From nobody Sun Dec 1 21:10:00 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E995812012C; Sun, 1 Dec 2019 21:09:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.2 X-Spam-Level: X-Spam-Status: No, score=-0.2 tagged_above=-999 required=5 tests=[DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, PDS_BTC_ID=0.499, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=m4JiQuc/; dkim=pass (1024-bit key) header.d=juniper.net header.b=EwQABzkB Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ABnxoAsOZiBP; Sun, 1 Dec 2019 21:09:56 -0800 (PST) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 126BC120041; Sun, 1 Dec 2019 21:09:56 -0800 (PST) Received: from pps.filterd (m0108156.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xB2575eW016401; Sun, 1 Dec 2019 21:09:52 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=dFaUB8u/T4GgqS7ea878Mup/pfu2d85EgKGRoVI55Es=; b=m4JiQuc/JCHNbGgYu2utf4tZ/NpMeFw68237IWg/8612vNjyWYohYPJP52Vf9MoVQIdI 5ppZL8MTYrnKvre/HPDM+T+Xkk9Dp8/Pw6Zn4GGZcvOdMrjKLxp5wOy/2CCPkdCyqiaa xlpICCq16bRwiWXx9FCtdT0Bb9t1N9Y/kmQxC/2ee0QKUCKdY1ed5L0KhoSZ5itdxMGd T9B+DcPL/G8Oq01ZD0RlD8kDfxAjWhyzkpqWZG0WNJDaIndrZE9Ffy+q7NHWRzaUEfcR uRVg1EkTBnUc9B6T3/Pm7xf6eiOXV9A420R5SpiET2JjY1LoeL+HswVHANYPpX24d6CD sw== Received: from nam03-co1-obe.outbound.protection.outlook.com (mail-co1nam03lp2051.outbound.protection.outlook.com [104.47.40.51]) by mx0a-00273201.pphosted.com with ESMTP id 2wkraqhy89-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sun, 01 Dec 2019 21:09:52 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QaD5otUcyjCDDyK3OC7OreRYe+BHW8BypcnE+/Ty20V36SO48LR925gW/nfdz0KVMMtKsFRSxy7BY5wNdXDU7kp/uFwDUFPDtvaRZCq9NIZwPufvyuYXjqnwmgMkWtaT8t1ntyM1dnkeBZFVfjBLpPD0Iy1TPGTbv3Bq4vOKQOlmg4fK4KbacrXswpmXL5LcXsdSevvftILJVPC7wq607YGacRymULB3LeSzvEfZuFzKs5BAmltON2TGqqSDKbgVEILimMdvjJOx4SSRFfjnOqQS8glFoVh9UH8FiYdKaG4jiLJ0S2u1HmMaJSO2LAqE7EgRCmEsEt1bh3A9WU2nHw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dFaUB8u/T4GgqS7ea878Mup/pfu2d85EgKGRoVI55Es=; b=Van8oyY4M1q/M9gkmvSOkGIx7m4l9g8MVA63gYltYgCEagw/jqH3vN+o6ml4g4A256MIbdcEWBR/eILIKl291e3lWNI8Dyk39M0nlgZv23DT4xP1sC+l4szBbyqIQoGgpO++ckYayhExn9fSZk9gtDWShuXU0OFKoBz2gknDbQ9I0qAIwMnuPi0cNy+UfT01oI7RU0tkFtcicEqjHC7vCSoY1Fo+rsarZPoPdqkcoh5KeLAzMwPGOEAmMzgZuswpNiC5q8RdNh60HPMUeJj6gRAdpLiCpz8PKNINSHwYpfr/J+C13yUgfleQCFssqj05llozLhIudK9FMILGWVCkjw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dFaUB8u/T4GgqS7ea878Mup/pfu2d85EgKGRoVI55Es=; b=EwQABzkBK0TrFEv8cRWFVAMh/fC9jKgHbiDgWEM1VCNadhflycYBZ9U2b1nDNDPXO5zlxbhBcuGbqnt/Y4bToUy8FjOmqvegtoSDlVOOM/AA46jgc3R8AMOs3q+xOm2V2vMRU3dqBW1OpLegikYZ71Ks1OmUSHc3pztWwZTHyno= Received: from BYAPR05MB3943.namprd05.prod.outlook.com (52.135.197.146) by BYAPR05MB5559.namprd05.prod.outlook.com (20.177.127.93) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2516.9; Mon, 2 Dec 2019 05:09:49 +0000 Received: from BYAPR05MB3943.namprd05.prod.outlook.com ([fe80::d6c:bedb:6c67:8a26]) by BYAPR05MB3943.namprd05.prod.outlook.com ([fe80::d6c:bedb:6c67:8a26%6]) with mapi id 15.20.2495.014; Mon, 2 Dec 2019 05:09:49 +0000 From: Shraddha Hegde To: Alexander Vainshtein , Robert Raszuk CC: "spring@ietf.org" , "rtgwg@ietf.org" , "rtg-bfd@ietf.org" Subject: RE: [spring] Draft for Node protection of intermediate nodes in SR Paths Thread-Topic: [spring] Draft for Node protection of intermediate nodes in SR Paths Thread-Index: AQHVoRZpcWzNT/yCAUirnVoRkUsBfqeYdqqAgAAbMICAAAqSgIAAOoiAgA2Aw7A= Date: Mon, 2 Dec 2019 05:09:49 +0000 Message-ID: References: , , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_ActionId=5ef8f343-e749-40b6-9ef2-0000a81ae678; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_ContentBits=0; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_Enabled=true; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_Method=Standard; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_Name=Juniper Business Use Only; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_SetDate=2019-12-02T04:57:07Z; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; dlp-product: dlpe-windows dlp-version: 11.2.0.14 dlp-reaction: no-action x-originating-ip: [116.197.184.15] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 69314c75-76ff-4dab-9a82-08d776e5db36 x-ms-traffictypediagnostic: BYAPR05MB5559: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4714; x-forefront-prvs: 0239D46DB6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(366004)(396003)(39860400002)(136003)(346002)(54094003)(199004)(189003)(186003)(7696005)(5070765005)(76116006)(74316002)(110136005)(66476007)(76176011)(99286004)(26005)(316002)(45080400002)(66946007)(81166006)(6436002)(66066001)(86362001)(14444005)(478600001)(256004)(966005)(52536014)(54896002)(790700001)(6116002)(6306002)(236005)(66446008)(64756008)(66556008)(9686003)(55016002)(7736002)(3846002)(54906003)(14454004)(5660300002)(25786009)(102836004)(446003)(33656002)(229853002)(6506007)(4326008)(81156014)(71200400001)(71190400001)(53546011)(8676002)(8936002)(66574012)(606006)(440504004)(517774005)(11346002)(2906002)(561944003)(6246003); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB5559; H:BYAPR05MB3943.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: mE48PEVIOFu/kUPk0SjM0JJDa56IspID6pgsCOt0gL0//EsND0BciTF1rTi8T0UrVv3irktd1mW6NoJSPHdniEUUUIn6mr71P8hf6mckxqEJLfPmbx/Ac5kjgdy94/p+zBt4LJ6yzA5Zt7NuzXG5bq3ccLb6EtYwtTdkiX9vBke5ivWFCVWd2lh85SLhVOT7xpdy1DUKpQUOhBJkBaxdlFrHziUz2hvzHqK1wBTQjh7Zd0IoRDj2ivlBPvX6Rf75m+ikY+xG5JYO7X1D8IJOCzds/KmxqLRPsSeiLSgZOaW5ohFtCAd7QJ++38rAKgBdbQialfzqtUe/KqVMgvneWnsjn17w/prjezRw03E6y39Izs00svJjMxSmyPwr9QJFQZFQ0DtGZhSvuXt6UOdXlA/S1Vm2FKkYelg8Sh/G/j3HRUzMFq+cFM0Im3rtNrlZT4xZvbUSZOCH6z3hVc2FTyZaHpEVwh8NHK53qR8XKgk= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR05MB3943CE8749F824CDDA88F3C8D5430BYAPR05MB3943namp_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 69314c75-76ff-4dab-9a82-08d776e5db36 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Dec 2019 05:09:49.1712 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: pyM12+qmKqLSPSAX+lIzUpYeKGf6CQVE8Ptzdgf+rhJ4ilL9sYurI/7XkyiTGBOAzTfr+9hi8EKZE5Z/RVOvkw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB5559 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-12-01_04:2019-11-29,2019-12-01 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 lowpriorityscore=0 malwarescore=0 priorityscore=1501 suspectscore=0 impostorscore=0 bulkscore=0 mlxscore=0 mlxlogscore=999 phishscore=0 clxscore=1011 spamscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1912020044 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Dec 2019 05:09:58 -0000 --_000_BYAPR05MB3943CE8749F824CDDA88F3C8D5430BYAPR05MB3943namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Robert/Sasha, S-BFD based mechanism is head-end triggered protection. It is not a local = protection. S-BFD mechanism is orthogonal to the mechanism described in this draft and = an operator can choose what kind of protection makes more sense to his/her network. In many cases, node-protecting backup path will be different from link-prot= ecting/SRLG protecting backup path. If you really want to use link-protecting backup path when link fails and n= ode protecting backup path when node fails, You will have to download both link protecting and node-protecting backup p= aths in FIB and detect which failure really happened and have the ability in hardware to use appropriate= backup path. None of these is in the scope of this document. Rgds Shraddha From: Alexander Vainshtein Sent: Saturday, November 23, 2019 8:15 PM To: Robert Raszuk ; Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Robert, On the second thought, for the purpose of this draft (i.e. in the scope of = SR) it is possible to implement your suggestion by running S-BFD sessions b= etween R7 (as the initiator) and each other adjacency of R8 (acting as Ref= lectors) of a SR policy with list of two SIDs: - protected adjacency between R7 and R8 - Node SID of the specific "other" adjacency of R8. If all these sessions fail, R7 can reliably consider R8 as failed. I am not sure this would be much better than multi-hop IP BFD, and it looks= much more complicated to me. What do you think? Get Outlook for Android ________________________________ From: Alexander Vainshtein > Sent: Saturday, November 23, 2019, 13:15 To: Robert Raszuk; Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Robert, Lots of thanks for a prompt response. I respectfully disagree with your statement that BFD implementation is usu= ally offloaded to the HW of the ingress line card. I do not think this can= wor for MH BFD sessions because the ingress and egress line cards are not = known in advance and change with the routing changes A good multi-hop BFD implementation should be ready to overcome this.. The= re are many ways to achieve that. A naive implementation that runs in SW of= the control card is also possible of course. And they would sensd and rece= ive packets My 2c. Get Outlook for Android ________________________________ From: Robert Raszuk > Sent: Saturday, November 23, 2019, 12:37 To: Alexander Vainshtein; Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Hi Sasha, On the surface your suggestion may look cool - but if you zoom in - I do no= t think it will work in practice. See - one of the biggest value of BFD is its offload to line card's hardwar= e. And in most cases it is ingress line card to the box. So if you instruct= such hardware to respond to SID address loopback you still did not gain mu= ch in terms of detection router's fabric failures, remote LC failure or con= trol plane issues which could soon result in box failure. The catalogue of = router failures is of course much more colorful. If you ask BFD to be responded by RP/RE it no longer has the BFD advantage. IMHO the best way to detect node failure is actually to send the probes *ac= ross* the node under test to its peers. The way I would think of establishing such m-hop sessions would be fully au= tomated with one knob per IGP adj. ex: "bfd detect-node-failure [max N]" wh= ere local BFD subsystem would create N sessions to IGP peers of the node we= are to protect. LSDB has those peers so no new protocol extension is neede= d, perhaps even no new IETF draft is required :). N would be the limit of s= uch sessions in case the node under protection has say 10s of peers. Defaul= t could be perhaps even 1. Thx, Robert. On Sat, Nov 23, 2019 at 10:00 AM Alexander Vainshtein > wrote: Shraddha, Robert and all, Regarding Robert's question: I wonder if multi-hop IP BFD session with addresses used as /32 (or /128) p= refixes serving as Nose SIDs of R8 and R7 respectively could be used as suc= h a trigger by R7? Such a session would not respond to link failures, and I= find it problematic to imagine a scenario when it would be kept UP in the = case of a real node failure. Of course such a session would have to be slow enough not to react to link = failures. But it still couks be much faster than IGP conversion IMHO. My 2c, Sasha Such Get Outlook for Android ________________________________ From: spring > on b= ehalf of Robert Raszuk > Sent: Friday, November 22, 2019, 11:22 To: Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Hi Shraddha, I have one question to the document. As you know the critical element for the effective protection of any scheme= is the failure detection. On that your draft seems to have just one little= paragraph: Note that R7 activates the node-protecting backup path when it detects that the link to R8 has failed. R7 does not know that node R8 has actually failed. However, the node-protecting backup path is computed assuming that the failure of the link to R8 implies that R8 has failed. Well IMO this is not enough. Specifically there can be a lot of types of no= de failure when link is still up. Moreover there can be even running BFD ac= ross the link just fine when say fabric failure occurs at R8. While this is not solely issue with this draft, it is our common IETF failu= re to provide correct means of detecting end to end path or fragments of pa= th failures (I am specifically not calling them segment here :). For example I propose that to effectively detect R8 failure as node failure= which is the topic of your proposal a mechanism is clearly defined and inc= ludes bi-dir data plane probes send between R7-R9, R3-R7, R4-R7, R4-R9, R3-= R9 Many thx, Robert. On Fri, Nov 22, 2019 at 4:38 AM Shraddha Hegde > wrote: WG, This is the draft I pointed out that talks about solutions for providing no= de-protection. It covers Anycast case as well as keeping forwarding plane longer. https://tools.ietf.org/html/draft-hegde-spring-node-protection-for-sr-te-pa= ths-05 Review and comments solicited. Rgds Shraddha _______________________________________________ rtgwg mailing list rtgwg@ietf.org https://www.ietf.org/mailman/listinfo/rtgwg ___________________________________________________________________________ This e-mail message is intended for the recipient only and contains informa= tion which is CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have recei= ved this transmission in error, please inform us by e-mail, phone or fax, and then d= elete the original and all copies thereof. ___________________________________________________________________________ --_000_BYAPR05MB3943CE8749F824CDDA88F3C8D5430BYAPR05MB3943namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Robert/Sasha,

 

 

S-BFD based mechanism is  head-end triggered pr= otection. It is not a local protection.

S-BFD mechanism is orthogonal to the mechanism descr= ibed in this draft and an operator can

choose what kind of protection makes more sense to h= is/her network.

 

In many cases, node-protecting backup path will be d= ifferent from link-protecting/SRLG protecting backup path.

If you really want to use link-protecting backup pat= h when link fails and node protecting backup path when node fails,

You will have to download both link protecting and n= ode-protecting backup paths in FIB and detect which

failure really happened and have the ability in hard= ware to use appropriate backup path. None of these

is in the scope of this document.

 

Rgds

Shraddha

 

 

From: Alexander Vainshtein <Alexander.Vain= shtein@ecitele.com>
Sent: Saturday, November 23, 2019 8:15 PM
To: Robert Raszuk <robert@raszuk.net>; Shraddha Hegde <shra= ddha@juniper.net>
Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org
Subject: Re: [spring] Draft for Node protection of intermediate node= s in SR Paths

 

Robert,

On the second thought, for the purpose of this draft (i.e. in the scop= e of SR) it is possible to implement your suggestion by running S-BFD sessi= ons between R7 (as the initiator) and each other adjacency of R8  (acting as Reflectors) of a SR policy wit= h list of two SIDs:

- protected adjacency between R7 and R8

- Node SID of the specific "other" adjacency  of R8.

 

If all these sessions fail, R7 can reliably consider R8 as failed.&nbs= p;

 

I am not sure this would be much better than multi-hop IP BFD, and it = looks much more complicated to me. 

 

 

What do you think?

 

 

 

 

From: Alexander Vainshtein <Alexander.Vainshtein@ecitele.com= >
Sent: Saturday, November 23, 2019, 13:15
To: Robert Raszuk; Shraddha Hegde
Cc: spring@ietf.org; rtgwg@ietf.org; = rtg-bfd@ietf.org
Subject:= Re: [spring] Draft for Node protection of intermediate nod= es in SR Paths



Robert,

Lots of thanks for a prompt response.

 

I respectfully disagree with your statement that BFD implementation&nb= sp; is usually offloaded to the HW of the ingress line card.  I do not= think this can wor for MH BFD sessions because the ingress and egress line cards are not known in advance and change with= the routing changes

A good  multi-hop BFD implementation should be ready to overcome = this.. There are many ways to achieve that. A naive implementation that run= s in SW of the control card is also possible of course. And they would sensd and receive packets 

 

My 2c.

 

From: Robert Raszuk <robert@raszuk.net>
Sent: Saturday, November 23, 2019, 12:37
To: Alexander Vainshtein; Shraddha Hegde
Cc: spring@ietf.org; rtgwg@ietf.org; = rtg-bfd@ietf.org
Subject:= Re: [spring] Draft for Node protection of intermediate nod= es in SR Paths



Hi Sasha,

 

On the surface your suggestion may look cool - but i= f you zoom in - I do not think it will work in practice. 

 

See - one of the biggest value of BFD is its offload= to line card's hardware. And in most cases it is ingress line card to the = box. So if you instruct such hardware to respond to SID address loopback yo= u still did not gain much in terms of detection router's fabric failures, remote LC failure or control p= lane issues which could soon result in box failure. The catalogue of router= failures is of course much more colorful. 

 

If you ask BFD to be responded by RP/RE it no longer= has the BFD advantage. 

 

IMHO the best way to detect node failure is act= ually to send the probes *across* the node under test to its peers. 

 

The way I would think of establishing such m-hop ses= sions would be fully automated with one knob per IGP adj. ex: "bfd det= ect-node-failure [max N]" where local BFD subsystem would create N ses= sions to IGP peers of the node we are to protect. LSDB has those peers so no new protocol extension is needed, perhaps = even no new IETF draft is required :). N would be the limit of such session= s in case the node under protection has say 10s of peers. Default could be = perhaps even 1. 

 

Thx,

Robert.

 

 

On Sat, Nov 23, 2019 at 10:00 AM Alexander Vainshtei= n <Alexander.Vainshtein@ecitele.com> wrote:

Shraddha, Robert and all,

Regarding Robert's question: 

I wonder if multi-hop IP BFD session with addresses used as /32 (or /1= 28) prefixes serving as Nose SIDs of R8 and R7 respectively could be used a= s such a trigger by R7? Such a session would not respond to link failures, and I find it problematic to imagine a= scenario when it would be kept UP in the case of a real node failure.=

 

Of course such a session would have to be slow enough not to react to = link failures. But it still couks be much faster than IGP conversion IMHO.<= o:p>

 

My 2c,

Sasha

 

Such

 

 

Get Outlook for Android

 

From: spring <spring-bounces@ietf.org> on behalf= of Robert Raszuk <robert@raszuk.net>
Sent: Friday, November 22, 2019, 11:22
To: Shraddha Hegde
Cc: spring@ietf.org; rt= gwg@ietf.org
Subject:= Re: [spring] Draft for Node protection of intermediate nod= es in SR Paths

 

Hi Shraddha,

 

I have one question to the document. 

 

As you know the critical element for the effect= ive protection of any scheme is the failure detection. On that your draft s= eems to have just one little paragraph: 

 

   =
Note that R7 activates the node-protecting backup path when it
   detects that the link to R8 h=
as failed.  R7 does not know that node
   R8 has actually failed. =
 However, the node-protecting backup path is
   computed assuming that the fa=
ilure of the link to R8 implies that R8
   has failed.=

 

Well IMO this is not enough. Specifically there= can be a lot of types of node failure when link is still up. Moreover ther= e can be even running BFD across the link just fine when say fabric failure= occurs at R8. 

 

While this is not solely issue with this draft, it i= s our common IETF failure to provide correct means of detecting end to end = path or fragments of path failures (I am specifically not calling them segm= ent here :). 

 

For example I propose that to effectively detect R8 = failure as node failure which is the topic of your proposal a mechanism is = clearly defined and includes bi-dir data plane probes send between R7-R9, R= 3-R7, R4-R7, R4-R9, R3-R9

 

Many thx,

Robert.

 

 

On Fri, Nov 22, 2019 at 4:38 AM Shraddha Hegde <s= hraddha=3D40juniper.net@dmarc.ietf..org> wrote:

WG,

 

This is the draft I pointed out that talks about sol= utions for providing node-protection.

It covers Anycast case as well as keeping forwarding= plane longer.

 

Review and comments solicited.

 

Rgds

Shraddha

 

_______________________________________________
rtgwg mailing list
rtgwg@ietf.org
https://www.ietf.org/mailman/listinf= o/rtgwg

 

 


___________________________________________________________________________=

This e-mail message is intended for the recipient only and contains informa= tion which is
CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have recei= ved this
transmission in error, please inform us by e-mail, phone or fax, and then d= elete the original
and all copies thereof.
___________________________________________________________________________=

--_000_BYAPR05MB3943CE8749F824CDDA88F3C8D5430BYAPR05MB3943namp_-- From nobody Sun Dec 1 22:54:30 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E20CF120143; Sun, 1 Dec 2019 22:54:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.935 X-Spam-Level: * X-Spam-Status: No, score=1.935 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, PDS_BTC_ID=0.499, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_SBL_CSS=3.335, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ecitele.com header.b=kAL8Lr4e; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=eci365.onmicrosoft.com header.b=LzUtfE10 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Na74v1G1w969; Sun, 1 Dec 2019 22:54:23 -0800 (PST) Received: from mail1.bemta26.messagelabs.com (mail1.bemta26.messagelabs.com [85.158.142.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2188D120024; Sun, 1 Dec 2019 22:54:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ecitele.com; s=eciselector10072019; t=1575269660; i=@ecitele.com; bh=Z66FgDnBKbinSDffAdRn94WjPOAgPuY0UG0CiER1KEo=; h=From:To:CC:Subject:Date:Message-ID:References:In-Reply-To: Content-Type:MIME-Version; b=kAL8Lr4euzSVGBN4HG4bjrJWZQo1ic0Klwnk4GAmSUk8KUtILE2Uf+c6mAL2PAQLr MGwuVONsMmbBT96aPR79xpF5sHZRUxXdBgFoaLzFBrFGKl7z3FajsjsCDup/pD7ElL izd2UbemwG8riNPvieSrBVyGl21tjk3RPkOqBIfI= Received: from [85.158.142.193] (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256 bits)) by server-6.bemta.az-b.eu-central-1.aws.symcld.net id D3/46-19231-C15B4ED5; Mon, 02 Dec 2019 06:54:20 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA1WTcVCTdRjH+b3vu+2VeOtlgDwuMJocibEdi4w ZRsQRh5dRmcUd19KNLbYag7ahw/4IOIy7xBMsQrnAAQNTGOpAA0RLOhInBkpIwaEXAxISQ8AQ Eeh994LZP9/7PM/3eX6/73v3e0lcWCEQkRqLWWM0KPVivichnCg4KXn69LAivO/YWnluRS4un 354Bsm7b8/j8t+GzuHyi93zKIaXYLPNYQl9ub2ChLOnrNjbeDJPZ1ClW3bytA/mzuAZV5sxy6 HCG4Js9FUx9iXyJBFdjcNAtR3nip8JKC3s5nFFA4KOiwcFbEHQdhzGv+ki2EJIF2Hwx+zfPK6 4geDXyS6mWEXy6VfAUTvIZ9mXDoXrRSPuIZwuRlDS/oN7yIfeBvaFK8tD78LJun6C4yRY+LNJ wDJBB8Pi/KR7nqIVUJ9Tg3G3OQgoOPq721hFfwizMz2IZUSvhllnHcYyTvtD//ARNwNNg621C +fYD8Zci+5EFO3EoartOx63rIKbIxWIGwqCvQcPLC8HwrUj+5g+yfA6aLyl4NpvwtfX7/E43g ALA1eXV/WwryWH4DgEunL6+NxqADTPRbDXAt3Lh7qm++48QjoFOr6dJgpReOljsTk2gMPZj5e 6v98bLh0eJrh+GFjPTvE5fh5qKv7CV7jzRxf2eN+KBMfRJpVRl6o1pyl1eoksPFwik0VINkpk kRulyj0SlVSTKUnRGMxGJeNKlbtNUlNWWopeLTVozA7EvDv1p7wTTajz3oS0Da0hMbEfZbW6F MInVenqLK3SpN1hzNRrTG0ogCTFQJ1qGFYIvY2aVI3lI52eeb0rNpBeYl9qgrUpU4YyzaRL5S wnSiELx8oqcbK5vZzRn0qsjM4MsnpnrorRu8dtjM66ddTOakNZNaNLg4OVuJAwpBs0In9q1ME cTbNHazMNjy5e+XOuoUCRD4U8PDyEXhkaY5rO/H9/HPmTSOxD5bEBvXQG86N840x0jIkemTfE Rjcr/7NE2VjqS/0jW84HE6TQM2t77y+bp7x9Q9OnowfyHya1hcVGhicq7NObXNGJzlbfY7Vrt ybGr95pPhwnJb3GXpbt6bxfV/6Zs2Tv/su2lOr3Gl+cSwq58kGo/4OCujvn1lsWIahp3cCFjK VbLWVfDHXHqb+v+njzeqqlcb4oZtQvOvit5F0noqJiprwDS9pfG/e7GaAyOazD2qNq593G1Pd vv/pcfIfDFfr51OIbtd6VNaeLt5e/sGOy3pLRUT/9TvbCrsCGuNJnI2JztXH5+X3FW6l4c05N 9QW5LJMf0tqVeTmsqCc5GvJKt1TkrBl1YruxnolD+/955vz4tqWgp7pjQfRE1MylT14XEyatU rYBN5qU/wI4+Xj7tAQAAA== X-Env-Sender: Alexander.Vainshtein@ecitele.com X-Msg-Ref: server-4.tower-238.messagelabs.com!1575269656!562035!1 X-Originating-IP: [18.237.140.176] X-SYMC-ESS-Client-Auth: mailfrom-relay-check=pass X-StarScan-Received: X-StarScan-Version: 9.44.22; banners=ecitele.com,-,- X-VirusChecked: Checked Received: (qmail 8104 invoked from network); 2 Dec 2019 06:54:18 -0000 Received: from p01a.mail.dlp.protect.symantec.com (HELO mail.ds.dlp.protect.symantec.com) (18.237.140.176) by server-4.tower-238.messagelabs.com with ECDHE-RSA-AES256-GCM-SHA384 encrypted SMTP; 2 Dec 2019 06:54:18 -0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=aVo4Lvch6GaSm0EFDpDO563XqIXJLCXGT8sNzNx7EAqF+kNo0C+I+hgt5+aWxhk+Tqii+IFKPtqj+dwFDN3BLJtxROy1nvgkYANxZdpNZ7zzf64i5aC2oGhBdv5RrxNRfudpbL3gtiAEwD9fzl7pqb3XoYT/niUP/kckJ7kc/VlNbOov4T3G8zMIdhV0VRhwWodhXXLDvvGOkTTJpn9yKmk/1ZrKaPLKRZHjhtza/Pd0M7xTOMI6CI27zhm1CQwC9KeHXaDbuzDBDxMoyfr3LiFHA9HfsijDLyaoAnH7XpAD0YjbGEmoCsfbNPSsRZcwNacCGPYrxhiG0DNUKgXSNg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=r86aLlzlOEafexo1wrhngw+yntlBahTzJQcB7FCWwAY=; b=U7nUeoXTYccr8R+J6ScIS/DAlFFHoZNhRlKcVO8HAJJ+K4RedZItXpkNyaTvkFGBCwGGc5o2Dqo/RNLQuHxTZoRn4sdY+LSc36bdFYZJKq0hQrmxgkTfw/tsQqSVYSppndKYn18vxUyHxT0m7O2uMS/jpvKpy78KYEiUSwHn9i71gHojOEOSPc3yIPv5Q2poK6BeJTGew8L8AK5J9s9TCivUtHaLVDBm/wrj6CuhwhwsMnRWgpjwHd/AgqtkX0tqUMV/KblFY9b2E6Uzcg3KfHqm2h/PBfeG626rYuC6T3uSJ15fJ11dzHwonvVnRw8guGwrJ3h7bucJstBuYYiufA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ecitele.com; dmarc=pass action=none header.from=ecitele.com; dkim=pass header.d=ecitele.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ECI365.onmicrosoft.com; s=selector2-ECI365-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=r86aLlzlOEafexo1wrhngw+yntlBahTzJQcB7FCWwAY=; b=LzUtfE10/tdun/pfKHehL8Vzs1rc8POxF59YbjCt4NETDzF/0HcuPT+/Hyt6t0MPAYE55eHRlr4y86OVs2KAdSYXxrudie3PtVaa+4YI0ilHTbgxjjpJpmc+fgIlNr9Vq3ozH0FKOiC1W/zVkwBUvk+DN/dlWEFId4dPMxaCO9o= Received: from AM0PR03MB3828.eurprd03.prod.outlook.com (52.135.146.159) by AM0PR03MB4244.eurprd03.prod.outlook.com (20.176.214.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.20; Mon, 2 Dec 2019 06:54:13 +0000 Received: from AM0PR03MB3828.eurprd03.prod.outlook.com ([fe80::7554:6540:b0c0:800f]) by AM0PR03MB3828.eurprd03.prod.outlook.com ([fe80::7554:6540:b0c0:800f%7]) with mapi id 15.20.2495.014; Mon, 2 Dec 2019 06:54:13 +0000 From: Alexander Vainshtein To: Shraddha Hegde CC: "spring@ietf.org" , "rtgwg@ietf.org" , "rtg-bfd@ietf.org" , Robert Raszuk Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR Paths Thread-Topic: [spring] Draft for Node protection of intermediate nodes in SR Paths Thread-Index: AQHVoRZrVSAXH6RCc0yN7BSQBwB5daeYdILlgAAdWICAAAdUGYAAOqyGgA2HaoCAABVX0w== Date: Mon, 2 Dec 2019 06:54:13 +0000 Message-ID: References: , , , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_Enabled=True; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_SetDate=2019-12-02T04:57:07.0000000Z; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_Name=Juniper Business Use Only; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_ContentBits=0; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_Method=Standard x-originating-ip: [46.189.28.55] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: cc35eacb-6c4d-4e81-93c6-08d776f470ea x-ms-traffictypediagnostic: AM0PR03MB4244: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:5516; x-forefront-prvs: 0239D46DB6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(136003)(396003)(39860400002)(366004)(376002)(51444003)(54094003)(189003)(199004)(9686003)(186003)(53546011)(6506007)(11346002)(76176011)(102836004)(76116006)(91956017)(446003)(5070765005)(66946007)(66446008)(64756008)(7696005)(86362001)(5660300002)(7736002)(52536014)(26005)(66556008)(1941001)(6116002)(3846002)(2906002)(74316002)(606006)(440504004)(14454004)(81156014)(8936002)(81166006)(517774005)(8676002)(561944003)(66476007)(6916009)(966005)(229853002)(33656002)(316002)(14444005)(256004)(71190400001)(4326008)(54906003)(66574012)(71200400001)(236005)(54896002)(6306002)(6246003)(45080400002)(6436002)(478600001)(99286004)(55016002)(66066001)(25786009); DIR:OUT; SFP:1102; SCL:1; SRVR:AM0PR03MB4244; H:AM0PR03MB3828.eurprd03.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ecitele.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: a/9rnYxD+rkaq7htppTZVPJ54pMa7f4bk1Y7pI+waNHXoUJ3GeUSxnRBuOmLLqscNplUyWJPPTumtZovGKttcqrigySBfF3jUCfYg5u8dnCYnOmqQW3hbUrEUA8SWW2Pd1dCYqx3hpgPNBoYvdRgNhC8h04J0q8Z8diUAc41iAatyULIGUD9kj9QalwtJ2XWjKU2azSmJnMPNnjSebo0HloSHGHpUVV8COsTYIvZHwWAe/Zj4VdA2U6zUq01zsSpW963qtTkVnsgA1yg6wDboigHEs+K+HnGmeG8SBXSZhvM751DNk2I7ZaHCxOOE2X6f4fxokk73fIEe8WpkcjGrBbajyaX+NcisVfi8t7SmqHp7L4PhHWvNf+ev0mYuaIal1OwHLZNMkhEeBl7VzVavE/scQBc64Eca/51E5NAhfACLQznxVN1m6ThEc+HyOxJhKGJwnpMHe1VXvQFiwt0AtZAE0o6y/qQIj9GAqrH5So= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_AM0PR03MB3828F1161645C155DA569F099D430AM0PR03MB3828eurp_" MIME-Version: 1.0 X-OriginatorOrg: ecitele.com X-MS-Exchange-CrossTenant-Network-Message-Id: cc35eacb-6c4d-4e81-93c6-08d776f470ea X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Dec 2019 06:54:13.3635 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2c514a61-08de-4519-b4c0-921fef62c42a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: /MVPsLuyKzOLaNHCAd8QrvOTGqQsZbu7PqV/5F6sbjiQqWxd208U1Opjtf0YhoWAf9bHLutlAwd4LQBQ2fIPrA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR03MB4244 X-CFilter-Loop: Reflected X-DetectorID-Processed: d8d3a2b3-1594-4c39-92fb-b8312fe65a8a Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Dec 2019 06:54:26 -0000 --_000_AM0PR03MB3828F1161645C155DA569F099D430AM0PR03MB3828eurp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Shraddha, Lots of thanks for athe tesponse. I probably did not express myself clearly enough. I will try to fix thst n= ow, and I apologise in advance for a long email. I have not been speaking about end-yo-end protecyion, only about local pro= tection against failure of an intermediate (a.k.a. pinned) node of an SR p= ath and, specifically, triggers for such protection. This context has been= actually defined by Robert in his original comment. To the best of my understanding, Robert's concern was that failure of the = link beteeen the pinned node of a SR path and its adjacency (the penultima= te node of the Segment represented by the Node SID of the pinned node) is = not a good enough indication of the pinned node failure. I agree with this statement even if my understanding of a good indication = differs from Robert's: - I think that it is not sufficiently specific and therefore could result = in flapping (local node protection activated and then released) -Robert's concern, to the best of my understanding, was that it could miss= some failures (e.g. the Fabric failure). Therefore I have suggested two possibilities for more specific and more rr= liabke detection of failure of the pinned node by its adjacency: 1. Run a multi-hop IP BFD session between the peniltimate node ans the pin= ned ones using prefixes acting as Node SIDs of this pair. This wiuld igno= re link failures but locally detect such node failurs as power-down or cra= sh. 2. Run S-BFD sessions to all other adjacencies of the pinned node using i= n each case a list of two SIDs: the protected Adj-SID to the pinned node f= ollowed by tge Node SID of the other adjacency, ans declare pinned node fa= ilure when all these sessions fail. This would again ignore failure of the= link between the penultimate node and the pinned node but detect various = real failures of the pinned node, e.g. failure of its Fabric. In any case I think that it woyld make sense to separate the protection sc= heme proposed in the draft from specific triggers for its activation simil= ar to how this has been done in MPLS Egress Protection Framework draft. My 2c. Get Outlook for Android ________________________________ From: Shraddha Hegde Sent: Monday, December 2, 2019, 06:10 To: Alexander Vainshtein; Robert Raszuk Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: RE: [spring] Draft for Node protection of intermediate nodes in S= R Paths Robert/Sasha, S-BFD based mechanism is head-end triggered protection. It is not a local= protection. S-BFD mechanism is orthogonal to the mechanism described in this draft and= an operator can choose what kind of protection makes more sense to his/her network. In many cases, node-protecting backup path will be different from link-pro= tecting/SRLG protecting backup path. If you really want to use link-protecting backup path when link fails and = node protecting backup path when node fails, You will have to download both link protecting and node-protecting backup = paths in FIB and detect which failure really happened and have the ability in hardware to use appropriat= e backup path. None of these is in the scope of this document. Rgds Shraddha From: Alexander Vainshtein Sent: Saturday, November 23, 2019 8:15 PM To: Robert Raszuk ; Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in S= R Paths Robert, On the second thought, for the purpose of this draft (i.e. in the scope of= SR) it is possible to implement your suggestion by running S-BFD sessions= between R7 (as the initiator) and each other adjacency of R8 (acting as = Reflectors) of a SR policy with list of two SIDs: - protected adjacency between R7 and R8 - Node SID of the specific "other" adjacency of R8. If all these sessions fail, R7 can reliably consider R8 as failed. I am not sure this would be much better than multi-hop IP BFD, and it look= s much more complicated to me. What do you think? Get Outlook for Android ________________________________ From: Alexander Vainshtein > Sent: Saturday, November 23, 2019, 13:15 To: Robert Raszuk; Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in S= R Paths Robert, Lots of thanks for a prompt response. I respectfully disagree with your statement that BFD implementation is us= ually offloaded to the HW of the ingress line card. I do not think this c= an wor for MH BFD sessions because the ingress and egress line cards are n= ot known in advance and change with the routing changes A good multi-hop BFD implementation=20should be ready to overcome this.. = There are many ways to achieve that. A naive implementation that runs in S= W of the control card is also possible of course. And they would sensd and= receive packets My 2c. Get Outlook for Android ________________________________ From: Robert Raszuk > Sent: Saturday, November 23, 2019, 12:37 To: Alexander Vainshtein; Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in S= R Paths Hi Sasha, On the surface your suggestion may look cool - but if you zoom in - I do n= ot think it will work in practice. See - one of the biggest value of BFD is its offload to line card's hardwa= re. And in most cases it is ingress line card to the box. So if you instru= ct such hardware to respond to SID address loopback you still did not gain= much in terms of detection router's fabric failures, remote LC failure or= control plane issues which could soon result in box failure. The catalogu= e of router failures is of course much more colorful. If you ask BFD to be responded by RP/RE it no longer has the BFD advantage= . IMHO the best way to detect node failure is actually to send the probes *a= cross* the node under test to its peers. The way I would think of establishing such m-hop sessions would be fully a= utomated with one knob per IGP adj. ex: "bfd detect-node-failure [max N]" = where local BFD subsystem would create N sessions to IGP peers of the node= we are to protect. LSDB has those peers so no new protocol extension is n= eeded, perhaps even no new IETF draft is required :). N would be the limit= of such sessions in case the node under protection has say 10s of peers. = Default could be perhaps even 1. Thx, Robert. On Sat, Nov 23, 2019 at 10:00 AM Alexander Vainshtein > wrote: Shraddha, Robert and all, Regarding Robert's question: I wonder if multi-hop IP BFD session with addresses used as /32 (or /128) = prefixes serving as Nose SIDs of R8 and R7 respectively could be used as s= uch a trigger by R7? Such a session would not respond to link failures, an= d I find it problematic to imagine a scenario when it would be kept UP in = the case of a real node failure. Of course such a session would have to be slow enough not to react to link= failures. But it still couks be much faster than IGP conversion IMHO. My 2c, Sasha Such Get Outlook for Android ________________________________ From: spring > on = behalf of Robert Raszuk > Sent: Friday, November 22, 2019, 11:22 To: Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in S= R Paths Hi Shraddha, I have one question to the document. As you know the critical element for the effective protection of any schem= e is the failure detection. On that your draft seems to have just one litt= le paragraph: Note that R7 activates the node-protecting backup path when it detects that the link to R8 has failed. R7 does not know that node R8 has actually failed. However, the node-protecting backup path is computed assuming that the failure of the link to R8 implies that R8 has failed. Well IMO this is not enough. Specifically there can be a lot of types of n= ode failure when link is still up. Moreover there can be even running BFD = across the link just fine when say fabric failure occurs at R8. While this is not solely issue with this draft, it is our common IETF fail= ure to provide correct means of detecting end to end path or fragments of = path failures (I am specifically not calling them segment here :). For example I propose that to effectively detect R8 failure as node failur= e which is the topic of your proposal a mechanism is clearly defined and i= ncludes bi-dir data plane probes send between R7-R9, R3-R7, R4-R7, R4-R9, = R3-R9 Many thx, Robert. On Fri, Nov 22, 2019 at 4:38 AM Shraddha Hegde > wrote: WG, This is the draft I pointed out that talks about solutions for providing n= ode-protection. It covers Anycast case as well as keeping forwarding plane longer. https://tools.ietf.org/html/draft-hegde-spring-node-protection-for-sr-te-p= aths-05 Review and comments solicited. Rgds Shraddha _______________________________________________ rtgwg mailing list rtgwg@ietf.org https://www.ietf.org/mailman/listinfo/rtgwg __________________________________________________________________________= _ This e-mail message is intended for the recipient only and contains inform= ation which is CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have rece= ived this transmission in error, please inform us by e-mail, phone or fax, and then = delete the original and all copies thereof. __________________________________________________________________________= _ __________________________________________________________________________= _ This e-mail message is intended for the recipient only and contains inform= ation which is=20 CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have rece= ived this=20 transmission in error, please inform us by e-mail, phone or fax, and then = delete the original=20 and all copies thereof. __________________________________________________________________________= _ --_000_AM0PR03MB3828F1161645C155DA569F099D430AM0PR03MB3828eurp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Shraddha,
Lots of thanks for athe tesponse.

I probably did not express myself clearly enough. I will try to fix thst n= ow, and I apologise in advance for a long email.

I have not been speaking about end-yo-end protecyion, only about local pro= tection against failure of an intermediate (a.k.a. pinned) node of an SR p= ath and, specifically, triggers for such protection. This context has been= actually defined by Robert in his original comment.

To the best of my understanding, Robert's concern was that failure of the = link beteeen the pinned node of a SR path and its adjacency (the penultima= te node of the Segment represented by the Node SID of the pinned node) is = not a good enough indication of the pinned node failure. 

I agree with this statement even if my understanding of a good indication = differs from Robert's:
- I think that it is not sufficiently specific and therefore could result = in flapping (local node protection activated and then released)
-Robert's concern, to the best of my understanding, was that it could miss= some failures (e.g. the Fabric failure).

Therefore I have suggested two possibilities for more specific and more rr= liabke detection of failure of the pinned node by its adjacency:

1. Run a multi-hop IP BFD session between the peniltimate node ans the pin= ned ones using prefixes acting as Node SIDs of this pair.  This wiuld= ignore link failures but locally detect such node failurs as power-down o= r crash.

2.  Run S-BFD sessions to all other adjacencies of the pinned node us= ing in each case a list of two SIDs: the protected Adj-SID to the pinned n= ode followed by tge Node SID of the other adjacency, ans declare pinned no= de failure when all these sessions fail. This would again ignore failure of the link between the penultimate node = and the pinned node but detect various real failures of the pinned node, e= .g. failure of its Fabric.

In any case I think that it woyld make sense to separate the protection sc= heme proposed in the draft from specific triggers for its activation simil= ar to how this has been done in MPLS Egress Protection Framework draft.

My 2c.






From: Shraddha Hegde <shradd= ha@juniper.net>
Sent: Monday, December 2, 2019, 06:10
To: Alexander Vainshtein; Robert Raszuk
Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org
= Subject: RE: [spring] Draft for Node protection of interm= ediate nodes in SR Paths

Robert/Sasha,

 

 

S-BFD based mechanism is  head-end triggered p= rotection. It is not a local protection.

S-BFD mechanism is orthogonal to the mechanism desc= ribed in this draft and an operator can

choose what kind of protection makes more sense to = his/her network.

 

In many cases, node-protecting backup path will be = different from link-protecting/SRLG protecting backup path.

If you really want to use link-protecting backup pa= th when link fails and node protecting backup path when node fails,

You will have to download both link protecting and = node-protecting backup paths in FIB and detect which

failure really happened and have the ability in har= dware to use appropriate backup path. None of these

is in the scope of this document.

 

Rgds

Shraddha

 

 

From: Alexander Vainshtein <Alexander.Vai= nshtein@ecitele.com>
Sent: Saturday, November 23, 2019 8:15 PM
To: Robert Raszuk <robert@raszuk.net>; Shraddha Hegde <shr= addha@juniper.net>
Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org
Subject: Re: [spring] Draft for Node protection of intermediate nod= es in SR Paths

 

Robert,

On the second thought, for the purpose of this draft (i.= e. in the scope of SR) it is possible to implement your suggestion by runn= ing S-BFD sessions between R7 (as the initiator) and each other adjacency of R8  (acting as Reflectors) of a SR polic= y with list of two SIDs:

- protected adjacency between R7 and R8

- Node SID of the specific "other" adjacency&n= bsp; of R8.

 

If all these sessions fail, R7 can reliably consider R8 = as failed. 

 

I am not sure this would be much better than multi-hop I= P BFD, and it looks much more complicated to me. 

 

 

What do you think?

 

 

 

 

From: Alexander Vainshtein <Alexand= er.Vainshtein@ecitele.com>
Sent: Saturday, November 23, 2019, 13:15
To: Robert Raszuk; Shraddha Hegde
Cc: = spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf= .org
Subject= : Re: [spring] Draft for Node protection of intermediate n= odes in SR Paths



Robert,

Lots of thanks for a prompt response.

 

I respectfully disagree with your statement that BFD imp= lementation  is usually offloaded to the HW of the ingress line card.=   I do not think this can wor for MH BFD sessions because the ingress and egress line cards are not known in advance and ch= ange with the routing changes

A good  multi-hop BFD implementation should be read= y to overcome this.. There are many ways to achieve that. A naive implemen= tation that runs in SW of the control card is also possible of course. And they would sensd and receive packets 

 

My 2c.

 

From: Robert Raszuk <robert@raszuk.net>
= Sent: Saturday, November 23, 2019, 12:37
To: Alexander Vainshtein; Shraddha Hegde
Cc: = spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf= .org
Subject= : Re: [spring] Draft for Node protection of intermediate n= odes in SR Paths



Hi Sasha,

 

On the surface your suggestion may look cool - but = if you zoom in - I do not think it will work in practice. 

 

See - one of the biggest value of BFD is its offloa= d to line card's hardware. And in most cases it is ingress line card to th= e box. So if you instruct such hardware to respond to SID address loopback= you still did not gain much in terms of detection router's fabric failures, remote LC failure or control = plane issues which could soon result in box failure. The catalogue of rout= er failures is of course much more colorful. 

 

If you ask BFD to be responded by RP/RE it no longe= r has the BFD advantage. 

 

IMHO the best way to detect node failure is ac= tually to send the probes *across* the node under test to its peers. =

 

The way I would think of establishing such m-hop se= ssions would be fully automated with one knob per IGP adj. ex: "bfd d= etect-node-failure [max N]" where local BFD subsystem would create N = sessions to IGP peers of the node we are to protect. LSDB has those peers so no new protocol extension is needed, perhaps= even no new IETF draft is required :). N would be the limit of such sessi= ons in case the node under protection has say 10s of peers. Default could = be perhaps even 1. 

 

Thx,

Robert.

 

 

On Sat, Nov 23, 2019 at 10:00 AM Alexander Vainshte= in <Alexander.Vainshtein@ecitele.com> wrot= e:

Shraddha, Robert and all,

Regarding Robert's question: 

I wonder if multi-hop IP BFD session with addresses used= as /32 (or /128) prefixes serving as Nose SIDs of R8 and R7 respectively = could be used as such a trigger by R7? Such a session would not respond to link failures, and I find it problematic t= o imagine a scenario when it would be kept UP in the case of a real node f= ailure.

 

Of course such a session would have to be slow enough no= t to react to link failures. But it still couks be much faster than IGP co= nversion IMHO.

 

My 2c,

Sasha

 

Such

 

 

Get Outlook for Android

 

From: spring <spring-bounc= es@ietf.org> on behalf of Robert Raszuk <robert@raszuk.ne= t>
Sent: Friday, November 22, 2019, 11:22
To: Shraddha Hegde
Cc: spring@ietf.org; rtgwg@ietf.org
Subject= : Re: [spring] Draft for Node protection of intermediate n= odes in SR Paths

 

Hi Shraddha,

 

I have one question to the document. 

 

As you know the critical element for the effec= tive protection of any scheme is the failure detection. On that your draft= seems to have just one little paragraph: 

 

  =
; Note that R7 activates the node-protecting backup path when it

   detects that the link to R=
8 has failed.  R7 does not know that node


   R8 has actually failed.&nb=
sp; However, the node-protecting backup path is


   computed=20assuming that t=
he failure of the link to R8 implies that R8


   has failed.

 

Well IMO this is not enough. Specifically ther= e can be a lot of types of node failure when link is still up. Moreover th= ere can be even running BFD across the link just fine when say fabric fail= ure occurs at R8. 

 

While this is not solely issue with this draft, it = is our common IETF failure to provide correct means of detecting end to en= d path or fragments of path failures (I am specifically not calling them s= egment here :). 

 

For example I propose that to effectively detect R8= failure as node failure which is the topic of your proposal a mechanism i= s clearly defined and includes bi-dir data plane probes send between R7-R9= , R3-R7, R4-R7, R4-R9, R3-R9

 

Many thx,

Robert.

 

 

On Fri, Nov 22, 2019 at 4:38 AM Shraddha Hegde <= shraddha=3D40juniper.net@dmarc.ietf..org> wrote:<= /p>

WG,

 

This is the draft I pointed out that talks about so= lutions for providing node-protection.

It covers Anycast case as well as keeping forwardin= g plane longer.

 

Review and comments solicited.

 

Rgds

Shraddha

 

_______________________________________________
= rtgwg mailing list
rtgwg@ietf.org
https://www.ietf.org/mailman/listinfo/rtgwg

 

 


__________________________________________________________________________= _

This e-mail message is intended for the recipient only and contains inform= ation which is
CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have rece= ived this
transmission in error, please inform us by e-mail, phone or fax, and then = delete the original
and all copies thereof.
__________________________________________________________________________= _



__________________________________________________________________________= _

This e-mail message is intended for the recipient only and contains inform= ation which is
CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have rece= ived this
transmission in error, please inform us by e-mail, phone or fax, and then = delete the original
and all copies thereof.
__________________________________________________________________________= _
--_000_AM0PR03MB3828F1161645C155DA569F099D430AM0PR03MB3828eurp_-- From nobody Mon Dec 2 02:14:39 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57A32120041 for ; Mon, 2 Dec 2019 02:14:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=raszuk.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BKczGHi0YcTA for ; Mon, 2 Dec 2019 02:14:26 -0800 (PST) Received: from mail-qk1-x72c.google.com (mail-qk1-x72c.google.com [IPv6:2607:f8b0:4864:20::72c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 86A311200E7 for ; Mon, 2 Dec 2019 02:14:26 -0800 (PST) Received: by mail-qk1-x72c.google.com with SMTP id v19so12313638qkv.3 for ; Mon, 02 Dec 2019 02:14:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raszuk.net; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=SSRsHpRFqMmIBHoe20btvrzo8TdARKSi9YkuPYFtkUo=; b=YBEaMTi9l9Xj/radEyzrEcQsozHKeeHQZ3xrlW03k+IGoWmWzi+L8sbpzahAjkI1jW OhLC5NndX7V+PMXKCDTcR0UX1ZFvT/SfkJ9ZHaLnr8G4jDCJLtRrpibw0ZkYbt6NsLLc lnD9ck7ZS8U43z1C+JOIHWRnGutE8ilKizXAAncPiekcE4QWEZ/Bghd8NHB7du/ghEqy Ty+feBRpoYt9GxE1PB5yeu8BKrY+Y0mxLY2V0e+DdNbbfGk2Qplv93Lh2NkAcnVfiuvy QMt4EeVdUfULJgBRBBK3xpbZTL9Bae4QqJqgqlwxTccP5HeURCpteAWe/K/SaG2b8Mko TF/w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=SSRsHpRFqMmIBHoe20btvrzo8TdARKSi9YkuPYFtkUo=; b=ZoCzX6wuvyjJY0usbyHq29ABeS1Uje+eFUTWnCtU1MwCmvlSBBhuUaPrFPSwLqAFz5 epIEeM/Zv5oyvJ2zM/MbWV6+YmQLNXa6hk/v+t+ftfhmPwqrLqBZ/4CEznpog5UGy9HZ 5bYFy3xj9BHNwGddT7h5bWCe3UQBfanHlDuhqS7Avx/8EzVQT8fGkhNdroJ7wsptBGbw UPuPs6sFSuJ4jywKPzwV4L9B8Bm7gC9Od+GUZD61Tj+IGxjTrKkIlZrAzFaQhu7kPLbd qT9MYDc5z8Akvt97Hmq7QGc+FmnGgUOvZh2RYHRsy5lFM7O/c9yEDf+m7+smWut8PcCP yKEw== X-Gm-Message-State: APjAAAUh89lcyI8hRhl1a9nheqbS9wN97oUYOX/oBP2P0lTGSQGZwL+N WyX81hNqgBAw9C/zKhCIv04huYV+MBTbBJQg1JvTzQ== X-Google-Smtp-Source: APXvYqxMbmhjpWvo2C7R2EnxJ8EtTITvzDDpFD9xNzU8FJTrpX9+hX7XauAGR/iY0RhyDp15jWBuAbTmhC/NRU0kM8M= X-Received: by 2002:a37:693:: with SMTP id 141mr16367595qkg.134.1575281665219; Mon, 02 Dec 2019 02:14:25 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Robert Raszuk Date: Mon, 2 Dec 2019 11:14:15 +0100 Message-ID: Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR Paths To: Andrew Alston Cc: Shraddha Hegde , Alexander Vainshtein , "spring@ietf.org" , "rtg-bfd@ietf.org" , "rtgwg@ietf.org" Content-Type: multipart/alternative; boundary="00000000000013b3950598b5d82d" Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Dec 2019 10:14:29 -0000 --00000000000013b3950598b5d82d Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I encourage you to read those two documents: https://tools.ietf.org/html/draft-akiya-bfd-seamless-sr-04 https://tools.ietf.org/html/draft-ali-spring-bfd-sr-policy-02 Cheers, R. On Mon, Dec 2, 2019 at 11:06 AM Andrew Alston < Andrew.Alston@liquidtelecom.com> wrote: > Robert =E2=80=93 actually I disagree. > > > > Because to protect the paths you need the node protection on intermediate > nodes due to lack of state =E2=80=93 the headend has no way to actually p= rotect an > end to end path outside of S-BFD steered over the path to test end to end > reachability and if you get an intermediate node-failure on the path you > could run into a problem =F0=9F=98=8A > > > > As per draft-ietf-spring-segment-routing-policy-05 a path is valid when: > > > > It is empty > > Its weight is 0 > > It=E2=80=99s headend is unable to perform path resolution for the first S= ID into > one or more outgoing interface(s) and next-hop(s) > > The headend is unable to perform SID resolution for any non-first SID of > type C through K into an MPLS label or an SRv6 SID > > The headend verification fails for any SID for which verification has bee= n > explicitly requested > > > > Effectively =E2=80=93 as of right now =E2=80=93 if you read that draft = =E2=80=93 there is no > mechanism to verify path nodes if you are doing paths based on type A SID= =E2=80=99s > =E2=80=93 the only way right now to do that =E2=80=93 is using S-BFD =E2= =80=93 however this draft > if my understanding is correct =E2=80=93 would allow for node protection = that would > in effect protect the paths injected. > > > > Thanks > > Andrew > > > > > > *From:* Robert Raszuk > *Sent:* Monday, 2 December 2019 12:50 > *To:* Andrew Alston > *Cc:* Shraddha Hegde ; Alexander > Vainshtein ; spring@ietf.org; > rtg-bfd@ietf.org; rtgwg@ietf.org > *Subject:* Re: [spring] Draft for Node protection of intermediate nodes > in SR Paths > > > > On Mon, Dec 2, 2019 at 10:28 AM Andrew Alston < > Andrew.Alston@liquidtelecom.com> wrote: > > > > Currently the biggest issue that I see with S-BFD based protection =E2=80= =93 which > is something we use in production is as follows: > > > > Unless I=E2=80=99m mistaken =E2=80=93 there is absolutely no way to tie S= -BFD based > protection with BGP injected SR-TE pathing > > > > > > Well I am not sure what you call " BGP injected SR-TE pathing" but if you > are looking for validation of BGP paths that has been supported by some > vendors for a loooong time. Hint: you allocate different next hop for you= r > SR-TE endpoints and voila. > > > > Btw - not an ietf topic, but an implementation request / vendor's feature= . > > > > Besides, since you are talking about headend what you are describing is > path protection ... this draft talks about node protection which is a > completely different thing. > > > > Cheers, > > r. > > --00000000000013b3950598b5d82d Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

I encourage=C2=A0you to read those two= =C2=A0documents:


=C2=A0
Cheers,
R.=C2=A0

On Mon, D= ec 2, 2019 at 11:06 AM Andrew Alston <Andrew.Alston@liquidtelecom.com> wrote:

Robert =E2=80=93 actually I dis= agree.

=C2=A0

Because to protect the paths yo= u need the node protection on intermediate nodes due to lack of state =E2= =80=93 the headend has no way to actually protect an end to end path outsid= e of S-BFD steered over the path to test end to end reachability and if you get an in= termediate node-failure on the path you could run into a problem =F0=9F=98=8A

=C2=A0

As per draft-ietf-spring-segmen= t-routing-policy-05 a path is valid when:

=C2=A0

It is empty

Its weight is 0

It=E2=80=99s headend is unable = to perform path resolution for the first SID into one or more outgoing inte= rface(s) and next-hop(s)

The headend is unable to perfor= m SID resolution for any non-first SID of type C through K into an MPLS lab= el or an SRv6 SID

The headend verification fails = for any SID for which verification has been explicitly requested<= /u>

=C2=A0

Effectively =E2=80=93 as of rig= ht now =E2=80=93 if you read that draft =E2=80=93 there is no mechanism to = verify path nodes if you are doing paths based on type A SID=E2=80=99s =E2= =80=93 the only way right now to do that =E2=80=93 is using S-BFD =E2=80=93 however this draft if my understanding is correct= =E2=80=93 would allow for node protection that would in effect protect the= paths injected.

=C2=A0

Thanks

Andrew

=C2=A0

=C2=A0

From: Robert Raszuk <robert@raszuk.net>
Sent: Monday, 2 December 2019 12:50
To: Andrew Alston <Andrew.Alston@liquidtelecom.com>
Cc: Shraddha Hegde <shraddha=3D40juniper.net@dmarc.ietf.org>; Alexa= nder Vainshtein <Alexander.Vainshtein@ecitele.com>; spring@ietf.org; rtg-bfd@ietf.org; rtgwg@ietf.org
Subject: Re: [spring] Draft for Node protection of intermediate node= s in SR Paths

=C2=A0

On Mon, Dec 2, 2019 at 10:28 AM Andrew Alston <Andrew.A= lston@liquidtelecom.com> wrote:

=C2=A0

Currently the biggest issue tha= t I see with S-BFD based protection =E2=80=93 which is something we use in = production is as follows:<= /p>

=C2=A0

Unless I=E2=80=99m mistaken =E2= =80=93 there is absolutely no way to tie S-BFD based protection with BGP in= jected SR-TE pathing

=C2=A0

=C2=A0

Well I am not sure what you call " BGP injected= SR-TE pathing" but if you are looking for validation of BGP paths tha= t has been supported by some vendors for a loooong time. Hint: you allocate= different next hop for your SR-TE endpoints and voila.=C2=A0

=C2=A0

Btw - not an ietf topic, but an implementation reque= st / vendor's feature.=C2=A0

=C2=A0

Besides, since you are talking about headend what yo= u are describing is path protection ... this draft talks about node protect= ion which is a completely different thing.=C2=A0

=C2=A0

Cheers,

r.

