the RLOC-set that can be used to reach the EID. The term "mapping" refers to an EID-to-RLOC mapping. EID Prefix Reachability: An EID prefix is said to be "reachable" if one or more of its locators are reachable. That is, an EID prefix is reachable if the ETR (or its proxy) that is authoritative for a given EID-to-RLOC mapping is reachable. Default Mapping: A Default Mapping is a mapping entry for EID- prefix 0.0.0.0/0 (0::/0 for ipv6). It maps to a locator-set used for all EIDs in the Internet. If there is a more specific EID- prefix in the mapping cache it overrides the Default Mapping entry. The Default Mapping route can be learned by configuration or from a Map-Reply message. Default Route: A Default Route in the context of LISP+ALT is a EID- prefix value of 0.0.0.0/0 (or 0::/0 for ipv6) which is advertised by BGP on top of the ALT. The Default Route is used to create a forwarding path for a packet to be sent into the ALT (and ALT datagram) on a router which does not have a full ALT forwarding database. Fuller, et al. Expires July 9, 2010 [Page 7] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 4. The LISP 1.5 model As documented in [LISP], the LISP 1.5 model uses the same basic query/response protocol machinery as LISP 1.0. In particular, LISP+ ALT provides two mechanisms for an ITR to obtain EID-to-RLOC mappings (both of these techniques are described in more detail in Section 9.2): Data Probe: An ITR may send the first few data packets into the ALT to minimize packet loss and to probe for the mapping; the authoritative ETR will respond to the ITR with a Map-Reply message when it receives the data packet over the ALT. Note that in this case, the inner Destination Address (DA), which is an EID, is copied to the outer DA and is routed over the ALT. Map-Request: An ITR may also send a Map-Request message into the ALT to request the mapping. As in the Data Probe case, the authoritative ETR will respond to the ITR with a Map-Reply message. Since the ALT only forwards on EID destinations, the DA of the Map-Request sent in to the ALT MUST be an EID. See [LISP] for the format of Map-Request and Map-Reply packets. ALT datagram: A Map-Request or Data Probe to be sent into or forwarded on the ALT. 4.1. Routeability of EIDs As with LISP 1.0, EIDs are routable and can be used, unaltered, as the source and destination addresses in IP datagrams. Unlike in LISP 1.0, LISP 1.5 EIDs are not routable on the public Internet; instead, they are only routed over a separate, virtual topology referred to as the LISP Alternative Virtual Network. This network is built as an overlay on the public Internet using tunnels to interconnect LISP+ALT routers. BGP is run over these tunnels to propagate the information needed to route ALT datagrams. Importantly, while the ETRs are the source(s) of the unaggregated EID prefix data, LISP+ALT uses existing BGP mechanisms to aggressively aggregate this information. Note that an ETR is not required to participate (or prevented from participating) in LISP+ALT; an ETR may choose to communicate its mappings to its serving LISP+ALT router(s) using subscription time static configuration or through a dynamic mechanism such as that described in [LISP-MS]. An ITR may similarly use a static EID "default route" or other configuration as described in [LISP-MS] to avoid the complexity of participating in the ALT. Fuller, et al. Expires July 9, 2010 [Page 8] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 4.2. Connectivity to non-LISP sites As stated above, EIDs used as IP addresses by LISP sites are not routable on the public Internet. This implies that, absent a mechanism for communication between LISP and non-LISP sites, connectivity between them is not possible. To resolve this problem, an "interworking" technology has been defined; see [Interworking] for details. 4.3. Caveats on the use of Data Probes It is worth noting that there has been a great deal of discussion and controversy about whether Data Probes are a good idea. On the one hand, using them offers a method of avoiding the "first packet drop" problem when an ITR does not have a mapping for a particular EID- prefix. On the other hand, forwarding data packets on the ALT would require that it either be engineered to support relatively high traffic rates, which is not generally feasible for a tunneled network, or that it be carefully designed to aggressively rate- limit traffic to avoid congestion or DoS attacks. There are also other issues involving latency or other differences between the ALT path that initial a Data Probe would take and the path that subsequent packets on the same flow would take once a mapping were in place on an ITR. For these and other reasons use of Data Probes should be considered experimental and should be disabled by default in all ITR implementations. Fuller, et al. Expires July 9, 2010 [Page 9] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 5. LISP+ALT: Overview LISP+ALT is a hybrid push/pull architecture. Aggregated EID prefixes are "pushed" among the LISP+ALT routers and, optionally, out to ITRs (which may elect to receive the aggregated information, as opposed to simply using a default mapping). Specific EID-to-RLOC mappings are "pulled" by ITRs when they either send explicit LISP requests or data packets on the alternate topology that result in triggered replies being generated by ETRs. The basic idea embodied in LISP+ALT is to use BGP, running over tunneled overlay network, to establish reachability required to route ALT datagrams over an alternate logical topology (ALT). The ALT BGPRoute Information Base (RIB) is comprised of EID prefixes and associated next hops. LISP+ALT routers interconnect using eBGP and propagate EID prefix updates, which are learned over eBGP connections to authoritative ETRs, or by static configuration. ITRs may also eBGP peer with one or more LISP+ALT to learn the best ALT router to use to forward an ALT datagram for a particular prefix; in most cases, an ITR will have a default EID mapping pointing to one or more LISP+ALT routers. Note that while this document specifies the use of Generic Routing Encapsulation (GRE) as a tunneling mechanism, there is no reason that an ALT cannot be built using other tunneling technologies. In cases where GRE does not meet security, management, or other operational requirements, it is reasonable to use another tunneling technology that does. References to "GRE tunnel" in later sections of this document should therefore not be taken as prohibiting or precluding the use of other, available tunneling mechanisms. Note also that two LISP+ALT routers that are directly adjacent (with no layer-3 router hops between them) need not use a tunnel between them; in this case, BGP may be configured across the interfaces that connect to their common subnet and that subnet is considered to be part of the ALT topology. Use of techniques, such as "eBGP multihop", to forward ALT datagrams through routers that do not participate in ALT routing, is not recommended. In summary, LISP+ALT uses BGP to propagate EID-prefix update information to facilitate forwarding an ALT datagram to the ETR that holds the EID-to-RLOC mapping for that EID-prefix. This reachability is carried as IPv4 or IPv6 NLRI without modification (since an EID prefix has the same syntax as IPv4 or IPv6 address prefix). LISP+ALT routers eBGP peer with one another, forming the ALT. A LISP+ALT router near the edge learns EID prefixes originated by authoritative ETRs. This may be via eBGP with the ETRs, by static configuration, or through some other dynamic mechanism such as that defined in [LISP-MS]. A LISP+ALT router may also be configured to aggregate EID Fuller, et al. Expires July 9, 2010 [Page 10] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 prefixes received from ETRs or from other LISP+ALT routers that are topologically "downstream" from it. 5.1. ITR traffic handling When an ITR receives a packet originated by an end system within its site (i.e. a host for