--00000000000013b3950598b5d82d-- From nobody Mon Dec 2 02:28:04 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78DB2120073 for ; Mon, 2 Dec 2019 02:28:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j2IoK6mPWQ6P for ; Mon, 2 Dec 2019 02:27:59 -0800 (PST) Received: from eu-smtp-delivery-182.mimecast.com (eu-smtp-delivery-182.mimecast.com [207.82.80.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B33C61200D7 for ; Mon, 2 Dec 2019 02:27:58 -0800 (PST) Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-he1eur04lp2051.outbound.protection.outlook.com [104.47.13.51]) (Using TLS) by relay.mimecast.com with ESMTP id uk-mta-128-PmDPvwdnPYOCRlQPcfNIzw-1; Mon, 02 Dec 2019 10:27:53 +0000 Received: from DBBPR03MB5415.eurprd03.prod.outlook.com (20.179.47.79) by DBBPR03MB5397.eurprd03.prod.outlook.com (20.179.47.203) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.22; Mon, 2 Dec 2019 10:27:51 +0000 Received: from DBBPR03MB5415.eurprd03.prod.outlook.com ([fe80::707f:9207:45d4:82bc]) by DBBPR03MB5415.eurprd03.prod.outlook.com ([fe80::707f:9207:45d4:82bc%6]) with mapi id 15.20.2495.014; Mon, 2 Dec 2019 10:27:51 +0000 From: Andrew Alston To: Robert Raszuk CC: Shraddha Hegde , Alexander Vainshtein , "spring@ietf.org" , "rtg-bfd@ietf.org" , "rtgwg@ietf.org" Subject: RE: [spring] Draft for Node protection of intermediate nodes in SR Paths Thread-Topic: [spring] Draft for Node protection of intermediate nodes in SR Paths Thread-Index: AdWg5kSzPcmokSdUTd+ujmkEsxaFPQAMBq8AADGDFIAAA2XugAABUkKAAAdRE4ABsInvgAADpWmAAAEKboAAA6iU8AABbEuAAABBMsAAAJvxgAAALybA Date: Mon, 2 Dec 2019 10:27:51 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [197.155.81.57] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 20c39d3c-b294-4d11-228c-08d777124920 x-ms-traffictypediagnostic: DBBPR03MB5397: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4303; x-forefront-prvs: 0239D46DB6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(376002)(136003)(396003)(39860400002)(366004)(189003)(199004)(54906003)(55016002)(6436002)(3846002)(6116002)(52536014)(790700001)(66946007)(8676002)(33656002)(81166006)(5660300002)(81156014)(66066001)(99286004)(606006)(446003)(76116006)(316002)(8936002)(11346002)(14454004)(102836004)(54896002)(6306002)(6246003)(9686003)(6916009)(86362001)(7736002)(26005)(64756008)(66556008)(236005)(478600001)(66476007)(2906002)(229853002)(10916006)(71200400001)(71190400001)(186003)(74316002)(25786009)(66446008)(256004)(76176011)(14444005)(4326008)(53546011)(966005)(6506007)(7696005); DIR:OUT; SFP:1102; SCL:1; SRVR:DBBPR03MB5397; H:DBBPR03MB5415.eurprd03.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 4tnMbO6TO523KLMStjQN14r/aXVmZ66mP+SH+Nu8/3gJfY+bAI+OsT2TZOjIdc5PKutPsckxHJ6jnh1mV5iDU6Lv6Lpzs33Z/AEKvw0+dGYtPwwSkEA6opClGsj7pstH7mJtb1J9mEibtunIbilENDG3sfhexBR6zGKDCtZ8XXzlIoU7d9U+WJtkz5YJOH6d499JVkTPa8mcwUc9ud11kg1ujsnjS0sT+deoybqThtHVaUlmvlkSly6yMQOQgTBNNU9ui08GTHoYxgelV2p0OapL33cuoA/XNdlIBo05FF+nJhRhbpc1txp1DDNVCjjYCxO0FXZQRtDxB7OVyuHRTnZa8pgY8WAmQL8FRSiadxUW7ItyfUJe3pcPaXJcjnCcnRbTbgEhjkcffThwyyvI2w1OH1oKmzUyuA0wXW+MSf2JBPjAPMDf50AQlcce/zenXn152sIjaL7zIUoe5sbhXhAOrqKxoBS360ag4yPdwOM= x-ms-exchange-transport-forked: True MIME-Version: 1.0 X-OriginatorOrg: liquidtelecom.com X-MS-Exchange-CrossTenant-Network-Message-Id: 20c39d3c-b294-4d11-228c-08d777124920 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Dec 2019 10:27:51.5174 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 68792612-0f0e-46cb-b16a-fcb82fd80cb1 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: tCA3zOpafj26CTltkyIpddX1xm3TIwYxBZlHdhii2Mk+ZhpsrjQbf3BMPpRDv7w2EYY1lihG1fa609Y26IY2dnBVJBMyig+7DSajn/bxqAs= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBBPR03MB5397 X-MC-Unique: PmDPvwdnPYOCRlQPcfNIzw-1 X-Mimecast-Spam-Score: 0 Content-Type: multipart/alternative; boundary="_000_DBBPR03MB5415A3FC8FC2FE7D996457C7EE430DBBPR03MB5415eurp_" Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Dec 2019 10:28:02 -0000 --_000_DBBPR03MB5415A3FC8FC2FE7D996457C7EE430DBBPR03MB5415eurp_ Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 VGhhbmtzLA0KDQpTb21lIGhvdyBJIGhhZCBtaXNzZWQgdGhlc2UgZHJhZnRzIOKAkyBJIHdpbGwg Z28gdGhyb3VnaCBpbiBmdXJ0aGVyIGRldGFpbCBhbmQgdGhlbiBwb3RlbnRpYWxseSBjb21tZW50 IG1vcmUuICBNeSBiYWQgZm9yIG1pc3NpbmcgdGhlbSBhbmQgYXBwcmVjaWF0ZSB0aGUgcG9pbnRl cnMuDQoNClRoYW5rcw0KDQpBbmRyZXcNCg0KRnJvbTogUm9iZXJ0IFJhc3p1ayA8cm9iZXJ0QHJh c3p1ay5uZXQ+DQpTZW50OiBNb25kYXksIDIgRGVjZW1iZXIgMjAxOSAxMzoxNA0KVG86IEFuZHJl dyBBbHN0b24gPEFuZHJldy5BbHN0b25AbGlxdWlkdGVsZWNvbS5jb20+DQpDYzogU2hyYWRkaGEg SGVnZGUgPHNocmFkZGhhPTQwanVuaXBlci5uZXRAZG1hcmMuaWV0Zi5vcmc+OyBBbGV4YW5kZXIg VmFpbnNodGVpbiA8QWxleGFuZGVyLlZhaW5zaHRlaW5AZWNpdGVsZS5jb20+OyBzcHJpbmdAaWV0 Zi5vcmc7IHJ0Zy1iZmRAaWV0Zi5vcmc7IHJ0Z3dnQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW3Nw cmluZ10gRHJhZnQgZm9yIE5vZGUgcHJvdGVjdGlvbiBvZiBpbnRlcm1lZGlhdGUgbm9kZXMgaW4g U1IgUGF0aHMNCg0KDQpJIGVuY291cmFnZSB5b3UgdG8gcmVhZCB0aG9zZSB0d28gZG9jdW1lbnRz Og0KDQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtYWtpeWEtYmZkLXNlYW1sZXNz LXNyLTA0PGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1ha2l5YS1iZmQtc2VhbWxl c3Mtc3ItMDQ+DQoNCmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1hbGktc3ByaW5n LWJmZC1zci1wb2xpY3ktMDI8aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWFsaS1z cHJpbmctYmZkLXNyLXBvbGljeS0wMj4NCg0KQ2hlZXJzLA0KUi4NCg0KDQpPbiBNb24sIERlYyAy LCAyMDE5IGF0IDExOjA2IEFNIEFuZHJldyBBbHN0b24gPEFuZHJldy5BbHN0b25AbGlxdWlkdGVs ZWNvbS5jb208bWFpbHRvOkFuZHJldy5BbHN0b25AbGlxdWlkdGVsZWNvbS5jb20+PiB3cm90ZToN ClJvYmVydCDigJMgYWN0dWFsbHkgSSBkaXNhZ3JlZS4NCg0KQmVjYXVzZSB0byBwcm90ZWN0IHRo ZSBwYXRocyB5b3UgbmVlZCB0aGUgbm9kZSBwcm90ZWN0aW9uIG9uIGludGVybWVkaWF0ZSBub2Rl cyBkdWUgdG8gbGFjayBvZiBzdGF0ZSDigJMgdGhlIGhlYWRlbmQgaGFzIG5vIHdheSB0byBhY3R1 YWxseSBwcm90ZWN0IGFuIGVuZCB0byBlbmQgcGF0aCBvdXRzaWRlIG9mIFMtQkZEIHN0ZWVyZWQg b3ZlciB0aGUgcGF0aCB0byB0ZXN0IGVuZCB0byBlbmQgcmVhY2hhYmlsaXR5IGFuZCBpZiB5b3Ug Z2V0IGFuIGludGVybWVkaWF0ZSBub2RlLWZhaWx1cmUgb24gdGhlIHBhdGggeW91IGNvdWxkIHJ1 biBpbnRvIGEgcHJvYmxlbSDwn5iKDQoNCkFzIHBlciBkcmFmdC1pZXRmLXNwcmluZy1zZWdtZW50 LXJvdXRpbmctcG9saWN5LTA1IGEgcGF0aCBpcyB2YWxpZCB3aGVuOg0KDQpJdCBpcyBlbXB0eQ0K SXRzIHdlaWdodCBpcyAwDQpJdOKAmXMgaGVhZGVuZCBpcyB1bmFibGUgdG8gcGVyZm9ybSBwYXRo IHJlc29sdXRpb24gZm9yIHRoZSBmaXJzdCBTSUQgaW50byBvbmUgb3IgbW9yZSBvdXRnb2luZyBp bnRlcmZhY2UocykgYW5kIG5leHQtaG9wKHMpDQpUaGUgaGVhZGVuZCBpcyB1bmFibGUgdG8gcGVy Zm9ybSBTSUQgcmVzb2x1dGlvbiBmb3IgYW55IG5vbi1maXJzdCBTSUQgb2YgdHlwZSBDIHRocm91 Z2ggSyBpbnRvIGFuIE1QTFMgbGFiZWwgb3IgYW4gU1J2NiBTSUQNClRoZSBoZWFkZW5kIHZlcmlm aWNhdGlvbiBmYWlscyBmb3IgYW55IFNJRCBmb3Igd2hpY2ggdmVyaWZpY2F0aW9uIGhhcyBiZWVu IGV4cGxpY2l0bHkgcmVxdWVzdGVkDQoNCkVmZmVjdGl2ZWx5IOKAkyBhcyBvZiByaWdodCBub3cg 4oCTIGlmIHlvdSByZWFkIHRoYXQgZHJhZnQg4oCTIHRoZXJlIGlzIG5vIG1lY2hhbmlzbSB0byB2 ZXJpZnkgcGF0aCBub2RlcyBpZiB5b3UgYXJlIGRvaW5nIHBhdGhzIGJhc2VkIG9uIHR5cGUgQSBT SUTigJlzIOKAkyB0aGUgb25seSB3YXkgcmlnaHQgbm93IHRvIGRvIHRoYXQg4oCTIGlzIHVzaW5n IFMtQkZEIOKAkyBob3dldmVyIHRoaXMgZHJhZnQgaWYgbXkgdW5kZXJzdGFuZGluZyBpcyBjb3Jy ZWN0IOKAkyB3b3VsZCBhbGxvdyBmb3Igbm9kZSBwcm90ZWN0aW9uIHRoYXQgd291bGQgaW4gZWZm ZWN0IHByb3RlY3QgdGhlIHBhdGhzIGluamVjdGVkLg0KDQpUaGFua3MNCkFuZHJldw0KDQoNCkZy b206IFJvYmVydCBSYXN6dWsgPHJvYmVydEByYXN6dWsubmV0PG1haWx0bzpyb2JlcnRAcmFzenVr Lm5ldD4+DQpTZW50OiBNb25kYXksIDIgRGVjZW1iZXIgMjAxOSAxMjo1MA0KVG86IEFuZHJldyBB bHN0b24gPEFuZHJldy5BbHN0b25AbGlxdWlkdGVsZWNvbS5jb208bWFpbHRvOkFuZHJldy5BbHN0 b25AbGlxdWlkdGVsZWNvbS5jb20+Pg0KQ2M6IFNocmFkZGhhIEhlZ2RlIDxzaHJhZGRoYT00MGp1 bmlwZXIubmV0QGRtYXJjLmlldGYub3JnPG1haWx0bzo0MGp1bmlwZXIubmV0QGRtYXJjLmlldGYu b3JnPj47IEFsZXhhbmRlciBWYWluc2h0ZWluIDxBbGV4YW5kZXIuVmFpbnNodGVpbkBlY2l0ZWxl LmNvbTxtYWlsdG86QWxleGFuZGVyLlZhaW5zaHRlaW5AZWNpdGVsZS5jb20+Pjsgc3ByaW5nQGll dGYub3JnPG1haWx0bzpzcHJpbmdAaWV0Zi5vcmc+OyBydGctYmZkQGlldGYub3JnPG1haWx0bzpy dGctYmZkQGlldGYub3JnPjsgcnRnd2dAaWV0Zi5vcmc8bWFpbHRvOnJ0Z3dnQGlldGYub3JnPg0K U3ViamVjdDogUmU6IFtzcHJpbmddIERyYWZ0IGZvciBOb2RlIHByb3RlY3Rpb24gb2YgaW50ZXJt ZWRpYXRlIG5vZGVzIGluIFNSIFBhdGhzDQoNCk9uIE1vbiwgRGVjIDIsIDIwMTkgYXQgMTA6Mjgg QU0gQW5kcmV3IEFsc3RvbiA8QW5kcmV3LkFsc3RvbkBsaXF1aWR0ZWxlY29tLmNvbTxtYWlsdG86 QW5kcmV3LkFsc3RvbkBsaXF1aWR0ZWxlY29tLmNvbT4+IHdyb3RlOg0KDQpDdXJyZW50bHkgdGhl IGJpZ2dlc3QgaXNzdWUgdGhhdCBJIHNlZSB3aXRoIFMtQkZEIGJhc2VkIHByb3RlY3Rpb24g4oCT IHdoaWNoIGlzIHNvbWV0aGluZyB3ZSB1c2UgaW4gcHJvZHVjdGlvbiBpcyBhcyBmb2xsb3dzOg0K DQpVbmxlc3MgSeKAmW0gbWlzdGFrZW4g4oCTIHRoZXJlIGlzIGFic29sdXRlbHkgbm8gd2F5IHRv IHRpZSBTLUJGRCBiYXNlZCBwcm90ZWN0aW9uIHdpdGggQkdQIGluamVjdGVkIFNSLVRFIHBhdGhp bmcNCg0KDQpXZWxsIEkgYW0gbm90IHN1cmUgd2hhdCB5b3UgY2FsbCAiIEJHUCBpbmplY3RlZCBT Ui1URSBwYXRoaW5nIiBidXQgaWYgeW91IGFyZSBsb29raW5nIGZvciB2YWxpZGF0aW9uIG9mIEJH UCBwYXRocyB0aGF0IGhhcyBiZWVuIHN1cHBvcnRlZCBieSBzb21lIHZlbmRvcnMgZm9yIGEgbG9v b29uZyB0aW1lLiBIaW50OiB5b3UgYWxsb2NhdGUgZGlmZmVyZW50IG5leHQgaG9wIGZvciB5b3Vy IFNSLVRFIGVuZHBvaW50cyBhbmQgdm9pbGEuDQoNCkJ0dyAtIG5vdCBhbiBpZXRmIHRvcGljLCBi dXQgYW4gaW1wbGVtZW50YXRpb24gcmVxdWVzdCAvIHZlbmRvcidzIGZlYXR1cmUuDQoNCkJlc2lk ZXMsIHNpbmNlIHlvdSBhcmUgdGFsa2luZyBhYm91dCBoZWFkZW5kIHdoYXQgeW91IGFyZSBkZXNj cmliaW5nIGlzIHBhdGggcHJvdGVjdGlvbiAuLi4gdGhpcyBkcmFmdCB0YWxrcyBhYm91dCBub2Rl IHByb3RlY3Rpb24gd2hpY2ggaXMgYSBjb21wbGV0ZWx5IGRpZmZlcmVudCB0aGluZy4NCg0KQ2hl ZXJzLA0Kci4NCg== --_000_DBBPR03MB5415A3FC8FC2FE7D996457C7EE430DBBPR03MB5415eurp_ Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiU2Vnb2UgVUkgRW1vamkiOw0KCXBhbm9z ZS0xOjIgMTEgNSAyIDQgMiA0IDIgMiAzO30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1z b05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowY207DQoJbWFy Z2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5l O30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K cC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUt bmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0 OjBjbTsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowY207DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpz cGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250 LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29D aHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCkBwYWdl IFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcy LjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlv bjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVs dHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0t W2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlk bWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2Vu ZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iZW4tS0UiIGxpbms9ImJsdWUiIHZsaW5rPSJw dXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPlRo YW5rcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5Tb21lIGhvdyBJIGhhZCBtaXNz ZWQgdGhlc2UgZHJhZnRzIOKAkyBJIHdpbGwgZ28gdGhyb3VnaCBpbiBmdXJ0aGVyIGRldGFpbCBh bmQgdGhlbiBwb3RlbnRpYWxseSBjb21tZW50IG1vcmUuJm5ic3A7IE15IGJhZCBmb3IgbWlzc2lu ZyB0aGVtIGFuZCBhcHByZWNpYXRlIHRoZSBwb2ludGVycy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJl YXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1 YWdlOkVOLVVTIj5UaGFua3M8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVT Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5BbmRyZXc8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJlbi1LRSIgc3R5bGU9Im1z by1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRp bmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9IkVOLVVTIj5Gcm9tOjwvc3Bhbj48 L2I+PHNwYW4gbGFuZz0iRU4tVVMiPiBSb2JlcnQgUmFzenVrICZsdDtyb2JlcnRAcmFzenVrLm5l dCZndDsNCjxicj4NCjxiPlNlbnQ6PC9iPiBNb25kYXksIDIgRGVjZW1iZXIgMjAxOSAxMzoxNDxi cj4NCjxiPlRvOjwvYj4gQW5kcmV3IEFsc3RvbiAmbHQ7QW5kcmV3LkFsc3RvbkBsaXF1aWR0ZWxl Y29tLmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IFNocmFkZGhhIEhlZ2RlICZsdDtzaHJhZGRoYT00 MGp1bmlwZXIubmV0QGRtYXJjLmlldGYub3JnJmd0OzsgQWxleGFuZGVyIFZhaW5zaHRlaW4gJmx0 O0FsZXhhbmRlci5WYWluc2h0ZWluQGVjaXRlbGUuY29tJmd0Ozsgc3ByaW5nQGlldGYub3JnOyBy dGctYmZkQGlldGYub3JnOyBydGd3Z0BpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTog W3NwcmluZ10gRHJhZnQgZm9yIE5vZGUgcHJvdGVjdGlvbiBvZiBpbnRlcm1lZGlhdGUgbm9kZXMg aW4gU1IgUGF0aHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+SSBlbmNvdXJhZ2UmbmJzcDt5b3UgdG8gcmVhZCB0aG9zZSB0d28m bmJzcDtkb2N1bWVudHM6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1h a2l5YS1iZmQtc2VhbWxlc3Mtc3ItMDQiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFm dC1ha2l5YS1iZmQtc2VhbWxlc3Mtc3ItMDQ8L2E+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMu aWV0Zi5vcmcvaHRtbC9kcmFmdC1hbGktc3ByaW5nLWJmZC1zci1wb2xpY3ktMDIiPmh0dHBzOi8v dG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1hbGktc3ByaW5nLWJmZC1zci1wb2xpY3ktMDI8L2E+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPkNoZWVycyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPlIuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPk9uIE1vbiwgRGVjIDIsIDIwMTkgYXQgMTE6MDYgQU0gQW5kcmV3IEFsc3RvbiAmbHQ7 PGEgaHJlZj0ibWFpbHRvOkFuZHJldy5BbHN0b25AbGlxdWlkdGVsZWNvbS5jb20iPkFuZHJldy5B bHN0b25AbGlxdWlkdGVsZWNvbS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICND Q0NDQ0MgMS4wcHQ7cGFkZGluZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDtt YXJnaW4tcmlnaHQ6MGNtIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBsYW5nPSJFTi1VUyI+Um9iZXJ0IOKAkyBhY3R1YWxseSBJIGRpc2FncmVlLjwvc3Bhbj48 c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtF Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxh bmc9IkVOLVVTIj5CZWNhdXNlIHRvIHByb3RlY3QgdGhlIHBhdGhzIHlvdSBuZWVkIHRoZSBub2Rl IHByb3RlY3Rpb24gb24gaW50ZXJtZWRpYXRlIG5vZGVzIGR1ZSB0byBsYWNrIG9mIHN0YXRlIOKA kyB0aGUgaGVhZGVuZCBoYXMgbm8gd2F5IHRvIGFjdHVhbGx5IHByb3RlY3QgYW4gZW5kIHRvIGVu ZA0KIHBhdGggb3V0c2lkZSBvZiBTLUJGRCBzdGVlcmVkIG92ZXIgdGhlIHBhdGggdG8gdGVzdCBl bmQgdG8gZW5kIHJlYWNoYWJpbGl0eSBhbmQgaWYgeW91IGdldCBhbiBpbnRlcm1lZGlhdGUgbm9k ZS1mYWlsdXJlIG9uIHRoZSBwYXRoIHlvdSBjb3VsZCBydW4gaW50byBhIHByb2JsZW0NCjwvc3Bh bj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1NlZ29lIFVJIEVt b2ppJnF1b3Q7LHNhbnMtc2VyaWYiPiYjMTI4NTIyOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+ DQo8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48c3BhbiBs YW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBsYW5nPSJFTi1VUyI+QXMgcGVyIGRyYWZ0LWlldGYtc3ByaW5nLXNlZ21lbnQtcm91 dGluZy1wb2xpY3ktMDUgYSBwYXRoIGlzIHZhbGlkIHdoZW46PC9zcGFuPjxzcGFuIGxhbmc9ImVu LUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPkl0 IGlzIGVtcHR5PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5JdHMgd2VpZ2h0IGlz IDANCjwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+SXTigJlzIGhlYWRlbmQgaXMg dW5hYmxlIHRvIHBlcmZvcm0gcGF0aCByZXNvbHV0aW9uIGZvciB0aGUgZmlyc3QgU0lEIGludG8g b25lIG9yIG1vcmUgb3V0Z29pbmcgaW50ZXJmYWNlKHMpIGFuZCBuZXh0LWhvcChzKTwvc3Bhbj48 c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+VGhlIGhlYWRlbmQgaXMgdW5hYmxlIHRvIHBlcmZv cm0gU0lEIHJlc29sdXRpb24gZm9yIGFueSBub24tZmlyc3QgU0lEIG9mIHR5cGUgQyB0aHJvdWdo IEsgaW50byBhbiBNUExTIGxhYmVsIG9yIGFuIFNSdjYgU0lEPC9zcGFuPjxzcGFuIGxhbmc9ImVu LUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IGxhbmc9IkVOLVVTIj5UaGUgaGVhZGVuZCB2ZXJpZmljYXRpb24gZmFpbHMgZm9yIGFueSBTSUQg Zm9yIHdoaWNoIHZlcmlmaWNhdGlvbiBoYXMgYmVlbiBleHBsaWNpdGx5IHJlcXVlc3RlZDwvc3Bh bj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVu LUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IGxhbmc9IkVOLVVTIj5FZmZlY3RpdmVseSDigJMgYXMgb2YgcmlnaHQgbm93IOKAkyBpZiB5b3Ug cmVhZCB0aGF0IGRyYWZ0IOKAkyB0aGVyZSBpcyBubyBtZWNoYW5pc20gdG8gdmVyaWZ5IHBhdGgg bm9kZXMgaWYgeW91IGFyZSBkb2luZyBwYXRocyBiYXNlZCBvbiB0eXBlIEEgU0lE4oCZcyDigJMg dGhlIG9ubHkgd2F5DQogcmlnaHQgbm93IHRvIGRvIHRoYXQg4oCTIGlzIHVzaW5nIFMtQkZEIOKA kyBob3dldmVyIHRoaXMgZHJhZnQgaWYgbXkgdW5kZXJzdGFuZGluZyBpcyBjb3JyZWN0IOKAkyB3 b3VsZCBhbGxvdyBmb3Igbm9kZSBwcm90ZWN0aW9uIHRoYXQgd291bGQgaW4gZWZmZWN0IHByb3Rl Y3QgdGhlIHBhdGhzIGluamVjdGVkLjwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+ Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGFua3M8L3NwYW4+PHNw YW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPkFuZHJldzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5n PSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9ImVuLUtFIj4mbmJzcDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVm dDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxk aXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRk aW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PGI+PHNwYW4g bGFuZz0iRU4tVVMiPkZyb206PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyI+IFJvYmVydCBS YXN6dWsgJmx0OzxhIGhyZWY9Im1haWx0bzpyb2JlcnRAcmFzenVrLm5ldCIgdGFyZ2V0PSJfYmxh bmsiPnJvYmVydEByYXN6dWsubmV0PC9hPiZndDsNCjxicj4NCjxiPlNlbnQ6PC9iPiBNb25kYXks IDIgRGVjZW1iZXIgMjAxOSAxMjo1MDxicj4NCjxiPlRvOjwvYj4gQW5kcmV3IEFsc3RvbiAmbHQ7 PGEgaHJlZj0ibWFpbHRvOkFuZHJldy5BbHN0b25AbGlxdWlkdGVsZWNvbS5jb20iIHRhcmdldD0i X2JsYW5rIj5BbmRyZXcuQWxzdG9uQGxpcXVpZHRlbGVjb20uY29tPC9hPiZndDs8YnI+DQo8Yj5D Yzo8L2I+IFNocmFkZGhhIEhlZ2RlICZsdDtzaHJhZGRoYT08YSBocmVmPSJtYWlsdG86NDBqdW5p cGVyLm5ldEBkbWFyYy5pZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPjQwanVuaXBlci5uZXRAZG1h cmMuaWV0Zi5vcmc8L2E+Jmd0OzsgQWxleGFuZGVyIFZhaW5zaHRlaW4gJmx0OzxhIGhyZWY9Im1h aWx0bzpBbGV4YW5kZXIuVmFpbnNodGVpbkBlY2l0ZWxlLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPkFs ZXhhbmRlci5WYWluc2h0ZWluQGVjaXRlbGUuY29tPC9hPiZndDs7DQo8YSBocmVmPSJtYWlsdG86 c3ByaW5nQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+c3ByaW5nQGlldGYub3JnPC9hPjsgPGEg aHJlZj0ibWFpbHRvOnJ0Zy1iZmRAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj4NCnJ0Zy1iZmRA aWV0Zi5vcmc8L2E+OyA8YSBocmVmPSJtYWlsdG86cnRnd2dAaWV0Zi5vcmciIHRhcmdldD0iX2Js YW5rIj5ydGd3Z0BpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtzcHJpbmdd IERyYWZ0IGZvciBOb2RlIHByb3RlY3Rpb24gb2YgaW50ZXJtZWRpYXRlIG5vZGVzIGluIFNSIFBh dGhzPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJlbi1LRSI+Jm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIGxhbmc9ImVuLUtFIj5PbiBNb24sIERlYyAyLCAyMDE5IGF0IDEwOjI4IEFN IEFuZHJldyBBbHN0b24gJmx0OzxhIGhyZWY9Im1haWx0bzpBbmRyZXcuQWxzdG9uQGxpcXVpZHRl bGVjb20uY29tIiB0YXJnZXQ9Il9ibGFuayI+QW5kcmV3LkFsc3RvbkBsaXF1aWR0ZWxlY29tLmNv bTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iZW4tS0UiPiZuYnNwOzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4w cHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGNtO21h cmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIGxhbmc9IkVOLVVTIj5DdXJyZW50bHkgdGhlIGJpZ2dlc3QgaXNzdWUgdGhhdCBJIHNl ZSB3aXRoIFMtQkZEIGJhc2VkIHByb3RlY3Rpb24g4oCTIHdoaWNoIGlzIHNvbWV0aGluZyB3ZSB1 c2UgaW4gcHJvZHVjdGlvbiBpcyBhcyBmb2xsb3dzOjwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5n PSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5Vbmxlc3Mg SeKAmW0gbWlzdGFrZW4g4oCTIHRoZXJlIGlzIGFic29sdXRlbHkgbm8gd2F5IHRvIHRpZSBTLUJG RCBiYXNlZCBwcm90ZWN0aW9uIHdpdGggQkdQIGluamVjdGVkIFNSLVRFIHBhdGhpbmc8L3NwYW4+ PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5n PSJlbi1LRSI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJlbi1LRSI+Jm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJlbi1LRSI+V2VsbCBJIGFtIG5vdCBzdXJlIHdoYXQgeW91IGNhbGwgJnF1b3Q7IEJHUCBp bmplY3RlZCBTUi1URSBwYXRoaW5nJnF1b3Q7IGJ1dCBpZiB5b3UgYXJlIGxvb2tpbmcgZm9yIHZh bGlkYXRpb24gb2YgQkdQIHBhdGhzIHRoYXQgaGFzIGJlZW4gc3VwcG9ydGVkIGJ5IHNvbWUgdmVu ZG9ycyBmb3INCiBhIGxvb29vbmcgdGltZS4gSGludDogeW91IGFsbG9jYXRlIGRpZmZlcmVudCBu ZXh0IGhvcCBmb3IgeW91ciBTUi1URSBlbmRwb2ludHMgYW5kIHZvaWxhLiZuYnNwOzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gbGFuZz0iZW4tS0UiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iZW4tS0UiPkJ0dyAtIG5vdCBh biBpZXRmIHRvcGljLCBidXQgYW4gaW1wbGVtZW50YXRpb24gcmVxdWVzdCAvIHZlbmRvcidzIGZl YXR1cmUuJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJlbi1LRSI+Jm5ic3A7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5n PSJlbi1LRSI+QmVzaWRlcywgc2luY2UgeW91IGFyZSB0YWxraW5nIGFib3V0IGhlYWRlbmQgd2hh dCB5b3UgYXJlIGRlc2NyaWJpbmcgaXMgcGF0aCBwcm90ZWN0aW9uIC4uLiB0aGlzIGRyYWZ0IHRh bGtzIGFib3V0IG5vZGUgcHJvdGVjdGlvbiB3aGljaCBpcyBhIGNvbXBsZXRlbHkgZGlmZmVyZW50 DQogdGhpbmcuJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJlbi1LRSI+Jm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJlbi1LRSI+Q2hlZXJzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iZW4tS0UiPnIuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+ DQo8L2h0bWw+DQo= --_000_DBBPR03MB5415A3FC8FC2FE7D996457C7EE430DBBPR03MB5415eurp_-- From nobody Mon Dec 2 06:32:36 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 441A61201DE; Sun, 1 Dec 2019 23:24:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.1 X-Spam-Level: X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, PDS_BTC_ID=0.499, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=v6RSeREN; dkim=pass (1024-bit key) header.d=juniper.net header.b=dtLpHrim Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OhtPPbdij3Ig; Sun, 1 Dec 2019 23:24:08 -0800 (PST) Received: from mx0b-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21421120178; Sun, 1 Dec 2019 23:24:08 -0800 (PST) Received: from pps.filterd (m0108157.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xB27NaJU008004; Sun, 1 Dec 2019 23:24:04 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=rtfq3O4b9rwWVLmIkbJERtsFZ+VS3+r/pt5seYGgMk8=; b=v6RSeREN0sFCcmWEjTtk6MbnfVUl9amtykFjnT2bfXvdN4rAQDYWd153Hfsv1GzuebsP /G/FJ6/NcUqPsF2w6AW0LoFsMPUoLDdlfYhb4ZLRcGvX/3X8g0ZU79qqYfcnVhHE2nOH UlvyUnlkVB/amzsdTemW5ATA1vzdoIGkZyV/3bKRja1NE9SCYIe5a/uMGJpaJdvLBYVt bp0n163EU8UTcMc4LiAgV3UUsUJp1VdC6nDuwQIzLtXmbiPukPfPJWcSYlWENyilFrk0 IQnKT/jeXsNeSSEFmScB46C4Eb60RNMg063J6IB4q0z8dxP7OiLjZ5VOncAlvOIV8C2b sQ== Received: from nam05-co1-obe.outbound.protection.outlook.com (mail-co1nam05lp2055.outbound.protection.outlook.com [104.47.48.55]) by mx0a-00273201.pphosted.com with ESMTP id 2wkrjq245r-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sun, 01 Dec 2019 23:24:03 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NC6QK6EDtdaqUasCOxnP75Z7zNG/Ybb9DleQ/9QSi2y1ac1XKQkkRZP0Js8zX0dEE6IflLltCW0Gy0JfnFrNIgzTM2CNjtvjdWbeCR83vSKQK7JkDCcYOq2uDatGPVg/YNbjNvd2H7jFnDcBsjCSKj/m8ZGH8qK2OA+ClXXUzxw7F5mCuR+PGoUsPHkzqyr0bVFcFnafNOgyvSkwNJKlLkoh+/C4Tcx8HzyMVeCyPZGFCIcgt6czuBtsJpeuaKonedMugfl5u5AkHfRVFS6Z5gUNdUVZa4dL1mW1GuxzK80zP7Q3StGGyYBNt3LjcC0c6PNErzwGRYdBUoWR8yePZw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rtfq3O4b9rwWVLmIkbJERtsFZ+VS3+r/pt5seYGgMk8=; b=TscZJiW6YuZqmNPi2bv8kd8e7yoF+p6MSYXWMFz+IVmthjeGEo4irlhWEFOqErvA2jFpM4yZeTBF7iCIuoDTbkwAxiWtxMjF6iVTu0bwIINoXSUiJ3vePYp1RqLpBf7sixXHBSGjrvXmZZk4R8d1RetJYUJcLu5V9ary6HjQTd+KnL3uQEqHGN4A5bT8Oqg25y0Oc/TyAwmIsl9i26Z5Q3h4LvJ/HOh5SfgvW6+ocrDoKO5YKzovNlzoSM2EE+XCdGN55Plr0Ba222H5mi9WZkZJfX8TE7XxQihSWcakx5SbebuceCoCmDLnseW5HwGizZx6xU+9e89ABzYeJruU8Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rtfq3O4b9rwWVLmIkbJERtsFZ+VS3+r/pt5seYGgMk8=; b=dtLpHrimr2t7dRMdk52J/NhK65EQenKOoVPRaYiHQoWnMz1FKTVbhwDR7M+lyaJXl+YNkW108p1p3JUw0E8r8GP/6Iy08nSss5CqHGMJXwZOuyWya/28NhW1WbrcIfOg+CAUK3TFemDEudPT2R/jxrbprYIOv/YENfeaiJeacbE= Received: from BYAPR05MB3943.namprd05.prod.outlook.com (52.135.197.146) by BYAPR05MB5622.namprd05.prod.outlook.com (20.177.184.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2516.3; Mon, 2 Dec 2019 07:24:01 +0000 Received: from BYAPR05MB3943.namprd05.prod.outlook.com ([fe80::d6c:bedb:6c67:8a26]) by BYAPR05MB3943.namprd05.prod.outlook.com ([fe80::d6c:bedb:6c67:8a26%6]) with mapi id 15.20.2495.014; Mon, 2 Dec 2019 07:24:01 +0000 From: Shraddha Hegde To: Alexander Vainshtein CC: "spring@ietf.org" , "rtgwg@ietf.org" , "rtg-bfd@ietf.org" , Robert Raszuk Subject: RE: [spring] Draft for Node protection of intermediate nodes in SR Paths Thread-Topic: [spring] Draft for Node protection of intermediate nodes in SR Paths Thread-Index: AQHVoRZpcWzNT/yCAUirnVoRkUsBfqeYdqqAgAAbMICAAAqSgIAAOoiAgA2Aw7CAACC4gIAAB/Cw Date: Mon, 2 Dec 2019 07:24:01 +0000 Message-ID: References: , , , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_Enabled=True; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_SetDate=2019-12-02T04:57:07.0000000Z; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_Name=Juniper Business Use Only; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_ContentBits=0; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_Method=Standard dlp-product: dlpe-windows dlp-version: 11.2.0.14 dlp-reaction: no-action x-originating-ip: [116.197.184.15] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: db95fe8b-7d53-401c-efe2-08d776f89a80 x-ms-traffictypediagnostic: BYAPR05MB5622: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:5516; x-forefront-prvs: 0239D46DB6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(136003)(366004)(346002)(376002)(396003)(199004)(189003)(54094003)(51444003)(6306002)(3846002)(6116002)(30864003)(26005)(76116006)(2906002)(9686003)(66574012)(790700001)(45080400002)(8936002)(446003)(966005)(71190400001)(71200400001)(236005)(33656002)(478600001)(54896002)(5660300002)(14454004)(7696005)(99286004)(76176011)(11346002)(517774005)(52536014)(6506007)(81156014)(74316002)(66066001)(5070765005)(81166006)(7736002)(606006)(561944003)(14444005)(86362001)(64756008)(66446008)(66476007)(66946007)(256004)(55016002)(6916009)(66556008)(53546011)(8676002)(440504004)(102836004)(229853002)(186003)(6436002)(25786009)(4326008)(316002)(54906003)(6246003); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB5622; H:BYAPR05MB3943.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: t33Xj0E/Fl6TAe9HmQUeguf5r5FyHLAz/rpuqItXRld9iieER9hd3QdnuTQtXz3Zdv8UcbQVfwhzgGmlyfCoGHt8LAGql8Y8f7whyNoKrIgk8kz11JBbacEgX1z3FywInC4k3pGuudL9Y53WJhTgmhjtEKEkPbc0uEupuEBU7EmcTH3PQJewQvLJ0fPJA46KzMCx7uPYASUjo+Ds46v/BxtC6YgGv0ly+25ECHgjsVwS4bfeLr/g7sFuT9NpQ1w9LDctkmgK9r/CxkDLuFNEqhGLvYPtsnCRJuGFYXk1Ldd+qsNyKoYqvbyHBCFXJFw8OE/OjqYf40R/o3MdTGSk38rzJHR7i1ift/wRDSw+B/WPIzMsJV6XCI0S4+/TN8ZqB6gUssL/sAfXIpJ+gjbm4Qpv6/E8c5ZC+8uVgdTR058E4hfqFWIKqw/Vpu/C+Q8+N04aZER51vlJi+554thKzzVm5OMpcQwXiJMIRCROMnI= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR05MB394390FE9BEAC8D0CA71DECED5430BYAPR05MB3943namp_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: db95fe8b-7d53-401c-efe2-08d776f89a80 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Dec 2019 07:24:01.0933 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: iPQNcExXaF4ISXFVOfFOGjKeoWtLLBNM4J7d/U+9vyTvXYIcbaw/jU9QbWpMcf+43oI9Y3qFe8MyMyEObnd3NQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB5622 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-12-01_04:2019-11-29,2019-12-01 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 mlxlogscore=999 clxscore=1015 lowpriorityscore=0 malwarescore=0 impostorscore=0 spamscore=0 phishscore=0 bulkscore=0 mlxscore=0 adultscore=0 priorityscore=1501 suspectscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1912020066 Archived-At: X-Mailman-Approved-At: Mon, 02 Dec 2019 06:32:34 -0800 X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Dec 2019 07:24:11 -0000 --_000_BYAPR05MB394390FE9BEAC8D0CA71DECED5430BYAPR05MB3943namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Sasha, We are in agreement on separating the trigger from the protection mechanism= . > In any case I think that it woyld make sense to separate the protection s= cheme proposed in the draft from specific triggers for its activation >simi= lar to how this has been done in MPLS Egress Protection Framework draft. I'll add text in the next revision for this. Rgds Shraddha From: Alexander Vainshtein Sent: Monday, December 2, 2019 12:24 PM To: Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org; Robert Raszuk Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Shraddha, Lots of thanks for athe tesponse. I probably did not express myself clearly enough. I will try to fix thst no= w, and I apologise in advance for a long email. I have not been speaking about end-yo-end protecyion, only about local prot= ection against failure of an intermediate (a.k.a. pinned) node of an SR pat= h and, specifically, triggers for such protection. This context has been ac= tually defined by Robert in his original comment. To the best of my understanding, Robert's concern was that failure of the l= ink beteeen the pinned node of a SR path and its adjacency (the penultimate= node of the Segment represented by the Node SID of the pinned node) is not= a good enough indication of the pinned node failure. I agree with this statement even if my understanding of a good indication d= iffers from Robert's: - I think that it is not sufficiently specific and therefore could result i= n flapping (local node protection activated and then released) -Robert's concern, to the best of my understanding, was that it could miss = some failures (e.g. the Fabric failure). Therefore I have suggested two possibilities for more specific and more rrl= iabke detection of failure of the pinned node by its adjacency: 1. Run a multi-hop IP BFD session between the peniltimate node ans the pinn= ed ones using prefixes acting as Node SIDs of this pair. This wiuld ignore= link failures but locally detect such node failurs as power-down or crash. 2. Run S-BFD sessions to all other adjacencies of the pinned node using in= each case a list of two SIDs: the protected Adj-SID to the pinned node fol= lowed by tge Node SID of the other adjacency, ans declare pinned node failu= re when all these sessions fail. This would again ignore failure of the lin= k between the penultimate node and the pinned node but detect various real = failures of the pinned node, e.g. failure of its Fabric. In any case I think that it woyld make sense to separate the protection sch= eme proposed in the draft from specific triggers for its activation similar= to how this has been done in MPLS Egress Protection Framework draft. My 2c. Get Outlook for Android ________________________________ From: Shraddha Hegde > Sent: Monday, December 2, 2019, 06:10 To: Alexander Vainshtein; Robert Raszuk Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: RE: [spring] Draft for Node protection of intermediate nodes in SR= Paths Robert/Sasha, S-BFD based mechanism is head-end triggered protection. It is not a local = protection. S-BFD mechanism is orthogonal to the mechanism described in this draft and = an operator can choose what kind of protection makes more sense to his/her network. In many cases, node-protecting backup path will be different from link-prot= ecting/SRLG protecting backup path. If you really want to use link-protecting backup path when link fails and n= ode protecting backup path when node fails, You will have to download both link protecting and node-protecting backup p= aths in FIB and detect which failure really happened and have the ability in hardware to use appropriate= backup path. None of these is in the scope of this document. Rgds Shraddha From: Alexander Vainshtein > Sent: Saturday, November 23, 2019 8:15 PM To: Robert Raszuk >; Shraddha H= egde > Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Robert, On the second thought, for the purpose of this draft (i.e. in the scope of = SR) it is possible to implement your suggestion by running S-BFD sessions b= etween R7 (as the initiator) and each other adjacency of R8 (acting as Ref= lectors) of a SR policy with list of two SIDs: - protected adjacency between R7 and R8 - Node SID of the specific "other" adjacency of R8. If all these sessions fail, R7 can reliably consider R8 as failed. I am not sure this would be much better than multi-hop IP BFD, and it looks= much more complicated to me. What do you think? Get Outlook for Android ________________________________ From: Alexander Vainshtein > Sent: Saturday, November 23, 2019, 13:15 To: Robert Raszuk; Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Robert, Lots of thanks for a prompt response. I respectfully disagree with your statement that BFD implementation is usu= ally offloaded to the HW of the ingress line card. I do not think this can= wor for MH BFD sessions because the ingress and egress line cards are not = known in advance and change with the routing changes A good multi-hop BFD implementation should be ready to overcome this.. The= re are many ways to achieve that. A naive implementation that runs in SW of= the control card is also possible of course. And they would sensd and rece= ive packets My 2c. Get Outlook for Android ________________________________ From: Robert Raszuk > Sent: Saturday, November 23, 2019, 12:37 To: Alexander Vainshtein; Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Hi Sasha, On the surface your suggestion may look cool - but if you zoom in - I do no= t think it will work in practice. See - one of the biggest value of BFD is its offload to line card's hardwar= e. And in most cases it is ingress line card to the box. So if you instruct= such hardware to respond to SID address loopback you still did not gain mu= ch in terms of detection router's fabric failures, remote LC failure or con= trol plane issues which could soon result in box failure. The catalogue of = router failures is of course much more colorful. If you ask BFD to be responded by RP/RE it no longer has the BFD advantage. IMHO the best way to detect node failure is actually to send the probes *ac= ross* the node under test to its peers. The way I would think of establishing such m-hop sessions would be fully au= tomated with one knob per IGP adj. ex: "bfd detect-node-failure [max N]" wh= ere local BFD subsystem would create N sessions to IGP peers of the node we= are to protect. LSDB has those peers so no new protocol extension is neede= d, perhaps even no new IETF draft is required :). N would be the limit of s= uch sessions in case the node under protection has say 10s of peers. Defaul= t could be perhaps even 1. Thx, Robert. On Sat, Nov 23, 2019 at 10:00 AM Alexander Vainshtein > wrote: Shraddha, Robert and all, Regarding Robert's question: I wonder if multi-hop IP BFD session with addresses used as /32 (or /128) p= refixes serving as Nose SIDs of R8 and R7 respectively could be used as suc= h a trigger by R7? Such a session would not respond to link failures, and I= find it problematic to imagine a scenario when it would be kept UP in the = case of a real node failure. Of course such a session would have to be slow enough not to react to link = failures. But it still couks be much faster than IGP conversion IMHO. My 2c, Sasha Such Get Outlook for Android ________________________________ From: spring > on b= ehalf of Robert Raszuk > Sent: Friday, November 22, 2019, 11:22 To: Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Hi Shraddha, I have one question to the document. As you know the critical element for the effective protection of any scheme= is the failure detection. On that your draft seems to have just one little= paragraph: Note that R7 activates the node-protecting backup path when it detects that the link to R8 has failed. R7 does not know that node R8 has actually failed. However, the node-protecting backup path is computed assuming that the failure of the link to R8 implies that R8 has failed. Well IMO this is not enough. Specifically there can be a lot of types of no= de failure when link is still up. Moreover there can be even running BFD ac= ross the link just fine when say fabric failure occurs at R8. While this is not solely issue with this draft, it is our common IETF failu= re to provide correct means of detecting end to end path or fragments of pa= th failures (I am specifically not calling them segment here :). For example I propose that to effectively detect R8 failure as node failure= which is the topic of your proposal a mechanism is clearly defined and inc= ludes bi-dir data plane probes send between R7-R9, R3-R7, R4-R7, R4-R9, R3-= R9 Many thx, Robert. On Fri, Nov 22, 2019 at 4:38 AM Shraddha Hegde > wrote: WG, This is the draft I pointed out that talks about solutions for providing no= de-protection. It covers Anycast case as well as keeping forwarding plane longer. https://tools.ietf.org/html/draft-hegde-spring-node-protection-for-sr-te-pa= ths-05 Review and comments solicited. Rgds Shraddha _______________________________________________ rtgwg mailing list rtgwg@ietf.org https://www.ietf.org/mailman/listinfo/rtgwg ___________________________________________________________________________ This e-mail message is intended for the recipient only and contains informa= tion which is CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have recei= ved this transmission in error, please inform us by e-mail, phone or fax, and then d= elete the original and all copies thereof. ___________________________________________________________________________ ___________________________________________________________________________ This e-mail message is intended for the recipient only and contains informa= tion which is CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have recei= ved this transmission in error, please inform us by e-mail, phone or fax, and then d= elete the original and all copies thereof. ___________________________________________________________________________ --_000_BYAPR05MB394390FE9BEAC8D0CA71DECED5430BYAPR05MB3943namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Sasha,

 

We are in agreement on separating the trigger from t= he protection mechanism.

 

> In any case I think that it wo= yld make sense to separate the protection scheme proposed in the draft from= specific triggers for its activation >similar to how this has been done in MPLS Egress Protection Framework draft.<= /o:p>

 

I’ll add text in the next revision for this.

 

Rgds

Shraddha

 

 

From: Alexander Vainshtein <Alexander.Vain= shtein@ecitele.com>
Sent: Monday, December 2, 2019 12:24 PM
To: Shraddha Hegde <shraddha@juniper.net>
Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org; Robert Raszuk= <robert@raszuk.net>
Subject: Re: [spring] Draft for Node protection of intermediate node= s in SR Paths

 

Shraddha,

Lots of thanks for athe tesponse.

 

I probably did not express myself clearly enough. I will try to fix th= st now, and I apologise in advance for a long email.

 

I have not been speaking about end-yo-end protecyion, only about local= protection against failure of an intermediate (a.k.a. pinned) node of an S= R path and, specifically, triggers for such protection. This context has been actually defined by Robert in his o= riginal comment.

 

To the best of my understanding, Robert's concern was that failure of = the link beteeen the pinned node of a SR path and its adjacency (the penult= imate node of the Segment represented by the Node SID of the pinned node) is not a good enough indication of the= pinned node failure. 

 

I agree with this statement even if my understanding of a good indicat= ion differs from Robert's:

- I think that it is not sufficiently specific and therefore could res= ult in flapping (local node protection activated and then released)

-Robert's concern, to the best of my understanding, was that it could = miss some failures (e.g. the Fabric failure).

 

Therefore I have suggested two possibilities for more specific and mor= e rrliabke detection of failure of the pinned node by its adjacency:

 

1. Run a multi-hop IP BFD session between the peniltimate node ans the= pinned ones using prefixes acting as Node SIDs of this pair.  This wi= uld ignore link failures but locally detect such node failurs as power-down or crash.

 

2.  Run S-BFD sessions to all other adjacencies of the pinned nod= e using in each case a list of two SIDs: the protected Adj-SID to the pinne= d node followed by tge Node SID of the other adjacency, ans declare pinned node failure when all these sessions fail. T= his would again ignore failure of the link between the penultimate node and= the pinned node but detect various real failures of the pinned node, e.g. = failure of its Fabric.

 

In any case I think that it woyld make sense to separate the protectio= n scheme proposed in the draft from specific triggers for its activation si= milar to how this has been done in MPLS Egress Protection Framework draft.

 

My 2c.

 

 

 

 

 

 

From: Shraddha Hegde <shraddha@juniper.net>
Sent: Monday, December 2, 2019, 06:10
To: Alexander Vainshtein; Robert Raszuk
Cc: spring@ietf.org; rtgwg@ietf.org; = rtg-bfd@ietf.org
Subject:= RE: [spring] Draft for Node protection of intermediate nod= es in SR Paths



Robert/Sasha,

 

 

S-BFD based mechanism is  head-end triggered pr= otection. It is not a local protection.

S-BFD mechanism is orthogonal to the mechanism descr= ibed in this draft and an operator can

choose what kind of protection makes more sense to h= is/her network.

 

In many cases, node-protecting backup path will be d= ifferent from link-protecting/SRLG protecting backup path.

If you really want to use link-protecting backup pat= h when link fails and node protecting backup path when node fails,

You will have to download both link protecting and n= ode-protecting backup paths in FIB and detect which

failure really happened and have the ability in hard= ware to use appropriate backup path. None of these

is in the scope of this document.

 

Rgds

Shraddha

 

 

 

Robert,

On the second thought, for the purpose of this draft (i.e. in the scop= e of SR) it is possible to implement your suggestion by running S-BFD sessi= ons between R7 (as the initiator) and each other adjacency of R8  (acting as Reflectors) of a SR policy wit= h list of two SIDs:

- protected adjacency between R7 and R8

- Node SID of the specific "other" adjacency  of R8.

 

If all these sessions fail, R7 can reliably consider R8 as failed.&nbs= p;

 

I am not sure this would be much better than multi-hop IP BFD, and it = looks much more complicated to me. 

 

 

What do you think?

 

 

 

 

From: Alexander Vainshtein <Alexander.Vainshtein@ecitele.com= >
Sent: Saturday, November 23, 2019, 13:15
To: Robert Raszuk; Shraddha Hegde
Cc: spring@ietf.org; rtgwg@ietf.org; = rtg-bfd@ietf.org
Subject:= Re: [spring] Draft for Node protection of intermediate nod= es in SR Paths

 

Robert,

Lots of thanks for a prompt response.

 

I respectfully disagree with your statement that BFD implementation&nb= sp; is usually offloaded to the HW of the ingress line card.  I do not= think this can wor for MH BFD sessions because the ingress and egress line cards are not known in advance and change with= the routing changes

A good  multi-hop BFD implementation should be ready to overcome = this.. There are many ways to achieve that. A naive implementation that run= s in SW of the control card is also possible of course. And they would sensd and receive packets 

 

My 2c.

 

From: Robert Raszuk <robert@raszuk.net>
Sent: Saturday, November 23, 2019, 12:37
To: Alexander Vainshtein; Shraddha Hegde
Cc: spring@ietf.org; rtgwg@ietf.org; = rtg-bfd@ietf.org
Subject:= Re: [spring] Draft for Node protection of intermediate nod= es in SR Paths

 

Hi Sasha,

 

On the surface your suggestion may look cool - but i= f you zoom in - I do not think it will work in practice. 

 

See - one of the biggest value of BFD is its offload= to line card's hardware. And in most cases it is ingress line card to the = box. So if you instruct such hardware to respond to SID address loopback yo= u still did not gain much in terms of detection router's fabric failures, remote LC failure or control p= lane issues which could soon result in box failure. The catalogue of router= failures is of course much more colorful. 

 

If you ask BFD to be responded by RP/RE it no longer= has the BFD advantage. 

 

IMHO the best way to detect node failure is act= ually to send the probes *across* the node under test to its peers. 

 

The way I would think of establishing such m-hop ses= sions would be fully automated with one knob per IGP adj. ex: "bfd det= ect-node-failure [max N]" where local BFD subsystem would create N ses= sions to IGP peers of the node we are to protect. LSDB has those peers so no new protocol extension is needed, perhaps = even no new IETF draft is required :). N would be the limit of such session= s in case the node under protection has say 10s of peers. Default could be = perhaps even 1. 

 

Thx,

Robert.

 

 

On Sat, Nov 23, 2019 at 10:00 AM Alexander Vainshtei= n <Alexander.Vainshtein@ecitele.com> wrote:

Shraddha, Robert and all,

Regarding Robert's question: 

I wonder if multi-hop IP BFD session with addresses used as /32 (or /1= 28) prefixes serving as Nose SIDs of R8 and R7 respectively could be used a= s such a trigger by R7? Such a session would not respond to link failures, and I find it problematic to imagine a= scenario when it would be kept UP in the case of a real node failure.

 

Of course such a session would have to be slow enough not to react to = link failures. But it still couks be much faster than IGP conversion IMHO.<= /span>

 

My 2c,

Sasha

 

Such

 

 

Get Outlook for Android

 

From: spring <spring-bounces@ietf.org> on behalf= of Robert Raszuk <robert@raszuk.net>
Sent: Friday, November 22, 2019, 11:22
To: Shraddha Hegde
Cc: spring@ietf.org; rt= gwg@ietf.org
Subject:= Re: [spring] Draft for Node protection of intermediate nod= es in SR Paths

 

Hi Shraddha,

 

I have one question to the document. 

 

As you know the critical element for the effect= ive protection of any scheme is the failure detection. On that your draft s= eems to have just one little paragraph: 

 

   N=
ote that R7 activates the node-protecting backup path when it
   detects that the link to R8 h=
as failed.  R7 does not know that node
   R8 has actually failed. =
 However, the node-protecting backup path is
   computed assuming that the fa=
ilure of the link to R8 implies that R8
   has failed.=

 

Well IMO this is not enough. Specifically there= can be a lot of types of node failure when link is still up. Moreover ther= e can be even running BFD across the link just fine when say fabric failure= occurs at R8. 

 

While this is not solely issue with this draft, it i= s our common IETF failure to provide correct means of detecting end to end = path or fragments of path failures (I am specifically not calling them segm= ent here :). 

 

For example I propose that to effectively detect R8 = failure as node failure which is the topic of your proposal a mechanism is = clearly defined and includes bi-dir data plane probes send between R7-R9, R= 3-R7, R4-R7, R4-R9, R3-R9

 

Many thx,

Robert.

 

 

On Fri, Nov 22, 2019 at 4:38 AM Shraddha Hegde <s= hraddha=3D40juniper.net@dmarc.ietf..org> wrote:

WG,

 

This is the draft I pointed out that talks about sol= utions for providing node-protection.

It covers Anycast case as well as keeping forwarding= plane longer.

 

Review and comments solicited.

 

Rgds

Shraddha

 

_______________________________________________
rtgwg mailing list
rtgwg@ietf.org
https://www.ietf.org/mailm= an/listinfo/rtgwg

 

 


___________________________________________________________________________=

This e-mail message is intended for the recipient only and contains informa= tion which is
CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have recei= ved this
transmission in error, please inform us by e-mail, phone or fax, and then d= elete the original
and all copies thereof.
___________________________________________________________________________=

 


___________________________________________________________________________=

This e-mail message is intended for the recipient only and contains informa= tion which is
CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have recei= ved this
transmission in error, please inform us by e-mail, phone or fax, and then d= elete the original
and all copies thereof.
___________________________________________________________________________=

--_000_BYAPR05MB394390FE9BEAC8D0CA71DECED5430BYAPR05MB3943namp_-- From nobody Mon Dec 2 06:32:41 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E8021200E6 for ; Mon, 2 Dec 2019 01:28:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, PDS_BTC_ID=0.499, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id deLJyAHuJk7H for ; Mon, 2 Dec 2019 01:28:08 -0800 (PST) Received: from eu-smtp-delivery-182.mimecast.com (eu-smtp-delivery-182.mimecast.com [207.82.80.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7AB31120048 for ; Mon, 2 Dec 2019 01:28:07 -0800 (PST) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-ve1eur03lp2055.outbound.protection.outlook.com [104.47.9.55]) (Using TLS) by relay.mimecast.com with ESMTP id uk-mta-20-8nMp0OxnN7Sz05bV-CW3rw-1; Mon, 02 Dec 2019 09:28:01 +0000 Received: from DBBPR03MB5415.eurprd03.prod.outlook.com (20.179.47.79) by DBBPR03MB5239.eurprd03.prod.outlook.com (10.255.79.214) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.20; Mon, 2 Dec 2019 09:27:59 +0000 Received: from DBBPR03MB5415.eurprd03.prod.outlook.com ([fe80::707f:9207:45d4:82bc]) by DBBPR03MB5415.eurprd03.prod.outlook.com ([fe80::707f:9207:45d4:82bc%6]) with mapi id 15.20.2495.014; Mon, 2 Dec 2019 09:27:59 +0000 From: Andrew Alston To: Shraddha Hegde , Alexander Vainshtein CC: "spring@ietf.org" , "rtg-bfd@ietf.org" , Robert Raszuk , "rtgwg@ietf.org" Subject: RE: [spring] Draft for Node protection of intermediate nodes in SR Paths Thread-Topic: [spring] Draft for Node protection of intermediate nodes in SR Paths Thread-Index: AdWg5kSzPcmokSdUTd+ujmkEsxaFPQAMBq8AADGDFIAAA2XugAABUkKAAAdRE4ABsInvgAADpWmAAAEKboAAA6iU8A== Date: Mon, 2 Dec 2019 09:27:59 +0000 Message-ID: References: , , , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_Enabled=True; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_SetDate=2019-12-02T04:57:07.0000000Z; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_Name=Juniper Business Use Only; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_ContentBits=0; MSIP_Label_9784d817-3396-4a4f-b60c-3ef6b345fe55_Method=Standard x-originating-ip: [197.155.81.57] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: d478d44b-373a-4b5e-6349-08d77709ebfc x-ms-traffictypediagnostic: DBBPR03MB5239: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-forefront-prvs: 0239D46DB6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(39860400002)(376002)(346002)(366004)(396003)(51444003)(199004)(189003)(54094003)(8676002)(6306002)(54906003)(54896002)(30864003)(6246003)(6506007)(186003)(966005)(74316002)(66476007)(66556008)(316002)(71200400001)(71190400001)(64756008)(66446008)(110136005)(76116006)(102836004)(53546011)(236005)(66574012)(229853002)(99286004)(55016002)(5660300002)(4326008)(66066001)(6436002)(52536014)(14444005)(256004)(66946007)(33656002)(86362001)(81156014)(81166006)(446003)(8936002)(11346002)(76176011)(9686003)(7696005)(5070765005)(561944003)(517774005)(606006)(6116002)(790700001)(3846002)(26005)(14454004)(10916006)(478600001)(45080400002)(7736002)(25786009)(2906002)(440504004); DIR:OUT; SFP:1102; SCL:1; SRVR:DBBPR03MB5239; H:DBBPR03MB5415.eurprd03.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: rDMREBCDguEv25P6jQSBwmifarPhIfphl0zGH3IsVGsC4zrOjztqJjNGQ+STBCQRVBIV2Wwe9/ayj3D/PK9dVwCqwY+46C1PJhlRdokU1nrpbuavltv7ObzKEfxcNIYthfT6KSSqzEGPcl1F0xINh+U8OZaSTZlHufj5ydzmCTtCfh1P0pcrROEAQHblTUAAUpkfmLKvj5YXWhXMQd2Va6f+ASTRVTyBNTqkGiGMSWXoAFN6OaTDTlBkWykx6lKLC5VKzELyi88cvodQ3UFJQBQCwZrEOT/Sxu/XhYo9vIVWRUu4RAQESmsaoF17w4FN1s6T6OEi8uALeSwEMhin7lnXLebKS81pIirCEtTj3sGI4hc6mUc9fSisKLA4W1r347Y3ZxEQwxwqhIJMprrDyw59ZfpM+IGc54S+h41+tnjwCOeslA38RghGdvkv6cgqguj29VJEgG1wpqhMHXyfSi5CGTLWyAm+1VJSDdqxeWA= x-ms-exchange-transport-forked: True MIME-Version: 1.0 X-OriginatorOrg: liquidtelecom.com X-MS-Exchange-CrossTenant-Network-Message-Id: d478d44b-373a-4b5e-6349-08d77709ebfc X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Dec 2019 09:27:59.2892 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 68792612-0f0e-46cb-b16a-fcb82fd80cb1 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: TvYQ6vkStuKN80Ufn736D1b+UmXPz/NHdFemRpFEytvKa8w6mrYm5Zg8t431LIFuE2TQ41Py3f7GOeluMERlqsEdmfVqkSq2UEptsM7hKjA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBBPR03MB5239 X-MC-Unique: 8nMp0OxnN7Sz05bV-CW3rw-1 X-Mimecast-Spam-Score: 0 Content-Type: multipart/alternative; boundary="_000_DBBPR03MB5415486F24D2C9B6338611BEEE430DBBPR03MB5415eurp_" Archived-At: X-Mailman-Approved-At: Mon, 02 Dec 2019 06:32:34 -0800 X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Dec 2019 09:28:11 -0000 --_000_DBBPR03MB5415486F24D2C9B6338611BEEE430DBBPR03MB5415eurp_ Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable Currently the biggest issue that I see with S-BFD based protection - which = is something we use in production is as follows: Unless I'm mistaken - there is absolutely no way to tie S-BFD based protect= ion with BGP injected SR-TE pathing Node validation as defined in the SR-TE drafts is limited to presence in th= e IGP Since SR-TE path injection may be done through reflectors - using target co= mmunities - the point of communication into the network is not necessarily = the head end of the tunnel and the point of injection may be entirely unawa= re of the implications of the path that's being inserted. By utilizing what is contained in this draft to build context tables at the= head end of an inserted tunnel on an automated basis - this solves a probl= em that currently exists that S-BFD simply cannot solve without modificatio= n to the srte policy insertion drafts that would allow for automated buildi= ng of S-BFD checks - which in and of itself could prove challenging conside= ring the complexity of this. That is not to say in any way that both s-bfd and potentially other mechani= sms do not have use cases - but as an operator - this draft would certainly= provide a better mechanism for constant path validation than anything we c= urrently have (which is based on steered packets that leave the controller = and return to the controller through the use of SR packets and binding sids= ). Just my 2c Thanks Andrew From: spring On Behalf Of Shraddha Hegde Sent: Monday, 2 December 2019 10:24 To: Alexander Vainshtein Cc: spring@ietf.org; rtg-bfd@ietf.org; Robert Raszuk ; r= tgwg@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Sasha, We are in agreement on separating the trigger from the protection mechanism= . > In any case I think that it woyld make sense to separate the protection s= cheme proposed in the draft from specific triggers for its activation >simi= lar to how this has been done in MPLS Egress Protection Framework draft. I'll add text in the next revision for this. Rgds Shraddha From: Alexander Vainshtein > Sent: Monday, December 2, 2019 12:24 PM To: Shraddha Hegde > Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org; Robert Raszuk > Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Shraddha, Lots of thanks for athe tesponse. I probably did not express myself clearly enough. I will try to fix thst no= w, and I apologise in advance for a long email. I have not been speaking about end-yo-end protecyion, only about local prot= ection against failure of an intermediate (a.k.a. pinned) node of an SR pat= h and, specifically, triggers for such protection. This context has been ac= tually defined by Robert in his original comment. To the best of my understanding, Robert's concern was that failure of the l= ink beteeen the pinned node of a SR path and its adjacency (the penultimate= node of the Segment represented by the Node SID of the pinned node) is not= a good enough indication of the pinned node failure. I agree with this statement even if my understanding of a good indication d= iffers from Robert's: - I think that it is not sufficiently specific and therefore could result i= n flapping (local node protection activated and then released) -Robert's concern, to the best of my understanding, was that it could miss = some failures (e.g. the Fabric failure). Therefore I have suggested two possibilities for more specific and more rrl= iabke detection of failure of the pinned node by its adjacency: 1. Run a multi-hop IP BFD session between the peniltimate node ans the pinn= ed ones using prefixes acting as Node SIDs of this pair. This wiuld ignore= link failures but locally detect such node failurs as power-down or crash. 2. Run S-BFD sessions to all other adjacencies of the pinned node using in= each case a list of two SIDs: the protected Adj-SID to the pinned node fol= lowed by tge Node SID of the other adjacency, ans declare pinned node failu= re when all these sessions fail. This would again ignore failure of the lin= k between the penultimate node and the pinned node but detect various real = failures of the pinned node, e.g. failure of its Fabric. In any case I think that it woyld make sense to separate the protection sch= eme proposed in the draft from specific triggers for its activation similar= to how this has been done in MPLS Egress Protection Framework draft. My 2c. Get Outlook for Android ________________________________ From: Shraddha Hegde > Sent: Monday, December 2, 2019, 06:10 To: Alexander Vainshtein; Robert Raszuk Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: RE: [spring] Draft for Node protection of intermediate nodes in SR= Paths Robert/Sasha, S-BFD based mechanism is head-end triggered protection. It is not a local = protection. S-BFD mechanism is orthogonal to the mechanism described in this draft and = an operator can choose what kind of protection makes more sense to his/her network. In many cases, node-protecting backup path will be different from link-prot= ecting/SRLG protecting backup path. If you really want to use link-protecting backup path when link fails and n= ode protecting backup path when node fails, You will have to download both link protecting and node-protecting backup p= aths in FIB and detect which failure really happened and have the ability in hardware to use appropriate= backup path. None of these is in the scope of this document. Rgds Shraddha From: Alexander Vainshtein > Sent: Saturday, November 23, 2019 8:15 PM To: Robert Raszuk >; Shraddha H= egde > Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Robert, On the second thought, for the purpose of this draft (i.e. in the scope of = SR) it is possible to implement your suggestion by running S-BFD sessions b= etween R7 (as the initiator) and each other adjacency of R8 (acting as Ref= lectors) of a SR policy with list of two SIDs: - protected adjacency between R7 and R8 - Node SID of the specific "other" adjacency of R8. If all these sessions fail, R7 can reliably consider R8 as failed. I am not sure this would be much better than multi-hop IP BFD, and it looks= much more complicated to me. What do you think? Get Outlook for Android ________________________________ From: Alexander Vainshtein > Sent: Saturday, November 23, 2019, 13:15 To: Robert Raszuk; Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Robert, Lots of thanks for a prompt response. I respectfully disagree with your statement that BFD implementation is usu= ally offloaded to the HW of the ingress line card. I do not think this can= wor for MH BFD sessions because the ingress and egress line cards are not = known in advance and change with the routing changes A good multi-hop BFD implementation should be ready to overcome this.. The= re are many ways to achieve that. A naive implementation that runs in SW of= the control card is also possible of course. And they would sensd and rece= ive packets My 2c. Get Outlook for Android ________________________________ From: Robert Raszuk > Sent: Saturday, November 23, 2019, 12:37 To: Alexander Vainshtein; Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Hi Sasha, On the surface your suggestion may look cool - but if you zoom in - I do no= t think it will work in practice. See - one of the biggest value of BFD is its offload to line card's hardwar= e. And in most cases it is ingress line card to the box. So if you instruct= such hardware to respond to SID address loopback you still did not gain mu= ch in terms of detection router's fabric failures, remote LC failure or con= trol plane issues which could soon result in box failure. The catalogue of = router failures is of course much more colorful. If you ask BFD to be responded by RP/RE it no longer has the BFD advantage. IMHO the best way to detect node failure is actually to send the probes *ac= ross* the node under test to its peers. The way I would think of establishing such m-hop sessions would be fully au= tomated with one knob per IGP adj. ex: "bfd detect-node-failure [max N]" wh= ere local BFD subsystem would create N sessions to IGP peers of the node we= are to protect. LSDB has those peers so no new protocol extension is neede= d, perhaps even no new IETF draft is required :). N would be the limit of s= uch sessions in case the node under protection has say 10s of peers. Defaul= t could be perhaps even 1. Thx, Robert. On Sat, Nov 23, 2019 at 10:00 AM Alexander Vainshtein > wrote: Shraddha, Robert and all, Regarding Robert's question: I wonder if multi-hop IP BFD session with addresses used as /32 (or /128) p= refixes serving as Nose SIDs of R8 and R7 respectively could be used as suc= h a trigger by R7? Such a session would not respond to link failures, and I= find it problematic to imagine a scenario when it would be kept UP in the = case of a real node failure. Of course such a session would have to be slow enough not to react to link = failures. But it still couks be much faster than IGP conversion IMHO. My 2c, Sasha Such Get Outlook for Android ________________________________ From: spring > on b= ehalf of Robert Raszuk > Sent: Friday, November 22, 2019, 11:22 To: Shraddha Hegde Cc: spring@ietf.org; rtgwg@ietf.org Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR= Paths Hi Shraddha, I have one question to the document. As you know the critical element for the effective protection of any scheme= is the failure detection. On that your draft seems to have just one little= paragraph: Note that R7 activates the node-protecting backup path when it detects that the link to R8 has failed. R7 does not know that node R8 has actually failed. However, the node-protecting backup path is computed assuming that the failure of the link to R8 implies that R8 has failed. Well IMO this is not enough. Specifically there can be a lot of types of no= de failure when link is still up. Moreover there can be even running BFD ac= ross the link just fine when say fabric failure occurs at R8. While this is not solely issue with this draft, it is our common IETF failu= re to provide correct means of detecting end to end path or fragments of pa= th failures (I am specifically not calling them segment here :). For example I propose that to effectively detect R8 failure as node failure= which is the topic of your proposal a mechanism is clearly defined and inc= ludes bi-dir data plane probes send between R7-R9, R3-R7, R4-R7, R4-R9, R3-= R9 Many thx, Robert. On Fri, Nov 22, 2019 at 4:38 AM Shraddha Hegde > wrote: WG, This is the draft I pointed out that talks about solutions for providing no= de-protection. It covers Anycast case as well as keeping forwarding plane longer. https://tools.ietf.org/html/draft-hegde-spring-node-protection-for-sr-te-pa= ths-05 Review and comments solicited. Rgds Shraddha _______________________________________________ rtgwg mailing list rtgwg@ietf.org https://www.ietf.org/mailman/listinfo/rtgwg ___________________________________________________________________________ This e-mail message is intended for the recipient only and contains informa= tion which is CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have recei= ved this transmission in error, please inform us by e-mail, phone or fax, and then d= elete the original and all copies thereof. ___________________________________________________________________________ ___________________________________________________________________________ This e-mail message is intended for the recipient only and contains informa= tion which is CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have recei= ved this transmission in error, please inform us by e-mail, phone or fax, and then d= elete the original and all copies thereof. ___________________________________________________________________________ --_000_DBBPR03MB5415486F24D2C9B6338611BEEE430DBBPR03MB5415eurp_ Content-Type: text/html; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable

Currently the biggest issue that I see with S-BFD based protection &#= 8211; which is something we use in production is as follows:

 

Unless I’m mistaken – there is absolutely no way to tie S= -BFD based protection with BGP injected SR-TE pathing

Node validation as defined in the SR-TE drafts is limited to presence= in the IGP

Since SR-TE path injection may be done through reflectors – usi= ng target communities – the point of communication into the network i= s not necessarily the head end of the tunnel and the point of injection may be entirely unaware of the implications of the path= that’s being inserted.

 

By utilizing what is contained in this draft to build context tables = at the head end of an inserted tunnel on an automated basis – this so= lves a problem that currently exists that S-BFD simply cannot solve without modification to the srte policy insertion draf= ts that would allow for automated building of S-BFD checks – which in= and of itself could prove challenging considering the complexity of this.&= nbsp;

 

That is not to say in any way that both s-bfd and potentially other m= echanisms do not have use cases – but as an operator – this dra= ft would certainly provide a better mechanism for constant path validation than anything we currently have (which is based o= n steered packets that leave the controller and return to the controller th= rough the use of SR packets and binding sids).

 

Just my 2c

 

Thanks

 

Andrew

 

 

From: spring <spring-bounces@ietf.org> On Behalf Of Shraddha Hegde
Sent: Monday, 2 December 2019 10:24
To: Alexander Vainshtein <Alexander.Vainshtein@ecitele.com> Cc: spring@ietf.org; rtg-bfd@ietf.org; Robert Raszuk <robert@rasz= uk.net>; rtgwg@ietf.org
Subject: Re: [spring] Draft for Node protection of intermediate node= s in SR Paths

 

Sasha,

 

We are in agreement on separati= ng the trigger from the protection mechanism.

 

> = In any case I think that it woyld make sense to separate the protection sch= eme proposed in the draft from specific triggers for its activation >similar to how this has been done in MPLS Egress Pr= otection Framework draft.

 

I’ll add text in the next revision for this.=

 

Rgds

Shraddha

 

 

From: Alexander Vainshtein <Alexander.Vainshtein@ecitele.com>
Sent: Monday, December 2, 2019 12:24 PM
To: Shraddha Hegde <shrad= dha@juniper.net>
Cc: spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org; Robert Raszuk <robert@raszuk.net= >
Subject: Re: [spring] Draft for Node protection of intermediate node= s in SR Paths

 

Shraddha,

Lots of thanks for athe tesponse.

 

I probably did not express myself clearly enough. I wil= l try to fix thst now, and I apologise in advance for a long email.

 

I have not been speaking about end-yo-end protecyion, o= nly about local protection against failure of an intermediate (a.k.a. pinne= d) node of an SR path and, specifically, triggers for such protection. This context has been actually defined by Ro= bert in his original comment.

 

To the best of my understanding, Robert's concern was t= hat failure of the link beteeen the pinned node of a SR path and its adjace= ncy (the penultimate node of the Segment represented by the Node SID of the pinned node) is not a good enough indic= ation of the pinned node failure. 

 

I agree with this statement even if my understanding of= a good indication differs from Robert's:

- I think that it is not sufficiently specific and ther= efore could result in flapping (local node protection activated and then re= leased)

-Robert's concern, to the best of my understanding, was= that it could miss some failures (e.g. the Fabric failure).

 

Therefore I have suggested two possibilities for more s= pecific and more rrliabke detection of failure of the pinned node by its ad= jacency:

 

1. Run a multi-hop IP BFD session between the peniltima= te node ans the pinned ones using prefixes acting as Node SIDs of this pair= .  This wiuld ignore link failures but locally detect such node failurs as power-down or crash.

 

2.  Run S-BFD sessions to all other adjacencies of= the pinned node using in each case a list of two SIDs: the protected Adj-S= ID to the pinned node followed by tge Node SID of the other adjacency, ans declare pinned node failure when all these ses= sions fail. This would again ignore failure of the link between the penulti= mate node and the pinned node but detect various real failures of the pinne= d node, e.g. failure of its Fabric.

 

In any case I think that it woyld make sense to separat= e the protection scheme proposed in the draft from specific triggers for it= s activation similar to how this has been done in MPLS Egress Protection Framework draft.

 

My 2c.

 

 

 

 

 

 

From: Sh= raddha Hegde <shraddha@juniper.n= et>
Sent: Monday, December 2, 2019, 06:10
To: Alexander Vainshtein; Robert Raszuk
Cc: spring@ietf.org; rtgwg@ietf.org; = rtg-bfd@ietf.org
Subject:= RE: [spring] Draft for Node protection of intermediate nod= es in SR Paths

=  

Robert/Sasha,=

 

 

S-BFD based mechanism is  = head-end triggered protection. It is not a local protection.

S-BFD mechanism is orthogonal t= o the mechanism described in this draft and an operator can

choose what kind of protection = makes more sense to his/her network.

 

In many cases, node-protecting = backup path will be different from link-protecting/SRLG protecting backup p= ath.

If you really want to use link-= protecting backup path when link fails and node protecting backup path when= node fails,

You will have to download both = link protecting and node-protecting backup paths in FIB and detect which

failure really happened and hav= e the ability in hardware to use appropriate backup path. None of these

is in the scope of this documen= t.

 

Rgds

Shraddha

 

 

 

Robert,

On the second thought, for the purpose of this draft (i= .e. in the scope of SR) it is possible to implement your suggestion by runn= ing S-BFD sessions between R7 (as the initiator) and each other adjacency of R8  (acting as Reflectors) of a SR policy= with list of two SIDs:

- protected adjacency between R7 and R8

- Node SID of the specific "other" adjacency&= nbsp; of R8.

 

If all these sessions fail, R7 can reliably consider R8= as failed. 

 

I am not sure this would be much better than multi-hop = IP BFD, and it looks much more complicated to me. 

 

 

What do you think?

 

 

 

 

From: Al= exander Vainshtein <= Alexander.Vainshtein@ecitele.com>
Sent: Saturday, November 23, 2019, 13:15
To: Robert Raszuk; Shraddha Hegde
Cc: spring@ietf.org; rtgwg@ietf.org; = rtg-bfd@ietf.org
Subject:= Re: [spring] Draft for Node protection of intermediate nod= es in SR Paths

=  

Robert,

Lots of thanks for a prompt response.

 

I respectfully disagree with your statement that BFD im= plementation  is usually offloaded to the HW of the ingress line card.=   I do not think this can wor for MH BFD sessions because the ingress and egress line cards are not known in advance and cha= nge with the routing changes<= /p>

A good  multi-hop BFD implementation should be rea= dy to overcome this.. There are many ways to achieve that. A naive implemen= tation that runs in SW of the control card is also possible of course. And they would sensd and receive packets 

 

My 2c.

 

From: Ro= bert Raszuk <robert@raszuk.net&= gt;
Sent: Saturday, November 23, 2019, 12:37
To: Alexander Vainshtein; Shraddha Hegde
Cc: spring@ietf.org; rtgwg@ietf.org; = rtg-bfd@ietf.org
Subject:= Re: [spring] Draft for Node protection of intermediate nod= es in SR Paths

=  

Hi Sasha,

 

On the surface your suggestion = may look cool - but if you zoom in - I do not think it will work in practic= e. 

 

See - one of the biggest value = of BFD is its offload to line card's hardware. And in most cases it is ingr= ess line card to the box. So if you instruct such hardware to respond to SI= D address loopback you still did not gain much in terms of detection router's fabric failures, remote LC failur= e or control plane issues which could soon result in box failure. The = catalogue of router failures is of course much more colorful. 

 

If you ask BFD to be responded = by RP/RE it no longer has the BFD advantage. 

 

IMHO the best way to detect nod= e failure is actually to send the probes *across* the node under test = to its peers. 

 

The way I would think of establ= ishing such m-hop sessions would be fully automated with one knob per IGP a= dj. ex: "bfd detect-node-failure [max N]" where local BFD subsyst= em would create N sessions to IGP peers of the node we are to protect. LSDB has those peers so no new protocol extension&= nbsp;is needed, perhaps even no new IETF draft is required :). N would be t= he limit of such sessions in case the node under protection has say 10s of = peers. Default could be perhaps even 1. 

 

Thx,

Robert.

 

 

On Sat, Nov 23, 2019 at 10:00 A= M Alexander Vainshtein <Alexander.Vainshtein@ecitele.com> wrote:<= /o:p>

Shraddha, Robert and all,

Regarding Robert's question: 

I wonder if multi-hop IP BFD session with addresses use= d as /32 (or /128) prefixes serving as Nose SIDs of R8 and R7 respectively = could be used as such a trigger by R7? Such a session would not respond to link failures, and I find it problematic to= imagine a scenario when it would be kept UP in the case of a real node fai= lure.

 

Of course such a session would have to be slow enough n= ot to react to link failures. But it still couks be much faster than IGP co= nversion IMHO.

 

My 2c,

Sasha

 

Such

 

 

Get Outlook for Android

 

From: sp= ring <sprin= g-bounces@ietf.org> on behalf of Robert Raszuk <robert@raszuk.net>
Sent: Friday, November 22, 2019, 11:22
To: Shraddha Hegde
Cc: spring@ietf.org; rt= gwg@ietf.org
Subject:= Re: [spring] Draft for Node protection of intermediate nod= es in SR Paths

 

Hi Shraddha,

 

I have one question to the docu= ment. 

 

As you know the critical elemen= t for the effective protection of any scheme is the failure detection.= On that your draft seems to have just one little paragraph: 

 

   Note that R7 activates the node-protecting backup path when i=
t
   detects that t=
he link to R8 has failed.  R7 does not know that node
   R8 has actuall=
y failed.  However, the node-protecting backup path is
   computed assum=
ing that the failure of the link to R8 implies that R8
   has failed.

 

Well IMO this is not enough. Sp= ecifically there can be a lot of types of node failure when link is st= ill up. Moreover there can be even running BFD across the link just fine wh= en say fabric failure occurs at R8. 

 

While this is not solely issue = with this draft, it is our common IETF failure to provide correct means of = detecting end to end path or fragments of path failures (I am specifically = not calling them segment here :). 

 

For example I propose that to e= ffectively detect R8 failure as node failure which is the topic of your pro= posal a mechanism is clearly defined and includes bi-dir data plane probes = send between R7-R9, R3-R7, R4-R7, R4-R9, R3-R9

 

Many thx,

Robert.

 

 

On Fri, Nov 22, 2019 at 4:38 AM= Shraddha Hegde <shraddha=3D40juniper.net@dmarc.ietf..org> wrote:

WG,

 

This is the draft I pointed out= that talks about solutions for providing node-protection.

It covers Anycast case as well = as keeping forwarding plane longer.

 

Review and comments solicited.<= o:p>

 

Rgds

Shraddha

 

_______________________________= ________________
rtgwg mailing list
rtgwg@ietf.org
https://www.ietf.org/mailm= an/listinfo/rtgwg

 

 


___________________________________________________________________________=

This e-mail message is intended for the recipient only and contains informa= tion which is
CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have recei= ved this
transmission in error, please inform us by e-mail, phone or fax, and then d= elete the original
and all copies thereof.
___________________________________________________________________________=

 


___________________________________________________________________________=

This e-mail message is intended for the recipient only and contains informa= tion which is
CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have recei= ved this
transmission in error, please inform us by e-mail, phone or fax, and then d= elete the original
and all copies thereof.
___________________________________________________________________________=