which the ITR is the exit path out of the site) and the destination for that packet is not known in the ITR's mapping cache, the ITR encapsulates the packet in a LISP header, copying the inner destination address (EID) to the outer destination address (RLOC), and transmits it through a GRE tunnel to a LISP+ALT router in the ALT (see also [LISP-MS] for non-ALT-connected ITRs, noting that an ITR cannot send Data Probes to a Map-Server). This "first hop" LISP+ALT router uses EID-prefix routing information learned from other LISP+ALT routers via BGP to guide the packet to the ETR which "owns" the prefix. Upon receipt by the ETR, normal LISP processing occurs: the ETR responds to the ITR with a LISP Map-Reply that lists the RLOCs (and, thus, the ETRs to use) for the EID prefix. The ETR also de-encapsulates the packet and transmits it toward its destination. Upon receipt of the Map-Reply, the ITR installs the RLOC information for a given prefix into a local mapping database. With these mapping entries stored, additional packets destined to the given EID prefix are routed directly to a viable ETR without use of the ALT, until either the entry's TTL has expired, or the ITR can otherwise find no reachable ETR. Note that a valid mapping (not timed-out) may exist that contains no reachable RLOCs (i.e. all paths to that ETR are down); in this case, packets destined to the EID prefix are dropped, not routed through the ALT. Traffic routed over the ALT therefore consists of: o EID prefix Map-Requests, and o data packets destined for those EID prefixes while the ITR awaits map replies 5.2. EID Assignment - Hierarchy and Topology EID-prefixes will be allocated to a LISP site by Internet Registries. Multiple allocations may not be in power-of-2 blocks. But when they are, they will be aggregated into a single, advertised EID-prefix. The ALT network is built in a tree-structured hierarchy to allow aggregation at merge points in the tree. Building such a structure should minimize the number of EID-prefixes carried by LISP+ALT nodes near the top of the hierarchy. Fuller, et al. Expires July 9, 2010 [Page 11] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 Since the ALT will not need to change due to subscription or policy reasons, the topology can remain relatively static and aggregation can be sustained. Because routing on the ALT uses BGP, the same rules apply for generating aggregates; in particular, a LISP+ALT router should only be configured to generate an aggregate if it is configured with BGP sessions to all of the originators of components (more-specifics prefixes) of that aggregate; not all of the components of need to be present for the aggregate to be originated (some may be holes in the covering prefix and some may be down) but the aggregating router must be configured to learn the state of all of the components. As an example, consider ETRs that are originating EID prefixes for 10.1.0.0/24, 10.1.64.0/24, 10.1.128.0/24, and 10.1.192.0/24. An ALT router should only be configured to generate an aggregate for 10.1.0.0/16 if it has BGP sessions configured with all of these ETRs, in other words, only if it has sufficient knowledge about the state of those prefixes to summarize them. Under what circumstances the ALT router actually generates the aggregate is a matter of local policy: in some cases, it will be statically configured to do so at all times with a "static discard" route. In other cases, it may be configured to only generate the aggregate prefix if at least one of the components of the aggregate is learned via BGP. This implies that two ALT routers that share an overlapping set of prefixes must exchange those prefixes if either is to generate and export a covering aggregate for those prefixes. It also implies that an ETR which connects to the ALT using BGP must maintain BGP sessions with all of the ALT routers that are configured to originate an aggregate which covers that prefix. See also [LISP-MS] for an example of other ways that prefix origin consistency and aggregation are maintained. Note: much is currently uncertain about the best way to build the ALT network; as testing and prototype deployment proceeds, a guide to how to best build the ALT network will be developed. 5.3. LISP+ALT Router (or ALT router for short) A LISP+ALT Router has the following functionality: 1. It runs, at a minimum, the eBGP part of the BGP protocol. 2. It supports a separate RIB which uses next-hop GRE tunnel interfaces for forwarding ALT datagrams. Fuller, et al. Expires July 9, 2010 [Page 12] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 3. It can act as a "proxy-ITR" to support non-LISP sites. 4. It can act as an ETR, or as a recursive or re-encapsulating ITR to reduce mapping tables in site-based LISP routers. 5.4. ITR and ETR in a LISP+ALT Environment An ITR using LISP+ALT may have additional functionality as follows: 1. If it is also acting as a LISP+ALT Router, it sends ALT datagrams on the BGP best path computed GRE tunnel for each EID prefix. 2. When acting solely as a ITR, it sends ALT datagrams directly to a configured LISP+ALT router. An ETR using LISP+ALT may also behave slightly differently: 1. If it is also acting as a LISP+ALT router, it advertises its configured EID-prefixes into BGP for distribution through the ALT. 2. It receives ALT datagrams only from its "upstream" LISP+ALT routers over the GRE tunnel(s) configured to it/them. It responds with Map-Replies for the EID prefixes that it "owns". 5.5. Use of GRE and BGP between LISP+ALT Routers The ALT network is built using GRE tunnels between LISP+ALT routers. eBGP sessions are configured over those tunnels, with each LISP+ALT router acting as a separate AS "hop" in a Path Vector for BGP. For the purposes of LISP+ALT, the AS-path is used solely as a shortest- path determination and loop-avoidance mechanism. Because all next- hops are on tunnel interfaces, no IGP is required to resolve those next-hops to exit interfaces. LISP+ALT's use of GRE and BGP reduces provider Operational Expense (OPEX) because no new protocols need to be either defined or used on the overlay topology. Also, since tunnel IP addresses are local in scope, no coordination is needed for their assignment; any addressing scheme (including private addressing) can be used for tunnel addressing. Fuller, et al. Expires July 9, 2010 [Page 13] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 6. EID Prefix Propagation and Map-Request Forwarding As described in Section 9.2, an ITR may send either a Map-Request or a data probe to find a given EID-to-RLOC mapping. The ALT provides the infrastructure that allows these requests to reach the authoritative ETR. Note that, under normal circumstances, Map-Replies are not sent over the ALT - an ETR sends a Map-Reply to the source RLOC learned from the original Map-Request. There may be scenarios, perhaps to encourage caching of EID-to-RLOC mappings by ALT routers, where Map- Replies could be sent over the ALT or where a "first-hop" ALT router might modify the originating RLOC on a Map-Request received from an ITR to force the Map-Reply to be sent to it; these cases will not be supported by initial LISP+ALT implementations but may be subject to future experimentation. LISP+ALT routers propagate mapping information for use by ITRs (when sending ALT datagrams) using eBGP [RFC4271]. eBGP is run on the inter-LISP+ALT router links, and possibly between an edge ("last hop") LISP+ALT router and an ETR or between an edge ("first hop") LISP+ALT router and an ITR. The ALT eBGP RIB consists of aggregated EID prefixes and their next hops toward the authoritative ETR for that EID prefix. 6.1. Changes to ITR behavior with LISP+ALT When using LISP+ALT, an ITR sends ALT datagrams to one of its "upstream" LISP+ALT routers; these are sent only to obtain new EID- to-RLOC mappings - RLOC probe and cache TTL refresh Map-Requests are not sent on the ALT. As in basic LISP, it should use one of its RLOCs as the source address of these queries; it should explicitly not use a tunnel interface as the source address as doing so will cause replies to be forwarded over the tunneled topology and may be problematic if the tunnel interface address is not explicitly routed throughout the ALT. If the ITR is running BGP with the LISP+ALT router(s), it selects the appropriate LISP+ALT router based on the BGP information received. If it is not running BGP, it uses static configuration to select a LISP+ALT router; in the general case, this will effectively be an "EID-prefix default route". 6.2. Changes to ETR behavior with LISP+ALT If an ETR connects using BGP to one or more LISP+ALT router(s), it simply announces its EID-prefix to those LISP+ALT routers. Note that when an ETR generates a Map-Reply message to return to a querying ITR, it sends it to the ITR's source-RLOC (i.e., on the underlying Internet topology, not on the ALT; this avoids any latency penalty Fuller, et al. Expires July 9, 2010 [Page 14] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 (or "stretch") that might be incurred by routing over the ALT). Fuller, et al. Expires July 9, 2010 [Page 15] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 7. BGP configuration and protocol considerations 7.1. Autonomous System Numbers (ASNs) in LISP+ALT The primary use of BGP today is to define the global Internet routing topology in terms of its participants, known as Autonomous Systems. LISP+ALT specifies the use of BGP to create a global EID-to-RLOC mapping database which, while related to the global routing database, serves a very different purpose and is organized into a very different hierarchy. Because LISP+ALT does use BGP, however, it uses ASNs in the paths that are propagated among LISP+ALT routers. To avoid confusion, it needs to be stressed that that these LISP+ALT ASNs use a new numbering space that is unrelated to the ASNs used by the global routing system. Exactly how this new space will be assigned and managed will be determined during experimental deployment of LISP+ALT. Note that the LISP+ALT routers that make up the "core" of the ALT will not be associated with any existing core-Internet ASN because topology, hierarchy, and aggregation boundaries are completely separate from and independent of the global Internet routing system. 7.2. Sub-Address Family Identifier (SAFI) for LISP+ALT As defined by this document, LISP+ALT may be implemented using BGP without modification. Given the fundamental operational difference between propagating global Internet routing information (the current, dominant use of BGP) and managing the global EID-to-RLOC database (the use of BGP proposed by this document), it may be desirable to assign a new SAFI [RFC2858] to prevent operational confusion and difficulties, including the inadvertent leaking of information from one domain to the other. At present, this document does not require the assignment of a new SAFI but the authors anticipate that experimentation may suggest the need for one in the future. Fuller, et al. Expires July 9, 2010 [Page 16] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 8. EID-Prefix Aggregation The ALT BGP peering topology should be arranged in a tree-like fashion (with some meshiness), with redundancy to deal with node and link failures. A basic assumption is that as long as the routers are up and running, the underlying topology will provide alternative routes to maintain BGP connectivity among LISP+ALT routers. Note that, as mentioned in Section 5.2, the use of BGP by LISP+ALT requires that information can only be aggregated where all active more-specific prefixes of a generated aggregate prefix are known. This implies, for example, that if a given set of prefixes is used by multiple, ALT networks, those networks must interconnect and share information about all of the prefixes if either were to generate an aggregate prefix that covered all of them. This is no different than the way that BGP route aggregation works in the existing global routing system: a service provider only generates an aggregate route if it is configured to learn to all prefixes that make up that aggregate. 8.1. Traffic engineering with LISP and LISP+ALT It is worth noting that LISP+ALT does not directly propagate EID-to- RLOC mappings. What it does is provide a mechanism for a LISP ITR to find the ETR that holds the mapping for a particular EID prefix. This distinction is important for several reasons. First, it means that the reachability of RLOCs is learned through the LISP ITR-ETR exchange so "flapping" of state information through BGP is not likely nor can mapping information become "stale" by slow propagation through the ALT BGP mesh. Second, by deferring EID-to-RLOC mapping to an ITR-ETR exchange, it is possible to perform site-to-site traffic engineering through a combination of setting the preference and weight fields and by returning more-specific EID-to-RLOC information in LISP Map-Reply messages. This is a powerful mechanism that can conceivably replace the traditional practice of routing prefix deaggregation for traffic engineering purposes. Rather than propagating more-specific information into the global routing system for local- or regional-optimization of traffic flows, such more- specific information can be exchanged, through LISP (not LISP+ALT), on an as-needed basis between only those ITRs/ETRs (and, thus, site pairs) that need it; should a receiving ITR decide that it does not wish to store such more-specific information, it has the option of discarding it as long as a shorter, covering EID prefix exists. Not only does this greatly improve the scalability of the global routing system but it also allows improved traffic engineering techniques by allowing richer and more fine-grained policies to be applied. Fuller, et al. Expires July 9, 2010 [Page 17] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 8.2. Edge aggregation and dampening Note also that normal BGP best common practices apply to the ALT network. In particular, first-hop ALT routers will aggregate EID prefixes and dampen changes to them in the face of excessive updates. Since EID prefix assignments are not expected to change with anywhere as frequently BGP prefix reachability on the Internet, such dampening should be very rare and might be worthy of logging as an exceptional event. It is again worth noting that the ALT carries only EID prefixes, along with BGP-generated paths to the ETRs that source those prefixes as advertisements travel over the logical topology; this set of information is considerablly less volatile than the actual EID-to-RLOC mappings. Fuller, et al. Expires July 9, 2010 [Page 18] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 9. Connecting sites to the ALT network 9.1. ETRs originating information into the ALT EID prefix information is originated into the ALT by two different mechanisms: eBGP: An ETR usually participates in the LISP+ALT overlay network by running eBGP to one or more LISP+ALT router(s) over tunnel(s). The ETR advertises reachability for its EID prefixes over these eBGP connection(s). The LISP+ALT router(s) that receive(s) these prefixes then propagate(s) them into the ALT. Here the ETR is simply an eBGP peer of LISP+ALT router(s) at the edge of the ALT. Where possible, a LISP+ALT router that receives EID prefixes from an ETR via eBGP should aggregate that information. Configuration: One or more LISP+ALT router(s) may be configured to originate an EID prefix on behalf of the non-BGP-speaking ETR that is authoritative for a prefix. As in the case above, the ETR is connected to LISP+ALT router(s) using GRE tunnel(s) but rather than BGP being used, the LISP+ALT router(s) are configured with what are in effect "static routes" for the EID prefixes "owned" by the ETR. The GRE tunnel is used to route Map-Requests to the ETR. Note that the LISP+ALT router could also serve as a proxy for its TCP-connected ETRs. Note: in both cases, an ETR may have connections to to multiple LISP+ALT routers for the following reasons: * redundancy, so that a particular ETR is still reachable through the ALT even if one path or tunnel is unavailable. * to connect to different parts of the ALT hierarchy if the ETR "owns" multiple EID-to-RLOC mappings for EID prefixes that cannot be aggregated by the same LISP+ALT router (i.e. are not topologically "close" to each other in the ALT). 