--_000_DBBPR03MB5415486F24D2C9B6338611BEEE430DBBPR03MB5415eurp_-- From nobody Mon Dec 2 06:32:45 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5ABE91200B1 for ; Mon, 2 Dec 2019 02:08:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, PDS_BTC_ID=0.499, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kCIRGBsaRUw3 for ; Mon, 2 Dec 2019 02:08:03 -0800 (PST) Received: from eu-smtp-delivery-182.mimecast.com (eu-smtp-delivery-182.mimecast.com [207.82.80.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1E73B120041 for ; Mon, 2 Dec 2019 02:08:02 -0800 (PST) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-db3eur04lp2059.outbound.protection.outlook.com [104.47.12.59]) (Using TLS) by relay.mimecast.com with ESMTP id uk-mta-141-sxWXPyzwPbGRZotVIOOzug-1; Mon, 02 Dec 2019 10:06:25 +0000 Received: from DBBPR03MB5415.eurprd03.prod.outlook.com (20.179.47.79) by DBBPR03MB5223.eurprd03.prod.outlook.com (20.179.47.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.21; Mon, 2 Dec 2019 10:06:23 +0000 Received: from DBBPR03MB5415.eurprd03.prod.outlook.com ([fe80::707f:9207:45d4:82bc]) by DBBPR03MB5415.eurprd03.prod.outlook.com ([fe80::707f:9207:45d4:82bc%6]) with mapi id 15.20.2495.014; Mon, 2 Dec 2019 10:06:23 +0000 From: Andrew Alston To: Robert Raszuk CC: Shraddha Hegde , Alexander Vainshtein , "spring@ietf.org" , "rtg-bfd@ietf.org" , "rtgwg@ietf.org" Subject: RE: [spring] Draft for Node protection of intermediate nodes in SR Paths Thread-Topic: [spring] Draft for Node protection of intermediate nodes in SR Paths Thread-Index: AdWg5kSzPcmokSdUTd+ujmkEsxaFPQAMBq8AADGDFIAAA2XugAABUkKAAAdRE4ABsInvgAADpWmAAAEKboAAA6iU8AABbEuAAABBMsA= Date: Mon, 2 Dec 2019 10:06:23 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [197.155.81.57] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 89757f9d-794e-4eac-4150-08d7770f4971 x-ms-traffictypediagnostic: DBBPR03MB5223: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:883; x-forefront-prvs: 0239D46DB6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(346002)(136003)(39860400002)(396003)(376002)(199004)(51444003)(189003)(54094003)(6246003)(8936002)(81156014)(81166006)(54896002)(6306002)(236005)(9686003)(8676002)(86362001)(66574012)(186003)(66066001)(606006)(11346002)(440504004)(446003)(256004)(76176011)(25786009)(517774005)(52536014)(30864003)(71190400001)(561944003)(71200400001)(478600001)(14454004)(966005)(4326008)(6916009)(5070765005)(26005)(102836004)(14444005)(6506007)(10916006)(45080400002)(33656002)(53546011)(74316002)(55016002)(64756008)(2906002)(6436002)(229853002)(54906003)(7696005)(7736002)(66946007)(66556008)(66446008)(66476007)(76116006)(5660300002)(316002)(6116002)(790700001)(3846002)(99286004)(579004)(559001); DIR:OUT; SFP:1102; SCL:1; SRVR:DBBPR03MB5223; H:DBBPR03MB5415.eurprd03.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: UnsXFmUic6XAMF1jS9DMQxXyMzGnsD9iRhisLKNMKNuRW0tshiU2+0HlVYdkn9xRSe18m539+kVGpb1JGmJxRiVxbfoVyFn8+BjMO1GojVgJz5+4jOTl0AF6/nJv95cAoI5DNM2tIQSlkCPqOvFo+UZnHPQen7f8HaiZ5fIQ++Ov6HuYAROe6ofyqZ/L1Mh2k/xbmnfNG3rHVz6lz5camr0UrahJ2jXQEt8pjgl+EnTcYoVQceO6x5KDWd2yqBUg6qK5H/LQ5ao54sHxYMEyj/los06PMN29IhLqVowyHrYlpJSbPhdeYZxVdxbyj73qFDOiGcP953qj+tkh/GAr0ZWZjeoe67PV1bAPxQSST/gq03uhHo9BothadBV7MfQ4IB3LsOr33xRKMbkax1APQf5j6pPNt/bblKm4TAy72binLxinDvJzt4IR55odIMuPes5G4dfPggxuu9VK2hgQH8mOrvtTnkENjvrX/dEBQkc= x-ms-exchange-transport-forked: True MIME-Version: 1.0 X-OriginatorOrg: liquidtelecom.com X-MS-Exchange-CrossTenant-Network-Message-Id: 89757f9d-794e-4eac-4150-08d7770f4971 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Dec 2019 10:06:23.5678 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 68792612-0f0e-46cb-b16a-fcb82fd80cb1 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: cMW5Zjh0hbZ7EvgZMx2Esb8ty6NTf8loVTtaoUfv7GcmTm6vQK+//W5FEYbG1YW6f8ui6P5g/oSymt9V153/49aMVmsAWLqcIkLN2WzOXBQ= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBBPR03MB5223 X-MC-Unique: sxWXPyzwPbGRZotVIOOzug-1 X-Mimecast-Spam-Score: 0 Content-Type: multipart/alternative; boundary="_000_DBBPR03MB5415CB7A89FBBF974FF284E7EE430DBBPR03MB5415eurp_" Archived-At: X-Mailman-Approved-At: Mon, 02 Dec 2019 06:32:34 -0800 X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Dec 2019 10:08:06 -0000 --_000_DBBPR03MB5415CB7A89FBBF974FF284E7EE430DBBPR03MB5415eurp_ Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 Um9iZXJ0IOKAkyBhY3R1YWxseSBJIGRpc2FncmVlLg0KDQpCZWNhdXNlIHRvIHByb3RlY3QgdGhl IHBhdGhzIHlvdSBuZWVkIHRoZSBub2RlIHByb3RlY3Rpb24gb24gaW50ZXJtZWRpYXRlIG5vZGVz IGR1ZSB0byBsYWNrIG9mIHN0YXRlIOKAkyB0aGUgaGVhZGVuZCBoYXMgbm8gd2F5IHRvIGFjdHVh bGx5IHByb3RlY3QgYW4gZW5kIHRvIGVuZCBwYXRoIG91dHNpZGUgb2YgUy1CRkQgc3RlZXJlZCBv dmVyIHRoZSBwYXRoIHRvIHRlc3QgZW5kIHRvIGVuZCByZWFjaGFiaWxpdHkgYW5kIGlmIHlvdSBn ZXQgYW4gaW50ZXJtZWRpYXRlIG5vZGUtZmFpbHVyZSBvbiB0aGUgcGF0aCB5b3UgY291bGQgcnVu IGludG8gYSBwcm9ibGVtIPCfmIoNCg0KQXMgcGVyIGRyYWZ0LWlldGYtc3ByaW5nLXNlZ21lbnQt cm91dGluZy1wb2xpY3ktMDUgYSBwYXRoIGlzIHZhbGlkIHdoZW46DQoNCkl0IGlzIGVtcHR5DQpJ dHMgd2VpZ2h0IGlzIDANCkl04oCZcyBoZWFkZW5kIGlzIHVuYWJsZSB0byBwZXJmb3JtIHBhdGgg cmVzb2x1dGlvbiBmb3IgdGhlIGZpcnN0IFNJRCBpbnRvIG9uZSBvciBtb3JlIG91dGdvaW5nIGlu dGVyZmFjZShzKSBhbmQgbmV4dC1ob3AocykNClRoZSBoZWFkZW5kIGlzIHVuYWJsZSB0byBwZXJm b3JtIFNJRCByZXNvbHV0aW9uIGZvciBhbnkgbm9uLWZpcnN0IFNJRCBvZiB0eXBlIEMgdGhyb3Vn aCBLIGludG8gYW4gTVBMUyBsYWJlbCBvciBhbiBTUnY2IFNJRA0KVGhlIGhlYWRlbmQgdmVyaWZp Y2F0aW9uIGZhaWxzIGZvciBhbnkgU0lEIGZvciB3aGljaCB2ZXJpZmljYXRpb24gaGFzIGJlZW4g ZXhwbGljaXRseSByZXF1ZXN0ZWQNCg0KRWZmZWN0aXZlbHkg4oCTIGFzIG9mIHJpZ2h0IG5vdyDi gJMgaWYgeW91IHJlYWQgdGhhdCBkcmFmdCDigJMgdGhlcmUgaXMgbm8gbWVjaGFuaXNtIHRvIHZl cmlmeSBwYXRoIG5vZGVzIGlmIHlvdSBhcmUgZG9pbmcgcGF0aHMgYmFzZWQgb24gdHlwZSBBIFNJ ROKAmXMg4oCTIHRoZSBvbmx5IHdheSByaWdodCBub3cgdG8gZG8gdGhhdCDigJMgaXMgdXNpbmcg Uy1CRkQg4oCTIGhvd2V2ZXIgdGhpcyBkcmFmdCBpZiBteSB1bmRlcnN0YW5kaW5nIGlzIGNvcnJl Y3Qg4oCTIHdvdWxkIGFsbG93IGZvciBub2RlIHByb3RlY3Rpb24gdGhhdCB3b3VsZCBpbiBlZmZl Y3QgcHJvdGVjdCB0aGUgcGF0aHMgaW5qZWN0ZWQuDQoNClRoYW5rcw0KQW5kcmV3DQoNCg0KRnJv bTogUm9iZXJ0IFJhc3p1ayA8cm9iZXJ0QHJhc3p1ay5uZXQ+DQpTZW50OiBNb25kYXksIDIgRGVj ZW1iZXIgMjAxOSAxMjo1MA0KVG86IEFuZHJldyBBbHN0b24gPEFuZHJldy5BbHN0b25AbGlxdWlk dGVsZWNvbS5jb20+DQpDYzogU2hyYWRkaGEgSGVnZGUgPHNocmFkZGhhPTQwanVuaXBlci5uZXRA ZG1hcmMuaWV0Zi5vcmc+OyBBbGV4YW5kZXIgVmFpbnNodGVpbiA8QWxleGFuZGVyLlZhaW5zaHRl aW5AZWNpdGVsZS5jb20+OyBzcHJpbmdAaWV0Zi5vcmc7IHJ0Zy1iZmRAaWV0Zi5vcmc7IHJ0Z3dn QGlldGYub3JnDQpTdWJqZWN0OiBSZTogW3NwcmluZ10gRHJhZnQgZm9yIE5vZGUgcHJvdGVjdGlv biBvZiBpbnRlcm1lZGlhdGUgbm9kZXMgaW4gU1IgUGF0aHMNCg0KT24gTW9uLCBEZWMgMiwgMjAx OSBhdCAxMDoyOCBBTSBBbmRyZXcgQWxzdG9uIDxBbmRyZXcuQWxzdG9uQGxpcXVpZHRlbGVjb20u Y29tPG1haWx0bzpBbmRyZXcuQWxzdG9uQGxpcXVpZHRlbGVjb20uY29tPj4gd3JvdGU6DQoNCkN1 cnJlbnRseSB0aGUgYmlnZ2VzdCBpc3N1ZSB0aGF0IEkgc2VlIHdpdGggUy1CRkQgYmFzZWQgcHJv dGVjdGlvbiDigJMgd2hpY2ggaXMgc29tZXRoaW5nIHdlIHVzZSBpbiBwcm9kdWN0aW9uIGlzIGFz IGZvbGxvd3M6DQoNClVubGVzcyBJ4oCZbSBtaXN0YWtlbiDigJMgdGhlcmUgaXMgYWJzb2x1dGVs eSBubyB3YXkgdG8gdGllIFMtQkZEIGJhc2VkIHByb3RlY3Rpb24gd2l0aCBCR1AgaW5qZWN0ZWQg U1ItVEUgcGF0aGluZw0KDQoNCldlbGwgSSBhbSBub3Qgc3VyZSB3aGF0IHlvdSBjYWxsICIgQkdQ IGluamVjdGVkIFNSLVRFIHBhdGhpbmciIGJ1dCBpZiB5b3UgYXJlIGxvb2tpbmcgZm9yIHZhbGlk YXRpb24gb2YgQkdQIHBhdGhzIHRoYXQgaGFzIGJlZW4gc3VwcG9ydGVkIGJ5IHNvbWUgdmVuZG9y cyBmb3IgYSBsb29vb25nIHRpbWUuIEhpbnQ6IHlvdSBhbGxvY2F0ZSBkaWZmZXJlbnQgbmV4dCBo b3AgZm9yIHlvdXIgU1ItVEUgZW5kcG9pbnRzIGFuZCB2b2lsYS4NCg0KQnR3IC0gbm90IGFuIGll dGYgdG9waWMsIGJ1dCBhbiBpbXBsZW1lbnRhdGlvbiByZXF1ZXN0IC8gdmVuZG9yJ3MgZmVhdHVy ZS4NCg0KQmVzaWRlcywgc2luY2UgeW91IGFyZSB0YWxraW5nIGFib3V0IGhlYWRlbmQgd2hhdCB5 b3UgYXJlIGRlc2NyaWJpbmcgaXMgcGF0aCBwcm90ZWN0aW9uIC4uLiB0aGlzIGRyYWZ0IHRhbGtz IGFib3V0IG5vZGUgcHJvdGVjdGlvbiB3aGljaCBpcyBhIGNvbXBsZXRlbHkgZGlmZmVyZW50IHRo aW5nLg0KDQpDaGVlcnMsDQpyLg0KDQoNCk5vZGUgdmFsaWRhdGlvbiBhcyBkZWZpbmVkIGluIHRo ZSBTUi1URSBkcmFmdHMgaXMgbGltaXRlZCB0byBwcmVzZW5jZSBpbiB0aGUgSUdQDQpTaW5jZSBT Ui1URSBwYXRoIGluamVjdGlvbiBtYXkgYmUgZG9uZSB0aHJvdWdoIHJlZmxlY3RvcnMg4oCTIHVz aW5nIHRhcmdldCBjb21tdW5pdGllcyDigJMgdGhlIHBvaW50IG9mIGNvbW11bmljYXRpb24gaW50 byB0aGUgbmV0d29yayBpcyBub3QgbmVjZXNzYXJpbHkgdGhlIGhlYWQgZW5kIG9mIHRoZSB0dW5u ZWwgYW5kIHRoZSBwb2ludCBvZiBpbmplY3Rpb24gbWF5IGJlIGVudGlyZWx5IHVuYXdhcmUgb2Yg dGhlIGltcGxpY2F0aW9ucyBvZiB0aGUgcGF0aCB0aGF04oCZcyBiZWluZyBpbnNlcnRlZC4NCg0K QnkgdXRpbGl6aW5nIHdoYXQgaXMgY29udGFpbmVkIGluIHRoaXMgZHJhZnQgdG8gYnVpbGQgY29u dGV4dCB0YWJsZXMgYXQgdGhlIGhlYWQgZW5kIG9mIGFuIGluc2VydGVkIHR1bm5lbCBvbiBhbiBh dXRvbWF0ZWQgYmFzaXMg4oCTIHRoaXMgc29sdmVzIGEgcHJvYmxlbSB0aGF0IGN1cnJlbnRseSBl eGlzdHMgdGhhdCBTLUJGRCBzaW1wbHkgY2Fubm90IHNvbHZlIHdpdGhvdXQgbW9kaWZpY2F0aW9u IHRvIHRoZSBzcnRlIHBvbGljeSBpbnNlcnRpb24gZHJhZnRzIHRoYXQgd291bGQgYWxsb3cgZm9y IGF1dG9tYXRlZCBidWlsZGluZyBvZiBTLUJGRCBjaGVja3Mg4oCTIHdoaWNoIGluIGFuZCBvZiBp dHNlbGYgY291bGQgcHJvdmUgY2hhbGxlbmdpbmcgY29uc2lkZXJpbmcgdGhlIGNvbXBsZXhpdHkg b2YgdGhpcy4NCg0KVGhhdCBpcyBub3QgdG8gc2F5IGluIGFueSB3YXkgdGhhdCBib3RoIHMtYmZk IGFuZCBwb3RlbnRpYWxseSBvdGhlciBtZWNoYW5pc21zIGRvIG5vdCBoYXZlIHVzZSBjYXNlcyDi gJMgYnV0IGFzIGFuIG9wZXJhdG9yIOKAkyB0aGlzIGRyYWZ0IHdvdWxkIGNlcnRhaW5seSBwcm92 aWRlIGEgYmV0dGVyIG1lY2hhbmlzbSBmb3IgY29uc3RhbnQgcGF0aCB2YWxpZGF0aW9uIHRoYW4g YW55dGhpbmcgd2UgY3VycmVudGx5IGhhdmUgKHdoaWNoIGlzIGJhc2VkIG9uIHN0ZWVyZWQgcGFj a2V0cyB0aGF0IGxlYXZlIHRoZSBjb250cm9sbGVyIGFuZCByZXR1cm4gdG8gdGhlIGNvbnRyb2xs ZXIgdGhyb3VnaCB0aGUgdXNlIG9mIFNSIHBhY2tldHMgYW5kIGJpbmRpbmcgc2lkcykuDQoNCkp1 c3QgbXkgMmMNCg0KVGhhbmtzDQoNCkFuZHJldw0KDQoNCkZyb206IHNwcmluZyA8c3ByaW5nLWJv dW5jZXNAaWV0Zi5vcmc8bWFpbHRvOnNwcmluZy1ib3VuY2VzQGlldGYub3JnPj4gT24gQmVoYWxm IE9mIFNocmFkZGhhIEhlZ2RlDQpTZW50OiBNb25kYXksIDIgRGVjZW1iZXIgMjAxOSAxMDoyNA0K VG86IEFsZXhhbmRlciBWYWluc2h0ZWluIDxBbGV4YW5kZXIuVmFpbnNodGVpbkBlY2l0ZWxlLmNv bTxtYWlsdG86QWxleGFuZGVyLlZhaW5zaHRlaW5AZWNpdGVsZS5jb20+Pg0KQ2M6IHNwcmluZ0Bp ZXRmLm9yZzxtYWlsdG86c3ByaW5nQGlldGYub3JnPjsgcnRnLWJmZEBpZXRmLm9yZzxtYWlsdG86 cnRnLWJmZEBpZXRmLm9yZz47IFJvYmVydCBSYXN6dWsgPHJvYmVydEByYXN6dWsubmV0PG1haWx0 bzpyb2JlcnRAcmFzenVrLm5ldD4+OyBydGd3Z0BpZXRmLm9yZzxtYWlsdG86cnRnd2dAaWV0Zi5v cmc+DQpTdWJqZWN0OiBSZTogW3NwcmluZ10gRHJhZnQgZm9yIE5vZGUgcHJvdGVjdGlvbiBvZiBp bnRlcm1lZGlhdGUgbm9kZXMgaW4gU1IgUGF0aHMNCg0KU2FzaGEsDQoNCldlIGFyZSBpbiBhZ3Jl ZW1lbnQgb24gc2VwYXJhdGluZyB0aGUgdHJpZ2dlciBmcm9tIHRoZSBwcm90ZWN0aW9uIG1lY2hh bmlzbS4NCg0KPiBJbiBhbnkgY2FzZSBJIHRoaW5rIHRoYXQgaXQgd295bGQgbWFrZSBzZW5zZSB0 byBzZXBhcmF0ZSB0aGUgcHJvdGVjdGlvbiBzY2hlbWUgcHJvcG9zZWQgaW4gdGhlIGRyYWZ0IGZy b20gc3BlY2lmaWMgdHJpZ2dlcnMgZm9yIGl0cyBhY3RpdmF0aW9uID5zaW1pbGFyIHRvIGhvdyB0 aGlzIGhhcyBiZWVuIGRvbmUgaW4gTVBMUyBFZ3Jlc3MgUHJvdGVjdGlvbiBGcmFtZXdvcmsgZHJh ZnQuDQoNCknigJlsbCBhZGQgdGV4dCBpbiB0aGUgbmV4dCByZXZpc2lvbiBmb3IgdGhpcy4NCg0K Umdkcw0KU2hyYWRkaGENCg0KDQpGcm9tOiBBbGV4YW5kZXIgVmFpbnNodGVpbiA8QWxleGFuZGVy LlZhaW5zaHRlaW5AZWNpdGVsZS5jb208bWFpbHRvOkFsZXhhbmRlci5WYWluc2h0ZWluQGVjaXRl bGUuY29tPj4NClNlbnQ6IE1vbmRheSwgRGVjZW1iZXIgMiwgMjAxOSAxMjoyNCBQTQ0KVG86IFNo cmFkZGhhIEhlZ2RlIDxzaHJhZGRoYUBqdW5pcGVyLm5ldDxtYWlsdG86c2hyYWRkaGFAanVuaXBl ci5uZXQ+Pg0KQ2M6IHNwcmluZ0BpZXRmLm9yZzxtYWlsdG86c3ByaW5nQGlldGYub3JnPjsgcnRn d2dAaWV0Zi5vcmc8bWFpbHRvOnJ0Z3dnQGlldGYub3JnPjsgcnRnLWJmZEBpZXRmLm9yZzxtYWls dG86cnRnLWJmZEBpZXRmLm9yZz47IFJvYmVydCBSYXN6dWsgPHJvYmVydEByYXN6dWsubmV0PG1h aWx0bzpyb2JlcnRAcmFzenVrLm5ldD4+DQpTdWJqZWN0OiBSZTogW3NwcmluZ10gRHJhZnQgZm9y IE5vZGUgcHJvdGVjdGlvbiBvZiBpbnRlcm1lZGlhdGUgbm9kZXMgaW4gU1IgUGF0aHMNCg0KU2hy YWRkaGEsDQpMb3RzIG9mIHRoYW5rcyBmb3IgYXRoZSB0ZXNwb25zZS4NCg0KSSBwcm9iYWJseSBk aWQgbm90IGV4cHJlc3MgbXlzZWxmIGNsZWFybHkgZW5vdWdoLiBJIHdpbGwgdHJ5IHRvIGZpeCB0 aHN0IG5vdywgYW5kIEkgYXBvbG9naXNlIGluIGFkdmFuY2UgZm9yIGEgbG9uZyBlbWFpbC4NCg0K SSBoYXZlIG5vdCBiZWVuIHNwZWFraW5nIGFib3V0IGVuZC15by1lbmQgcHJvdGVjeWlvbiwgb25s eSBhYm91dCBsb2NhbCBwcm90ZWN0aW9uIGFnYWluc3QgZmFpbHVyZSBvZiBhbiBpbnRlcm1lZGlh dGUgKGEuay5hLiBwaW5uZWQpIG5vZGUgb2YgYW4gU1IgcGF0aCBhbmQsIHNwZWNpZmljYWxseSwg dHJpZ2dlcnMgZm9yIHN1Y2ggcHJvdGVjdGlvbi4gVGhpcyBjb250ZXh0IGhhcyBiZWVuIGFjdHVh bGx5IGRlZmluZWQgYnkgUm9iZXJ0IGluIGhpcyBvcmlnaW5hbCBjb21tZW50Lg0KDQpUbyB0aGUg YmVzdCBvZiBteSB1bmRlcnN0YW5kaW5nLCBSb2JlcnQncyBjb25jZXJuIHdhcyB0aGF0IGZhaWx1 cmUgb2YgdGhlIGxpbmsgYmV0ZWVlbiB0aGUgcGlubmVkIG5vZGUgb2YgYSBTUiBwYXRoIGFuZCBp dHMgYWRqYWNlbmN5ICh0aGUgcGVudWx0aW1hdGUgbm9kZSBvZiB0aGUgU2VnbWVudCByZXByZXNl bnRlZCBieSB0aGUgTm9kZSBTSUQgb2YgdGhlIHBpbm5lZCBub2RlKSBpcyBub3QgYSBnb29kIGVu b3VnaCBpbmRpY2F0aW9uIG9mIHRoZSBwaW5uZWQgbm9kZSBmYWlsdXJlLg0KDQpJIGFncmVlIHdp dGggdGhpcyBzdGF0ZW1lbnQgZXZlbiBpZiBteSB1bmRlcnN0YW5kaW5nIG9mIGEgZ29vZCBpbmRp Y2F0aW9uIGRpZmZlcnMgZnJvbSBSb2JlcnQnczoNCi0gSSB0aGluayB0aGF0IGl0IGlzIG5vdCBz dWZmaWNpZW50bHkgc3BlY2lmaWMgYW5kIHRoZXJlZm9yZSBjb3VsZCByZXN1bHQgaW4gZmxhcHBp bmcgKGxvY2FsIG5vZGUgcHJvdGVjdGlvbiBhY3RpdmF0ZWQgYW5kIHRoZW4gcmVsZWFzZWQpDQot Um9iZXJ0J3MgY29uY2VybiwgdG8gdGhlIGJlc3Qgb2YgbXkgdW5kZXJzdGFuZGluZywgd2FzIHRo YXQgaXQgY291bGQgbWlzcyBzb21lIGZhaWx1cmVzIChlLmcuIHRoZSBGYWJyaWMgZmFpbHVyZSku DQoNClRoZXJlZm9yZSBJIGhhdmUgc3VnZ2VzdGVkIHR3byBwb3NzaWJpbGl0aWVzIGZvciBtb3Jl IHNwZWNpZmljIGFuZCBtb3JlIHJybGlhYmtlIGRldGVjdGlvbiBvZiBmYWlsdXJlIG9mIHRoZSBw aW5uZWQgbm9kZSBieSBpdHMgYWRqYWNlbmN5Og0KDQoxLiBSdW4gYSBtdWx0aS1ob3AgSVAgQkZE IHNlc3Npb24gYmV0d2VlbiB0aGUgcGVuaWx0aW1hdGUgbm9kZSBhbnMgdGhlIHBpbm5lZCBvbmVz IHVzaW5nIHByZWZpeGVzIGFjdGluZyBhcyBOb2RlIFNJRHMgb2YgdGhpcyBwYWlyLiAgVGhpcyB3 aXVsZCBpZ25vcmUgbGluayBmYWlsdXJlcyBidXQgbG9jYWxseSBkZXRlY3Qgc3VjaCBub2RlIGZh aWx1cnMgYXMgcG93ZXItZG93biBvciBjcmFzaC4NCg0KMi4gIFJ1biBTLUJGRCBzZXNzaW9ucyB0 byBhbGwgb3RoZXIgYWRqYWNlbmNpZXMgb2YgdGhlIHBpbm5lZCBub2RlIHVzaW5nIGluIGVhY2gg Y2FzZSBhIGxpc3Qgb2YgdHdvIFNJRHM6IHRoZSBwcm90ZWN0ZWQgQWRqLVNJRCB0byB0aGUgcGlu bmVkIG5vZGUgZm9sbG93ZWQgYnkgdGdlIE5vZGUgU0lEIG9mIHRoZSBvdGhlciBhZGphY2VuY3ks IGFucyBkZWNsYXJlIHBpbm5lZCBub2RlIGZhaWx1cmUgd2hlbiBhbGwgdGhlc2Ugc2Vzc2lvbnMg ZmFpbC4gVGhpcyB3b3VsZCBhZ2FpbiBpZ25vcmUgZmFpbHVyZSBvZiB0aGUgbGluayBiZXR3ZWVu IHRoZSBwZW51bHRpbWF0ZSBub2RlIGFuZCB0aGUgcGlubmVkIG5vZGUgYnV0IGRldGVjdCB2YXJp b3VzIHJlYWwgZmFpbHVyZXMgb2YgdGhlIHBpbm5lZCBub2RlLCBlLmcuIGZhaWx1cmUgb2YgaXRz IEZhYnJpYy4NCg0KSW4gYW55IGNhc2UgSSB0aGluayB0aGF0IGl0IHdveWxkIG1ha2Ugc2Vuc2Ug dG8gc2VwYXJhdGUgdGhlIHByb3RlY3Rpb24gc2NoZW1lIHByb3Bvc2VkIGluIHRoZSBkcmFmdCBm cm9tIHNwZWNpZmljIHRyaWdnZXJzIGZvciBpdHMgYWN0aXZhdGlvbiBzaW1pbGFyIHRvIGhvdyB0 aGlzIGhhcyBiZWVuIGRvbmUgaW4gTVBMUyBFZ3Jlc3MgUHJvdGVjdGlvbiBGcmFtZXdvcmsgZHJh ZnQuDQoNCk15IDJjLg0KDQoNCg0KDQoNCg0KR2V0IE91dGxvb2sgZm9yIEFuZHJvaWQ8aHR0cHM6 Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi9ha2EubXMvZ2hlaTM2X187IThXb0E2UmpDODFj IVFBaFlhQTBxaG9VWjN5eFFXbDA1QXAxMkNNUi1KLVJUTF9PX2Rfd0tFbEM1a3RaclBla2ZURGhM SDZHUFppSUgkPg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KRnJvbTogU2hy YWRkaGEgSGVnZGUgPHNocmFkZGhhQGp1bmlwZXIubmV0PG1haWx0bzpzaHJhZGRoYUBqdW5pcGVy Lm5ldD4+DQpTZW50OiBNb25kYXksIERlY2VtYmVyIDIsIDIwMTksIDA2OjEwDQpUbzogQWxleGFu ZGVyIFZhaW5zaHRlaW47IFJvYmVydCBSYXN6dWsNCkNjOiBzcHJpbmdAaWV0Zi5vcmc8bWFpbHRv OnNwcmluZ0BpZXRmLm9yZz47IHJ0Z3dnQGlldGYub3JnPG1haWx0bzpydGd3Z0BpZXRmLm9yZz47 IHJ0Zy1iZmRAaWV0Zi5vcmc8bWFpbHRvOnJ0Zy1iZmRAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSRTog W3NwcmluZ10gRHJhZnQgZm9yIE5vZGUgcHJvdGVjdGlvbiBvZiBpbnRlcm1lZGlhdGUgbm9kZXMg aW4gU1IgUGF0aHMNCg0KUm9iZXJ0L1Nhc2hhLA0KDQoNClMtQkZEIGJhc2VkIG1lY2hhbmlzbSBp cyAgaGVhZC1lbmQgdHJpZ2dlcmVkIHByb3RlY3Rpb24uIEl0IGlzIG5vdCBhIGxvY2FsIHByb3Rl Y3Rpb24uDQpTLUJGRCBtZWNoYW5pc20gaXMgb3J0aG9nb25hbCB0byB0aGUgbWVjaGFuaXNtIGRl c2NyaWJlZCBpbiB0aGlzIGRyYWZ0IGFuZCBhbiBvcGVyYXRvciBjYW4NCmNob29zZSB3aGF0IGtp bmQgb2YgcHJvdGVjdGlvbiBtYWtlcyBtb3JlIHNlbnNlIHRvIGhpcy9oZXIgbmV0d29yay4NCg0K SW4gbWFueSBjYXNlcywgbm9kZS1wcm90ZWN0aW5nIGJhY2t1cCBwYXRoIHdpbGwgYmUgZGlmZmVy ZW50IGZyb20gbGluay1wcm90ZWN0aW5nL1NSTEcgcHJvdGVjdGluZyBiYWNrdXAgcGF0aC4NCklm IHlvdSByZWFsbHkgd2FudCB0byB1c2UgbGluay1wcm90ZWN0aW5nIGJhY2t1cCBwYXRoIHdoZW4g bGluayBmYWlscyBhbmQgbm9kZSBwcm90ZWN0aW5nIGJhY2t1cCBwYXRoIHdoZW4gbm9kZSBmYWls cywNCllvdSB3aWxsIGhhdmUgdG8gZG93bmxvYWQgYm90aCBsaW5rIHByb3RlY3RpbmcgYW5kIG5v ZGUtcHJvdGVjdGluZyBiYWNrdXAgcGF0aHMgaW4gRklCIGFuZCBkZXRlY3Qgd2hpY2gNCmZhaWx1 cmUgcmVhbGx5IGhhcHBlbmVkIGFuZCBoYXZlIHRoZSBhYmlsaXR5IGluIGhhcmR3YXJlIHRvIHVz ZSBhcHByb3ByaWF0ZSBiYWNrdXAgcGF0aC4gTm9uZSBvZiB0aGVzZQ0KaXMgaW4gdGhlIHNjb3Bl IG9mIHRoaXMgZG9jdW1lbnQuDQoNClJnZHMNClNocmFkZGhhDQoNCg0KRnJvbTogQWxleGFuZGVy IFZhaW5zaHRlaW4gPEFsZXhhbmRlci5WYWluc2h0ZWluQGVjaXRlbGUuY29tPG1haWx0bzpBbGV4 YW5kZXIuVmFpbnNodGVpbkBlY2l0ZWxlLmNvbT4+DQpTZW50OiBTYXR1cmRheSwgTm92ZW1iZXIg MjMsIDIwMTkgODoxNSBQTQ0KVG86IFJvYmVydCBSYXN6dWsgPHJvYmVydEByYXN6dWsubmV0PG1h aWx0bzpyb2JlcnRAcmFzenVrLm5ldD4+OyBTaHJhZGRoYSBIZWdkZSA8c2hyYWRkaGFAanVuaXBl ci5uZXQ8bWFpbHRvOnNocmFkZGhhQGp1bmlwZXIubmV0Pj4NCkNjOiBzcHJpbmdAaWV0Zi5vcmc8 bWFpbHRvOnNwcmluZ0BpZXRmLm9yZz47IHJ0Z3dnQGlldGYub3JnPG1haWx0bzpydGd3Z0BpZXRm Lm9yZz47IHJ0Zy1iZmRAaWV0Zi5vcmc8bWFpbHRvOnJ0Zy1iZmRAaWV0Zi5vcmc+DQpTdWJqZWN0 OiBSZTogW3NwcmluZ10gRHJhZnQgZm9yIE5vZGUgcHJvdGVjdGlvbiBvZiBpbnRlcm1lZGlhdGUg bm9kZXMgaW4gU1IgUGF0aHMNCg0KUm9iZXJ0LA0KT24gdGhlIHNlY29uZCB0aG91Z2h0LCBmb3Ig dGhlIHB1cnBvc2Ugb2YgdGhpcyBkcmFmdCAoaS5lLiBpbiB0aGUgc2NvcGUgb2YgU1IpIGl0IGlz IHBvc3NpYmxlIHRvIGltcGxlbWVudCB5b3VyIHN1Z2dlc3Rpb24gYnkgcnVubmluZyBTLUJGRCBz ZXNzaW9ucyBiZXR3ZWVuIFI3IChhcyB0aGUgaW5pdGlhdG9yKSBhbmQgZWFjaCBvdGhlciBhZGph Y2VuY3kgb2YgUjggIChhY3RpbmcgYXMgUmVmbGVjdG9ycykgb2YgYSBTUiBwb2xpY3kgd2l0aCBs aXN0IG9mIHR3byBTSURzOg0KLSBwcm90ZWN0ZWQgYWRqYWNlbmN5IGJldHdlZW4gUjcgYW5kIFI4 DQotIE5vZGUgU0lEIG9mIHRoZSBzcGVjaWZpYyAib3RoZXIiIGFkamFjZW5jeSAgb2YgUjguDQoN CklmIGFsbCB0aGVzZSBzZXNzaW9ucyBmYWlsLCBSNyBjYW4gcmVsaWFibHkgY29uc2lkZXIgUjgg YXMgZmFpbGVkLg0KDQpJIGFtIG5vdCBzdXJlIHRoaXMgd291bGQgYmUgbXVjaCBiZXR0ZXIgdGhh biBtdWx0aS1ob3AgSVAgQkZELCBhbmQgaXQgbG9va3MgbXVjaCBtb3JlIGNvbXBsaWNhdGVkIHRv IG1lLg0KDQoNCldoYXQgZG8geW91IHRoaW5rPw0KDQoNCg0KDQpHZXQgT3V0bG9vayBmb3IgQW5k cm9pZDxodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L2NsaWNrdGltZS5zeW1hbnRl Yy5jb20vM01SOHk3Q3ZpR0xrUzNremcxVXliUnY2SDI/dT1odHRwcyozQSoyRioyRnVybGRlZmVu c2UuY29tKjJGdjMqMkZfX2h0dHBzKjNBKjJGYWthLm1zKjJGZ2hlaTM2X18qM0IqMjE4V29BNlJq QzgxYyoyMVhvLUQ3ZTVNZlVlVE95VjE3S1VmbGdTSTAwMktDbXN3X0VqeExjOXB4QTZzSjFFYnJp b0RFMFZtZ25ZQmhBYmMqMjRfXztKU1VsSlNVbEpTVWxKU1VsIThXb0E2UmpDODFjIVFBaFlhQTBx aG9VWjN5eFFXbDA1QXAxMkNNUi1KLVJUTF9PX2Rfd0tFbEM1a3RaclBla2ZURGhMSDFZVnlnWkMk Pg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KRnJvbTogQWxleGFuZGVyIFZh aW5zaHRlaW4gPEFsZXhhbmRlci5WYWluc2h0ZWluQGVjaXRlbGUuY29tPG1haWx0bzpBbGV4YW5k ZXIuVmFpbnNodGVpbkBlY2l0ZWxlLmNvbT4+DQpTZW50OiBTYXR1cmRheSwgTm92ZW1iZXIgMjMs IDIwMTksIDEzOjE1DQpUbzogUm9iZXJ0IFJhc3p1azsgU2hyYWRkaGEgSGVnZGUNCkNjOiBzcHJp bmdAaWV0Zi5vcmc8bWFpbHRvOnNwcmluZ0BpZXRmLm9yZz47IHJ0Z3dnQGlldGYub3JnPG1haWx0 bzpydGd3Z0BpZXRmLm9yZz47IHJ0Zy1iZmRAaWV0Zi5vcmc8bWFpbHRvOnJ0Zy1iZmRAaWV0Zi5v cmc+DQpTdWJqZWN0OiBSZTogW3NwcmluZ10gRHJhZnQgZm9yIE5vZGUgcHJvdGVjdGlvbiBvZiBp bnRlcm1lZGlhdGUgbm9kZXMgaW4gU1IgUGF0aHMNCg0KUm9iZXJ0LA0KTG90cyBvZiB0aGFua3Mg Zm9yIGEgcHJvbXB0IHJlc3BvbnNlLg0KDQpJIHJlc3BlY3RmdWxseSBkaXNhZ3JlZSB3aXRoIHlv dXIgc3RhdGVtZW50IHRoYXQgQkZEIGltcGxlbWVudGF0aW9uICBpcyB1c3VhbGx5IG9mZmxvYWRl ZCB0byB0aGUgSFcgb2YgdGhlIGluZ3Jlc3MgbGluZSBjYXJkLiAgSSBkbyBub3QgdGhpbmsgdGhp cyBjYW4gd29yIGZvciBNSCBCRkQgc2Vzc2lvbnMgYmVjYXVzZSB0aGUgaW5ncmVzcyBhbmQgZWdy ZXNzIGxpbmUgY2FyZHMgYXJlIG5vdCBrbm93biBpbiBhZHZhbmNlIGFuZCBjaGFuZ2Ugd2l0aCB0 aGUgcm91dGluZyBjaGFuZ2VzDQpBIGdvb2QgIG11bHRpLWhvcCBCRkQgaW1wbGVtZW50YXRpb24g c2hvdWxkIGJlIHJlYWR5IHRvIG92ZXJjb21lIHRoaXMuLiBUaGVyZSBhcmUgbWFueSB3YXlzIHRv IGFjaGlldmUgdGhhdC4gQSBuYWl2ZSBpbXBsZW1lbnRhdGlvbiB0aGF0IHJ1bnMgaW4gU1cgb2Yg dGhlIGNvbnRyb2wgY2FyZCBpcyBhbHNvIHBvc3NpYmxlIG9mIGNvdXJzZS4gQW5kIHRoZXkgd291 bGQgc2Vuc2QgYW5kIHJlY2VpdmUgcGFja2V0cw0KDQpNeSAyYy4NCkdldCBPdXRsb29rIGZvciBB bmRyb2lkPGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovY2xpY2t0aW1lLnN5bWFu dGVjLmNvbS8zTVI4eTdDdmlHTGtTM2t6ZzFVeWJSdjZIMj91PWh0dHBzKjNBKjJGKjJGdXJsZGVm ZW5zZS5jb20qMkZ2MyoyRl9faHR0cHMqM0EqMkZha2EubXMqMkZnaGVpMzZfXyozQioyMThXb0E2 UmpDODFjKjIxWG8tRDdlNU1mVWVUT3lWMTdLVWZsZ1NJMDAyS0Ntc3dfRWp4TGM5cHhBNnNKMUVi cmlvREUwVm1nbllCaEFiYyoyNF9fO0pTVWxKU1VsSlNVbEpTVWwhOFdvQTZSakM4MWMhUUFoWWFB MHFob1VaM3l4UVdsMDVBcDEyQ01SLUotUlRMX09fZF93S0VsQzVrdFpyUGVrZlREaExIMVlWeWda QyQ+DQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpGcm9tOiBSb2JlcnQgUmFz enVrIDxyb2JlcnRAcmFzenVrLm5ldDxtYWlsdG86cm9iZXJ0QHJhc3p1ay5uZXQ+Pg0KU2VudDog U2F0dXJkYXksIE5vdmVtYmVyIDIzLCAyMDE5LCAxMjozNw0KVG86IEFsZXhhbmRlciBWYWluc2h0 ZWluOyBTaHJhZGRoYSBIZWdkZQ0KQ2M6IHNwcmluZ0BpZXRmLm9yZzxtYWlsdG86c3ByaW5nQGll dGYub3JnPjsgcnRnd2dAaWV0Zi5vcmc8bWFpbHRvOnJ0Z3dnQGlldGYub3JnPjsgcnRnLWJmZEBp ZXRmLm9yZzxtYWlsdG86cnRnLWJmZEBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbc3ByaW5nXSBE cmFmdCBmb3IgTm9kZSBwcm90ZWN0aW9uIG9mIGludGVybWVkaWF0ZSBub2RlcyBpbiBTUiBQYXRo cw0KDQpIaSBTYXNoYSwNCg0KT24gdGhlIHN1cmZhY2UgeW91ciBzdWdnZXN0aW9uIG1heSBsb29r IGNvb2wgLSBidXQgaWYgeW91IHpvb20gaW4gLSBJIGRvIG5vdCB0aGluayBpdCB3aWxsIHdvcmsg aW4gcHJhY3RpY2UuDQoNClNlZSAtIG9uZSBvZiB0aGUgYmlnZ2VzdCB2YWx1ZSBvZiBCRkQgaXMg aXRzIG9mZmxvYWQgdG8gbGluZSBjYXJkJ3MgaGFyZHdhcmUuIEFuZCBpbiBtb3N0IGNhc2VzIGl0 IGlzIGluZ3Jlc3MgbGluZSBjYXJkIHRvIHRoZSBib3guIFNvIGlmIHlvdSBpbnN0cnVjdCBzdWNo IGhhcmR3YXJlIHRvIHJlc3BvbmQgdG8gU0lEIGFkZHJlc3MgbG9vcGJhY2sgeW91IHN0aWxsIGRp ZCBub3QgZ2FpbiBtdWNoIGluIHRlcm1zIG9mIGRldGVjdGlvbiByb3V0ZXIncyBmYWJyaWMgZmFp bHVyZXMsIHJlbW90ZSBMQyBmYWlsdXJlIG9yIGNvbnRyb2wgcGxhbmUgaXNzdWVzIHdoaWNoIGNv dWxkIHNvb24gcmVzdWx0IGluIGJveCBmYWlsdXJlLiBUaGUgY2F0YWxvZ3VlIG9mIHJvdXRlciBm YWlsdXJlcyBpcyBvZiBjb3Vyc2UgbXVjaCBtb3JlIGNvbG9yZnVsLg0KDQpJZiB5b3UgYXNrIEJG RCB0byBiZSByZXNwb25kZWQgYnkgUlAvUkUgaXQgbm8gbG9uZ2VyIGhhcyB0aGUgQkZEIGFkdmFu dGFnZS4NCg0KSU1ITyB0aGUgYmVzdCB3YXkgdG8gZGV0ZWN0IG5vZGUgZmFpbHVyZSBpcyBhY3R1 YWxseSB0byBzZW5kIHRoZSBwcm9iZXMgKmFjcm9zcyogdGhlIG5vZGUgdW5kZXIgdGVzdCB0byBp dHMgcGVlcnMuDQoNClRoZSB3YXkgSSB3b3VsZCB0aGluayBvZiBlc3RhYmxpc2hpbmcgc3VjaCBt LWhvcCBzZXNzaW9ucyB3b3VsZCBiZSBmdWxseSBhdXRvbWF0ZWQgd2l0aCBvbmUga25vYiBwZXIg SUdQIGFkai4gZXg6ICJiZmQgZGV0ZWN0LW5vZGUtZmFpbHVyZSBbbWF4IE5dIiB3aGVyZSBsb2Nh bCBCRkQgc3Vic3lzdGVtIHdvdWxkIGNyZWF0ZSBOIHNlc3Npb25zIHRvIElHUCBwZWVycyBvZiB0 aGUgbm9kZSB3ZSBhcmUgdG8gcHJvdGVjdC4gTFNEQiBoYXMgdGhvc2UgcGVlcnMgc28gbm8gbmV3 IHByb3RvY29sIGV4dGVuc2lvbiBpcyBuZWVkZWQsIHBlcmhhcHMgZXZlbiBubyBuZXcgSUVURiBk cmFmdCBpcyByZXF1aXJlZCA6KS4gTiB3b3VsZCBiZSB0aGUgbGltaXQgb2Ygc3VjaCBzZXNzaW9u cyBpbiBjYXNlIHRoZSBub2RlIHVuZGVyIHByb3RlY3Rpb24gaGFzIHNheSAxMHMgb2YgcGVlcnMu IERlZmF1bHQgY291bGQgYmUgcGVyaGFwcyBldmVuIDEuDQoNClRoeCwNClJvYmVydC4NCg0KDQpP biBTYXQsIE5vdiAyMywgMjAxOSBhdCAxMDowMCBBTSBBbGV4YW5kZXIgVmFpbnNodGVpbiA8QWxl eGFuZGVyLlZhaW5zaHRlaW5AZWNpdGVsZS5jb208bWFpbHRvOkFsZXhhbmRlci5WYWluc2h0ZWlu QGVjaXRlbGUuY29tPj4gd3JvdGU6DQpTaHJhZGRoYSwgUm9iZXJ0IGFuZCBhbGwsDQpSZWdhcmRp bmcgUm9iZXJ0J3MgcXVlc3Rpb246DQpJIHdvbmRlciBpZiBtdWx0aS1ob3AgSVAgQkZEIHNlc3Np b24gd2l0aCBhZGRyZXNzZXMgdXNlZCBhcyAvMzIgKG9yIC8xMjgpIHByZWZpeGVzIHNlcnZpbmcg YXMgTm9zZSBTSURzIG9mIFI4IGFuZCBSNyByZXNwZWN0aXZlbHkgY291bGQgYmUgdXNlZCBhcyBz dWNoIGEgdHJpZ2dlciBieSBSNz8gU3VjaCBhIHNlc3Npb24gd291bGQgbm90IHJlc3BvbmQgdG8g bGluayBmYWlsdXJlcywgYW5kIEkgZmluZCBpdCBwcm9ibGVtYXRpYyB0byBpbWFnaW5lIGEgc2Nl bmFyaW8gd2hlbiBpdCB3b3VsZCBiZSBrZXB0IFVQIGluIHRoZSBjYXNlIG9mIGEgcmVhbCBub2Rl IGZhaWx1cmUuDQoNCk9mIGNvdXJzZSBzdWNoIGEgc2Vzc2lvbiB3b3VsZCBoYXZlIHRvIGJlIHNs b3cgZW5vdWdoIG5vdCB0byByZWFjdCB0byBsaW5rIGZhaWx1cmVzLiBCdXQgaXQgc3RpbGwgY291 a3MgYmUgbXVjaCBmYXN0ZXIgdGhhbiBJR1AgY29udmVyc2lvbiBJTUhPLg0KDQpNeSAyYywNClNh c2hhDQoNClN1Y2gNCg0KDQpHZXQgT3V0bG9vayBmb3IgQW5kcm9pZDxodHRwczovL3VybGRlZmVu c2UuY29tL3YzL19faHR0cHM6L2NsaWNrdGltZS5zeW1hbnRlYy5jb20vM05iSzcycTJjYTY2OGFW eU1hVDdFc242SDI/dT1odHRwcyozQSoyRioyRnVybGRlZmVuc2UuY29tKjJGdjMqMkZfX2h0dHBz KjNBKjJGY2xpY2t0aW1lLnN5bWFudGVjLmNvbSoyRjNDZlZRUHRCWUJBUGJIVVNuZ0VWTlFENkgy KjNGdSozRGh0dHBzKjJBM0EqMkEyRioyQTJGYWthLm1zKjJBMkZnaGVpMzZfXyozQkpTVWxKUSoy MThXb0E2UmpDODFjKjIxWG8tRDdlNU1mVWVUT3lWMTdLVWZsZ1NJMDAyS0Ntc3dfRWp4TGM5cHhB NnNKMUVicmlvREUwVm1ndWp5NTBFTioyNF9fO0pTVWxKU1VsSlNVbEpTVWxKU1VsSlNVbCE4V29B NlJqQzgxYyFRQWhZYUEwcWhvVVozeXhRV2wwNUFwMTJDTVItSi1SVExfT19kX3dLRWxDNWt0WnJQ ZWtmVERoTEg3cTczcEFoJD4NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkZy b206IHNwcmluZyA8c3ByaW5nLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOnNwcmluZy1ib3VuY2Vz QGlldGYub3JnPj4gb24gYmVoYWxmIG9mIFJvYmVydCBSYXN6dWsgPHJvYmVydEByYXN6dWsubmV0 PG1haWx0bzpyb2JlcnRAcmFzenVrLm5ldD4+DQpTZW50OiBGcmlkYXksIE5vdmVtYmVyIDIyLCAy MDE5LCAxMToyMg0KVG86IFNocmFkZGhhIEhlZ2RlDQpDYzogc3ByaW5nQGlldGYub3JnPG1haWx0 bzpzcHJpbmdAaWV0Zi5vcmc+OyBydGd3Z0BpZXRmLm9yZzxtYWlsdG86cnRnd2dAaWV0Zi5vcmc+ DQpTdWJqZWN0OiBSZTogW3NwcmluZ10gRHJhZnQgZm9yIE5vZGUgcHJvdGVjdGlvbiBvZiBpbnRl cm1lZGlhdGUgbm9kZXMgaW4gU1IgUGF0aHMNCg0KSGkgU2hyYWRkaGEsDQoNCkkgaGF2ZSBvbmUg cXVlc3Rpb24gdG8gdGhlIGRvY3VtZW50Lg0KDQpBcyB5b3Uga25vdyB0aGUgY3JpdGljYWwgZWxl bWVudCBmb3IgdGhlIGVmZmVjdGl2ZSBwcm90ZWN0aW9uIG9mIGFueSBzY2hlbWUgaXMgdGhlIGZh aWx1cmUgZGV0ZWN0aW9uLiBPbiB0aGF0IHlvdXIgZHJhZnQgc2VlbXMgdG8gaGF2ZSBqdXN0IG9u ZSBsaXR0bGUgcGFyYWdyYXBoOg0KDQoNCiAgIE5vdGUgdGhhdCBSNyBhY3RpdmF0ZXMgdGhlIG5v ZGUtcHJvdGVjdGluZyBiYWNrdXAgcGF0aCB3aGVuIGl0DQoNCiAgIGRldGVjdHMgdGhhdCB0aGUg bGluayB0byBSOCBoYXMgZmFpbGVkLiAgUjcgZG9lcyBub3Qga25vdyB0aGF0IG5vZGUNCg0KICAg UjggaGFzIGFjdHVhbGx5IGZhaWxlZC4gIEhvd2V2ZXIsIHRoZSBub2RlLXByb3RlY3RpbmcgYmFj a3VwIHBhdGggaXMNCg0KICAgY29tcHV0ZWQgYXNzdW1pbmcgdGhhdCB0aGUgZmFpbHVyZSBvZiB0 aGUgbGluayB0byBSOCBpbXBsaWVzIHRoYXQgUjgNCg0KICAgaGFzIGZhaWxlZC4NCg0KV2VsbCBJ TU8gdGhpcyBpcyBub3QgZW5vdWdoLiBTcGVjaWZpY2FsbHkgdGhlcmUgY2FuIGJlIGEgbG90IG9m IHR5cGVzIG9mIG5vZGUgZmFpbHVyZSB3aGVuIGxpbmsgaXMgc3RpbGwgdXAuIE1vcmVvdmVyIHRo ZXJlIGNhbiBiZSBldmVuIHJ1bm5pbmcgQkZEIGFjcm9zcyB0aGUgbGluayBqdXN0IGZpbmUgd2hl biBzYXkgZmFicmljIGZhaWx1cmUgb2NjdXJzIGF0IFI4Lg0KDQpXaGlsZSB0aGlzIGlzIG5vdCBz b2xlbHkgaXNzdWUgd2l0aCB0aGlzIGRyYWZ0LCBpdCBpcyBvdXIgY29tbW9uIElFVEYgZmFpbHVy ZSB0byBwcm92aWRlIGNvcnJlY3QgbWVhbnMgb2YgZGV0ZWN0aW5nIGVuZCB0byBlbmQgcGF0aCBv ciBmcmFnbWVudHMgb2YgcGF0aCBmYWlsdXJlcyAoSSBhbSBzcGVjaWZpY2FsbHkgbm90IGNhbGxp bmcgdGhlbSBzZWdtZW50IGhlcmUgOikuDQoNCkZvciBleGFtcGxlIEkgcHJvcG9zZSB0aGF0IHRv IGVmZmVjdGl2ZWx5IGRldGVjdCBSOCBmYWlsdXJlIGFzIG5vZGUgZmFpbHVyZSB3aGljaCBpcyB0 aGUgdG9waWMgb2YgeW91ciBwcm9wb3NhbCBhIG1lY2hhbmlzbSBpcyBjbGVhcmx5IGRlZmluZWQg YW5kIGluY2x1ZGVzIGJpLWRpciBkYXRhIHBsYW5lIHByb2JlcyBzZW5kIGJldHdlZW4gUjctUjks IFIzLVI3LCBSNC1SNywgUjQtUjksIFIzLVI5DQoNCk1hbnkgdGh4LA0KUm9iZXJ0Lg0KDQoNCk9u IEZyaSwgTm92IDIyLCAyMDE5IGF0IDQ6MzggQU0gU2hyYWRkaGEgSGVnZGUgPHNocmFkZGhhPTQw anVuaXBlci5uZXRAZG1hcmMuaWV0Zi4ub3JnPG1haWx0bzo0MGp1bmlwZXIubmV0QGRtYXJjLmll dGYub3JnPj4gd3JvdGU6DQpXRywNCg0KVGhpcyBpcyB0aGUgZHJhZnQgSSBwb2ludGVkIG91dCB0 aGF0IHRhbGtzIGFib3V0IHNvbHV0aW9ucyBmb3IgcHJvdmlkaW5nIG5vZGUtcHJvdGVjdGlvbi4N Ckl0IGNvdmVycyBBbnljYXN0IGNhc2UgYXMgd2VsbCBhcyBrZWVwaW5nIGZvcndhcmRpbmcgcGxh bmUgbG9uZ2VyLg0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWhlZ2RlLXNwcmlu Zy1ub2RlLXByb3RlY3Rpb24tZm9yLXNyLXRlLXBhdGhzLTA1PGh0dHBzOi8vdXJsZGVmZW5zZS5j b20vdjMvX19odHRwczovY2xpY2t0aW1lLnN5bWFudGVjLmNvbS8zSHZyekhYd0FvdTJKcnVFVGo2 amN5RjZIMj91PWh0dHBzKjNBKjJGKjJGdXJsZGVmZW5zZS5jb20qMkZ2MyoyRl9faHR0cHMqM0Eq MkZjbGlja3RpbWUuc3ltYW50ZWMuY29tKjJGMzc1U1c2VEJHUGkybU43VjlZZVZXR2c2SDIqM0Z1 KjNEaHR0cHMqMkEzQSoyQTJGKjJBMkZ0b29scy5pZXRmLm9yZyoyQTJGaHRtbCoyQTJGZHJhZnQt aGVnZGUtc3ByaW5nLW5vZGUtcHJvdGVjdGlvbi1mb3Itc3ItdGUtcGF0aHMtMDVfXyozQkpTVWxK U1UqMjE4V29BNlJqQzgxYyoyMVhvLUQ3ZTVNZlVlVE95VjE3S1VmbGdTSTAwMktDbXN3X0VqeExj OXB4QTZzSjFFYnJpb0RFMFZtZ2cweG1qX0MqMjRfXztKU1VsSlNVbEpTVWxKU1VsSlNVbEpTVWxK USE4V29BNlJqQzgxYyFRQWhZYUEwcWhvVVozeXhRV2wwNUFwMTJDTVItSi1SVExfT19kX3dLRWxD NWt0WnJQZWtmVERoTEg5UmZiT3FUJD4NCg0KUmV2aWV3IGFuZCBjb21tZW50cyBzb2xpY2l0ZWQu DQoNClJnZHMNClNocmFkZGhhDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fDQpydGd3ZyBtYWlsaW5nIGxpc3QNCnJ0Z3dnQGlldGYub3JnPG1haWx0bzpy dGd3Z0BpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcnRn d2c8aHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi9jbGlja3RpbWUuc3ltYW50ZWMu Y29tLzM3WnZOU01TQWRkcHhER0RRUG03b1ZBNkgyP3U9aHR0cHMqM0EqMkYqMkZ1cmxkZWZlbnNl LmNvbSoyRnYzKjJGX19odHRwcyozQSoyRmNsaWNrdGltZS5zeW1hbnRlYy5jb20qMkYzNU05ajV6 SFRhU1lSd1ZoNVJQNnhjQjZIMiozRnUqM0RodHRwcyoyQTNBKjJBMkYqMkEyRnd3dy5pZXRmLm9y ZyoyQTJGbWFpbG1hbioyQTJGbGlzdGluZm8qMkEyRnJ0Z3dnX18qM0JKU1VsSlNVbCoyMThXb0E2 UmpDODFjKjIxWG8tRDdlNU1mVWVUT3lWMTdLVWZsZ1NJMDAyS0Ntc3dfRWp4TGM5cHhBNnNKMUVi cmlvREUwVm1ndlY5WTRzTSoyNF9fO0pTVWxKU1VsSlNVbEpTVWxKU1VsSlNVbEpTVSE4V29BNlJq QzgxYyFRQWhZYUEwcWhvVVozeXhRV2wwNUFwMTJDTVItSi1SVExfT19kX3dLRWxDNWt0WnJQZWtm VERoTEhfcEc1UHJ4JD4NCg0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KDQpUaGlzIGUtbWFpbCBt ZXNzYWdlIGlzIGludGVuZGVkIGZvciB0aGUgcmVjaXBpZW50IG9ubHkgYW5kIGNvbnRhaW5zIGlu Zm9ybWF0aW9uIHdoaWNoIGlzDQpDT05GSURFTlRJQUwgYW5kIHdoaWNoIG1heSBiZSBwcm9wcmll dGFyeSB0byBFQ0kgVGVsZWNvbS4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcw0KdHJhbnNtaXNz aW9uIGluIGVycm9yLCBwbGVhc2UgaW5mb3JtIHVzIGJ5IGUtbWFpbCwgcGhvbmUgb3IgZmF4LCBh bmQgdGhlbiBkZWxldGUgdGhlIG9yaWdpbmFsDQphbmQgYWxsIGNvcGllcyB0aGVyZW9mLg0KX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQoNClRoaXMgZS1tYWlsIG1l c3NhZ2UgaXMgaW50ZW5kZWQgZm9yIHRoZSByZWNpcGllbnQgb25seSBhbmQgY29udGFpbnMgaW5m b3JtYXRpb24gd2hpY2ggaXMNCkNPTkZJREVOVElBTCBhbmQgd2hpY2ggbWF5IGJlIHByb3ByaWV0 YXJ5IHRvIEVDSSBUZWxlY29tLiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzDQp0cmFuc21pc3Np b24gaW4gZXJyb3IsIHBsZWFzZSBpbmZvcm0gdXMgYnkgZS1tYWlsLCBwaG9uZSBvciBmYXgsIGFu ZCB0aGVuIGRlbGV0ZSB0aGUgb3JpZ2luYWwNCmFuZCBhbGwgY29waWVzIHRoZXJlb2YuDQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCg== --_000_DBBPR03MB5415CB7A89FBBF974FF284E7EE430DBBPR03MB5415eurp_ Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIg MTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q29uc29sYXM7 DQoJcGFub3NlLTE6MiAxMSA2IDkgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMg Ki8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBj bTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJ e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1 bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy bGluZTt9DQpwcmUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJI VE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAw MDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0K cC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUt bmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0 OjBjbTsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowY207DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpz cGFuLkhUTUxQcmVmb3JtYXR0ZWRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJIVE1MIFByZWZvcm1h dHRlZCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhU TUwgUHJlZm9ybWF0dGVkIjsNCglmb250LWZhbWlseTpDb25zb2xhczsNCgltc28tZmFyZWFzdC1s YW5ndWFnZTojMjAwMDt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJz b25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3 aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5 Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWxhbmd1 YWdlOkVOLVVTO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsN CgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3JkU2VjdGlvbjEN Cgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3ht bD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6 ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBl bGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iZW4tS0UiIGxp bms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6RU4tVVMiPlJvYmVydCDigJMgYWN0dWFsbHkgSSBkaXNhZ3JlZS48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1m YXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5CZWNhdXNlIHRvIHByb3RlY3QgdGhlIHBhdGhzIHlvdSBu ZWVkIHRoZSBub2RlIHByb3RlY3Rpb24gb24gaW50ZXJtZWRpYXRlIG5vZGVzIGR1ZSB0byBsYWNr IG9mIHN0YXRlIOKAkyB0aGUgaGVhZGVuZCBoYXMgbm8gd2F5IHRvIGFjdHVhbGx5IHByb3RlY3Qg YW4gZW5kIHRvIGVuZCBwYXRoIG91dHNpZGUgb2YgUy1CRkQNCiBzdGVlcmVkIG92ZXIgdGhlIHBh dGggdG8gdGVzdCBlbmQgdG8gZW5kIHJlYWNoYWJpbGl0eSBhbmQgaWYgeW91IGdldCBhbiBpbnRl cm1lZGlhdGUgbm9kZS1mYWlsdXJlIG9uIHRoZSBwYXRoIHlvdSBjb3VsZCBydW4gaW50byBhIHBy b2JsZW0NCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90 O1NlZ29lIFVJIEVtb2ppJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4t VVMiPiYjMTI4NTIyOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0 LWxhbmd1YWdlOkVOLVVTIj4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4t VVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPkFzIHBl ciBkcmFmdC1pZXRmLXNwcmluZy1zZWdtZW50LXJvdXRpbmctcG9saWN5LTA1IGEgcGF0aCBpcyB2 YWxpZCB3aGVuOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPkl0IGlzIGVtcHR5PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+SXRzIHdlaWdodCBpcyAwDQo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5JdOKAmXMgaGVhZGVuZCBp cyB1bmFibGUgdG8gcGVyZm9ybSBwYXRoIHJlc29sdXRpb24gZm9yIHRoZSBmaXJzdCBTSUQgaW50 byBvbmUgb3IgbW9yZSBvdXRnb2luZyBpbnRlcmZhY2UocykgYW5kIG5leHQtaG9wKHMpPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+VGhlIGhlYWRlbmQgaXMgdW5hYmxl IHRvIHBlcmZvcm0gU0lEIHJlc29sdXRpb24gZm9yIGFueSBub24tZmlyc3QgU0lEIG9mIHR5cGUg QyB0aHJvdWdoIEsgaW50byBhbiBNUExTIGxhYmVsIG9yIGFuIFNSdjYgU0lEPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+VGhlIGhlYWRlbmQgdmVyaWZpY2F0aW9uIGZh aWxzIGZvciBhbnkgU0lEIGZvciB3aGljaCB2ZXJpZmljYXRpb24gaGFzIGJlZW4gZXhwbGljaXRs eSByZXF1ZXN0ZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5FZmZlY3RpdmVseSDi gJMgYXMgb2YgcmlnaHQgbm93IOKAkyBpZiB5b3UgcmVhZCB0aGF0IGRyYWZ0IOKAkyB0aGVyZSBp cyBubyBtZWNoYW5pc20gdG8gdmVyaWZ5IHBhdGggbm9kZXMgaWYgeW91IGFyZSBkb2luZyBwYXRo cyBiYXNlZCBvbiB0eXBlIEEgU0lE4oCZcyDigJMgdGhlIG9ubHkgd2F5IHJpZ2h0IG5vdyB0byBk byB0aGF0IOKAkw0KIGlzIHVzaW5nIFMtQkZEIOKAkyBob3dldmVyIHRoaXMgZHJhZnQgaWYgbXkg dW5kZXJzdGFuZGluZyBpcyBjb3JyZWN0IOKAkyB3b3VsZCBhbGxvdyBmb3Igbm9kZSBwcm90ZWN0 aW9uIHRoYXQgd291bGQgaW4gZWZmZWN0IHByb3RlY3QgdGhlIHBhdGhzIGluamVjdGVkLjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPlRoYW5rczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVh c3QtbGFuZ3VhZ2U6RU4tVVMiPkFuZHJldzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3Vh Z2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9ImVuLUtFIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBwdCI+DQo8 ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEu MHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+ PHNwYW4gbGFuZz0iRU4tVVMiPkZyb206PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyI+IFJv YmVydCBSYXN6dWsgJmx0O3JvYmVydEByYXN6dWsubmV0Jmd0Ow0KPGJyPg0KPGI+U2VudDo8L2I+ IE1vbmRheSwgMiBEZWNlbWJlciAyMDE5IDEyOjUwPGJyPg0KPGI+VG86PC9iPiBBbmRyZXcgQWxz dG9uICZsdDtBbmRyZXcuQWxzdG9uQGxpcXVpZHRlbGVjb20uY29tJmd0Ozxicj4NCjxiPkNjOjwv Yj4gU2hyYWRkaGEgSGVnZGUgJmx0O3NocmFkZGhhPTQwanVuaXBlci5uZXRAZG1hcmMuaWV0Zi5v cmcmZ3Q7OyBBbGV4YW5kZXIgVmFpbnNodGVpbiAmbHQ7QWxleGFuZGVyLlZhaW5zaHRlaW5AZWNp dGVsZS5jb20mZ3Q7OyBzcHJpbmdAaWV0Zi5vcmc7IHJ0Zy1iZmRAaWV0Zi5vcmc7IHJ0Z3dnQGll dGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbc3ByaW5nXSBEcmFmdCBmb3IgTm9kZSBw cm90ZWN0aW9uIG9mIGludGVybWVkaWF0ZSBub2RlcyBpbiBTUiBQYXRoczxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gTW9uLCBE ZWMgMiwgMjAxOSBhdCAxMDoyOCBBTSBBbmRyZXcgQWxzdG9uICZsdDs8YSBocmVmPSJtYWlsdG86 QW5kcmV3LkFsc3RvbkBsaXF1aWR0ZWxlY29tLmNvbSI+QW5kcmV3LkFsc3RvbkBsaXF1aWR0ZWxl Y29tLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAx LjBwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1y aWdodDowY20iPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxh bmc9IkVOLVVTIj5DdXJyZW50bHkgdGhlIGJpZ2dlc3QgaXNzdWUgdGhhdCBJIHNlZSB3aXRoIFMt QkZEIGJhc2VkIHByb3RlY3Rpb24g4oCTIHdoaWNoIGlzIHNvbWV0aGluZyB3ZSB1c2UgaW4gcHJv ZHVjdGlvbiBpcyBhcyBmb2xsb3dzOjwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+ Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5Vbmxlc3MgSeKAmW0gbWlz dGFrZW4g4oCTIHRoZXJlIGlzIGFic29sdXRlbHkgbm8gd2F5IHRvIHRpZSBTLUJGRCBiYXNlZCBw cm90ZWN0aW9uIHdpdGggQkdQIGluamVjdGVkIFNSLVRFIHBhdGhpbmc8L3NwYW4+PHNwYW4gbGFu Zz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPldlbGwgSSBhbSBub3Qgc3Vy ZSB3aGF0IHlvdSBjYWxsICZxdW90OyBCR1AgaW5qZWN0ZWQgU1ItVEUgcGF0aGluZyZxdW90OyBi dXQgaWYgeW91IGFyZSBsb29raW5nIGZvciB2YWxpZGF0aW9uIG9mIEJHUCBwYXRocyB0aGF0IGhh cyBiZWVuIHN1cHBvcnRlZCBieSBzb21lIHZlbmRvcnMgZm9yIGEgbG9vb29uZyB0aW1lLiBIaW50 OiB5b3UgYWxsb2NhdGUgZGlmZmVyZW50IG5leHQgaG9wIGZvciB5b3VyIFNSLVRFIGVuZHBvaW50 cw0KIGFuZCB2b2lsYS4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+QnR3IC0gbm90IGFuIGlldGYgdG9waWMsIGJ1dCBhbiBpbXBsZW1l bnRhdGlvbiByZXF1ZXN0IC8gdmVuZG9yJ3MgZmVhdHVyZS4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QmVzaWRlcywgc2luY2UgeW91 IGFyZSB0YWxraW5nIGFib3V0IGhlYWRlbmQgd2hhdCB5b3UgYXJlIGRlc2NyaWJpbmcgaXMgcGF0 aCBwcm90ZWN0aW9uIC4uLiB0aGlzIGRyYWZ0IHRhbGtzIGFib3V0IG5vZGUgcHJvdGVjdGlvbiB3 aGljaCBpcyBhIGNvbXBsZXRlbHkgZGlmZmVyZW50IHRoaW5nLiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5DaGVlcnMsPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5yLjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1s ZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4t bGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGNtIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Tm9kZSB2YWxpZGF0aW9uIGFzIGRlZmluZWQg aW4gdGhlIFNSLVRFIGRyYWZ0cyBpcyBsaW1pdGVkIHRvIHByZXNlbmNlIGluIHRoZSBJR1A8L3Nw YW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPlNpbmNlIFNSLVRFIHBhdGggaW5qZWN0aW9u IG1heSBiZSBkb25lIHRocm91Z2ggcmVmbGVjdG9ycyDigJMgdXNpbmcgdGFyZ2V0IGNvbW11bml0 aWVzIOKAkyB0aGUgcG9pbnQgb2YgY29tbXVuaWNhdGlvbiBpbnRvIHRoZSBuZXR3b3JrIGlzIG5v dCBuZWNlc3NhcmlseSB0aGUgaGVhZA0KIGVuZCBvZiB0aGUgdHVubmVsIGFuZCB0aGUgcG9pbnQg b2YgaW5qZWN0aW9uIG1heSBiZSBlbnRpcmVseSB1bmF3YXJlIG9mIHRoZSBpbXBsaWNhdGlvbnMg b2YgdGhlIHBhdGggdGhhdOKAmXMgYmVpbmcgaW5zZXJ0ZWQuPC9zcGFuPjxzcGFuIGxhbmc9ImVu LUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPkJ5 IHV0aWxpemluZyB3aGF0IGlzIGNvbnRhaW5lZCBpbiB0aGlzIGRyYWZ0IHRvIGJ1aWxkIGNvbnRl eHQgdGFibGVzIGF0IHRoZSBoZWFkIGVuZCBvZiBhbiBpbnNlcnRlZCB0dW5uZWwgb24gYW4gYXV0 b21hdGVkIGJhc2lzIOKAkyB0aGlzIHNvbHZlcyBhIHByb2JsZW0gdGhhdA0KIGN1cnJlbnRseSBl eGlzdHMgdGhhdCBTLUJGRCBzaW1wbHkgY2Fubm90IHNvbHZlIHdpdGhvdXQgbW9kaWZpY2F0aW9u IHRvIHRoZSBzcnRlIHBvbGljeSBpbnNlcnRpb24gZHJhZnRzIHRoYXQgd291bGQgYWxsb3cgZm9y IGF1dG9tYXRlZCBidWlsZGluZyBvZiBTLUJGRCBjaGVja3Mg4oCTIHdoaWNoIGluIGFuZCBvZiBp dHNlbGYgY291bGQgcHJvdmUgY2hhbGxlbmdpbmcgY29uc2lkZXJpbmcgdGhlIGNvbXBsZXhpdHkg b2YgdGhpcy4mbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7 PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGF0IGlzIG5vdCB0byBzYXkgaW4g YW55IHdheSB0aGF0IGJvdGggcy1iZmQgYW5kIHBvdGVudGlhbGx5IG90aGVyIG1lY2hhbmlzbXMg ZG8gbm90IGhhdmUgdXNlIGNhc2VzIOKAkyBidXQgYXMgYW4gb3BlcmF0b3Ig4oCTIHRoaXMgZHJh ZnQgd291bGQgY2VydGFpbmx5IHByb3ZpZGUNCiBhIGJldHRlciBtZWNoYW5pc20gZm9yIGNvbnN0 YW50IHBhdGggdmFsaWRhdGlvbiB0aGFuIGFueXRoaW5nIHdlIGN1cnJlbnRseSBoYXZlICh3aGlj aCBpcyBiYXNlZCBvbiBzdGVlcmVkIHBhY2tldHMgdGhhdCBsZWF2ZSB0aGUgY29udHJvbGxlciBh bmQgcmV0dXJuIHRvIHRoZSBjb250cm9sbGVyIHRocm91Z2ggdGhlIHVzZSBvZiBTUiBwYWNrZXRz IGFuZCBiaW5kaW5nIHNpZHMpLjwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5i c3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5KdXN0IG15IDJjPC9zcGFuPjxz cGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0Ui PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFu Zz0iRU4tVVMiPlRoYW5rczwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7 PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5BbmRyZXc8L3NwYW4+PHNwYW4gbGFu Zz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJlbi1L RSI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDQuMHB0Ij4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEg MS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxiPjxzcGFuIGxhbmc9IkVOLVVTIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMi PiBzcHJpbmcgJmx0OzxhIGhyZWY9Im1haWx0bzpzcHJpbmctYm91bmNlc0BpZXRmLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPnNwcmluZy1ib3VuY2VzQGlldGYub3JnPC9hPiZndDsNCjxiPk9uIEJlaGFs ZiBPZiA8L2I+U2hyYWRkaGEgSGVnZGU8YnI+DQo8Yj5TZW50OjwvYj4gTW9uZGF5LCAyIERlY2Vt YmVyIDIwMTkgMTA6MjQ8YnI+DQo8Yj5Ubzo8L2I+IEFsZXhhbmRlciBWYWluc2h0ZWluICZsdDs8 YSBocmVmPSJtYWlsdG86QWxleGFuZGVyLlZhaW5zaHRlaW5AZWNpdGVsZS5jb20iIHRhcmdldD0i X2JsYW5rIj5BbGV4YW5kZXIuVmFpbnNodGVpbkBlY2l0ZWxlLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+ Q2M6PC9iPiA8YSBocmVmPSJtYWlsdG86c3ByaW5nQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+ c3ByaW5nQGlldGYub3JnPC9hPjsgPGEgaHJlZj0ibWFpbHRvOnJ0Zy1iZmRAaWV0Zi5vcmciIHRh cmdldD0iX2JsYW5rIj4NCnJ0Zy1iZmRAaWV0Zi5vcmc8L2E+OyBSb2JlcnQgUmFzenVrICZsdDs8 YSBocmVmPSJtYWlsdG86cm9iZXJ0QHJhc3p1ay5uZXQiIHRhcmdldD0iX2JsYW5rIj5yb2JlcnRA cmFzenVrLm5ldDwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOnJ0Z3dnQGlldGYub3JnIiB0YXJn ZXQ9Il9ibGFuayI+cnRnd2dAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBb c3ByaW5nXSBEcmFmdCBmb3IgTm9kZSBwcm90ZWN0aW9uIG9mIGludGVybWVkaWF0ZSBub2RlcyBp biBTUiBQYXRoczwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iZW4t S0UiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gbGFuZz0iRU4tVVMiPlNhc2hhLDwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1V UyI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5XZSBhcmUgaW4gYWdy ZWVtZW50IG9uIHNlcGFyYXRpbmcgdGhlIHRyaWdnZXIgZnJvbSB0aGUgcHJvdGVjdGlvbiBtZWNo YW5pc20uPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PHNw YW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0bztiYWNrZ3JvdW5kOndoaXRlIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6 YmxhY2siPiZndDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIx Ij4gSW4gYW55IGNhc2UgSSB0aGluayB0aGF0IGl0IHdveWxkIG1ha2Ugc2Vuc2UgdG8gc2VwYXJh dGUgdGhlIHByb3RlY3Rpb24gc2NoZW1lIHByb3Bvc2VkIGluIHRoZSBkcmFmdCBmcm9tIHNwZWNp ZmljIHRyaWdnZXJzIGZvciBpdHMgYWN0aXZhdGlvbiAmZ3Q7c2ltaWxhciB0byBob3cgdGhpcyBo YXMNCiBiZWVuIGRvbmUgaW4gTVBMUyBFZ3Jlc3MgUHJvdGVjdGlvbiBGcmFtZXdvcmsgZHJhZnQu PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImNvbG9yOiMyMTIxMjEiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO2JhY2tncm91bmQ6d2hpdGUi Pg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIxIj5J4oCZbGwgYWRkIHRl eHQgaW4gdGhlIG5leHQgcmV2aXNpb24gZm9yIHRoaXMuPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtF Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3Vu ZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPiZuYnNw Ozwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvO2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJjb2xvcjojMjEyMTIxIj5SZ2RzPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+ DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPlNocmFkZGhhPC9zcGFu PjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4t S0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29s aWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiPkZyb206PC9zcGFuPjwvYj48c3BhbiBs YW5nPSJFTi1VUyI+IEFsZXhhbmRlciBWYWluc2h0ZWluICZsdDs8YSBocmVmPSJtYWlsdG86QWxl eGFuZGVyLlZhaW5zaHRlaW5AZWNpdGVsZS5jb20iIHRhcmdldD0iX2JsYW5rIj5BbGV4YW5kZXIu VmFpbnNodGVpbkBlY2l0ZWxlLmNvbTwvYT4mZ3Q7DQo8YnI+DQo8Yj5TZW50OjwvYj4gTW9uZGF5 LCBEZWNlbWJlciAyLCAyMDE5IDEyOjI0IFBNPGJyPg0KPGI+VG86PC9iPiBTaHJhZGRoYSBIZWdk ZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnNocmFkZGhhQGp1bmlwZXIubmV0IiB0YXJnZXQ9Il9ibGFu ayI+c2hyYWRkaGFAanVuaXBlci5uZXQ8L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4gPGEgaHJlZj0i bWFpbHRvOnNwcmluZ0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnNwcmluZ0BpZXRmLm9yZzwv YT47IDxhIGhyZWY9Im1haWx0bzpydGd3Z0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPg0KcnRn d2dAaWV0Zi5vcmc8L2E+OyA8YSBocmVmPSJtYWlsdG86cnRnLWJmZEBpZXRmLm9yZyIgdGFyZ2V0 PSJfYmxhbmsiPnJ0Zy1iZmRAaWV0Zi5vcmc8L2E+OyBSb2JlcnQgUmFzenVrICZsdDs8YSBocmVm PSJtYWlsdG86cm9iZXJ0QHJhc3p1ay5uZXQiIHRhcmdldD0iX2JsYW5rIj5yb2JlcnRAcmFzenVr Lm5ldDwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbc3ByaW5nXSBEcmFmdCBmb3Ig Tm9kZSBwcm90ZWN0aW9uIG9mIGludGVybWVkaWF0ZSBub2RlcyBpbiBTUiBQYXRoczwvc3Bhbj48 c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48 c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvO2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xv cjojMjEyMTIxIj5TaHJhZGRoYSw8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bztiYWNrZ3JvdW5kOndoaXRlIj4NCjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzIxMjEyMSI+TG90cyBvZiB0aGFua3MgZm9y IGF0aGUgdGVzcG9uc2UuPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+DQo8c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5n PSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO2Jh Y2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIx Ij5JIHByb2JhYmx5IGRpZCBub3QgZXhwcmVzcyBteXNlbGYgY2xlYXJseSBlbm91Z2guIEkgd2ls bCB0cnkgdG8gZml4IHRoc3Qgbm93LCBhbmQgSSBhcG9sb2dpc2UgaW4gYWR2YW5jZSBmb3IgYSBs b25nIGVtYWlsLjwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvO2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIxIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4t S0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bztiYWNrZ3Jv dW5kOndoaXRlIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzIxMjEyMSI+SSBo YXZlIG5vdCBiZWVuIHNwZWFraW5nIGFib3V0IGVuZC15by1lbmQgcHJvdGVjeWlvbiwgb25seSBh Ym91dCBsb2NhbCBwcm90ZWN0aW9uIGFnYWluc3QgZmFpbHVyZSBvZiBhbiBpbnRlcm1lZGlhdGUg KGEuay5hLiBwaW5uZWQpIG5vZGUgb2YgYW4gU1IgcGF0aCBhbmQsIHNwZWNpZmljYWxseSwgdHJp Z2dlcnMgZm9yIHN1Y2ggcHJvdGVjdGlvbi4gVGhpcyBjb250ZXh0IGhhcw0KIGJlZW4gYWN0dWFs bHkgZGVmaW5lZCBieSBSb2JlcnQgaW4gaGlzIG9yaWdpbmFsIGNvbW1lbnQuPC9zcGFuPjxzcGFu IGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG87YmFja2dyb3VuZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMy MTIxMjEiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIxIj5UbyB0aGUgYmVzdCBvZiBteSB1bmRlcnN0 YW5kaW5nLCBSb2JlcnQncyBjb25jZXJuIHdhcyB0aGF0IGZhaWx1cmUgb2YgdGhlIGxpbmsgYmV0 ZWVlbiB0aGUgcGlubmVkIG5vZGUgb2YgYSBTUiBwYXRoIGFuZCBpdHMgYWRqYWNlbmN5ICh0aGUg cGVudWx0aW1hdGUgbm9kZSBvZiB0aGUgU2VnbWVudCByZXByZXNlbnRlZCBieSB0aGUgTm9kZSBT SUQgb2YgdGhlIHBpbm5lZCBub2RlKQ0KIGlzIG5vdCBhIGdvb2QgZW5vdWdoIGluZGljYXRpb24g b2YgdGhlIHBpbm5lZCBub2RlIGZhaWx1cmUuJm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtF Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3Vu ZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPiZuYnNw Ozwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvO2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJjb2xvcjojMjEyMTIxIj5JIGFncmVlIHdpdGggdGhpcyBzdGF0ZW1lbnQgZXZlbiBpZiBt eSB1bmRlcnN0YW5kaW5nIG9mIGEgZ29vZCBpbmRpY2F0aW9uIGRpZmZlcnMgZnJvbSBSb2JlcnQn czo8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0bztiYWNrZ3JvdW5kOndoaXRlIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iY29sb3I6IzIxMjEyMSI+LSBJIHRoaW5rIHRoYXQgaXQgaXMgbm90IHN1ZmZpY2llbnRs eSBzcGVjaWZpYyBhbmQgdGhlcmVmb3JlIGNvdWxkIHJlc3VsdCBpbiBmbGFwcGluZyAobG9jYWwg bm9kZSBwcm90ZWN0aW9uIGFjdGl2YXRlZCBhbmQgdGhlbiByZWxlYXNlZCk8L3NwYW4+PHNwYW4g bGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 bztiYWNrZ3JvdW5kOndoaXRlIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzIx MjEyMSI+LVJvYmVydCdzIGNvbmNlcm4sIHRvIHRoZSBiZXN0IG9mIG15IHVuZGVyc3RhbmRpbmcs IHdhcyB0aGF0IGl0IGNvdWxkIG1pc3Mgc29tZSBmYWlsdXJlcyAoZS5nLiB0aGUgRmFicmljIGZh aWx1cmUpLjwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvO2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJjb2xvcjojMjEyMTIxIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0Ui PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bztiYWNrZ3JvdW5k OndoaXRlIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzIxMjEyMSI+VGhlcmVm b3JlIEkgaGF2ZSBzdWdnZXN0ZWQgdHdvIHBvc3NpYmlsaXRpZXMgZm9yIG1vcmUgc3BlY2lmaWMg YW5kIG1vcmUgcnJsaWFia2UgZGV0ZWN0aW9uIG9mIGZhaWx1cmUgb2YgdGhlIHBpbm5lZCBub2Rl IGJ5IGl0cyBhZGphY2VuY3k6PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+DQo8c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPiZuYnNwOzwvc3Bhbj48c3BhbiBs YW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv O2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEy MTIxIj4xLiBSdW4gYSBtdWx0aS1ob3AgSVAgQkZEIHNlc3Npb24gYmV0d2VlbiB0aGUgcGVuaWx0 aW1hdGUgbm9kZSBhbnMgdGhlIHBpbm5lZCBvbmVzIHVzaW5nIHByZWZpeGVzIGFjdGluZyBhcyBO b2RlIFNJRHMgb2YgdGhpcyBwYWlyLiZuYnNwOyBUaGlzIHdpdWxkIGlnbm9yZSBsaW5rIGZhaWx1 cmVzIGJ1dCBsb2NhbGx5IGRldGVjdCBzdWNoIG5vZGUgZmFpbHVycyBhcyBwb3dlci1kb3duDQog b3IgY3Jhc2guPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1L RSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO2JhY2tncm91 bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIxIj4yLiZu YnNwOyBSdW4gUy1CRkQgc2Vzc2lvbnMgdG8gYWxsIG90aGVyIGFkamFjZW5jaWVzIG9mIHRoZSBw aW5uZWQgbm9kZSB1c2luZyBpbiBlYWNoIGNhc2UgYSBsaXN0IG9mIHR3byBTSURzOiB0aGUgcHJv dGVjdGVkIEFkai1TSUQgdG8gdGhlIHBpbm5lZCBub2RlIGZvbGxvd2VkIGJ5IHRnZSBOb2RlIFNJ RCBvZiB0aGUgb3RoZXIgYWRqYWNlbmN5LCBhbnMgZGVjbGFyZSBwaW5uZWQgbm9kZQ0KIGZhaWx1 cmUgd2hlbiBhbGwgdGhlc2Ugc2Vzc2lvbnMgZmFpbC4gVGhpcyB3b3VsZCBhZ2FpbiBpZ25vcmUg ZmFpbHVyZSBvZiB0aGUgbGluayBiZXR3ZWVuIHRoZSBwZW51bHRpbWF0ZSBub2RlIGFuZCB0aGUg cGlubmVkIG5vZGUgYnV0IGRldGVjdCB2YXJpb3VzIHJlYWwgZmFpbHVyZXMgb2YgdGhlIHBpbm5l ZCBub2RlLCBlLmcuIGZhaWx1cmUgb2YgaXRzIEZhYnJpYy48L3NwYW4+PHNwYW4gbGFuZz0iZW4t S0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bztiYWNrZ3Jv dW5kOndoaXRlIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzIxMjEyMSI+Jm5i c3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImNvbG9yOiMyMTIxMjEiPkluIGFueSBjYXNlIEkgdGhpbmsgdGhhdCBpdCB3b3lsZCBt YWtlIHNlbnNlIHRvIHNlcGFyYXRlIHRoZSBwcm90ZWN0aW9uIHNjaGVtZSBwcm9wb3NlZCBpbiB0 aGUgZHJhZnQgZnJvbSBzcGVjaWZpYyB0cmlnZ2VycyBmb3IgaXRzIGFjdGl2YXRpb24gc2ltaWxh ciB0byBob3cgdGhpcyBoYXMgYmVlbiBkb25lIGluIE1QTFMgRWdyZXNzIFByb3RlY3Rpb24gRnJh bWV3b3JrIGRyYWZ0Ljwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIxIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0i ZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bztiYWNr Z3JvdW5kOndoaXRlIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzIxMjEyMSI+ TXkgMmMuPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO2JhY2tncm91bmQ6 d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIxIj4mbmJzcDs8 L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0bztiYWNrZ3JvdW5kOndoaXRlIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iY29sb3I6IzIxMjEyMSI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+ DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPiZuYnNwOzwvc3Bhbj48 c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvO2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xv cjojMjEyMTIxIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxkaXYgaWQ9ImdtYWlsLW1fLTUxMzU0MjQxNDUyOTc1NjU2ODZtcy1vdXRsb29r LW1vYmlsZS1zaWduYXR1cmUiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVO LVVTIj5HZXQNCjxhIGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovYWth Lm1zL2doZWkzNl9fOyE4V29BNlJqQzgxYyFRQWhZYUEwcWhvVVozeXhRV2wwNUFwMTJDTVItSi1S VExfT19kX3dLRWxDNWt0WnJQZWtmVERoTEg2R1BaaUlIJCIgdGFyZ2V0PSJfYmxhbmsiPg0KT3V0 bG9vayBmb3IgQW5kcm9pZDwvYT48L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBpZD0iZ21haWwtbV8tNTEzNTQyNDE0NTI5NzU2NTY4 NmlkLWY3NDIxNGNiLTA0N2EtNGM4My05Y2Y0LTlhN2RlMGJiMTAzYSI+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMy4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+ Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImNlbnRlciIgc3R5bGU9InRleHQt YWxpZ246Y2VudGVyIj48c3BhbiBsYW5nPSJFTi1VUyI+DQo8aHIgc2l6ZT0iMSIgd2lkdGg9Ijk4 JSIgYWxpZ249ImNlbnRlciI+DQo8L3NwYW4+PC9kaXY+DQo8ZGl2IGlkPSJnbWFpbC1tXy01MTM1 NDI0MTQ1Mjk3NTY1Njg2ZGl2UnBseUZ3ZE1zZyI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz dHJvbmc+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9zcGFuPjwvc3Ryb25nPjxzcGFuIGxhbmc9IkVOLVVT Ij4gU2hyYWRkaGEgSGVnZGUgJmx0OzxhIGhyZWY9Im1haWx0bzpzaHJhZGRoYUBqdW5pcGVyLm5l dCIgdGFyZ2V0PSJfYmxhbmsiPnNocmFkZGhhQGp1bmlwZXIubmV0PC9hPiZndDs8YnI+DQo8c3Ry b25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWYiPlNlbnQ6PC9zcGFuPjwvc3Ryb25nPiBNb25kYXksIERlY2VtYmVyIDIsIDIwMTksIDA2OjEw PGJyPg0KPHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmIj5Ubzo8L3NwYW4+PC9zdHJvbmc+IEFsZXhhbmRlciBWYWluc2h0ZWluOyBS b2JlcnQgUmFzenVrPGJyPg0KPHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5DYzo8L3NwYW4+PC9zdHJvbmc+IDxhIGhyZWY9Im1h aWx0bzpzcHJpbmdAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj4NCnNwcmluZ0BpZXRmLm9yZzwv YT47IDxhIGhyZWY9Im1haWx0bzpydGd3Z0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnJ0Z3dn QGlldGYub3JnPC9hPjsNCjxhIGhyZWY9Im1haWx0bzpydGctYmZkQGlldGYub3JnIiB0YXJnZXQ9 Il9ibGFuayI+cnRnLWJmZEBpZXRmLm9yZzwvYT48YnI+DQo8c3Ryb25nPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlN1YmplY3Q6PC9zcGFu Pjwvc3Ryb25nPiBSRTogW3NwcmluZ10gRHJhZnQgZm9yIE5vZGUgcHJvdGVjdGlvbiBvZiBpbnRl cm1lZGlhdGUgbm9kZXMgaW4gU1IgUGF0aHM8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBsYW5nPSJF Ti1VUyI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Um9i ZXJ0L1Nhc2hhLDwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFu PjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4t S0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPlMtQkZEIGJhc2VkIG1lY2hhbmlzbSBpcyAmbmJzcDtoZWFkLWVuZCB0cmln Z2VyZWQgcHJvdGVjdGlvbi4gSXQgaXMgbm90IGEgbG9jYWwgcHJvdGVjdGlvbi48L3NwYW4+PHNw YW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPlMtQkZEIG1lY2hhbmlzbSBpcyBvcnRob2dvbmFsIHRv IHRoZSBtZWNoYW5pc20gZGVzY3JpYmVkIGluIHRoaXMgZHJhZnQgYW5kIGFuIG9wZXJhdG9yIGNh bg0KPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5jaG9vc2Ugd2hhdCBraW5kIG9m IHByb3RlY3Rpb24gbWFrZXMgbW9yZSBzZW5zZSB0byBoaXMvaGVyIG5ldHdvcmsuPC9zcGFuPjxz cGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0Ui PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFu Zz0iRU4tVVMiPkluIG1hbnkgY2FzZXMsIG5vZGUtcHJvdGVjdGluZyBiYWNrdXAgcGF0aCB3aWxs IGJlIGRpZmZlcmVudCBmcm9tIGxpbmstcHJvdGVjdGluZy9TUkxHIHByb3RlY3RpbmcgYmFja3Vw IHBhdGguPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5JZiB5b3UgcmVhbGx5IHdh bnQgdG8gdXNlIGxpbmstcHJvdGVjdGluZyBiYWNrdXAgcGF0aCB3aGVuIGxpbmsgZmFpbHMgYW5k IG5vZGUgcHJvdGVjdGluZyBiYWNrdXAgcGF0aCB3aGVuIG5vZGUgZmFpbHMsPC9zcGFuPjxzcGFu IGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5Zb3Ugd2lsbCBoYXZlIHRvIGRvd25sb2FkIGJvdGggbGlu ayBwcm90ZWN0aW5nIGFuZCBub2RlLXByb3RlY3RpbmcgYmFja3VwIHBhdGhzIGluIEZJQiBhbmQg ZGV0ZWN0IHdoaWNoPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5mYWlsdXJlIHJl YWxseSBoYXBwZW5lZCBhbmQgaGF2ZSB0aGUgYWJpbGl0eSBpbiBoYXJkd2FyZSB0byB1c2UgYXBw cm9wcmlhdGUgYmFja3VwIHBhdGguIE5vbmUgb2YgdGhlc2U8L3NwYW4+PHNwYW4gbGFuZz0iZW4t S0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPmlzIGluIHRoZSBzY29wZSBvZiB0aGlzIGRvY3VtZW50Ljwvc3Bhbj48c3Bh biBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIj5SZ2RzPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5TaHJhZGRoYTwv c3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9 ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9w OnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxiPjxzcGFuIGxhbmc9IkVOLVVTIj5Gcm9tOjwvc3Bhbj48L2I+PHNw YW4gbGFuZz0iRU4tVVMiPiBBbGV4YW5kZXIgVmFpbnNodGVpbiAmbHQ7PGEgaHJlZj0ibWFpbHRv OkFsZXhhbmRlci5WYWluc2h0ZWluQGVjaXRlbGUuY29tIiB0YXJnZXQ9Il9ibGFuayI+QWxleGFu ZGVyLlZhaW5zaHRlaW5AZWNpdGVsZS5jb208L2E+Jmd0Ow0KPGJyPg0KPGI+U2VudDo8L2I+IFNh dHVyZGF5LCBOb3ZlbWJlciAyMywgMjAxOSA4OjE1IFBNPGJyPg0KPGI+VG86PC9iPiBSb2JlcnQg UmFzenVrICZsdDs8YSBocmVmPSJtYWlsdG86cm9iZXJ0QHJhc3p1ay5uZXQiIHRhcmdldD0iX2Js YW5rIj5yb2JlcnRAcmFzenVrLm5ldDwvYT4mZ3Q7OyBTaHJhZGRoYSBIZWdkZSAmbHQ7PGEgaHJl Zj0ibWFpbHRvOnNocmFkZGhhQGp1bmlwZXIubmV0IiB0YXJnZXQ9Il9ibGFuayI+c2hyYWRkaGFA anVuaXBlci5uZXQ8L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4gPGEgaHJlZj0ibWFpbHRvOnNwcmlu Z0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnNwcmluZ0BpZXRmLm9yZzwvYT47IDxhIGhyZWY9 Im1haWx0bzpydGd3Z0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPg0KcnRnd2dAaWV0Zi5vcmc8 L2E+OyA8YSBocmVmPSJtYWlsdG86cnRnLWJmZEBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnJ0 Zy1iZmRAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbc3ByaW5nXSBEcmFm dCBmb3IgTm9kZSBwcm90ZWN0aW9uIG9mIGludGVybWVkaWF0ZSBub2RlcyBpbiBTUiBQYXRoczwv c3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwv c3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvO2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJjb2xvcjojMjEyMTIxIj5Sb2JlcnQsPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+ DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPk9uIHRoZSBzZWNvbmQg dGhvdWdodCwgZm9yIHRoZSBwdXJwb3NlIG9mIHRoaXMgZHJhZnQgKGkuZS4gaW4gdGhlIHNjb3Bl IG9mIFNSKSBpdCBpcyBwb3NzaWJsZSB0byBpbXBsZW1lbnQgeW91ciBzdWdnZXN0aW9uIGJ5IHJ1 bm5pbmcgUy1CRkQgc2Vzc2lvbnMgYmV0d2VlbiBSNyAoYXMgdGhlIGluaXRpYXRvcikgYW5kIGVh Y2ggb3RoZXIgYWRqYWNlbmN5IG9mIFI4Jm5ic3A7IChhY3RpbmcNCiBhcyBSZWZsZWN0b3JzKSBv ZiBhIFNSIHBvbGljeSB3aXRoIGxpc3Qgb2YgdHdvIFNJRHM6PC9zcGFuPjxzcGFuIGxhbmc9ImVu LUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dy b3VuZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPi0g cHJvdGVjdGVkIGFkamFjZW5jeSBiZXR3ZWVuIFI3IGFuZCBSODwvc3Bhbj48c3BhbiBsYW5nPSJl bi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO2JhY2tn cm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIxIj4t IE5vZGUgU0lEIG9mIHRoZSBzcGVjaWZpYyAmcXVvdDtvdGhlciZxdW90OyBhZGphY2VuY3kmbmJz cDsgb2YgUjguPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1L RSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO2JhY2tncm91 bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIxIj5JZiBh bGwgdGhlc2Ugc2Vzc2lvbnMgZmFpbCwgUjcgY2FuIHJlbGlhYmx5IGNvbnNpZGVyIFI4IGFzIGZh aWxlZC4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bztiYWNrZ3JvdW5kOndoaXRlIj4NCjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iY29sb3I6IzIxMjEyMSI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVu LUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dy b3VuZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPkkg YW0gbm90IHN1cmUgdGhpcyB3b3VsZCBiZSBtdWNoIGJldHRlciB0aGFuIG11bHRpLWhvcCBJUCBC RkQsIGFuZCBpdCBsb29rcyBtdWNoIG1vcmUgY29tcGxpY2F0ZWQgdG8gbWUuJm5ic3A7PC9zcGFu PjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNv bG9yOiMyMTIxMjEiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO2JhY2tncm91bmQ6d2hpdGUiPg0KPHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIxIj4mbmJzcDs8L3NwYW4+PHNwYW4g bGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 bztiYWNrZ3JvdW5kOndoaXRlIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzIx MjEyMSI+V2hhdCBkbyB5b3UgdGhpbms/PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+ DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPiZuYnNwOzwvc3Bhbj48 c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvO2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xv cjojMjEyMTIxIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bztiYWNrZ3JvdW5kOndoaXRlIj4NCjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzIxMjEyMSI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxh bmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IGlkPSJnbWFpbC1tXy01MTM1 NDI0MTQ1Mjk3NTY1Njg2bXMtb3V0bG9vay1tb2JpbGUtc2lnbmF0dXJlIj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PHNwYW4g bGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+R2V0DQo8YSBocmVmPSJodHRwczovL3VybGRl ZmVuc2UuY29tL3YzL19faHR0cHM6L2NsaWNrdGltZS5zeW1hbnRlYy5jb20vM01SOHk3Q3ZpR0xr UzNremcxVXliUnY2SDI/dT1odHRwcyozQSoyRioyRnVybGRlZmVuc2UuY29tKjJGdjMqMkZfX2h0 dHBzKjNBKjJGYWthLm1zKjJGZ2hlaTM2X18qM0IqMjE4V29BNlJqQzgxYyoyMVhvLUQ3ZTVNZlVl VE95VjE3S1VmbGdTSTAwMktDbXN3X0VqeExjOXB4QTZzSjFFYnJpb0RFMFZtZ25ZQmhBYmMqMjRf XztKU1VsSlNVbEpTVWxKU1VsIThXb0E2UmpDODFjIVFBaFlhQTBxaG9VWjN5eFFXbDA1QXAxMkNN Ui1KLVJUTF9PX2Rfd0tFbEM1a3RaclBla2ZURGhMSDFZVnlnWkMkIiB0YXJnZXQ9Il9ibGFuayI+ DQpPdXRsb29rIGZvciBBbmRyb2lkPC9hPjwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IGlkPSJnbWFpbC1tXy01MTM1NDI0MTQ1Mjk3 NTY1Njg2aWQtNzRlZDUyYmUtZDdkNC00Y2VkLTk0ZDMtNjcxYzZmMWI0ZTcxIj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEzLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJs YWNrIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVyIiBzdHlsZT0i dGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIGxhbmc9IkVOLVVTIj4NCjxociBzaXplPSIxIiB3aWR0 aD0iOTglIiBhbGlnbj0iY2VudGVyIj4NCjwvc3Bhbj48L2Rpdj4NCjxkaXYgaWQ9ImdtYWlsLW1f LTUxMzU0MjQxNDUyOTc1NjU2ODZkaXZScGx5RndkTXNnIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHN0cm9uZz48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9zdHJvbmc+PHNwYW4gbGFuZz0i RU4tVVMiPiBBbGV4YW5kZXIgVmFpbnNodGVpbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOkFsZXhhbmRl ci5WYWluc2h0ZWluQGVjaXRlbGUuY29tIiB0YXJnZXQ9Il9ibGFuayI+QWxleGFuZGVyLlZhaW5z aHRlaW5AZWNpdGVsZS5jb208L2E+Jmd0Ozxicj4NCjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+U2VudDo8L3NwYW4+PC9zdHJv bmc+IFNhdHVyZGF5LCBOb3ZlbWJlciAyMywgMjAxOSwgMTM6MTU8YnI+DQo8c3Ryb25nPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlRvOjwv c3Bhbj48L3N0cm9uZz4gUm9iZXJ0IFJhc3p1azsgU2hyYWRkaGEgSGVnZGU8YnI+DQo8c3Ryb25n PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYi PkNjOjwvc3Bhbj48L3N0cm9uZz4gPGEgaHJlZj0ibWFpbHRvOnNwcmluZ0BpZXRmLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPg0Kc3ByaW5nQGlldGYub3JnPC9hPjsgPGEgaHJlZj0ibWFpbHRvOnJ0Z3dn QGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+cnRnd2dAaWV0Zi5vcmc8L2E+Ow0KPGEgaHJlZj0i bWFpbHRvOnJ0Zy1iZmRAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5ydGctYmZkQGlldGYub3Jn PC9hPjxicj4NCjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+U3ViamVjdDo8L3NwYW4+PC9zdHJvbmc+IFJlOiBbc3ByaW5nXSBE cmFmdCBmb3IgTm9kZSBwcm90ZWN0aW9uIG9mIGludGVybWVkaWF0ZSBub2RlcyBpbiBTUiBQYXRo czwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bWFy Z2luLWJvdHRvbToxMi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PHNwYW4g bGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 bztiYWNrZ3JvdW5kOndoaXRlIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzIx MjEyMSI+Um9iZXJ0LDwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIxIj5Mb3RzIG9mIHRoYW5rcyBmb3IgYSBwcm9t cHQgcmVzcG9uc2UuPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+DQo8c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJl bi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO2JhY2tn cm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIxIj5J IHJlc3BlY3RmdWxseSBkaXNhZ3JlZSB3aXRoIHlvdXIgc3RhdGVtZW50IHRoYXQgQkZEIGltcGxl bWVudGF0aW9uJm5ic3A7IGlzIHVzdWFsbHkgb2ZmbG9hZGVkIHRvIHRoZSBIVyBvZiB0aGUgaW5n cmVzcyBsaW5lIGNhcmQuJm5ic3A7IEkgZG8gbm90IHRoaW5rIHRoaXMgY2FuIHdvciBmb3IgTUgg QkZEIHNlc3Npb25zIGJlY2F1c2UgdGhlIGluZ3Jlc3MgYW5kIGVncmVzcyBsaW5lIGNhcmRzDQog YXJlIG5vdCBrbm93biBpbiBhZHZhbmNlIGFuZCBjaGFuZ2Ugd2l0aCB0aGUgcm91dGluZyBjaGFu Z2VzPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImNvbG9yOiMyMTIxMjEiPkEgZ29vZCZuYnNwOyBtdWx0aS1ob3AgQkZEIGltcGxlbWVu dGF0aW9uIHNob3VsZCBiZSByZWFkeSB0byBvdmVyY29tZSB0aGlzLi4gVGhlcmUgYXJlIG1hbnkg d2F5cyB0byBhY2hpZXZlIHRoYXQuIEEgbmFpdmUgaW1wbGVtZW50YXRpb24gdGhhdCBydW5zIGlu IFNXIG9mIHRoZSBjb250cm9sIGNhcmQgaXMgYWxzbyBwb3NzaWJsZSBvZiBjb3Vyc2UuIEFuZCB0 aGV5IHdvdWxkIHNlbnNkDQogYW5kIHJlY2VpdmUgcGFja2V0cyZuYnNwOzwvc3Bhbj48c3BhbiBs YW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv O2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEy MTIxIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bztiYWNrZ3JvdW5kOndoaXRlIj4NCjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iY29sb3I6IzIxMjEyMSI+TXkgMmMuPC9zcGFuPjxzcGFuIGxhbmc9ImVu LUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IGlkPSJnbWFpbC1tXy01MTM1NDI0MTQ1 Mjk3NTY1Njg2bXMtb3V0bG9vay1tb2JpbGUtc2lnbmF0dXJlIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPkdldA0KPGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNl LmNvbS92My9fX2h0dHBzOi9jbGlja3RpbWUuc3ltYW50ZWMuY29tLzNNUjh5N0N2aUdMa1Mza3pn MVV5YlJ2NkgyP3U9aHR0cHMqM0EqMkYqMkZ1cmxkZWZlbnNlLmNvbSoyRnYzKjJGX19odHRwcyoz QSoyRmFrYS5tcyoyRmdoZWkzNl9fKjNCKjIxOFdvQTZSakM4MWMqMjFYby1EN2U1TWZVZVRPeVYx N0tVZmxnU0kwMDJLQ21zd19FanhMYzlweEE2c0oxRWJyaW9ERTBWbWduWUJoQWJjKjI0X187SlNV bEpTVWxKU1VsSlNVbCE4V29BNlJqQzgxYyFRQWhZYUEwcWhvVVozeXhRV2wwNUFwMTJDTVItSi1S VExfT19kX3dLRWxDNWt0WnJQZWtmVERoTEgxWVZ5Z1pDJCIgdGFyZ2V0PSJfYmxhbmsiPg0KT3V0 bG9vayBmb3IgQW5kcm9pZDwvYT48L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBpZD0iZ21haWwtbV8tNTEzNTQyNDE0NTI5NzU2NTY4 NmlkLTQ4OWZiZDNjLTZlOWYtNDVkZC05NmQ5LWNmNjYzYjE5YWE5ZiI+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMy4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+ Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImNlbnRlciIgc3R5bGU9InRleHQt YWxpZ246Y2VudGVyIj48c3BhbiBsYW5nPSJFTi1VUyI+DQo8aHIgc2l6ZT0iMSIgd2lkdGg9Ijk4 JSIgYWxpZ249ImNlbnRlciI+DQo8L3NwYW4+PC9kaXY+DQo8ZGl2IGlkPSJnbWFpbC1tXy01MTM1 NDI0MTQ1Mjk3NTY1Njg2ZGl2UnBseUZ3ZE1zZyI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz dHJvbmc+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9zcGFuPjwvc3Ryb25nPjxzcGFuIGxhbmc9IkVOLVVT Ij4gUm9iZXJ0IFJhc3p1ayAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJvYmVydEByYXN6dWsubmV0IiB0 YXJnZXQ9Il9ibGFuayI+cm9iZXJ0QHJhc3p1ay5uZXQ8L2E+Jmd0Ozxicj4NCjxzdHJvbmc+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+U2Vu dDo8L3NwYW4+PC9zdHJvbmc+IFNhdHVyZGF5LCBOb3ZlbWJlciAyMywgMjAxOSwgMTI6Mzc8YnI+ DQo8c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWYiPlRvOjwvc3Bhbj48L3N0cm9uZz4gQWxleGFuZGVyIFZhaW5zaHRlaW47IFNocmFk ZGhhIEhlZ2RlPGJyPg0KPHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj5DYzo8L3NwYW4+PC9zdHJvbmc+IDxhIGhyZWY9Im1haWx0 bzpzcHJpbmdAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj4NCnNwcmluZ0BpZXRmLm9yZzwvYT47 IDxhIGhyZWY9Im1haWx0bzpydGd3Z0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnJ0Z3dnQGll dGYub3JnPC9hPjsNCjxhIGhyZWY9Im1haWx0bzpydGctYmZkQGlldGYub3JnIiB0YXJnZXQ9Il9i bGFuayI+cnRnLWJmZEBpZXRmLm9yZzwvYT48YnI+DQo8c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlN1YmplY3Q6PC9zcGFuPjwv c3Ryb25nPiBSZTogW3NwcmluZ10gRHJhZnQgZm9yIE5vZGUgcHJvdGVjdGlvbiBvZiBpbnRlcm1l ZGlhdGUgbm9kZXMgaW4gU1IgUGF0aHM8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBsYW5nPSJFTi1V UyI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMi PkhpIFNhc2hhLA0KPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5i c3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5PbiB0 aGUgc3VyZmFjZSB5b3VyIHN1Z2dlc3Rpb24gbWF5IGxvb2sgY29vbCAtIGJ1dCBpZiB5b3Ugem9v bSBpbiAtIEkgZG8gbm90IHRoaW5rIGl0IHdpbGwgd29yayBpbiBwcmFjdGljZS4mbmJzcDs8L3Nw YW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bh bj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+U2VlIC0gb25lIG9m IHRoZSBiaWdnZXN0IHZhbHVlIG9mIEJGRCBpcyBpdHMgb2ZmbG9hZCB0byBsaW5lIGNhcmQncyBo YXJkd2FyZS4gQW5kIGluIG1vc3QgY2FzZXMgaXQgaXMgaW5ncmVzcyBsaW5lIGNhcmQgdG8gdGhl IGJveC4gU28gaWYgeW91IGluc3RydWN0IHN1Y2ggaGFyZHdhcmUNCiB0byByZXNwb25kIHRvIFNJ RCBhZGRyZXNzIGxvb3BiYWNrIHlvdSBzdGlsbCBkaWQgbm90IGdhaW4gbXVjaCBpbiB0ZXJtcyBv ZiBkZXRlY3Rpb24gcm91dGVyJ3MgZmFicmljIGZhaWx1cmVzLCByZW1vdGUgTEMgZmFpbHVyZSBv ciBjb250cm9sJm5ic3A7cGxhbmUgaXNzdWVzIHdoaWNoIGNvdWxkIHNvb24gcmVzdWx0IGluIGJv eCBmYWlsdXJlLiBUaGUgY2F0YWxvZ3VlIG9mIHJvdXRlciBmYWlsdXJlcyBpcyBvZiBjb3Vyc2Ug bXVjaCBtb3JlIGNvbG9yZnVsLiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIj5JZiB5b3UgYXNrIEJGRCB0byBiZSByZXNwb25kZWQgYnkgUlAvUkUg aXQgbm8gbG9uZ2VyIGhhcyB0aGUgQkZEIGFkdmFudGFnZS4mbmJzcDs8L3NwYW4+PHNwYW4gbGFu Zz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5n PSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+SU1ITyB0aGUgYmVzdCB3YXkgdG8gZGV0 ZWN0IG5vZGUgZmFpbHVyZSZuYnNwO2lzIGFjdHVhbGx5IHRvIHNlbmQgdGhlIHByb2JlcyAqYWNy b3NzKiB0aGUgbm9kZSB1bmRlciB0ZXN0IHRvIGl0cyBwZWVycy4mbmJzcDs8L3NwYW4+PHNwYW4g bGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48c3BhbiBs YW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+VGhlIHdheSBJIHdvdWxkIHRoaW5r IG9mIGVzdGFibGlzaGluZyBzdWNoIG0taG9wIHNlc3Npb25zIHdvdWxkIGJlIGZ1bGx5IGF1dG9t YXRlZCB3aXRoIG9uZSBrbm9iIHBlciBJR1AgYWRqLiBleDogJnF1b3Q7YmZkIGRldGVjdC1ub2Rl LWZhaWx1cmUgW21heCBOXSZxdW90OyB3aGVyZSBsb2NhbA0KIEJGRCBzdWJzeXN0ZW0gd291bGQg Y3JlYXRlIE4gc2Vzc2lvbnMgdG8gSUdQIHBlZXJzIG9mIHRoZSBub2RlIHdlIGFyZSB0byBwcm90 ZWN0LiBMU0RCIGhhcyB0aG9zZSBwZWVycyBzbyBubyBuZXcgcHJvdG9jb2wgZXh0ZW5zaW9uJm5i c3A7aXMgbmVlZGVkLCBwZXJoYXBzIGV2ZW4gbm8gbmV3IElFVEYgZHJhZnQgaXMgcmVxdWlyZWQg OikuIE4gd291bGQgYmUgdGhlIGxpbWl0IG9mIHN1Y2ggc2Vzc2lvbnMgaW4gY2FzZSB0aGUgbm9k ZSB1bmRlciBwcm90ZWN0aW9uDQogaGFzIHNheSAxMHMgb2YgcGVlcnMuIERlZmF1bHQgY291bGQg YmUgcGVyaGFwcyBldmVuIDEuJm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gbGFuZz0iRU4tVVMiPlRoeCw8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPlJvYmVydC48L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxh bmc9IkVOLVVTIj5PbiBTYXQsIE5vdiAyMywgMjAxOSBhdCAxMDowMCBBTSBBbGV4YW5kZXIgVmFp bnNodGVpbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOkFsZXhhbmRlci5WYWluc2h0ZWluQGVjaXRlbGUu Y29tIiB0YXJnZXQ9Il9ibGFuayI+QWxleGFuZGVyLlZhaW5zaHRlaW5AZWNpdGVsZS5jb208L2E+ Jmd0Ow0KIHdyb3RlOjwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6 c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0 OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjUu MHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+DQo8 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPlNocmFkZGhhLCBSb2JlcnQg YW5kIGFsbCw8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0bztiYWNrZ3JvdW5kOndoaXRlIj4NCjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iY29sb3I6IzIxMjEyMSI+UmVnYXJkaW5nIFJvYmVydCdzIHF1ZXN0aW9uOiZu YnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvO2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJjb2xvcjojMjEyMTIxIj5JIHdvbmRlciBpZiBtdWx0aS1ob3AgSVAgQkZEIHNlc3Np b24gd2l0aCBhZGRyZXNzZXMgdXNlZCBhcyAvMzIgKG9yIC8xMjgpIHByZWZpeGVzIHNlcnZpbmcg YXMgTm9zZSBTSURzIG9mIFI4IGFuZCBSNyByZXNwZWN0aXZlbHkgY291bGQgYmUgdXNlZCBhcyBz dWNoIGEgdHJpZ2dlciBieSBSNz8gU3VjaCBhIHNlc3Npb24gd291bGQgbm90IHJlc3BvbmQgdG8g bGluayBmYWlsdXJlcywNCiBhbmQgSSBmaW5kIGl0IHByb2JsZW1hdGljIHRvIGltYWdpbmUgYSBz Y2VuYXJpbyB3aGVuIGl0IHdvdWxkIGJlIGtlcHQgVVAgaW4gdGhlIGNhc2Ugb2YgYSByZWFsIG5v ZGUgZmFpbHVyZS48L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bztiYWNrZ3JvdW5kOndoaXRlIj4NCjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iY29sb3I6IzIxMjEyMSI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVu LUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dy b3VuZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPk9m IGNvdXJzZSBzdWNoIGEgc2Vzc2lvbiB3b3VsZCBoYXZlIHRvIGJlIHNsb3cgZW5vdWdoIG5vdCB0 byByZWFjdCB0byBsaW5rIGZhaWx1cmVzLiBCdXQgaXQgc3RpbGwgY291a3MgYmUgbXVjaCBmYXN0 ZXIgdGhhbiBJR1AgY29udmVyc2lvbiBJTUhPLjwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO2JhY2tncm91bmQ6d2hp dGUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIxIj4mbmJzcDs8L3Nw YW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0bztiYWNrZ3JvdW5kOndoaXRlIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Y29sb3I6IzIxMjEyMSI+TXkgMmMsPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dyb3VuZDp3aGl0ZSI+DQo8 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPlNhc2hhPC9zcGFuPjxzcGFu IGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG87YmFja2dyb3VuZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMy MTIxMjEiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO2JhY2tncm91bmQ6d2hpdGUiPg0KPHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMjEyMTIxIj5TdWNoPC9zcGFuPjxzcGFuIGxhbmc9ImVu LUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87YmFja2dy b3VuZDp3aGl0ZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMyMTIxMjEiPiZu YnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRp diBpZD0iZ21haWwtbV8tNTEzNTQyNDE0NTI5NzU2NTY4NmdtYWlsLW1fODM1MDk4NDI1ODQ0MjY4 NjE1MmdtYWlsLW1fLTQ2MDU4MTgwNTk1OTM0NjIxMDFtcy1vdXRsb29rLW1vYmlsZS1zaWduYXR1 cmUiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZu YnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5HZXQNCjxhIGhy ZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovY2xpY2t0aW1lLnN5bWFudGVj LmNvbS8zTmJLNzJxMmNhNjY4YVZ5TWFUN0VzbjZIMj91PWh0dHBzKjNBKjJGKjJGdXJsZGVmZW5z ZS5jb20qMkZ2MyoyRl9faHR0cHMqM0EqMkZjbGlja3RpbWUuc3ltYW50ZWMuY29tKjJGM0NmVlFQ dEJZQkFQYkhVU25nRVZOUUQ2SDIqM0Z1KjNEaHR0cHMqMkEzQSoyQTJGKjJBMkZha2EubXMqMkEy RmdoZWkzNl9fKjNCSlNVbEpRKjIxOFdvQTZSakM4MWMqMjFYby1EN2U1TWZVZVRPeVYxN0tVZmxn U0kwMDJLQ21zd19FanhMYzlweEE2c0oxRWJyaW9ERTBWbWd1ank1MEVOKjI0X187SlNVbEpTVWxK U1VsSlNVbEpTVWxKU1VsIThXb0E2UmpDODFjIVFBaFlhQTBxaG9VWjN5eFFXbDA1QXAxMkNNUi1K LVJUTF9PX2Rfd0tFbEM1a3RaclBla2ZURGhMSDdxNzNwQWgkIiB0YXJnZXQ9Il9ibGFuayI+DQpP dXRsb29rIGZvciBBbmRyb2lkPC9hPjwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IGlkPSJnbWFpbC1tXy01MTM1NDI0MTQ1Mjk3NTY1 Njg2Z21haWwtbV84MzUwOTg0MjU4NDQyNjg2MTUyZ21haWwtbV8tNDYwNTgxODA1OTU5MzQ2MjEw MWlkLTE3NjlhYmQzLTQyOTQtNGU4OC05MDBlLWJhMTg4NGY4NDkxOCI+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMy4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+ Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImNlbnRlciIgc3R5bGU9InRleHQt YWxpZ246Y2VudGVyIj48c3BhbiBsYW5nPSJFTi1VUyI+DQo8aHIgc2l6ZT0iMSIgd2lkdGg9Ijk4 JSIgYWxpZ249ImNlbnRlciI+DQo8L3NwYW4+PC9kaXY+DQo8ZGl2IGlkPSJnbWFpbC1tXy01MTM1 NDI0MTQ1Mjk3NTY1Njg2Z21haWwtbV84MzUwOTg0MjU4NDQyNjg2MTUyZ21haWwtbV8tNDYwNTgx ODA1OTU5MzQ2MjEwMWRpdlJwbHlGd2RNc2ciPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Ry b25nPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L3N0cm9uZz48c3BhbiBsYW5nPSJFTi1VUyI+ IHNwcmluZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnNwcmluZy1ib3VuY2VzQGlldGYub3JnIiB0YXJn ZXQ9Il9ibGFuayI+c3ByaW5nLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0Ow0KIG9uIGJlaGFsZiBv ZiBSb2JlcnQgUmFzenVrICZsdDs8YSBocmVmPSJtYWlsdG86cm9iZXJ0QHJhc3p1ay5uZXQiIHRh cmdldD0iX2JsYW5rIj5yb2JlcnRAcmFzenVrLm5ldDwvYT4mZ3Q7PGJyPg0KPHN0cm9uZz48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5TZW50 Ojwvc3Bhbj48L3N0cm9uZz4gRnJpZGF5LCBOb3ZlbWJlciAyMiwgMjAxOSwgMTE6MjI8YnI+DQo8 c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPlRvOjwvc3Bhbj48L3N0cm9uZz4gU2hyYWRkaGEgSGVnZGU8YnI+DQo8c3Ryb25nPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkNj Ojwvc3Bhbj48L3N0cm9uZz4gPGEgaHJlZj0ibWFpbHRvOnNwcmluZ0BpZXRmLm9yZyIgdGFyZ2V0 PSJfYmxhbmsiPg0Kc3ByaW5nQGlldGYub3JnPC9hPjsgPGEgaHJlZj0ibWFpbHRvOnJ0Z3dnQGll dGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+cnRnd2dAaWV0Zi5vcmc8L2E+PGJyPg0KPHN0cm9uZz48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5T dWJqZWN0Ojwvc3Bhbj48L3N0cm9uZz4gUmU6IFtzcHJpbmddIERyYWZ0IGZvciBOb2RlIHByb3Rl Y3Rpb24gb2YgaW50ZXJtZWRpYXRlIG5vZGVzIGluIFNSIFBhdGhzPC9zcGFuPjxzcGFuIGxhbmc9 ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gbGFuZz0iRU4tVVMiPkhpJm5ic3A7U2hyYWRkaGEsDQo8L3NwYW4+PHNwYW4gbGFuZz0iZW4t S0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gbGFuZz0iRU4tVVMiPkkgaGF2ZSBvbmUgcXVlc3Rpb24gdG8gdGhlIGRvY3VtZW50LiZu YnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5i c3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5BcyB5 b3Uga25vdyB0aGUgY3JpdGljYWwgZWxlbWVudCBmb3ImbmJzcDt0aGUgZWZmZWN0aXZlIHByb3Rl Y3Rpb24gb2YgYW55IHNjaGVtZSBpcyB0aGUgZmFpbHVyZSBkZXRlY3Rpb24uIE9uIHRoYXQgeW91 ciBkcmFmdCBzZWVtcyB0byBoYXZlIGp1c3Qgb25lIGxpdHRsZSBwYXJhZ3JhcGg6Jm5ic3A7PC9z cGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3Nw YW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwcmUgc3R5bGU9ImJyZWFrLWJlZm9yZTpwYWdlIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsgTm90ZSB0aGF0IFI3IGFjdGl2YXRlcyB0aGUg bm9kZS1wcm90ZWN0aW5nIGJhY2t1cCBwYXRoIHdoZW4gaXQ8L3NwYW4+PHNwYW4gbGFuZz0iZW4t S0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsgZGV0ZWN0cyB0aGF0IHRoZSBsaW5rIHRvIFI4 IGhhcyBmYWlsZWQuJm5ic3A7IFI3IGRvZXMgbm90IGtub3cgdGhhdCBub2RlPC9zcGFuPjxzcGFu IGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7IFI4IGhhcyBhY3R1YWxseSBm YWlsZWQuJm5ic3A7IEhvd2V2ZXIsIHRoZSBub2RlLXByb3RlY3RpbmcgYmFja3VwIHBhdGggaXM8 L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsgY29tcHV0 ZWQgYXNzdW1pbmcgdGhhdCB0aGUgZmFpbHVyZSBvZiB0aGUgbGluayB0byBSOCBpbXBsaWVzIHRo YXQgUjg8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0K PHByZT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsg aGFzIGZhaWxlZC48L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cHJlPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJF Ti1VUyI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVO LVVTIj5XZWxsIElNTyB0aGlzIGlzIG5vdCBlbm91Z2guIFNwZWNpZmljYWxseSZuYnNwO3RoZXJl IGNhbiBiZSBhIGxvdCBvZiB0eXBlcyBvZiBub2RlIGZhaWx1cmUgd2hlbiBsaW5rIGlzIHN0aWxs IHVwLiBNb3Jlb3ZlciB0aGVyZSBjYW4gYmUgZXZlbiBydW5uaW5nIEJGRCBhY3Jvc3MgdGhlDQog bGluayBqdXN0IGZpbmUgd2hlbiBzYXkgZmFicmljIGZhaWx1cmUgb2NjdXJzIGF0IFI4LiZuYnNw Ozwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7 PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5XaGlsZSB0 aGlzIGlzIG5vdCBzb2xlbHkgaXNzdWUgd2l0aCB0aGlzIGRyYWZ0LCBpdCBpcyBvdXIgY29tbW9u IElFVEYgZmFpbHVyZSB0byBwcm92aWRlIGNvcnJlY3QgbWVhbnMgb2YgZGV0ZWN0aW5nIGVuZCB0 byBlbmQgcGF0aCBvciBmcmFnbWVudHMgb2YgcGF0aCBmYWlsdXJlcw0KIChJIGFtIHNwZWNpZmlj YWxseSBub3QgY2FsbGluZyB0aGVtIHNlZ21lbnQgaGVyZSA6KS4mbmJzcDs8L3NwYW4+PHNwYW4g bGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48c3BhbiBs YW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Rm9yIGV4YW1wbGUgSSBwcm9wb3Nl IHRoYXQgdG8gZWZmZWN0aXZlbHkgZGV0ZWN0IFI4IGZhaWx1cmUgYXMgbm9kZSBmYWlsdXJlIHdo aWNoIGlzIHRoZSB0b3BpYyBvZiB5b3VyIHByb3Bvc2FsIGEgbWVjaGFuaXNtIGlzIGNsZWFybHkg ZGVmaW5lZCBhbmQgaW5jbHVkZXMgYmktZGlyDQogZGF0YSBwbGFuZSBwcm9iZXMgc2VuZCBiZXR3 ZWVuIFI3LVI5LCBSMy1SNywgUjQtUjcsIFI0LVI5LCBSMy1SOTwvc3Bhbj48c3BhbiBsYW5nPSJl bi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVu LUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5NYW55IHRoeCw8L3NwYW4+PHNwYW4gbGFuZz0i ZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPlJvYmVydC48L3NwYW4+PHNwYW4gbGFuZz0i ZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJl bi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJl bi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5PbiBGcmksIE5vdiAyMiwgMjAxOSBhdCA0OjM4 IEFNIFNocmFkZGhhIEhlZ2RlICZsdDtzaHJhZGRoYT08YSBocmVmPSJtYWlsdG86NDBqdW5pcGVy Lm5ldEBkbWFyYy5pZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPjQwanVuaXBlci5uZXRAZG1hcmMu aWV0Zi4ub3JnPC9hPiZndDsgd3JvdGU6PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTti b3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7 bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdp bi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIj5XRyw8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyI+VGhpcyBpcyB0aGUgZHJhZnQgSSBwb2ludGVkIG91dCB0aGF0IHRhbGtzIGFi b3V0IHNvbHV0aW9ucyBmb3IgcHJvdmlkaW5nIG5vZGUtcHJvdGVjdGlvbi48L3NwYW4+PHNwYW4g bGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPkl0IGNvdmVycyBBbnljYXN0IGNh c2UgYXMgd2VsbCBhcyBrZWVwaW5nIGZvcndhcmRpbmcgcGxhbmUgbG9uZ2VyLjwvc3Bhbj48c3Bh biBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+PGEgaHJlZj0iaHR0cHM6Ly91 cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi9jbGlja3RpbWUuc3ltYW50ZWMuY29tLzNIdnJ6SFh3 QW91MkpydUVUajZqY3lGNkgyP3U9aHR0cHMqM0EqMkYqMkZ1cmxkZWZlbnNlLmNvbSoyRnYzKjJG X19odHRwcyozQSoyRmNsaWNrdGltZS5zeW1hbnRlYy5jb20qMkYzNzVTVzZUQkdQaTJtTjdWOVll VldHZzZIMiozRnUqM0RodHRwcyoyQTNBKjJBMkYqMkEyRnRvb2xzLmlldGYub3JnKjJBMkZodG1s KjJBMkZkcmFmdC1oZWdkZS1zcHJpbmctbm9kZS1wcm90ZWN0aW9uLWZvci1zci10ZS1wYXRocy0w NV9fKjNCSlNVbEpTVSoyMThXb0E2UmpDODFjKjIxWG8tRDdlNU1mVWVUT3lWMTdLVWZsZ1NJMDAy S0Ntc3dfRWp4TGM5cHhBNnNKMUVicmlvREUwVm1nZzB4bWpfQyoyNF9fO0pTVWxKU1VsSlNVbEpT VWxKU1VsSlNVbEpRIThXb0E2UmpDODFjIVFBaFlhQTBxaG9VWjN5eFFXbDA1QXAxMkNNUi1KLVJU TF9PX2Rfd0tFbEM1a3RaclBla2ZURGhMSDlSZmJPcVQkIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4g c3R5bGU9ImNvbG9yOiMwNTYzQzEiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1o ZWdkZS1zcHJpbmctbm9kZS1wcm90ZWN0aW9uLWZvci1zci10ZS1wYXRocy0wNTwvc3Bhbj48L2E+ PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8 L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPlJldmlldyBh bmQgY29tbWVudHMgc29saWNpdGVkLjwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IGxhbmc9IkVOLVVTIj5SZ2RzPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxh bmc9IkVOLVVTIj5TaHJhZGRoYTwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X188YnI+DQpydGd3ZyBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86cnRnd2dAaWV0 Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5ydGd3Z0BpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJo dHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L2NsaWNrdGltZS5zeW1hbnRlYy5jb20v Mzdadk5TTVNBZGRweERHRFFQbTdvVkE2SDI/dT1odHRwcyozQSoyRioyRnVybGRlZmVuc2UuY29t KjJGdjMqMkZfX2h0dHBzKjNBKjJGY2xpY2t0aW1lLnN5bWFudGVjLmNvbSoyRjM1TTlqNXpIVGFT WVJ3Vmg1UlA2eGNCNkgyKjNGdSozRGh0dHBzKjJBM0EqMkEyRioyQTJGd3d3LmlldGYub3JnKjJB MkZtYWlsbWFuKjJBMkZsaXN0aW5mbyoyQTJGcnRnd2dfXyozQkpTVWxKU1VsKjIxOFdvQTZSakM4 MWMqMjFYby1EN2U1TWZVZVRPeVYxN0tVZmxnU0kwMDJLQ21zd19FanhMYzlweEE2c0oxRWJyaW9E RTBWbWd2VjlZNHNNKjI0X187SlNVbEpTVWxKU1VsSlNVbEpTVWxKU1VsSlNVIThXb0E2UmpDODFj IVFBaFlhQTBxaG9VWjN5eFFXbDA1QXAxMkNNUi1KLVJUTF9PX2Rfd0tFbEM1a3RaclBla2ZURGhM SF9wRzVQcngkIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9ydGd3ZzwvYT48L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iZW4tS0UiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+ Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPjxicj4NCl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXzxicj4NCjxicj4NClRoaXMgZS1tYWlsIG1lc3NhZ2UgaXMgaW50ZW5k ZWQgZm9yIHRoZSByZWNpcGllbnQgb25seSBhbmQgY29udGFpbnMgaW5mb3JtYXRpb24gd2hpY2gg aXMNCjxicj4NCkNPTkZJREVOVElBTCBhbmQgd2hpY2ggbWF5IGJlIHByb3ByaWV0YXJ5IHRvIEVD SSBUZWxlY29tLiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzDQo8YnI+DQp0cmFuc21pc3Npb24g aW4gZXJyb3IsIHBsZWFzZSBpbmZvcm0gdXMgYnkgZS1tYWlsLCBwaG9uZSBvciBmYXgsIGFuZCB0 aGVuIGRlbGV0ZSB0aGUgb3JpZ2luYWwNCjxicj4NCmFuZCBhbGwgY29waWVzIHRoZXJlb2YuPGJy Pg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fPC9zcGFuPjxzcGFuIGxhbmc9ImVuLUtFIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0i RU4tVVMiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj48 YnI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX188YnI+DQo8YnI+DQpUaGlzIGUtbWFpbCBtZXNzYWdlIGlz IGludGVuZGVkIGZvciB0aGUgcmVjaXBpZW50IG9ubHkgYW5kIGNvbnRhaW5zIGluZm9ybWF0aW9u IHdoaWNoIGlzDQo8YnI+DQpDT05GSURFTlRJQUwgYW5kIHdoaWNoIG1heSBiZSBwcm9wcmlldGFy eSB0byBFQ0kgVGVsZWNvbS4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcw0KPGJyPg0KdHJhbnNt aXNzaW9uIGluIGVycm9yLCBwbGVhc2UgaW5mb3JtIHVzIGJ5IGUtbWFpbCwgcGhvbmUgb3IgZmF4 LCBhbmQgdGhlbiBkZWxldGUgdGhlIG9yaWdpbmFsDQo8YnI+DQphbmQgYWxsIGNvcGllcyB0aGVy ZW9mLjxicj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXzwvc3Bhbj48c3BhbiBsYW5nPSJlbi1LRSI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3Rl Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_DBBPR03MB5415CB7A89FBBF974FF284E7EE430DBBPR03MB5415eurp_-- From nobody Mon Dec 2 06:32:53 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4E5C1200F4 for ; Mon, 2 Dec 2019 01:49:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.399 X-Spam-Level: X-Spam-Status: No, score=-1.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, PDS_BTC_ID=0.499, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=raszuk.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QrM9Uz0nmQmX for ; Mon, 2 Dec 2019 01:49:42 -0800 (PST) Received: from mail-qk1-x731.google.com (mail-qk1-x731.google.com [IPv6:2607:f8b0:4864:20::731]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 98518120044 for ; Mon, 2 Dec 2019 01:49:42 -0800 (PST) Received: by mail-qk1-x731.google.com with SMTP id d202so23582117qkb.1 for ; Mon, 02 Dec 2019 01:49:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raszuk.net; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=KxuiNkIBbzU+FuKfMCKC7PBN61R17o1iDCt6MpAlHqk=; b=TaYyzUxU9+Aa5Zm+ROijF2DokSSCjBZtB3vX0Hrv5hix3t51KHxDvfPIXUa9uWb6Wx d9pJKH/NnxLjBGlXobHEIkPP5pucxN7ds5sk3Jk4Rxudu5RXOb4oeevxcVI1vkfhKcV5 v5Trrl4brl4SBzdZAzhXKwEduJSaDLor+sfERx7qGAoASQPLFsm5bUJuWZCQB2GGQJKW NIP0MADuqd2/PBRcJBhvFG4VaPMUfsPYf7NoxpNcWExLbYlkzyoAru8nOfiY0CdSPH5a GjOwElS9LBIlWbu3O1rk37FF+4SiZnzAvrrupUUyZ/IOGcDPJNSbptfF7XKxDMWAzens Coqg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=KxuiNkIBbzU+FuKfMCKC7PBN61R17o1iDCt6MpAlHqk=; b=FzQ8GP7g/MUIae7rXrCvn2KV6u/EIjvjoi+76B77832nJ3OYq1g7hq5eQxEA06X9Al x1PJ/oHJYAx3DHh6GQsr2kvcdDvJPMnS1If2EuOJ/JOXKUCOkJmgwCZ3/pbm2L+ZCdA6 h7cJzkDE5275CAY0msKF2g7eLcS50Ysbm/iFwG37W7TKuHlFGA2v+SVn/duk9M3EDCD8 nF2kkPYC5kz/wF/WAbGwPd7VRkz/DqqjbbHMVtqz01aQNVsrWsIjv5a4ZZrI6CL6n61W UwcWVKhJqRAO+e0st+tAdr4YbAz6DMz5wC6QHIU+8JTfl5fqyn+KayfWbz7b961hzcHN x6cw== X-Gm-Message-State: APjAAAURo2LFx7ZKutFhzry+UJY4wXErS0/WKwUc3XzurVRTXOlgXiHz c4hQrLgAI44yVYrpSP4TPo6RwzjwqrGudEnknUGHLg== X-Google-Smtp-Source: APXvYqzzbfE5EXm8V2dsDLxcBmP37fLQeSe8ZNFe2AAA/RUuo9ZEuqSPwyAOAvd+NBS30K77xJ3H9dB3TLpGN+KZ3p0= X-Received: by 2002:a37:62d2:: with SMTP id w201mr30470413qkb.445.1575280181381; Mon, 02 Dec 2019 01:49:41 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Robert Raszuk Date: Mon, 2 Dec 2019 10:49:31 +0100 Message-ID: Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR Paths To: Andrew Alston Cc: Shraddha Hegde , Alexander Vainshtein , "spring@ietf.org" , "rtg-bfd@ietf.org" , "rtgwg@ietf.org" Content-Type: multipart/alternative; boundary="000000000000a223b50598b57f1c" Archived-At: X-Mailman-Approved-At: Mon, 02 Dec 2019 06:32:51 -0800 X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Dec 2019 09:49:46 -0000 --000000000000a223b50598b57f1c Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Mon, Dec 2, 2019 at 10:28 AM Andrew Alston < Andrew.Alston@liquidtelecom.com> wrote: Currently the biggest issue that I see with S-BFD based protection =E2=80= =93 which > is something we use in production is as follows: > > > > Unless I=E2=80=99m mistaken =E2=80=93 there is absolutely no way to tie S= -BFD based > protection with BGP injected SR-TE pathing > Well I am not sure what you call " BGP injected SR-TE pathing" but if you are looking for validation of BGP paths that has been supported by some vendors for a loooong time. Hint: you allocate different next hop for your SR-TE endpoints and voila. Btw - not an ietf topic, but an implementation request / vendor's feature. Besides, since you are talking about headend what you are describing is path protection ... this draft talks about node protection which is a completely different thing. Cheers, r. > Node validation as defined in the SR-TE drafts is limited to presence in > the IGP > > Since SR-TE path injection may be done through reflectors =E2=80=93 using= target > communities =E2=80=93 the point of communication into the network is not > necessarily the head end of the tunnel and the point of injection may be > entirely unaware of the implications of the path that=E2=80=99s being ins= erted. > > > > By utilizing what is contained in this draft to build context tables at > the head end of an inserted tunnel on an automated basis =E2=80=93 this s= olves a > problem that currently exists that S-BFD simply cannot solve without > modification to the srte policy insertion drafts that would allow for > automated building of S-BFD checks =E2=80=93 which in and of itself could= prove > challenging considering the complexity of this. > > > > That is not to say in any way that both s-bfd and potentially other > mechanisms do not have use cases =E2=80=93 but as an operator =E2=80=93 t= his draft would > certainly provide a better mechanism for constant path validation than > anything we currently have (which is based on steered packets that leave > the controller and return to the controller through the use of SR packets > and binding sids). > > > > Just my 2c > > > > Thanks > > > > Andrew > > > > > > *From:* spring *On Behalf Of *Shraddha Hegde > *Sent:* Monday, 2 December 2019 10:24 > *To:* Alexander Vainshtein > *Cc:* spring@ietf.org; rtg-bfd@ietf.org; Robert Raszuk ; > rtgwg@ietf.org > *Subject:* Re: [spring] Draft for Node protection of intermediate nodes > in SR Paths > > > > Sasha, > > > > We are in agreement on separating the trigger from the protection > mechanism. > > > > > In any case I think that it woyld make sense to separate the protection > scheme proposed in the draft from specific triggers for its activation > >similar to how this has been done in MPLS Egress Protection Framework > draft. > > > > I=E2=80=99ll add text in the next revision for this. > > > > Rgds > > Shraddha > > > > > > *From:* Alexander Vainshtein > *Sent:* Monday, December 2, 2019 12:24 PM > *To:* Shraddha Hegde > *Cc:* spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org; Robert Raszuk < > robert@raszuk.net> > *Subject:* Re: [spring] Draft for Node protection of intermediate nodes > in SR Paths > > > > Shraddha, > > Lots of thanks for athe tesponse. > > > > I probably did not express myself clearly enough. I will try to fix thst > now, and I apologise in advance for a long email. > > > > I have not been speaking about end-yo-end protecyion, only about local > protection against failure of an intermediate (a.k.a. pinned) node of an = SR > path and, specifically, triggers for such protection. This context has be= en > actually defined by Robert in his original comment. > > > > To the best of my understanding, Robert's concern was that failure of the > link beteeen the pinned node of a SR path and its adjacency (the > penultimate node of the Segment represented by the Node SID of the pinned > node) is not a good enough indication of the pinned node failure. > > > > I agree with this statement even if my understanding of a good indication > differs from Robert's: > > - I think that it is not sufficiently specific and therefore could result > in flapping (local node protection activated and then released) > > -Robert's concern, to the best of my understanding, was that it could mis= s > some failures (e.g. the Fabric failure). > > > > Therefore I have suggested two possibilities for more specific and more > rrliabke detection of failure of the pinned node by its adjacency: > > > > 1. Run a multi-hop IP BFD session between the peniltimate node ans the > pinned ones using prefixes acting as Node SIDs of this pair. This wiuld > ignore link failures but locally detect such node failurs as power-down o= r > crash. > > > > 2. Run S-BFD sessions to all other adjacencies of the pinned node using > in each case a list of two SIDs: the protected Adj-SID to the pinned node > followed by tge Node SID of the other adjacency, ans declare pinned node > failure when all these sessions fail. This would again ignore failure of > the link between the penultimate node and the pinned node but detect > various real failures of the pinned node, e.g. failure of its Fabric. > > > > In any case I think that it woyld make sense to separate the protection > scheme proposed in the draft from specific triggers for its activation > similar to how this has been done in MPLS Egress Protection Framework dra= ft. > > > > My 2c. > > > > > > > > > > > > > > Get Outlook for Android > > > > ------------------------------ > > *From:* Shraddha Hegde > *Sent:* Monday, December 2, 2019, 06:10 > *To:* Alexander Vainshtein; Robert Raszuk > *Cc:* spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org > *Subject:* RE: [spring] Draft for Node protection of intermediate nodes > in SR Paths > > > > Robert/Sasha, > > > > > > S-BFD based mechanism is head-end triggered protection. It is not a loca= l > protection. > > S-BFD mechanism is orthogonal to the mechanism described in this draft an= d > an operator can > > choose what kind of protection makes more sense to his/her network. > > > > In many cases, node-protecting backup path will be different from > link-protecting/SRLG protecting backup path. > > If you really want to use link-protecting backup path when link fails and > node protecting backup path when node fails, > > You will have to download both link protecting and node-protecting backup > paths in FIB and detect which > > failure really happened and have the ability in hardware to use > appropriate backup path. None of these > > is in the scope of this document. > > > > Rgds > > Shraddha > > > > > > *From:* Alexander Vainshtein > *Sent:* Saturday, November 23, 2019 8:15 PM > *To:* Robert Raszuk ; Shraddha Hegde < > shraddha@juniper.net> > *Cc:* spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org > *Subject:* Re: [spring] Draft for Node protection of intermediate nodes > in SR Paths > > > > Robert, > > On the second thought, for the purpose of this draft (i.e. in the scope o= f > SR) it is possible to implement your suggestion by running S-BFD sessions > between R7 (as the initiator) and each other adjacency of R8 (acting as > Reflectors) of a SR policy with list of two SIDs: > > - protected adjacency between R7 and R8 > > - Node SID of the specific "other" adjacency of R8. > > > > If all these sessions fail, R7 can reliably consider R8 as failed. > > > > I am not sure this would be much better than multi-hop IP BFD, and it > looks much more complicated to me. > > > > > > What do you think? > > > > > > > > > > Get Outlook for Android > > > > ------------------------------ > > *From:* Alexander Vainshtein > *Sent:* Saturday, November 23, 2019, 13:15 > *To:* Robert Raszuk; Shraddha Hegde > *Cc:* spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org > *Subject:* Re: [spring] Draft for Node protection of intermediate nodes > in SR Paths > > > > Robert, > > Lots of thanks for a prompt response. > > > > I respectfully disagree with your statement that BFD implementation is > usually offloaded to the HW of the ingress line card. I do not think thi= s > can wor for MH BFD sessions because the ingress and egress line cards are > not known in advance and change with the routing changes > > A good multi-hop BFD implementation should be ready to overcome this.. > There are many ways to achieve that. A naive implementation that runs in = SW > of the control card is also possible of course. And they would sensd and > receive packets > > > > My 2c. > > Get Outlook for Android > > > > ------------------------------ > > *From:* Robert Raszuk > *Sent:* Saturday, November 23, 2019, 12:37 > *To:* Alexander Vainshtein; Shraddha Hegde > *Cc:* spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org > *Subject:* Re: [spring] Draft for Node protection of intermediate nodes > in SR Paths > > > > Hi Sasha, > > > > On the surface your suggestion may look cool - but if you zoom in - I do > not think it will work in practice. > > > > See - one of the biggest value of BFD is its offload to line card's > hardware. And in most cases it is ingress line card to the box. So if you > instruct such hardware to respond to SID address loopback you still did n= ot > gain much in terms of detection router's fabric failures, remote LC failu= re > or control plane issues which could soon result in box failure. The > catalogue of router failures is of course much more colorful. > > > > If you ask BFD to be responded by RP/RE it no longer has the BFD > advantage. > > > > IMHO the best way to detect node failure is actually to send the probes > *across* the node under test to its peers. > > > > The way I would think of establishing such m-hop sessions would be fully > automated with one knob per IGP adj. ex: "bfd detect-node-failure [max N]= " > where local BFD subsystem would create N sessions to IGP peers of the nod= e > we are to protect. LSDB has those peers so no new protocol extension is > needed, perhaps even no new IETF draft is required :). N would be the lim= it > of such sessions in case the node under protection has say 10s of peers. > Default could be perhaps even 1. > > > > Thx, > > Robert. > > > > > > On Sat, Nov 23, 2019 at 10:00 AM Alexander Vainshtein < > Alexander.Vainshtein@ecitele.com> wrote: > > Shraddha, Robert and all, > > Regarding Robert's question: > > I wonder if multi-hop IP BFD session with addresses used as /32 (or /128) > prefixes serving as Nose SIDs of R8 and R7 respectively could be used as > such a trigger by R7? Such a session would not respond to link failures, > and I find it problematic to imagine a scenario when it would be kept UP = in > the case of a real node failure. > > > > Of course such a session would have to be slow enough not to react to lin= k > failures. But it still couks be much faster than IGP conversion IMHO. > > > > My 2c, > > Sasha > > > > Such > > > > > > Get Outlook for Android > > > > ------------------------------ > > *From:* spring on behalf of Robert Raszuk < > robert@raszuk.net> > *Sent:* Friday, November 22, 2019, 11:22 > *To:* Shraddha Hegde > *Cc:* spring@ietf.org; rtgwg@ietf.org > *Subject:* Re: [spring] Draft for Node protection of intermediate nodes > in SR Paths > > > > Hi Shraddha, > > > > I have one question to the document. > > > > As you know the critical element for the effective protection of any > scheme is the failure detection. On that your draft seems to have just on= e > little paragraph: > > > > Note that R7 activates the node-protecting backup path when it > > detects that the link to R8 has failed. R7 does not know that node > > R8 has actually failed. However, the node-protecting backup path is > > computed assuming that the failure of the link to R8 implies that R8 > > has failed. > > > > Well IMO this is not enough. Specifically there can be a lot of types of > node failure when link is still up. Moreover there can be even running BF= D > across the link just fine when say fabric failure occurs at R8. > > > > While this is not solely issue with this draft, it is our common IETF > failure to provide correct means of detecting end to end path or fragment= s > of path failures (I am specifically not calling them segment here :). > > > > For example I propose that to effectively detect R8 failure as node > failure which is the topic of your proposal a mechanism is clearly define= d > and includes bi-dir data plane probes send between R7-R9, R3-R7, R4-R7, > R4-R9, R3-R9 > > > > Many thx, > > Robert. > > > > > > On Fri, Nov 22, 2019 at 4:38 AM Shraddha Hegde 40juniper.net@dmarc.ietf..org <40juniper.net@dmarc.ietf.org>> wrote: > > WG, > > > > This is the draft I pointed out that talks about solutions for providing > node-protection. > > It covers Anycast case as well as keeping forwarding plane longer. > > > https://tools.ietf.org/html/draft-hegde-spring-node-protection-for-sr-te-= paths-05 > > > > > Review and comments solicited. > > > > Rgds > > Shraddha > > > > _______________________________________________ > rtgwg mailing list > rtgwg@ietf.org > https://www.ietf.org/mailman/listinfo/rtgwg > > > > > > > > _________________________________________________________________________= __ > > This e-mail message is intended for the recipient only and contains > information which is > CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have > received this > transmission in error, please inform us by e-mail, phone or fax, and then > delete the original > and all copies thereof. > _________________________________________________________________________= __ > > > > > _________________________________________________________________________= __ > > This e-mail message is intended for the recipient only and contains > information which is > CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have > received this > transmission in error, please inform us by e-mail, phone or fax, and then > delete the original > and all copies thereof. > _________________________________________________________________________= __ > --000000000000a223b50598b57f1c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On Mon, Dec 2, 2019 at 10:28 AM Andrew Al= ston <Andrew.Alston@l= iquidtelecom.com> wrote:

Currently the biggest issue tha= t I see with S-BFD based protection =E2=80=93 which is something we use in = production is as follows:

=C2=A0

Unless I=E2=80=99m mistaken =E2= =80=93 there is absolutely no way to tie S-BFD based protection with BGP in= jected SR-TE pathing



Well I am not sure what you call " BGP injected SR-TE pathing" but if you are looking for validation of B= GP paths that has been supported by some vendors for a loooong time. Hint: = you allocate different next hop for your SR-TE endpoints and voila.=C2=A0

Btw - not an ietf topic, but an implementation requ= est / vendor's feature.=C2=A0

Besides, since y= ou are talking about headend what you are describing is path protection ...= this draft talks about node protection which is a completely different thi= ng.=C2=A0

Cheers,
r.

=C2=A0

Node validation as defined in t= he SR-TE drafts is limited to presence in the IGP

Since SR-TE path injection may = be done through reflectors =E2=80=93 using target communities =E2=80=93 the= point of communication into the network is not necessarily the head end of= the tunnel and the point of injection may be entirely unaware of the implications of the path= that=E2=80=99s being inserted.

=C2=A0

By utilizing what is contained = in this draft to build context tables at the head end of an inserted tunnel= on an automated basis =E2=80=93 this solves a problem that currently exist= s that S-BFD simply cannot solve without modification to the srte policy insertion draf= ts that would allow for automated building of S-BFD checks =E2=80=93 which = in and of itself could prove challenging considering the complexity of this= .=C2=A0

=C2=A0

That is not to say in any way t= hat both s-bfd and potentially other mechanisms do not have use cases =E2= =80=93 but as an operator =E2=80=93 this draft would certainly provide a be= tter mechanism for constant path validation than anything we currently have (which is based o= n steered packets that leave the controller and return to the controller th= rough the use of SR packets and binding sids).

=C2=A0

Just my 2c=

=C2=A0

Thanks

=C2=A0

Andrew

=C2=A0

=C2=A0

From: spring <spring-bounces@ietf.org> On Behalf Of Shraddha Hegde
Sent: Monday, 2 December 2019 10:24
To: Alexander Vainshtein <Alexander.Vainshtein@ecitele.com>
Cc: spring@ietf= .org; rtg-bfd@iet= f.org; Robert Raszuk <robert@raszuk.net>; rtgwg@ietf.org
Subject: Re: [spring] Draft for Node protection of intermediate node= s in SR Paths

=C2=A0

Sasha,

=C2=A0

We are in agreement on separati= ng the trigger from the protection mechanism.

=C2=A0

> In any case I think that it woyld make sense to separate the protecti= on scheme proposed in the draft from specific triggers for its activation >similar to how this has been done in MPLS Egress Pr= otection Framework draft.

=C2=A0

I=E2=80=99ll add text in the next revision for th= is.

=C2=A0

Rgds

Shraddha

=C2=A0

=C2=A0

From: Alexander Vainshtein <Alexander.Vainshtein@ecitele.com>
Sent: Monday, December 2, 2019 12:24 PM
To: Shraddha Hegde <shraddha@juniper.net>
Cc: spring@ietf= .org; rtgwg@ietf.org; r= tg-bfd@ietf.org; Robert Raszuk <robert@raszuk.net>
Subject: Re: [spring] Draft for Node protection of intermediate node= s in SR Paths

=C2=A0

Shraddha,

Lots of thanks for athe tesponse.

=C2=A0

I probably did not express myself clearly enough.= I will try to fix thst now, and I apologise in advance for a long email.

=C2=A0

I have not been speaking about end-yo-end protecy= ion, only about local protection against failure of an intermediate (a.k.a.= pinned) node of an SR path and, specifically, triggers for such protection. This context has been actually defined by Ro= bert in his original comment.

=C2=A0

To the best of my understanding, Robert's con= cern was that failure of the link beteeen the pinned node of a SR path and = its adjacency (the penultimate node of the Segment represented by the Node SID of the pinned node) is not a good enough indic= ation of the pinned node failure.=C2=A0

=C2=A0

I agree with this statement even if my understand= ing of a good indication differs from Robert's:

- I think that it is not sufficiently specific an= d therefore could result in flapping (local node protection activated and t= hen released)

-Robert's concern, to the best of my understa= nding, was that it could miss some failures (e.g. the Fabric failure).

=C2=A0

Therefore I have suggested two possibilities for = more specific and more rrliabke detection of failure of the pinned node by = its adjacency:

=C2=A0

1. Run a multi-hop IP BFD session between the pen= iltimate node ans the pinned ones using prefixes acting as Node SIDs of thi= s pair.=C2=A0 This wiuld ignore link failures but locally detect such node failurs as power-down or crash.

=C2=A0

2.=C2=A0 Run S-BFD sessions to all other adjacenc= ies of the pinned node using in each case a list of two SIDs: the protected= Adj-SID to the pinned node followed by tge Node SID of the other adjacency, ans declare pinned node failure when all these ses= sions fail. This would again ignore failure of the link between the penulti= mate node and the pinned node but detect various real failures of the pinne= d node, e.g. failure of its Fabric.

=C2=A0

In any case I think that it woyld make sense to s= eparate the protection scheme proposed in the draft from specific triggers = for its activation similar to how this has been done in MPLS Egress Protection Framework draft.

=C2=A0

My 2c.

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

=C2=A0

Get Outlook for Android

=C2=A0

From: Shraddha Hegde= <shraddha@jun= iper.net>
Sent: Monday, December 2, 2019, 06:10
To: = Alexander Vainshtein; Robert Raszuk
Cc: = spring@ietf.org; rt= gwg@ietf.org; rtg-bfd@ietf.org
Subject: RE: [spring] Draft for Node protection of intermediate nodes in SR Pat= hs

=C2=A0

Robert/Sasha,

=C2=A0

=C2=A0

S-BFD based mechanism is =C2=A0= head-end triggered protection. It is not a local protection.<= /span>

S-BFD mechanism is orthogonal t= o the mechanism described in this draft and an operator can

choose what kind of protection = makes more sense to his/her network.

=C2=A0

In many cases, node-protecting = backup path will be different from link-protecting/SRLG protecting backup p= ath.

If you really want to use link-= protecting backup path when link fails and node protecting backup path when= node fails,

You will have to download both = link protecting and node-protecting backup paths in FIB and detect which=

failure really happened and hav= e the ability in hardware to use appropriate backup path. None of these<= /u>

is in the scope of this documen= t.

=C2=A0

Rgds

Shraddha

=C2=A0

=C2=A0

From: Alexander Vainshtein <Alexander.Vainshtein@ecitele.com>
Sent: Saturday, November 23, 2019 8:15 PM
To: Robert Raszuk <robert@raszuk.net>; Shraddha Hegde <shraddha@juniper.net>
Cc: spring@ietf= .org; rtgwg@ietf.org; r= tg-bfd@ietf.org
Subject: Re: [spring] Draft for Node protection of intermediate node= s in SR Paths

=C2=A0

Robert,=

On the second thought, for the purpose of this dr= aft (i.e. in the scope of SR) it is possible to implement your suggestion b= y running S-BFD sessions between R7 (as the initiator) and each other adjacency of R8=C2=A0 (acting as Reflectors) of a SR policy= with list of two SIDs:

- protected adjacency between R7 and R8

- Node SID of the specific "other" adja= cency=C2=A0 of R8.

=C2=A0<= /span>

If all these sessions fail, R7 can reliably consi= der R8 as failed.=C2=A0

=C2=A0<= /span>

I am not sure this would be much better than mult= i-hop IP BFD, and it looks much more complicated to me.=C2=A0

=C2=A0<= /span>

=C2=A0<= /span>

What do you think?=

=C2=A0<= /span>

=C2=A0<= /span>

=C2=A0<= /span>

=C2=A0

Get Outlook for Android

=C2=A0

From: Alexander Vain= shtein <Alexander.Vainshtein@ecitele.com>
Sent: Saturday, November 23, 2019, 13:15
To: = Robert Raszuk; Shraddha Hegde
Cc: = spring@ietf.org; rt= gwg@ietf.org; rtg-bfd@ietf.org
Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR Pat= hs

=C2=A0

Robert,=

Lots of thanks for a prompt response.

=C2=A0<= /span>

I respectfully disagree with your statement that = BFD implementation=C2=A0 is usually offloaded to the HW of the ingress line= card.=C2=A0 I do not think this can wor for MH BFD sessions because the ingress and egress line cards are not known in advance and cha= nge with the routing changes

A good=C2=A0 multi-hop BFD implementation should = be ready to overcome this.. There are many ways to achieve that. A naive im= plementation that runs in SW of the control card is also possible of course. And they would sensd and receive packets=C2=A0

=C2=A0<= /span>

My 2c.<= /span>

Get Outlook for Android

=C2=A0

From: Robert Raszuk = <robert@raszuk.ne= t>
Sent: Saturday, November 23, 2019, 12:37
To: = Alexander Vainshtein; Shraddha Hegde
Cc: = spring@ietf.org; rt= gwg@ietf.org; rtg-bfd@ietf.org
Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR Pat= hs

=C2=A0

Hi Sasha, =

=C2=A0

On the surface your suggestion = may look cool - but if you zoom in - I do not think it will work in practic= e.=C2=A0

=C2=A0

See - one of the biggest value = of BFD is its offload to line card's hardware. And in most cases it is = ingress line card to the box. So if you instruct such hardware to respond t= o SID address loopback you still did not gain much in terms of detection router's fabric failures, remote LC fa= ilure or control=C2=A0plane issues which could soon result in box failure. = The catalogue of router failures is of course much more colorful.=C2=A0<= /u>

=C2=A0

If you ask BFD to be responded = by RP/RE it no longer has the BFD advantage.=C2=A0

=C2=A0

IMHO the best way to detect nod= e failure=C2=A0is actually to send the probes *across* the node under test = to its peers.=C2=A0

=C2=A0

The way I would think of establ= ishing such m-hop sessions would be fully automated with one knob per IGP a= dj. ex: "bfd detect-node-failure [max N]" where local BFD subsyst= em would create N sessions to IGP peers of the node we are to protect. LSDB has those peers so no new protocol extension= =C2=A0is needed, perhaps even no new IETF draft is required :). N would be = the limit of such sessions in case the node under protection has say 10s of= peers. Default could be perhaps even 1.=C2=A0

=C2=A0

Thx,

Robert.

=C2=A0

=C2=A0

On Sat, Nov 23, 2019 at 10:00 A= M Alexander Vainshtein <Alexander.Vainshtein@ecitele.com> wrote:

Shraddha, Robert and all,

Regarding Robert's question:=C2=A0

I wonder if multi-hop IP BFD session with address= es used as /32 (or /128) prefixes serving as Nose SIDs of R8 and R7 respect= ively could be used as such a trigger by R7? Such a session would not respond to link failures, and I find it problematic to= imagine a scenario when it would be kept UP in the case of a real node fai= lure.

=C2=A0<= /span>

Of course such a session would have to be slow en= ough not to react to link failures. But it still couks be much faster than = IGP conversion IMHO.

=C2=A0<= /span>

My 2c,<= /span>

Sasha

=C2=A0<= /span>

Such

=C2=A0<= /span>

=C2=A0

Get Outlook for Android

=C2=A0

From: spring <spring-bounces@ie= tf.org> on behalf of Robert Raszuk <robert@raszuk.net>
Sent: Friday, November 22, 2019, 11:22
To: = Shraddha Hegde
Cc: = spring@ietf.org; rt= gwg@ietf.org
Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR Pat= hs

=C2=A0

Hi=C2=A0Shraddha,

=C2=A0

I have one question to the docu= ment.=C2=A0

=C2=A0

As you know the critical elemen= t for=C2=A0the effective protection of any scheme is the failure detection.= On that your draft seems to have just one little paragraph:=C2=A0

=C2=A0

=C2=A0=C2=A0 Note that R7 activates the node-protecting backup path when i=
t
=C2=A0=C2=A0 detects that t=
he link to R8 has failed.=C2=A0 R7 does not know that node
=C2=A0=C2=A0 R8 has actuall=
y failed.=C2=A0 However, the node-protecting backup path is
=C2=A0=C2=A0 computed assum=
ing that the failure of the link to R8 implies that R8
=C2=A0=C2=A0 has failed.

=C2=A0

Well IMO this is not enough. Sp= ecifically=C2=A0there can be a lot of types of node failure when link is st= ill up. Moreover there can be even running BFD across the link just fine wh= en say fabric failure occurs at R8.=C2=A0

=C2=A0

While this is not solely issue = with this draft, it is our common IETF failure to provide correct means of = detecting end to end path or fragments of path failures (I am specifically = not calling them segment here :).=C2=A0

=C2=A0

For example I propose that to e= ffectively detect R8 failure as node failure which is the topic of your pro= posal a mechanism is clearly defined and includes bi-dir data plane probes = send between R7-R9, R3-R7, R4-R7, R4-R9, R3-R9

=C2=A0

Many thx,<= /p>

Robert.

=C2=A0

=C2=A0

On Fri, Nov 22, 2019 at 4:38 AM= Shraddha Hegde <shraddha=3D40juniper.net@dmarc.ietf..org> wrote:

WG,

=C2=A0

This is the draft I pointed out= that talks about solutions for providing node-protection.

It covers Anycast case as well = as keeping forwarding plane longer.

=C2=A0

Review and comments solicited.<= u>

=C2=A0

Rgds

Shraddha

=C2=A0

_______________________________= ________________
rtgwg mailing list
rtgwg@ietf.org
https://www.ietf.org/mailm= an/listinfo/rtgwg

=C2=A0

=C2=A0


___________________________________________________________________________=

This e-mail message is intended for the recipient only and contains informa= tion which is
CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have recei= ved this
transmission in error, please inform us by e-mail, phone or fax, and then d= elete the original
and all copies thereof.
___________________________________________________________________________=

=C2=A0


___________________________________________________________________________=

This e-mail message is intended for the recipient only and contains informa= tion which is
CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have recei= ved this
transmission in error, please inform us by e-mail, phone or fax, and then d= elete the original
and all copies thereof.
___________________________________________________________________________=

--000000000000a223b50598b57f1c-- From nobody Mon Dec 2 06:44:53 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA46A12006D; Mon, 2 Dec 2019 06:44:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.398 X-Spam-Level: X-Spam-Status: No, score=-1.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, PDS_BTC_ID=0.499, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HxDtEorl-j3k; Mon, 2 Dec 2019 06:44:48 -0800 (PST) Received: from mail-lf1-x134.google.com (mail-lf1-x134.google.com [IPv6:2a00:1450:4864:20::134]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1B33120045; Mon, 2 Dec 2019 06:44:47 -0800 (PST) Received: by mail-lf1-x134.google.com with SMTP id r15so25260707lff.2; Mon, 02 Dec 2019 06:44:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=blRBDwHn/MWC0tW4aG6s4FiOPaxMdhrnUQLNdHUNYzc=; b=gnChZ5T7eJtF/94DBVpnqb5iYSDcfL7Mr3Zuv7UNQueyU3JFIzUnDotCnmG7MexWOX vBw2ElN9s+XHlquueSpayrP5j2AsIDK3qb0PBAegI7f015ROpTN7Cef028Pb7xsv2BGE 6NhPCLohS/dtCu26snqAZsgug5WsXDk2jNgks5chLT8YBvJ9duqm6gt57vAOQzJPu9SI n+sEZqoEDuEmkyLYUPv/3mUh4I9M6WJdBM8Gt+Y3gU+GC8J1i4KXCDxWecDgAZjPoPex bDLpYgcsAXGBAkmGww8BYWfZuK8tI6pydrckqS+tL+e44vP0ZX/QYwkQXJ53fCaSscw3 lpsw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=blRBDwHn/MWC0tW4aG6s4FiOPaxMdhrnUQLNdHUNYzc=; b=iPZ2+5wQvjkANf9XSmjzKEEOQrH5OcmJgWuW2ghunhcGCoJpQeNvNT80gLaB5OXrpU iJ1mHYYzBjOjK/JlgDXN9Ow29qfblgfAdpC/9Eq9S+8i7ow248ji1y7Px790kmFyXnYU DT0wTOj0D9TTTBp3lI3qENchlj+qDNQLAVv4c/wXjuDqhS3R/VP9CGMcKuxKg8TcuIK7 Uwr4f+egvSBpCuavVR3DK0qJDO2JQHg0Oa0l/VS0jRHMcZzNvyf/DWpDnZbnIi8w1hgx +8CzG8mGJhytnwxAJqfSdjAbaNdll+yNBBnev/sFkO6GFIbxo1ais9sJfo9438I45Fp6 Xi9Q== X-Gm-Message-State: APjAAAVYl2RCwThAkXqc3DMRMyjKHi8RhM+0hrnHOw/Rcn6OscOaf2cl X+QFZYo/OqT+E63wGg69CmOB77zXk54mpt/d6GhEE80m X-Google-Smtp-Source: APXvYqyDkGa67kdUn1m3Ma7Jhc2U4i1Q7ZTfXOwdsBSwJDFxh9xseY7HIBpoiastTBpPxr65L4cACyVBjPhgHYJJg/M= X-Received: by 2002:a19:ae10:: with SMTP id f16mr28234617lfc.147.1575297885852; Mon, 02 Dec 2019 06:44:45 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Greg Mirsky Date: Mon, 2 Dec 2019 09:44:34 -0500 Message-ID: Subject: Node failure detection (was Re: [spring] Draft for Node protection of intermediate nodes in SR Paths) To: Alexander Vainshtein Cc: Robert Raszuk , Shraddha Hegde , "spring@ietf.org" , "rtg-bfd@ietf.org" , "rtgwg@ietf.org" Content-Type: multipart/alternative; boundary="000000000000e6d85e0598b99e9a" Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Dec 2019 14:44:52 -0000 --000000000000e6d85e0598b99e9a Content-Type: text/plain; charset="UTF-8" Hi Sasha, et al., many thanks for the great discussion. Please correct me if my recollection is not accurate, but at the time of RFC 4090 it was agreed, that a trigger to local protection may be in fact a false negative and, as a result, the protection switchover is suboptimal. I understand that as the realization that there should be a practical and pragmatic balance between time to detect a failure and the accuracy of characterizing it. I think, that the draft Shraddha had mentioned, doesn't need to discuss any of these issues. What I'm curious, as you've suggested to the possible use of S-BFD, what then the detection time could be. Unlike with the asynchronous mode of BFD, S-BFD, as I understand, doesn't have predictable detection time like defined in Section 6.8.4 RFC 5880. The detection time by S-BFD, I believe, characterizes RTT and RTT may vary from probe to probe significantly. True, a system may gather S-BFD RTT statistics to set and periodically adjust the detection time to achieve more accurate failure detection. But, in my view, it seems like significant complexity comparing to RFC 5880. Regards, Greg On Sat, Nov 23, 2019 at 9:45 AM Alexander Vainshtein < Alexander.Vainshtein@ecitele.com> wrote: > Robert, > On the second thought, for the purpose of this draft (i.e. in the scope of > SR) it is possible to implement your suggestion by running S-BFD sessions > between R7 (as the initiator) and each other adjacency of R8 (acting as > Reflectors) of a SR policy with list of two SIDs: > - protected adjacency between R7 and R8 > - Node SID of the specific "other" adjacency of R8. > > If all these sessions fail, R7 can reliably consider R8 as failed. > > I am not sure this would be much better than multi-hop IP BFD, and it > looks much more complicated to me. > > > What do you think? > > > > > Get Outlook for Android > > ------------------------------ > *From:* Alexander Vainshtein > *Sent:* Saturday, November 23, 2019, 13:15 > *To:* Robert Raszuk; Shraddha Hegde > *Cc:* spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org > *Subject:* Re: [spring] Draft for Node protection of intermediate nodes > in SR Paths > > Robert, > Lots of thanks for a prompt response. > > I respectfully disagree with your statement that BFD implementation is > usually offloaded to the HW of the ingress line card. I do not think this > can wor for MH BFD sessions because the ingress and egress line cards are > not known in advance and change with the routing changes > A good multi-hop BFD implementation should be ready to overcome this.. > There are many ways to achieve that. A naive implementation that runs in SW > of the control card is also possible of course. And they would sensd and > receive packets > > My 2c. > Get Outlook for Android > > ------------------------------ > *From:* Robert Raszuk > *Sent:* Saturday, November 23, 2019, 12:37 > *To:* Alexander Vainshtein; Shraddha Hegde > *Cc:* spring@ietf.org; rtgwg@ietf.org; rtg-bfd@ietf.org > *Subject:* Re: [spring] Draft for Node protection of intermediate nodes > in SR Paths > > Hi Sasha, > > On the surface your suggestion may look cool - but if you zoom in - I do > not think it will work in practice. > > See - one of the biggest value of BFD is its offload to line card's > hardware. And in most cases it is ingress line card to the box. So if you > instruct such hardware to respond to SID address loopback you still did not > gain much in terms of detection router's fabric failures, remote LC failure > or control plane issues which could soon result in box failure. The > catalogue of router failures is of course much more colorful. > > If you ask BFD to be responded by RP/RE it no longer has the BFD > advantage. > > IMHO the best way to detect node failure is actually to send the probes > *across* the node under test to its peers. > > The way I would think of establishing such m-hop sessions would be fully > automated with one knob per IGP adj. ex: "bfd detect-node-failure [max N]" > where local BFD subsystem would create N sessions to IGP peers of the node > we are to protect. LSDB has those peers so no new protocol extension is > needed, perhaps even no new IETF draft is required :). N would be the limit > of such sessions in case the node under protection has say 10s of peers. > Default could be perhaps even 1. > > Thx, > Robert. > > > On Sat, Nov 23, 2019 at 10:00 AM Alexander Vainshtein < > Alexander.Vainshtein@ecitele.com> wrote: > >> Shraddha, Robert and all, >> Regarding Robert's question: >> I wonder if multi-hop IP BFD session with addresses used as /32 (or /128) >> prefixes serving as Nose SIDs of R8 and R7 respectively could be used as >> such a trigger by R7? Such a session would not respond to link failures, >> and I find it problematic to imagine a scenario when it would be kept UP in >> the case of a real node failure. >> >> Of course such a session would have to be slow enough not to react to >> link failures. But it still couks be much faster than IGP conversion IMHO. >> >> My 2c, >> Sasha >> >> Such >> >> >> Get Outlook for Android >> >> >> ------------------------------ >> *From:* spring on behalf of Robert Raszuk < >> robert@raszuk.net> >> *Sent:* Friday, November 22, 2019, 11:22 >> *To:* Shraddha Hegde >> *Cc:* spring@ietf.org; rtgwg@ietf.org >> *Subject:* Re: [spring] Draft for Node protection of intermediate nodes >> in SR Paths >> >> Hi Shraddha, >> >> I have one question to the document. >> >> As you know the critical element for the effective protection of any >> scheme is the failure detection. On that your draft seems to have just one >> little paragraph: >> >> Note that R7 activates the node-protecting backup path when it >> detects that the link to R8 has failed. R7 does not know that node >> R8 has actually failed. However, the node-protecting backup path is >> computed assuming that the failure of the link to R8 implies that R8 >> has failed. >> >> >> Well IMO this is not enough. Specifically there can be a lot of types of >> node failure when link is still up. Moreover there can be even running BFD >> across the link just fine when say fabric failure occurs at R8. >> >> While this is not solely issue with this draft, it is our common IETF >> failure to provide correct means of detecting end to end path or fragments >> of path failures (I am specifically not calling them segment here :). >> >> For example I propose that to effectively detect R8 failure as node >> failure which is the topic of your proposal a mechanism is clearly defined >> and includes bi-dir data plane probes send between R7-R9, R3-R7, R4-R7, >> R4-R9, R3-R9 >> >> Many thx, >> Robert. >> >> >> On Fri, Nov 22, 2019 at 4:38 AM Shraddha Hegde > 40juniper.net@dmarc.ietf..org <40juniper.net@dmarc.ietf.org>> wrote: >> >>> WG, >>> >>> This is the draft I pointed out that talks about solutions for providing >>> node-protection. >>> It covers Anycast case as well as keeping forwarding plane longer. >>> >>> *https://tools.ietf.org/html/draft-hegde-spring-node-protection-for-sr-te-paths-05* >>> >>> >>> Review and comments solicited. >>> >>> Rgds >>> Shraddha >>> >>> _______________________________________________ >>> rtgwg mailing list >>> rtgwg@ietf.org >>> https://www.ietf.org/mailman/listinfo/rtgwg >>> >> >> > > > ___________________________________________________________________________ > > This e-mail message is intended for the recipient only and contains > information which is > CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have > received this > transmission in error, please inform us by e-mail, phone or fax, and then > delete the original > and all copies thereof. > ___________________________________________________________________________ > --000000000000e6d85e0598b99e9a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Sasha, et al.,
many thanks f= or the great discussion. Please correct me if my recollection is not accura= te, but at the time of RFC 4090 it was agreed, that a trigger to local prot= ection may be in fact a false negative and, as a result, the protection swi= tchover is suboptimal. I understand that as the realization that there shou= ld be a practical and pragmatic balance between time to detect a failure an= d the accuracy of characterizing it. I think, that the draft Shraddha had m= entioned, doesn't need to discuss any of these issues.
What I= 'm curious, as you've suggested to the possible use of S-BFD, what = then the detection time could be. Unlike with the asynchronous mode of BFD,= S-BFD, as I understand, doesn't have predictable detection time like d= efined in Section 6.8.4 RFC 5880. The detection time by S-BFD, I believe, c= haracterizes RTT and RTT may vary from probe to probe significantly. True, = a system may gather S-BFD RTT statistics to set and periodically adjust the= detection time to achieve more accurate failure detection. But, in my view= , it seems like significant complexity comparing to RFC 5880.
Regards,
Greg

On Sat, Nov 23, 2019 at 9:45 AM Alexande= r Vainshtein <Alexan= der.Vainshtein@ecitele.com> wrote:
Robert,
On the second thought, for the purpose of this draft (i.e. in the scope of = SR) it is possible to implement your suggestion by running S-BFD sessions b= etween R7 (as the initiator) and each other adjacency of R8=C2=A0 (acting a= s Reflectors) of a SR policy with list of two SIDs:
- protected adjacency between R7 and R8
- Node SID of the specific "other" adjacency=C2=A0 of R8.

If all these sessions fail, R7 can reliably consider R8 as failed.=C2=A0

I am not sure this would be much better than multi-hop IP BFD, and it looks= much more complicated to me.=C2=A0


What do you think?




Get Outlook for Android=
From: Alexander Vainshtein <Alexander.Vainshtein@ecitele.com>
Sent: Saturday, November 23, 2019, 13:15
To: Robert Raszuk; Shraddha Hegde
Cc: s= pring@ietf.org; rtg= wg@ietf.org; rtg-= bfd@ietf.org
Subject: Re: [spring] Draft for Node protection of interme= diate nodes in SR Paths

Robert,
Lots of thanks for a prompt response.

I respectfully disagree with your statement that BFD implementation=C2=A0 i= s usually offloaded to the HW of the ingress line card.=C2=A0 I do not thin= k this can wor for MH BFD sessions because the ingress and egress line card= s are not known in advance and change with the routing changes
A good=C2=A0 multi-hop BFD implementation should be ready to overcome this.= . There are many ways to achieve that. A naive implementation that runs in = SW of the control card is also possible of course. And they would sensd and= receive packets=C2=A0

My 2c.
Get Outlook for Android
From: Robert Raszuk <= robert@raszuk.net>
Sent: Saturday, November 23, 2019, 12:37
To: Alexander Vainshtein; Shraddha Hegde
Cc: s= pring@ietf.org; rtg= wg@ietf.org; rtg-= bfd@ietf.org
Subject: Re: [spring] Draft for Node protection of interme= diate nodes in SR Paths

Hi Sasha,

On the surface your suggestion may look cool - but if you zoom in - I = do not think it will work in practice.=C2=A0

See - one of the biggest value of BFD is its offload to line card'= s hardware. And in most cases it is ingress line card to the box. So if you= instruct such hardware to respond to SID address loopback you still did no= t gain much in terms of detection router's fabric failures, remote LC failure or control=C2=A0plane issues which coul= d soon result in box failure. The catalogue of router failures is of course= much more colorful.=C2=A0

If you ask BFD to be responded by RP/RE it no longer has the BFD advan= tage.=C2=A0

IMHO the best way to detect node failure=C2=A0is actually to send the = probes *across* the node under test to its peers.=C2=A0

The way I would think of establishing such m-hop sessions would be ful= ly automated with one knob per IGP adj. ex: "bfd detect-node-failure [= max N]" where local BFD subsystem would create N sessions to IGP peers= of the node we are to protect. LSDB has those peers so no new protocol extension=C2=A0is needed, perhaps even no new IET= F draft is required :). N would be the limit of such sessions in case the n= ode under protection has say 10s of peers. Default could be perhaps even 1.= =C2=A0

Thx,
Robert.


On Sat, Nov 23, 2019 at 10:00 AM Alex= ander Vainshtein <Alexander.Vainshtein@ecitele.com> wrote:
Shraddha, Robert and all,
Regarding Robert's question:=C2=A0
I wonder if multi-hop IP BFD session with addresses used as /32 (or /128) p= refixes serving as Nose SIDs of R8 and R7 respectively could be used as suc= h a trigger by R7? Such a session would not respond to link failures, and I= find it problematic to imagine a scenario when it would be kept UP in the case of a real node failure.

Of course such a session would have to be slow enough not to react to link = failures. But it still couks be much faster than IGP conversion IMHO.

My 2c,
Sasha

Such


Get Outlook for Android
From: spring <spring-bounces@ietf.o= rg> on behalf of Robert Raszuk <robert@raszuk.net>
Sent: Friday, November 22, 2019, 11:22
To: Shraddha Hegde
Cc: s= pring@ietf.org; rtgwg@ietf.org
Subject: Re: [spring] Draft for Node protection of interme= diate nodes in SR Paths

Hi=C2=A0Shraddha,

I have one question to the document.=C2=A0

As you know the critical element for=C2=A0the effective protection of = any scheme is the failure detection. On that your draft seems to have just = one little paragraph:=C2=A0

   Note that R7 activates the node-protecting b=
ackup path when it
   detects that the link to R8 has failed.  R7 does not know that node
   R8 has actually failed.  However, the node-protecting backup path is
   computed assuming that the failure of the link to R8 implies that R8
   has failed.

Well IMO this is not enough. Specifically=C2=A0there can be a lot of t= ypes of node failure when link is still up. Moreover there can be even runn= ing BFD across the link just fine when say fabric failure occurs at R8.=C2= =A0

While this is not solely issue with this draft, it is our common IETF = failure to provide correct means of detecting end to end path or fragments = of path failures (I am specifically not calling them segment here :).=C2=A0=

For example I propose that to effectively detect R8 failure as node fa= ilure which is the topic of your proposal a mechanism is clearly defined an= d includes bi-dir data plane probes send between R7-R9, R3-R7, R4-R7, R4-R9= , R3-R9

Many thx,
Robert.


On Fri, Nov 22, 2019 at 4:38 AM Shrad= dha Hegde <shraddha=3D40juniper.net@dmarc.ietf..org> wrote:
WG,
=C2=A0
This is the draft I pointed out that talks about solutions for providi= ng node-protection.
It covers Anycast case as well as keeping forwarding plane longer.
=C2=A0
Review and comments solicited.
=C2=A0
Rgds
Shraddha
=C2=A0
_______________________________________________
rtgwg mailing list
rtgwg@ietf.org
https://www.ietf.org/mailman/listinfo/rtgwg



___________________________________________________________________________=

This e-mail message is intended for the recipient only and contains informa= tion which is
CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have recei= ved this
transmission in error, please inform us by e-mail, phone or fax, and then d= elete the original
and all copies thereof.
___________________________________________________________________________=
--000000000000e6d85e0598b99e9a-- From nobody Mon Dec 2 09:38:31 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 43D72120088; Mon, 2 Dec 2019 09:38:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pQDgJQs8jAOA; Mon, 2 Dec 2019 09:38:29 -0800 (PST) Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id 54D74120048; Mon, 2 Dec 2019 09:38:29 -0800 (PST) Received: by slice.pfrc.org (Postfix, from userid 1001) id 7B7D71E2F5; Mon, 2 Dec 2019 12:42:41 -0500 (EST) Date: Mon, 2 Dec 2019 12:42:41 -0500 From: Jeffrey Haas To: Greg Mirsky Cc: rtg-bfd WG , bfd-chairs@ietf.org, Martin Vigoureux Subject: Re: Fwd: New Version Notification for draft-ietf-bfd-vxlan-09.txt Message-ID: <20191202174241.GI18175@pfrc.org> References: <157506260768.4822.2596294333502316658.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Dec 2019 17:38:30 -0000 Greg, On Fri, Nov 29, 2019 at 01:27:58PM -0800, Greg Mirsky wrote: > Dear All, > this version includes the update to the Security Considerations section > regarding the use of an internal host loopback address as the destination > IP address of the inner IP header, as discussed at the meeting in Singapore. Thank you. I believe this closes the last open issue. I will submit this to the IESG. Thanks everyone who provided feedback on this document. -- Jeff From nobody Mon Dec 9 11:15:10 2019 Return-Path: X-Original-To: rtg-bfd@ietf.org Delivered-To: rtg-bfd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 69683120025; Mon, 9 Dec 2019 11:15:04 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: rtg-bfd@ietf.org Subject: I-D Action: draft-ietf-bfd-optimizing-authentication-09.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.113.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: rtg-bfd@ietf.org Message-ID: <157591890439.2262.7883539590120401963@ietfa.amsl.com> Date: Mon, 09 Dec 2019 11:15:04 -0800 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Dec 2019 19:15:04 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Bidirectional Forwarding Detection WG of the IETF. Title : Optimizing BFD Authentication Authors : Mahesh Jethanandani Ashesh Mishra Ankur Saxena Manav Bhatia Filename : draft-ietf-bfd-optimizing-authentication-09.txt Pages : 7 Date : 2019-12-09 Abstract: This document describes an optimization to BFD Authentication as described in Section 6.7 of BFD RFC5880. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-bfd-optimizing-authentication/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-bfd-optimizing-authentication-09 https://datatracker.ietf.org/doc/html/draft-ietf-bfd-optimizing-authentication-09 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-bfd-optimizing-authentication-09 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Dec 10 04:38:38 2019 Return-Path: X-Original-To: rtg-bfd@ietf.org Delivered-To: rtg-bfd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 999A3120137; Tue, 10 Dec 2019 04:38:30 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: =?utf-8?q?Mirja_K=C3=BChlewind_via_Datatracker?= To: "The IESG" Cc: draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, jhaas@pfrc.org, rtg-bfd@ietf.org Subject: =?utf-8?q?Mirja_K=C3=BChlewind=27s_No_Objection_on_draft-ietf-bfd-?= =?utf-8?q?vxlan-09=3A_=28with_COMMENT=29?= X-Test-IDTracker: no X-IETF-IDTracker: 6.113.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: =?utf-8?q?Mirja_K=C3=BChlewind?= Message-ID: <157598151061.9913.9879995266246996335.idtracker@ietfa.amsl.com> Date: Tue, 10 Dec 2019 04:38:30 -0800 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Dec 2019 12:38:31 -0000 Mirja Kühlewind has entered the following ballot position for draft-ietf-bfd-vxlan-09: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- This document describes the use of BFD in VXLAN, however, it does not specify any new protocol elements or extension. Therefore I would expect such a document to be informational. The shepherd write-up doesn't give any additional information about why this doc is PS. From nobody Tue Dec 10 05:22:49 2019 Return-Path: X-Original-To: rtg-bfd@ietf.org Delivered-To: rtg-bfd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 721AF12006F; Tue, 10 Dec 2019 05:22:43 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: =?utf-8?q?Mirja_K=C3=BChlewind_via_Datatracker?= To: "The IESG" Cc: draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, jhaas@pfrc.org, rtg-bfd@ietf.org Subject: =?utf-8?q?Mirja_K=C3=BChlewind=27s_No_Objection_on_draft-ietf-bfd-?= =?utf-8?q?vxlan-09=3A_=28with_COMMENT=29?= X-Test-IDTracker: no X-IETF-IDTracker: 6.113.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: =?utf-8?q?Mirja_K=C3=BChlewind?= Message-ID: <157598416346.9913.15971076491241071246.idtracker@ietfa.amsl.com> Date: Tue, 10 Dec 2019 05:22:43 -0800 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Dec 2019 13:22:43 -0000 Mirja Kühlewind has entered the following ballot position for draft-ietf-bfd-vxlan-09: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- UPDATE: I didn't not see a reply to the original issue raised by the TSV-ART review (Thanks Olivier!). Please have a lock and provide a response. I don't think this raises discuss level but I think some clarifications would be good! This document describes the use of BFD in VXLAN, however, it does not specify any new protocol elements or extension. Therefore I would expect such a document to be informational. The shepherd write-up doesn't give any additional information about why this doc is PS. From nobody Tue Dec 10 07:34:15 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C346F1200DB; Tue, 10 Dec 2019 07:34:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HBftg0w4hFYd; Tue, 10 Dec 2019 07:34:06 -0800 (PST) Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id 6D6C3120024; Tue, 10 Dec 2019 07:34:03 -0800 (PST) Received: by slice.pfrc.org (Postfix, from userid 1001) id EB71A1E2F5; Tue, 10 Dec 2019 10:38:23 -0500 (EST) Date: Tue, 10 Dec 2019 10:38:23 -0500 From: Jeffrey Haas To: Mirja =?iso-8859-1?Q?K=FChlewind?= Cc: The IESG , draft-ietf-bfd-vxlan@ietf.org, bfd-chairs@ietf.org, rtg-bfd@ietf.org Subject: Re: Mirja =?iso-8859-1?Q?K=FChlewind'?= =?iso-8859-1?Q?s?= No Objection on draft-ietf-bfd-vxlan-09: (with COMMENT) Message-ID: <20191210153823.GA29250@pfrc.org> References: <157598151061.9913.9879995266246996335.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <157598151061.9913.9879995266246996335.idtracker@ietfa.amsl.com> User-Agent: Mutt/1.5.21 (2010-09-15) Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Dec 2019 15:34:08 -0000 Mirja, On Tue, Dec 10, 2019 at 04:38:30AM -0800, Mirja Kühlewind via Datatracker wrote: > This document describes the use of BFD in VXLAN, however, it does not specify > any new protocol elements or extension. Therefore I would expect such a > document to be informational. The shepherd write-up doesn't give any additional > information about why this doc is PS. The chairs did ask Martin to enquire from the IESG what level of standards this document should target. We realize that the base vxlan spec (oddly) is Informational, however we were encouraged at multiple points to go for Proposed standard. Martin theoretically enquired of the IESG, but got no answer. We were told on November 6 to go ahead with Proposed. The BFD Working Group is ambivalent about the level of standard for this document. My request is that the IESG provide some level of consistent guidance here rather than your single comment. :-) I leave it to our AD, Martin, to summarize back the final status of your collective deliberations and we shall update the document accordingly. -- Jeff From nobody Tue Dec 10 08:41:54 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75663120043; Tue, 10 Dec 2019 08:41:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t3ZWnNvHsDWe; Tue, 10 Dec 2019 08:41:51 -0800 (PST) Received: from mail-lf1-x134.google.com (mail-lf1-x134.google.com [IPv6:2a00:1450:4864:20::134]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D13F3120024; Tue, 10 Dec 2019 08:41:50 -0800 (PST) Received: by mail-lf1-x134.google.com with SMTP id l18so14276974lfc.1; Tue, 10 Dec 2019 08:41:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ykYqyX81wTwwYk3pqblQl3YFXI+BkrC/+mqnBfP0PWk=; b=AUM9DVntY9YAuQkwWaefklTAFxLpOVhTluaUWS8CMhuPKLudmUHlIKTOH0+oLIeg1j gbDb80qpzyJRfyEvwZhXIeZLEJFAtHTI0u2vz0BcsVBz4w81S2O1svkDmfaBfCd3GRls jFaT+naCGTAXuG9hgzoWXNlq0Xc2lCFAw/bN7gci1ptszc2wV9EacxQ3f7Og/hoFlye5 +tH9kY2+YcoWnxo8sm7rqBcLGhZYc0p7cGFDoDRBEJis57NJlGFCsBVyznlS72x0W9tt e/9TqBJlMVH4fnPNhkWt6KrWDAMXBj2kKJQYJjSezdkhIJrspJhcWFE1qkXHB/erxs+6 SknA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ykYqyX81wTwwYk3pqblQl3YFXI+BkrC/+mqnBfP0PWk=; b=mA0hxBsjeFEg3sxuIWo1OeQzC7capwP1u59/l6x01AKvYnbQTQ9moO7izU3eyJ8uut 3fczsLayOz1hHIROAVrQFrWIolZLmVwdu+ALnugxZYdU6DoBMoRv2ElOWsZml+QvjMfx +s7NNPxUIur3VgHwpD9PdOV6rsMyjCoJCZnsj1DvNMwW4yQUOM5jN2LOFLWg6CkABn8w h6D4WCWGjMWHUCR35gdiHgQDgqm1ts4hd/Y8HQnWa1WQ56vK7zobPdHYUtfZcnMOrXLC zOGzQldx+Q9TlEUo/FkdV3zzPPSiUUPa0N91rHwqxf6rZunnHWoUKn5hTaOSGlc6T1FD AY7A== X-Gm-Message-State: APjAAAUaEQKkoAY7TyUPT7kXBwSAY3hYA4DRRZGewcMIwwvU6QCYMEyH sa7hoS5WyxtzskEaC+HcLGbG1FfWpgf2ZMLFKf9KtRuy X-Google-Smtp-Source: APXvYqxEsV81eWG0jgfZwDpBIXHku41RrllR2AquziuNZWLyOi28M1rRSqtKz+g6d8Few5QCw2r4hL4fFzh4cxRXr/A= X-Received: by 2002:ac2:5468:: with SMTP id e8mr7612775lfn.113.1575996108941; Tue, 10 Dec 2019 08:41:48 -0800 (PST) MIME-Version: 1.0 References: <157598416346.9913.15971076491241071246.idtracker@ietfa.amsl.com> In-Reply-To: <157598416346.9913.15971076491241071246.idtracker@ietfa.amsl.com> From: Greg Mirsky Date: Tue, 10 Dec 2019 08:41:38 -0800 Message-ID: Subject: =?UTF-8?Q?Re=3A_Mirja_K=C3=BChlewind=27s_No_Objection_on_draft=2Dietf=2Dbf?= =?UTF-8?Q?d=2Dvxlan=2D09=3A_=28with_COMMENT=29?= To: =?UTF-8?Q?Mirja_K=C3=BChlewind?= Cc: The IESG , draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, rtg-bfd WG Content-Type: multipart/alternative; boundary="0000000000003daf1e05995c30b8" Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Dec 2019 16:41:52 -0000 --0000000000003daf1e05995c30b8 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Mirja and Olivier, I apologize that some of Olivier's comments were not addressed. I've responded to Olivier's detailed comments in https://mailarchive.ietf.org/arch/browse/rtg-bfd/?q=3DTsvart%20last%20call.= I much appreciate your help in identifying the remaining questions and comments. Regards, Greg On Tue, Dec 10, 2019 at 5:22 AM Mirja K=C3=BChlewind via Datatracker < noreply@ietf.org> wrote: > Mirja K=C3=BChlewind has entered the following ballot position for > draft-ietf-bfd-vxlan-09: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > UPDATE: I didn't not see a reply to the original issue raised by the > TSV-ART > review (Thanks Olivier!). Please have a lock and provide a response. I > don't > think this raises discuss level but I think some clarifications would be > good! > > This document describes the use of BFD in VXLAN, however, it does not > specify > any new protocol elements or extension. Therefore I would expect such a > document to be informational. The shepherd write-up doesn't give any > additional > information about why this doc is PS. > > > --0000000000003daf1e05995c30b8 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Mirja and Olivier,
I apologize that some of Olivier= 's comments were not addressed. I've responded to Olivier's det= ailed comments=C2=A0in=C2=A0https://mailarchive.ietf.org/arch/b= rowse/rtg-bfd/?q=3DTsvart%20last%20call. I much appreciate your help in= identifying the remaining questions and comments.=C2=A0

Regards,
Greg

On Tue, Dec 10, 2019 at 5:22 AM Mirja K= =C3=BChlewind via Datatracker <norep= ly@ietf.org> wrote:
Mirja K=C3=BChlewind has entered the following ballot position f= or
draft-ietf-bfd-vxlan-09: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/s= tatement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-bf= d-vxlan/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

UPDATE: I didn't not see a reply to the original issue raised by the TS= V-ART
review (Thanks Olivier!). Please have a lock and provide a response. I don&= #39;t
think this raises discuss level but I think some clarifications would be go= od!