9.2. ITRs Using the ALT In order to source Map-Requests to the ALT or to route a Data Probe packet over the ALT, each ITR participating in the ALT establishes a connection to one or more LISP+ALT routers. These connections can be either eBGP or TCP (as described above). In the case in which the ITR is running eBGP, the peer LISP+ALT routers use these connections to advertise highly aggregated EID- prefixes to the peer ITRs. The ITR then installs the received prefixes into a forwarding table that is used to to send LISP Map- Fuller, et al. Expires July 9, 2010 [Page 19] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 Requests to the appropriate LISP+ALT router. In most cases, a LISP+ ALT router will send a default mapping to its client ITRs so that they can send request for any EID prefix into the ALT. In the case in which the ITR is connected to some set of LISP+ALT routers without eBGP, the ITR sends Map-Requests to any of its connected LISP+ALT routers. An ITR may also choose to send the first few data packets over the ALT to minimize packet loss and reduce mapping latency. In this case, the data packet serves as a mapping probe (Data Probe) and the ETR which receives the data packet (over the ALT) responds with a Map-Reply is sent to the ITR's source-RLOC using the underlying topology. Note that the use of Data Probes is discouraged at this time (see Section 4.3). In general, an ITR will establish connections only to LISP+ALT routers at the "edge" of the ALT (typically two for redundancy) but there may also be situations where an ITR would connect to other LISP+ALT routers to receive additional, shorter path information about a portion of the ALT of interest to it. This can be accomplished by establishing GRE tunnels between the ITR and the set of LISP+ALT routers with the additional information. This is a purely local policy issue between the ITR and the LISP+ALT routers in question. Fuller, et al. Expires July 9, 2010 [Page 20] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 10. IANA Considerations This document makes no request of the IANA. Fuller, et al. Expires July 9, 2010 [Page 21] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 11. Security Considerations LISP+ALT shares many of the security characteristics of BGP. Its security mechanisms are comprised of existing technologies in wide operational use today. Securing LISP+ALT is much simpler than securing BGP. Compared to BGP, LISP+ALT routers are not topologically bound, allowing them to be put in locations away from the vulnerable AS border (unlike eBGP speakers). 11.1. Apparent LISP+ALT Vulnerabilities This section briefly lists of the apparent vulnerabilities of LISP+ ALT. Mapping Integrity: Can an attacker insert bogus mappings to black- hole (create a DoS) or intercept LISP data-plane packets? LISP+ALT router Availability: Can an attacker DoS the LISP+ALT routers connected to a given ETR? without access to its mappings, a site is essentially unavailable. ITR Mapping/Resources: Can an attacker force an ITR or LISP+ALT router to drop legitimate mapping requests by flooding it with random destinations that it will have to query for. Further study is required to see the impact of admission control on the overlay network. EID Map-Request Exploits for Reconnaissance: Can an attacker learn about a LISP destination sites' TE policy by sending legitimate mapping requests messages and then observing the RLOC mapping replies? Is this information useful in attacking or subverting peer relationships? Note that LISP 1.0 has a similar data-plane reconnaissance issue. Scaling of LISP+ALT router Resources: Paths through the ALT may be of lesser bandwidth than more "direct" paths; this may make them more prone to high-volume denial-of-service attacks. For this reason, all components of the ALT (ETRs and ALT routers) should be prepared to rate-limit traffic (ALT datagrams) that could be received across the ALT. UDP Map-Reply from ETR: Since Map-Replies packets are sent directly from the ETR to the ITR's RLOC, the ITR's RLOC may be vulnerable to various types of DoS attacks. Fuller, et al. Expires July 9, 2010 [Page 22] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 11.2. Survey of LISP+ALT Security Mechanisms Explicit peering: The devices themselves can both prioritize incoming packets as well as potentially do key checks in hardware to protect the control plane. Use of TCP to connect elements: This makes it difficult for third parties to inject packets. Use of HMAC Protected TCP Connections: HMAC is used to verify message integrity and authenticity, making it nearly impossible for third party devices to either insert or modify messages. Message Sequence Numbers and Nonce Values in Messages: This allows for devices to verify that the mapping-reply packet was in response to the mapping-request that they sent. 11.3. Using existing BGP Security mechanisms LISP+ALT's use of BGP allows for the ALT to take advantage of BGP security features designed for existing Internet BGP use. For example, should either sBGP [I-D.murphy-bgp-secr] or soBGP [I-D.white-sobgparchitecture] become widely deployed it expected that LISP+ALT could use these mechanisms to provide authentication of EID- to-RLOC mappings, and EID origination. Fuller, et al. Expires July 9, 2010 [Page 23] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 12. Acknowledgments Many of the ideas described in this document were developed during detailed discussions with Scott Brim and Darrel Lewis, who made many insightful comments on earlier versions of this document. Aditional thanks are due to Hannu Flinck and Amit Jain who offered many helpful suggestions for the -02 version. Fuller, et al. Expires July 9, 2010 [Page 24] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 13. References 13.1. Normative References [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. [RFC2784] Farinacci, D., Li, T., Hanks, S., Meyer, D., and P. Traina, "Generic Routing Encapsulation (GRE)", RFC 2784, March 2000. [RFC2858] Bates, T., Rekhter, Y., Chandra, R., and D. Katz, "Multiprotocol Extensions for BGP-4", RFC 2858, June 2000. [RFC4271] Rekhter, Y., Li, T., and S. Hares, "A Border Gateway Protocol 4 (BGP-4)", RFC 4271, January 2006. [RFC4632] Fuller, V. and T. Li, "Classless Inter-domain Routing (CIDR): The Internet Address Assignment and Aggregation Plan", BCP 122, RFC 4632, August 2006. 13.2. Informative References [I-D.murphy-bgp-secr] Murphy, S., "BGP Security Analysis", draft-murphy-bgp-secr-04 (work in progress), November 2001. [I-D.white-sobgparchitecture] White, R., "Architecture and Deployment Considerations for Secure Origin BGP (soBGP)", draft-white-sobgparchitecture-00 (work in progress), May 2004. [Interworking] Lewis, D., Meyer, D., Farinacci, D., and V. Fuller, "Interworking LISP with IPv4 and ipv6", draft-ietf-lisp-interworking-01.txt (work in progress), January 2010. [LISP] Farinacci, D., Fuller, V., Meyer, D., and D. Lewis, "Locator/ID Separation Protocol (LISP)", draft-ietf-lisp-06.txt (work in progress), January 2010. [LISP-MS] Fuller, V. and D. Farinacci, "LISP Map Server", draft-ietf-lisp-ms-04.txt (work in progress), October 2009. Fuller, et al. Expires July 9, 2010 [Page 25] Internet-Draft LISP Alternative Topology (LISP+ALT) January 2010 Authors' Addresses Vince Fuller Cisco Tasman Drive San Jose, CA 95134 USA Email: vaf@cisco.com Dino Farinacci Cisco Tasman Drive San Jose, CA 95134 USA Email: dino@cisco.com Dave Meyer Cisco Tasman Drive San Jose, CA 95134 USA Email: dmm@cisco.com Darrel Lewis Cisco Tasman Drive San Jose, CA 95134 USA Email: darlewis@cisco.com Fuller, et al. Expires July 9, 2010 [Page 26] --u3/rZRmxL6MmkK24 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp --u3/rZRmxL6MmkK24-- --G4iJoqBmSsgzjUCe-- From root@core3.amsl.com Mon Jan 25 11:45:01 2010 Return-Path: X-Original-To: lisp@ietf.org Delivered-To: lisp@core3.amsl.com Received: by core3.amsl.com (Postfix, from userid 0) id 72A8C3A68D7; Mon, 25 Jan 2010 11:45:01 -0800 (PST) From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 Message-Id: <20100125194501.72A8C3A68D7@core3.amsl.com> Date: Mon, 25 Jan 2010 11:45:01 -0800 (PST) Cc: lisp@ietf.org Subject: [lisp] I-D Action:draft-ietf-lisp-alt-02.txt X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Jan 2010 19:45:01 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Locator/ID Separation Protocol Working Group of the IETF. Title : LISP Alternative Topology (LISP+ALT) Author(s) : V. Fuller, et al. Filename : draft-ietf-lisp-alt-02.txt Pages : 26 Date : 2010-01-25 This document describes a method of building an alternative, logical topology for managing Endpoint Identifier to Routing Locator mappings using the Locator/ID Separation Protocol. The logical network is built as an overlay on the public Internet using existing technologies and tools, specifically the Border Gateway Protocol and the Generic Routing Encapsulation. An important design goal for LISP+ALT is to allow for the relatively easy deployment of an efficient mapping system while minimizing changes to existing hardware and software. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-lisp-alt-02.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-lisp-alt-02.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-01-25113433.I-D@ietf.org> --NextPart-- From root@core3.amsl.com Mon Jan 25 14:00:01 2010 Return-Path: X-Original-To: lisp@ietf.org Delivered-To: lisp@core3.amsl.com Received: by core3.amsl.com (Postfix, from userid 0) id A1A643A67CC; Mon, 25 Jan 2010 14:00:01 -0800 (PST) From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 Message-Id: <20100125220001.A1A643A67CC@core3.amsl.com> Date: Mon, 25 Jan 2010 14:00:01 -0800 (PST) Cc: lisp@ietf.org Subject: [lisp] I-D Action:draft-ietf-lisp-06.txt X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Jan 2010 22:00:01 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Locator/ID Separation Protocol Working Group of the IETF. Title : Locator/ID Separation Protocol (LISP) Author(s) : D. Farinacci, et al. Filename : draft-ietf-lisp-06.txt Pages : 75 Date : 2010-01-25 This draft describes a simple, incremental, network-based protocol to implement separation of Internet addresses into Endpoint Identifiers (EIDs) and Routing Locators (RLOCs). This mechanism requires no changes to host stacks and no major changes to existing database infrastructures. The proposed protocol can be implemented in a relatively small number of routers. This proposal was stimulated by the problem statement effort at the Amsterdam IAB Routing and Addressing Workshop (RAWS), which took place in October 2006. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-lisp-06.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-lisp-06.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-01-25135525.I-D@ietf.org> --NextPart-- From wangxuewei@huawei.com Thu Jan 28 02:06:03 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 956DB3A68C5 for ; Thu, 28 Jan 2010 02:06:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.858 X-Spam-Level: * X-Spam-Status: No, score=1.858 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, J_CHICKENPOX_47=0.6, MIME_BASE64_TEXT=1.753, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uqTHdIMA5G+4 for ; Thu, 28 Jan 2010 02:06:02 -0800 (PST) Received: from szxga03-in.huawei.com (unknown [119.145.14.66]) by core3.amsl.com (Postfix) with ESMTP id B5BFE3A6814 for ; Thu, 28 Jan 2010 02:06:02 -0800 (PST) Received: from huawei.com (szxga03-in [172.24.2.9]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KWY0000LC29Z3@szxga03-in.huawei.com> for lisp@ietf.org; Thu, 28 Jan 2010 18:06:09 +0800 (CST) Received: from w00104636 ([10.111.12.167]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KWY009K8C2942@szxga03-in.huawei.com> for lisp@ietf.org; Thu, 28 Jan 2010 18:06:09 +0800 (CST) Date: Thu, 28 Jan 2010 18:06:08 +0800 From: Xuewei Wang To: lisp@ietf.org Message-id: <00a401caa001$82f75860$a70c6f0a@china.huawei.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350 X-Mailer: Microsoft Outlook Express 6.00.2900.3598 Content-type: text/plain; charset=gb2312 Content-transfer-encoding: base64 X-Priority: 3 X-MSMail-priority: Normal Subject: [lisp] Some ideas about the interworking issues. X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Jan 2010 10:06:03 -0000 SGkgYWxsLA0KIA0KDQpJIGFtIGEgbmV3Y29tZXIgb2YgdGhpcyBncm91cC4gUmVjZW50bHkgaSBy ZWFkIHRoZSBpbnRlcndvcmtpbmcgZHJhZnQsIGJlbG93IGlzIHNvbWUgbXkgY29uc2lkZXJhdGlv bnMuDQoNCg0KDQpUaGUgUFRSIG1lY2hhbmlzbSBhbGxvd3MgYSBub24tTElTUCBzaXRlIHRvIHNl bmQgcGFja2V0cyB0byBhIExJU1AtTlIgc2l0ZS4gVHJhZmZpY3MgZnJvbSB0aGUgbm9uLUxJU1Ag dG8gdGhlIExJU1AtTlIgc2l0ZXMgd2lsbCBiZSByb3V0ZWQgdG93YXJkcyB0aGUgUFRScywgd2hp Y2ggd2lsbCBmb3JjZSBoZWF2eSBidXJkZW4gb24gdGhlIFBUUnMsIGFuZCBwb3NzaWJseSBQVFJz IHdpbGwgYmUgdGhlIGJvdHRsZW5lY2sgb2YgdGhlIG5ldHdvcmsuIExJU1AtTkFUIG1lY2hhbmlz bSBhbGxvd3MgYSBMSVNQLU5SIHNpdGUgdG8gc3BlYWsgdG8gYSBub24tTElTUCBzaXRlLCB3aGlj aCBoYXMgbm8gdGhlIHByb2JsZW0gb2YgdGhlIFBUUiBtZWNoYW5pc20sIGJ1dCBub3QgY29uc2lk ZXIgdGhlIGNhc2Ugb2YgYSBub24tTElTUCBzaXRlIHNwZWFraW5nIHRvIGEgTElTUC1OUiBzaXRl Lg0KDQogDQoNCkkgYW0gdGhpbmtpbmcgYW5vdGhlciBtZXRob2QgZm9yIHRoZSBjYXNlIG9mIGEg bm9uLUxJU1Agc2l0ZSBzcGVha2luZyB0byBhIExJU1AtTlIgc2l0ZSBhcyBhbiBleHRlbnNpb24g dG8gdGhlIExJU1AtTkFUIG1lY2hhbmlzbSwgd2l0aCB3aGljaCB0aGUgdHJhZmZpYyBsb2FkIG9u IFJUUnMgY291bGQgYmUgcmVkdWNlZCB0byBzb21lIGV4dGVudC4gVGhpcyBtZXRob2Qgb25seSBy ZXF1aXJlcyBzb21lIGNoYW5nZXMgdG8gRE5ToaJJVFIgYW5kIEVUUi4gQnkgZGVmaW5pbmcgYSBu ZXcgb3Bjb2RlIGZvciB0aGUgRE5TIG1lc3NhZ2UsIHdlIGNhbiBpZGVudGlmeSB3aGV0aGVyIGEg RE5TIHF1ZXJ5IG1lc3NhZ2UgaXMgZnJvbSBhIExJU1Agc2l0ZSBvciBub3QuIA0KDQogDQoNCkF0 IHRoZSBzb3VyY2Ugc2l0ZSBhbiBob3N0IGluaXRpYXRlcyBhIEROUyBxdWVyeSBmb3IgdGhlIGRl c3RpbmF0aW9uIGhvc3QgaW4gYSBMSVNQLU5SIHNpdGUuIElmIHRoZSBzb3VyY2Ugc2l0ZSBpcyBh IExJU1Agc2l0ZSB3ZSBtYWtlIHRoZSBETlMgcmVzb2x2ZXIgb3IgdGhlIElUUiBvZiB0aGUgc2l0 ZSB0byBzZXQgdGhlIG5ldyBkZWZpbmVkIG9wY29kZSB3aGljaCBpbmRpY2F0ZXMgdGhlIEROUyBy ZXF1ZXN0IGlzIGZyb20gYSBMSVNQIHNpdGUuIElmIHRoZSBzb3VyY2Ugc2l0ZSBpcyBhIG5vbi1M SVNQIHNpdGUgbm8gY2hhbmdlIGlzIG5lZWRlZC4NCg0KIA0KDQpBdCB0aGUgZGVzdGluYXRpb24g c2l0ZSB3aGVuIHJlY2VpdmluZyBhIEROUyBxdWVyeSBtZXNzYWdlLCB0aGUgRE5TIHNlcnZlciBy ZXNwb25kcyB3aXRoIHRoZSBFSUQgb2YgdGhlIGRlc3RpbmF0aW9uIGhvc3QgYW5kIGNvcGllcyB0 aGUgbmV3IGRlZmluZWQgb3Bjb2RlIG9mIHRoZSBxdWVyeSBtZXNzYWdlIHRvIHRoZSByZXNwb25z ZSBtZXNzYWdlLiBUaGUgRVRSIGludGVyY2VwdHMgdGhlIHJlc3BvbnNlIG1lc3NhZ2UgYW5kIGp1 ZGdlcyB3aGV0aGVyIHRoZSBxdWVyeSBpcyBmcm9tIGEgTElTUCBzaXRlIG9yIG5vdCBhY2NvcmRp bmcgdG8gdGhlIG9wY29kZSBvZiB0aGUgcmVzcG9uc2UgbWVzc2FnZS4gSWYgdGhlIHF1ZXJ5IGNv bWVzIGZyb20gYSBMSVNQIHNpdGUgdGhlIEVUUiBhc3NpZ25zIGEgcm91dGFibGUgYWRkcmVzcyBv ZiB0aGUgRVRSIGZvciB0aGUgZGVzdGluYXRpb24gaG9zdChyZXVzaW5nIHRoZSBMSVNQLU5BVCBm dW5jdGlvbiBvbiBFVFIpIGFuZCByZXNwb25kcyB3aXRoIHRoZSByb3V0YWJsZSBhZGRyZXNzIHRv IHRoZSBzb3VyY2UgaG9zdCwgYW5kIGlmIHRoZSBxdWVyeSBjb21lcyBmcm9tIGEgbm9uLUxJU1Ag c2l0ZSB0aGUgRVRSIGp1c3QgZm9yd2FyZHMgdGhlIHJlc3BvbnNlIG1lc3NhZ2UgdG8gdGhlIHNv dXJjZSBob3N0Lg0KDQogDQoNClRodXMgdGhlIGhvc3QgZnJvbSB0aGUgbm9uLUxJU1Agc2l0ZSBj YW4gY29tbXVuY2F0ZSB3aXRoIHRoZSBob3N0IGluIHRoZSBMSVNQLU5SIHNpdGUgd2l0aCB0aGlz IHJvdXRhYmxlIGFkZHJlc3MgYXMgZGVzdGluYXRpb24gYWRkcmVzcywgYW5kIHRoZSBFVFIgb2Yg dGhlIExJU1AtTlIgc2l0ZSBwbGF5cyB0aGUgc2FtZSByb2xlIGFzIGEgTkFULg0KDQoNCg0KSG93 IGRvIHlvdSB0aGluayB0aGlzIG1ldGhvZD8NCg0KDQoNClh1ZXdlaSBXYW5n From darlewis@cisco.com Fri Jan 29 13:37:34 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6A96F3A6949 for ; Fri, 29 Jan 2010 13:37:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.999 X-Spam-Level: X-Spam-Status: No, score=-9.