This document describes the use of BFD in VXLAN, however, it does not speci= fy
any new protocol elements or extension. Therefore I would expect such a
document to be informational. The shepherd write-up doesn't give any ad= ditional
information about why this doc is PS.


--0000000000003daf1e05995c30b8-- From nobody Tue Dec 10 09:13:10 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5CD51200E5; Tue, 10 Dec 2019 09:13:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F1rqQCznMSCT; Tue, 10 Dec 2019 09:13:06 -0800 (PST) Received: from wp513.webpack.hosteurope.de (wp513.webpack.hosteurope.de [IPv6:2a01:488:42:1000:50ed:8223::]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A2886120100; Tue, 10 Dec 2019 09:13:06 -0800 (PST) Received: from 200116b824c23e009dab3539a50877e1.dip.versatel-1u1.de ([2001:16b8:24c2:3e00:9dab:3539:a508:77e1]); authenticated by wp513.webpack.hosteurope.de running ExIM with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) id 1iej4H-0006gu-OX; Tue, 10 Dec 2019 18:13:01 +0100 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: =?utf-8?Q?Re=3A_Mirja_K=C3=BChlewind=27s_No_Objection_on_draft-ie?= =?utf-8?Q?tf-bfd-vxlan-09=3A_=28with_COMMENT=29?= From: Mirja Kuehlewind In-Reply-To: Date: Tue, 10 Dec 2019 18:13:00 +0100 Cc: The IESG , draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, rtg-bfd WG Content-Transfer-Encoding: quoted-printable Message-Id: <52ED4E28-6757-41F9-AAF2-7628671CF809@kuehlewind.net> References: <157598416346.9913.15971076491241071246.idtracker@ietfa.amsl.com> To: Greg Mirsky X-Mailer: Apple Mail (2.3445.104.11) X-bounce-key: webpack.hosteurope.de;ietf@kuehlewind.net;1575997986;6495fd25; X-HE-SMSGID: 1iej4H-0006gu-OX Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Dec 2019 17:13:09 -0000 Hi Greg, I also saw that you replied to Carlos comments but I don=E2=80=99t think = I saw a reply to Olivier=E2=80=99s initial mail. The link you=E2=80=99ve = sent below seems also a link to one of Carlos replies. See here for Olivier=E2=80=99s review: = https://datatracker.ietf.org/doc/review-ietf-bfd-vxlan-07-tsvart-lc-bonave= nture-2019-05-31/ Mirja > On 10. Dec 2019, at 17:41, Greg Mirsky wrote: >=20 > Hi Mirja and Olivier, > I apologize that some of Olivier's comments were not addressed. I've = responded to Olivier's detailed comments in = https://mailarchive.ietf.org/arch/browse/rtg-bfd/?q=3DTsvart%20last%20call= . I much appreciate your help in identifying the remaining questions and = comments.=20 >=20 > Regards, > Greg >=20 > On Tue, Dec 10, 2019 at 5:22 AM Mirja K=C3=BChlewind via Datatracker = wrote: > Mirja K=C3=BChlewind has entered the following ballot position for > draft-ietf-bfd-vxlan-09: No Objection >=20 > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut = this > introductory paragraph, however.) >=20 >=20 > Please refer to = https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. >=20 >=20 > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ >=20 >=20 >=20 > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- >=20 > UPDATE: I didn't not see a reply to the original issue raised by the = TSV-ART > review (Thanks Olivier!). Please have a lock and provide a response. I = don't > think this raises discuss level but I think some clarifications would = be good! >=20 > This document describes the use of BFD in VXLAN, however, it does not = specify > any new protocol elements or extension. Therefore I would expect such = a > document to be informational. The shepherd write-up doesn't give any = additional > information about why this doc is PS. >=20 >=20 From nobody Fri Dec 13 15:58:24 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49382120089; Fri, 13 Dec 2019 15:58:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KldhdW4S7pjk; Fri, 13 Dec 2019 15:58:14 -0800 (PST) Received: from mail-lf1-x133.google.com (mail-lf1-x133.google.com [IPv6:2a00:1450:4864:20::133]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 25136120025; Fri, 13 Dec 2019 15:58:14 -0800 (PST) Received: by mail-lf1-x133.google.com with SMTP id l18so520755lfc.1; Fri, 13 Dec 2019 15:58:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=FvUckH5mY0+mnjbzcIQF1FJTaNb/+Ta53b6V/AWmV5w=; b=bJX7ZruSlUFJ6RDiFUdJ8iFqO+RTq4dshcdaw/gUbDRpHtPPdBED1hHL3EdAcnSRC3 mpXgtvszb7Y7L5zOIDmS0nF6KjUo3zi43Q3g9HhGQyn3/CjQ9nzi6PgOuv2H5z7cr1TV yMLsO9yllW2TvOeIS1NisoXdIpgfHj2H4EbDtzXMkI7An98Fas0+v1ThTqPtSF+wkzuy LSlKklCc01Ms/t/Kf4WHwUoImid2x80AKrWubZqvpYZV7TlFWyGuBd7vAH+utGyXwIst 27tKH0E6kXA8ifW0t1h6n0AOR/ne/9ZYaSO1/qnOD4xPrkOWpGExVj6YIOBH3f7vx/uX vTVA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=FvUckH5mY0+mnjbzcIQF1FJTaNb/+Ta53b6V/AWmV5w=; b=bzUYMMLoupqUiW3IsqlrbZmXVuB6S/h7zpLePTTIituzhwgMzc5I464T4J5NggozPp XFq/UPqWsrC0IxeIR0+SCQIAes2tr4xaNBrrhAd23qC5/i+vt6NXA1oCeFLuQoaO/z1U 6z+ZRC2YPuZQdqVumCXrUgqiTnjClGdPr0cWU0S8edSS3HILzw6Fg9ZKESnwLOq4jdEN 7JVBpYH/VG1+yAkIPkUL2ouixhlmCQUp4MIgEVw72+k+kCxq/wDWHy0Y+iWHyTPcYVPl yWddZJQ35xpkR3bIQxsPRfPPdvkdfFttnr+eeqASsPEbUkMhyW9yvP+mBCm9fpAc66Ml CsHw== X-Gm-Message-State: APjAAAXbni/7Ddlwk/sGEJUzE9YyNsoabq3dvGp7Jci6x2D4EnFLJkBT UMxxH08fmZmlnfP2owZeg650vOfK0q5WG4W0AWk= X-Google-Smtp-Source: APXvYqwrAjb7EcPqcLqG5pHM7mr1SbYO9E71380Emn/aQcS+tXlu2d2QakuQwtzzF3xrE/feUWuqGh20NPYj8+9cSuY= X-Received: by 2002:ac2:5468:: with SMTP id e8mr10406320lfn.113.1576281492261; Fri, 13 Dec 2019 15:58:12 -0800 (PST) MIME-Version: 1.0 References: <157598416346.9913.15971076491241071246.idtracker@ietfa.amsl.com> <52ED4E28-6757-41F9-AAF2-7628671CF809@kuehlewind.net> In-Reply-To: <52ED4E28-6757-41F9-AAF2-7628671CF809@kuehlewind.net> From: Greg Mirsky Date: Fri, 13 Dec 2019 15:58:00 -0800 Message-ID: Subject: =?UTF-8?Q?Re=3A_Mirja_K=C3=BChlewind=27s_No_Objection_on_draft=2Dietf=2Dbf?= =?UTF-8?Q?d=2Dvxlan=2D09=3A_=28with_COMMENT=29?= To: Mirja Kuehlewind Cc: The IESG , draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, rtg-bfd WG Content-Type: multipart/alternative; boundary="00000000000069930305999ea2fa" Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Dec 2019 23:58:17 -0000 --00000000000069930305999ea2fa Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Mirja, my apologies for the delayed response and inaccurate reference to my response to Olivier's comments. I've responded to his comments on June 17th with this email https://mailarchive.ietf.org/arch/msg/rtg-bfd/yCJ3ItIjT5j5rSgrargnQM-Sx-0. Please let me know if I've missed to address, through two updates to the document, any of Olivier's comments. Regards, Greg On Tue, Dec 10, 2019 at 9:13 AM Mirja Kuehlewind wrote: > Hi Greg, > > I also saw that you replied to Carlos comments but I don=E2=80=99t think = I saw a > reply to Olivier=E2=80=99s initial mail. The link you=E2=80=99ve sent bel= ow seems also a > link to one of Carlos replies. > > See here for Olivier=E2=80=99s review: > > > https://datatracker.ietf.org/doc/review-ietf-bfd-vxlan-07-tsvart-lc-bonav= enture-2019-05-31/ > > Mirja > > > > > On 10. Dec 2019, at 17:41, Greg Mirsky wrote: > > > > Hi Mirja and Olivier, > > I apologize that some of Olivier's comments were not addressed. I've > responded to Olivier's detailed comments in > https://mailarchive.ietf.org/arch/browse/rtg-bfd/?q=3DTsvart%20last%20cal= l. > I much appreciate your help in identifying the remaining questions and > comments. > > > > Regards, > > Greg > > > > On Tue, Dec 10, 2019 at 5:22 AM Mirja K=C3=BChlewind via Datatracker < > noreply@ietf.org> wrote: > > Mirja K=C3=BChlewind has entered the following ballot position for > > draft-ietf-bfd-vxlan-09: No Objection > > > > When responding, please keep the subject line intact and reply to all > > email addresses included in the To and CC lines. (Feel free to cut this > > introductory paragraph, however.) > > > > > > Please refer to > https://www.ietf.org/iesg/statement/discuss-criteria.html > > for more information about IESG DISCUSS and COMMENT positions. > > > > > > The document, along with other ballot positions, can be found here: > > https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ > > > > > > > > ---------------------------------------------------------------------- > > COMMENT: > > ---------------------------------------------------------------------- > > > > UPDATE: I didn't not see a reply to the original issue raised by the > TSV-ART > > review (Thanks Olivier!). Please have a lock and provide a response. I > don't > > think this raises discuss level but I think some clarifications would b= e > good! > > > > This document describes the use of BFD in VXLAN, however, it does not > specify > > any new protocol elements or extension. Therefore I would expect such a > > document to be informational. The shepherd write-up doesn't give any > additional > > information about why this doc is PS. > > > > > > --00000000000069930305999ea2fa Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Mirja,
my apologies for the delayed response and in= accurate reference to my response to Olivier's comments. I've respo= nded to his comments on June 17th with this=C2=A0email=C2=A0http= s://mailarchive.ietf.org/arch/msg/rtg-bfd/yCJ3ItIjT5j5rSgrargnQM-Sx-0. = Please let me know if I've missed to address, through two updates to th= e document, any of Olivier's comments.

Regards= ,
Greg

On Tue, Dec 10, 2019 at 9:13 AM Mirja Kuehlewind <= ietf@kuehlewind.net> wrote:
Hi Greg,

I also saw that you replied to Carlos comments but I don=E2=80=99t think I = saw a reply to Olivier=E2=80=99s initial mail. The link you=E2=80=99ve sent= below seems also a link to one of Carlos replies.

See here for Olivier=E2=80=99s review:

https://d= atatracker.ietf.org/doc/review-ietf-bfd-vxlan-07-tsvart-lc-bonaventure-2019= -05-31/

Mirja



> On 10. Dec 2019, at 17:41, Greg Mirsky <gregimirsky@gmail.com> wrote:
>
> Hi Mirja and Olivier,
> I apologize that some of Olivier's comments were not addressed. I&= #39;ve responded to Olivier's detailed comments in https://mailarchive.ietf.org/arch/browse/rtg-b= fd/?q=3DTsvart%20last%20call. I much appreciate your help in identifyin= g the remaining questions and comments.
>
> Regards,
> Greg
>
> On Tue, Dec 10, 2019 at 5:22 AM Mirja K=C3=BChlewind via Datatracker &= lt;noreply@ietf.org> wrote:
> Mirja K=C3=BChlewind has entered the following ballot position for
> draft-ietf-bfd-vxlan-09: No Objection
>
> When responding, please keep the subject line intact and reply to all<= br> > email addresses included in the To and CC lines. (Feel free to cut thi= s
> introductory paragraph, however.)
>
>
> Please refer to https://www.ietf.org/i= esg/statement/discuss-criteria.html
> for more information about IESG DISCUSS and COMMENT positions.
>
>
> The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ie= tf-bfd-vxlan/
>
>
>
> ----------------------------------------------------------------------=
> COMMENT:
> ----------------------------------------------------------------------=
>
> UPDATE: I didn't not see a reply to the original issue raised by t= he TSV-ART
> review (Thanks Olivier!). Please have a lock and provide a response. I= don't
> think this raises discuss level but I think some clarifications would = be good!
>
> This document describes the use of BFD in VXLAN, however, it does not = specify
> any new protocol elements or extension. Therefore I would expect such = a
> document to be informational. The shepherd write-up doesn't give a= ny additional
> information about why this doc is PS.
>
>

--00000000000069930305999ea2fa-- From nobody Mon Dec 16 15:43:22 2019 Return-Path: X-Original-To: rtg-bfd@ietf.org Delivered-To: rtg-bfd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9607F120045; Mon, 16 Dec 2019 15:43:13 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Benjamin Kaduk via Datatracker To: "The IESG" Cc: draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, jhaas@pfrc.org, rtg-bfd@ietf.org Subject: Benjamin Kaduk's Discuss on draft-ietf-bfd-vxlan-09: (with DISCUSS and COMMENT) X-Test-IDTracker: no X-IETF-IDTracker: 6.113.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Benjamin Kaduk Message-ID: <157653979360.24617.1864402887480503965.idtracker@ietfa.amsl.com> Date: Mon, 16 Dec 2019 15:43:13 -0800 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Dec 2019 23:43:14 -0000 Benjamin Kaduk has entered the following ballot position for draft-ietf-bfd-vxlan-09: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- I have a few points that I think merit IESG discussion. (1) I see that several directorate reviewers expressed unease at the destination (IP and) MAC address assignment procedure for the inner VXLAN headers, and appreciate that there was extensive on-list discussion (more than I could follow). That said, I failed to find a clear statement of why the current text is believed to be safe, and in fact my reading of the current text is that the described procedure is *not* safe. Pointers to key parts of the WG discusison would be more than welcome! To take something of a high-level view of my concerns, if we think of the VXLAN as being a tunnel between VTEPs that carry encapsulated tenant traffic, then what we're trying to do is roughly like BFD between VTEPs, but we want to get fault-detection over as broad a coverage as we can (the "outermost part of the tunnel"), so we want to have the option of per-VNI BFD instead of just endpoint-to-endpoint (VTEP-to-VTEP). However, we end up having to do this by trying to insert a thin filter into the tenant's address space (i.e., the inner VXLAN header) and pick out the specific stream of BFD traffic that we're introducing. This is, in some sense, a namespace grab in what is conceptually the tenant's namespace, and we have to be careful that what we do is either guaranteed to not impact the tenant or well-documented and compartmentalized (akin to the "well-known URIs"). I've made comments at several places in the document that are more directly tied to specific pieces of text, but in general, if we assume that the tenant can add/remove new addresses at will within their VXLAN abstration, then any attempt to preconfigure by mutual agreement the BFD addresses to use at the VTEPs or to use the VTEP's normal (outer) address as the sentinel value seems subject to the tenant coming in and subsequently trying to use that address, leading to (some of) the tenant's traffic getting silently filtered and interpreted by the VTEP. If we were using domain names as identifiers, we could allocate something under .arpa or similar, but I think our options are more limited when numerical addresses are used. The option suggested by the rtg-dir reviewer of always using the management VNI does not suffer from this namespacing issue, though I recognize that it does reduce the scope over which fault-detection is available, for the cases when different VNIs' traffic are routed or handled differently. (2) Section 6 says: The selection of the VNI number of the Management VNI MUST be controlled through management plane. An implementation MAY use VNI number 1 as the default value for the Management VNI. All VXLAN packets received on the Management VNI MUST be processed locally and MUST NOT be forwarded to a tenant. It seems like the management VNI concept is something that would apply to the entire VXLAN deployment and not just to the BFD-using portions; is this already defined somewhere (in which case we should reference it), or is it new with this document? In the latter case wouldn't it be an update to the core VXLAN spec? (I note that there are some procedural hoops to jump through for an IETF-stream document to update an ISE-stream document...) ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Section 1 In the case where a Multicast Service Node (MSN) (as described in Section 3.3 of [RFC8293]) resides behind a Network Virtualization Endpoint (NVE), the mechanisms described in this document apply and can, therefore, be used to test the connectivity from the source NVE to the MSN. I'm not sure that I'm parsing "resides behind" properly. Is the idea that the multicast traffic starts off at a tenant-system source, hits a NVE gateway to enter the VXLAN, traverses the VXLAN a bit before getting to the MSN, and is replicated from the MSN to various NVE termini? I think I'd be less confused if this was described as "participates in the VXLAN" or "is part of the virtualized environment", as the current "behind" wording makes me think of a firewall-like topology where the NVE behind which the MSN resides will be decapsulating traffic. This document describes the use of Bidirectional Forwarding Detection (BFD) protocol to enable monitoring continuity of the path between VXLAN VTEPs, performing as Network Virtualization Endpoints, and/or availability of a replicator multicast service node. All the commas here potentially make the parsing ambiguous; assuming that the "performing as Network Virtualization Endpoints" is just describing the VXLAN VTEPs, I'd suggest do drop the first comma and instead join those clauses with "that are". Section 3 between the same pair of VTEPs. BFD packets intended for a VTEP MUST NOT be forwarded to a VM as a VM may drop BFD packets leading to a false negative. This method is applicable whether the VTEP is a [This "MUST NOT" is a very strict requirement, so we have to be sure that it's achievable without disruption to tenant traffic, per the Discuss point] At the same time, a service layer BFD session may be used between the tenants of VTEPs IP1 and IP2 to provide end-to-end fault management. In such case, for VTEPs BFD Control packets of that session are indistinguishable from data packets. nit(?): I suggest s/indistinguishable from/regular/ -- the tenants' BFD sessions are just regular data to the VXLAN infrastructure, though IIUC a VTEP could, if so inclined, peek inside and "distinguish" them from non-BFD tenant data based on on heuristics and packet format. 0:0:0:0:0:FFFF:7F00:0/104 range for IPv6). There could be a firewall configured on VTEP to block loopback addresses if set as the destination IP in the inner IP header. It is RECOMMENDED to allow addresses from the loopback range through a firewall only if it is used as the destination IP address in the inner IP header, and the destination UDP port is set to 3784 [RFC5881]. I think we should reword this to make it clear that the default behavior is still "block all incoming traffic with loopback destination" and that the exception is tightly scoped to the encapsulated VXLAN traffic discussed in this document and the specific destination port *and when BFD has been configured for the VTEP*. I note that well-known ports are not reserved ports, and we have no guarangee that only a BFD implementation would be listening on port 3784. I think the rewording would include some phrasing like "RECOMMENDED that the only firewall exception to allow incoming traffic with destination address from the loopback range is when [...]", and of course, mention the need to have BFD configured. Section 4 VXLAN packet. The choice of Destination MAC and Destination IP addresses for the inner Ethernet frame MUST ensure that the BFD Control packet is not forwarded to a tenant but is processed locally at the remote VTEP. [...] This has to be 100% reliable, and I think we need to provide some example mechanism that has that property even if we don't mandate that it be the only allowed mechanism. Destination MAC: This MUST NOT be of one of tenant's MAC addresses. The destination MAC address MAY be the address But the tenant can start using new MAC addresses at any time! How is BFD-over-VXLAN going to dynamically detect and avoid that? associated with the destination VTEP. The MAC address MAY be configured, or it MAY be learned via a control plane protocol. The details of how the MAC address is obtained are outside the scope of this document. This all talks about the MAC address being relatively static configuration, but per above, I don't think that's safe in the face of a MUST-level requirement to avoid conflicting with tenant MAC addresses. IP header: Destination IP: IP address MUST NOT be of one of tenant's IP addresses. The IP address SHOULD be selected from the range 127/8 for IPv4, for IPv6 - from the range 0:0:0:0:0:FFFF:7F00:0/104. Alternatively, the destination IP address MAY be set to VTEP's IP address. As for MAC addresses, can't the tenant start using new ones at any time? Loopback is mostly safe in that the tenant generally shouldn't expect incoming traffic to that destination address ... but what if the tenant is also using a BFD scheme that expects incoming (single-hop) packets to loopback as an exception to RFC 1122? nit: please use a parallel grammatical construction for describing the IPv4 and IPv6 recommended behavior. TTL or Hop Limit: MUST be set to 1 to ensure that the BFD packet is not routed within the Layer 3 underlay network. This addresses the scenario when the inner IP destination address is of VXLAN gateway and there is a router in underlay which removes the VXLAN header, then it is possible to route the packet as VXLAN gateway address is routable address. nit: the grammar here is a bit wonky; I think the following preserves the meaning with better grammar: % TTL or Hop Limit: MUST be set to 1 to ensure that the BFD % packet is not routed within the Layer 3 underlay network. This % addresses the scenario where the inner IP destination address is % that of a VXLAN gateway and there is a router in the underlay % that removes the VXLAN header; in such cases it is possible for % the packet to be routed, as the VXLAN gateway's address is a % routable address. Section 5 Once a packet is received, VTEP MUST validate the packet. If the Destination MAC of the inner Ethernet frame matches one of the MAC addresses associated with the VTEP the packet MUST be processed further. If the Destination MAC of the inner Ethernet frame doesn't What prevents the scenario where the MAC address associated with the VTEP is also in use by the tenant? match any of VTEP's MAC addresses, then the processing of the received VXLAN packet MUST follow the procedures described in Section 4.1 [RFC7348]. If the BFD session is using the Management VNI (Section 6), BFD Control packets with unknown MAC address MUST NOT be forwarded to VMs. nit: either "an unknown" or "MAC addresses" The UDP destination port and the TTL of the inner IP packet MUST be validated to determine if the received packet can be processed by BFD. Can you give a pointer to or description of what this validation consists of? Section 5.1 case of VXLAN, the VNI number identifies that logical link. If BFD packet is received with non-zero Your Discriminator, then BFD session MUST be demultiplexed only with Your Discriminator as the key. nits: "If a BFD packet", "then the BFD session" Section 6 In most cases, a single BFD session is sufficient for the given VTEP to monitor the reachability of a remote VTEP, regardless of the number of VNIs. When the single BFD session is used to monitor the reachability of the remote VTEP, an implementation SHOULD choose any of the VNIs. An implementation MAY support the use of the Management nit: I feel like this is trying to say that the choice is arbitrary and it doesn't matter which one is picked, but "SHOULD choose any of" is more of a recommendation to make a choice than guidance on how to make that choice, as written. Section 9 I think we need to discuss the risk/potential consequences of a VTEP failing to properly filter BFD traffic and incorrectly passing it through to the tenant. Relatedly, I'd also consider discussing the case of a mixed deployment where one peer attempts to speak BFD-VXLAN to a peer that does not implement that mechanism. The document requires setting the inner IP TTL to 1, which could be used as a DDoS attack vector. Thus the implementation MUST have An attack vector on what part of the system? From nobody Mon Dec 16 18:01:34 2019 Return-Path: X-Original-To: rtg-bfd@ietf.org Delivered-To: rtg-bfd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 94CB912009C; Mon, 16 Dec 2019 18:01:33 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Roman Danyliw via Datatracker To: "The IESG" Cc: draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, jhaas@pfrc.org, rtg-bfd@ietf.org Subject: Roman Danyliw's No Objection on draft-ietf-bfd-vxlan-09: (with COMMENT) X-Test-IDTracker: no X-IETF-IDTracker: 6.113.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Roman Danyliw Message-ID: <157654809360.24500.8752170869862518342.idtracker@ietfa.amsl.com> Date: Mon, 16 Dec 2019 18:01:33 -0800 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Dec 2019 02:01:34 -0000 Roman Danyliw has entered the following ballot position for draft-ietf-bfd-vxlan-09: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I support Ben Kaduk’s DISCUSS position. * Section 9. Per “The document requires setting the inner IP TTL to 1, which could be used as a DDoS attack vectorâ€, could you please clarify what part(s) of the notional architecture would be impacted (e.g., physical, virtual; and how)? * Section 9. Per: Thus the implementation MUST have throttling in place to control the rate of BFD Control packets sent to the control plane. On the other hand, over-aggressive throttling of BFD Control packets may become the cause of the inability to form and maintain BFD session at scale. Hence, throttling of BFD Control packets SHOULD be adjusted to permit BFD to work according to its procedures. I’m having difficulty parsing the guidance above – it points out the need to throttle and the ramifications of doing so. Per the last sentence, could you please clarify how the throttling should be calibrated. * Section 9. Per “this specification does not raise any additional security issues beyond those of the specifications referred to in the list of normative referencesâ€, I recommend being clearer which references you mean (i.e., I’m assuming you don’t mean RFC2119, RFC8174, etc.) * Editorial Nits: - Abstract. s/forming up/used to form/ - Section 9. s/such address/such an address/ From nobody Mon Dec 16 21:20:03 2019 Return-Path: X-Original-To: rtg-bfd@ietf.org Delivered-To: rtg-bfd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4CD231200CD; Mon, 16 Dec 2019 21:19:56 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Erik Kline via Datatracker To: Cc: last-call@ietf.org, rtg-bfd@ietf.org, draft-ietf-bfd-vxlan.all@ietf.org Subject: Genart telechat review of draft-ietf-bfd-vxlan-09 X-Test-IDTracker: no X-IETF-IDTracker: 6.113.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Erik Kline Message-ID: <157655999615.24604.538120700710888094@ietfa.amsl.com> Date: Mon, 16 Dec 2019 21:19:56 -0800 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Dec 2019 05:19:56 -0000 Reviewer: Erik Kline Review result: Ready with Nits I am the assigned Gen-ART reviewer for this draft. The General Area Review Team (Gen-ART) reviews all IETF documents being processed by the IESG for the IETF Chair. Please wait for direction from your document shepherd or AD before posting a new version of the draft. For more information, please see the FAQ at . Document: draft-ietf-bfd-vxlan-?? Reviewer: Erik Kline Review Date: 2019-12-16 IETF LC End Date: None IESG Telechat date: 2019-12-19 Summary: -09 addresses my concerns from -07. Thank you for this. The one "nit" is that it seems to have introduced a recommendation to use ::ffff:7f00:0/104 as an IPv6 loopback prefix. (a) This document should follow the format recommendations of RFC 5952 section 4.3 and lowercase the "F"s. But (b) more importantly, I'm not sure how implementations may treats this space. The use of an RFC4291 section-2.5.5.2 mapped v4 address doesn't necessarily make the packet a part of an IPv6 connection. Nevertheless, I'm not sure I have a strong feeling about this as it may still exercise enough of the IPv6 stack in a VTEP. I definitely do think that in the case of BFD on the management VNI targeting an IPv6 link-local address of the VTEP would be better. However, I expect that if ::ffff:127.0.0.0 does prove to have some issues in the future a -bis can be written quickly with a recommendation. Also, Suresh may have ideas for a solution. Major issues: Minor issues: Nits/editorial comments: From nobody Mon Dec 16 21:40:00 2019 Return-Path: X-Original-To: rtg-bfd@ietf.org Delivered-To: rtg-bfd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 43500120059; Mon, 16 Dec 2019 21:39:53 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Barry Leiba via Datatracker To: "The IESG" Cc: draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, jhaas@pfrc.org, rtg-bfd@ietf.org Subject: Barry Leiba's No Objection on draft-ietf-bfd-vxlan-09: (with COMMENT) X-Test-IDTracker: no X-IETF-IDTracker: 6.113.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Barry Leiba Message-ID: <157656119326.24566.9438425082238826931.idtracker@ietfa.amsl.com> Date: Mon, 16 Dec 2019 21:39:53 -0800 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Dec 2019 05:39:53 -0000 Barry Leiba has entered the following ballot position for draft-ietf-bfd-vxlan-09: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I support Ben’s DISCUSS. In addition, I have a number of editorial comments. General: there are a lot of missing or incorrect articles, making the document harder to read than it should be. It would be good to fix that. If you let the RFC Editor fix it, it will require careful review during AUTH48 to make sure it’s correct. — Abstract — The phrase “forming up†is odd; I suggest just “formingâ€. — Section 3 — BFD packets intended for a VTEP MUST NOT be forwarded to a VM as a VM may drop BFD packets leading to a false negative. This needs two commas: one before “as†and one before “leadingâ€. And what does “leading to a false negative†mean here? I don’t understand. It is RECOMMENDED to allow addresses from the loopback range through a firewall only if it is used as the destination IP address in the inner IP header, and the destination UDP port is set to 3784 [RFC5881]. I THINK the antecedent for “it†is meant to be “addresses from the loopback rangeâ€, though because of the number mismatch it looks like the antecedent is “a firewallâ€. One fix is to change “addresses†to “an addressâ€, correcting the number error, but that leaves the ambiguity. Maybe betterto make it “only if they are used as destination IP addressesâ€. Also, remove the comma. That fixes the sentence as written, but I also agree with Ben’s comment that this might need more significant rewording. — Section 4 — BFD packet MUST be encapsulated and sent to a remote VTEP as explained in this section. This needs to be either “A BFD packet†or “BFD packets†and “VTEPsâ€. The MAC address MAY be configured, or it MAY be learned via a control plane protocol. Are those the only two choices? As both “MAY†are optional, as written it allows for others. I suggest not using BCP 14 key words here, and instead saying, “The MAC address is either configured or learned via a control plane protocol.†This addresses the scenario when the inner IP destination address is of VXLAN gateway and there is a router in underlay which removes the VXLAN header, then it is possible to route the packet as VXLAN gateway address is routable address. This sentence is too fractured for me to make any sense of it, so I can’t suggest a fix. Please fix it. It looks like Ben made more sense of it than I could, so maybe his suggestion will work. — Section 5 — received VXLAN packet MUST follow the procedures described in Section 4.1 [RFC7348]. This needs to say “Section 4.1 of [RFC7348].†From nobody Mon Dec 16 23:11:47 2019 Return-Path: X-Original-To: rtg-bfd@ietf.org Delivered-To: rtg-bfd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DD4DD12018B; Mon, 16 Dec 2019 23:11:40 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Adam Roach via Datatracker To: "The IESG" Cc: draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, jhaas@pfrc.org, rtg-bfd@ietf.org Subject: Adam Roach's No Objection on draft-ietf-bfd-vxlan-09: (with COMMENT) X-Test-IDTracker: no X-IETF-IDTracker: 6.113.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Adam Roach Message-ID: <157656670090.24465.17703971379844970449.idtracker@ietfa.amsl.com> Date: Mon, 16 Dec 2019 23:11:40 -0800 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Dec 2019 07:11:41 -0000 Adam Roach has entered the following ballot position for draft-ietf-bfd-vxlan-09: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thanks for the work that everyone has put into this document. I have a couple of relatively important, related comments that should be taken into account prior to publication. --------------------------------------------------------------------------- §3: > As per Section 4, the inner destination IP address SHOULD be set to > one of the loopback addresses (127/8 range for IPv4 and > 0:0:0:0:0:FFFF:7F00:0/104 range for IPv6). Please consider reformatting this IPv6 address according to the recommendations of RFC 5952 (paying particular attention to sections 4.2.1, 4.3, and 5): ::ffff:127.0.0.0/104 It's also worth noting that, as a practical matter, modern operating systems do not seem to bind to anything in the IPv4-mapped range assigned to IPv4 loopback: Linux: ~$ ping6 ::ffff:127.0.0.1 PING ::ffff:127.0.0.1(::ffff:127.0.0.1) 56 data bytes ^C --- ::ffff:127.0.0.1 ping statistics --- 14 packets transmitted, 0 received, 100% packet loss, time 13316ms MacOS: ~$ ping6 ::ffff:127.0.0.1 PING6(56=40+8+8 bytes) ::ffff:127.0.0.1 --> ::ffff:127.0.0.1 ping6: sendmsg: Invalid argument ping6: wrote ::ffff:127.0.0.1 16 chars, ret=-1 It is not clear to me whether this poses an issue for your intended usage. In any case, please do not refer to ::ffff:127.0.0.0/104 as "loopback addresses": IPv6 has only one loopback address defined (::1). The range you cite is best described as "IPv4-mapped IPv4 loopback addresses." Alternately -- and this is probably better -- use "::1/128" instead of "::ffff:127.0.0.0/104" for the inner IP header destination address. As an aside, I share Benjamin's unease around the use of loopback addresses in this fashion. It may be worth noting that IETF protocols can reserve addresses in the 192.0.0.0/24 and 2001::/23 blocks if necessary, and such reserved addresses won't ever correspond to a valid destination. (There is corresponding text in section 4 that all of the preceding pertains to as well) --------------------------------------------------------------------------- §9: > This document recommends using an address from the Internal host > loopback addresses (127/8 range for IPv4 and > 0:0:0:0:0:FFFF:7F00:0/104 range for IPv6) as the destination IP > address in the inner IP header. Using such address prevents the > forwarding of the encapsulated BFD control message by a transient > node in case the VXLAN tunnel is broken as according to [RFC1812]: > > A router SHOULD NOT forward, except over a loopback interface, any > packet that has a destination address on network 127. A router > MAY have a switch that allows the network manager to disable these > checks. If such a switch is provided, it MUST default to > performing the checks. In addition to the comments above about IPv6 address formatting, the improper use of "loopback" terminology as it applies to IPv6, and concerns about using localhost: it's worth noting that this text in RFC 1812 refers to IPv4 routers -- RFC 8504 has no equivalent language, and so the use of ::ffff:127.0.0.0/104 implies no special router handling. ::1 *probably* does, at least as a practical matter. From nobody Tue Dec 17 00:05:29 2019 Return-Path: X-Original-To: rtg-bfd@ietf.org Delivered-To: rtg-bfd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A8C812097E; Tue, 17 Dec 2019 00:05:23 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: =?utf-8?q?J=C3=BCrgen_Sch=C3=B6nw=C3=A4lder_via_Datatracker?= To: Cc: last-call@ietf.org, rtg-bfd@ietf.org, draft-ietf-bfd-vxlan.all@ietf.org Subject: Opsdir telechat review of draft-ietf-bfd-vxlan-09 X-Test-IDTracker: no X-IETF-IDTracker: 6.113.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: =?utf-8?b?SsO8cmdlbiBTY2jDtm53w6RsZGVy?= Message-ID: <157656992287.26356.12991667526690255621@ietfa.amsl.com> Date: Tue, 17 Dec 2019 00:05:23 -0800 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Dec 2019 08:05:23 -0000 Reviewer: Jürgen Schönwälder Review result: Has Nits I have only a limited understanding of VXLAN and BFD technology. Hence, some of my question may look odd to the insiders. - Never heard of this IPv6 loopback address space before. Is it OK to allocate and use it this way? - Why is echo BFD outside the scope of this document? Can I just turn on echo mode or will extra specifications be needed? - Nits: OLD Ability to monitor path continuity NEW The ability to monitor path continuity OLD BFD packet MUST be encapsulated NEW BFD packets MUST be encapsulated From nobody Tue Dec 17 00:51:44 2019 Return-Path: X-Original-To: rtg-bfd@ietf.org Delivered-To: rtg-bfd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CB8311200EF; Tue, 17 Dec 2019 00:51:37 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: =?utf-8?q?=C3=89ric_Vyncke_via_Datatracker?= To: "The IESG" Cc: draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, jhaas@pfrc.org, rtg-bfd@ietf.org Subject: =?utf-8?q?=C3=89ric_Vyncke=27s_Discuss_on_draft-ietf-bfd-vxlan-09?= =?utf-8?q?=3A_=28with_DISCUSS_and_COMMENT=29?= X-Test-IDTracker: no X-IETF-IDTracker: 6.113.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: =?utf-8?q?=C3=89ric_Vyncke?= Message-ID: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> Date: Tue, 17 Dec 2019 00:51:37 -0800 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Dec 2019 08:51:38 -0000 Éric Vyncke has entered the following ballot position for draft-ietf-bfd-vxlan-09: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- Thank you for the work put into this document. I fully second Adam's COMMENT that should be fixed before publication (IMHO this is a DISCUSS). Answers to my COMMENTs below will be welcome, even if those COMMENTs are not blocking. As usual, an answer to the DISCUSS is required to clear my DISCUSS though. I hope that this helps to improve the document, Regards, -éric == DISCUSS == May be I am not familiar enough with BFD, but, RFC 5881 (the one defining BFD) specifies the use of TTL = Hop Limit = 255.. Why this document uses a value of 1 ? -- Section 3 -- IPv4-mapped IPv6 addresses are only to be used inside a host and should never be transmitted in real packets (including packets inside a tunnel) see section 4.2 of RFC 4038 (even if informational). As other IESG reviewers, I wonder why ::1/128 is not used? -- Section 8 -- The document specifies no IANA actions while the shepherd write-up talks about a IANA action. -- Section 9 -- This section is only about IPv4 (TTL and RFC 1812). Please address IPv6 as well. ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- == COMMENTS == RFC 5881 (BFD) states that it applies to IPv4/IPv6 tunnels, may I infer that this document is only required to address the Ethernet encapsulation ? I.e. specifying the Ethernet MAC addresses? -- Section 3 -- At first sight, I was surprized by having a BFD session per VXLAN VNI as it will create some scalability issue, but, I assume that this is to detect misconfiguration as well. If so, perhaps worth mentionnig the reasoning behind? In "the inner destination IP address SHOULD" it is unclear whether it is in the all BFD packets, or only the request one or ... ? -- Section 4 -- While probably defined in RFC7348, should "FCS" be renamed as "Outer Ethernet FCS" for consistency with the "Outer Ethernet Header" in figure 2 ? Why not using the Source MAC address as the Destination MAC address ? This would ensure that there is no conflict at the expense of "forcing" the transmission of the frame even if addressed to itself. Please consider rewriting the section about TTL/Hop Limit as it is not easy to parse/read. -- Section 9 -- It is unclear to me (see also Ben's comment) what is the 'attack vector' of sending packets with TTL=1 ? From nobody Tue Dec 17 06:39:07 2019 Return-Path: X-Original-To: rtg-bfd@ietf.org Delivered-To: rtg-bfd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9665B1200C3; Tue, 17 Dec 2019 06:38:59 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Warren Kumari via Datatracker To: "The IESG" Cc: draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, jhaas@pfrc.org, rtg-bfd@ietf.org, j.schoenwaelder@jacobs-university.de Subject: Warren Kumari's No Objection on draft-ietf-bfd-vxlan-09: (with COMMENT) X-Test-IDTracker: no X-IETF-IDTracker: 6.113.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Warren Kumari Message-ID: <157659353960.26404.15894323280421366020.idtracker@ietfa.amsl.com> Date: Tue, 17 Dec 2019 06:38:59 -0800 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Dec 2019 14:39:00 -0000 Warren Kumari has entered the following ballot position for draft-ietf-bfd-vxlan-09: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I support Benjamin and Eric's DISCUSSES - I considered holding a DISCUSS on the "loopback address" terminology and formatting (which was also noted in the excellent OpsDir review by Jürgen Schönwälder), but think that Eric can carry it. In addition, like Jurgen, I think it would be helpful to have pointers to where terms are defined - the "Terminology" section isn't really terminology, but rather just an acronym expansion section. From nobody Tue Dec 17 09:17:24 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C74C120BD8; Tue, 17 Dec 2019 09:17:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.499 X-Spam-Level: X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=YslOFipW; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=TzqVoYCv Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 31UizYQoeUNU; Tue, 17 Dec 2019 09:17:16 -0800 (PST) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E6183120B93; Tue, 17 Dec 2019 09:17:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=12759; q=dns/txt; s=iport; t=1576603036; x=1577812636; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=HVkpn1DPXmnSS5s2R3lFpjqRAHWxJgMsFxR2gw4WaMc=; b=YslOFipW7dg7R1Al5PnqXsnoGTO4z7C/+DYTyrCqb54wUxfBHLVgSQ+U 6xg+SXFUoBBySYOrRBxfxQ431j5QSj/oHhrIdEmS9T3Qhfs/AXl7VwlsK vPD1M3A9ud56iaAkO8O31jLN765lkc4Gx9dspny0Mix7mOuMmr5k4WYti U=; IronPort-PHdr: =?us-ascii?q?9a23=3AgOLFAhPvvgiLdaDg4Icl6mtXPHoupqn0MwgJ65?= =?us-ascii?q?Eul7NJdOG58o//OFDEu6w/l0fHCIPc7f8My/HbtaztQyQh2d6AqzhDFf4ETB?= =?us-ascii?q?oZkYMTlg0kDtSCDBjwNP/laSUmFexJVURu+DewNk0GUMs=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DZAQCiDPld/51dJa1lGwEBAQEBAQE?= =?us-ascii?q?FAQEBEQEBAwMBAQGBfoFLUAVsWCAECxYUhASDRgOLD5YEhGGBQoEQA1QJAQE?= =?us-ascii?q?BDAEBJQgCAQGEQAIXggEkOBMCAw0BAQQBAQECAQUEbYU3DIVfAgEDEhEdAQE?= =?us-ascii?q?3AQ8CAQYCPwMCAgIwFAYLAgQOBSKDAAGBeU0DLgEOA5IdkGQCgTiIYXWBMoJ?= =?us-ascii?q?+AQEFgTUBE0GDDRiCFwMGgTaJT4JJGoFBP4ERJyCCTD6CZAIBAgGBLAEMBgE?= =?us-ascii?q?eLoJjMoIsjUWCcIVWiV+PHwqCNIcvij+EIhuCQ4d2hEGLT4NGk1eOVoMnAgQ?= =?us-ascii?q?CBAUCDgEBBYFpImdYEQhwFWUBgkE+EhEUjRI4gzuFFIU/dAGBJ44YDheCGwE?= =?us-ascii?q?B?= X-IronPort-AV: E=Sophos;i="5.69,326,1571702400"; d="scan'208,217";a="394622892" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 17 Dec 2019 17:17:15 +0000 Received: from XCH-ALN-001.cisco.com (xch-aln-001.cisco.com [173.36.7.11]) by rcdn-core-6.cisco.com (8.15.2/8.15.2) with ESMTPS id xBHHHEX8005011 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 17 Dec 2019 17:17:15 GMT Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-ALN-001.cisco.com (173.36.7.11) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 17 Dec 2019 11:17:14 -0600 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 17 Dec 2019 12:17:13 -0500 Received: from NAM02-SN1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Tue, 17 Dec 2019 12:17:13 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=IIkAyv2ZQESDyFdUz/yZW6FCHQwjY0yzgWS+2baLtlkPBIEFMg1MCh9YwSbhfyU1MOe6F2FMUSP422uOOsjnyQrsE6BmLe7xooBujDbj9/KtKcEHsMV9WhDmFDuNJGuVKRPLkcNqt3kkNPrxE4MS91Ohr30Z3uwvHEb03SNWNdfCHErGKKzuz22Id70gvKnw73nRvsvngiRPu74DYwZw+yo5PksGZjL8KRhzSB4NVVUw9IfSDgAuyn5SR3dv+/5kHs0bOoJiYn+5nSyl/kg4GWfSmDbQ9xRD/EJTBw+vWTOZExhyvc/qJOPl9SAyOfXyU5Iiy2TOk7N5S3xIpo2n4A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HVkpn1DPXmnSS5s2R3lFpjqRAHWxJgMsFxR2gw4WaMc=; b=Ka+rbPYJFjJzqPfiWg34EeAfq7UHVGVkoBt0eJkp7KEmIqx24zcNbywr48w0IDbfwiIdJSKCByPtJGeR/rw1XHH3kSb+cDUaOmnLtNDPkx2wiqZDC7a9mWLSutpF/huFRKBPVqZoO+UzBQFunhH1Ia3ZiSI+hhmTsAMIauSueOPM9Z4zdyK7wPVYw3buCYSNn0AL9aM0Akg+Y2HkpuJ4/q5qCsAFtezU/oPjX3qLUQv72MZYXCohk7dIspa+BxClHcLFrABQuhJqd2setKJx/xUi7PS/XlLYsFHKZ2IW6ll7MgQQn/lrxXGHn1Dpl2qqh+90uERMFWTjnlSSa/O3eA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HVkpn1DPXmnSS5s2R3lFpjqRAHWxJgMsFxR2gw4WaMc=; b=TzqVoYCvfDo76wvL5MMF2THuURDX8LC6c4litIrWiFZUF5Hl2lG70bwUun9G0Ng5Xi4roi98ZujMHsMVmFCSSrrkpNKPtqfn0EqGIPFV1FJIXHMtuiZk9G9V26MFx9Waoe1eLHEqiTntQ6vHQ5z8bE9TjYl460pIHSmhaYhvUiQ= Received: from BN6PR11MB0034.namprd11.prod.outlook.com (10.161.156.160) by BN6PR11MB1729.namprd11.prod.outlook.com (10.175.98.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2538.20; Tue, 17 Dec 2019 17:17:11 +0000 Received: from BN6PR11MB0034.namprd11.prod.outlook.com ([fe80::d4cf:20e6:8706:d006]) by BN6PR11MB0034.namprd11.prod.outlook.com ([fe80::d4cf:20e6:8706:d006%5]) with mapi id 15.20.2538.019; Tue, 17 Dec 2019 17:17:11 +0000 From: "Carlos Pignataro (cpignata)" To: "Eric Vyncke (evyncke)" CC: The IESG , "draft-ietf-bfd-vxlan@ietf.org" , "rtg-bfd@ietf.org" , "bfd-chairs@ietf.org" Subject: =?utf-8?B?UmU6IMOJcmljIFZ5bmNrZSdzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi1iZmQt?= =?utf-8?Q?vxlan-09:_(with_DISCUSS_and_COMMENT)?= Thread-Topic: =?utf-8?B?w4lyaWMgVnluY2tlJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLWJmZC12eGxh?= =?utf-8?Q?n-09:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHVtLc75ryADAJO5Ui6+24NC5naA6e+kjMA Date: Tue, 17 Dec 2019 17:17:11 +0000 Message-ID: References: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> In-Reply-To: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3608.40.2.2.4) authentication-results: spf=none (sender IP is ) smtp.mailfrom=cpignata@cisco.com; x-originating-ip: [2600:1700:760:21aa:58d3:501c:4c4:1396] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 0a73d951-3424-44a4-d89f-08d78314f46a x-ms-traffictypediagnostic: BN6PR11MB1729: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 02543CD7CD x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(366004)(39860400002)(376002)(346002)(396003)(501584002)(199004)(469094003)(189003)(33656002)(81166006)(6862004)(81156014)(5660300002)(8936002)(450100002)(2906002)(186003)(6636002)(36756003)(66556008)(2616005)(54906003)(966005)(37006003)(71200400001)(66476007)(6512007)(4326008)(478600001)(6486002)(86362001)(66446008)(316002)(66946007)(64756008)(6506007)(76116006)(91956017)(224303003)(21615005); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR11MB1729; H:BN6PR11MB0034.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: yvVMJ8ZHrQhMBvOkQxjQ/0Fvbo1c5WHCpic1FgXhlxoblQfJHCeRBw2yFsfTwpzVYG+zoEmabQlmWDPWW6U3IhVVQUWWIBkcpV5K5fe4stygz06J5m7CMnfxKxJnQNBivHEghVL0PCNgS+2vrZ7WwzbfDUpYlQLodxsSv7fqEv2K0fnrUbwwQCEBeVw64m7932d5BfCp7VvvuVOhRQf2KDNq6nXharmjZW2zz6LPB6kEIUtt3SxNfIbsaM/GeRG64hWQOcsmYRZsWh34pp9MNMo5RgDeO0Pn2XK9Idxff+V0jANFcA5XyMPmOzH9PZu8KKA7Z78ACyQLTAHmB1TN6XqmjpN79y0gMfjDz4sfHNow0jwKPK4/m5Q3kdls6seYb6H1p2f4biH3df7MioSZpD3ebCJpi85qGQh14IetI4f7EULhxbIuVLXEoH1CVURE1+1TFC9lntE+aS794qkJbP3OkbSbRMxUzbGudM1ZEKlbDmv/Qw4CenmHZggzdVYoX844luQLXQ/nPUitD7DZrG+PUKbv9iuk8wm92wcX62n0UKp7MmYt7/PCNcHkxhjN Content-Type: multipart/alternative; boundary="_000_CED2B858AC554B0AADA2AC46B628E6DAciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 0a73d951-3424-44a4-d89f-08d78314f46a X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Dec 2019 17:17:11.6573 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: tXzEF21r0xJU4M18AFNF3KmJuWxxeVtjgjy9t3BjrMNOc0aESM8mV/9QUHXsJZfQcriEYzuFlk9a+MeEr4CAnA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR11MB1729 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.11, xch-aln-001.cisco.com X-Outbound-Node: rcdn-core-6.cisco.com Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Dec 2019 17:17:22 -0000 --_000_CED2B858AC554B0AADA2AC46B628E6DAciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksIMOJcmljLA0KDQpSZWdhcmRpbmcgeW91IGZpcnN0IERJU0NVU1MgZWxlbWVudCwgSSBoYWQg YnJvdWdodCB1cCB0aGUgc2FtZSBpc3N1ZS4gU2VlIHRoZSAybmQgcG9pbnQgYXQgaHR0cHM6Ly9t YWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9ydGctYmZkL0JMOU9iNjZZeGllNHdYMTN5WkpF TGJZUExKcw0KDQpUaGFua3MsDQoNCkNhcmxvcy4NCg0KMjAxOS8xMi8xNyDljYjliY0zOjUx44CB w4lyaWMgVnluY2tlIHZpYSBEYXRhdHJhY2tlciA8bm9yZXBseUBpZXRmLm9yZzxtYWlsdG86bm9y ZXBseUBpZXRmLm9yZz4+44Gu44Oh44O844OrOg0KDQrDiXJpYyBWeW5ja2UgaGFzIGVudGVyZWQg dGhlIGZvbGxvd2luZyBiYWxsb3QgcG9zaXRpb24gZm9yDQpkcmFmdC1pZXRmLWJmZC12eGxhbi0w OTogRGlzY3Vzcw0KDQpXaGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxp bmUgaW50YWN0IGFuZCByZXBseSB0byBhbGwNCmVtYWlsIGFkZHJlc3NlcyBpbmNsdWRlZCBpbiB0 aGUgVG8gYW5kIENDIGxpbmVzLiAoRmVlbCBmcmVlIHRvIGN1dCB0aGlzDQppbnRyb2R1Y3Rvcnkg cGFyYWdyYXBoLCBob3dldmVyLikNCg0KDQpQbGVhc2UgcmVmZXIgdG8gaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sDQpmb3IgbW9yZSBpbmZv cm1hdGlvbiBhYm91dCBJRVNHIERJU0NVU1MgYW5kIENPTU1FTlQgcG9zaXRpb25zLg0KDQoNClRo ZSBkb2N1bWVudCwgYWxvbmcgd2l0aCBvdGhlciBiYWxsb3QgcG9zaXRpb25zLCBjYW4gYmUgZm91 bmQgaGVyZToNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtYmZk LXZ4bGFuLw0KDQoNCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KRElTQ1VTUzoNCi0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0K DQpUaGFuayB5b3UgZm9yIHRoZSB3b3JrIHB1dCBpbnRvIHRoaXMgZG9jdW1lbnQuDQoNCkkgZnVs bHkgc2Vjb25kIEFkYW0ncyBDT01NRU5UIHRoYXQgc2hvdWxkIGJlIGZpeGVkIGJlZm9yZSBwdWJs aWNhdGlvbiAoSU1ITw0KdGhpcyBpcyBhIERJU0NVU1MpLg0KDQpBbnN3ZXJzIHRvIG15IENPTU1F TlRzIGJlbG93IHdpbGwgYmUgd2VsY29tZSwgZXZlbiBpZiB0aG9zZSBDT01NRU5UcyBhcmUgbm90 DQpibG9ja2luZy4NCg0KQXMgdXN1YWwsIGFuIGFuc3dlciB0byB0aGUgRElTQ1VTUyBpcyByZXF1 aXJlZCB0byBjbGVhciBteSBESVNDVVNTIHRob3VnaC4NCg0KSSBob3BlIHRoYXQgdGhpcyBoZWxw cyB0byBpbXByb3ZlIHRoZSBkb2N1bWVudCwNCg0KUmVnYXJkcywNCg0KLcOpcmljDQoNCj09IERJ U0NVU1MgPT0NCg0KTWF5IGJlIEkgYW0gbm90IGZhbWlsaWFyIGVub3VnaCB3aXRoIEJGRCwgYnV0 LCBSRkMgNTg4MSAodGhlIG9uZSBkZWZpbmluZyBCRkQpDQpzcGVjaWZpZXMgdGhlIHVzZSBvZiBU VEwgPSBIb3AgTGltaXQgPSAyNTUuLiBXaHkgdGhpcyBkb2N1bWVudCB1c2VzIGEgdmFsdWUgb2YN CjEgPw0KDQotLSBTZWN0aW9uIDMgLS0NCklQdjQtbWFwcGVkIElQdjYgYWRkcmVzc2VzIGFyZSBv bmx5IHRvIGJlIHVzZWQgaW5zaWRlIGEgaG9zdCBhbmQgc2hvdWxkIG5ldmVyDQpiZSB0cmFuc21p dHRlZCBpbiByZWFsIHBhY2tldHMgKGluY2x1ZGluZyBwYWNrZXRzIGluc2lkZSBhIHR1bm5lbCkg c2VlIHNlY3Rpb24NCjQuMiBvZiBSRkMgNDAzOCAoZXZlbiBpZiBpbmZvcm1hdGlvbmFsKS4gQXMg b3RoZXIgSUVTRyByZXZpZXdlcnMsIEkgd29uZGVyIHdoeQ0KOjoxLzEyOCBpcyBub3QgdXNlZD8N Cg0KLS0gU2VjdGlvbiA4IC0tDQpUaGUgZG9jdW1lbnQgc3BlY2lmaWVzIG5vIElBTkEgYWN0aW9u cyB3aGlsZSB0aGUgc2hlcGhlcmQgd3JpdGUtdXAgdGFsa3MgYWJvdXQNCmEgSUFOQSBhY3Rpb24u DQoNCi0tIFNlY3Rpb24gOSAtLQ0KVGhpcyBzZWN0aW9uIGlzIG9ubHkgYWJvdXQgSVB2NCAoVFRM IGFuZCBSRkMgMTgxMikuIFBsZWFzZSBhZGRyZXNzIElQdjYgYXMgd2VsbC4NCg0KDQotLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tDQpDT01NRU5UOg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQo9PSBDT01NRU5UUyA9PQ0KDQpSRkMg NTg4MSAoQkZEKSBzdGF0ZXMgdGhhdCBpdCBhcHBsaWVzIHRvIElQdjQvSVB2NiB0dW5uZWxzLCBt YXkgSSBpbmZlciB0aGF0DQp0aGlzIGRvY3VtZW50IGlzIG9ubHkgcmVxdWlyZWQgdG8gYWRkcmVz cyB0aGUgRXRoZXJuZXQgZW5jYXBzdWxhdGlvbiA/IEkuZS4NCnNwZWNpZnlpbmcgdGhlIEV0aGVy bmV0IE1BQyBhZGRyZXNzZXM/DQoNCi0tIFNlY3Rpb24gMyAtLQ0KQXQgZmlyc3Qgc2lnaHQsIEkg d2FzIHN1cnByaXplZCBieSBoYXZpbmcgYSBCRkQgc2Vzc2lvbiBwZXIgVlhMQU4gVk5JIGFzIGl0 DQp3aWxsIGNyZWF0ZSBzb21lIHNjYWxhYmlsaXR5IGlzc3VlLCBidXQsIEkgYXNzdW1lIHRoYXQg dGhpcyBpcyB0byBkZXRlY3QNCm1pc2NvbmZpZ3VyYXRpb24gYXMgd2VsbC4gSWYgc28sIHBlcmhh cHMgd29ydGggbWVudGlvbm5pZyB0aGUgcmVhc29uaW5nIGJlaGluZD8NCg0KSW4gInRoZSBpbm5l ciBkZXN0aW5hdGlvbiBJUCBhZGRyZXNzIFNIT1VMRCIgaXQgaXMgdW5jbGVhciB3aGV0aGVyIGl0 IGlzIGluIHRoZQ0KYWxsIEJGRCBwYWNrZXRzLCBvciBvbmx5IHRoZSByZXF1ZXN0IG9uZSBvciAu Li4gPw0KDQotLSBTZWN0aW9uIDQgLS0NCldoaWxlIHByb2JhYmx5IGRlZmluZWQgaW4gUkZDNzM0 OCwgc2hvdWxkICJGQ1MiIGJlIHJlbmFtZWQgYXMgIk91dGVyIEV0aGVybmV0DQpGQ1MiIGZvciBj b25zaXN0ZW5jeSB3aXRoIHRoZSAiT3V0ZXIgRXRoZXJuZXQgSGVhZGVyIiBpbiBmaWd1cmUgMiA/ DQoNCldoeSBub3QgdXNpbmcgdGhlIFNvdXJjZSBNQUMgYWRkcmVzcyBhcyB0aGUgRGVzdGluYXRp b24gTUFDIGFkZHJlc3MgPyBUaGlzDQp3b3VsZCBlbnN1cmUgdGhhdCB0aGVyZSBpcyBubyBjb25m bGljdCBhdCB0aGUgZXhwZW5zZSBvZiAiZm9yY2luZyIgdGhlDQp0cmFuc21pc3Npb24gb2YgdGhl IGZyYW1lIGV2ZW4gaWYgYWRkcmVzc2VkIHRvIGl0c2VsZi4NCg0KUGxlYXNlIGNvbnNpZGVyIHJl d3JpdGluZyB0aGUgc2VjdGlvbiBhYm91dCBUVEwvSG9wIExpbWl0IGFzIGl0IGlzIG5vdCBlYXN5 IHRvDQpwYXJzZS9yZWFkLg0KDQotLSBTZWN0aW9uIDkgLS0NCkl0IGlzIHVuY2xlYXIgdG8gbWUg KHNlZSBhbHNvIEJlbidzIGNvbW1lbnQpIHdoYXQgaXMgdGhlICdhdHRhY2sgdmVjdG9yJyBvZg0K c2VuZGluZyBwYWNrZXRzIHdpdGggVFRMPTEgPw0KDQoNCg0K --_000_CED2B858AC554B0AADA2AC46B628E6DAciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <37E89EC3D467B0468AE554C7F66EBB13@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCkhpLCDDiXJpYywNCjxkaXYgY2xhc3M9IiI+PGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlJlZ2FyZGluZyB5b3UgZmlyc3QgRElT Q1VTUyBlbGVtZW50LCBJIGhhZCBicm91Z2h0IHVwIHRoZSBzYW1lIGlzc3VlLiBTZWUgdGhlIDJu ZCBwb2ludCBhdCZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJj aC9tc2cvcnRnLWJmZC9CTDlPYjY2WXhpZTR3WDEzeVpKRUxiWVBMSnMiIGNsYXNzPSIiPmh0dHBz Oi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvcnRnLWJmZC9CTDlPYjY2WXhpZTR3WDEz eVpKRUxiWVBMSnM8L2E+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj5UaGFua3MsPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5DYXJsb3MuPGJyIGNsYXNzPSIiPg0KPGRpdj48YnIg Y2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9 IiI+MjAxOS8xMi8xNyDljYjliY0zOjUx44CBw4lyaWMgVnluY2tlIHZpYSBEYXRhdHJhY2tlciAm bHQ7PGEgaHJlZj0ibWFpbHRvOm5vcmVwbHlAaWV0Zi5vcmciIGNsYXNzPSIiPm5vcmVwbHlAaWV0 Zi5vcmc8L2E+Jmd0O+OBruODoeODvOODqzo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJj aGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj7DiXJpYyBWeW5j a2UgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBiYWxsb3QgcG9zaXRpb24gZm9yPGJyIGNsYXNz PSIiPg0KZHJhZnQtaWV0Zi1iZmQtdnhsYW4tMDk6IERpc2N1c3M8YnIgY2xhc3M9IiI+DQo8YnIg Y2xhc3M9IiI+DQpXaGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxpbmUg aW50YWN0IGFuZCByZXBseSB0byBhbGw8YnIgY2xhc3M9IiI+DQplbWFpbCBhZGRyZXNzZXMgaW5j bHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0byBjdXQgdGhpczxiciBj bGFzcz0iIj4NCmludHJvZHVjdG9yeSBwYXJhZ3JhcGgsIGhvd2V2ZXIuKTxiciBjbGFzcz0iIj4N CjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClBsZWFzZSByZWZlciB0byA8YSBocmVmPSJo dHRwczovL3d3dy5pZXRmLm9yZy9pZXNnL3N0YXRlbWVudC9kaXNjdXNzLWNyaXRlcmlhLmh0bWwi IGNsYXNzPSIiPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy1j cml0ZXJpYS5odG1sPC9hPjxiciBjbGFzcz0iIj4NCmZvciBtb3JlIGluZm9ybWF0aW9uIGFib3V0 IElFU0cgRElTQ1VTUyBhbmQgQ09NTUVOVCBwb3NpdGlvbnMuPGJyIGNsYXNzPSIiPg0KPGJyIGNs YXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KVGhlIGRvY3VtZW50LCBhbG9uZyB3aXRoIG90aGVyIGJh bGxvdCBwb3NpdGlvbnMsIGNhbiBiZSBmb3VuZCBoZXJlOjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9 Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtYmZkLXZ4bGFuLyIg Y2xhc3M9IiI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1iZmQt dnhsYW4vPC9hPjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxi ciBjbGFzcz0iIj4NCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08YnIgY2xhc3M9IiI+DQpESVNDVVNTOjxiciBjbGFz cz0iIj4NCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS08YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQpUaGFuayB5b3UgZm9yIHRoZSB3b3JrIHB1dCBpbnRvIHRoaXMgZG9jdW1lbnQuPGJy IGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KSSBmdWxseSBzZWNvbmQgQWRhbSdzIENPTU1FTlQg dGhhdCBzaG91bGQgYmUgZml4ZWQgYmVmb3JlIHB1YmxpY2F0aW9uIChJTUhPPGJyIGNsYXNzPSIi Pg0KdGhpcyBpcyBhIERJU0NVU1MpLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkFuc3dl cnMgdG8gbXkgQ09NTUVOVHMgYmVsb3cgd2lsbCBiZSB3ZWxjb21lLCBldmVuIGlmIHRob3NlIENP TU1FTlRzIGFyZSBub3Q8YnIgY2xhc3M9IiI+DQpibG9ja2luZy48YnIgY2xhc3M9IiI+DQo8YnIg Y2xhc3M9IiI+DQpBcyB1c3VhbCwgYW4gYW5zd2VyIHRvIHRoZSBESVNDVVNTIGlzIHJlcXVpcmVk IHRvIGNsZWFyIG15IERJU0NVU1MgdGhvdWdoLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4N CkkgaG9wZSB0aGF0IHRoaXMgaGVscHMgdG8gaW1wcm92ZSB0aGUgZG9jdW1lbnQsPGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KUmVnYXJkcyw8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+ DQotw6lyaWM8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo9PSBESVNDVVNTID09PGJyIGNs YXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KTWF5IGJlIEkgYW0gbm90IGZhbWlsaWFyIGVub3VnaCB3 aXRoIEJGRCwgYnV0LCBSRkMgNTg4MSAodGhlIG9uZSBkZWZpbmluZyBCRkQpPGJyIGNsYXNzPSIi Pg0Kc3BlY2lmaWVzIHRoZSB1c2Ugb2YgVFRMID0gSG9wIExpbWl0ID0gMjU1Li4gV2h5IHRoaXMg ZG9jdW1lbnQgdXNlcyBhIHZhbHVlIG9mPGJyIGNsYXNzPSIiPg0KMSA/PGJyIGNsYXNzPSIiPg0K PGJyIGNsYXNzPSIiPg0KLS0gU2VjdGlvbiAzIC0tPGJyIGNsYXNzPSIiPg0KSVB2NC1tYXBwZWQg SVB2NiBhZGRyZXNzZXMgYXJlIG9ubHkgdG8gYmUgdXNlZCBpbnNpZGUgYSBob3N0IGFuZCBzaG91 bGQgbmV2ZXI8YnIgY2xhc3M9IiI+DQpiZSB0cmFuc21pdHRlZCBpbiByZWFsIHBhY2tldHMgKGlu Y2x1ZGluZyBwYWNrZXRzIGluc2lkZSBhIHR1bm5lbCkgc2VlIHNlY3Rpb248YnIgY2xhc3M9IiI+ DQo0LjIgb2YgUkZDIDQwMzggKGV2ZW4gaWYgaW5mb3JtYXRpb25hbCkuIEFzIG90aGVyIElFU0cg cmV2aWV3ZXJzLCBJIHdvbmRlciB3aHk8YnIgY2xhc3M9IiI+DQo6OjEvMTI4IGlzIG5vdCB1c2Vk PzxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCi0tIFNlY3Rpb24gOCAtLTxiciBjbGFzcz0i Ij4NClRoZSBkb2N1bWVudCBzcGVjaWZpZXMgbm8gSUFOQSBhY3Rpb25zIHdoaWxlIHRoZSBzaGVw aGVyZCB3cml0ZS11cCB0YWxrcyBhYm91dDxiciBjbGFzcz0iIj4NCmEgSUFOQSBhY3Rpb24uPGJy IGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KLS0gU2VjdGlvbiA5IC0tPGJyIGNsYXNzPSIiPg0K VGhpcyBzZWN0aW9uIGlzIG9ubHkgYWJvdXQgSVB2NCAoVFRMIGFuZCBSRkMgMTgxMikuIFBsZWFz ZSBhZGRyZXNzIElQdjYgYXMgd2VsbC48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8YnIg Y2xhc3M9IiI+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyIGNsYXNzPSIiPg0KQ09NTUVOVDo8YnIgY2xhc3M9 IiI+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPT0gQ09NTUVO VFMgPT08YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpSRkMgNTg4MSAoQkZEKSBzdGF0ZXMg dGhhdCBpdCBhcHBsaWVzIHRvIElQdjQvSVB2NiB0dW5uZWxzLCBtYXkgSSBpbmZlciB0aGF0PGJy IGNsYXNzPSIiPg0KdGhpcyBkb2N1bWVudCBpcyBvbmx5IHJlcXVpcmVkIHRvIGFkZHJlc3MgdGhl IEV0aGVybmV0IGVuY2Fwc3VsYXRpb24gPyBJLmUuPGJyIGNsYXNzPSIiPg0Kc3BlY2lmeWluZyB0 aGUgRXRoZXJuZXQgTUFDIGFkZHJlc3Nlcz88YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQot LSBTZWN0aW9uIDMgLS08YnIgY2xhc3M9IiI+DQpBdCBmaXJzdCBzaWdodCwgSSB3YXMgc3VycHJp emVkIGJ5IGhhdmluZyBhIEJGRCBzZXNzaW9uIHBlciBWWExBTiBWTkkgYXMgaXQ8YnIgY2xhc3M9 IiI+DQp3aWxsIGNyZWF0ZSBzb21lIHNjYWxhYmlsaXR5IGlzc3VlLCBidXQsIEkgYXNzdW1lIHRo YXQgdGhpcyBpcyB0byBkZXRlY3Q8YnIgY2xhc3M9IiI+DQptaXNjb25maWd1cmF0aW9uIGFzIHdl bGwuIElmIHNvLCBwZXJoYXBzIHdvcnRoIG1lbnRpb25uaWcgdGhlIHJlYXNvbmluZyBiZWhpbmQ/ PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KSW4gJnF1b3Q7dGhlIGlubmVyIGRlc3RpbmF0 aW9uIElQIGFkZHJlc3MgU0hPVUxEJnF1b3Q7IGl0IGlzIHVuY2xlYXIgd2hldGhlciBpdCBpcyBp biB0aGU8YnIgY2xhc3M9IiI+DQphbGwgQkZEIHBhY2tldHMsIG9yIG9ubHkgdGhlIHJlcXVlc3Qg b25lIG9yIC4uLiA/PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KLS0gU2VjdGlvbiA0IC0t PGJyIGNsYXNzPSIiPg0KV2hpbGUgcHJvYmFibHkgZGVmaW5lZCBpbiBSRkM3MzQ4LCBzaG91bGQg JnF1b3Q7RkNTJnF1b3Q7IGJlIHJlbmFtZWQgYXMgJnF1b3Q7T3V0ZXIgRXRoZXJuZXQ8YnIgY2xh c3M9IiI+DQpGQ1MmcXVvdDsgZm9yIGNvbnNpc3RlbmN5IHdpdGggdGhlICZxdW90O091dGVyIEV0 aGVybmV0IEhlYWRlciZxdW90OyBpbiBmaWd1cmUgMiA/PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNz PSIiPg0KV2h5IG5vdCB1c2luZyB0aGUgU291cmNlIE1BQyBhZGRyZXNzIGFzIHRoZSBEZXN0aW5h dGlvbiBNQUMgYWRkcmVzcyA/IFRoaXM8YnIgY2xhc3M9IiI+DQp3b3VsZCBlbnN1cmUgdGhhdCB0 aGVyZSBpcyBubyBjb25mbGljdCBhdCB0aGUgZXhwZW5zZSBvZiAmcXVvdDtmb3JjaW5nJnF1b3Q7 IHRoZTxiciBjbGFzcz0iIj4NCnRyYW5zbWlzc2lvbiBvZiB0aGUgZnJhbWUgZXZlbiBpZiBhZGRy ZXNzZWQgdG8gaXRzZWxmLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClBsZWFzZSBjb25z aWRlciByZXdyaXRpbmcgdGhlIHNlY3Rpb24gYWJvdXQgVFRML0hvcCBMaW1pdCBhcyBpdCBpcyBu b3QgZWFzeSB0bzxiciBjbGFzcz0iIj4NCnBhcnNlL3JlYWQuPGJyIGNsYXNzPSIiPg0KPGJyIGNs YXNzPSIiPg0KLS0gU2VjdGlvbiA5IC0tPGJyIGNsYXNzPSIiPg0KSXQgaXMgdW5jbGVhciB0byBt ZSAoc2VlIGFsc28gQmVuJ3MgY29tbWVudCkgd2hhdCBpcyB0aGUgJ2F0dGFjayB2ZWN0b3InIG9m PGJyIGNsYXNzPSIiPg0Kc2VuZGluZyBwYWNrZXRzIHdpdGggVFRMPTEgPzxiciBjbGFzcz0iIj4N CjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_CED2B858AC554B0AADA2AC46B628E6DAciscocom_-- From nobody Tue Dec 17 09:57:10 2019 Return-Path: X-Original-To: rtg-bfd@ietf.org Delivered-To: rtg-bfd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 90DD0120B16; Tue, 17 Dec 2019 09:57:04 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Alvaro Retana via Datatracker To: "The IESG" Cc: draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, rtg-bfd@ietf.org Subject: Alvaro Retana's Discuss on draft-ietf-bfd-vxlan-09: (with DISCUSS and COMMENT) X-Test-IDTracker: no X-IETF-IDTracker: 6.113.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Alvaro Retana Message-ID: <157660542458.26499.3977878811671361973.idtracker@ietfa.amsl.com> Date: Tue, 17 Dec 2019 09:57:04 -0800 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Dec 2019 17:57:05 -0000 Alvaro Retana has entered the following ballot position for draft-ietf-bfd-vxlan-09: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- I support Eric's DISCUSS point about the TTL, but I want to go a step further because this document contradicts rfc5881, which is clear about the TTL setting (from §5): If BFD authentication is not in use on a session, all BFD Control packets for the session MUST be sent with a Time to Live (TTL) or Hop Limit value of 255. All received BFD Control packets that are demultiplexed to the session MUST be discarded if the received TTL or Hop Limit is not equal to 255. A discussion of this mechanism can be found in [GTSM]. If BFD authentication is in use on a session, all BFD Control packets MUST be sent with a TTL or Hop Limit value of 255. All received BFD Control packets that are demultiplexed to the session MAY be discarded if the received TTL or Hop Limit is not equal to 255. If the TTL/Hop Limit check is made, it MAY be done before any cryptographic authentication takes place if this will avoid unnecessary calculation that would be detrimental to the receiving system. OTOH, Section 4 of this document specifies: TTL or Hop Limit: MUST be set to 1 to ensure that the BFD packet is not routed within the Layer 3 underlay network. This addresses the scenario when the inner IP destination address is of VXLAN gateway and there is a router in underlay which removes the VXLAN header, then it is possible to route the packet as VXLAN gateway address is routable address. Not wanting the packet to be routed in the underlay sounds like a reasonable justification -- but I couldn't find the specification in rfc7348 about "a router in underlay which removes the VXLAN header". Maybe I missed it... Independent of VXLAN, the conflict with rfc5881 remains -- given the text above, it seems to me that it would be ok if the TTL was set to 1 if authentication is is use, but this document doesn't talk about requiring authentication. ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I also support Ben's DISCUSS. Non-blocking comments: (1) §3: "...a service layer BFD session may be used between the tenants of VTEPs IP1 and IP2..." Just to be clear, the use of BFD in a "service layer session" is out of scope of this document, right? It might be nice to say so. (2) §3: "As per Section 4, the inner destination IP address SHOULD be..." If the specification is already in Section 4, then there doesn't seem to be a need to repeat it. It might make more sense to put the text about a potential firewall there. (3) §4: "...SHOULD ensure that the BFD packets follow the same lookup path as VXLAN data packets within the sender system." What is a "lookup path"? When would it be ok to not ensure it? BTW, a better Normative statement might me (something like): MUST follow the same lookup path... (4) §4: "The MAC address MAY be configured, or it MAY be learned via a control plane protocol. The details of how the MAC address is obtained are outside the scope of this document." The Normative MAYs are really just stating a fact, and out of scope any way. s/MAY/may (5) §5: "If the Destination MAC of the inner Ethernet frame doesn't match any of VTEP's MAC addresses, then the processing of the received VXLAN packet MUST follow the procedures described in Section 4.1 [RFC7348]." §4.1 of rfc7348 is about Unicast VM-to-VM Communication -- which makes me think that if the procedures from that section are followed then the BFD packet may be forwarded to a VM, which seems to be in contradiction with this statement (from §3): "BFD packets intended for a VTEP MUST NOT be forwarded to a VM as a VM may drop BFD packets leading to a false negative." What am I missing? (6) Related to the last point, the following sentences also mention that BFD packets MUST NOT be forwarded to VMs...but with qualifications: §5: "If the BFD session is using the Management VNI (Section 6), BFD Control packets with unknown MAC address MUST NOT be forwarded to VMs." §6: "All VXLAN packets received on the Management VNI MUST be processed locally and MUST NOT be forwarded to a tenant." The difference between these 2 statements and the one from §3 is that they seem to be intended only when using the Management VNI...but it would seem that the general statement applies there too, right? IOW, the specific statements about the Management VNIs are simply affirming what was already said more generally in §3, right? (7) Nits: s/of VXLAN gateway and there is a router in underlay/of the VXLAN gateway and there is a router in the underlay s/VTEP MUST validate/the VTEP MUST validate s/then BFD session/then the BFD session From nobody Wed Dec 18 06:31:14 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78B92120047; Tue, 17 Dec 2019 14:36:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.596 X-Spam-Level: X-Spam-Status: No, score=-0.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_COMMENT_SAVED_URL=1.391, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4mAJv62Qm-uf; Tue, 17 Dec 2019 14:35:58 -0800 (PST) Received: from mail-lj1-x22a.google.com (mail-lj1-x22a.google.com [IPv6:2a00:1450:4864:20::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6331120013; Tue, 17 Dec 2019 14:35:57 -0800 (PST) Received: by mail-lj1-x22a.google.com with SMTP id u17so12791087lja.4; Tue, 17 Dec 2019 14:35:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=xlcYdMiEAdC/RGk/MZAYFc0i0xTLpEVk9WK0OFHN+Cw=; b=Af1EtljPVRD11zr8T3BmKZYaiG4StlCYHRwe73rIEaSzD4MVxuqFLtS50gTaUmQ7YB OlDDDmEK7JZy2kC4N250XaizppDalBMO4LMmfeOPKxdIt41wbT572p3loF4HRMN2BcSo v+Tsl0HRIDRooHs0vM50p238SLq1hG/ZWNZlz6uPeSk7zsVlgBEvYXgmRFaM9mJ71nxp IEsZAUZ6V32PPBPQaAZZluQ1M9c7ZhbA59l0GCmy8u+RT+Gn9Cm7UQI8Z1G4v1vLwysQ 7Y6NZQe7OPV3NzW/Fwtn9SLvdQ0+OV/mVBR93TSIeH2BglmvIV4cD+7y4bHOPrqRy4F9 wuJw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=xlcYdMiEAdC/RGk/MZAYFc0i0xTLpEVk9WK0OFHN+Cw=; b=PPd7f+ZpHAvwJBhgd6m0KRAw2Hwl2WhbXgYEEDGC38XvIciY1cLyd0C10wVuze0eVT uoAcFgQWGJ/ihGyO1fz90dHxSsg/0tyNmwwVFUHD5+q2OT8PWybzpJM1q/W8TTqNtpw2 F7t6N0IKD8YtU885wql+sZ37rxD78MvVhKZZAIQx1BEQIUEvnCPACvi7MZb1QZfX/s+s kLojtgs+9SBDBtC+ubqTr8vR8SYJqkIqkXONgl2LsnUSo+tjzz9Znlax8scDMisHUR6u O3kW5enazdN+34I5ilg9LG8VRT3SFjj/3tihfEAFE5tCFGMj5/y1rCUpRNvu0Ev8alr3 qazA== X-Gm-Message-State: APjAAAUQtBIuHSnzeSmtmteTDUiTkQg3FExiHodmNnyddKa0Gsg0yL5H IkcfC9tjIVnG7RbTj90jpC0zB7Ov73qPINZz22o= X-Google-Smtp-Source: APXvYqwLm7z34T6UHczxApuzzGe+Rc2NOVCOHW/tbfyT18fYjWSBkSCR69rebBBxDM3E9BDl6pxGa5ZMmsWvRUF87Fg= X-Received: by 2002:a2e:9cd8:: with SMTP id g24mr90942ljj.243.1576622155184; Tue, 17 Dec 2019 14:35:55 -0800 (PST) MIME-Version: 1.0 References: <157656670090.24465.17703971379844970449.idtracker@ietfa.amsl.com> In-Reply-To: <157656670090.24465.17703971379844970449.idtracker@ietfa.amsl.com> From: Greg Mirsky Date: Tue, 17 Dec 2019 14:35:44 -0800 Message-ID: Subject: Re: Adam Roach's No Objection on draft-ietf-bfd-vxlan-09: (with COMMENT) To: Adam Roach Cc: The IESG , draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, rtg-bfd WG Content-Type: multipart/mixed; boundary="000000000000869c780599edf3e0" Archived-At: X-Mailman-Approved-At: Wed, 18 Dec 2019 06:31:12 -0800 X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Dec 2019 22:36:02 -0000 --000000000000869c780599edf3e0 Content-Type: multipart/alternative; boundary="000000000000869c750599edf3de" --000000000000869c750599edf3de Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Adam, thank you for your review and the very clear suggestions, all is the most helpful. I've followed your recommendations and applied changes to the working version of the draft. Attached, please find the diff that highlights updates. Also, please find my notes in-line tagged GIM>>. Best regards, Greg On Mon, Dec 16, 2019 at 11:11 PM Adam Roach via Datatracker < noreply@ietf.org> wrote: > Adam Roach has entered the following ballot position for > draft-ietf-bfd-vxlan-09: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > Thanks for the work that everyone has put into this document. I have > a couple of relatively important, related comments that should be > taken into account prior to publication. > > -------------------------------------------------------------------------= -- > > =C2=A73: > > > As per Section 4, the inner destination IP address SHOULD be set to > > one of the loopback addresses (127/8 range for IPv4 and > > 0:0:0:0:0:FFFF:7F00:0/104 range for IPv6). > > Please consider reformatting this IPv6 address according to the > recommendations > of RFC 5952 (paying particular attention to sections 4.2.1, 4.3, and 5): > > ::ffff:127.0.0.0/104 > > It's also worth noting that, as a practical matter, modern operating > systems do > not seem to bind to anything in the IPv4-mapped range assigned to IPv4 > loopback: > > Linux: > > ~$ ping6 ::ffff:127.0.0.1 > PING ::ffff:127.0.0.1(::ffff:127.0.0.1) 56 data bytes > ^C > --- ::ffff:127.0.0.1 ping statistics --- > 14 packets transmitted, 0 received, 100% packet loss, time 13316ms > > MacOS: > > ~$ ping6 ::ffff:127.0.0.1 > PING6(56=3D40+8+8 bytes) ::ffff:127.0.0.1 --> ::ffff:127.0.0.1 > ping6: sendmsg: Invalid argument > ping6: wrote ::ffff:127.0.0.1 16 chars, ret=3D-1 > > > It is not clear to me whether this poses an issue for your intended usage= . > GIM>> Thank you for sharing very interesting facts on the handling of these addresses. I don't think that implementation on the egress BFD node would listen on the particular address, more likely it would be on the value of the well-known UDP port. The goal of using one of the addresses from this range is to prevent leaking packets from a broken VXLAN tunnel (as was the original goal in RFC 4379/8029 and RFC 5884). > > In any case, please do not refer to ::ffff:127.0.0.0/104 as "loopback > addresses": IPv6 has only one loopback address defined (::1). The range > you cite is best described as "IPv4-mapped IPv4 loopback addresses." > Alternately -- and this is probably better -- use "::1/128" instead of > "::ffff:127.0.0.0/104" for the inner IP header destination address. > > As an aside, I share Benjamin's unease around the use of loopback address= es > in this fashion. It may be worth noting that IETF protocols can reserve > addresses in the 192.0.0.0/24 and 2001::/23 blocks if necessary, and such > reserved addresses won't ever correspond to a valid destination. > > (There is corresponding text in section 4 that all of the preceding > pertains > to as well) > > -------------------------------------------------------------------------= -- > > =C2=A79: > > > This document recommends using an address from the Internal host > > loopback addresses (127/8 range for IPv4 and > > 0:0:0:0:0:FFFF:7F00:0/104 range for IPv6) as the destination IP > > address in the inner IP header. Using such address prevents the > > forwarding of the encapsulated BFD control message by a transient > > node in case the VXLAN tunnel is broken as according to [RFC1812]: > > > > A router SHOULD NOT forward, except over a loopback interface, any > > packet that has a destination address on network 127. A router > > MAY have a switch that allows the network manager to disable these > > checks. If such a switch is provided, it MUST default to > > performing the checks. > > In addition to the comments above about IPv6 address formatting, the > improper use of "loopback" terminology as it applies to IPv6, and > concerns about using localhost: it's worth noting that this text in > RFC 1812 refers to IPv4 routers -- RFC 8504 has no equivalent language, > and so the use of ::ffff:127.0.0.0/104 implies no special router handling= . > ::1 *probably* does, at least as a practical matter. > GIM>> As noted above, the reason of using addresses from this range was to prevent packets from being routed in case a tunnel is broken. Do you think that the lack of the wording similar to RFC 1812 should be a concern for RFC 8029 and RFC 5884 that use the same range for the destination IP address? --000000000000869c750599edf3de Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Adam,
thank you for your review an= d the very clear suggestions, all is the most helpful. I've followed yo= ur recommendations and applied changes to the working version of the draft.= Attached, please find the diff that highlights updates. Also, please find = my notes in-line tagged GIM>>.