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_47=0.6, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8rEPikudr4p2 for ; Fri, 29 Jan 2010 13:37:33 -0800 (PST) Received: from sj-iport-3.cisco.com (sj-iport-3.cisco.com [171.71.176.72]) by core3.amsl.com (Postfix) with ESMTP id 5352E3A683F for ; Fri, 29 Jan 2010 13:37:33 -0800 (PST) Authentication-Results: sj-iport-3.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApsEAJrjYkurRN+K/2dsb2JhbACDM8AOh1ABj3+BKIEMgTJcBA X-IronPort-AV: E=Sophos;i="4.49,370,1262563200"; d="scan'208";a="210090380" Received: from sj-core-4.cisco.com ([171.68.223.138]) by sj-iport-3.cisco.com with ESMTP; 29 Jan 2010 21:37:57 +0000 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-4.cisco.com (8.13.8/8.14.3) with ESMTP id o0TLbtIn003519; Fri, 29 Jan 2010 21:37:57 GMT Received: from xmb-sjc-213.amer.cisco.com ([171.70.151.153]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 29 Jan 2010 13:37:55 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-2022-jp" Content-Transfer-Encoding: 7bit Date: Fri, 29 Jan 2010 13:37:55 -0800 Message-ID: In-Reply-To: <00a401caa001$82f75860$a70c6f0a@china.huawei.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Some ideas about the interworking issues. Thread-Index: AcqgAYxba5nhVTIuQRaaWFJejENw/gAlwKiw References: <00a401caa001$82f75860$a70c6f0a@china.huawei.com> From: "Darrel Lewis (darlewis)" To: "Xuewei Wang" , X-OriginalArrivalTime: 29 Jan 2010 21:37:55.0851 (UTC) FILETIME=[519ED5B0:01CAA12B] Subject: Re: [lisp] Some ideas about the interworking issues. X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Jan 2010 21:37:34 -0000 > Hi all, > > > I am a newcomer of this group. Recently i read the > interworking draft, below is some my considerations. > Thanks for your feedback! > > > The PTR mechanism allows a non-LISP site to send packets to a > LISP-NR site. Traffics from the non-LISP to the LISP-NR sites > will be routed towards the PTRs, which will force heavy > burden on the PTRs, and possibly PTRs will be the bottleneck > of the network. LISP-NAT mechanism allows a LISP-NR site to > speak to a non-LISP site, which has no the problem of the PTR > mechanism, but not consider the case of a non-LISP site > speaking to a LISP-NR site. I'm sorry the draft was not clear. A non-LISP site can communicate with a LISP-NR which is using LISP-NAT because the outer-NAT addresses are routable. So a LISP-NAT site would put this outer address into DNS. Of course, this has all the classic limitations of IPv4 NAT. > > > I am thinking another method for the case of a non-LISP site > speaking to a LISP-NR site as an extension to the LISP-NAT > mechanism, with which the traffic load on RTRs could be > reduced to some extent. This method only requires some > changes to DNS、ITR and ETR. By defining a new opcode for the > DNS message, we can identify whether a DNS query message is > from a LISP site or not. > So if I understand you correctly, in theory a LISP site would return the outer address to non-LISP sites, and the inner address to LISP-NR sites. It would know to do this because the incoming DNS request indicated that the source was a LISP site. > > > At the source site an host initiates a DNS query for the > destination host in a LISP-NR site. If the source site is a > LISP site we make the DNS resolver or the ITR of the site to > set the new defined opcode which indicates the DNS request is > from a LISP site. If the source site is a non-LISP site no > change is needed. > Understood. > > > At the destination site when receiving a DNS query message, > the DNS server responds with the EID of the destination host > and copies the new defined opcode of the query message to the > response message. The ETR intercepts the response message and > judges whether the query is from a LISP site or not according > to the opcode of the response message. If the query comes > from a LISP site the ETR assigns a routable address of the > ETR for the destination host(reusing the LISP-NAT function on > ETR) and responds with the routable address to the source > host, and if the query comes from a non-LISP site the ETR > just forwards the response message to the source host. I'm not sure that its viable to expect the ETR to intercept the DNS reply packet and do something to it. There are many reasons for this, including the fact that the ITR may be on a separate device from the ETR, so the ETR will never see the response. Also, hijacking and changing the contents of data-packets on the fly is not something I feel comfortable having a protocol doing (performance, security, lots of issues). > > > Thus the host from the non-LISP site can communcate with the > host in the LISP-NR site with this routable address as > destination address, and the ETR of the LISP-NR site plays > the same role as a NAT. > > > > How do you think this method? > > My initial reaction that, while an interesting idea, it suffers from some problems (if I understand this proposal correctly): 1) Its complicated LISP-NAT is supposed to be a local, simple mechanism to allow for communication 2) It requires middle boxes to modify DNS reply packets 3) It assumes a LISP-NR site is using DNS when it communicates with a LISP-NR site. 4) It requires DNS changes when a site migrates to LISP Thanks for taking the time to write this idea up! -Darrel > > Xuewei Wang > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > From xuxh@huawei.com Fri Jan 29 18:37:51 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A96153A68E1 for ; Fri, 29 Jan 2010 18:37:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.923 X-Spam-Level: * X-Spam-Status: No, score=1.923 tagged_above=-999 required=5 tests=[AWL=-0.971, BAYES_00=-2.599, CN_BODY_35=0.339, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, J_CHICKENPOX_47=0.6, MIME_CHARSET_FARAWAY=2.45, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mim8a8d1waMr for ; Fri, 29 Jan 2010 18:37:50 -0800 (PST) Received: from szxga02-in.huawei.com (unknown [119.145.14.65]) by core3.amsl.com (Postfix) with ESMTP id 74BF03A63C9 for ; Fri, 29 Jan 2010 18:37:50 -0800 (PST) Received: from huawei.com (szxga02-in [172.24.2.6]) by szxga02-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KX1008XEGNGLF@szxga02-in.huawei.com> for lisp@ietf.org; Sat, 30 Jan 2010 10:38:04 +0800 (CST) Received: from huawei.com ([172.24.2.119]) by szxga02-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KX100IDKGNGI6@szxga02-in.huawei.com> for lisp@ietf.org; Sat, 30 Jan 2010 10:38:04 +0800 (CST) Received: from HUAWEIE75F8F11 ([10.111.13.9]) by szxml04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KX100L8ZGNFPG@szxml04-in.huawei.com> for lisp@ietf.org; Sat, 30 Jan 2010 10:38:04 +0800 (CST) Date: Sat, 30 Jan 2010 10:38:03 +0800 From: Xu Xiaohu In-reply-to: To: "'Darrel Lewis (darlewis)'" , 'Xuewei Wang' , lisp@ietf.org Message-id: <002201caa155$3f5779f0$090d6f0a@china.huawei.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 X-Mailer: Microsoft Office Outlook 11 Content-type: text/plain; charset=gb2312 Content-transfer-encoding: quoted-printable Thread-index: AcqgAYxba5nhVTIuQRaaWFJejENw/gAlwKiwAC70STA= Subject: Re: [lisp] Some ideas about the interworking issues. X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 30 Jan 2010 02:37:51 -0000 > -----=D3=CA=BC=FE=D4=AD=BC=FE----- > =B7=A2=BC=FE=C8=CB: lisp-bounces@ietf.org = [mailto:lisp-bounces@ietf.org] =B4=FA=B1=ED Darrel > Lewis (darlewis) > =B7=A2=CB=CD=CA=B1=BC=E4: 2010=C4=EA1=D4=C230=C8=D5 5:38 > =CA=D5=BC=FE=C8=CB: Xuewei Wang; lisp@ietf.org > =D6=F7=CC=E2: Re: [lisp] Some ideas about the interworking issues. >=20 >=20 > > Hi all, > > > > > > I am a newcomer of this group. Recently i read the > > interworking draft, below is some my considerations. > > >=20 > Thanks for your feedback! >=20 > > > > > > The PTR mechanism allows a non-LISP site to send packets to a > > LISP-NR site. Traffics from the non-LISP to the LISP-NR sites > > will be routed towards the PTRs, which will force heavy > > burden on the PTRs, and possibly PTRs will be the bottleneck > > of the network. LISP-NAT mechanism allows a LISP-NR site to > > speak to a non-LISP site, which has no the problem of the PTR > > mechanism, but not consider the case of a non-LISP site > > speaking to a LISP-NR site. >=20 > I'm sorry the draft was not clear. A non-LISP site can communicate = with a > LISP-NR which is using LISP-NAT because the outer-NAT addresses are routable. > So a LISP-NAT site would put this outer address into DNS. Of course, = this has > all the classic limitations of IPv4 NAT. If so, the hosts in a LISP site would have to also use the routable = outer address as destination address for initiating communication to the hosts = in a LISP-NR. As a result, the traffic between two LISP sites would also = have to traverse the PTRs. I think this is not your expection. Xiaohu =20 > > > > > > I am thinking another method for the case of a non-LISP site > > speaking to a LISP-NR site as an extension to the LISP-NAT > > mechanism, with which the traffic load on RTRs could be > > reduced to some extent. This method only requires some > > changes to DNS=A1=A2ITR and ETR. By defining a new opcode for the > > DNS message, we can identify whether a DNS query message is > > from a LISP site or not. > > >=20 > So if I understand you correctly, in theory a LISP site would return = the outer > address to non-LISP sites, and the inner address to LISP-NR sites. It would > know to do this because the incoming DNS request indicated that the = source was > a LISP site. >=20 > > > > > > At the source site an host initiates a DNS query for the > > destination host in a LISP-NR site. If the source site is a > > LISP site we make the DNS resolver or the ITR of the site to > > set the new defined opcode which indicates the DNS request is > > from a LISP site. If the source site is a non-LISP site no > > change is needed. > > >=20 > Understood. >=20 > > > > > > At the destination site when receiving a DNS query message, > > the DNS server responds with the EID of the destination host > > and copies the new defined opcode of the query message to the > > response message. The ETR intercepts the response message and > > judges whether the query is from a LISP site or not according > > to the opcode of the response message. If the query comes > > from a LISP site the ETR assigns a routable address of the > > ETR for the destination host(reusing the LISP-NAT function on > > ETR) and responds with the routable address to the source > > host, and if the query comes from a non-LISP site the ETR > > just forwards the response message to the source host. >=20 > I'm not sure that its viable to expect the ETR to intercept the DNS = reply packet > and do something to it. There are many reasons for this, including = the fact > that the ITR may be on a separate device from the ETR, so the ETR will never > see the response. Also, hijacking and changing the contents of data-packets > on the fly is not something I feel comfortable having a protocol doing > (performance, security, lots of issues). >=20 > > > > > > Thus the host from the non-LISP site can communcate with the > > host in the LISP-NR site with this routable address as > > destination address, and the ETR of the LISP-NR site plays > > the same role as a NAT. > > > > > > > > How do you think this method? > > > > > My initial reaction that, while an interesting idea, it suffers from = some > problems (if I understand this proposal correctly): >=20 > 1) Its complicated LISP-NAT is supposed to be a local, simple = mechanism to > allow for communication > 2) It requires middle boxes to modify DNS reply packets > 3) It assumes a LISP-NR site is using DNS when it communicates with a LISP-NR > site. > 4) It requires DNS changes when a site migrates to LISP >=20 > Thanks for taking the time to write this idea up! >=20 > -Darrel >=20 > > > > Xuewei Wang > > _______________________________________________ > > lisp mailing list > > lisp@ietf.org > > https://www.ietf.org/mailman/listinfo/lisp > > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From xuxh@huawei.com Fri Jan 29 23:47:27 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 56D5C3A687E for ; Fri, 29 Jan 2010 23:47:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.02 X-Spam-Level: ** X-Spam-Status: No, score=2.02 tagged_above=-999 required=5 tests=[AWL=-0.874, BAYES_00=-2.599, CN_BODY_35=0.339, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, J_CHICKENPOX_47=0.6, MIME_CHARSET_FARAWAY=2.45, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WC0pnPtKf5-k for ; Fri, 29 Jan 2010 23:47:26 -0800 (PST) Received: from szxga04-in.huawei.com (unknown [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id B52993A67F6 for ; Fri, 29 Jan 2010 23:47:25 -0800 (PST) Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KX10003QUZGAU@szxga04-in.huawei.com> for lisp@ietf.org; Sat, 30 Jan 2010 15:47:40 +0800 (CST) Received: from huawei.com ([172.24.2.119]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KX100DPFUZG9Q@szxga04-in.huawei.com> for lisp@ietf.org; Sat, 30 Jan 2010 15:47:40 +0800 (CST) Received: from HUAWEIE75F8F11 ([10.111.13.9]) by szxml04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KX100GNJUZE5C@szxml04-in.huawei.com> for lisp@ietf.org; Sat, 30 Jan 2010 15:47:40 +0800 (CST) Date: Sat, 30 Jan 2010 15:47:39 +0800 From: Xu Xiaohu In-reply-to: To: "'Darrel Lewis (darlewis)'" , 'Xuewei Wang' , lisp@ietf.org Message-id: <002301caa180$7f3f9680$090d6f0a@china.huawei.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 X-Mailer: Microsoft Office Outlook 11 Content-type: text/plain; charset=gb2312 Content-transfer-encoding: quoted-printable Thread-index: AcqgAYxba5nhVTIuQRaaWFJejENw/gAlwKiwAC70STAACS9gAA== Subject: Re: [lisp] Some ideas about the interworking issues. X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 30 Jan 2010 07:47:27 -0000 > -----=D3=CA=BC=FE=D4=AD=BC=FE----- > =B7=A2=BC=FE=C8=CB: Xu Xiaohu [mailto:xuxh@huawei.com] > =B7=A2=CB=CD=CA=B1=BC=E4: 2010=C4=EA1=D4=C230=C8=D5 10:38 > =CA=D5=BC=FE=C8=CB: 'Darrel Lewis (darlewis)'; 'Xuewei Wang'; = 'lisp@ietf.org' > =D6=F7=CC=E2: re: [lisp] Some ideas about the interworking issues. >=20 >=20 >=20 > > -----=D3=CA=BC=FE=D4=AD=BC=FE----- > > =B7=A2=BC=FE=C8=CB: lisp-bounces@ietf.org = [mailto:lisp-bounces@ietf.org] =B4=FA=B1=ED Darrel > > Lewis (darlewis) > > =B7=A2=CB=CD=CA=B1=BC=E4: 2010=C4=EA1=D4=C230=C8=D5 5:38 > > =CA=D5=BC=FE=C8=CB: Xuewei Wang; lisp@ietf.org > > =D6=F7=CC=E2: Re: [lisp] Some ideas about the interworking issues. > > > > > > > Hi all, > > > > > > > > > I am a newcomer of this group. Recently i read the > > > interworking draft, below is some my considerations. > > > > > > > Thanks for your feedback! > > > > > > > > > > > The PTR mechanism allows a non-LISP site to send packets to a > > > LISP-NR site. Traffics from the non-LISP to the LISP-NR sites > > > will be routed towards the PTRs, which will force heavy > > > burden on the PTRs, and possibly PTRs will be the bottleneck > > > of the network. LISP-NAT mechanism allows a LISP-NR site to > > > speak to a non-LISP site, which has no the problem of the PTR > > > mechanism, but not consider the case of a non-LISP site > > > speaking to a LISP-NR site. > > > > I'm sorry the draft was not clear. A non-LISP site can communicate = with a > > LISP-NR which is using LISP-NAT because the outer-NAT addresses are routable. > > So a LISP-NAT site would put this outer address into DNS. Of = course, this > has > > all the classic limitations of IPv4 NAT. >=20 > If so, the hosts in a LISP site would have to also use the routable = outer address > as destination address for initiating communication to the hosts in a LISP-NR. > As a result, the traffic between two LISP sites would also have to traverse > the PTRs. I think this is not your expection. Hi Darrel, By the way, assuming a internal host at the LISP-NR site wants to = initiate a communication to another internal host at the same site, if the = initiator obtained the routable outer address of the responder as a response to = its DNS query, packets from the initiator to the responder would have to be forwarded up to the nearest xTR, which in turn would then rewrite the = outer address to appropriate inner address (i.e., EID), and forward the packet towards the initiator. This so-called hairpin issue should be avoided, right? > > > I am thinking another method for the case of a non-LISP site > > > speaking to a LISP-NR site as an extension to the LISP-NAT > > > mechanism, with which the traffic load on RTRs could be > > > reduced to some extent. This method only requires some > > > changes to DNS=A1=A2ITR and ETR. By defining a new opcode for the > > > DNS message, we can identify whether a DNS query message is > > > from a LISP site or not. > > > > > > > So if I understand you correctly, in theory a LISP site would return = the outer > > address to non-LISP sites, and the inner address to LISP-NR sites. = It would > > know to do this because the incoming DNS request indicated that the source > was > > a LISP site. > > > > > > > > > > > At the source site an host initiates a DNS query for the > > > destination host in a LISP-NR site. If the source site is a > > > LISP site we make the DNS resolver or the ITR of the site to > > > set the new defined opcode which indicates the DNS request is > > > from a LISP site. If the source site is a non-LISP site no > > > change is needed. > > > > > > > Understood. > > > > > > > > > > > At the destination site when receiving a DNS query message, > > > the DNS server responds with the EID of the destination host > > > and copies the new defined opcode of the query message to the > > > response message. The ETR intercepts the response message and > > > judges whether the query is from a LISP site or not according > > > to the opcode of the response message. If the query comes > > > from a LISP site the ETR assigns a routable address of the > > > ETR for the destination host(reusing the LISP-NAT function on > > > ETR) and responds with the routable address to the source > > > host, and if the query comes from a non-LISP site the ETR > > > just forwards the response message to the source host. > > > > I'm not sure that its viable to expect the ETR to intercept the DNS reply > packet > > and do something to it. There are many reasons for this, including = the fact > > that the ITR may be on a separate device from the ETR, so the ETR = will never Can the LISP-NAT mechanism works well if the ITR is on a separate device from the ETR? > > see the response. Also, hijacking and changing the contents of data-packets > > on the fly is not something I feel comfortable having a protocol = doing > > (performance, security, lots of issues). Changing the DNS messages on the fly (i.e., DNS-ALG) is not unusual in = the current NAT deployment scenario, I guess. > > > > > > > > > Thus the host from the non-LISP site can communcate with the > > > host in the LISP-NR site with this routable address as > > > destination address, and the ETR of the LISP-NR site plays > > > the same role as a NAT. > > > > > > > > > > > > How do you think this method? > > > > > > > > My initial reaction that, while an interesting idea, it suffers from some > > problems (if I understand this proposal correctly): > > > > 1) Its complicated LISP-NAT is supposed to be a local, simple = mechanism to > > allow for communication Yes. However, the current LISP-NAT mechanism is only suitable for the communication from LISP-NR site to non-LISP site, not vice versa, if I understood it correctly. > > 2) It requires middle boxes to modify DNS reply packets Yes, see the above. > > 3) It assumes a LISP-NR site is using DNS when it communicates with = a LISP-NR > > site. Yes. However, this is just an optional trick to lowering the traffic = burden on the PTRs (just like the route optimization trick in Mobile IP to = reducing the burden on the home-agents), rather than an alternative to the PTR mechanism. > > 4) It requires DNS changes when a site migrates to LISP No, maybe only ITRs and ETRs need to change. Xiaohu > > Thanks for taking the time to write this idea up! > > > > -Darrel > > > > > > > > Xuewei Wang > > > _______________________________________________ > > > lisp mailing list > > > lisp@ietf.org > > > https://www.ietf.org/mailman/listinfo/lisp > > > > > _______________________________________________ > > lisp mailing list > > lisp@ietf.org > > https://www.ietf.org/mailman/listinfo/lisp From jzwiebel@cisco.com Sat Jan 30 06:35:01 2010 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 792C83A67CF for ; Sat, 30 Jan 2010 06:35:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lX5K3Q-iChnG for ; Sat, 30 Jan 2010 06:35:00 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 382B93A6405 for ; Sat, 30 Jan 2010 06:35:00 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-AV: E=Sophos;i="4.49,374,1262563200"; d="scan'208,217";a="475412413" Received: from sj-core-5.cisco.com ([171.71.177.238]) by sj-iport-6.cisco.com with ESMTP; 30 Jan 2010 14:35:26 +0000 Received: from [10.0.1.5] (sjc-vpn5-1134.cisco.com [10.21.92.110]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id o0UEZPLA020046; Sat, 30 Jan 2010 14:35:26 GMT From: John Zwiebel Content-Type: multipart/alternative; boundary=Apple-Mail-60-939600311 Date: Sat, 30 Jan 2010 04:35:25 -1000 Message-Id: <0F687498-636A-46CB-941D-8E7B5F82C1AB@cisco.com> To: Xuewei Wang Mime-Version: 1.0 (Apple Message framework v1077) X-Mailer: Apple Mail (2.1077) Cc: lisp@ietf.org Subject: Re: [lisp] Some ideas about the interworking issues. X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 30 Jan 2010 14:35:01 -0000 --Apple-Mail-60-939600311 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii > The PTR mechanism allows a non-LISP site to send packets to a > LISP-NR site. Traffics from the non-LISP to the LISP-NR sites > will be routed towards the PTRs, which will force heavy > burden on the PTRs, and possibly PTRs will be the bottleneck > of the network. LISP-NAT mechanism allows a LISP-NR site to > speak to a non-LISP site, which has no the problem of the PTR > mechanism, but not consider the case of a non-LISP site > speaking to a LISP-NR site. Good day. There is an implicit assumption in your statement that we hope will be incorrect. That is that the PTR will be a bottleneck. While PTRs will highly aggregate EID-prefixes, if a given PTR is supporting too much traffic, one can deploy a second (or third) PTR in a new geographical location for the same prefixes or one can reconfigure all PTRs for a given set of EID-prefixes to provide more specific prefixes and reallocating those prefixes longer prefixes among all of this group of PTRs. Given that the prefixes advertised from a PTR have no direct relationship to the DFZ routing, you can deploy a new PTR anywhere. Hope this helps. --Apple-Mail-60-939600311 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii
The PTR = mechanism allows a non-LISP site to send packets to = a 
LISP-NR site. Traffics = from the non-LISP to the LISP-NR sites 
will be routed towards the PTRs, which will force = heavy 
burden on the = PTRs, and possibly PTRs will be the = bottleneck 
of the = network. LISP-NAT mechanism allows a LISP-NR site = to 
speak to a non-LISP = site, which has no the problem of the = PTR 
mechanism, but not = consider the case of a non-LISP site 
speaking to a LISP-NR = site.

Good = day.

There is an implicit assumption in your = statement that we hope
will be incorrect.  That is that = the PTR will be a bottleneck.
While PTRs will highly aggregate = EID-prefixes, if a given PTR
is supporting too much traffic, = one can deploy a second (or third)
PTR in a new geographical = location for the same prefixes or one can 
reconfigure = all PTRs for a given set of EID-prefixes to provide
more = specific prefixes and reallocating those prefixes = longer
prefixes among all of this group of = PTRs.

Given that the prefixes advertised from a = PTR have no direct
relationship to the DFZ routing, you can = deploy a new PTR
anywhere.

Hope this = helps.

= --Apple-Mail-60-939600311--