Best regards,=
Greg

On Mon, Dec 16, 2019 at 11:11 PM Adam Roach via Datatr= acker <noreply@ietf.org> wrot= e:
Adam Roach ha= s entered the following ballot position for
draft-ietf-bfd-vxlan-09: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/s= tatement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-bf= d-vxlan/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Thanks for the work that everyone has put into this document. I have
a couple of relatively important, related comments that should be
taken into account prior to publication.

---------------------------------------------------------------------------=

=C2=A73:

>=C2=A0 As per Section 4, the inner destination IP address SHOULD be set= to
>=C2=A0 one of the loopback addresses (127/8 range for IPv4 and
>=C2=A0 0:0:0:0:0:FFFF:7F00:0/104 range for IPv6).

Please consider reformatting this IPv6 address according to the recommendat= ions
of RFC 5952 (paying particular attention to sections 4.2.1, 4.3, and 5):
::ffff:127.0.0.0/104

It's also worth noting that, as a practical matter, modern operating sy= stems do
not seem to bind to anything in the IPv4-mapped range assigned to IPv4 loop= back:

Linux:

=C2=A0 ~$ ping6 ::ffff:127.0.0.1
=C2=A0 PING ::ffff:127.0.0.1(::ffff:127.0.0.1) 56 data bytes
=C2=A0 ^C
=C2=A0 --- ::ffff:127.0.0.1 ping statistics ---
=C2=A0 14 packets transmitted, 0 received, 100% packet loss, time 13316ms
MacOS:

=C2=A0 ~$ ping6 ::ffff:127.0.0.1
=C2=A0 PING6(56=3D40+8+8 bytes) ::ffff:127.0.0.1 --> ::ffff:127.0.0.1 =C2=A0 ping6: sendmsg: Invalid argument
=C2=A0 ping6: wrote ::ffff:127.0.0.1 16 chars, ret=3D-1


It is not clear to me whether this poses an issue for your intended usage.<= br>
GIM>> Thank you for sharing very interesting fac= ts on the handling of these addresses. I don't think that implementatio= n on the egress BFD node would listen on the particular address, more likel= y it would be on the value of the well-known UDP port. The goal of using on= e of the addresses from this range is to prevent leaking packets from a bro= ken VXLAN tunnel (as was the original goal in RFC 4379/8029 and RFC 5884).<= /div>

In any case, please do not refer to ::ffff:127.0.0.0/104 as "loopback addresses": IPv6 has only one loopback address defined (::1). The rang= e
you cite is best described as "IPv4-mapped IPv4 loopback addresses.&qu= ot;
Alternately -- and this is probably better -- use "::1/128" inste= ad of
"::ffff:127.0.0.0/104" for the inner IP header destination address= .

As an aside, I share Benjamin's unease around the use of loopback addre= sses
in this fashion. It may be worth noting that IETF protocols can reserve
addresses in the 192.0.0.0/24 and 2001::/23 blocks if necessary, and such reserved addresses won't ever correspond to a valid destination.

(There is corresponding text in section 4 that all of the preceding pertain= s
to as well)

---------------------------------------------------------------------------=

=C2=A79:

>=C2=A0 This document recommends using an address from the Internal host=
>=C2=A0 loopback addresses (127/8 range for IPv4 and
>=C2=A0 0:0:0:0:0:FFFF:7F00:0/104 range for IPv6) as the destination IP<= br> >=C2=A0 address in the inner IP header.=C2=A0 Using such address prevent= s the
>=C2=A0 forwarding of the encapsulated BFD control message by a transien= t
>=C2=A0 node in case the VXLAN tunnel is broken as according to [RFC1812= ]:
>
>=C2=A0 =C2=A0 =C2=A0A router SHOULD NOT forward, except over a loopback= interface, any
>=C2=A0 =C2=A0 =C2=A0packet that has a destination address on network 12= 7.=C2=A0 A router
>=C2=A0 =C2=A0 =C2=A0MAY have a switch that allows the network manager t= o disable these
>=C2=A0 =C2=A0 =C2=A0checks.=C2=A0 If such a switch is provided, it MUST= default to
>=C2=A0 =C2=A0 =C2=A0performing the checks.

In addition to the comments above about IPv6 address formatting, the
improper use of "loopback" terminology as it applies to IPv6, and=
concerns about using localhost: it's worth noting that this text in
RFC 1812 refers to IPv4 routers -- RFC 8504 has no equivalent language,
and so the use of ::ffff:127.0.0.0/104 implies no special router handling. ::1 *probably* does, at least as a practical matter.
G= IM>> As noted above, the reason of using addresses from this range wa= s to prevent packets from being routed in case a tunnel is broken. Do you t= hink that the lack of the wording similar to RFC 1812 should be a concern f= or RFC 8029 and RFC 5884 that use the same range for the destination IP add= ress?

--000000000000869c750599edf3de-- --000000000000869c780599edf3e0 Content-Type: text/html; charset="UTF-8"; name="Diff_ draft-ietf-bfd-vxlan-09.txt - draft-ietf-bfd-vxlan-10.txt.html" Content-Disposition: attachment; filename="Diff_ draft-ietf-bfd-vxlan-09.txt - draft-ietf-bfd-vxlan-10.txt.html" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_k4ag425t0 PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h bC5kdGQiPgo8IS0tIHNhdmVkIGZyb20gdXJsPSgwMDQyKWh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9y ZmNkaWZmL3JmY2RpZmYucHlodCAtLT4KPGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5 OTkveGh0bWwiIGNsYXNzPSJncl9fd3d3Nl9pZXRmX29yZyI+PGhlYWQ+PG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgiPiAKICAg CiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1TdHlsZS1UeXBlIiBjb250ZW50PSJ0ZXh0L2Nz cyI+IAogIDx0aXRsZT5EaWZmOiBkcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQgLSBkcmFmdC1p ZXRmLWJmZC12eGxhbi0xMC50eHQ8L3RpdGxlPiAKICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAK ICAgIGJvZHkgICAgeyBtYXJnaW46IDAuNGV4OyBtYXJnaW4tcmlnaHQ6IGF1dG87IH0gCiAgICB0 ciAgICAgIHsgfSAKICAgIHRkICAgICAgeyB3aGl0ZS1zcGFjZTogcHJlOyBmb250LWZhbWlseTog bW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBmb250LXNpemU6IDAuODZlbTt9IAogICAg dGggICAgICB7IGZvbnQtc2l6ZTogMC44NmVtOyB9IAogICAgLnNtYWxsICB7IGZvbnQtc2l6ZTog MC42ZW07IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9udC1mYW1pbHk6IFZlcmRhbmEsIEhlbHZldGlj YSwgc2Fucy1zZXJpZjsgfSAKICAgIC5sZWZ0ICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9 IAogICAgLnJpZ2h0ICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IH0gCiAgICAuZGlmZiAgIHsg YmFja2dyb3VuZC1jb2xvcjogI0NDRjsgfSAKICAgIC5sYmxvY2sgeyBiYWNrZ3JvdW5kLWNvbG9y OiAjQkZCOyB9IAogICAgLnJibG9jayB7IGJhY2tncm91bmQtY29sb3I6ICNGRjg7IH0gCiAgICAu aW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhGRjsgfSAKICAgIC5kZWxldGUgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjQUNGOyB9IAogICAgLnZvaWQgICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkI7 IH0gCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAKICAgIC5saW5lYnIg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAogICAgLmxpbmVubyB7IGNvbG9yOiByZWQ7IGJh Y2tncm91bmQtY29sb3I6ICNGRkY7IGZvbnQtc2l6ZTogMC43ZW07IHRleHQtYWxpZ246IHJpZ2h0 OyBwYWRkaW5nOiAwIDJweDsgfSAKICAgIC5lbGlwc2lzeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFB OyB9IAogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjREREOyB9IAogICAgLnJp Z2h0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAKICAgIC5sYmxvY2sgLmNvbnQg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IAogICAgLnJibG9jayAuY29udCB7IGJhY2tncm91 bmQtY29sb3I6ICNERDY7IH0gCiAgICAuaW5zZXJ0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjog IzBERDsgfSAKICAgIC5kZWxldGUgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOEFEOyB9IAog ICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0aCB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7 IHBhZGRpbmc6IDJweCAwOyB9IAogICAgc3Bhbi5oaWRlIHsgZGlzcGxheTogbm9uZTsgY29sb3I6 ICNhYWE7fSAgICBhOmhvdmVyIHNwYW4geyBkaXNwbGF5OiBpbmxpbmU7IH0gICAgdHIuY2hhbmdl IHsgYmFja2dyb3VuZC1jb2xvcjogZ3JheTsgfSAKICAgIHRyLmNoYW5nZSBhIHsgdGV4dC1kZWNv cmF0aW9uOiBub25lOyBjb2xvcjogYmxhY2sgfSAKICA8L3N0eWxlPiAKICAgICA8c2NyaXB0Pgp2 YXIgY2h1bmtfaW5kZXggPSAwOwp2YXIgb2xkX2NodW5rID0gbnVsbDsKCmZ1bmN0aW9uIGZvcm1h dF9jaHVuayhpbmRleCkgewogICAgdmFyIHByZWZpeCA9ICJkaWZmIjsKICAgIHZhciBzdHIgPSBp bmRleC50b1N0cmluZygpOwogICAgZm9yICh4PTA7IHg8KDQtc3RyLmxlbmd0aCk7ICsreCkgewog ICAgICAgIHByZWZpeCs9JzAnOwogICAgfQogICAgcmV0dXJuIHByZWZpeCArIHN0cjsKfQoKZnVu Y3Rpb24gZmluZF9jaHVuayhuKXsKICAgIHJldHVybiBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCd0 cltpZCQ9IicgKyBuICsgJyJdJyk7Cn0KCmZ1bmN0aW9uIGNoYW5nZV9jaHVuayhvZmZzZXQpIHsK ICAgIHZhciBpbmRleCA9IGNodW5rX2luZGV4ICsgb2Zmc2V0OwogICAgdmFyIG5ld19zdHI7CiAg ICB2YXIgbmV3X2NodW5rOwoKICAgIG5ld19zdHIgPSBmb3JtYXRfY2h1bmsoaW5kZXgpOwogICAg bmV3X2NodW5rID0gZmluZF9jaHVuayhuZXdfc3RyKTsKICAgIGlmICghbmV3X2NodW5rKSB7CiAg ICAgICAgcmV0dXJuOwogICAgfQogICAgaWYgKG9sZF9jaHVuaykgewogICAgICAgIG9sZF9jaHVu ay5zdHlsZS5vdXRsaW5lID0gIiI7CiAgICB9CiAgICBvbGRfY2h1bmsgPSBuZXdfY2h1bms7CiAg ICBvbGRfY2h1bmsuc3R5bGUub3V0bGluZSA9ICIxcHggc29saWQgcmVkIjsKICAgIHdpbmRvdy5s b2NhdGlvbi5yZXBsYWNlKCIjIiArIG5ld19zdHIpCiAgICB3aW5kb3cuc2Nyb2xsQnkoMCwtMTAw KTsKICAgIGNodW5rX2luZGV4ID0gaW5kZXg7Cn0KCmRvY3VtZW50Lm9ua2V5ZG93biA9IGZ1bmN0 aW9uKGUpIHsKICAgIHN3aXRjaCAoZS5rZXlDb2RlKSB7CiAgICBjYXNlIDc4OgogICAgICAgIGNo YW5nZV9jaHVuaygxKTsKICAgICAgICBicmVhazsKICAgIGNhc2UgODA6CiAgICAgICAgY2hhbmdl X2NodW5rKC0xKTsKICAgICAgICBicmVhazsKICAgIH0KfTsKICAgPC9zY3JpcHQ+IAo8L2hlYWQ+ IAo8Ym9keSBkYXRhLWdyLWMtcy1sb2FkZWQ9InRydWUiPiAKICA8dGFibGUgYm9yZGVyPSIwIiBj ZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiPiAKICA8dGJvZHk+PHRyIGlkPSJwYXJ0LTEi IGJnY29sb3I9Im9yYW5nZSI+PHRoPjwvdGg+PHRoPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRm Lm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1iZmQtdnhsYW4tMDkudHh0IiBzdHlsZT0iY29s b3I6IzAwODsgdGV4dC1kZWNvcmF0aW9uOm5vbmU7Ij4mbHQ7PC9hPiZuYnNwOzxhIGhyZWY9Imh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQiIHN0 eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQ8L2E+Jm5ic3A7PC90 aD48dGg+IDwvdGg+PHRoPiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1pZXRmLWJmZC12eGxhbi0xMC50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1p ZXRmLWJmZC12eGxhbi0xMC50eHQ8L2E+Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYu b3JnL3JmY2RpZmY/dXJsMT1kcmFmdC1pZXRmLWJmZC12eGxhbi0xMC50eHQiIHN0eWxlPSJjb2xv cjojMDA4OyB0ZXh0LWRlY29yYXRpb246bm9uZTsiPiZndDs8L2E+PC90aD48dGg+PC90aD48L3Ry PiAKICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij5CRkQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBT LiBQYWxsYWdhdHRpLCBFZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5CRkQgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBTLiBQYWxsYWdh dHRpLCBFZC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkludGVybmV0LURyYWZ0ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFZNd2FyZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFZNd2FyZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+SW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFMuIFBhcmFnaXJpPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+SW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFMuIFBhcmFnaXJpPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHIgaWQ9ImRpZmYwMDAxIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPkV4cGlyZXM6IEp1bmUgMTxzcGFuIGNs YXNzPSJkZWxldGUiPiwgMjAyMCA8L3NwYW4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgIElu ZGl2aWR1YWwgQ29udHJpYnV0b3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RXhw aXJlczogSnVuZSAxPHNwYW4gY2xhc3M9Imluc2VydCI+OSwgMjAyMDwvc3Bhbj4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgSW5kaXZpZHVhbCBDb250cmlidXRvcjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFYuIEdvdmluZGFuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFYuIEdvdmluZGFuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBNdWRp Z29uZGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBNdWRpZ29uZGE8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgRy4gTWlyc2t5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Ry4gTWlyc2t5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBaVEUgQ29ycC48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBaVEUgQ29ycC48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDIiPjx0ZD48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxz cGFuIGNsYXNzPSJkZWxldGUiPk5vdmVtYmVyIDI5PC9zcGFuPiwgMjAxOTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+RGVjZW1iZXIgMTc8L3NwYW4+ LCAyMDE5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgQkZEIGZvciBWWExBTjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQkZEIGZvciBWWExBTjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwMyI+PHRkPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgICAgICAgICAgICAgICAgICAgICBkcmFmdC1pZXRmLWJmZC12eGxhbi08c3BhbiBjbGFzcz0i ZGVsZXRlIj4wOTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAg ICAgICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1iZmQtdnhsYW4tPHNwYW4gY2xhc3M9Imluc2Vy dCI+MTA8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkFic3RyYWN0PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+QWJzdHJhY3Q8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHVzZSBvZiB0aGUg QmlkaXJlY3Rpb25hbCBGb3J3YXJkaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHVzZSBvZiB0aGUgQmlkaXJlY3Rpb25hbCBG b3J3YXJkaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEZXRlY3Rpb24gKEJGRCkg cHJvdG9jb2wgaW4gcG9pbnQtdG8tcG9pbnQgVmlydHVhbCBlWHRlbnNpYmxlIExvY2FsPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRGV0ZWN0aW9uIChCRkQpIHByb3RvY29sIGlu IHBvaW50LXRvLXBvaW50IFZpcnR1YWwgZVh0ZW5zaWJsZSBMb2NhbDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgQXJlYSBOZXR3b3JrIChWWExBTikgdHVubmVscyBmb3JtaW5nIHVwIGFu IG92ZXJsYXkgbmV0d29yay48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBBcmVh IE5ldHdvcmsgKFZYTEFOKSB0dW5uZWxzIGZvcm1pbmcgdXAgYW4gb3ZlcmxheSBuZXR3b3JrLjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5TdGF0dXMgb2YgVGhpcyBNZW1vPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+U3RhdHVzIG9mIFRoaXMgTWVtbzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIEludGVybmV0LURyYWZ0IGlzIHN1Ym1pdHRl ZCBpbiBmdWxsIGNvbmZvcm1hbmNlIHdpdGggdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCBpcyBzdWJtaXR0ZWQgaW4gZnVsbCBjb25mb3Jt YW5jZSB3aXRoIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHIgaWQ9InBhcnQtMiIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFsbD5za2lw cGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9y ZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTIiPjxlbT4gcGFnZSAxLCBsaW5lIDM4PHNwYW4gY2xh c3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxsPnNr aXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYub3Jn L3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtMiI+PGVtPiBwYWdlIDEsIGxpbmUgMzg8c3BhbiBj bGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQt RHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5naW5lZXJpbmc8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdv cmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZzwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgVGFzayBGb3JjZSAoSUVURikuICBOb3RlIHRoYXQgb3RoZXIgZ3Jv dXBzIG1heSBhbHNvIGRpc3RyaWJ1dGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBUYXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlz dHJpYnV0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgd29ya2luZyBkb2N1bWVudHMg YXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC08L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5l dC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJyZW50IEludGVybmV0LTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgRHJhZnRzIGlzIGF0IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZHJhZnRzL2N1cnJlbnQvLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIERyYWZ0 cyBpcyBhdCBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJyZW50Ly48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFm dCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVu dHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQgYnkg b3RoZXIgZG9jdW1lbnRzIGF0IGFueTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhlciBkb2N1 bWVudHMgYXQgYW55PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aW1lLiAgSXQgaXMg aW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5jZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRpbWUuICBJdCBpcyBpbmFwcHJvcHJpYXRlIHRv IHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29yayBpbiBw cm9ncmVzcy4iPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbWF0ZXJpYWwgb3Ig dG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3MuIjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDA0Ij48dGQ+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gSnVuZSAxLCAyMDIw LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBUaGlzIEludGVybmV0LURyYWZ0 IHdpbGwgZXhwaXJlIG9uIEp1bmUgMTxzcGFuIGNsYXNzPSJpbnNlcnQiPjk8L3NwYW4+LCAyMDIw LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Db3B5cmlnaHQgTm90aWNlPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+Q29weXJpZ2h0IE5vdGljZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBDb3B5cmlnaHQgKGMpIDIwMTkgSUVURiBUcnVzdCBhbmQg dGhlIHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBDb3B5cmlnaHQgKGMpIDIwMTkgSUVURiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRl bnRpZmllZCBhcyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRvY3VtZW50IGF1 dGhvcnMuICBBbGwgcmlnaHRzIHJlc2VydmVkLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGRvY3VtZW50IGF1dGhvcnMuICBBbGwgcmlnaHRzIHJlc2VydmVkLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3QgdG8gQkNQ IDc4IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2FsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgVGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYg VHJ1c3QncyBMZWdhbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgUHJvdmlzaW9ucyBS ZWxhdGluZyB0byBJRVRGIERvY3VtZW50czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVudHM8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIChodHRwczovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBp biBlZmZlY3Qgb24gdGhlIGRhdGUgb2Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAoaHR0cHM6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRo ZSBkYXRlIG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwdWJsaWNhdGlvbiBvZiB0 aGlzIGRvY3VtZW50LiAgUGxlYXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwdWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50LiAgUGxl YXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTMiIGNsYXNzPSJjaGFuZ2UiPjx0ZD48L3RkPjx0 aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSJodHRwczovL3d3 dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC0zIj48ZW0+IHBhZ2UgNSwgbGlu ZSAxMTxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGg+IDwvdGg+ PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8v d3d3Ni5pZXRmLm9yZy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTMiPjxlbT4gcGFnZSA1LCBs aW5lIDExPHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0ZD48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tKzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t KzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICBG aWd1cmUgMTogUmVmZXJlbmNlIFZYTEFOIERvbWFpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgICAgICAgICAgICAgICAgICAgIEZpZ3VyZSAxOiBSZWZlcmVuY2UgVlhMQU4gRG9t YWluPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEF0IHRoZSBzYW1lIHRpbWUs IGEgc2VydmljZSBsYXllciBCRkQgc2Vzc2lvbiBtYXkgYmUgdXNlZCBiZXR3ZWVuIHRoZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEF0IHRoZSBzYW1lIHRpbWUsIGEgc2Vydmlj ZSBsYXllciBCRkQgc2Vzc2lvbiBtYXkgYmUgdXNlZCBiZXR3ZWVuIHRoZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgdGVuYW50cyBvZiBWVEVQcyBJUDEgYW5kIElQMiB0byBwcm92aWRl IGVuZC10by1lbmQgZmF1bHQgbWFuYWdlbWVudC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICB0ZW5hbnRzIG9mIFZURVBzIElQMSBhbmQgSVAyIHRvIHByb3ZpZGUgZW5kLXRvLWVu ZCBmYXVsdCBtYW5hZ2VtZW50LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW4gc3Vj aCBjYXNlLCBmb3IgVlRFUHMgQkZEIENvbnRyb2wgcGFja2V0cyBvZiB0aGF0IHNlc3Npb24gYXJl PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW4gc3VjaCBjYXNlLCBmb3IgVlRF UHMgQkZEIENvbnRyb2wgcGFja2V0cyBvZiB0aGF0IHNlc3Npb24gYXJlPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBpbmRpc3Rpbmd1aXNoYWJsZSBmcm9tIGRhdGEgcGFja2V0cy48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpbmRpc3Rpbmd1aXNoYWJsZSBmcm9tIGRh dGEgcGFja2V0cy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQXMgcGVyIFNl Y3Rpb24gNCwgdGhlIGlubmVyIGRlc3RpbmF0aW9uIElQIGFkZHJlc3MgU0hPVUxEIGJlIHNldCB0 bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEFzIHBlciBTZWN0aW9uIDQsIHRo ZSBpbm5lciBkZXN0aW5hdGlvbiBJUCBhZGRyZXNzIFNIT1VMRCBiZSBzZXQgdG88L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDUiPjx0ZD48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgb25lIG9mIHRoZSBsb29wYmFjayBhZGRyZXNzZXMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ KDEyNy84PC9zcGFuPiByYW5nZSBmb3IgSVB2NCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5hbmQ8L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIG9uZSBvZiB0aGUgbG9vcGJh Y2sgYWRkcmVzc2VzIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmZyb20gMTI3Lzg8L3NwYW4+IHJhbmdl IGZvciBJUHY0IDxzcGFuIGNsYXNzPSJpbnNlcnQiPm9yIHRvIG9uZSBvZjwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgMDowOjA6MDow OkZGRkY6N0YwMDowLzEwNDwvc3Bhbj4gcmFuZ2UgZm9yIDxzcGFuIGNsYXNzPSJkZWxldGUiPklQ djYpLjwvc3Bhbj4gIFRoZXJlIGNvdWxkIGJlIGEgZmlyZXdhbGw8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgSVB2NC1tYXBwZWQgSVB2NCBs b29wYmFjayBhZGRyZXNzZXMgZnJvbSA6OmZmZmY6MTI3LjAuMC4wLzEwNDwvc3Bhbj4gcmFuZ2U8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgY29uZmlndXJlZCBvbiBWVEVQIHRvIGJs b2NrIGxvb3BiYWNrIGFkZHJlc3NlcyBpZiBzZXQgYXMgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPiAgIGZvciA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5JUHY2Ljwvc3Bhbj4gIFRo ZXJlIGNvdWxkIGJlIGEgZmlyZXdhbGwgY29uZmlndXJlZCBvbiBWVEVQIHRvIGJsb2NrPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGRlc3RpbmF0aW9uIElQIGluIHRoZSBpbm5lciBJ UCBoZWFkZXIuICBJdCBpcyBSRUNPTU1FTkRFRCB0byBhbGxvdzwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICBsb29wYmFjayBhZGRyZXNzZXMgaWYgc2V0IGFzIHRoZSBkZXN0aW5h dGlvbiBJUCBpbiB0aGUgaW5uZXIgSVA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg YWRkcmVzc2VzIGZyb20gdGhlIGxvb3BiYWNrIHJhbmdlIHRocm91Z2ggYSBmaXJld2FsbCBvbmx5 IGlmIGl0IGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGhlYWRlci4gIEl0 IGlzIFJFQ09NTUVOREVEIHRvIGFsbG93IGFkZHJlc3NlcyBmcm9tIHRoZSBsb29wYmFjayByYW5n ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB1c2VkIGFzIHRoZSBkZXN0aW5hdGlv biBJUCBhZGRyZXNzIGluIHRoZSBpbm5lciBJUCBoZWFkZXIsIGFuZCB0aGU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdGhyb3VnaCBhIGZpcmV3YWxsIG9ubHkgaWYgaXQgaXMg dXNlZCBhcyB0aGUgZGVzdGluYXRpb24gSVAgYWRkcmVzczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICBkZXN0aW5hdGlvbiBVRFAgcG9ydCBpcyBzZXQgdG8gMzc4NCBbUkZDNTg4MV0u PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGluIHRoZSBpbm5lciBJUCBoZWFk ZXIsIGFuZCB0aGUgZGVzdGluYXRpb24gVURQIHBvcnQgaXMgc2V0IHRvIDM3ODQ8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IFtSRkM1ODgxXS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NC4gIEJGRCBQYWNr ZXQgVHJhbnNtaXNzaW9uIG92ZXIgVlhMQU4gVHVubmVsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+NC4gIEJGRCBQYWNrZXQgVHJhbnNtaXNzaW9uIG92ZXIgVlhMQU4gVHVubmVsPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEJGRCBwYWNrZXQgTVVTVCBiZSBlbmNh cHN1bGF0ZWQgYW5kIHNlbnQgdG8gYSByZW1vdGUgVlRFUCBhczwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIEJGRCBwYWNrZXQgTVVTVCBiZSBlbmNhcHN1bGF0ZWQgYW5kIHNlbnQg dG8gYSByZW1vdGUgVlRFUCBhczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZXhwbGFp bmVkIGluIHRoaXMgc2VjdGlvbi4gIEltcGxlbWVudGF0aW9ucyBTSE9VTEQgZW5zdXJlIHRoYXQg dGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZXhwbGFpbmVkIGluIHRoaXMg c2VjdGlvbi4gIEltcGxlbWVudGF0aW9ucyBTSE9VTEQgZW5zdXJlIHRoYXQgdGhlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBCRkQgcGFja2V0cyBmb2xsb3cgdGhlIHNhbWUgbG9va3Vw IHBhdGggYXMgVlhMQU4gZGF0YSBwYWNrZXRzIHdpdGhpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIEJGRCBwYWNrZXRzIGZvbGxvdyB0aGUgc2FtZSBsb29rdXAgcGF0aCBhcyBW WExBTiBkYXRhIHBhY2tldHMgd2l0aGluPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0 aGUgc2VuZGVyIHN5c3RlbS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUg c2VuZGVyIHN5c3RlbS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQkZEIHBh Y2tldHMgYXJlIGVuY2Fwc3VsYXRlZCBpbiBWWExBTiBhcyBkZXNjcmliZWQgYmVsb3cuICBUaGUg VlhMQU48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBCRkQgcGFja2V0cyBhcmUg ZW5jYXBzdWxhdGVkIGluIFZYTEFOIGFzIGRlc2NyaWJlZCBiZWxvdy4gIFRoZSBWWExBTjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcGFja2V0IGZvcm1hdCBpcyBkZWZpbmVkIGluIFNl Y3Rpb24gNSBvZiBbUkZDNzM0OF0uICBUaGUgT3V0ZXIgSVAvVURQPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgcGFja2V0IGZvcm1hdCBpcyBkZWZpbmVkIGluIFNlY3Rpb24gNSBv ZiBbUkZDNzM0OF0uICBUaGUgT3V0ZXIgSVAvVURQPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0icGFydC00IiBjbGFzcz0iY2hhbmdlIj48dGQ+PC90 ZD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6 Ly93d3c2LmlldGYub3JnL3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtNCI+PGVtPiBwYWdlIDcs IGxpbmUgMTg8c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRoPiA8 L3RoPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSJodHRw czovL3d3dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC00Ij48ZW0+IHBhZ2Ug NywgbGluZSAxODxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICAgICBjb25maWd1cmVkLCBvciBpdCBNQVkgYmUgbGVhcm5lZCB2aWEgYSBjb250 cm9sIHBsYW5lIHByb3RvY29sLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAg ICAgIGNvbmZpZ3VyZWQsIG9yIGl0IE1BWSBiZSBsZWFybmVkIHZpYSBhIGNvbnRyb2wgcGxhbmUg cHJvdG9jb2wuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICBUaGUgZGV0YWls cyBvZiBob3cgdGhlIE1BQyBhZGRyZXNzIGlzIG9idGFpbmVkIGFyZSBvdXRzaWRlIHRoZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIFRoZSBkZXRhaWxzIG9mIGhvdyB0 aGUgTUFDIGFkZHJlc3MgaXMgb2J0YWluZWQgYXJlIG91dHNpZGUgdGhlPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICAgICBzY29wZSBvZiB0aGlzIGRvY3VtZW50LjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIHNjb3BlIG9mIHRoaXMgZG9jdW1lbnQuPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIFNvdXJjZSBNQUM6IE1BQyBh ZGRyZXNzIGFzc29jaWF0ZWQgd2l0aCB0aGUgb3JpZ2luYXRpbmcgVlRFUDwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIFNvdXJjZSBNQUM6IE1BQyBhZGRyZXNzIGFzc29j aWF0ZWQgd2l0aCB0aGUgb3JpZ2luYXRpbmcgVlRFUDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgICBJUCBoZWFkZXI6PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgSVAgaGVhZGVyOjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAg ICBEZXN0aW5hdGlvbiBJUDogSVAgYWRkcmVzcyBNVVNUIE5PVCBiZSBvZiBvbmUgb2YgdGVuYW50 J3MgSVA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBEZXN0aW5hdGlv biBJUDogSVAgYWRkcmVzcyBNVVNUIE5PVCBiZSBvZiBvbmUgb2YgdGVuYW50J3MgSVA8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIGFkZHJlc3Nlcy4gIFRoZSBJUCBhZGRyZXNz IFNIT1VMRCBiZSBzZWxlY3RlZCBmcm9tIHRoZSByYW5nZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgICAgICAgIGFkZHJlc3Nlcy4gIFRoZSBJUCBhZGRyZXNzIFNIT1VMRCBiZSBz ZWxlY3RlZCBmcm9tIHRoZSByYW5nZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyIGlkPSJkaWZmMDAwNiI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAxMjcvOCBmb3IgSVB2 NCwgZm9yIElQdjYgLSBmcm9tIHRoZSByYW5nZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICAgICAgICAxMjcvOCBmb3IgSVB2NCwgZm9yIElQdjYgLSBmcm9tIHRoZSByYW5nZSA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij46OmZmZmY6MTI3LjAuMC4wLzEwNC48L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPjA6MDow OjA6MDpGRkZGOjdGMDA6MC8xMDQuPC9zcGFuPiAgQWx0ZXJuYXRpdmVseSwgdGhlIGRlc3RpbmF0 aW9uIElQPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgIEFsdGVybmF0 aXZlbHksIHRoZSBkZXN0aW5hdGlvbiBJUCBhZGRyZXNzIE1BWSBiZSBzZXQgdG8gVlRFUCdzPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgIGFkZHJlc3MgTUFZIGJlIHNldCB0 byBWVEVQJ3MgSVAgYWRkcmVzcy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg ICAgICAgSVAgYWRkcmVzcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg ICAgU291cmNlIElQOiBJUCBhZGRyZXNzIG9mIHRoZSBvcmlnaW5hdGluZyBWVEVQLjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIFNvdXJjZSBJUDogSVAgYWRkcmVzcyBv ZiB0aGUgb3JpZ2luYXRpbmcgVlRFUC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICAgICAgVFRMIG9yIEhvcCBMaW1pdDogTVVTVCBiZSBzZXQgdG8gMSB0byBlbnN1cmUgdGhh dCB0aGUgQkZEPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgVFRMIG9y IEhvcCBMaW1pdDogTVVTVCBiZSBzZXQgdG8gMSB0byBlbnN1cmUgdGhhdCB0aGUgQkZEPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICBwYWNrZXQgaXMgbm90IHJvdXRlZCB3aXRo aW4gdGhlIExheWVyIDMgdW5kZXJsYXkgbmV0d29yay4gIFRoaXM8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgICAgICBwYWNrZXQgaXMgbm90IHJvdXRlZCB3aXRoaW4gdGhlIExh eWVyIDMgdW5kZXJsYXkgbmV0d29yay4gIFRoaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgICAgIGFkZHJlc3NlcyB0aGUgc2NlbmFyaW8gd2hlbiB0aGUgaW5uZXIgSVAgZGVzdGlu YXRpb24gYWRkcmVzcyBpczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAg IGFkZHJlc3NlcyB0aGUgc2NlbmFyaW8gd2hlbiB0aGUgaW5uZXIgSVAgZGVzdGluYXRpb24gYWRk cmVzcyBpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgb2YgVlhMQU4gZ2F0 ZXdheSBhbmQgdGhlcmUgaXMgYSByb3V0ZXIgaW4gdW5kZXJsYXkgd2hpY2g8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBvZiBWWExBTiBnYXRld2F5IGFuZCB0aGVyZSBp cyBhIHJvdXRlciBpbiB1bmRlcmxheSB3aGljaDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICAgICAgcmVtb3ZlcyB0aGUgVlhMQU4gaGVhZGVyLCB0aGVuIGl0IGlzIHBvc3NpYmxlIHRv IHJvdXRlIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIHJlbW92 ZXMgdGhlIFZYTEFOIGhlYWRlciwgdGhlbiBpdCBpcyBwb3NzaWJsZSB0byByb3V0ZSB0aGU8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIHBhY2tldCBhcyBWWExBTiAgZ2F0ZXdh eSBhZGRyZXNzIGlzIHJvdXRhYmxlIGFkZHJlc3MuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgICAgcGFja2V0IGFzIFZYTEFOICBnYXRld2F5IGFkZHJlc3MgaXMgcm91dGFi bGUgYWRkcmVzcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHIgaWQ9InBhcnQtNSIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFsbD5z a2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9y Zy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTUiPjxlbT4gcGFnZSA4LCBsaW5lIDUyPHNwYW4g Y2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxs PnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYu b3JnL3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtNSI+PGVtPiBwYWdlIDgsIGxpbmUgNTI8c3Bh biBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIGRv Y3VtZW50IHJlcXVpcmVzIHNldHRpbmcgdGhlIGlubmVyIElQIFRUTCB0byAxLCB3aGljaCBjb3Vs ZCBiZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBkb2N1bWVudCByZXF1 aXJlcyBzZXR0aW5nIHRoZSBpbm5lciBJUCBUVEwgdG8gMSwgd2hpY2ggY291bGQgYmU8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVzZWQgYXMgYSBERG9TIGF0dGFjayB2ZWN0b3IuICBU aHVzIHRoZSBpbXBsZW1lbnRhdGlvbiBNVVNUIGhhdmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICB1c2VkIGFzIGEgRERvUyBhdHRhY2sgdmVjdG9yLiAgVGh1cyB0aGUgaW1wbGVt ZW50YXRpb24gTVVTVCBoYXZlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aHJvdHRs aW5nIGluIHBsYWNlIHRvIGNvbnRyb2wgdGhlIHJhdGUgb2YgQkZEIENvbnRyb2wgcGFja2V0cyBz ZW50PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhyb3R0bGluZyBpbiBwbGFj ZSB0byBjb250cm9sIHRoZSByYXRlIG9mIEJGRCBDb250cm9sIHBhY2tldHMgc2VudDwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdG8gdGhlIGNvbnRyb2wgcGxhbmUuICBPbiB0aGUgb3Ro ZXIgaGFuZCwgb3Zlci1hZ2dyZXNzaXZlIHRocm90dGxpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICB0byB0aGUgY29udHJvbCBwbGFuZS4gIE9uIHRoZSBvdGhlciBoYW5kLCBv dmVyLWFnZ3Jlc3NpdmUgdGhyb3R0bGluZzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg b2YgQkZEIENvbnRyb2wgcGFja2V0cyBtYXkgYmVjb21lIHRoZSBjYXVzZSBvZiB0aGUgaW5hYmls aXR5IHRvIGZvcm08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBvZiBCRkQgQ29u dHJvbCBwYWNrZXRzIG1heSBiZWNvbWUgdGhlIGNhdXNlIG9mIHRoZSBpbmFiaWxpdHkgdG8gZm9y bTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYW5kIG1haW50YWluIEJGRCBzZXNzaW9u IGF0IHNjYWxlLiAgSGVuY2UsIHRocm90dGxpbmcgb2YgQkZEIENvbnRyb2w8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhbmQgbWFpbnRhaW4gQkZEIHNlc3Npb24gYXQgc2NhbGUu ICBIZW5jZSwgdGhyb3R0bGluZyBvZiBCRkQgQ29udHJvbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgcGFja2V0cyBTSE9VTEQgYmUgYWRqdXN0ZWQgdG8gcGVybWl0IEJGRCB0byB3b3Jr IGFjY29yZGluZyB0byBpdHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwYWNr ZXRzIFNIT1VMRCBiZSBhZGp1c3RlZCB0byBwZXJtaXQgQkZEIHRvIHdvcmsgYWNjb3JkaW5nIHRv IGl0czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcHJvY2VkdXJlcy48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwcm9jZWR1cmVzLjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50IHJlY29tbWVuZHMgdXNpbmcgYW4gYWRkcmVz cyBmcm9tIHRoZSBJbnRlcm5hbCBob3N0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgVGhpcyBkb2N1bWVudCByZWNvbW1lbmRzIHVzaW5nIGFuIGFkZHJlc3MgZnJvbSB0aGUgSW50 ZXJuYWwgaG9zdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlk PSJkaWZmMDAwNyI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBsb29wYmFjayBhZGRyZXNzZXMgPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+KDEyNy84PC9zcGFuPiByYW5nZSBmb3IgSVB2NCA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5hbmQ8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGxvb3BiYWNr IGFkZHJlc3NlcyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xMjcvODwvc3Bhbj4gcmFuZ2UgZm9yIElQ djQgPHNwYW4gY2xhc3M9Imluc2VydCI+b3IgYW4gSVA0LW1hcHBlZCBJUHY0PC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAwOjA6MDow OjA6RkZGRjo3RjAwOjAvMTA0PC9zcGFuPiByYW5nZSBmb3IgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ SVB2Nik8L3NwYW4+IGFzIHRoZSBkZXN0aW5hdGlvbiBJUDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBsb29wYmFjayBhZGRyZXNzIGZyb20g OjpmZmZmOjEyNy4wLjAuMC8xMDQ8L3NwYW4+IHJhbmdlIGZvciA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij5JUHY2PC9zcGFuPiBhcyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYWRk cmVzcyBpbiB0aGUgaW5uZXIgSVAgaGVhZGVyLiAgVXNpbmcgc3VjaCBhZGRyZXNzIHByZXZlbnRz IHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBkZXN0aW5hdGlvbiBJUCBh ZGRyZXNzIGluIHRoZSBpbm5lciBJUCBoZWFkZXIuICBVc2luZyBzdWNoIGFkZHJlc3M8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZm9yd2FyZGluZyBvZiB0aGUgZW5jYXBzdWxhdGVk IEJGRCBjb250cm9sIG1lc3NhZ2UgYnkgYSB0cmFuc2llbnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgcHJldmVudHMgdGhlIGZvcndhcmRpbmcgb2YgdGhlIGVuY2Fwc3VsYXRl ZCBCRkQgY29udHJvbCBtZXNzYWdlIGJ5IGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgbm9kZSBpbiBjYXNlIHRoZSBWWExBTiB0dW5uZWwgaXMgYnJva2VuIGFzIGFjY29yZGluZyB0 byBbUkZDMTgxMl06PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHRyYW5zaWVu dCBub2RlIGluIGNhc2UgdGhlIFZYTEFOIHR1bm5lbCBpcyBicm9rZW4gYXMgYWNjb3JkaW5nIHRv PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj4gICBbUkZDMTgxMl06PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgIEEgcm91dGVyIFNIT1VMRCBOT1QgZm9yd2FyZCwgZXhjZXB0IG92ZXIgYSBsb29wYmFjayBp bnRlcmZhY2UsIGFueTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIEEgcm91 dGVyIFNIT1VMRCBOT1QgZm9yd2FyZCwgZXhjZXB0IG92ZXIgYSBsb29wYmFjayBpbnRlcmZhY2Us IGFueTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgcGFja2V0IHRoYXQgaGFzIGEg ZGVzdGluYXRpb24gYWRkcmVzcyBvbiBuZXR3b3JrIDEyNy4gIEEgcm91dGVyPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgcGFja2V0IHRoYXQgaGFzIGEgZGVzdGluYXRpb24g YWRkcmVzcyBvbiBuZXR3b3JrIDEyNy4gIEEgcm91dGVyPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICBNQVkgaGF2ZSBhIHN3aXRjaCB0aGF0IGFsbG93cyB0aGUgbmV0d29yayBtYW5h Z2VyIHRvIGRpc2FibGUgdGhlc2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICBNQVkgaGF2ZSBhIHN3aXRjaCB0aGF0IGFsbG93cyB0aGUgbmV0d29yayBtYW5hZ2VyIHRvIGRp c2FibGUgdGhlc2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIGNoZWNrcy4gIElm IHN1Y2ggYSBzd2l0Y2ggaXMgcHJvdmlkZWQsIGl0IE1VU1QgZGVmYXVsdCB0bzwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIGNoZWNrcy4gIElmIHN1Y2ggYSBzd2l0Y2ggaXMg cHJvdmlkZWQsIGl0IE1VU1QgZGVmYXVsdCB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICAgcGVyZm9ybWluZyB0aGUgY2hlY2tzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgICAgIHBlcmZvcm1pbmcgdGhlIGNoZWNrcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgSWYgdGhlIGltcGxlbWVudGF0aW9uIHN1cHBvcnRzIGVzdGFibGlzaGluZyBt dWx0aXBsZSBCRkQgc2Vzc2lvbnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJ ZiB0aGUgaW1wbGVtZW50YXRpb24gc3VwcG9ydHMgZXN0YWJsaXNoaW5nIG11bHRpcGxlIEJGRCBz ZXNzaW9uczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYmV0d2VlbiB0aGUgc2FtZSBw YWlyIG9mIFZURVBzLCB0aGVyZSBTSE9VTEQgYmUgYSBtZWNoYW5pc20gdG88L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBiZXR3ZWVuIHRoZSBzYW1lIHBhaXIgb2YgVlRFUHMsIHRo ZXJlIFNIT1VMRCBiZSBhIG1lY2hhbmlzbSB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgY29udHJvbCB0aGUgbWF4aW11bSBudW1iZXIgb2Ygc3VjaCBzZXNzaW9ucyB0aGF0IGNhbiBi ZSBhY3RpdmUgYXQgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY29udHJv bCB0aGUgbWF4aW11bSBudW1iZXIgb2Ygc3VjaCBzZXNzaW9ucyB0aGF0IGNhbiBiZSBhY3RpdmUg YXQgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgoKICAgICA8dHI+PHRkPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZD48L3RkPjwvdHI+CiAgICAgPHRyIGlkPSJlbmQiIGJnY29sb3I9ImdyYXkiPjx0aCBjb2xz cGFuPSI1IiBhbGlnbj0iY2VudGVyIj4mbmJzcDtFbmQgb2YgY2hhbmdlcy4gNyBjaGFuZ2UgYmxv Y2tzLiZuYnNwOzwvdGg+PC90cj4KICAgICA8dHIgY2xhc3M9InN0YXRzIj48dGQ+PC90ZD48dGg+ PGk+MTkgbGluZXMgY2hhbmdlZCBvciBkZWxldGVkPC9pPjwvdGg+PHRoPjxpPiA8L2k+PC90aD48 dGg+PGk+MjEgbGluZXMgY2hhbmdlZCBvciBhZGRlZDwvaT48L3RoPjx0ZD48L3RkPjwvdHI+CiAg ICAgPHRyPjx0ZCBjb2xzcGFuPSI1IiBhbGlnbj0iY2VudGVyIiBjbGFzcz0ic21hbGwiPjxicj5U aGlzIGh0bWwgZGlmZiB3YXMgcHJvZHVjZWQgYnkgcmZjZGlmZiAxLjQ3LiBUaGUgbGF0ZXN0IHZl cnNpb24gaXMgYXZhaWxhYmxlIGZyb20gPGEgaHJlZj0iaHR0cDovL3d3dy50b29scy5pZXRmLm9y Zy90b29scy9yZmNkaWZmLyI+aHR0cDovL3Rvb2xzLmlldGYub3JnL3Rvb2xzL3JmY2RpZmYvPC9h PiA8L3RkPjwvdHI+CiAgIDwvdGJvZHk+PC90YWJsZT4KICAgCiAgIAo8L2JvZHk+PC9odG1sPg== --000000000000869c780599edf3e0-- From nobody Wed Dec 18 06:31:19 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C7051200FA; Tue, 17 Dec 2019 14:53:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.596 X-Spam-Level: X-Spam-Status: No, score=-0.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_COMMENT_SAVED_URL=1.391, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PMfIzCWA8Kzd; Tue, 17 Dec 2019 14:53:51 -0800 (PST) Received: from mail-lf1-x12d.google.com (mail-lf1-x12d.google.com [IPv6:2a00:1450:4864:20::12d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7391A1208D7; Tue, 17 Dec 2019 14:53:50 -0800 (PST) Received: by mail-lf1-x12d.google.com with SMTP id r14so213541lfm.5; Tue, 17 Dec 2019 14:53:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=DxbMc58ettIKA29z9bzUfUJKkxZA2W5a08VP3dj3fpU=; b=MJbEuq+0aqdQePbwa6DSyxPTFo4qPYSPstzqGNo7tCvPe/y4yerHksAYedwhnqns6W W40AurUmX589IXzdjW6fuM58v54ohV7iKqnx0BTaBpoqp1OhZygS3zSnSZbhr1K+SnvF QNMITYnsZ9q04lj0XlAT+NQ/egDuXTqa29jCbvLxE4wSb17OrTTUboqgCjFI3e+RDzmF VZ31muXkjWt3/xSbaCanzQdJb5ImRolUwA+g6YmUM5qzztU6emlDqYG1BDmKnNa9PIg8 j3UGsvOD1ysAW5aMHcMmLoQ0av4AuHIM/l2T6vw55OCRZ9u1ipPmHItZjNWEMDIcxtn0 yuEA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=DxbMc58ettIKA29z9bzUfUJKkxZA2W5a08VP3dj3fpU=; b=jMO6W55KZG/q7VjRhHMxLUcW7CNrmIETloVGIYvN8fFvDe004iF/8VotfeK8qG0GNK chxOzvvsh+5EFwJ+nkafOJMxAoUhaGY5ZiuY+n7nZy4713DXpf/vbduBEIUpiaCpAPZj Pkcb4LqWOZOjITC9CsSjOdgJ8SHMIKKJ8JMYYFu9/+bSXd6If7pKRGy84jW8jk+rdt6s 3f1FS+iQ/+NKqAyvpBdZyMbzTo2DrdPik6KZgaLcjEnlVlG70dmH6UFu7kytLRKP5cNu DKal1WkIheMZJB9bFMKWsmH1O1K0CG2xcoXTjQY0q+m5gJXz5U4cBO0t+NpH6BI0FyUQ 0jEQ== X-Gm-Message-State: APjAAAXbjdxQA88VsQHNO8oBDv8XfP60aSVAEJBbtUmPDhlgHiulpaHN dAp+hcCiMRfPloSSldzVRseSuZfgyMzpPOWadM9OAq8j X-Google-Smtp-Source: APXvYqzBKC+hieQ497D1JqY5UaJkIOWi5EBMBSDbYTHh48lbiD84kvILoX8Pp3ezmUA1PGm1+l5dVDzUCxpNuupICUE= X-Received: by 2002:a19:ca59:: with SMTP id h25mr4211275lfj.27.1576623228593; Tue, 17 Dec 2019 14:53:48 -0800 (PST) MIME-Version: 1.0 References: <157656992287.26356.12991667526690255621@ietfa.amsl.com> In-Reply-To: <157656992287.26356.12991667526690255621@ietfa.amsl.com> From: Greg Mirsky Date: Tue, 17 Dec 2019 14:53:37 -0800 Message-ID: Subject: Re: Opsdir telechat review of draft-ietf-bfd-vxlan-09 To: =?UTF-8?B?SsO8cmdlbiBTY2jDtm53w6RsZGVy?= Cc: ops-dir@ietf.org, last-call@ietf.org, rtg-bfd WG , draft-ietf-bfd-vxlan.all@ietf.org Content-Type: multipart/mixed; boundary="0000000000007c4dc30599ee333b" Archived-At: X-Mailman-Approved-At: Wed, 18 Dec 2019 06:31:12 -0800 X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Dec 2019 22:53:55 -0000 --0000000000007c4dc30599ee333b Content-Type: multipart/alternative; boundary="0000000000007c4d990599ee3339" --0000000000007c4d990599ee3339 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Jurgen, thank you for the review, questions, and suggestions to improve the document. I've applied the changes to the working version of the draft. The attached diff highlights the updates (including those suggested by Adam). Please find my notes in-line tagged GIM>>, Best regards, Greg On Tue, Dec 17, 2019 at 12:05 AM J=C3=BCrgen Sch=C3=B6nw=C3=A4lder via Data= tracker < noreply@ietf.org> wrote: > Reviewer: J=C3=BCrgen Sch=C3=B6nw=C3=A4lder > Review result: Has Nits > > I have only a limited understanding of VXLAN and BFD technology. > Hence, some of my question may look odd to the insiders. > > - Never heard of this IPv6 loopback address space before. Is it OK to > allocate and use it this way? > GIM>> As Adam had explained, the correct wording for these addresses (and that is what used in the working version) is "IPv4-mapped IPv4 loopback addresses". Using an address from this range as the destination IP address of an OAM packet encapsulated in a tunnel was, to the best of my knowledge, first defined in RFC 4379 (now RFC 8029). Then RFC 5884 applied it to BFD over MPLS LSP. > > - Why is echo BFD outside the scope of this document? Can I just turn > on echo mode or will extra specifications be needed? > GIM>> I believe that the support of the Echo mode of BFD has not been requested by the BFD WG. I think that some amount of work to define the use of Echo BFD over VXLAN may be needed. > > - Nits: > > OLD > > Ability to monitor path continuity > > NEW > > The ability to monitor path continuity > > OLD > > BFD packet MUST be encapsulated > > NEW > > BFD packets MUST be encapsulated > > --0000000000007c4d990599ee3339 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Jurgen,
thank you for the review, = questions, and suggestions to improve the document. I've applied the ch= anges to the working version of the draft. The attached diff highlights the= updates (including those suggested by Adam). Please find my notes in-line = tagged GIM>>,

Best regards,
Greg

On Tue, Dec 17, 2019 at 12:05 AM J=C3=BCrgen Sch=C3=B6nw=C3=A4lder via = Datatracker <noreply@ietf.org>= ; wrote:
Reviewe= r: J=C3=BCrgen Sch=C3=B6nw=C3=A4lder
Review result: Has Nits

I have only a limited understanding of VXLAN and BFD technology.
Hence, some of my question may look odd to the insiders.

- Never heard of this IPv6 loopback address space before. Is it OK to
=C2=A0 allocate and use it this way?
GIM>> As Ad= am had explained, the correct wording for these addresses (and that is what= used in the working version) is "IPv4-mapped IPv4 loopback addresses&= quot;. Using an address from this range as the destination IP address of an= OAM packet encapsulated in a tunnel was, to the best of my knowledge, firs= t defined in RFC 4379 (now RFC 8029). Then RFC 5884 applied it to BFD over = MPLS LSP.=C2=A0

- Why is echo BFD outside the scope of this document? Can I just turn
=C2=A0 on echo mode or will extra specifications be needed?
GIM>> I believe that the support of the Echo mode of BFD has no= t been requested by the BFD WG. I think that some amount of work to define = the use of Echo BFD over VXLAN may be needed.

- Nits:

=C2=A0 OLD

=C2=A0 =C2=A0 Ability to monitor path continuity

=C2=A0 NEW

=C2=A0 =C2=A0 The ability to monitor path continuity

=C2=A0 OLD

=C2=A0 =C2=A0 BFD packet MUST be encapsulated

=C2=A0 NEW

=C2=A0 =C2=A0 BFD packets MUST be encapsulated

--0000000000007c4d990599ee3339-- --0000000000007c4dc30599ee333b Content-Type: text/html; charset="UTF-8"; name="Diff_ draft-ietf-bfd-vxlan-09.txt - draft-ietf-bfd-vxlan-10.txt.html" Content-Disposition: attachment; filename="Diff_ draft-ietf-bfd-vxlan-09.txt - draft-ietf-bfd-vxlan-10.txt.html" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_k4agr5iq0 PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h bC5kdGQiPgo8IS0tIHNhdmVkIGZyb20gdXJsPSgwMDQyKWh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9y ZmNkaWZmL3JmY2RpZmYucHlodCAtLT4KPGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5 OTkveGh0bWwiIGNsYXNzPSJncl9fd3d3Nl9pZXRmX29yZyI+PGhlYWQ+PG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgiPiAKICAg CiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1TdHlsZS1UeXBlIiBjb250ZW50PSJ0ZXh0L2Nz cyI+IAogIDx0aXRsZT5EaWZmOiBkcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQgLSBkcmFmdC1p ZXRmLWJmZC12eGxhbi0xMC50eHQ8L3RpdGxlPiAKICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAK ICAgIGJvZHkgICAgeyBtYXJnaW46IDAuNGV4OyBtYXJnaW4tcmlnaHQ6IGF1dG87IH0gCiAgICB0 ciAgICAgIHsgfSAKICAgIHRkICAgICAgeyB3aGl0ZS1zcGFjZTogcHJlOyBmb250LWZhbWlseTog bW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBmb250LXNpemU6IDAuODZlbTt9IAogICAg dGggICAgICB7IGZvbnQtc2l6ZTogMC44NmVtOyB9IAogICAgLnNtYWxsICB7IGZvbnQtc2l6ZTog MC42ZW07IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9udC1mYW1pbHk6IFZlcmRhbmEsIEhlbHZldGlj YSwgc2Fucy1zZXJpZjsgfSAKICAgIC5sZWZ0ICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9 IAogICAgLnJpZ2h0ICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IH0gCiAgICAuZGlmZiAgIHsg YmFja2dyb3VuZC1jb2xvcjogI0NDRjsgfSAKICAgIC5sYmxvY2sgeyBiYWNrZ3JvdW5kLWNvbG9y OiAjQkZCOyB9IAogICAgLnJibG9jayB7IGJhY2tncm91bmQtY29sb3I6ICNGRjg7IH0gCiAgICAu aW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhGRjsgfSAKICAgIC5kZWxldGUgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjQUNGOyB9IAogICAgLnZvaWQgICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkI7 IH0gCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAKICAgIC5saW5lYnIg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAogICAgLmxpbmVubyB7IGNvbG9yOiByZWQ7IGJh Y2tncm91bmQtY29sb3I6ICNGRkY7IGZvbnQtc2l6ZTogMC43ZW07IHRleHQtYWxpZ246IHJpZ2h0 OyBwYWRkaW5nOiAwIDJweDsgfSAKICAgIC5lbGlwc2lzeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFB OyB9IAogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjREREOyB9IAogICAgLnJp Z2h0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAKICAgIC5sYmxvY2sgLmNvbnQg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IAogICAgLnJibG9jayAuY29udCB7IGJhY2tncm91 bmQtY29sb3I6ICNERDY7IH0gCiAgICAuaW5zZXJ0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjog IzBERDsgfSAKICAgIC5kZWxldGUgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOEFEOyB9IAog ICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0aCB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7 IHBhZGRpbmc6IDJweCAwOyB9IAogICAgc3Bhbi5oaWRlIHsgZGlzcGxheTogbm9uZTsgY29sb3I6 ICNhYWE7fSAgICBhOmhvdmVyIHNwYW4geyBkaXNwbGF5OiBpbmxpbmU7IH0gICAgdHIuY2hhbmdl IHsgYmFja2dyb3VuZC1jb2xvcjogZ3JheTsgfSAKICAgIHRyLmNoYW5nZSBhIHsgdGV4dC1kZWNv cmF0aW9uOiBub25lOyBjb2xvcjogYmxhY2sgfSAKICA8L3N0eWxlPiAKICAgICA8c2NyaXB0Pgp2 YXIgY2h1bmtfaW5kZXggPSAwOwp2YXIgb2xkX2NodW5rID0gbnVsbDsKCmZ1bmN0aW9uIGZvcm1h dF9jaHVuayhpbmRleCkgewogICAgdmFyIHByZWZpeCA9ICJkaWZmIjsKICAgIHZhciBzdHIgPSBp bmRleC50b1N0cmluZygpOwogICAgZm9yICh4PTA7IHg8KDQtc3RyLmxlbmd0aCk7ICsreCkgewog ICAgICAgIHByZWZpeCs9JzAnOwogICAgfQogICAgcmV0dXJuIHByZWZpeCArIHN0cjsKfQoKZnVu Y3Rpb24gZmluZF9jaHVuayhuKXsKICAgIHJldHVybiBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCd0 cltpZCQ9IicgKyBuICsgJyJdJyk7Cn0KCmZ1bmN0aW9uIGNoYW5nZV9jaHVuayhvZmZzZXQpIHsK ICAgIHZhciBpbmRleCA9IGNodW5rX2luZGV4ICsgb2Zmc2V0OwogICAgdmFyIG5ld19zdHI7CiAg ICB2YXIgbmV3X2NodW5rOwoKICAgIG5ld19zdHIgPSBmb3JtYXRfY2h1bmsoaW5kZXgpOwogICAg bmV3X2NodW5rID0gZmluZF9jaHVuayhuZXdfc3RyKTsKICAgIGlmICghbmV3X2NodW5rKSB7CiAg ICAgICAgcmV0dXJuOwogICAgfQogICAgaWYgKG9sZF9jaHVuaykgewogICAgICAgIG9sZF9jaHVu ay5zdHlsZS5vdXRsaW5lID0gIiI7CiAgICB9CiAgICBvbGRfY2h1bmsgPSBuZXdfY2h1bms7CiAg ICBvbGRfY2h1bmsuc3R5bGUub3V0bGluZSA9ICIxcHggc29saWQgcmVkIjsKICAgIHdpbmRvdy5s b2NhdGlvbi5yZXBsYWNlKCIjIiArIG5ld19zdHIpCiAgICB3aW5kb3cuc2Nyb2xsQnkoMCwtMTAw KTsKICAgIGNodW5rX2luZGV4ID0gaW5kZXg7Cn0KCmRvY3VtZW50Lm9ua2V5ZG93biA9IGZ1bmN0 aW9uKGUpIHsKICAgIHN3aXRjaCAoZS5rZXlDb2RlKSB7CiAgICBjYXNlIDc4OgogICAgICAgIGNo YW5nZV9jaHVuaygxKTsKICAgICAgICBicmVhazsKICAgIGNhc2UgODA6CiAgICAgICAgY2hhbmdl X2NodW5rKC0xKTsKICAgICAgICBicmVhazsKICAgIH0KfTsKICAgPC9zY3JpcHQ+IAo8L2hlYWQ+ IAo8Ym9keSBkYXRhLWdyLWMtcy1sb2FkZWQ9InRydWUiPiAKICA8dGFibGUgYm9yZGVyPSIwIiBj ZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiPiAKICA8dGJvZHk+PHRyIGlkPSJwYXJ0LTEi IGJnY29sb3I9Im9yYW5nZSI+PHRoPjwvdGg+PHRoPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRm Lm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1iZmQtdnhsYW4tMDkudHh0IiBzdHlsZT0iY29s b3I6IzAwODsgdGV4dC1kZWNvcmF0aW9uOm5vbmU7Ij4mbHQ7PC9hPiZuYnNwOzxhIGhyZWY9Imh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQiIHN0 eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQ8L2E+Jm5ic3A7PC90 aD48dGg+IDwvdGg+PHRoPiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1pZXRmLWJmZC12eGxhbi0xMC50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1p ZXRmLWJmZC12eGxhbi0xMC50eHQ8L2E+Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYu b3JnL3JmY2RpZmY/dXJsMT1kcmFmdC1pZXRmLWJmZC12eGxhbi0xMC50eHQiIHN0eWxlPSJjb2xv cjojMDA4OyB0ZXh0LWRlY29yYXRpb246bm9uZTsiPiZndDs8L2E+PC90aD48dGg+PC90aD48L3Ry PiAKICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij5CRkQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBT LiBQYWxsYWdhdHRpLCBFZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5CRkQgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBTLiBQYWxsYWdh dHRpLCBFZC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkludGVybmV0LURyYWZ0ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFZNd2FyZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFZNd2FyZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+SW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFMuIFBhcmFnaXJpPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+SW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFMuIFBhcmFnaXJpPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHIgaWQ9ImRpZmYwMDAxIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPkV4cGlyZXM6IEp1bmUgMTxzcGFuIGNs YXNzPSJkZWxldGUiPiwgMjAyMCA8L3NwYW4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgIElu ZGl2aWR1YWwgQ29udHJpYnV0b3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RXhw aXJlczogSnVuZSAxPHNwYW4gY2xhc3M9Imluc2VydCI+OSwgMjAyMDwvc3Bhbj4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgSW5kaXZpZHVhbCBDb250cmlidXRvcjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFYuIEdvdmluZGFuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFYuIEdvdmluZGFuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBNdWRp Z29uZGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBNdWRpZ29uZGE8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgRy4gTWlyc2t5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Ry4gTWlyc2t5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBaVEUgQ29ycC48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBaVEUgQ29ycC48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDIiPjx0ZD48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxz cGFuIGNsYXNzPSJkZWxldGUiPk5vdmVtYmVyIDI5PC9zcGFuPiwgMjAxOTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+RGVjZW1iZXIgMTc8L3NwYW4+ LCAyMDE5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgQkZEIGZvciBWWExBTjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQkZEIGZvciBWWExBTjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwMyI+PHRkPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgICAgICAgICAgICAgICAgICAgICBkcmFmdC1pZXRmLWJmZC12eGxhbi08c3BhbiBjbGFzcz0i ZGVsZXRlIj4wOTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAg ICAgICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1iZmQtdnhsYW4tPHNwYW4gY2xhc3M9Imluc2Vy dCI+MTA8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkFic3RyYWN0PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+QWJzdHJhY3Q8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHVzZSBvZiB0aGUg QmlkaXJlY3Rpb25hbCBGb3J3YXJkaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHVzZSBvZiB0aGUgQmlkaXJlY3Rpb25hbCBG b3J3YXJkaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEZXRlY3Rpb24gKEJGRCkg cHJvdG9jb2wgaW4gcG9pbnQtdG8tcG9pbnQgVmlydHVhbCBlWHRlbnNpYmxlIExvY2FsPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRGV0ZWN0aW9uIChCRkQpIHByb3RvY29sIGlu IHBvaW50LXRvLXBvaW50IFZpcnR1YWwgZVh0ZW5zaWJsZSBMb2NhbDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgQXJlYSBOZXR3b3JrIChWWExBTikgdHVubmVscyBmb3JtaW5nIHVwIGFu IG92ZXJsYXkgbmV0d29yay48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBBcmVh IE5ldHdvcmsgKFZYTEFOKSB0dW5uZWxzIGZvcm1pbmcgdXAgYW4gb3ZlcmxheSBuZXR3b3JrLjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5TdGF0dXMgb2YgVGhpcyBNZW1vPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+U3RhdHVzIG9mIFRoaXMgTWVtbzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIEludGVybmV0LURyYWZ0IGlzIHN1Ym1pdHRl ZCBpbiBmdWxsIGNvbmZvcm1hbmNlIHdpdGggdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCBpcyBzdWJtaXR0ZWQgaW4gZnVsbCBjb25mb3Jt YW5jZSB3aXRoIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHIgaWQ9InBhcnQtMiIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFsbD5za2lw cGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9y ZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTIiPjxlbT4gcGFnZSAxLCBsaW5lIDM4PHNwYW4gY2xh c3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxsPnNr aXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYub3Jn L3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtMiI+PGVtPiBwYWdlIDEsIGxpbmUgMzg8c3BhbiBj bGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQt RHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5naW5lZXJpbmc8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdv cmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZzwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgVGFzayBGb3JjZSAoSUVURikuICBOb3RlIHRoYXQgb3RoZXIgZ3Jv dXBzIG1heSBhbHNvIGRpc3RyaWJ1dGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBUYXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlz dHJpYnV0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgd29ya2luZyBkb2N1bWVudHMg YXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC08L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5l dC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJyZW50IEludGVybmV0LTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgRHJhZnRzIGlzIGF0IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZHJhZnRzL2N1cnJlbnQvLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIERyYWZ0 cyBpcyBhdCBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJyZW50Ly48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFm dCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVu dHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQgYnkg b3RoZXIgZG9jdW1lbnRzIGF0IGFueTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhlciBkb2N1 bWVudHMgYXQgYW55PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aW1lLiAgSXQgaXMg aW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5jZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRpbWUuICBJdCBpcyBpbmFwcHJvcHJpYXRlIHRv IHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29yayBpbiBw cm9ncmVzcy4iPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbWF0ZXJpYWwgb3Ig dG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3MuIjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDA0Ij48dGQ+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gSnVuZSAxLCAyMDIw LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBUaGlzIEludGVybmV0LURyYWZ0 IHdpbGwgZXhwaXJlIG9uIEp1bmUgMTxzcGFuIGNsYXNzPSJpbnNlcnQiPjk8L3NwYW4+LCAyMDIw LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Db3B5cmlnaHQgTm90aWNlPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+Q29weXJpZ2h0IE5vdGljZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBDb3B5cmlnaHQgKGMpIDIwMTkgSUVURiBUcnVzdCBhbmQg dGhlIHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBDb3B5cmlnaHQgKGMpIDIwMTkgSUVURiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRl bnRpZmllZCBhcyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRvY3VtZW50IGF1 dGhvcnMuICBBbGwgcmlnaHRzIHJlc2VydmVkLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGRvY3VtZW50IGF1dGhvcnMuICBBbGwgcmlnaHRzIHJlc2VydmVkLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3QgdG8gQkNQ IDc4IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2FsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgVGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYg VHJ1c3QncyBMZWdhbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgUHJvdmlzaW9ucyBS ZWxhdGluZyB0byBJRVRGIERvY3VtZW50czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVudHM8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIChodHRwczovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBp biBlZmZlY3Qgb24gdGhlIGRhdGUgb2Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAoaHR0cHM6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRo ZSBkYXRlIG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwdWJsaWNhdGlvbiBvZiB0 aGlzIGRvY3VtZW50LiAgUGxlYXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwdWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50LiAgUGxl YXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTMiIGNsYXNzPSJjaGFuZ2UiPjx0ZD48L3RkPjx0 aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSJodHRwczovL3d3 dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC0zIj48ZW0+IHBhZ2UgMywgbGlu ZSA4PHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48 dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93 d3c2LmlldGYub3JnL3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtMyI+PGVtPiBwYWdlIDMsIGxp bmUgODxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBoeXBlcnZpc29ycy4gIEhvd2V2ZXIsIHRoZSBjb25jZXB0cyBhcmUgZXF1YWxseSBhcHBsaWNh YmxlIHRvIG5vbi08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBoeXBlcnZpc29y cy4gIEhvd2V2ZXIsIHRoZSBjb25jZXB0cyBhcmUgZXF1YWxseSBhcHBsaWNhYmxlIHRvIG5vbi08 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHZpcnR1YWxpemVkIGhvc3RzIGF0dGFjaGVk IHRvIFZURVBzIGluIHN3aXRjaGVzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IHZpcnR1YWxpemVkIGhvc3RzIGF0dGFjaGVkIHRvIFZURVBzIGluIHN3aXRjaGVzLjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJbiB0aGUgYWJzZW5jZSBvZiBhIHJvdXRlciBp biB0aGUgb3ZlcmxheSwgYSBWTSBjYW4gY29tbXVuaWNhdGUgd2l0aDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIEluIHRoZSBhYnNlbmNlIG9mIGEgcm91dGVyIGluIHRoZSBvdmVy bGF5LCBhIFZNIGNhbiBjb21tdW5pY2F0ZSB3aXRoPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBhbm90aGVyIFZNIG9ubHkgaWYgdGhleSBhcmUgb24gdGhlIHNhbWUgVlhMQU4gc2VnbWVu dC4gIFZNcyBhcmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhbm90aGVyIFZN IG9ubHkgaWYgdGhleSBhcmUgb24gdGhlIHNhbWUgVlhMQU4gc2VnbWVudC4gIFZNcyBhcmU8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVuYXdhcmUgb2YgVlhMQU4gdHVubmVscyBhcyBh IFZYTEFOIHR1bm5lbCBpcyB0ZXJtaW5hdGVkIG9uIGEgVlRFUC48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICB1bmF3YXJlIG9mIFZYTEFOIHR1bm5lbHMgYXMgYSBWWExBTiB0dW5u ZWwgaXMgdGVybWluYXRlZCBvbiBhIFZURVAuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIFZURVBzIGFyZSByZXNwb25zaWJsZSBmb3IgZW5jYXBzdWxhdGluZyBhbmQgZGVjYXBz dWxhdGluZyBmcmFtZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBWVEVQcyBh cmUgcmVzcG9uc2libGUgZm9yIGVuY2Fwc3VsYXRpbmcgYW5kIGRlY2Fwc3VsYXRpbmcgZnJhbWVz PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBleGNoYW5nZWQgYW1vbmcgVk1zLjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGV4Y2hhbmdlZCBhbW9uZyBWTXMuPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDUi Pjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+QTwvc3Bhbj5iaWxpdHkgdG8gbW9u aXRvciBwYXRoIGNvbnRpbnVpdHksIGkuZS4sIHBlcmZvcm0gcHJvYWN0aXZlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlRoZSBhPC9zcGFu PmJpbGl0eSB0byBtb25pdG9yIHBhdGggY29udGludWl0eSwgaS5lLiwgcGVyZm9ybSBwcm9hY3Rp dmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNvbnRpbnVpdHkgY2hlY2sgKENDKSBm b3IgcG9pbnQtdG8tcG9pbnQgKHAycCkgVlhMQU4gdHVubmVscywgaXM8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBjb250aW51aXR5IGNoZWNrIChDQykgZm9yIHBvaW50LXRvLXBv aW50IChwMnApIFZYTEFOIHR1bm5lbHMsIGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBpbXBvcnRhbnQuICBUaGUgYXN5bmNocm9ub3VzIG1vZGUgb2YgQkZELCBhcyBkZWZpbmVkIGlu IFtSRkM1ODgwXSwgaXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpbXBvcnRh bnQuICBUaGUgYXN5bmNocm9ub3VzIG1vZGUgb2YgQkZELCBhcyBkZWZpbmVkIGluIFtSRkM1ODgw XSwgaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVzZWQgdG8gbW9uaXRvciBhIHAy cCBWWExBTiB0dW5uZWwuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXNlZCB0 byBtb25pdG9yIGEgcDJwIFZYTEFOIHR1bm5lbC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgSW4gdGhlIGNhc2Ugd2hlcmUgYSBNdWx0aWNhc3QgU2VydmljZSBOb2RlIChNU04p IChhcyBkZXNjcmliZWQgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbiB0 aGUgY2FzZSB3aGVyZSBhIE11bHRpY2FzdCBTZXJ2aWNlIE5vZGUgKE1TTikgKGFzIGRlc2NyaWJl ZCBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgU2VjdGlvbiAzLjMgb2YgW1JGQzgy OTNdKSByZXNpZGVzIGJlaGluZCBhIE5ldHdvcmsgVmlydHVhbGl6YXRpb248L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBTZWN0aW9uIDMuMyBvZiBbUkZDODI5M10pIHJlc2lkZXMg YmVoaW5kIGEgTmV0d29yayBWaXJ0dWFsaXphdGlvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgRW5kcG9pbnQgKE5WRSksIHRoZSBtZWNoYW5pc21zIGRlc2NyaWJlZCBpbiB0aGlzIGRv Y3VtZW50IGFwcGx5IGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEVuZHBv aW50IChOVkUpLCB0aGUgbWVjaGFuaXNtcyBkZXNjcmliZWQgaW4gdGhpcyBkb2N1bWVudCBhcHBs eSBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNhbiwgdGhlcmVmb3JlLCBiZSB1 c2VkIHRvIHRlc3QgdGhlIGNvbm5lY3Rpdml0eSBmcm9tIHRoZSBzb3VyY2UgTlZFPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY2FuLCB0aGVyZWZvcmUsIGJlIHVzZWQgdG8gdGVz dCB0aGUgY29ubmVjdGl2aXR5IGZyb20gdGhlIHNvdXJjZSBOVkU8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIHRvIHRoZSBNU04uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgdG8gdGhlIE1TTi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHIgaWQ9InBhcnQtNCIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFs bD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRm Lm9yZy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTQiPjxlbT4gcGFnZSA1LCBsaW5lIDExPHNw YW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNt YWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2Lmll dGYub3JnL3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtNCI+PGVtPiBwYWdlIDUsIGxpbmUgMTE8 c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgIEZpZ3VyZSAx OiBSZWZlcmVuY2UgVlhMQU4gRG9tYWluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgICAgICAgICAgICAgICAgRmlndXJlIDE6IFJlZmVyZW5jZSBWWExBTiBEb21haW48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQXQgdGhlIHNhbWUgdGltZSwgYSBzZXJ2 aWNlIGxheWVyIEJGRCBzZXNzaW9uIG1heSBiZSB1c2VkIGJldHdlZW4gdGhlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQXQgdGhlIHNhbWUgdGltZSwgYSBzZXJ2aWNlIGxheWVy IEJGRCBzZXNzaW9uIG1heSBiZSB1c2VkIGJldHdlZW4gdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICB0ZW5hbnRzIG9mIFZURVBzIElQMSBhbmQgSVAyIHRvIHByb3ZpZGUgZW5kLXRv LWVuZCBmYXVsdCBtYW5hZ2VtZW50LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IHRlbmFudHMgb2YgVlRFUHMgSVAxIGFuZCBJUDIgdG8gcHJvdmlkZSBlbmQtdG8tZW5kIGZhdWx0 IG1hbmFnZW1lbnQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJbiBzdWNoIGNhc2Us IGZvciBWVEVQcyBCRkQgQ29udHJvbCBwYWNrZXRzIG9mIHRoYXQgc2Vzc2lvbiBhcmU8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbiBzdWNoIGNhc2UsIGZvciBWVEVQcyBCRkQg Q29udHJvbCBwYWNrZXRzIG9mIHRoYXQgc2Vzc2lvbiBhcmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGluZGlzdGluZ3Vpc2hhYmxlIGZyb20gZGF0YSBwYWNrZXRzLjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGluZGlzdGluZ3Vpc2hhYmxlIGZyb20gZGF0YSBwYWNr ZXRzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBBcyBwZXIgU2VjdGlvbiA0 LCB0aGUgaW5uZXIgZGVzdGluYXRpb24gSVAgYWRkcmVzcyBTSE9VTEQgYmUgc2V0IHRvPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQXMgcGVyIFNlY3Rpb24gNCwgdGhlIGlubmVy IGRlc3RpbmF0aW9uIElQIGFkZHJlc3MgU0hPVUxEIGJlIHNldCB0bzwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwNiI+PHRkPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBv bmUgb2YgdGhlIGxvb3BiYWNrIGFkZHJlc3NlcyA8c3BhbiBjbGFzcz0iZGVsZXRlIj4oMTI3Lzg8 L3NwYW4+IHJhbmdlIGZvciBJUHY0IDxzcGFuIGNsYXNzPSJkZWxldGUiPmFuZDwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgb25lIG9mIHRoZSBsb29wYmFjayBhZGRy ZXNzZXMgPHNwYW4gY2xhc3M9Imluc2VydCI+ZnJvbSAxMjcvODwvc3Bhbj4gcmFuZ2UgZm9yIElQ djQgPHNwYW4gY2xhc3M9Imluc2VydCI+b3IgdG8gb25lIG9mPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAwOjA6MDowOjA6RkZGRjo3 RjAwOjAvMTA0PC9zcGFuPiByYW5nZSBmb3IgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+SVB2NikuPC9z cGFuPiAgVGhlcmUgY291bGQgYmUgYSBmaXJld2FsbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBJUHY0LW1hcHBlZCBJUHY0IGxvb3BiYWNr IGFkZHJlc3NlcyBmcm9tIDo6ZmZmZjoxMjcuMC4wLjAvMTA0PC9zcGFuPiByYW5nZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBjb25maWd1cmVkIG9uIFZURVAgdG8gYmxvY2sgbG9v cGJhY2sgYWRkcmVzc2VzIGlmIHNldCBhcyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgZm9yIDxzcGFuIGNsYXNzPSJpbnNlcnQiPklQdjYuPC9zcGFuPiAgVGhlcmUgY291 bGQgYmUgYSBmaXJld2FsbCBjb25maWd1cmVkIG9uIFZURVAgdG8gYmxvY2s8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgZGVzdGluYXRpb24gSVAgaW4gdGhlIGlubmVyIElQIGhlYWRl ci4gIEl0IGlzIFJFQ09NTUVOREVEIHRvIGFsbG93PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgIGxvb3BiYWNrIGFkZHJlc3NlcyBpZiBzZXQgYXMgdGhlIGRlc3RpbmF0aW9uIElQ IGluIHRoZSBpbm5lciBJUDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBhZGRyZXNz ZXMgZnJvbSB0aGUgbG9vcGJhY2sgcmFuZ2UgdGhyb3VnaCBhIGZpcmV3YWxsIG9ubHkgaWYgaXQg aXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgaGVhZGVyLiAgSXQgaXMgUkVD T01NRU5ERUQgdG8gYWxsb3cgYWRkcmVzc2VzIGZyb20gdGhlIGxvb3BiYWNrIHJhbmdlPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHVzZWQgYXMgdGhlIGRlc3RpbmF0aW9uIElQIGFk ZHJlc3MgaW4gdGhlIGlubmVyIElQIGhlYWRlciwgYW5kIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICB0aHJvdWdoIGEgZmlyZXdhbGwgb25seSBpZiBpdCBpcyB1c2VkIGFz IHRoZSBkZXN0aW5hdGlvbiBJUCBhZGRyZXNzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIGRlc3RpbmF0aW9uIFVEUCBwb3J0IGlzIHNldCB0byAzNzg0IFtSRkM1ODgxXS48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgaW4gdGhlIGlubmVyIElQIGhlYWRlciwgYW5k IHRoZSBkZXN0aW5hdGlvbiBVRFAgcG9ydCBpcyBzZXQgdG8gMzc4NDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgW1JGQzU4 ODFdLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij40LiAgQkZEIFBhY2tldCBUcmFu c21pc3Npb24gb3ZlciBWWExBTiBUdW5uZWw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij40LiAgQkZEIFBhY2tldCBUcmFuc21pc3Npb24gb3ZlciBWWExBTiBUdW5uZWw8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwNyI+PHRk PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICBCRkQgcGFja2V0IE1VU1QgYmUgZW5jYXBzdWxhdGVkIGFuZCBzZW50IHRvIGEg cmVtb3RlIFZURVAgYXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgQkZEIHBh Y2tldDxzcGFuIGNsYXNzPSJpbnNlcnQiPnM8L3NwYW4+IE1VU1QgYmUgZW5jYXBzdWxhdGVkIGFu ZCBzZW50IHRvIGEgcmVtb3RlIFZURVAgYXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IGV4cGxhaW5lZCBpbiB0aGlzIHNlY3Rpb24uICBJbXBsZW1lbnRhdGlvbnMgU0hPVUxEIGVuc3Vy ZSB0aGF0IHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGV4cGxhaW5lZCBp biB0aGlzIHNlY3Rpb24uICBJbXBsZW1lbnRhdGlvbnMgU0hPVUxEIGVuc3VyZSB0aGF0IHRoZTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQkZEIHBhY2tldHMgZm9sbG93IHRoZSBzYW1l IGxvb2t1cCBwYXRoIGFzIFZYTEFOIGRhdGEgcGFja2V0cyB3aXRoaW48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBCRkQgcGFja2V0cyBmb2xsb3cgdGhlIHNhbWUgbG9va3VwIHBh dGggYXMgVlhMQU4gZGF0YSBwYWNrZXRzIHdpdGhpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgdGhlIHNlbmRlciBzeXN0ZW0uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgdGhlIHNlbmRlciBzeXN0ZW0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IEJGRCBwYWNrZXRzIGFyZSBlbmNhcHN1bGF0ZWQgaW4gVlhMQU4gYXMgZGVzY3JpYmVkIGJlbG93 LiAgVGhlIFZYTEFOPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQkZEIHBhY2tl dHMgYXJlIGVuY2Fwc3VsYXRlZCBpbiBWWExBTiBhcyBkZXNjcmliZWQgYmVsb3cuICBUaGUgVlhM QU48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHBhY2tldCBmb3JtYXQgaXMgZGVmaW5l ZCBpbiBTZWN0aW9uIDUgb2YgW1JGQzczNDhdLiAgVGhlIE91dGVyIElQL1VEUDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHBhY2tldCBmb3JtYXQgaXMgZGVmaW5lZCBpbiBTZWN0 aW9uIDUgb2YgW1JGQzczNDhdLiAgVGhlIE91dGVyIElQL1VEUDwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgYW5kIFZYTEFOIGhlYWRlcnMgTVVTVCBiZSBlbmNvZGVkIGJ5IHRoZSBzZW5k ZXIgYXMgZGVmaW5lZCBpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGFuZCBW WExBTiBoZWFkZXJzIE1VU1QgYmUgZW5jb2RlZCBieSB0aGUgc2VuZGVyIGFzIGRlZmluZWQgaW48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM3MzQ4XS48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDNzM0OF0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgMCAgICAgICAgICAgICAgICAgICAxICAgICAgICAgICAgICAgICAgIDIgICAg ICAgICAgICAgICAgICAgMzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgMCAg ICAgICAgICAgICAgICAgICAxICAgICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAgICAg MzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9InBh cnQtNSIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFu Z2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9yZmNkaWZmL3JmY2Rp ZmYucHlodCNwYXJ0LTUiPjxlbT4gcGFnZSA3LCBsaW5lIDE4PHNwYW4gY2xhc3M9ImhpZGUiPiDC tjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNo YW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYub3JnL3JmY2RpZmYvcmZj ZGlmZi5weWh0I3BhcnQtNSI+PGVtPiBwYWdlIDcsIGxpbmUgMTg8c3BhbiBjbGFzcz0iaGlkZSI+ IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgY29uZmlndXJlZCwgb3Ig aXQgTUFZIGJlIGxlYXJuZWQgdmlhIGEgY29udHJvbCBwbGFuZSBwcm90b2NvbC48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBjb25maWd1cmVkLCBvciBpdCBNQVkgYmUg bGVhcm5lZCB2aWEgYSBjb250cm9sIHBsYW5lIHByb3RvY29sLjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgICAgVGhlIGRldGFpbHMgb2YgaG93IHRoZSBNQUMgYWRkcmVzcyBpcyBv YnRhaW5lZCBhcmUgb3V0c2lkZSB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgICBUaGUgZGV0YWlscyBvZiBob3cgdGhlIE1BQyBhZGRyZXNzIGlzIG9idGFpbmVkIGFy ZSBvdXRzaWRlIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgc2NvcGUg b2YgdGhpcyBkb2N1bWVudC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAg ICBzY29wZSBvZiB0aGlzIGRvY3VtZW50LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgICAgICBTb3VyY2UgTUFDOiBNQUMgYWRkcmVzcyBhc3NvY2lhdGVkIHdpdGggdGhlIG9y aWdpbmF0aW5nIFZURVA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBT b3VyY2UgTUFDOiBNQUMgYWRkcmVzcyBhc3NvY2lhdGVkIHdpdGggdGhlIG9yaWdpbmF0aW5nIFZU RVA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgSVAgaGVhZGVyOjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIElQIGhlYWRlcjo8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgRGVzdGluYXRpb24gSVA6IElQIGFkZHJlc3Mg TVVTVCBOT1QgYmUgb2Ygb25lIG9mIHRlbmFudCdzIElQPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICAgICAgRGVzdGluYXRpb24gSVA6IElQIGFkZHJlc3MgTVVTVCBOT1QgYmUg b2Ygb25lIG9mIHRlbmFudCdzIElQPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAg ICBhZGRyZXNzZXMuICBUaGUgSVAgYWRkcmVzcyBTSE9VTEQgYmUgc2VsZWN0ZWQgZnJvbSB0aGUg cmFuZ2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBhZGRyZXNzZXMu ICBUaGUgSVAgYWRkcmVzcyBTSE9VTEQgYmUgc2VsZWN0ZWQgZnJvbSB0aGUgcmFuZ2U8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDgiPjx0ZD48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgICAgICAgMTI3LzggZm9yIElQdjQsIGZvciBJUHY2IC0gZnJvbSB0aGUgcmFuZ2U8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgMTI3LzggZm9yIElQdjQs IGZvciBJUHY2IC0gZnJvbSB0aGUgcmFuZ2UgPHNwYW4gY2xhc3M9Imluc2VydCI+OjpmZmZmOjEy Ny4wLjAuMC8xMDQuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAg ICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4wOjA6MDowOjA6RkZGRjo3RjAwOjAvMTA0Ljwvc3Bhbj4g IEFsdGVybmF0aXZlbHksIHRoZSBkZXN0aW5hdGlvbiBJUDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICAgICAgICBBbHRlcm5hdGl2ZWx5LCB0aGUgZGVzdGluYXRpb24gSVAgYWRk cmVzcyBNQVkgYmUgc2V0IHRvIFZURVAnczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgICAgICBhZGRyZXNzIE1BWSBiZSBzZXQgdG8gVlRFUCdzIElQIGFkZHJlc3MuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgIElQIGFkZHJlc3MuPC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIFNvdXJjZSBJUDogSVAgYWRkcmVzcyBvZiB0 aGUgb3JpZ2luYXRpbmcgVlRFUC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgICBTb3VyY2UgSVA6IElQIGFkZHJlc3Mgb2YgdGhlIG9yaWdpbmF0aW5nIFZURVAuPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIFRUTCBvciBIb3AgTGltaXQ6IE1V U1QgYmUgc2V0IHRvIDEgdG8gZW5zdXJlIHRoYXQgdGhlIEJGRDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgICAgIFRUTCBvciBIb3AgTGltaXQ6IE1VU1QgYmUgc2V0IHRvIDEg dG8gZW5zdXJlIHRoYXQgdGhlIEJGRDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg ICAgcGFja2V0IGlzIG5vdCByb3V0ZWQgd2l0aGluIHRoZSBMYXllciAzIHVuZGVybGF5IG5ldHdv cmsuICBUaGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgcGFja2V0 IGlzIG5vdCByb3V0ZWQgd2l0aGluIHRoZSBMYXllciAzIHVuZGVybGF5IG5ldHdvcmsuICBUaGlz PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICBhZGRyZXNzZXMgdGhlIHNjZW5h cmlvIHdoZW4gdGhlIGlubmVyIElQIGRlc3RpbmF0aW9uIGFkZHJlc3MgaXM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBhZGRyZXNzZXMgdGhlIHNjZW5hcmlvIHdoZW4g dGhlIGlubmVyIElQIGRlc3RpbmF0aW9uIGFkZHJlc3MgaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgICAgIG9mIFZYTEFOIGdhdGV3YXkgYW5kIHRoZXJlIGlzIGEgcm91dGVyIGlu IHVuZGVybGF5IHdoaWNoPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAg b2YgVlhMQU4gZ2F0ZXdheSBhbmQgdGhlcmUgaXMgYSByb3V0ZXIgaW4gdW5kZXJsYXkgd2hpY2g8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIHJlbW92ZXMgdGhlIFZYTEFOIGhl YWRlciwgdGhlbiBpdCBpcyBwb3NzaWJsZSB0byByb3V0ZSB0aGU8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgICAgICByZW1vdmVzIHRoZSBWWExBTiBoZWFkZXIsIHRoZW4gaXQg aXMgcG9zc2libGUgdG8gcm91dGUgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg ICAgICBwYWNrZXQgYXMgVlhMQU4gIGdhdGV3YXkgYWRkcmVzcyBpcyByb3V0YWJsZSBhZGRyZXNz LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIHBhY2tldCBhcyBWWExB TiAgZ2F0ZXdheSBhZGRyZXNzIGlzIHJvdXRhYmxlIGFkZHJlc3MuPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTYiIGNsYXNzPSJj aGFuZ2UiPjx0ZD48L3RkPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48 YSBocmVmPSJodHRwczovL3d3dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC02 Ij48ZW0+IHBhZ2UgOCwgbGluZSA1MjxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48 L2E+PC90aD48dGg+IDwvdGg+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxs PjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0 LTYiPjxlbT4gcGFnZSA4LCBsaW5lIDUyPHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2Vt PjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBkb2N1bWVudCByZXF1aXJlcyBzZXR0aW5nIHRoZSBp bm5lciBJUCBUVEwgdG8gMSwgd2hpY2ggY291bGQgYmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBUaGUgZG9jdW1lbnQgcmVxdWlyZXMgc2V0dGluZyB0aGUgaW5uZXIgSVAgVFRM IHRvIDEsIHdoaWNoIGNvdWxkIGJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB1c2Vk IGFzIGEgRERvUyBhdHRhY2sgdmVjdG9yLiAgVGh1cyB0aGUgaW1wbGVtZW50YXRpb24gTVVTVCBo YXZlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXNlZCBhcyBhIEREb1MgYXR0 YWNrIHZlY3Rvci4gIFRodXMgdGhlIGltcGxlbWVudGF0aW9uIE1VU1QgaGF2ZTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhyb3R0bGluZyBpbiBwbGFjZSB0byBjb250cm9sIHRoZSBy YXRlIG9mIEJGRCBDb250cm9sIHBhY2tldHMgc2VudDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIHRocm90dGxpbmcgaW4gcGxhY2UgdG8gY29udHJvbCB0aGUgcmF0ZSBvZiBCRkQg Q29udHJvbCBwYWNrZXRzIHNlbnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRvIHRo ZSBjb250cm9sIHBsYW5lLiAgT24gdGhlIG90aGVyIGhhbmQsIG92ZXItYWdncmVzc2l2ZSB0aHJv dHRsaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdG8gdGhlIGNvbnRyb2wg cGxhbmUuICBPbiB0aGUgb3RoZXIgaGFuZCwgb3Zlci1hZ2dyZXNzaXZlIHRocm90dGxpbmc8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG9mIEJGRCBDb250cm9sIHBhY2tldHMgbWF5IGJl Y29tZSB0aGUgY2F1c2Ugb2YgdGhlIGluYWJpbGl0eSB0byBmb3JtPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgb2YgQkZEIENvbnRyb2wgcGFja2V0cyBtYXkgYmVjb21lIHRoZSBj YXVzZSBvZiB0aGUgaW5hYmlsaXR5IHRvIGZvcm08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIGFuZCBtYWludGFpbiBCRkQgc2Vzc2lvbiBhdCBzY2FsZS4gIEhlbmNlLCB0aHJvdHRsaW5n IG9mIEJGRCBDb250cm9sPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYW5kIG1h aW50YWluIEJGRCBzZXNzaW9uIGF0IHNjYWxlLiAgSGVuY2UsIHRocm90dGxpbmcgb2YgQkZEIENv bnRyb2w8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHBhY2tldHMgU0hPVUxEIGJlIGFk anVzdGVkIHRvIHBlcm1pdCBCRkQgdG8gd29yayBhY2NvcmRpbmcgdG8gaXRzPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcGFja2V0cyBTSE9VTEQgYmUgYWRqdXN0ZWQgdG8gcGVy bWl0IEJGRCB0byB3b3JrIGFjY29yZGluZyB0byBpdHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIHByb2NlZHVyZXMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcHJv Y2VkdXJlcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVu dCByZWNvbW1lbmRzIHVzaW5nIGFuIGFkZHJlc3MgZnJvbSB0aGUgSW50ZXJuYWwgaG9zdDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoaXMgZG9jdW1lbnQgcmVjb21tZW5kcyB1 c2luZyBhbiBhZGRyZXNzIGZyb20gdGhlIEludGVybmFsIGhvc3Q8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDkiPjx0ZD48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgbG9v cGJhY2sgYWRkcmVzc2VzIDxzcGFuIGNsYXNzPSJkZWxldGUiPigxMjcvODwvc3Bhbj4gcmFuZ2Ug Zm9yIElQdjQgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YW5kPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICBsb29wYmFjayBhZGRyZXNzZXMgPHNwYW4gY2xhc3M9Imluc2Vy dCI+MTI3Lzg8L3NwYW4+IHJhbmdlIGZvciBJUHY0IDxzcGFuIGNsYXNzPSJpbnNlcnQiPm9yIGFu IElQNC1tYXBwZWQgSVB2NDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNw YW4gY2xhc3M9ImRlbGV0ZSI+ICAgMDowOjA6MDowOkZGRkY6N0YwMDowLzEwNDwvc3Bhbj4gcmFu Z2UgZm9yIDxzcGFuIGNsYXNzPSJkZWxldGUiPklQdjYpPC9zcGFuPiBhcyB0aGUgZGVzdGluYXRp b24gSVA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+ICAgbG9vcGJhY2sgYWRkcmVzcyBmcm9tIDo6ZmZmZjoxMjcuMC4wLjAvMTA0PC9zcGFuPiBy YW5nZSBmb3IgPHNwYW4gY2xhc3M9Imluc2VydCI+SVB2Njwvc3Bhbj4gYXMgdGhlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGFkZHJlc3MgaW4gdGhlIGlubmVyIElQIGhlYWRlci4g IFVzaW5nIHN1Y2ggYWRkcmVzcyBwcmV2ZW50cyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgZGVzdGluYXRpb24gSVAgYWRkcmVzcyBpbiB0aGUgaW5uZXIgSVAgaGVhZGVy LiAgVXNpbmcgc3VjaCBhZGRyZXNzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGZv cndhcmRpbmcgb2YgdGhlIGVuY2Fwc3VsYXRlZCBCRkQgY29udHJvbCBtZXNzYWdlIGJ5IGEgdHJh bnNpZW50PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHByZXZlbnRzIHRoZSBm b3J3YXJkaW5nIG9mIHRoZSBlbmNhcHN1bGF0ZWQgQkZEIGNvbnRyb2wgbWVzc2FnZSBieSBhPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIG5vZGUgaW4gY2FzZSB0aGUgVlhMQU4gdHVu bmVsIGlzIGJyb2tlbiBhcyBhY2NvcmRpbmcgdG8gW1JGQzE4MTJdOjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICB0cmFuc2llbnQgbm9kZSBpbiBjYXNlIHRoZSBWWExBTiB0dW5u ZWwgaXMgYnJva2VuIGFzIGFjY29yZGluZyB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgW1JGQzE4MTJdOjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBBIHJvdXRlciBTSE9VTEQgTk9UIGZvcndh cmQsIGV4Y2VwdCBvdmVyIGEgbG9vcGJhY2sgaW50ZXJmYWNlLCBhbnk8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBBIHJvdXRlciBTSE9VTEQgTk9UIGZvcndhcmQsIGV4Y2Vw dCBvdmVyIGEgbG9vcGJhY2sgaW50ZXJmYWNlLCBhbnk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgIHBhY2tldCB0aGF0IGhhcyBhIGRlc3RpbmF0aW9uIGFkZHJlc3Mgb24gbmV0d29y ayAxMjcuICBBIHJvdXRlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIHBh Y2tldCB0aGF0IGhhcyBhIGRlc3RpbmF0aW9uIGFkZHJlc3Mgb24gbmV0d29yayAxMjcuICBBIHJv dXRlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgTUFZIGhhdmUgYSBzd2l0Y2gg dGhhdCBhbGxvd3MgdGhlIG5ldHdvcmsgbWFuYWdlciB0byBkaXNhYmxlIHRoZXNlPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgTUFZIGhhdmUgYSBzd2l0Y2ggdGhhdCBhbGxv d3MgdGhlIG5ldHdvcmsgbWFuYWdlciB0byBkaXNhYmxlIHRoZXNlPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICAgICBjaGVja3MuICBJZiBzdWNoIGEgc3dpdGNoIGlzIHByb3ZpZGVkLCBp dCBNVVNUIGRlZmF1bHQgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBj aGVja3MuICBJZiBzdWNoIGEgc3dpdGNoIGlzIHByb3ZpZGVkLCBpdCBNVVNUIGRlZmF1bHQgdG88 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIHBlcmZvcm1pbmcgdGhlIGNoZWNrcy48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBwZXJmb3JtaW5nIHRoZSBjaGVj a3MuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIElmIHRoZSBpbXBsZW1lbnRh dGlvbiBzdXBwb3J0cyBlc3RhYmxpc2hpbmcgbXVsdGlwbGUgQkZEIHNlc3Npb25zPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSWYgdGhlIGltcGxlbWVudGF0aW9uIHN1cHBvcnRz IGVzdGFibGlzaGluZyBtdWx0aXBsZSBCRkQgc2Vzc2lvbnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGJldHdlZW4gdGhlIHNhbWUgcGFpciBvZiBWVEVQcywgdGhlcmUgU0hPVUxEIGJl IGEgbWVjaGFuaXNtIHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYmV0d2Vl biB0aGUgc2FtZSBwYWlyIG9mIFZURVBzLCB0aGVyZSBTSE9VTEQgYmUgYSBtZWNoYW5pc20gdG88 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNvbnRyb2wgdGhlIG1heGltdW0gbnVtYmVy IG9mIHN1Y2ggc2Vzc2lvbnMgdGhhdCBjYW4gYmUgYWN0aXZlIGF0IHRoZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNvbnRyb2wgdGhlIG1heGltdW0gbnVtYmVyIG9mIHN1Y2gg c2Vzc2lvbnMgdGhhdCBjYW4gYmUgYWN0aXZlIGF0IHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KCiAgICAgPHRyPjx0ZD48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQ+PC90ZD48L3RyPgogICAgIDx0ciBpZD0i ZW5kIiBiZ2NvbG9yPSJncmF5Ij48dGggY29sc3Bhbj0iNSIgYWxpZ249ImNlbnRlciI+Jm5ic3A7 RW5kIG9mIGNoYW5nZXMuIDkgY2hhbmdlIGJsb2Nrcy4mbmJzcDs8L3RoPjwvdHI+CiAgICAgPHRy IGNsYXNzPSJzdGF0cyI+PHRkPjwvdGQ+PHRoPjxpPjIxIGxpbmVzIGNoYW5nZWQgb3IgZGVsZXRl ZDwvaT48L3RoPjx0aD48aT4gPC9pPjwvdGg+PHRoPjxpPjIzIGxpbmVzIGNoYW5nZWQgb3IgYWRk ZWQ8L2k+PC90aD48dGQ+PC90ZD48L3RyPgogICAgIDx0cj48dGQgY29sc3Bhbj0iNSIgYWxpZ249 ImNlbnRlciIgY2xhc3M9InNtYWxsIj48YnI+VGhpcyBodG1sIGRpZmYgd2FzIHByb2R1Y2VkIGJ5 IHJmY2RpZmYgMS40Ny4gVGhlIGxhdGVzdCB2ZXJzaW9uIGlzIGF2YWlsYWJsZSBmcm9tIDxhIGhy ZWY9Imh0dHA6Ly93d3cudG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi8iPmh0dHA6Ly90b29s cy5pZXRmLm9yZy90b29scy9yZmNkaWZmLzwvYT4gPC90ZD48L3RyPgogICA8L3Rib2R5PjwvdGFi bGU+CiAgIAogICAKPC9ib2R5PjwvaHRtbD4= --0000000000007c4dc30599ee333b-- From nobody Wed Dec 18 06:31:23 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1668A120100; Tue, 17 Dec 2019 15:17:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.596 X-Spam-Level: X-Spam-Status: No, score=-0.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_COMMENT_SAVED_URL=1.391, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ngnugUXhOaHV; Tue, 17 Dec 2019 15:17:36 -0800 (PST) Received: from mail-lj1-x22c.google.com (mail-lj1-x22c.google.com [IPv6:2a00:1450:4864:20::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B92E1120058; Tue, 17 Dec 2019 15:17:35 -0800 (PST) Received: by mail-lj1-x22c.google.com with SMTP id k8so1506883ljh.5; Tue, 17 Dec 2019 15:17:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Eqi9KULFSJUdhCgpIf9sGiBMeHnThYSS0FbK0DUiqQo=; b=NwPusRW/TzMxDrBnoUHv//UHzpNcvf+dIWiZSvep2UrB0Lmk2zCCvTi2SZrrH1s8mC VsUQVFEHTxAUgQ7czUbjPjGFgfdEbxTSfP1MdFn0+YAQhdKu+NWXal1PkCb15axt2gd/ NfGDCWhmzlsSZXBwg7gV4dO9Nc2G4vI1aKukv1bIEE8QdfzqFboJPHNzwqi5xI3shIv3 JFbCcoofqWugxF9uVxF2KLAInVDsn/HBU+ngZOgOzdwMz2yS8RS6WHGTA3GDfEBMi7yn ToMj/gWu+D/2iUiym2tXimx61FVEGxwrtGCPHOL+P1iyzatIjZtWDvPeZmUo1kwG38K2 EOhg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Eqi9KULFSJUdhCgpIf9sGiBMeHnThYSS0FbK0DUiqQo=; b=rRaAntcI0QxQUqn9HjjD4IL7R3CVeWnRfFeh1j/lwCO56gDos3NxlL6uVZGAj9ap0E n2W0OaFN3hFoEriM2Jn+5E9T0NjBbPIG0FoJZ+Y96G4g2qsdLXOT8rXrqbXkVsz9Pgq7 5tIadFXF85S5+y8kqa5HE8wSes4mI8aoD74KStyNVt8ceeoBRbrNgYAoogqj9OUGFSZu bt+bDFdUWrQa+1hmR10ZEeQ54dVpYcRl5t7QmISGrSpPmtv1tA4yHmBv3KROcgR448of my980A+LjzmSS5BZBXkRK2Hwl3F5QymrKP9tNlvHxhgmufCT1z5JcbHFD+ZweI21/su4 oGbg== X-Gm-Message-State: APjAAAX5Q/pwbf9IxuL5U9cCfpGkyRln7oo9osOYO45svoOeJv/WKDHP 9SfKTO/I2SolGdqHopMiQKrSyWOsfINolhuvJnE= X-Google-Smtp-Source: APXvYqyZyI0d5hMDD8JANtGFJkMotYoFRlamNgi2eKVFuKYTFUPb5L2HL7lTYZ/DSJgyZeJTSiz6kb1c1te9MX46+pY= X-Received: by 2002:a2e:6c06:: with SMTP id h6mr214313ljc.246.1576624652876; Tue, 17 Dec 2019 15:17:32 -0800 (PST) MIME-Version: 1.0 References: <157655999615.24604.538120700710888094@ietfa.amsl.com> In-Reply-To: <157655999615.24604.538120700710888094@ietfa.amsl.com> From: Greg Mirsky Date: Tue, 17 Dec 2019 15:17:21 -0800 Message-ID: Subject: Re: Genart telechat review of draft-ietf-bfd-vxlan-09 To: Erik Kline Cc: gen-art@ietf.org, last-call@ietf.org, rtg-bfd WG , draft-ietf-bfd-vxlan.all@ietf.org Content-Type: multipart/mixed; boundary="000000000000611e8d0599ee88ef" Archived-At: X-Mailman-Approved-At: Wed, 18 Dec 2019 06:31:13 -0800 X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Dec 2019 23:17:39 -0000 --000000000000611e8d0599ee88ef Content-Type: multipart/alternative; boundary="000000000000611e8b0599ee88ed" --000000000000611e8b0599ee88ed Content-Type: text/plain; charset="UTF-8" Hi Erik, thank you for your reviews and for sharing thoughts on the selection of the destination IPv6 address. Following recommendations from Adam, I've updated the document to use the proper representation of IPv6 addresses and refer to them as "IPv4-mapped IPv4 loopback addresses". These updates are in the attached diff. Adam also noted that RFC 8504 doesn't have a similar wording regarding the handling of packets addressed to an address from 127/8 network as RFC 1812 (of course, referring to IPv4-mapped 127/8 addresses): A router SHOULD NOT forward, except over a loopback interface, any packet that has a destination address on network 127. A router MAY have a switch that allows the network manager to disable these checks. If such a switch is provided, it MUST default to performing the checks. I'd note, that the egress BFD system is expected to accept a BFD packet with the destination IP address from the specified range without being provisioned for the specific address from that range. Perhaps that makes the use of this range possible even though its special handling is not explicitly documented. Best regards, Greg On Mon, Dec 16, 2019 at 9:19 PM Erik Kline via Datatracker wrote: > Reviewer: Erik Kline > Review result: Ready with Nits > > I am the assigned Gen-ART reviewer for this draft. The General Area > Review Team (Gen-ART) reviews all IETF documents being processed > by the IESG for the IETF Chair. Please wait for direction from your > document shepherd or AD before posting a new version of the draft. > > For more information, please see the FAQ at > > . > > Document: draft-ietf-bfd-vxlan-?? > Reviewer: Erik Kline > Review Date: 2019-12-16 > IETF LC End Date: None > IESG Telechat date: 2019-12-19 > > Summary: > > -09 addresses my concerns from -07. Thank you for this. > > The one "nit" is that it seems to have introduced a recommendation to use > ::ffff:7f00:0/104 as an IPv6 loopback prefix. (a) This document should > follow > the format recommendations of RFC 5952 section 4.3 and lowercase the > "F"s. But > (b) more importantly, I'm not sure how implementations may treats this > space. > > The use of an RFC4291 section-2.5.5.2 mapped v4 address doesn't necessarily > make the packet a part of an IPv6 connection. Nevertheless, I'm not sure I > have a strong feeling about this as it may still exercise enough of the > IPv6 > stack in a VTEP. > > I definitely do think that in the case of BFD on the management VNI > targeting > an IPv6 link-local address of the VTEP would be better. However, I expect > that > if ::ffff:127.0.0.0 does prove to have some issues in the future a -bis > can be > written quickly with a recommendation. > > Also, Suresh may have ideas for a solution. > > Major issues: > > Minor issues: > > Nits/editorial comments: > > > --000000000000611e8b0599ee88ed Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Erik,
thank you for your reviews a= nd for sharing thoughts on the selection of the destination IPv6 address. F= ollowing recommendations from Adam, I've updated the document to use th= e proper representation of IPv6 addresses and refer to them as "IPv4-m= apped IPv4 loopback addresses". These updates are in the attached diff= . Adam also noted that RFC 8504 doesn't have a similar wording regardin= g the handling of packets addressed to an address from 127/8 network as RFC= 1812 (of course, referring to IPv4-mapped 127/8 addresses):
=C2=A0 = =C2=A0 =C2=A0 A router SHOULD NOT forward, except over a loopback interface= , any
=C2=A0 =C2=A0 =C2=A0 packet that has a destination address on netw= ork 127.=C2=A0 A router
=C2=A0 =C2=A0 =C2=A0 MAY have a switch that allo= ws the network manager to disable these
=C2=A0 =C2=A0 =C2=A0 checks.=C2= =A0 If such a switch is provided, it MUST default to
=C2=A0 =C2=A0 =C2= =A0 performing the checks.
I'd note, that the egress BFD system= is expected to accept a BFD packet with the destination IP address from th= e specified range without being provisioned for the specific address from t= hat range. Perhaps that makes the use of this range possible even though it= s special handling is not explicitly documented.

B= est regards,
Greg


On Mon, Dec 16, 2019 at 9:1= 9 PM Erik Kline via Datatracker <nor= eply@ietf.org> wrote:
Reviewer: Erik Kline
Review result: Ready with Nits

I am the assigned Gen-ART reviewer for this draft. The General Area
Review Team (Gen-ART) reviews all IETF documents being processed
by the IESG for the IETF Chair. Please wait for direction from your
document shepherd or AD before posting a new version of the draft.

For more information, please see the FAQ at

<https://trac.ietf.org/trac/gen/wiki/GenArtfaq&g= t;.

Document: draft-ietf-bfd-vxlan-??
Reviewer: Erik Kline
Review Date: 2019-12-16
IETF LC End Date: None
IESG Telechat date: 2019-12-19

Summary:

-09 addresses my concerns from -07.=C2=A0 Thank you for this.

The one "nit" is that it seems to have introduced a recommendatio= n to use
::ffff:7f00:0/104 as an IPv6 loopback prefix.=C2=A0 (a) This document shoul= d follow
the format recommendations of RFC 5952 section 4.3 and lowercase the "= F"s.=C2=A0 But
(b) more importantly, I'm not sure how implementations may treats this = space.

The use of an RFC4291 section-2.5.5.2 mapped v4 address doesn't necessa= rily
make the packet a part of an IPv6 connection.=C2=A0 Nevertheless, I'm n= ot sure I
have a strong feeling about this as it may still exercise enough of the IPv= 6
stack in a VTEP.

I definitely do think that in the case of BFD on the management VNI targeti= ng
an IPv6 link-local address of the VTEP would be better.=C2=A0 However, I ex= pect that
if ::ffff:127.0.0.0 does prove to have some issues in the future a -bis can= be
written quickly with a recommendation.

Also, Suresh may have ideas for a solution.

Major issues:

Minor issues:

Nits/editorial comments:


--000000000000611e8b0599ee88ed-- --000000000000611e8d0599ee88ef Content-Type: text/html; charset="UTF-8"; name="Diff_ draft-ietf-bfd-vxlan-09.txt - draft-ietf-bfd-vxlan-10.txt.html" Content-Disposition: attachment; filename="Diff_ draft-ietf-bfd-vxlan-09.txt - draft-ietf-bfd-vxlan-10.txt.html" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_k4ahloo20 PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h bC5kdGQiPgo8IS0tIHNhdmVkIGZyb20gdXJsPSgwMDQyKWh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9y ZmNkaWZmL3JmY2RpZmYucHlodCAtLT4KPGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5 OTkveGh0bWwiIGNsYXNzPSJncl9fd3d3Nl9pZXRmX29yZyI+PGhlYWQ+PG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgiPiAKICAg CiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1TdHlsZS1UeXBlIiBjb250ZW50PSJ0ZXh0L2Nz cyI+IAogIDx0aXRsZT5EaWZmOiBkcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQgLSBkcmFmdC1p ZXRmLWJmZC12eGxhbi0xMC50eHQ8L3RpdGxlPiAKICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAK ICAgIGJvZHkgICAgeyBtYXJnaW46IDAuNGV4OyBtYXJnaW4tcmlnaHQ6IGF1dG87IH0gCiAgICB0 ciAgICAgIHsgfSAKICAgIHRkICAgICAgeyB3aGl0ZS1zcGFjZTogcHJlOyBmb250LWZhbWlseTog bW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBmb250LXNpemU6IDAuODZlbTt9IAogICAg dGggICAgICB7IGZvbnQtc2l6ZTogMC44NmVtOyB9IAogICAgLnNtYWxsICB7IGZvbnQtc2l6ZTog MC42ZW07IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9udC1mYW1pbHk6IFZlcmRhbmEsIEhlbHZldGlj YSwgc2Fucy1zZXJpZjsgfSAKICAgIC5sZWZ0ICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9 IAogICAgLnJpZ2h0ICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IH0gCiAgICAuZGlmZiAgIHsg YmFja2dyb3VuZC1jb2xvcjogI0NDRjsgfSAKICAgIC5sYmxvY2sgeyBiYWNrZ3JvdW5kLWNvbG9y OiAjQkZCOyB9IAogICAgLnJibG9jayB7IGJhY2tncm91bmQtY29sb3I6ICNGRjg7IH0gCiAgICAu aW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhGRjsgfSAKICAgIC5kZWxldGUgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjQUNGOyB9IAogICAgLnZvaWQgICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkI7 IH0gCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAKICAgIC5saW5lYnIg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAogICAgLmxpbmVubyB7IGNvbG9yOiByZWQ7IGJh Y2tncm91bmQtY29sb3I6ICNGRkY7IGZvbnQtc2l6ZTogMC43ZW07IHRleHQtYWxpZ246IHJpZ2h0 OyBwYWRkaW5nOiAwIDJweDsgfSAKICAgIC5lbGlwc2lzeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFB OyB9IAogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjREREOyB9IAogICAgLnJp Z2h0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAKICAgIC5sYmxvY2sgLmNvbnQg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IAogICAgLnJibG9jayAuY29udCB7IGJhY2tncm91 bmQtY29sb3I6ICNERDY7IH0gCiAgICAuaW5zZXJ0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjog IzBERDsgfSAKICAgIC5kZWxldGUgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOEFEOyB9IAog ICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0aCB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7 IHBhZGRpbmc6IDJweCAwOyB9IAogICAgc3Bhbi5oaWRlIHsgZGlzcGxheTogbm9uZTsgY29sb3I6 ICNhYWE7fSAgICBhOmhvdmVyIHNwYW4geyBkaXNwbGF5OiBpbmxpbmU7IH0gICAgdHIuY2hhbmdl IHsgYmFja2dyb3VuZC1jb2xvcjogZ3JheTsgfSAKICAgIHRyLmNoYW5nZSBhIHsgdGV4dC1kZWNv cmF0aW9uOiBub25lOyBjb2xvcjogYmxhY2sgfSAKICA8L3N0eWxlPiAKICAgICA8c2NyaXB0Pgp2 YXIgY2h1bmtfaW5kZXggPSAwOwp2YXIgb2xkX2NodW5rID0gbnVsbDsKCmZ1bmN0aW9uIGZvcm1h dF9jaHVuayhpbmRleCkgewogICAgdmFyIHByZWZpeCA9ICJkaWZmIjsKICAgIHZhciBzdHIgPSBp bmRleC50b1N0cmluZygpOwogICAgZm9yICh4PTA7IHg8KDQtc3RyLmxlbmd0aCk7ICsreCkgewog ICAgICAgIHByZWZpeCs9JzAnOwogICAgfQogICAgcmV0dXJuIHByZWZpeCArIHN0cjsKfQoKZnVu Y3Rpb24gZmluZF9jaHVuayhuKXsKICAgIHJldHVybiBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCd0 cltpZCQ9IicgKyBuICsgJyJdJyk7Cn0KCmZ1bmN0aW9uIGNoYW5nZV9jaHVuayhvZmZzZXQpIHsK ICAgIHZhciBpbmRleCA9IGNodW5rX2luZGV4ICsgb2Zmc2V0OwogICAgdmFyIG5ld19zdHI7CiAg ICB2YXIgbmV3X2NodW5rOwoKICAgIG5ld19zdHIgPSBmb3JtYXRfY2h1bmsoaW5kZXgpOwogICAg bmV3X2NodW5rID0gZmluZF9jaHVuayhuZXdfc3RyKTsKICAgIGlmICghbmV3X2NodW5rKSB7CiAg ICAgICAgcmV0dXJuOwogICAgfQogICAgaWYgKG9sZF9jaHVuaykgewogICAgICAgIG9sZF9jaHVu ay5zdHlsZS5vdXRsaW5lID0gIiI7CiAgICB9CiAgICBvbGRfY2h1bmsgPSBuZXdfY2h1bms7CiAg ICBvbGRfY2h1bmsuc3R5bGUub3V0bGluZSA9ICIxcHggc29saWQgcmVkIjsKICAgIHdpbmRvdy5s b2NhdGlvbi5yZXBsYWNlKCIjIiArIG5ld19zdHIpCiAgICB3aW5kb3cuc2Nyb2xsQnkoMCwtMTAw KTsKICAgIGNodW5rX2luZGV4ID0gaW5kZXg7Cn0KCmRvY3VtZW50Lm9ua2V5ZG93biA9IGZ1bmN0 aW9uKGUpIHsKICAgIHN3aXRjaCAoZS5rZXlDb2RlKSB7CiAgICBjYXNlIDc4OgogICAgICAgIGNo YW5nZV9jaHVuaygxKTsKICAgICAgICBicmVhazsKICAgIGNhc2UgODA6CiAgICAgICAgY2hhbmdl X2NodW5rKC0xKTsKICAgICAgICBicmVhazsKICAgIH0KfTsKICAgPC9zY3JpcHQ+IAo8L2hlYWQ+ IAo8Ym9keSBkYXRhLWdyLWMtcy1sb2FkZWQ9InRydWUiPiAKICA8dGFibGUgYm9yZGVyPSIwIiBj ZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiPiAKICA8dGJvZHk+PHRyIGlkPSJwYXJ0LTEi IGJnY29sb3I9Im9yYW5nZSI+PHRoPjwvdGg+PHRoPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRm Lm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1iZmQtdnhsYW4tMDkudHh0IiBzdHlsZT0iY29s b3I6IzAwODsgdGV4dC1kZWNvcmF0aW9uOm5vbmU7Ij4mbHQ7PC9hPiZuYnNwOzxhIGhyZWY9Imh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQiIHN0 eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQ8L2E+Jm5ic3A7PC90 aD48dGg+IDwvdGg+PHRoPiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1pZXRmLWJmZC12eGxhbi0xMC50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1p ZXRmLWJmZC12eGxhbi0xMC50eHQ8L2E+Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYu b3JnL3JmY2RpZmY/dXJsMT1kcmFmdC1pZXRmLWJmZC12eGxhbi0xMC50eHQiIHN0eWxlPSJjb2xv cjojMDA4OyB0ZXh0LWRlY29yYXRpb246bm9uZTsiPiZndDs8L2E+PC90aD48dGg+PC90aD48L3Ry PiAKICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij5CRkQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBT LiBQYWxsYWdhdHRpLCBFZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5CRkQgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBTLiBQYWxsYWdh dHRpLCBFZC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkludGVybmV0LURyYWZ0ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFZNd2FyZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFZNd2FyZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+SW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFMuIFBhcmFnaXJpPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+SW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFMuIFBhcmFnaXJpPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHIgaWQ9ImRpZmYwMDAxIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPkV4cGlyZXM6IEp1bmUgMTxzcGFuIGNs YXNzPSJkZWxldGUiPiwgMjAyMCA8L3NwYW4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgIElu ZGl2aWR1YWwgQ29udHJpYnV0b3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RXhw aXJlczogSnVuZSAxPHNwYW4gY2xhc3M9Imluc2VydCI+OSwgMjAyMDwvc3Bhbj4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgSW5kaXZpZHVhbCBDb250cmlidXRvcjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFYuIEdvdmluZGFuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFYuIEdvdmluZGFuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBNdWRp Z29uZGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBNdWRpZ29uZGE8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgRy4gTWlyc2t5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Ry4gTWlyc2t5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBaVEUgQ29ycC48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBaVEUgQ29ycC48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDIiPjx0ZD48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxz cGFuIGNsYXNzPSJkZWxldGUiPk5vdmVtYmVyIDI5PC9zcGFuPiwgMjAxOTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+RGVjZW1iZXIgMTc8L3NwYW4+ LCAyMDE5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgQkZEIGZvciBWWExBTjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQkZEIGZvciBWWExBTjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwMyI+PHRkPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgICAgICAgICAgICAgICAgICAgICBkcmFmdC1pZXRmLWJmZC12eGxhbi08c3BhbiBjbGFzcz0i ZGVsZXRlIj4wOTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAg ICAgICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1iZmQtdnhsYW4tPHNwYW4gY2xhc3M9Imluc2Vy dCI+MTA8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkFic3RyYWN0PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+QWJzdHJhY3Q8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHVzZSBvZiB0aGUg QmlkaXJlY3Rpb25hbCBGb3J3YXJkaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHVzZSBvZiB0aGUgQmlkaXJlY3Rpb25hbCBG b3J3YXJkaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEZXRlY3Rpb24gKEJGRCkg cHJvdG9jb2wgaW4gcG9pbnQtdG8tcG9pbnQgVmlydHVhbCBlWHRlbnNpYmxlIExvY2FsPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRGV0ZWN0aW9uIChCRkQpIHByb3RvY29sIGlu IHBvaW50LXRvLXBvaW50IFZpcnR1YWwgZVh0ZW5zaWJsZSBMb2NhbDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgQXJlYSBOZXR3b3JrIChWWExBTikgdHVubmVscyBmb3JtaW5nIHVwIGFu IG92ZXJsYXkgbmV0d29yay48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBBcmVh IE5ldHdvcmsgKFZYTEFOKSB0dW5uZWxzIGZvcm1pbmcgdXAgYW4gb3ZlcmxheSBuZXR3b3JrLjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5TdGF0dXMgb2YgVGhpcyBNZW1vPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+U3RhdHVzIG9mIFRoaXMgTWVtbzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIEludGVybmV0LURyYWZ0IGlzIHN1Ym1pdHRl ZCBpbiBmdWxsIGNvbmZvcm1hbmNlIHdpdGggdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCBpcyBzdWJtaXR0ZWQgaW4gZnVsbCBjb25mb3Jt YW5jZSB3aXRoIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHIgaWQ9InBhcnQtMiIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFsbD5za2lw cGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9y ZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTIiPjxlbT4gcGFnZSAxLCBsaW5lIDM4PHNwYW4gY2xh c3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxsPnNr aXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYub3Jn L3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtMiI+PGVtPiBwYWdlIDEsIGxpbmUgMzg8c3BhbiBj bGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQt RHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5naW5lZXJpbmc8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdv cmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZzwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgVGFzayBGb3JjZSAoSUVURikuICBOb3RlIHRoYXQgb3RoZXIgZ3Jv dXBzIG1heSBhbHNvIGRpc3RyaWJ1dGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBUYXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlz dHJpYnV0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgd29ya2luZyBkb2N1bWVudHMg YXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC08L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5l dC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJyZW50IEludGVybmV0LTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgRHJhZnRzIGlzIGF0IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZHJhZnRzL2N1cnJlbnQvLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIERyYWZ0 cyBpcyBhdCBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJyZW50Ly48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFm dCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVu dHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQgYnkg b3RoZXIgZG9jdW1lbnRzIGF0IGFueTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhlciBkb2N1 bWVudHMgYXQgYW55PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aW1lLiAgSXQgaXMg aW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5jZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRpbWUuICBJdCBpcyBpbmFwcHJvcHJpYXRlIHRv IHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29yayBpbiBw cm9ncmVzcy4iPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbWF0ZXJpYWwgb3Ig dG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3MuIjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDA0Ij48dGQ+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gSnVuZSAxLCAyMDIw LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBUaGlzIEludGVybmV0LURyYWZ0 IHdpbGwgZXhwaXJlIG9uIEp1bmUgMTxzcGFuIGNsYXNzPSJpbnNlcnQiPjk8L3NwYW4+LCAyMDIw LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Db3B5cmlnaHQgTm90aWNlPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+Q29weXJpZ2h0IE5vdGljZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBDb3B5cmlnaHQgKGMpIDIwMTkgSUVURiBUcnVzdCBhbmQg dGhlIHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBDb3B5cmlnaHQgKGMpIDIwMTkgSUVURiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRl bnRpZmllZCBhcyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRvY3VtZW50IGF1 dGhvcnMuICBBbGwgcmlnaHRzIHJlc2VydmVkLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGRvY3VtZW50IGF1dGhvcnMuICBBbGwgcmlnaHRzIHJlc2VydmVkLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3QgdG8gQkNQ IDc4IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2FsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgVGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYg VHJ1c3QncyBMZWdhbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgUHJvdmlzaW9ucyBS ZWxhdGluZyB0byBJRVRGIERvY3VtZW50czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVudHM8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIChodHRwczovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBp biBlZmZlY3Qgb24gdGhlIGRhdGUgb2Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAoaHR0cHM6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRo ZSBkYXRlIG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwdWJsaWNhdGlvbiBvZiB0 aGlzIGRvY3VtZW50LiAgUGxlYXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwdWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50LiAgUGxl YXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTMiIGNsYXNzPSJjaGFuZ2UiPjx0ZD48L3RkPjx0 aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSJodHRwczovL3d3 dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC0zIj48ZW0+IHBhZ2UgMywgbGlu ZSA4PHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48 dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93 d3c2LmlldGYub3JnL3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtMyI+PGVtPiBwYWdlIDMsIGxp bmUgODxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBoeXBlcnZpc29ycy4gIEhvd2V2ZXIsIHRoZSBjb25jZXB0cyBhcmUgZXF1YWxseSBhcHBsaWNh YmxlIHRvIG5vbi08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBoeXBlcnZpc29y cy4gIEhvd2V2ZXIsIHRoZSBjb25jZXB0cyBhcmUgZXF1YWxseSBhcHBsaWNhYmxlIHRvIG5vbi08 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHZpcnR1YWxpemVkIGhvc3RzIGF0dGFjaGVk IHRvIFZURVBzIGluIHN3aXRjaGVzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IHZpcnR1YWxpemVkIGhvc3RzIGF0dGFjaGVkIHRvIFZURVBzIGluIHN3aXRjaGVzLjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJbiB0aGUgYWJzZW5jZSBvZiBhIHJvdXRlciBp biB0aGUgb3ZlcmxheSwgYSBWTSBjYW4gY29tbXVuaWNhdGUgd2l0aDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIEluIHRoZSBhYnNlbmNlIG9mIGEgcm91dGVyIGluIHRoZSBvdmVy bGF5LCBhIFZNIGNhbiBjb21tdW5pY2F0ZSB3aXRoPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBhbm90aGVyIFZNIG9ubHkgaWYgdGhleSBhcmUgb24gdGhlIHNhbWUgVlhMQU4gc2VnbWVu dC4gIFZNcyBhcmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhbm90aGVyIFZN IG9ubHkgaWYgdGhleSBhcmUgb24gdGhlIHNhbWUgVlhMQU4gc2VnbWVudC4gIFZNcyBhcmU8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVuYXdhcmUgb2YgVlhMQU4gdHVubmVscyBhcyBh IFZYTEFOIHR1bm5lbCBpcyB0ZXJtaW5hdGVkIG9uIGEgVlRFUC48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICB1bmF3YXJlIG9mIFZYTEFOIHR1bm5lbHMgYXMgYSBWWExBTiB0dW5u ZWwgaXMgdGVybWluYXRlZCBvbiBhIFZURVAuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIFZURVBzIGFyZSByZXNwb25zaWJsZSBmb3IgZW5jYXBzdWxhdGluZyBhbmQgZGVjYXBz dWxhdGluZyBmcmFtZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBWVEVQcyBh cmUgcmVzcG9uc2libGUgZm9yIGVuY2Fwc3VsYXRpbmcgYW5kIGRlY2Fwc3VsYXRpbmcgZnJhbWVz PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBleGNoYW5nZWQgYW1vbmcgVk1zLjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGV4Y2hhbmdlZCBhbW9uZyBWTXMuPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDUi Pjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+QTwvc3Bhbj5iaWxpdHkgdG8gbW9u aXRvciBwYXRoIGNvbnRpbnVpdHksIGkuZS4sIHBlcmZvcm0gcHJvYWN0aXZlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlRoZSBhPC9zcGFu PmJpbGl0eSB0byBtb25pdG9yIHBhdGggY29udGludWl0eSwgaS5lLiwgcGVyZm9ybSBwcm9hY3Rp dmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNvbnRpbnVpdHkgY2hlY2sgKENDKSBm b3IgcG9pbnQtdG8tcG9pbnQgKHAycCkgVlhMQU4gdHVubmVscywgaXM8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBjb250aW51aXR5IGNoZWNrIChDQykgZm9yIHBvaW50LXRvLXBv aW50IChwMnApIFZYTEFOIHR1bm5lbHMsIGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBpbXBvcnRhbnQuICBUaGUgYXN5bmNocm9ub3VzIG1vZGUgb2YgQkZELCBhcyBkZWZpbmVkIGlu IFtSRkM1ODgwXSwgaXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpbXBvcnRh bnQuICBUaGUgYXN5bmNocm9ub3VzIG1vZGUgb2YgQkZELCBhcyBkZWZpbmVkIGluIFtSRkM1ODgw XSwgaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVzZWQgdG8gbW9uaXRvciBhIHAy cCBWWExBTiB0dW5uZWwuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXNlZCB0 byBtb25pdG9yIGEgcDJwIFZYTEFOIHR1bm5lbC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgSW4gdGhlIGNhc2Ugd2hlcmUgYSBNdWx0aWNhc3QgU2VydmljZSBOb2RlIChNU04p IChhcyBkZXNjcmliZWQgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbiB0 aGUgY2FzZSB3aGVyZSBhIE11bHRpY2FzdCBTZXJ2aWNlIE5vZGUgKE1TTikgKGFzIGRlc2NyaWJl ZCBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgU2VjdGlvbiAzLjMgb2YgW1JGQzgy OTNdKSByZXNpZGVzIGJlaGluZCBhIE5ldHdvcmsgVmlydHVhbGl6YXRpb248L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBTZWN0aW9uIDMuMyBvZiBbUkZDODI5M10pIHJlc2lkZXMg YmVoaW5kIGEgTmV0d29yayBWaXJ0dWFsaXphdGlvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgRW5kcG9pbnQgKE5WRSksIHRoZSBtZWNoYW5pc21zIGRlc2NyaWJlZCBpbiB0aGlzIGRv Y3VtZW50IGFwcGx5IGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEVuZHBv aW50IChOVkUpLCB0aGUgbWVjaGFuaXNtcyBkZXNjcmliZWQgaW4gdGhpcyBkb2N1bWVudCBhcHBs eSBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNhbiwgdGhlcmVmb3JlLCBiZSB1 c2VkIHRvIHRlc3QgdGhlIGNvbm5lY3Rpdml0eSBmcm9tIHRoZSBzb3VyY2UgTlZFPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY2FuLCB0aGVyZWZvcmUsIGJlIHVzZWQgdG8gdGVz dCB0aGUgY29ubmVjdGl2aXR5IGZyb20gdGhlIHNvdXJjZSBOVkU8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIHRvIHRoZSBNU04uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgdG8gdGhlIE1TTi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHIgaWQ9InBhcnQtNCIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFs bD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRm Lm9yZy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTQiPjxlbT4gcGFnZSA1LCBsaW5lIDExPHNw YW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNt YWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2Lmll dGYub3JnL3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtNCI+PGVtPiBwYWdlIDUsIGxpbmUgMTE8 c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgIEZpZ3VyZSAx OiBSZWZlcmVuY2UgVlhMQU4gRG9tYWluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgICAgICAgICAgICAgICAgRmlndXJlIDE6IFJlZmVyZW5jZSBWWExBTiBEb21haW48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQXQgdGhlIHNhbWUgdGltZSwgYSBzZXJ2 aWNlIGxheWVyIEJGRCBzZXNzaW9uIG1heSBiZSB1c2VkIGJldHdlZW4gdGhlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQXQgdGhlIHNhbWUgdGltZSwgYSBzZXJ2aWNlIGxheWVy IEJGRCBzZXNzaW9uIG1heSBiZSB1c2VkIGJldHdlZW4gdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICB0ZW5hbnRzIG9mIFZURVBzIElQMSBhbmQgSVAyIHRvIHByb3ZpZGUgZW5kLXRv LWVuZCBmYXVsdCBtYW5hZ2VtZW50LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IHRlbmFudHMgb2YgVlRFUHMgSVAxIGFuZCBJUDIgdG8gcHJvdmlkZSBlbmQtdG8tZW5kIGZhdWx0 IG1hbmFnZW1lbnQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJbiBzdWNoIGNhc2Us IGZvciBWVEVQcyBCRkQgQ29udHJvbCBwYWNrZXRzIG9mIHRoYXQgc2Vzc2lvbiBhcmU8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbiBzdWNoIGNhc2UsIGZvciBWVEVQcyBCRkQg Q29udHJvbCBwYWNrZXRzIG9mIHRoYXQgc2Vzc2lvbiBhcmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGluZGlzdGluZ3Vpc2hhYmxlIGZyb20gZGF0YSBwYWNrZXRzLjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGluZGlzdGluZ3Vpc2hhYmxlIGZyb20gZGF0YSBwYWNr ZXRzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBBcyBwZXIgU2VjdGlvbiA0 LCB0aGUgaW5uZXIgZGVzdGluYXRpb24gSVAgYWRkcmVzcyBTSE9VTEQgYmUgc2V0IHRvPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQXMgcGVyIFNlY3Rpb24gNCwgdGhlIGlubmVy IGRlc3RpbmF0aW9uIElQIGFkZHJlc3MgU0hPVUxEIGJlIHNldCB0bzwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwNiI+PHRkPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBv bmUgb2YgdGhlIGxvb3BiYWNrIGFkZHJlc3NlcyA8c3BhbiBjbGFzcz0iZGVsZXRlIj4oMTI3Lzg8 L3NwYW4+IHJhbmdlIGZvciBJUHY0IDxzcGFuIGNsYXNzPSJkZWxldGUiPmFuZDwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgb25lIG9mIHRoZSBsb29wYmFjayBhZGRy ZXNzZXMgPHNwYW4gY2xhc3M9Imluc2VydCI+ZnJvbSAxMjcvODwvc3Bhbj4gcmFuZ2UgZm9yIElQ djQgPHNwYW4gY2xhc3M9Imluc2VydCI+b3IgdG8gb25lIG9mPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAwOjA6MDowOjA6RkZGRjo3 RjAwOjAvMTA0PC9zcGFuPiByYW5nZSBmb3IgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+SVB2NikuPC9z cGFuPiAgVGhlcmUgY291bGQgYmUgYSBmaXJld2FsbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBJUHY0LW1hcHBlZCBJUHY0IGxvb3BiYWNr IGFkZHJlc3NlcyBmcm9tIDo6ZmZmZjoxMjcuMC4wLjAvMTA0PC9zcGFuPiByYW5nZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBjb25maWd1cmVkIG9uIFZURVAgdG8gYmxvY2sgbG9v cGJhY2sgYWRkcmVzc2VzIGlmIHNldCBhcyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgZm9yIDxzcGFuIGNsYXNzPSJpbnNlcnQiPklQdjYuPC9zcGFuPiAgVGhlcmUgY291 bGQgYmUgYSBmaXJld2FsbCBjb25maWd1cmVkIG9uIFZURVAgdG8gYmxvY2s8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgZGVzdGluYXRpb24gSVAgaW4gdGhlIGlubmVyIElQIGhlYWRl ci4gIEl0IGlzIFJFQ09NTUVOREVEIHRvIGFsbG93PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgIGxvb3BiYWNrIGFkZHJlc3NlcyBpZiBzZXQgYXMgdGhlIGRlc3RpbmF0aW9uIElQ IGluIHRoZSBpbm5lciBJUDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBhZGRyZXNz ZXMgZnJvbSB0aGUgbG9vcGJhY2sgcmFuZ2UgdGhyb3VnaCBhIGZpcmV3YWxsIG9ubHkgaWYgaXQg aXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgaGVhZGVyLiAgSXQgaXMgUkVD T01NRU5ERUQgdG8gYWxsb3cgYWRkcmVzc2VzIGZyb20gdGhlIGxvb3BiYWNrIHJhbmdlPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHVzZWQgYXMgdGhlIGRlc3RpbmF0aW9uIElQIGFk ZHJlc3MgaW4gdGhlIGlubmVyIElQIGhlYWRlciwgYW5kIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICB0aHJvdWdoIGEgZmlyZXdhbGwgb25seSBpZiBpdCBpcyB1c2VkIGFz IHRoZSBkZXN0aW5hdGlvbiBJUCBhZGRyZXNzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIGRlc3RpbmF0aW9uIFVEUCBwb3J0IGlzIHNldCB0byAzNzg0IFtSRkM1ODgxXS48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgaW4gdGhlIGlubmVyIElQIGhlYWRlciwgYW5k IHRoZSBkZXN0aW5hdGlvbiBVRFAgcG9ydCBpcyBzZXQgdG8gMzc4NDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgW1JGQzU4 ODFdLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij40LiAgQkZEIFBhY2tldCBUcmFu c21pc3Npb24gb3ZlciBWWExBTiBUdW5uZWw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij40LiAgQkZEIFBhY2tldCBUcmFuc21pc3Npb24gb3ZlciBWWExBTiBUdW5uZWw8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwNyI+PHRk PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICBCRkQgcGFja2V0IE1VU1QgYmUgZW5jYXBzdWxhdGVkIGFuZCBzZW50IHRvIGEg cmVtb3RlIFZURVAgYXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgQkZEIHBh Y2tldDxzcGFuIGNsYXNzPSJpbnNlcnQiPnM8L3NwYW4+IE1VU1QgYmUgZW5jYXBzdWxhdGVkIGFu ZCBzZW50IHRvIGEgcmVtb3RlIFZURVAgYXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IGV4cGxhaW5lZCBpbiB0aGlzIHNlY3Rpb24uICBJbXBsZW1lbnRhdGlvbnMgU0hPVUxEIGVuc3Vy ZSB0aGF0IHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGV4cGxhaW5lZCBp biB0aGlzIHNlY3Rpb24uICBJbXBsZW1lbnRhdGlvbnMgU0hPVUxEIGVuc3VyZSB0aGF0IHRoZTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQkZEIHBhY2tldHMgZm9sbG93IHRoZSBzYW1l IGxvb2t1cCBwYXRoIGFzIFZYTEFOIGRhdGEgcGFja2V0cyB3aXRoaW48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBCRkQgcGFja2V0cyBmb2xsb3cgdGhlIHNhbWUgbG9va3VwIHBh dGggYXMgVlhMQU4gZGF0YSBwYWNrZXRzIHdpdGhpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgdGhlIHNlbmRlciBzeXN0ZW0uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgdGhlIHNlbmRlciBzeXN0ZW0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IEJGRCBwYWNrZXRzIGFyZSBlbmNhcHN1bGF0ZWQgaW4gVlhMQU4gYXMgZGVzY3JpYmVkIGJlbG93 LiAgVGhlIFZYTEFOPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQkZEIHBhY2tl dHMgYXJlIGVuY2Fwc3VsYXRlZCBpbiBWWExBTiBhcyBkZXNjcmliZWQgYmVsb3cuICBUaGUgVlhM QU48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHBhY2tldCBmb3JtYXQgaXMgZGVmaW5l ZCBpbiBTZWN0aW9uIDUgb2YgW1JGQzczNDhdLiAgVGhlIE91dGVyIElQL1VEUDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHBhY2tldCBmb3JtYXQgaXMgZGVmaW5lZCBpbiBTZWN0 aW9uIDUgb2YgW1JGQzczNDhdLiAgVGhlIE91dGVyIElQL1VEUDwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgYW5kIFZYTEFOIGhlYWRlcnMgTVVTVCBiZSBlbmNvZGVkIGJ5IHRoZSBzZW5k ZXIgYXMgZGVmaW5lZCBpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGFuZCBW WExBTiBoZWFkZXJzIE1VU1QgYmUgZW5jb2RlZCBieSB0aGUgc2VuZGVyIGFzIGRlZmluZWQgaW48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM3MzQ4XS48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDNzM0OF0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgMCAgICAgICAgICAgICAgICAgICAxICAgICAgICAgICAgICAgICAgIDIgICAg ICAgICAgICAgICAgICAgMzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgMCAg ICAgICAgICAgICAgICAgICAxICAgICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAgICAg MzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9InBh cnQtNSIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFu Z2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9yZmNkaWZmL3JmY2Rp ZmYucHlodCNwYXJ0LTUiPjxlbT4gcGFnZSA3LCBsaW5lIDE4PHNwYW4gY2xhc3M9ImhpZGUiPiDC tjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNo YW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYub3JnL3JmY2RpZmYvcmZj ZGlmZi5weWh0I3BhcnQtNSI+PGVtPiBwYWdlIDcsIGxpbmUgMTg8c3BhbiBjbGFzcz0iaGlkZSI+ IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgY29uZmlndXJlZCwgb3Ig aXQgTUFZIGJlIGxlYXJuZWQgdmlhIGEgY29udHJvbCBwbGFuZSBwcm90b2NvbC48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBjb25maWd1cmVkLCBvciBpdCBNQVkgYmUg bGVhcm5lZCB2aWEgYSBjb250cm9sIHBsYW5lIHByb3RvY29sLjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgICAgVGhlIGRldGFpbHMgb2YgaG93IHRoZSBNQUMgYWRkcmVzcyBpcyBv YnRhaW5lZCBhcmUgb3V0c2lkZSB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgICBUaGUgZGV0YWlscyBvZiBob3cgdGhlIE1BQyBhZGRyZXNzIGlzIG9idGFpbmVkIGFy ZSBvdXRzaWRlIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgc2NvcGUg b2YgdGhpcyBkb2N1bWVudC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAg ICBzY29wZSBvZiB0aGlzIGRvY3VtZW50LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgICAgICBTb3VyY2UgTUFDOiBNQUMgYWRkcmVzcyBhc3NvY2lhdGVkIHdpdGggdGhlIG9y aWdpbmF0aW5nIFZURVA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBT b3VyY2UgTUFDOiBNQUMgYWRkcmVzcyBhc3NvY2lhdGVkIHdpdGggdGhlIG9yaWdpbmF0aW5nIFZU RVA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgSVAgaGVhZGVyOjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIElQIGhlYWRlcjo8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgRGVzdGluYXRpb24gSVA6IElQIGFkZHJlc3Mg TVVTVCBOT1QgYmUgb2Ygb25lIG9mIHRlbmFudCdzIElQPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICAgICAgRGVzdGluYXRpb24gSVA6IElQIGFkZHJlc3MgTVVTVCBOT1QgYmUg b2Ygb25lIG9mIHRlbmFudCdzIElQPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAg ICBhZGRyZXNzZXMuICBUaGUgSVAgYWRkcmVzcyBTSE9VTEQgYmUgc2VsZWN0ZWQgZnJvbSB0aGUg cmFuZ2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBhZGRyZXNzZXMu ICBUaGUgSVAgYWRkcmVzcyBTSE9VTEQgYmUgc2VsZWN0ZWQgZnJvbSB0aGUgcmFuZ2U8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDgiPjx0ZD48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgICAgICAgMTI3LzggZm9yIElQdjQsIGZvciBJUHY2IC0gZnJvbSB0aGUgcmFuZ2U8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgMTI3LzggZm9yIElQdjQs IGZvciBJUHY2IC0gZnJvbSB0aGUgcmFuZ2UgPHNwYW4gY2xhc3M9Imluc2VydCI+OjpmZmZmOjEy Ny4wLjAuMC8xMDQuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAg ICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4wOjA6MDowOjA6RkZGRjo3RjAwOjAvMTA0Ljwvc3Bhbj4g IEFsdGVybmF0aXZlbHksIHRoZSBkZXN0aW5hdGlvbiBJUDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICAgICAgICBBbHRlcm5hdGl2ZWx5LCB0aGUgZGVzdGluYXRpb24gSVAgYWRk cmVzcyBNQVkgYmUgc2V0IHRvIFZURVAnczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgICAgICBhZGRyZXNzIE1BWSBiZSBzZXQgdG8gVlRFUCdzIElQIGFkZHJlc3MuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgIElQIGFkZHJlc3MuPC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIFNvdXJjZSBJUDogSVAgYWRkcmVzcyBvZiB0 aGUgb3JpZ2luYXRpbmcgVlRFUC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgICBTb3VyY2UgSVA6IElQIGFkZHJlc3Mgb2YgdGhlIG9yaWdpbmF0aW5nIFZURVAuPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIFRUTCBvciBIb3AgTGltaXQ6IE1V U1QgYmUgc2V0IHRvIDEgdG8gZW5zdXJlIHRoYXQgdGhlIEJGRDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgICAgIFRUTCBvciBIb3AgTGltaXQ6IE1VU1QgYmUgc2V0IHRvIDEg dG8gZW5zdXJlIHRoYXQgdGhlIEJGRDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg ICAgcGFja2V0IGlzIG5vdCByb3V0ZWQgd2l0aGluIHRoZSBMYXllciAzIHVuZGVybGF5IG5ldHdv cmsuICBUaGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgcGFja2V0 IGlzIG5vdCByb3V0ZWQgd2l0aGluIHRoZSBMYXllciAzIHVuZGVybGF5IG5ldHdvcmsuICBUaGlz PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICBhZGRyZXNzZXMgdGhlIHNjZW5h cmlvIHdoZW4gdGhlIGlubmVyIElQIGRlc3RpbmF0aW9uIGFkZHJlc3MgaXM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBhZGRyZXNzZXMgdGhlIHNjZW5hcmlvIHdoZW4g dGhlIGlubmVyIElQIGRlc3RpbmF0aW9uIGFkZHJlc3MgaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgICAgIG9mIFZYTEFOIGdhdGV3YXkgYW5kIHRoZXJlIGlzIGEgcm91dGVyIGlu IHVuZGVybGF5IHdoaWNoPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAg b2YgVlhMQU4gZ2F0ZXdheSBhbmQgdGhlcmUgaXMgYSByb3V0ZXIgaW4gdW5kZXJsYXkgd2hpY2g8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIHJlbW92ZXMgdGhlIFZYTEFOIGhl YWRlciwgdGhlbiBpdCBpcyBwb3NzaWJsZSB0byByb3V0ZSB0aGU8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgICAgICByZW1vdmVzIHRoZSBWWExBTiBoZWFkZXIsIHRoZW4gaXQg aXMgcG9zc2libGUgdG8gcm91dGUgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg ICAgICBwYWNrZXQgYXMgVlhMQU4gIGdhdGV3YXkgYWRkcmVzcyBpcyByb3V0YWJsZSBhZGRyZXNz LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIHBhY2tldCBhcyBWWExB TiAgZ2F0ZXdheSBhZGRyZXNzIGlzIHJvdXRhYmxlIGFkZHJlc3MuPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTYiIGNsYXNzPSJj aGFuZ2UiPjx0ZD48L3RkPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48 YSBocmVmPSJodHRwczovL3d3dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC02 Ij48ZW0+IHBhZ2UgOCwgbGluZSA1MjxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48 L2E+PC90aD48dGg+IDwvdGg+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxs PjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0 LTYiPjxlbT4gcGFnZSA4LCBsaW5lIDUyPHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2Vt PjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBkb2N1bWVudCByZXF1aXJlcyBzZXR0aW5nIHRoZSBp bm5lciBJUCBUVEwgdG8gMSwgd2hpY2ggY291bGQgYmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBUaGUgZG9jdW1lbnQgcmVxdWlyZXMgc2V0dGluZyB0aGUgaW5uZXIgSVAgVFRM IHRvIDEsIHdoaWNoIGNvdWxkIGJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB1c2Vk IGFzIGEgRERvUyBhdHRhY2sgdmVjdG9yLiAgVGh1cyB0aGUgaW1wbGVtZW50YXRpb24gTVVTVCBo YXZlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXNlZCBhcyBhIEREb1MgYXR0 YWNrIHZlY3Rvci4gIFRodXMgdGhlIGltcGxlbWVudGF0aW9uIE1VU1QgaGF2ZTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhyb3R0bGluZyBpbiBwbGFjZSB0byBjb250cm9sIHRoZSBy YXRlIG9mIEJGRCBDb250cm9sIHBhY2tldHMgc2VudDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIHRocm90dGxpbmcgaW4gcGxhY2UgdG8gY29udHJvbCB0aGUgcmF0ZSBvZiBCRkQg Q29udHJvbCBwYWNrZXRzIHNlbnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRvIHRo ZSBjb250cm9sIHBsYW5lLiAgT24gdGhlIG90aGVyIGhhbmQsIG92ZXItYWdncmVzc2l2ZSB0aHJv dHRsaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdG8gdGhlIGNvbnRyb2wg cGxhbmUuICBPbiB0aGUgb3RoZXIgaGFuZCwgb3Zlci1hZ2dyZXNzaXZlIHRocm90dGxpbmc8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG9mIEJGRCBDb250cm9sIHBhY2tldHMgbWF5IGJl Y29tZSB0aGUgY2F1c2Ugb2YgdGhlIGluYWJpbGl0eSB0byBmb3JtPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgb2YgQkZEIENvbnRyb2wgcGFja2V0cyBtYXkgYmVjb21lIHRoZSBj YXVzZSBvZiB0aGUgaW5hYmlsaXR5IHRvIGZvcm08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIGFuZCBtYWludGFpbiBCRkQgc2Vzc2lvbiBhdCBzY2FsZS4gIEhlbmNlLCB0aHJvdHRsaW5n IG9mIEJGRCBDb250cm9sPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYW5kIG1h aW50YWluIEJGRCBzZXNzaW9uIGF0IHNjYWxlLiAgSGVuY2UsIHRocm90dGxpbmcgb2YgQkZEIENv bnRyb2w8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHBhY2tldHMgU0hPVUxEIGJlIGFk anVzdGVkIHRvIHBlcm1pdCBCRkQgdG8gd29yayBhY2NvcmRpbmcgdG8gaXRzPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcGFja2V0cyBTSE9VTEQgYmUgYWRqdXN0ZWQgdG8gcGVy bWl0IEJGRCB0byB3b3JrIGFjY29yZGluZyB0byBpdHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIHByb2NlZHVyZXMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcHJv Y2VkdXJlcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVu dCByZWNvbW1lbmRzIHVzaW5nIGFuIGFkZHJlc3MgZnJvbSB0aGUgSW50ZXJuYWwgaG9zdDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoaXMgZG9jdW1lbnQgcmVjb21tZW5kcyB1 c2luZyBhbiBhZGRyZXNzIGZyb20gdGhlIEludGVybmFsIGhvc3Q8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDkiPjx0ZD48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgbG9v cGJhY2sgYWRkcmVzc2VzIDxzcGFuIGNsYXNzPSJkZWxldGUiPigxMjcvODwvc3Bhbj4gcmFuZ2Ug Zm9yIElQdjQgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YW5kPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICBsb29wYmFjayBhZGRyZXNzZXMgPHNwYW4gY2xhc3M9Imluc2Vy dCI+MTI3Lzg8L3NwYW4+IHJhbmdlIGZvciBJUHY0IDxzcGFuIGNsYXNzPSJpbnNlcnQiPm9yIGFu IElQNC1tYXBwZWQgSVB2NDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNw YW4gY2xhc3M9ImRlbGV0ZSI+ICAgMDowOjA6MDowOkZGRkY6N0YwMDowLzEwNDwvc3Bhbj4gcmFu Z2UgZm9yIDxzcGFuIGNsYXNzPSJkZWxldGUiPklQdjYpPC9zcGFuPiBhcyB0aGUgZGVzdGluYXRp b24gSVA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+ICAgbG9vcGJhY2sgYWRkcmVzcyBmcm9tIDo6ZmZmZjoxMjcuMC4wLjAvMTA0PC9zcGFuPiBy YW5nZSBmb3IgPHNwYW4gY2xhc3M9Imluc2VydCI+SVB2Njwvc3Bhbj4gYXMgdGhlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGFkZHJlc3MgaW4gdGhlIGlubmVyIElQIGhlYWRlci4g IFVzaW5nIHN1Y2ggYWRkcmVzcyBwcmV2ZW50cyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgZGVzdGluYXRpb24gSVAgYWRkcmVzcyBpbiB0aGUgaW5uZXIgSVAgaGVhZGVy LiAgVXNpbmcgc3VjaCBhZGRyZXNzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGZv cndhcmRpbmcgb2YgdGhlIGVuY2Fwc3VsYXRlZCBCRkQgY29udHJvbCBtZXNzYWdlIGJ5IGEgdHJh bnNpZW50PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHByZXZlbnRzIHRoZSBm b3J3YXJkaW5nIG9mIHRoZSBlbmNhcHN1bGF0ZWQgQkZEIGNvbnRyb2wgbWVzc2FnZSBieSBhPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIG5vZGUgaW4gY2FzZSB0aGUgVlhMQU4gdHVu bmVsIGlzIGJyb2tlbiBhcyBhY2NvcmRpbmcgdG8gW1JGQzE4MTJdOjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICB0cmFuc2llbnQgbm9kZSBpbiBjYXNlIHRoZSBWWExBTiB0dW5u ZWwgaXMgYnJva2VuIGFzIGFjY29yZGluZyB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgW1JGQzE4MTJdOjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBBIHJvdXRlciBTSE9VTEQgTk9UIGZvcndh cmQsIGV4Y2VwdCBvdmVyIGEgbG9vcGJhY2sgaW50ZXJmYWNlLCBhbnk8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBBIHJvdXRlciBTSE9VTEQgTk9UIGZvcndhcmQsIGV4Y2Vw dCBvdmVyIGEgbG9vcGJhY2sgaW50ZXJmYWNlLCBhbnk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgIHBhY2tldCB0aGF0IGhhcyBhIGRlc3RpbmF0aW9uIGFkZHJlc3Mgb24gbmV0d29y ayAxMjcuICBBIHJvdXRlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIHBh Y2tldCB0aGF0IGhhcyBhIGRlc3RpbmF0aW9uIGFkZHJlc3Mgb24gbmV0d29yayAxMjcuICBBIHJv dXRlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgTUFZIGhhdmUgYSBzd2l0Y2gg dGhhdCBhbGxvd3MgdGhlIG5ldHdvcmsgbWFuYWdlciB0byBkaXNhYmxlIHRoZXNlPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgTUFZIGhhdmUgYSBzd2l0Y2ggdGhhdCBhbGxv d3MgdGhlIG5ldHdvcmsgbWFuYWdlciB0byBkaXNhYmxlIHRoZXNlPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICAgICBjaGVja3MuICBJZiBzdWNoIGEgc3dpdGNoIGlzIHByb3ZpZGVkLCBp dCBNVVNUIGRlZmF1bHQgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBj aGVja3MuICBJZiBzdWNoIGEgc3dpdGNoIGlzIHByb3ZpZGVkLCBpdCBNVVNUIGRlZmF1bHQgdG88 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIHBlcmZvcm1pbmcgdGhlIGNoZWNrcy48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBwZXJmb3JtaW5nIHRoZSBjaGVj a3MuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIElmIHRoZSBpbXBsZW1lbnRh dGlvbiBzdXBwb3J0cyBlc3RhYmxpc2hpbmcgbXVsdGlwbGUgQkZEIHNlc3Npb25zPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSWYgdGhlIGltcGxlbWVudGF0aW9uIHN1cHBvcnRz IGVzdGFibGlzaGluZyBtdWx0aXBsZSBCRkQgc2Vzc2lvbnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGJldHdlZW4gdGhlIHNhbWUgcGFpciBvZiBWVEVQcywgdGhlcmUgU0hPVUxEIGJl IGEgbWVjaGFuaXNtIHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYmV0d2Vl biB0aGUgc2FtZSBwYWlyIG9mIFZURVBzLCB0aGVyZSBTSE9VTEQgYmUgYSBtZWNoYW5pc20gdG88 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNvbnRyb2wgdGhlIG1heGltdW0gbnVtYmVy IG9mIHN1Y2ggc2Vzc2lvbnMgdGhhdCBjYW4gYmUgYWN0aXZlIGF0IHRoZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNvbnRyb2wgdGhlIG1heGltdW0gbnVtYmVyIG9mIHN1Y2gg c2Vzc2lvbnMgdGhhdCBjYW4gYmUgYWN0aXZlIGF0IHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KCiAgICAgPHRyPjx0ZD48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQ+PC90ZD48L3RyPgogICAgIDx0ciBpZD0i ZW5kIiBiZ2NvbG9yPSJncmF5Ij48dGggY29sc3Bhbj0iNSIgYWxpZ249ImNlbnRlciI+Jm5ic3A7 RW5kIG9mIGNoYW5nZXMuIDkgY2hhbmdlIGJsb2Nrcy4mbmJzcDs8L3RoPjwvdHI+CiAgICAgPHRy IGNsYXNzPSJzdGF0cyI+PHRkPjwvdGQ+PHRoPjxpPjIxIGxpbmVzIGNoYW5nZWQgb3IgZGVsZXRl ZDwvaT48L3RoPjx0aD48aT4gPC9pPjwvdGg+PHRoPjxpPjIzIGxpbmVzIGNoYW5nZWQgb3IgYWRk ZWQ8L2k+PC90aD48dGQ+PC90ZD48L3RyPgogICAgIDx0cj48dGQgY29sc3Bhbj0iNSIgYWxpZ249 ImNlbnRlciIgY2xhc3M9InNtYWxsIj48YnI+VGhpcyBodG1sIGRpZmYgd2FzIHByb2R1Y2VkIGJ5 IHJmY2RpZmYgMS40Ny4gVGhlIGxhdGVzdCB2ZXJzaW9uIGlzIGF2YWlsYWJsZSBmcm9tIDxhIGhy ZWY9Imh0dHA6Ly93d3cudG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi8iPmh0dHA6Ly90b29s cy5pZXRmLm9yZy90b29scy9yZmNkaWZmLzwvYT4gPC90ZD48L3RyPgogICA8L3Rib2R5PjwvdGFi bGU+CiAgIAogICAKPC9ib2R5PjwvaHRtbD4= --000000000000611e8d0599ee88ef-- From nobody Wed Dec 18 06:31:27 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF9F912006F; Tue, 17 Dec 2019 16:31:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.597 X-Spam-Level: X-Spam-Status: No, score=-0.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_COMMENT_SAVED_URL=1.391, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KkzwHRbcH4bN; Tue, 17 Dec 2019 16:31:08 -0800 (PST) Received: from mail-lj1-x236.google.com (mail-lj1-x236.google.com [IPv6:2a00:1450:4864:20::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84F16120033; Tue, 17 Dec 2019 16:31:07 -0800 (PST) Received: by mail-lj1-x236.google.com with SMTP id m6so106318ljc.1; Tue, 17 Dec 2019 16:31:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=AqiUhCUwfBkbWROk6r06ZKBpYTs0ev9uuePnwX0X+Yo=; b=imVPzoqF/gDmzF05IOZ+WdC1GgvKquqXEy213MnEI1LgAv+l4A9F5dr1xC8rGfnk4A q72q6fs+2m6k8vbB1+iXY+NNkjBymozsmWNPbPP10vyVO79U46NOIIwzulR0kaoB3B17 z7vp2nigH5mFmo3Sp7WE7vNL03hjZEPnCCs25xAAmKE/L4H7yOk4TjQ75ON0Bs/UNhHw 1HRd5TkQGDQl64YmtE6kww3FzZRp6gjfhGp4362ysXUiYUF5jYrMAVvSTzzgscm2URtu FBZA5l4/en5oGH6nSyyRL0DgoafIlwL6RF9GKF/UYpOYYCixLemVEoHLNgpnFz0UzCiu 6Jwg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=AqiUhCUwfBkbWROk6r06ZKBpYTs0ev9uuePnwX0X+Yo=; b=cxMzBzLRYsR12Wi9nNtFKO6ENVnX1T4QKFVb0URclc1SyFuagfVwvz+7V+ScpOgkb2 bEOZxNRWeUe0HG71nrl0DQu+249Mkq562IvEtCSI4m9eeBgbqL/WnqLPcs+UbGqjabqn Bt2exXdzzhKmqmen6Y2pBiTYSN+33vtFdLPyi0hoKqeVT3kPNmaO41cIL17KBoHrmX7F K96DACOMKwUedp17yBaXRVoVYlwJCHrw8RMNxgmzbDL6ehp5kj9OgzIL4aJ3DeGPFlQu bEfZNEPtMzcE72Sc7PaPUOgI2WrdyIn0XuxeWfjA/FJBK3q49PSz2jTWdP8QyCO/iXJ6 6DhA== X-Gm-Message-State: APjAAAUd62irJU/eBo5T845MXSjXsX2X1fmbWQzrL+PutyIKHGqewmer R1QjsLzfzizbGrZreN5xJfrwG883ucvJ6zOIfJY= X-Google-Smtp-Source: APXvYqyu172A9Co5NLYQ9Ziquo0uBN8GKc+dau0hezTTFFpTW72X4Jrad53ib79mY5yW+Xxrds2GtSZsPSF5Y6SjFH8= X-Received: by 2002:a2e:b0db:: with SMTP id g27mr432969ljl.74.1576629065388; Tue, 17 Dec 2019 16:31:05 -0800 (PST) MIME-Version: 1.0 References: <157659353960.26404.15894323280421366020.idtracker@ietfa.amsl.com> In-Reply-To: <157659353960.26404.15894323280421366020.idtracker@ietfa.amsl.com> From: Greg Mirsky Date: Tue, 17 Dec 2019 16:30:54 -0800 Message-ID: Subject: Re: Warren Kumari's No Objection on draft-ietf-bfd-vxlan-09: (with COMMENT) To: Warren Kumari Cc: The IESG , draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, rtg-bfd WG , Juergen Schoenwaelder Content-Type: multipart/mixed; boundary="00000000000062b1ef0599ef8fcc" Archived-At: X-Mailman-Approved-At: Wed, 18 Dec 2019 06:31:13 -0800 X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Dec 2019 00:31:12 -0000 --00000000000062b1ef0599ef8fcc Content-Type: multipart/alternative; boundary="00000000000062b1ed0599ef8fca" --00000000000062b1ed0599ef8fca Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Warren, thank you for the review. I've updated the representation of IPv6 addresses to follow RFC 5952 and the reference to IPv4-mapped IPv4 loopback addresses range per recommendations from Adam Roach. Attached, please find the diff that highlights the updates made in the working version of the draft. As to the suggestion made by Jurgen in his first review, would changing the title of the section to Acronyms and Abbreviations make the scope of that section more clear? Regards, Greg On Tue, Dec 17, 2019 at 6:39 AM Warren Kumari via Datatracker < noreply@ietf.org> wrote: > Warren Kumari has entered the following ballot position for > draft-ietf-bfd-vxlan-09: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > I support Benjamin and Eric's DISCUSSES - I considered holding a DISCUSS > on the > "loopback address" terminology and formatting (which was also noted in th= e > excellent OpsDir review by J=C3=BCrgen Sch=C3=B6nw=C3=A4lder), but think = that Eric can > carry > it. > > In addition, like Jurgen, I think it would be helpful to have pointers to > where > terms are defined - the "Terminology" section isn't really terminology, b= ut > rather just an acronym expansion section. > > > --00000000000062b1ed0599ef8fca Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Warren,
thank you for the review. = I've updated the representation of IPv6 addresses to follow RFC 5952 an= d the reference to IPv4-mapped IPv4 loopback addresses range per recommenda= tions from Adam Roach. Attached, please find the diff that highlights the u= pdates made in the working version of the draft.
As to the sugges= tion made by Jurgen in his first review, would changing the title of the se= ction to Acronyms and Abbreviations make the scope of that section more cle= ar?

Regards,
Greg

On Tue, Dec 17, 2= 019 at 6:39 AM Warren Kumari via Datatracker <noreply@ietf.org> wrote:
Warren Kumari has entered the following ballot po= sition for
draft-ietf-bfd-vxlan-09: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/s= tatement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-bf= d-vxlan/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

I support Benjamin and Eric's DISCUSSES - I considered holding a DISCUS= S on the
"loopback address" terminology and formatting (which was also not= ed in the
excellent OpsDir review by J=C3=BCrgen Sch=C3=B6nw=C3=A4lder), but think th= at Eric can carry
it.

In addition, like Jurgen, I think it would be helpful to have pointers to w= here
terms are defined - the "Terminology" section isn't really te= rminology, but
rather just an acronym expansion section.


--00000000000062b1ed0599ef8fca-- --00000000000062b1ef0599ef8fcc Content-Type: text/html; charset="UTF-8"; name="Diff_ draft-ietf-bfd-vxlan-09.txt - draft-ietf-bfd-vxlan-10.txt.html" Content-Disposition: attachment; filename="Diff_ draft-ietf-bfd-vxlan-09.txt - draft-ietf-bfd-vxlan-10.txt.html" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_k4ak6h3u0 PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h bC5kdGQiPgo8IS0tIHNhdmVkIGZyb20gdXJsPSgwMDQyKWh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9y ZmNkaWZmL3JmY2RpZmYucHlodCAtLT4KPGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5 OTkveGh0bWwiIGNsYXNzPSJncl9fd3d3Nl9pZXRmX29yZyI+PGhlYWQ+PG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgiPiAKICAg CiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1TdHlsZS1UeXBlIiBjb250ZW50PSJ0ZXh0L2Nz cyI+IAogIDx0aXRsZT5EaWZmOiBkcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQgLSBkcmFmdC1p ZXRmLWJmZC12eGxhbi0xMC50eHQ8L3RpdGxlPiAKICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAK ICAgIGJvZHkgICAgeyBtYXJnaW46IDAuNGV4OyBtYXJnaW4tcmlnaHQ6IGF1dG87IH0gCiAgICB0 ciAgICAgIHsgfSAKICAgIHRkICAgICAgeyB3aGl0ZS1zcGFjZTogcHJlOyBmb250LWZhbWlseTog bW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBmb250LXNpemU6IDAuODZlbTt9IAogICAg dGggICAgICB7IGZvbnQtc2l6ZTogMC44NmVtOyB9IAogICAgLnNtYWxsICB7IGZvbnQtc2l6ZTog MC42ZW07IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9udC1mYW1pbHk6IFZlcmRhbmEsIEhlbHZldGlj YSwgc2Fucy1zZXJpZjsgfSAKICAgIC5sZWZ0ICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9 IAogICAgLnJpZ2h0ICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IH0gCiAgICAuZGlmZiAgIHsg YmFja2dyb3VuZC1jb2xvcjogI0NDRjsgfSAKICAgIC5sYmxvY2sgeyBiYWNrZ3JvdW5kLWNvbG9y OiAjQkZCOyB9IAogICAgLnJibG9jayB7IGJhY2tncm91bmQtY29sb3I6ICNGRjg7IH0gCiAgICAu aW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhGRjsgfSAKICAgIC5kZWxldGUgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjQUNGOyB9IAogICAgLnZvaWQgICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkI7 IH0gCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAKICAgIC5saW5lYnIg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAogICAgLmxpbmVubyB7IGNvbG9yOiByZWQ7IGJh Y2tncm91bmQtY29sb3I6ICNGRkY7IGZvbnQtc2l6ZTogMC43ZW07IHRleHQtYWxpZ246IHJpZ2h0 OyBwYWRkaW5nOiAwIDJweDsgfSAKICAgIC5lbGlwc2lzeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFB OyB9IAogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjREREOyB9IAogICAgLnJp Z2h0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAKICAgIC5sYmxvY2sgLmNvbnQg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IAogICAgLnJibG9jayAuY29udCB7IGJhY2tncm91 bmQtY29sb3I6ICNERDY7IH0gCiAgICAuaW5zZXJ0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjog IzBERDsgfSAKICAgIC5kZWxldGUgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOEFEOyB9IAog ICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0aCB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7 IHBhZGRpbmc6IDJweCAwOyB9IAogICAgc3Bhbi5oaWRlIHsgZGlzcGxheTogbm9uZTsgY29sb3I6 ICNhYWE7fSAgICBhOmhvdmVyIHNwYW4geyBkaXNwbGF5OiBpbmxpbmU7IH0gICAgdHIuY2hhbmdl IHsgYmFja2dyb3VuZC1jb2xvcjogZ3JheTsgfSAKICAgIHRyLmNoYW5nZSBhIHsgdGV4dC1kZWNv cmF0aW9uOiBub25lOyBjb2xvcjogYmxhY2sgfSAKICA8L3N0eWxlPiAKICAgICA8c2NyaXB0Pgp2 YXIgY2h1bmtfaW5kZXggPSAwOwp2YXIgb2xkX2NodW5rID0gbnVsbDsKCmZ1bmN0aW9uIGZvcm1h dF9jaHVuayhpbmRleCkgewogICAgdmFyIHByZWZpeCA9ICJkaWZmIjsKICAgIHZhciBzdHIgPSBp bmRleC50b1N0cmluZygpOwogICAgZm9yICh4PTA7IHg8KDQtc3RyLmxlbmd0aCk7ICsreCkgewog ICAgICAgIHByZWZpeCs9JzAnOwogICAgfQogICAgcmV0dXJuIHByZWZpeCArIHN0cjsKfQoKZnVu Y3Rpb24gZmluZF9jaHVuayhuKXsKICAgIHJldHVybiBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCd0 cltpZCQ9IicgKyBuICsgJyJdJyk7Cn0KCmZ1bmN0aW9uIGNoYW5nZV9jaHVuayhvZmZzZXQpIHsK ICAgIHZhciBpbmRleCA9IGNodW5rX2luZGV4ICsgb2Zmc2V0OwogICAgdmFyIG5ld19zdHI7CiAg ICB2YXIgbmV3X2NodW5rOwoKICAgIG5ld19zdHIgPSBmb3JtYXRfY2h1bmsoaW5kZXgpOwogICAg bmV3X2NodW5rID0gZmluZF9jaHVuayhuZXdfc3RyKTsKICAgIGlmICghbmV3X2NodW5rKSB7CiAg ICAgICAgcmV0dXJuOwogICAgfQogICAgaWYgKG9sZF9jaHVuaykgewogICAgICAgIG9sZF9jaHVu ay5zdHlsZS5vdXRsaW5lID0gIiI7CiAgICB9CiAgICBvbGRfY2h1bmsgPSBuZXdfY2h1bms7CiAg ICBvbGRfY2h1bmsuc3R5bGUub3V0bGluZSA9ICIxcHggc29saWQgcmVkIjsKICAgIHdpbmRvdy5s b2NhdGlvbi5yZXBsYWNlKCIjIiArIG5ld19zdHIpCiAgICB3aW5kb3cuc2Nyb2xsQnkoMCwtMTAw KTsKICAgIGNodW5rX2luZGV4ID0gaW5kZXg7Cn0KCmRvY3VtZW50Lm9ua2V5ZG93biA9IGZ1bmN0 aW9uKGUpIHsKICAgIHN3aXRjaCAoZS5rZXlDb2RlKSB7CiAgICBjYXNlIDc4OgogICAgICAgIGNo YW5nZV9jaHVuaygxKTsKICAgICAgICBicmVhazsKICAgIGNhc2UgODA6CiAgICAgICAgY2hhbmdl X2NodW5rKC0xKTsKICAgICAgICBicmVhazsKICAgIH0KfTsKICAgPC9zY3JpcHQ+IAo8L2hlYWQ+ IAo8Ym9keSBkYXRhLWdyLWMtcy1sb2FkZWQ9InRydWUiPiAKICA8dGFibGUgYm9yZGVyPSIwIiBj ZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiPiAKICA8dGJvZHk+PHRyIGlkPSJwYXJ0LTEi IGJnY29sb3I9Im9yYW5nZSI+PHRoPjwvdGg+PHRoPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRm Lm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1iZmQtdnhsYW4tMDkudHh0IiBzdHlsZT0iY29s b3I6IzAwODsgdGV4dC1kZWNvcmF0aW9uOm5vbmU7Ij4mbHQ7PC9hPiZuYnNwOzxhIGhyZWY9Imh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQiIHN0 eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQ8L2E+Jm5ic3A7PC90 aD48dGg+IDwvdGg+PHRoPiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1pZXRmLWJmZC12eGxhbi0xMC50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1p ZXRmLWJmZC12eGxhbi0xMC50eHQ8L2E+Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYu b3JnL3JmY2RpZmY/dXJsMT1kcmFmdC1pZXRmLWJmZC12eGxhbi0xMC50eHQiIHN0eWxlPSJjb2xv cjojMDA4OyB0ZXh0LWRlY29yYXRpb246bm9uZTsiPiZndDs8L2E+PC90aD48dGg+PC90aD48L3Ry PiAKICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij5CRkQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBT LiBQYWxsYWdhdHRpLCBFZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5CRkQgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBTLiBQYWxsYWdh dHRpLCBFZC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkludGVybmV0LURyYWZ0ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFZNd2FyZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFZNd2FyZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+SW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFMuIFBhcmFnaXJpPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+SW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFMuIFBhcmFnaXJpPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHIgaWQ9ImRpZmYwMDAxIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPkV4cGlyZXM6IEp1bmUgMTxzcGFuIGNs YXNzPSJkZWxldGUiPiwgMjAyMCA8L3NwYW4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgIElu ZGl2aWR1YWwgQ29udHJpYnV0b3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RXhw aXJlczogSnVuZSAxPHNwYW4gY2xhc3M9Imluc2VydCI+OSwgMjAyMDwvc3Bhbj4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgSW5kaXZpZHVhbCBDb250cmlidXRvcjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFYuIEdvdmluZGFuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFYuIEdvdmluZGFuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBNdWRp Z29uZGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBNdWRpZ29uZGE8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgRy4gTWlyc2t5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Ry4gTWlyc2t5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBaVEUgQ29ycC48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBaVEUgQ29ycC48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDIiPjx0ZD48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxz cGFuIGNsYXNzPSJkZWxldGUiPk5vdmVtYmVyIDI5PC9zcGFuPiwgMjAxOTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+RGVjZW1iZXIgMTc8L3NwYW4+ LCAyMDE5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgQkZEIGZvciBWWExBTjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQkZEIGZvciBWWExBTjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwMyI+PHRkPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgICAgICAgICAgICAgICAgICAgICBkcmFmdC1pZXRmLWJmZC12eGxhbi08c3BhbiBjbGFzcz0i ZGVsZXRlIj4wOTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAg ICAgICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1iZmQtdnhsYW4tPHNwYW4gY2xhc3M9Imluc2Vy dCI+MTA8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkFic3RyYWN0PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+QWJzdHJhY3Q8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHVzZSBvZiB0aGUg QmlkaXJlY3Rpb25hbCBGb3J3YXJkaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHVzZSBvZiB0aGUgQmlkaXJlY3Rpb25hbCBG b3J3YXJkaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEZXRlY3Rpb24gKEJGRCkg cHJvdG9jb2wgaW4gcG9pbnQtdG8tcG9pbnQgVmlydHVhbCBlWHRlbnNpYmxlIExvY2FsPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRGV0ZWN0aW9uIChCRkQpIHByb3RvY29sIGlu IHBvaW50LXRvLXBvaW50IFZpcnR1YWwgZVh0ZW5zaWJsZSBMb2NhbDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgQXJlYSBOZXR3b3JrIChWWExBTikgdHVubmVscyBmb3JtaW5nIHVwIGFu IG92ZXJsYXkgbmV0d29yay48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBBcmVh IE5ldHdvcmsgKFZYTEFOKSB0dW5uZWxzIGZvcm1pbmcgdXAgYW4gb3ZlcmxheSBuZXR3b3JrLjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5TdGF0dXMgb2YgVGhpcyBNZW1vPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+U3RhdHVzIG9mIFRoaXMgTWVtbzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIEludGVybmV0LURyYWZ0IGlzIHN1Ym1pdHRl ZCBpbiBmdWxsIGNvbmZvcm1hbmNlIHdpdGggdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCBpcyBzdWJtaXR0ZWQgaW4gZnVsbCBjb25mb3Jt YW5jZSB3aXRoIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHIgaWQ9InBhcnQtMiIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFsbD5za2lw cGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9y ZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTIiPjxlbT4gcGFnZSAxLCBsaW5lIDM4PHNwYW4gY2xh c3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxsPnNr aXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYub3Jn L3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtMiI+PGVtPiBwYWdlIDEsIGxpbmUgMzg8c3BhbiBj bGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQt RHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5naW5lZXJpbmc8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdv cmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZzwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgVGFzayBGb3JjZSAoSUVURikuICBOb3RlIHRoYXQgb3RoZXIgZ3Jv dXBzIG1heSBhbHNvIGRpc3RyaWJ1dGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBUYXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlz dHJpYnV0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgd29ya2luZyBkb2N1bWVudHMg YXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC08L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5l dC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJyZW50IEludGVybmV0LTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgRHJhZnRzIGlzIGF0IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZHJhZnRzL2N1cnJlbnQvLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIERyYWZ0 cyBpcyBhdCBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJyZW50Ly48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFm dCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVu dHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQgYnkg b3RoZXIgZG9jdW1lbnRzIGF0IGFueTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhlciBkb2N1 bWVudHMgYXQgYW55PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aW1lLiAgSXQgaXMg aW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5jZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRpbWUuICBJdCBpcyBpbmFwcHJvcHJpYXRlIHRv IHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29yayBpbiBw cm9ncmVzcy4iPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbWF0ZXJpYWwgb3Ig dG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3MuIjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDA0Ij48dGQ+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gSnVuZSAxLCAyMDIw LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBUaGlzIEludGVybmV0LURyYWZ0 IHdpbGwgZXhwaXJlIG9uIEp1bmUgMTxzcGFuIGNsYXNzPSJpbnNlcnQiPjk8L3NwYW4+LCAyMDIw LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5Db3B5cmlnaHQgTm90aWNlPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+Q29weXJpZ2h0IE5vdGljZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBDb3B5cmlnaHQgKGMpIDIwMTkgSUVURiBUcnVzdCBhbmQg dGhlIHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBDb3B5cmlnaHQgKGMpIDIwMTkgSUVURiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRl bnRpZmllZCBhcyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRvY3VtZW50IGF1 dGhvcnMuICBBbGwgcmlnaHRzIHJlc2VydmVkLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGRvY3VtZW50IGF1dGhvcnMuICBBbGwgcmlnaHRzIHJlc2VydmVkLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3QgdG8gQkNQ IDc4IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2FsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgVGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYg VHJ1c3QncyBMZWdhbDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgUHJvdmlzaW9ucyBS ZWxhdGluZyB0byBJRVRGIERvY3VtZW50czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVudHM8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIChodHRwczovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBp biBlZmZlY3Qgb24gdGhlIGRhdGUgb2Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAoaHR0cHM6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRo ZSBkYXRlIG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwdWJsaWNhdGlvbiBvZiB0 aGlzIGRvY3VtZW50LiAgUGxlYXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwdWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50LiAgUGxl YXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTMiIGNsYXNzPSJjaGFuZ2UiPjx0ZD48L3RkPjx0 aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSJodHRwczovL3d3 dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC0zIj48ZW0+IHBhZ2UgMywgbGlu ZSA4PHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48 dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93 d3c2LmlldGYub3JnL3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtMyI+PGVtPiBwYWdlIDMsIGxp bmUgODxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBoeXBlcnZpc29ycy4gIEhvd2V2ZXIsIHRoZSBjb25jZXB0cyBhcmUgZXF1YWxseSBhcHBsaWNh YmxlIHRvIG5vbi08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBoeXBlcnZpc29y cy4gIEhvd2V2ZXIsIHRoZSBjb25jZXB0cyBhcmUgZXF1YWxseSBhcHBsaWNhYmxlIHRvIG5vbi08 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHZpcnR1YWxpemVkIGhvc3RzIGF0dGFjaGVk IHRvIFZURVBzIGluIHN3aXRjaGVzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IHZpcnR1YWxpemVkIGhvc3RzIGF0dGFjaGVkIHRvIFZURVBzIGluIHN3aXRjaGVzLjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJbiB0aGUgYWJzZW5jZSBvZiBhIHJvdXRlciBp biB0aGUgb3ZlcmxheSwgYSBWTSBjYW4gY29tbXVuaWNhdGUgd2l0aDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIEluIHRoZSBhYnNlbmNlIG9mIGEgcm91dGVyIGluIHRoZSBvdmVy bGF5LCBhIFZNIGNhbiBjb21tdW5pY2F0ZSB3aXRoPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBhbm90aGVyIFZNIG9ubHkgaWYgdGhleSBhcmUgb24gdGhlIHNhbWUgVlhMQU4gc2VnbWVu dC4gIFZNcyBhcmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhbm90aGVyIFZN IG9ubHkgaWYgdGhleSBhcmUgb24gdGhlIHNhbWUgVlhMQU4gc2VnbWVudC4gIFZNcyBhcmU8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVuYXdhcmUgb2YgVlhMQU4gdHVubmVscyBhcyBh IFZYTEFOIHR1bm5lbCBpcyB0ZXJtaW5hdGVkIG9uIGEgVlRFUC48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICB1bmF3YXJlIG9mIFZYTEFOIHR1bm5lbHMgYXMgYSBWWExBTiB0dW5u ZWwgaXMgdGVybWluYXRlZCBvbiBhIFZURVAuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIFZURVBzIGFyZSByZXNwb25zaWJsZSBmb3IgZW5jYXBzdWxhdGluZyBhbmQgZGVjYXBz dWxhdGluZyBmcmFtZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBWVEVQcyBh cmUgcmVzcG9uc2libGUgZm9yIGVuY2Fwc3VsYXRpbmcgYW5kIGRlY2Fwc3VsYXRpbmcgZnJhbWVz PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBleGNoYW5nZWQgYW1vbmcgVk1zLjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGV4Y2hhbmdlZCBhbW9uZyBWTXMuPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDUi Pjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+QTwvc3Bhbj5iaWxpdHkgdG8gbW9u aXRvciBwYXRoIGNvbnRpbnVpdHksIGkuZS4sIHBlcmZvcm0gcHJvYWN0aXZlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlRoZSBhPC9zcGFu PmJpbGl0eSB0byBtb25pdG9yIHBhdGggY29udGludWl0eSwgaS5lLiwgcGVyZm9ybSBwcm9hY3Rp dmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNvbnRpbnVpdHkgY2hlY2sgKENDKSBm b3IgcG9pbnQtdG8tcG9pbnQgKHAycCkgVlhMQU4gdHVubmVscywgaXM8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBjb250aW51aXR5IGNoZWNrIChDQykgZm9yIHBvaW50LXRvLXBv aW50IChwMnApIFZYTEFOIHR1bm5lbHMsIGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBpbXBvcnRhbnQuICBUaGUgYXN5bmNocm9ub3VzIG1vZGUgb2YgQkZELCBhcyBkZWZpbmVkIGlu IFtSRkM1ODgwXSwgaXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpbXBvcnRh bnQuICBUaGUgYXN5bmNocm9ub3VzIG1vZGUgb2YgQkZELCBhcyBkZWZpbmVkIGluIFtSRkM1ODgw XSwgaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVzZWQgdG8gbW9uaXRvciBhIHAy cCBWWExBTiB0dW5uZWwuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXNlZCB0 byBtb25pdG9yIGEgcDJwIFZYTEFOIHR1bm5lbC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgSW4gdGhlIGNhc2Ugd2hlcmUgYSBNdWx0aWNhc3QgU2VydmljZSBOb2RlIChNU04p IChhcyBkZXNjcmliZWQgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbiB0 aGUgY2FzZSB3aGVyZSBhIE11bHRpY2FzdCBTZXJ2aWNlIE5vZGUgKE1TTikgKGFzIGRlc2NyaWJl ZCBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgU2VjdGlvbiAzLjMgb2YgW1JGQzgy OTNdKSByZXNpZGVzIGJlaGluZCBhIE5ldHdvcmsgVmlydHVhbGl6YXRpb248L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBTZWN0aW9uIDMuMyBvZiBbUkZDODI5M10pIHJlc2lkZXMg YmVoaW5kIGEgTmV0d29yayBWaXJ0dWFsaXphdGlvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgRW5kcG9pbnQgKE5WRSksIHRoZSBtZWNoYW5pc21zIGRlc2NyaWJlZCBpbiB0aGlzIGRv Y3VtZW50IGFwcGx5IGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEVuZHBv aW50IChOVkUpLCB0aGUgbWVjaGFuaXNtcyBkZXNjcmliZWQgaW4gdGhpcyBkb2N1bWVudCBhcHBs eSBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNhbiwgdGhlcmVmb3JlLCBiZSB1 c2VkIHRvIHRlc3QgdGhlIGNvbm5lY3Rpdml0eSBmcm9tIHRoZSBzb3VyY2UgTlZFPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY2FuLCB0aGVyZWZvcmUsIGJlIHVzZWQgdG8gdGVz dCB0aGUgY29ubmVjdGl2aXR5IGZyb20gdGhlIHNvdXJjZSBOVkU8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIHRvIHRoZSBNU04uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgdG8gdGhlIE1TTi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHIgaWQ9InBhcnQtNCIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFs bD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRm Lm9yZy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTQiPjxlbT4gcGFnZSA1LCBsaW5lIDExPHNw YW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNt YWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2Lmll dGYub3JnL3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtNCI+PGVtPiBwYWdlIDUsIGxpbmUgMTE8 c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgIEZpZ3VyZSAx OiBSZWZlcmVuY2UgVlhMQU4gRG9tYWluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgICAgICAgICAgICAgICAgRmlndXJlIDE6IFJlZmVyZW5jZSBWWExBTiBEb21haW48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQXQgdGhlIHNhbWUgdGltZSwgYSBzZXJ2 aWNlIGxheWVyIEJGRCBzZXNzaW9uIG1heSBiZSB1c2VkIGJldHdlZW4gdGhlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQXQgdGhlIHNhbWUgdGltZSwgYSBzZXJ2aWNlIGxheWVy IEJGRCBzZXNzaW9uIG1heSBiZSB1c2VkIGJldHdlZW4gdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICB0ZW5hbnRzIG9mIFZURVBzIElQMSBhbmQgSVAyIHRvIHByb3ZpZGUgZW5kLXRv LWVuZCBmYXVsdCBtYW5hZ2VtZW50LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IHRlbmFudHMgb2YgVlRFUHMgSVAxIGFuZCBJUDIgdG8gcHJvdmlkZSBlbmQtdG8tZW5kIGZhdWx0 IG1hbmFnZW1lbnQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJbiBzdWNoIGNhc2Us IGZvciBWVEVQcyBCRkQgQ29udHJvbCBwYWNrZXRzIG9mIHRoYXQgc2Vzc2lvbiBhcmU8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbiBzdWNoIGNhc2UsIGZvciBWVEVQcyBCRkQg Q29udHJvbCBwYWNrZXRzIG9mIHRoYXQgc2Vzc2lvbiBhcmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGluZGlzdGluZ3Vpc2hhYmxlIGZyb20gZGF0YSBwYWNrZXRzLjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGluZGlzdGluZ3Vpc2hhYmxlIGZyb20gZGF0YSBwYWNr ZXRzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBBcyBwZXIgU2VjdGlvbiA0 LCB0aGUgaW5uZXIgZGVzdGluYXRpb24gSVAgYWRkcmVzcyBTSE9VTEQgYmUgc2V0IHRvPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQXMgcGVyIFNlY3Rpb24gNCwgdGhlIGlubmVy IGRlc3RpbmF0aW9uIElQIGFkZHJlc3MgU0hPVUxEIGJlIHNldCB0bzwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwNiI+PHRkPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBv bmUgb2YgdGhlIGxvb3BiYWNrIGFkZHJlc3NlcyA8c3BhbiBjbGFzcz0iZGVsZXRlIj4oMTI3Lzg8 L3NwYW4+IHJhbmdlIGZvciBJUHY0IDxzcGFuIGNsYXNzPSJkZWxldGUiPmFuZDwvc3Bhbj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgb25lIG9mIHRoZSBsb29wYmFjayBhZGRy ZXNzZXMgPHNwYW4gY2xhc3M9Imluc2VydCI+ZnJvbSAxMjcvODwvc3Bhbj4gcmFuZ2UgZm9yIElQ djQgPHNwYW4gY2xhc3M9Imluc2VydCI+b3IgdG8gb25lIG9mPC9zcGFuPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAwOjA6MDowOjA6RkZGRjo3 RjAwOjAvMTA0PC9zcGFuPiByYW5nZSBmb3IgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+SVB2NikuPC9z cGFuPiAgVGhlcmUgY291bGQgYmUgYSBmaXJld2FsbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBJUHY0LW1hcHBlZCBJUHY0IGxvb3BiYWNr IGFkZHJlc3NlcyBmcm9tIDo6ZmZmZjoxMjcuMC4wLjAvMTA0PC9zcGFuPiByYW5nZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBjb25maWd1cmVkIG9uIFZURVAgdG8gYmxvY2sgbG9v cGJhY2sgYWRkcmVzc2VzIGlmIHNldCBhcyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgZm9yIDxzcGFuIGNsYXNzPSJpbnNlcnQiPklQdjYuPC9zcGFuPiAgVGhlcmUgY291 bGQgYmUgYSBmaXJld2FsbCBjb25maWd1cmVkIG9uIFZURVAgdG8gYmxvY2s8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgZGVzdGluYXRpb24gSVAgaW4gdGhlIGlubmVyIElQIGhlYWRl ci4gIEl0IGlzIFJFQ09NTUVOREVEIHRvIGFsbG93PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgIGxvb3BiYWNrIGFkZHJlc3NlcyBpZiBzZXQgYXMgdGhlIGRlc3RpbmF0aW9uIElQ IGluIHRoZSBpbm5lciBJUDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBhZGRyZXNz ZXMgZnJvbSB0aGUgbG9vcGJhY2sgcmFuZ2UgdGhyb3VnaCBhIGZpcmV3YWxsIG9ubHkgaWYgaXQg aXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgaGVhZGVyLiAgSXQgaXMgUkVD T01NRU5ERUQgdG8gYWxsb3cgYWRkcmVzc2VzIGZyb20gdGhlIGxvb3BiYWNrIHJhbmdlPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHVzZWQgYXMgdGhlIGRlc3RpbmF0aW9uIElQIGFk ZHJlc3MgaW4gdGhlIGlubmVyIElQIGhlYWRlciwgYW5kIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICB0aHJvdWdoIGEgZmlyZXdhbGwgb25seSBpZiBpdCBpcyB1c2VkIGFz IHRoZSBkZXN0aW5hdGlvbiBJUCBhZGRyZXNzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIGRlc3RpbmF0aW9uIFVEUCBwb3J0IGlzIHNldCB0byAzNzg0IFtSRkM1ODgxXS48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgaW4gdGhlIGlubmVyIElQIGhlYWRlciwgYW5k IHRoZSBkZXN0aW5hdGlvbiBVRFAgcG9ydCBpcyBzZXQgdG8gMzc4NDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgW1JGQzU4 ODFdLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij40LiAgQkZEIFBhY2tldCBUcmFu c21pc3Npb24gb3ZlciBWWExBTiBUdW5uZWw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij40LiAgQkZEIFBhY2tldCBUcmFuc21pc3Npb24gb3ZlciBWWExBTiBUdW5uZWw8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwNyI+PHRk PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICBCRkQgcGFja2V0IE1VU1QgYmUgZW5jYXBzdWxhdGVkIGFuZCBzZW50IHRvIGEg cmVtb3RlIFZURVAgYXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgQkZEIHBh Y2tldDxzcGFuIGNsYXNzPSJpbnNlcnQiPnM8L3NwYW4+IE1VU1QgYmUgZW5jYXBzdWxhdGVkIGFu ZCBzZW50IHRvIGEgcmVtb3RlIFZURVAgYXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IGV4cGxhaW5lZCBpbiB0aGlzIHNlY3Rpb24uICBJbXBsZW1lbnRhdGlvbnMgU0hPVUxEIGVuc3Vy ZSB0aGF0IHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGV4cGxhaW5lZCBp biB0aGlzIHNlY3Rpb24uICBJbXBsZW1lbnRhdGlvbnMgU0hPVUxEIGVuc3VyZSB0aGF0IHRoZTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQkZEIHBhY2tldHMgZm9sbG93IHRoZSBzYW1l IGxvb2t1cCBwYXRoIGFzIFZYTEFOIGRhdGEgcGFja2V0cyB3aXRoaW48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBCRkQgcGFja2V0cyBmb2xsb3cgdGhlIHNhbWUgbG9va3VwIHBh dGggYXMgVlhMQU4gZGF0YSBwYWNrZXRzIHdpdGhpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgdGhlIHNlbmRlciBzeXN0ZW0uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgdGhlIHNlbmRlciBzeXN0ZW0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IEJGRCBwYWNrZXRzIGFyZSBlbmNhcHN1bGF0ZWQgaW4gVlhMQU4gYXMgZGVzY3JpYmVkIGJlbG93 LiAgVGhlIFZYTEFOPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQkZEIHBhY2tl dHMgYXJlIGVuY2Fwc3VsYXRlZCBpbiBWWExBTiBhcyBkZXNjcmliZWQgYmVsb3cuICBUaGUgVlhM QU48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHBhY2tldCBmb3JtYXQgaXMgZGVmaW5l ZCBpbiBTZWN0aW9uIDUgb2YgW1JGQzczNDhdLiAgVGhlIE91dGVyIElQL1VEUDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHBhY2tldCBmb3JtYXQgaXMgZGVmaW5lZCBpbiBTZWN0 aW9uIDUgb2YgW1JGQzczNDhdLiAgVGhlIE91dGVyIElQL1VEUDwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgYW5kIFZYTEFOIGhlYWRlcnMgTVVTVCBiZSBlbmNvZGVkIGJ5IHRoZSBzZW5k ZXIgYXMgZGVmaW5lZCBpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGFuZCBW WExBTiBoZWFkZXJzIE1VU1QgYmUgZW5jb2RlZCBieSB0aGUgc2VuZGVyIGFzIGRlZmluZWQgaW48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM3MzQ4XS48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDNzM0OF0uPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgMCAgICAgICAgICAgICAgICAgICAxICAgICAgICAgICAgICAgICAgIDIgICAg ICAgICAgICAgICAgICAgMzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgMCAg ICAgICAgICAgICAgICAgICAxICAgICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAgICAg MzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9InBh cnQtNSIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFu Z2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9yZmNkaWZmL3JmY2Rp ZmYucHlodCNwYXJ0LTUiPjxlbT4gcGFnZSA3LCBsaW5lIDE4PHNwYW4gY2xhc3M9ImhpZGUiPiDC tjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNo YW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYub3JnL3JmY2RpZmYvcmZj ZGlmZi5weWh0I3BhcnQtNSI+PGVtPiBwYWdlIDcsIGxpbmUgMTg8c3BhbiBjbGFzcz0iaGlkZSI+ IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgY29uZmlndXJlZCwgb3Ig aXQgTUFZIGJlIGxlYXJuZWQgdmlhIGEgY29udHJvbCBwbGFuZSBwcm90b2NvbC48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBjb25maWd1cmVkLCBvciBpdCBNQVkgYmUg bGVhcm5lZCB2aWEgYSBjb250cm9sIHBsYW5lIHByb3RvY29sLjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgICAgVGhlIGRldGFpbHMgb2YgaG93IHRoZSBNQUMgYWRkcmVzcyBpcyBv YnRhaW5lZCBhcmUgb3V0c2lkZSB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAgICBUaGUgZGV0YWlscyBvZiBob3cgdGhlIE1BQyBhZGRyZXNzIGlzIG9idGFpbmVkIGFy ZSBvdXRzaWRlIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgc2NvcGUg b2YgdGhpcyBkb2N1bWVudC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAg ICBzY29wZSBvZiB0aGlzIGRvY3VtZW50LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICAgICAgICBTb3VyY2UgTUFDOiBNQUMgYWRkcmVzcyBhc3NvY2lhdGVkIHdpdGggdGhlIG9y aWdpbmF0aW5nIFZURVA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBT b3VyY2UgTUFDOiBNQUMgYWRkcmVzcyBhc3NvY2lhdGVkIHdpdGggdGhlIG9yaWdpbmF0aW5nIFZU RVA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgSVAgaGVhZGVyOjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIElQIGhlYWRlcjo8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgRGVzdGluYXRpb24gSVA6IElQIGFkZHJlc3Mg TVVTVCBOT1QgYmUgb2Ygb25lIG9mIHRlbmFudCdzIElQPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICAgICAgRGVzdGluYXRpb24gSVA6IElQIGFkZHJlc3MgTVVTVCBOT1QgYmUg b2Ygb25lIG9mIHRlbmFudCdzIElQPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAg ICBhZGRyZXNzZXMuICBUaGUgSVAgYWRkcmVzcyBTSE9VTEQgYmUgc2VsZWN0ZWQgZnJvbSB0aGUg cmFuZ2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBhZGRyZXNzZXMu ICBUaGUgSVAgYWRkcmVzcyBTSE9VTEQgYmUgc2VsZWN0ZWQgZnJvbSB0aGUgcmFuZ2U8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDgiPjx0ZD48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgICAgICAgMTI3LzggZm9yIElQdjQsIGZvciBJUHY2IC0gZnJvbSB0aGUgcmFuZ2U8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgMTI3LzggZm9yIElQdjQs IGZvciBJUHY2IC0gZnJvbSB0aGUgcmFuZ2UgPHNwYW4gY2xhc3M9Imluc2VydCI+OjpmZmZmOjEy Ny4wLjAuMC8xMDQuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAg ICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4wOjA6MDowOjA6RkZGRjo3RjAwOjAvMTA0Ljwvc3Bhbj4g IEFsdGVybmF0aXZlbHksIHRoZSBkZXN0aW5hdGlvbiBJUDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICAgICAgICBBbHRlcm5hdGl2ZWx5LCB0aGUgZGVzdGluYXRpb24gSVAgYWRk cmVzcyBNQVkgYmUgc2V0IHRvIFZURVAnczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgICAgICBhZGRyZXNzIE1BWSBiZSBzZXQgdG8gVlRFUCdzIElQIGFkZHJlc3MuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgIElQIGFkZHJlc3MuPC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIFNvdXJjZSBJUDogSVAgYWRkcmVzcyBvZiB0 aGUgb3JpZ2luYXRpbmcgVlRFUC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgICBTb3VyY2UgSVA6IElQIGFkZHJlc3Mgb2YgdGhlIG9yaWdpbmF0aW5nIFZURVAuPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIFRUTCBvciBIb3AgTGltaXQ6IE1V U1QgYmUgc2V0IHRvIDEgdG8gZW5zdXJlIHRoYXQgdGhlIEJGRDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgICAgIFRUTCBvciBIb3AgTGltaXQ6IE1VU1QgYmUgc2V0IHRvIDEg dG8gZW5zdXJlIHRoYXQgdGhlIEJGRDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg ICAgcGFja2V0IGlzIG5vdCByb3V0ZWQgd2l0aGluIHRoZSBMYXllciAzIHVuZGVybGF5IG5ldHdv cmsuICBUaGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgcGFja2V0 IGlzIG5vdCByb3V0ZWQgd2l0aGluIHRoZSBMYXllciAzIHVuZGVybGF5IG5ldHdvcmsuICBUaGlz PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICBhZGRyZXNzZXMgdGhlIHNjZW5h cmlvIHdoZW4gdGhlIGlubmVyIElQIGRlc3RpbmF0aW9uIGFkZHJlc3MgaXM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBhZGRyZXNzZXMgdGhlIHNjZW5hcmlvIHdoZW4g dGhlIGlubmVyIElQIGRlc3RpbmF0aW9uIGFkZHJlc3MgaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgICAgIG9mIFZYTEFOIGdhdGV3YXkgYW5kIHRoZXJlIGlzIGEgcm91dGVyIGlu IHVuZGVybGF5IHdoaWNoPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAg b2YgVlhMQU4gZ2F0ZXdheSBhbmQgdGhlcmUgaXMgYSByb3V0ZXIgaW4gdW5kZXJsYXkgd2hpY2g8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIHJlbW92ZXMgdGhlIFZYTEFOIGhl YWRlciwgdGhlbiBpdCBpcyBwb3NzaWJsZSB0byByb3V0ZSB0aGU8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgICAgICByZW1vdmVzIHRoZSBWWExBTiBoZWFkZXIsIHRoZW4gaXQg aXMgcG9zc2libGUgdG8gcm91dGUgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg ICAgICBwYWNrZXQgYXMgVlhMQU4gIGdhdGV3YXkgYWRkcmVzcyBpcyByb3V0YWJsZSBhZGRyZXNz LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIHBhY2tldCBhcyBWWExB TiAgZ2F0ZXdheSBhZGRyZXNzIGlzIHJvdXRhYmxlIGFkZHJlc3MuPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTYiIGNsYXNzPSJj aGFuZ2UiPjx0ZD48L3RkPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48 YSBocmVmPSJodHRwczovL3d3dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC02 Ij48ZW0+IHBhZ2UgOCwgbGluZSA1MjxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48 L2E+PC90aD48dGg+IDwvdGg+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxs PjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0 LTYiPjxlbT4gcGFnZSA4LCBsaW5lIDUyPHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2Vt PjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBkb2N1bWVudCByZXF1aXJlcyBzZXR0aW5nIHRoZSBp bm5lciBJUCBUVEwgdG8gMSwgd2hpY2ggY291bGQgYmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBUaGUgZG9jdW1lbnQgcmVxdWlyZXMgc2V0dGluZyB0aGUgaW5uZXIgSVAgVFRM IHRvIDEsIHdoaWNoIGNvdWxkIGJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB1c2Vk IGFzIGEgRERvUyBhdHRhY2sgdmVjdG9yLiAgVGh1cyB0aGUgaW1wbGVtZW50YXRpb24gTVVTVCBo YXZlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXNlZCBhcyBhIEREb1MgYXR0 YWNrIHZlY3Rvci4gIFRodXMgdGhlIGltcGxlbWVudGF0aW9uIE1VU1QgaGF2ZTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhyb3R0bGluZyBpbiBwbGFjZSB0byBjb250cm9sIHRoZSBy YXRlIG9mIEJGRCBDb250cm9sIHBhY2tldHMgc2VudDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIHRocm90dGxpbmcgaW4gcGxhY2UgdG8gY29udHJvbCB0aGUgcmF0ZSBvZiBCRkQg Q29udHJvbCBwYWNrZXRzIHNlbnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRvIHRo ZSBjb250cm9sIHBsYW5lLiAgT24gdGhlIG90aGVyIGhhbmQsIG92ZXItYWdncmVzc2l2ZSB0aHJv dHRsaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdG8gdGhlIGNvbnRyb2wg cGxhbmUuICBPbiB0aGUgb3RoZXIgaGFuZCwgb3Zlci1hZ2dyZXNzaXZlIHRocm90dGxpbmc8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG9mIEJGRCBDb250cm9sIHBhY2tldHMgbWF5IGJl Y29tZSB0aGUgY2F1c2Ugb2YgdGhlIGluYWJpbGl0eSB0byBmb3JtPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgb2YgQkZEIENvbnRyb2wgcGFja2V0cyBtYXkgYmVjb21lIHRoZSBj YXVzZSBvZiB0aGUgaW5hYmlsaXR5IHRvIGZvcm08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIGFuZCBtYWludGFpbiBCRkQgc2Vzc2lvbiBhdCBzY2FsZS4gIEhlbmNlLCB0aHJvdHRsaW5n IG9mIEJGRCBDb250cm9sPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYW5kIG1h aW50YWluIEJGRCBzZXNzaW9uIGF0IHNjYWxlLiAgSGVuY2UsIHRocm90dGxpbmcgb2YgQkZEIENv bnRyb2w8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHBhY2tldHMgU0hPVUxEIGJlIGFk anVzdGVkIHRvIHBlcm1pdCBCRkQgdG8gd29yayBhY2NvcmRpbmcgdG8gaXRzPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcGFja2V0cyBTSE9VTEQgYmUgYWRqdXN0ZWQgdG8gcGVy bWl0IEJGRCB0byB3b3JrIGFjY29yZGluZyB0byBpdHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIHByb2NlZHVyZXMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcHJv Y2VkdXJlcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVu dCByZWNvbW1lbmRzIHVzaW5nIGFuIGFkZHJlc3MgZnJvbSB0aGUgSW50ZXJuYWwgaG9zdDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoaXMgZG9jdW1lbnQgcmVjb21tZW5kcyB1 c2luZyBhbiBhZGRyZXNzIGZyb20gdGhlIEludGVybmFsIGhvc3Q8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDkiPjx0ZD48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgbG9v cGJhY2sgYWRkcmVzc2VzIDxzcGFuIGNsYXNzPSJkZWxldGUiPigxMjcvODwvc3Bhbj4gcmFuZ2Ug Zm9yIElQdjQgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YW5kPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICBsb29wYmFjayBhZGRyZXNzZXMgPHNwYW4gY2xhc3M9Imluc2Vy dCI+MTI3Lzg8L3NwYW4+IHJhbmdlIGZvciBJUHY0IDxzcGFuIGNsYXNzPSJpbnNlcnQiPm9yIGFu IElQNC1tYXBwZWQgSVB2NDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNw YW4gY2xhc3M9ImRlbGV0ZSI+ICAgMDowOjA6MDowOkZGRkY6N0YwMDowLzEwNDwvc3Bhbj4gcmFu Z2UgZm9yIDxzcGFuIGNsYXNzPSJkZWxldGUiPklQdjYpPC9zcGFuPiBhcyB0aGUgZGVzdGluYXRp b24gSVA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2Vy dCI+ICAgbG9vcGJhY2sgYWRkcmVzcyBmcm9tIDo6ZmZmZjoxMjcuMC4wLjAvMTA0PC9zcGFuPiBy YW5nZSBmb3IgPHNwYW4gY2xhc3M9Imluc2VydCI+SVB2Njwvc3Bhbj4gYXMgdGhlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGFkZHJlc3MgaW4gdGhlIGlubmVyIElQIGhlYWRlci4g IFVzaW5nIHN1Y2ggYWRkcmVzcyBwcmV2ZW50cyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgZGVzdGluYXRpb24gSVAgYWRkcmVzcyBpbiB0aGUgaW5uZXIgSVAgaGVhZGVy LiAgVXNpbmcgc3VjaCBhZGRyZXNzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGZv cndhcmRpbmcgb2YgdGhlIGVuY2Fwc3VsYXRlZCBCRkQgY29udHJvbCBtZXNzYWdlIGJ5IGEgdHJh bnNpZW50PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHByZXZlbnRzIHRoZSBm b3J3YXJkaW5nIG9mIHRoZSBlbmNhcHN1bGF0ZWQgQkZEIGNvbnRyb2wgbWVzc2FnZSBieSBhPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIG5vZGUgaW4gY2FzZSB0aGUgVlhMQU4gdHVu bmVsIGlzIGJyb2tlbiBhcyBhY2NvcmRpbmcgdG8gW1JGQzE4MTJdOjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICB0cmFuc2llbnQgbm9kZSBpbiBjYXNlIHRoZSBWWExBTiB0dW5u ZWwgaXMgYnJva2VuIGFzIGFjY29yZGluZyB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgW1JGQzE4MTJdOjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBBIHJvdXRlciBTSE9VTEQgTk9UIGZvcndh cmQsIGV4Y2VwdCBvdmVyIGEgbG9vcGJhY2sgaW50ZXJmYWNlLCBhbnk8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBBIHJvdXRlciBTSE9VTEQgTk9UIGZvcndhcmQsIGV4Y2Vw dCBvdmVyIGEgbG9vcGJhY2sgaW50ZXJmYWNlLCBhbnk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgICAgIHBhY2tldCB0aGF0IGhhcyBhIGRlc3RpbmF0aW9uIGFkZHJlc3Mgb24gbmV0d29y ayAxMjcuICBBIHJvdXRlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIHBh Y2tldCB0aGF0IGhhcyBhIGRlc3RpbmF0aW9uIGFkZHJlc3Mgb24gbmV0d29yayAxMjcuICBBIHJv dXRlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgTUFZIGhhdmUgYSBzd2l0Y2gg dGhhdCBhbGxvd3MgdGhlIG5ldHdvcmsgbWFuYWdlciB0byBkaXNhYmxlIHRoZXNlPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgTUFZIGhhdmUgYSBzd2l0Y2ggdGhhdCBhbGxv d3MgdGhlIG5ldHdvcmsgbWFuYWdlciB0byBkaXNhYmxlIHRoZXNlPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICAgICBjaGVja3MuICBJZiBzdWNoIGEgc3dpdGNoIGlzIHByb3ZpZGVkLCBp dCBNVVNUIGRlZmF1bHQgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBj aGVja3MuICBJZiBzdWNoIGEgc3dpdGNoIGlzIHByb3ZpZGVkLCBpdCBNVVNUIGRlZmF1bHQgdG88 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIHBlcmZvcm1pbmcgdGhlIGNoZWNrcy48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBwZXJmb3JtaW5nIHRoZSBjaGVj a3MuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIElmIHRoZSBpbXBsZW1lbnRh dGlvbiBzdXBwb3J0cyBlc3RhYmxpc2hpbmcgbXVsdGlwbGUgQkZEIHNlc3Npb25zPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSWYgdGhlIGltcGxlbWVudGF0aW9uIHN1cHBvcnRz IGVzdGFibGlzaGluZyBtdWx0aXBsZSBCRkQgc2Vzc2lvbnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGJldHdlZW4gdGhlIHNhbWUgcGFpciBvZiBWVEVQcywgdGhlcmUgU0hPVUxEIGJl IGEgbWVjaGFuaXNtIHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYmV0d2Vl biB0aGUgc2FtZSBwYWlyIG9mIFZURVBzLCB0aGVyZSBTSE9VTEQgYmUgYSBtZWNoYW5pc20gdG88 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNvbnRyb2wgdGhlIG1heGltdW0gbnVtYmVy IG9mIHN1Y2ggc2Vzc2lvbnMgdGhhdCBjYW4gYmUgYWN0aXZlIGF0IHRoZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNvbnRyb2wgdGhlIG1heGltdW0gbnVtYmVyIG9mIHN1Y2gg c2Vzc2lvbnMgdGhhdCBjYW4gYmUgYWN0aXZlIGF0IHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KCiAgICAgPHRyPjx0ZD48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQ+PC90ZD48L3RyPgogICAgIDx0ciBpZD0i ZW5kIiBiZ2NvbG9yPSJncmF5Ij48dGggY29sc3Bhbj0iNSIgYWxpZ249ImNlbnRlciI+Jm5ic3A7 RW5kIG9mIGNoYW5nZXMuIDkgY2hhbmdlIGJsb2Nrcy4mbmJzcDs8L3RoPjwvdHI+CiAgICAgPHRy IGNsYXNzPSJzdGF0cyI+PHRkPjwvdGQ+PHRoPjxpPjIxIGxpbmVzIGNoYW5nZWQgb3IgZGVsZXRl ZDwvaT48L3RoPjx0aD48aT4gPC9pPjwvdGg+PHRoPjxpPjIzIGxpbmVzIGNoYW5nZWQgb3IgYWRk ZWQ8L2k+PC90aD48dGQ+PC90ZD48L3RyPgogICAgIDx0cj48dGQgY29sc3Bhbj0iNSIgYWxpZ249 ImNlbnRlciIgY2xhc3M9InNtYWxsIj48YnI+VGhpcyBodG1sIGRpZmYgd2FzIHByb2R1Y2VkIGJ5 IHJmY2RpZmYgMS40Ny4gVGhlIGxhdGVzdCB2ZXJzaW9uIGlzIGF2YWlsYWJsZSBmcm9tIDxhIGhy ZWY9Imh0dHA6Ly93d3cudG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZjZGlmZi8iPmh0dHA6Ly90b29s cy5pZXRmLm9yZy90b29scy9yZmNkaWZmLzwvYT4gPC90ZD48L3RyPgogICA8L3Rib2R5PjwvdGFi bGU+CiAgIAogICAKPC9ib2R5PjwvaHRtbD4= --00000000000062b1ef0599ef8fcc-- From nobody Wed Dec 18 08:29:03 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 35E5412085E; Wed, 18 Dec 2019 08:28:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aKsTu_FcfOOI; Wed, 18 Dec 2019 08:28:53 -0800 (PST) Received: from mail-lj1-x22c.google.com (mail-lj1-x22c.google.com [IPv6:2a00:1450:4864:20::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F98A120170; Wed, 18 Dec 2019 08:28:53 -0800 (PST) Received: by mail-lj1-x22c.google.com with SMTP id k8so2836574ljh.5; Wed, 18 Dec 2019 08:28:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=yboy+07TjaN7HXahmNKecG4aPNUYpbFicrNa7UeQTcE=; b=GAKESkNzsjBnybum68rFBukRM88cX5oxfblkagsubcuoHCPf3ZqTBysnRNbpOWjwR7 a5hL0bqMMSVbOxbyFbVmjkJB+X4gGsnrzcD55gya3jx7/hIh0mFKgmvxU3HnBSBMlB3P ogpNzsowIxUZaCm1x5vhCyR0nRx9l1kAwbe30m6gA11FIqA0qnPUIZq9DIWBRVjOh3He IEIQr7ulJQQjDy5YUoLvEVZgX5g9jyE6bf2wTNEiEMWg8AtmThX2u5NkIO4+At3RmWP2 WckBq9Wej4e/8Wo51xtk49BtqSwXpCtNsie6fUwi39JThGU+kFHwHGSetH0U1ceE/Q3S RNiw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=yboy+07TjaN7HXahmNKecG4aPNUYpbFicrNa7UeQTcE=; b=goNlZThA6ohl7ZrInhUO8LK5fmhDGg6NigvS78KrcXqo8ehKq0uJsRyd1Q59rUrLRK qYuN+9IEB8Jba5lxl94+YyDCG3oQDRKSFv39DO0MMOaJN5uyXhlJ6+zCjPLQsS2lJKa8 smhixI80rE7Emr5wgN4FyOTNeoofdLjhJlc1FH+DIzBUXeuCay6aEfrThiXgy1I0sPOl VMQtXinpOMTz/ZYfA2kqCpASHUkfkVx350An106DQRd7jz0QmWCAunV/l+Q9QrODdyj3 tWTX/8T+J5ZEz9DonGyjiFtOF80IULGFXZ8GVYUDpveobkwsXobcSg/Tgv6xkoRkgDCJ ezYw== X-Gm-Message-State: APjAAAVJW7xhS043uE/u+Hd4sd3LcoLqbsij2oSYnJdVpl+DxU1TFoqz cQtiyc5KItxSyeBL7BV5mJ2bnHGwJS6G0jq4lkM= X-Google-Smtp-Source: APXvYqw8QPrYZAoLuyBSXoOfPiOhnafYg9hRNpOrX3n/6iwQQu3lG3pUMvwz8h22cQ7skuuLfvUXydDcY2UtXhMyZI4= X-Received: by 2002:a2e:88c5:: with SMTP id a5mr2481760ljk.201.1576686531149; Wed, 18 Dec 2019 08:28:51 -0800 (PST) MIME-Version: 1.0 References: <157654809360.24500.8752170869862518342.idtracker@ietfa.amsl.com> In-Reply-To: <157654809360.24500.8752170869862518342.idtracker@ietfa.amsl.com> From: Greg Mirsky Date: Wed, 18 Dec 2019 08:28:40 -0800 Message-ID: Subject: Re: Roman Danyliw's No Objection on draft-ietf-bfd-vxlan-09: (with COMMENT) To: Roman Danyliw Cc: The IESG , draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, rtg-bfd WG Content-Type: multipart/alternative; boundary="0000000000009c85020599fcf07a" Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Dec 2019 16:28:56 -0000 --0000000000009c85020599fcf07a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Roman, thank you for your review, detailed questions, and helpful suggestions. All editorial changes applied to the working version of the document. Please find my answers in-line below tagged GIM>>. Best regards, Greg On Mon, Dec 16, 2019 at 6:01 PM Roman Danyliw via Datatracker < noreply@ietf.org> wrote: > Roman Danyliw has entered the following ballot position for > draft-ietf-bfd-vxlan-09: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > I support Ben Kaduk=E2=80=99s DISCUSS position. > > * Section 9. Per =E2=80=9CThe document requires setting the inner IP TTL = to 1, > which > could be used as a DDoS attack vector=E2=80=9D, could you please clarify = what > part(s) > of the notional architecture would be impacted (e.g., physical, virtual; > and > how)? > GIM>> The scenario we've considered is when a VXLAN tunnel is broken. A packet that is not using an address from the loopback range (or from IPv4-mapped addresses for that range for IPv6) may be routed and TTL or Hop count will be zeroed on the next node. The impact likely to be noticed on the control plane. Would you agree? > > * Section 9. Per: > Thus the implementation MUST have > throttling in place to control the rate of BFD Control packets sent > to the control plane. On the other hand, over-aggressive throttling > of BFD Control packets may become the cause of the inability to form > and maintain BFD session at scale. Hence, throttling of BFD Control > packets SHOULD be adjusted to permit BFD to work according to its > procedures. > > I=E2=80=99m having difficulty parsing the guidance above =E2=80=93 it poi= nts out the need > to > throttle and the ramifications of doing so. Per the last sentence, could > you > please clarify how the throttling should be calibrated. > GIM>> I think that it is very much implementation-specific. For example, an implementation may throttle control packets per BFD session or use a more aggregate approach. On the other hand, intervals at which BFD Control packets being transmitted and received play some role in selecting the throttling limits. > > * Section 9. Per =E2=80=9Cthis specification does not raise any addition= al > security > issues beyond those of the specifications referred to in the list of > normative > references=E2=80=9D, I recommend being clearer which references you mean = (i.e., I=E2=80=99m > assuming you don=E2=80=99t mean RFC2119, RFC8174, etc.) > GIM>> Thank you for pointing to this ambiguity. The updated text: Other than inner IP TTL set to 1 and limit the number of BFD sessions between the same pair of VTEPs, this specification does not raise any additional security issues beyond those discussed in [RFC5880], [RFC5881], and [RFC7348]. Would it address your concern? > > * Editorial Nits: > - Abstract. s/forming up/used to form/ > > - Section 9. s/such address/such an address/ > > > --0000000000009c85020599fcf07a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Roman,
thank you for your review, = detailed questions, and helpful suggestions. All editorial changes applied = to the working version of the document. Please find my answers in-line=C2= =A0below tagged GIM>>.

Best regards,
Greg

On Mon, Dec 16, 2019 at 6:01 PM Roman Danyliw via Datatracker = <noreply@ietf.org> wrote:
=
Roman Danyliw has e= ntered the following ballot position for
draft-ietf-bfd-vxlan-09: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/s= tatement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-bf= d-vxlan/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

I support Ben Kaduk=E2=80=99s DISCUSS position.

* Section 9. Per =E2=80=9CThe document requires setting the inner IP TTL to= 1, which
could be used as a DDoS attack vector=E2=80=9D, could you please clarify wh= at part(s)
of the notional architecture would be impacted (e.g., physical, virtual; an= d
how)?
GIM>> The scenario we've considered is= when a VXLAN tunnel is broken. A packet that is not using an address from = the loopback range (or from IPv4-mapped addresses for that range for IPv6) = may be routed and TTL or Hop count will be zeroed on the next node. The imp= act likely to be noticed on the control plane. Would you agree?

* Section 9. Per:
=C2=A0 =C2=A0Thus the implementation MUST have
=C2=A0 =C2=A0throttling in place to control the rate of BFD Control packets= sent
=C2=A0 =C2=A0to the control plane.=C2=A0 On the other hand, over-aggressive= throttling
=C2=A0 =C2=A0of BFD Control packets may become the cause of the inability t= o form
=C2=A0 =C2=A0and maintain BFD session at scale.=C2=A0 Hence, throttling of = BFD Control
=C2=A0 =C2=A0packets SHOULD be adjusted to permit BFD to work according to = its
=C2=A0 =C2=A0procedures.

I=E2=80=99m having difficulty parsing the guidance above =E2=80=93 it point= s out the need to
throttle and the ramifications of doing so.=C2=A0 Per the last sentence, co= uld you
please clarify how the throttling should be calibrated.
GIM>> I think that it is very much implementation-specific. For exa= mple, an implementation may throttle control packets per BFD session or use= a more aggregate approach. On the other hand, intervals at which BFD Contr= ol packets being transmitted and received play some role in selecting the t= hrottling limits.

* Section 9.=C2=A0 Per =E2=80=9Cthis specification does not raise any addit= ional security
issues beyond those of the specifications referred to in the list of normat= ive
references=E2=80=9D, I recommend being clearer which references you mean (i= .e., I=E2=80=99m
assuming you don=E2=80=99t mean RFC2119, RFC8174, etc.)
GIM>> Thank you for pointing to this ambiguity. The updated text:=C2=A0 =C2=A0Other than inner IP TTL set to 1 and limit the number of B= FD sessions
=C2=A0 =C2=A0between the same pair of VTEPs, this specificat= ion does not raise any
=C2=A0 =C2=A0additional security issues beyond th= ose discussed in [RFC5880],
=C2=A0 =C2=A0[RFC5881], and [RFC7348].<= /div>
Would it address your concern?=C2=A0

* Editorial Nits:
- Abstract. s/forming up/used to form/

- Section 9. s/such address/such an address/


--0000000000009c85020599fcf07a-- From nobody Wed Dec 18 11:42:25 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08F3712091B; Wed, 18 Dec 2019 09:11:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.597 X-Spam-Level: X-Spam-Status: No, score=-0.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_COMMENT_SAVED_URL=1.391, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T6TFiQYXRwO1; Wed, 18 Dec 2019 09:11:02 -0800 (PST) Received: from mail-lj1-x236.google.com (mail-lj1-x236.google.com [IPv6:2a00:1450:4864:20::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BF021201DB; Wed, 18 Dec 2019 09:10:59 -0800 (PST) Received: by mail-lj1-x236.google.com with SMTP id j26so2964534ljc.12; Wed, 18 Dec 2019 09:10:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ZimkUHEfy0gELnT3MyqgO8H3c2G3LvARzwf1YYHKjOs=; b=YUlnYZFpEJzQXntDyde8AhngzAkf58EUy9/QcusDrK6+cRYwkZf3IKlzaUHxE+Q7Cb 0r2MPLxbIZB2ALheHoHw188r58WlZHezXTLgeLDyL+Fzsw2/Ej0NYWpV36KsfNqS4xg7 4CFcHz23Fj1LawiRxj0DUaSJ0LOJVyogc0rxd/uwRlDX5oNpPEuZTEIhCVQrx44ayblC RaZrsVJTcKS77OyCp02hg/3c0ztew/jNw4nJPCWNjex0ucGI0LotgGPfNSSO1Uhge0xG TzUBQLk+e0VGIFt2DOxy9SIa+vPGkOJ6OcIeqBKOQnusRAvqN8vQRUvLzb69Al2rQs03 MOWA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ZimkUHEfy0gELnT3MyqgO8H3c2G3LvARzwf1YYHKjOs=; b=JPrOgsG3WPk0OBl+9QQsEPDKOgQ8R4oITn4bojrhDmVZ4qMP+yyBT2TsGOdB+Am+cA 37WPdgUWSpel9/fsX/nrZ5pmjso5UyhD+CqzPdlAy5LT8wv6RNiPOj5duGXSlRPTea3i xOAPGXkkMlc49VAjU5KKYZLcm2/Iq37NOjqljd+YagXvGy1CxEITE8eYABiI33+C6RBt wF5KeFRBP8bf4mKAqSv2uyvUlLd0y4AJbei/BysLB9sAXT3tsfqhd2GopMWAzl/iQyDD JQkS28c+6PQFT7pRBf8Apb7ddQUDRb6TiHBjMbkEKynNeCSOUJGl6nIMAV4CUnH2+xeU 8Btg== X-Gm-Message-State: APjAAAWxLq69HiCUNbNSRaCAis4xi1GDYU66u4U/YL2Gdx9iIGTjey/v O4do6sYjN6+XRZAOukLUxYf2EmNmafCP6m2UVQA= X-Google-Smtp-Source: APXvYqx6+YmZ8zVwqqh1+gw/RDXy9k6ajPSSlXupaeYgAXFOWC23UuuOT0OXNyKReiEX3r15Ma6Xe31IMydq2dPtP9Y= X-Received: by 2002:a2e:918c:: with SMTP id f12mr2597357ljg.66.1576689056028; Wed, 18 Dec 2019 09:10:56 -0800 (PST) MIME-Version: 1.0 References: <157656119326.24566.9438425082238826931.idtracker@ietfa.amsl.com> In-Reply-To: <157656119326.24566.9438425082238826931.idtracker@ietfa.amsl.com> From: Greg Mirsky Date: Wed, 18 Dec 2019 09:10:45 -0800 Message-ID: Subject: Re: Barry Leiba's No Objection on draft-ietf-bfd-vxlan-09: (with COMMENT) To: Barry Leiba Cc: The IESG , draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, rtg-bfd WG Content-Type: multipart/mixed; boundary="0000000000001b42470599fd8745" Archived-At: X-Mailman-Approved-At: Wed, 18 Dec 2019 11:42:23 -0800 X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Dec 2019 17:11:05 -0000 --0000000000001b42470599fd8745 Content-Type: multipart/alternative; boundary="0000000000001b42450599fd8743" --0000000000001b42450599fd8743 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Barry, thank you for your review, comments, and suggestions. Please find my answers in-line below under GIM>> tag. Attached, please find the diff attached (apologies that it includes also updates to several other reviews). Best regards, Greg On Mon, Dec 16, 2019 at 9:39 PM Barry Leiba via Datatracker < noreply@ietf.org> wrote: > Barry Leiba has entered the following ballot position for > draft-ietf-bfd-vxlan-09: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > I support Ben=E2=80=99s DISCUSS. In addition, I have a number of editori= al > comments. > > General: there are a lot of missing or incorrect articles, making the > document > harder to read than it should be. It would be good to fix that. If you > let > the RFC Editor fix it, it will require careful review during AUTH48 to ma= ke > sure it=E2=80=99s correct. > > =E2=80=94 Abstract =E2=80=94 > The phrase =E2=80=9Cforming up=E2=80=9D is odd; I suggest just =E2=80=9Cf= orming=E2=80=9D. > GIM>> It was suggested to s/forming up/used to form/. Do you think it reads better? > > =E2=80=94 Section 3 =E2=80=94 > > BFD packets intended for a VTEP MUST > NOT be forwarded to a VM as a VM may drop BFD packets leading to a > false negative. > > This needs two commas: one before =E2=80=9Cas=E2=80=9D and one before =E2= =80=9Cleading=E2=80=9D. And what > does > =E2=80=9Cleading to a false negative=E2=80=9D mean here? I don=E2=80=99t= understand. > GIM>> Thank you for your suggestion to improve the text. If BFD Control packets are not processed at the egress BFD system, even though the VXLAN tunnel is operational, the state of the session will be changed to Down once the Detection timer expires. We consider that such failure notification is "false" as it does not indicate a failure of the monitored VXLAN tunnel but something else, perhaps misconfiguration or an implementation problem. > > It is RECOMMENDED to allow > addresses from the loopback range through a firewall only if it is > used as the destination IP address in the inner IP header, and the > destination UDP port is set to 3784 [RFC5881]. > > I THINK the antecedent for =E2=80=9Cit=E2=80=9D is meant to be =E2=80=9Ca= ddresses from the loopback > range=E2=80=9D, though because of the number mismatch it looks like the a= ntecedent > is > =E2=80=9Ca firewall=E2=80=9D. One fix is to change =E2=80=9Caddresses=E2= =80=9D to =E2=80=9Can address=E2=80=9D, > correcting the > number error, but that leaves the ambiguity. Maybe betterto make it =E2= =80=9Conly > if > they are used as destination IP addresses=E2=80=9D. Also, remove the com= ma. > That fixes the sentence as written, but I also agree with Ben=E2=80=99s c= omment > that > this might need more significant rewording. > GIM>> Thank you for your thorough consideration of the text and your thoughtful suggestion. I've followed the second of your suggested changes. Will work on improving the text with Ben. > > =E2=80=94 Section 4 =E2=80=94 > > BFD packet MUST be encapsulated and sent to a remote VTEP as > explained in this section. > > This needs to be either =E2=80=9CA BFD packet=E2=80=9D or =E2=80=9CBFD pa= ckets=E2=80=9D and =E2=80=9CVTEPs=E2=80=9D. > GIM>> I've followed the second option as the next sentence uses the plural form. > > The MAC address MAY be > configured, or it MAY be learned via a control plane protocol. > > Are those the only two choices? As both =E2=80=9CMAY=E2=80=9D are option= al, as written it > allows for others. I suggest not using BCP 14 key words here, and instea= d > saying, =E2=80=9CThe MAC address is either configured or learned via a co= ntrol > plane > protocol.=E2=80=9D > GIM>> I agree. > > This > addresses the scenario when the inner IP destination address is > of VXLAN gateway and there is a router in underlay which > removes the VXLAN header, then it is possible to route the > packet as VXLAN gateway address is routable address. > > This sentence is too fractured for me to make any sense of it, so I can= =E2=80=99t > suggest a fix. Please fix it. It looks like Ben made more sense of it > than I > could, so maybe his suggestion will work. > GIM>> I agree. I'll update the passage while discussing Ben's comments. > > =E2=80=94 Section 5 =E2=80=94 > > received VXLAN packet MUST follow the procedures described in > Section 4.1 [RFC7348]. > > This needs to say =E2=80=9CSection 4.1 of [RFC7348].=E2=80=9D > GIM>> Accepted, done. --0000000000001b42450599fd8743 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Barry,
thank you for your review, = comments, and suggestions. Please find my answers in-line below under GIM&g= t;> tag.
Attached, please find the diff attached (apologies th= at it includes also updates to several other reviews).

=
Best regards,
Greg

On Mon, Dec 16, 2019 at 9:39 PM Barr= y Leiba via Datatracker <noreply@iet= f.org> wrote:
Barry Leiba has entered the following ballot position for
draft-ietf-bfd-vxlan-09: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/s= tatement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-bf= d-vxlan/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

I support Ben=E2=80=99s DISCUSS.=C2=A0 In addition, I have a number of edit= orial comments.

General: there are a lot of missing or incorrect articles, making the docum= ent
harder to read than it should be.=C2=A0 It would be good to fix that.=C2=A0= If you let
the RFC Editor fix it, it will require careful review during AUTH48 to make=
sure it=E2=80=99s correct.

=E2=80=94 Abstract =E2=80=94
The phrase =E2=80=9Cforming up=E2=80=9D is odd; I suggest just =E2=80=9Cfor= ming=E2=80=9D.
GIM>> It was suggested to s/formi= ng up/used to form/. Do you think it reads better?=C2=A0

=E2=80=94 Section 3 =E2=80=94

=C2=A0 =C2=A0BFD packets intended for a VTEP MUST
=C2=A0 =C2=A0NOT be forwarded to a VM as a VM may drop BFD packets leading = to a
=C2=A0 =C2=A0false negative.

This needs two commas: one before =E2=80=9Cas=E2=80=9D and one before =E2= =80=9Cleading=E2=80=9D.=C2=A0 And what does
=E2=80=9Cleading to a false negative=E2=80=9D mean here?=C2=A0 I don=E2=80= =99t understand.
GIM>> Thank you for your sugges= tion to improve the text. If BFD Control packets are not processed at the e= gress BFD system, even though the VXLAN tunnel is operational, the state of= the session will be changed to Down once the Detection timer expires. We c= onsider that such failure notification is "false" as it does not = indicate a failure of the monitored VXLAN tunnel but something else, perhap= s misconfiguration or an implementation problem.=C2=A0

=C2=A0 =C2=A0It is RECOMMENDED to allow
=C2=A0 =C2=A0addresses from the loopback range through a firewall only if i= t is
=C2=A0 =C2=A0used as the destination IP address in the inner IP header, and= the
=C2=A0 =C2=A0destination UDP port is set to 3784 [RFC5881].

I THINK the antecedent for =E2=80=9Cit=E2=80=9D is meant to be =E2=80=9Cadd= resses from the loopback
range=E2=80=9D, though because of the number mismatch it looks like the ant= ecedent is
=E2=80=9Ca firewall=E2=80=9D.=C2=A0 One fix is to change =E2=80=9Caddresses= =E2=80=9D to =E2=80=9Can address=E2=80=9D, correcting the
number error, but that leaves the ambiguity.=C2=A0 Maybe betterto make it = =E2=80=9Conly if
they are used as destination IP addresses=E2=80=9D.=C2=A0 Also, remove the = comma.=C2=A0

That fixes the sentence as written, but I also agree with Ben=E2=80=99s com= ment that
this might need more significant rewording.
GIM>>= ; Thank you for your thorough consideration of the text and your thoughtful= suggestion. I've followed the second of your suggested changes. Will w= ork on improving the text with Ben.=C2=A0

=E2=80=94 Section 4 =E2=80=94

=C2=A0 =C2=A0BFD packet MUST be encapsulated and sent to a remote VTEP as =C2=A0 =C2=A0explained in this section.

This needs to be either =E2=80=9CA BFD packet=E2=80=9D or =E2=80=9CBFD pack= ets=E2=80=9D and =E2=80=9CVTEPs=E2=80=9D.
GIM>>= =C2=A0 I've followed the second option as the next sentence uses the pl= ural form.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0The MAC address MAY be
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0configured, or it MAY be learned via a co= ntrol plane protocol.

Are those the only two choices?=C2=A0 As both =E2=80=9CMAY=E2=80=9D are opt= ional, as written it
allows for others.=C2=A0 I suggest not using BCP 14 key words here, and ins= tead
saying, =E2=80=9CThe MAC address is either configured or learned via a cont= rol plane
protocol.=E2=80=9D
GIM>> I agree.=C2=A0

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0This
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0addresses the scenario when the inner IP = destination address is
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0of VXLAN gateway and there is a router in= underlay which
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0removes the VXLAN header, then it is poss= ible to route the
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0packet as VXLAN=C2=A0 gateway address is = routable address.

This sentence is too fractured for me to make any sense of it, so I can=E2= =80=99t
suggest a fix.=C2=A0 Please fix it.=C2=A0 It looks like Ben made more sense= of it than I
could, so maybe his suggestion will work.
GIM>> = I agree. I'll update the passage while discussing Ben's comments.

=E2=80=94 Section 5 =E2=80=94

=C2=A0 =C2=A0received VXLAN packet MUST follow the procedures described in<= br> =C2=A0 =C2=A0Section 4.1 [RFC7348].

This needs to say =E2=80=9CSection 4.1 of [RFC7348].=E2=80=9D
GIM>> Accepted, done.=C2=A0
--0000000000001b42450599fd8743-- --0000000000001b42470599fd8745 Content-Type: text/html; charset="UTF-8"; name="Diff_ draft-ietf-bfd-vxlan-09.txt - draft-ietf-bfd-vxlan-10.txt.html" Content-Disposition: attachment; filename="Diff_ draft-ietf-bfd-vxlan-09.txt - draft-ietf-bfd-vxlan-10.txt.html" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_k4bjxxd20 PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h bC5kdGQiPgo8IS0tIHNhdmVkIGZyb20gdXJsPSgwMDQyKWh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9y ZmNkaWZmL3JmY2RpZmYucHlodCAtLT4KPGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5 OTkveGh0bWwiIGNsYXNzPSJncl9fd3d3Nl9pZXRmX29yZyI+PGhlYWQ+PG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgiPiAKICAg CiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1TdHlsZS1UeXBlIiBjb250ZW50PSJ0ZXh0L2Nz cyI+IAogIDx0aXRsZT5EaWZmOiBkcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQgLSBkcmFmdC1p ZXRmLWJmZC12eGxhbi0xMC50eHQ8L3RpdGxlPiAKICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAK ICAgIGJvZHkgICAgeyBtYXJnaW46IDAuNGV4OyBtYXJnaW4tcmlnaHQ6IGF1dG87IH0gCiAgICB0 ciAgICAgIHsgfSAKICAgIHRkICAgICAgeyB3aGl0ZS1zcGFjZTogcHJlOyBmb250LWZhbWlseTog bW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBmb250LXNpemU6IDAuODZlbTt9IAogICAg dGggICAgICB7IGZvbnQtc2l6ZTogMC44NmVtOyB9IAogICAgLnNtYWxsICB7IGZvbnQtc2l6ZTog MC42ZW07IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9udC1mYW1pbHk6IFZlcmRhbmEsIEhlbHZldGlj YSwgc2Fucy1zZXJpZjsgfSAKICAgIC5sZWZ0ICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9 IAogICAgLnJpZ2h0ICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IH0gCiAgICAuZGlmZiAgIHsg YmFja2dyb3VuZC1jb2xvcjogI0NDRjsgfSAKICAgIC5sYmxvY2sgeyBiYWNrZ3JvdW5kLWNvbG9y OiAjQkZCOyB9IAogICAgLnJibG9jayB7IGJhY2tncm91bmQtY29sb3I6ICNGRjg7IH0gCiAgICAu aW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhGRjsgfSAKICAgIC5kZWxldGUgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjQUNGOyB9IAogICAgLnZvaWQgICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkI7 IH0gCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAKICAgIC5saW5lYnIg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAogICAgLmxpbmVubyB7IGNvbG9yOiByZWQ7IGJh Y2tncm91bmQtY29sb3I6ICNGRkY7IGZvbnQtc2l6ZTogMC43ZW07IHRleHQtYWxpZ246IHJpZ2h0 OyBwYWRkaW5nOiAwIDJweDsgfSAKICAgIC5lbGlwc2lzeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFB OyB9IAogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjREREOyB9IAogICAgLnJp Z2h0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAKICAgIC5sYmxvY2sgLmNvbnQg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IAogICAgLnJibG9jayAuY29udCB7IGJhY2tncm91 bmQtY29sb3I6ICNERDY7IH0gCiAgICAuaW5zZXJ0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjog IzBERDsgfSAKICAgIC5kZWxldGUgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOEFEOyB9IAog ICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0aCB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7 IHBhZGRpbmc6IDJweCAwOyB9IAogICAgc3Bhbi5oaWRlIHsgZGlzcGxheTogbm9uZTsgY29sb3I6 ICNhYWE7fSAgICBhOmhvdmVyIHNwYW4geyBkaXNwbGF5OiBpbmxpbmU7IH0gICAgdHIuY2hhbmdl IHsgYmFja2dyb3VuZC1jb2xvcjogZ3JheTsgfSAKICAgIHRyLmNoYW5nZSBhIHsgdGV4dC1kZWNv cmF0aW9uOiBub25lOyBjb2xvcjogYmxhY2sgfSAKICA8L3N0eWxlPiAKICAgICA8c2NyaXB0Pgp2 YXIgY2h1bmtfaW5kZXggPSAwOwp2YXIgb2xkX2NodW5rID0gbnVsbDsKCmZ1bmN0aW9uIGZvcm1h dF9jaHVuayhpbmRleCkgewogICAgdmFyIHByZWZpeCA9ICJkaWZmIjsKICAgIHZhciBzdHIgPSBp bmRleC50b1N0cmluZygpOwogICAgZm9yICh4PTA7IHg8KDQtc3RyLmxlbmd0aCk7ICsreCkgewog ICAgICAgIHByZWZpeCs9JzAnOwogICAgfQogICAgcmV0dXJuIHByZWZpeCArIHN0cjsKfQoKZnVu Y3Rpb24gZmluZF9jaHVuayhuKXsKICAgIHJldHVybiBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCd0 cltpZCQ9IicgKyBuICsgJyJdJyk7Cn0KCmZ1bmN0aW9uIGNoYW5nZV9jaHVuayhvZmZzZXQpIHsK ICAgIHZhciBpbmRleCA9IGNodW5rX2luZGV4ICsgb2Zmc2V0OwogICAgdmFyIG5ld19zdHI7CiAg ICB2YXIgbmV3X2NodW5rOwoKICAgIG5ld19zdHIgPSBmb3JtYXRfY2h1bmsoaW5kZXgpOwogICAg bmV3X2NodW5rID0gZmluZF9jaHVuayhuZXdfc3RyKTsKICAgIGlmICghbmV3X2NodW5rKSB7CiAg ICAgICAgcmV0dXJuOwogICAgfQogICAgaWYgKG9sZF9jaHVuaykgewogICAgICAgIG9sZF9jaHVu ay5zdHlsZS5vdXRsaW5lID0gIiI7CiAgICB9CiAgICBvbGRfY2h1bmsgPSBuZXdfY2h1bms7CiAg ICBvbGRfY2h1bmsuc3R5bGUub3V0bGluZSA9ICIxcHggc29saWQgcmVkIjsKICAgIHdpbmRvdy5s b2NhdGlvbi5yZXBsYWNlKCIjIiArIG5ld19zdHIpCiAgICB3aW5kb3cuc2Nyb2xsQnkoMCwtMTAw KTsKICAgIGNodW5rX2luZGV4ID0gaW5kZXg7Cn0KCmRvY3VtZW50Lm9ua2V5ZG93biA9IGZ1bmN0 aW9uKGUpIHsKICAgIHN3aXRjaCAoZS5rZXlDb2RlKSB7CiAgICBjYXNlIDc4OgogICAgICAgIGNo YW5nZV9jaHVuaygxKTsKICAgICAgICBicmVhazsKICAgIGNhc2UgODA6CiAgICAgICAgY2hhbmdl X2NodW5rKC0xKTsKICAgICAgICBicmVhazsKICAgIH0KfTsKICAgPC9zY3JpcHQ+IAo8L2hlYWQ+ IAo8Ym9keSBkYXRhLWdyLWMtcy1sb2FkZWQ9InRydWUiPiAKICA8dGFibGUgYm9yZGVyPSIwIiBj ZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiPiAKICA8dGJvZHk+PHRyIGlkPSJwYXJ0LTEi IGJnY29sb3I9Im9yYW5nZSI+PHRoPjwvdGg+PHRoPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRm Lm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1iZmQtdnhsYW4tMDkudHh0IiBzdHlsZT0iY29s b3I6IzAwODsgdGV4dC1kZWNvcmF0aW9uOm5vbmU7Ij4mbHQ7PC9hPiZuYnNwOzxhIGhyZWY9Imh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQiIHN0 eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQ8L2E+Jm5ic3A7PC90 aD48dGg+IDwvdGg+PHRoPiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1pZXRmLWJmZC12eGxhbi0xMC50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1p ZXRmLWJmZC12eGxhbi0xMC50eHQ8L2E+Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYu b3JnL3JmY2RpZmY/dXJsMT1kcmFmdC1pZXRmLWJmZC12eGxhbi0xMC50eHQiIHN0eWxlPSJjb2xv cjojMDA4OyB0ZXh0LWRlY29yYXRpb246bm9uZTsiPiZndDs8L2E+PC90aD48dGg+PC90aD48L3Ry PiAKICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij5CRkQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBT LiBQYWxsYWdhdHRpLCBFZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5CRkQgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBTLiBQYWxsYWdh dHRpLCBFZC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkludGVybmV0LURyYWZ0ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFZNd2FyZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFZNd2FyZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+SW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFMuIFBhcmFnaXJpPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+SW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFMuIFBhcmFnaXJpPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHIgaWQ9ImRpZmYwMDAxIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPkV4cGlyZXM6IEp1bmUgPHNwYW4gY2xh c3M9ImRlbGV0ZSI+MSwgMjAyMCA8L3NwYW4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgIElu ZGl2aWR1YWwgQ29udHJpYnV0b3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RXhw aXJlczogSnVuZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4yMCwgMjAyMDwvc3Bhbj4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgSW5kaXZpZHVhbCBDb250cmlidXRvcjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFYuIEdvdmluZGFuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFYuIEdvdmluZGFuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBNdWRp Z29uZGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBNdWRpZ29uZGE8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgRy4gTWlyc2t5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Ry4gTWlyc2t5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBaVEUgQ29ycC48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBaVEUgQ29ycC48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDIiPjx0ZD48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxz cGFuIGNsYXNzPSJkZWxldGUiPk5vdmVtYmVyIDI5PC9zcGFuPiwgMjAxOTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+RGVjZW1iZXIgMTg8L3NwYW4+ LCAyMDE5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgQkZEIGZvciBWWExBTjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQkZEIGZvciBWWExBTjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwMyI+PHRkPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgICAgICAgICAgICAgICAgICAgICBkcmFmdC1pZXRmLWJmZC12eGxhbi08c3BhbiBjbGFzcz0i ZGVsZXRlIj4wOTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAg ICAgICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1iZmQtdnhsYW4tPHNwYW4gY2xhc3M9Imluc2Vy dCI+MTA8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkFic3RyYWN0PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+QWJzdHJhY3Q8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHVzZSBvZiB0aGUg QmlkaXJlY3Rpb25hbCBGb3J3YXJkaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHVzZSBvZiB0aGUgQmlkaXJlY3Rpb25hbCBG b3J3YXJkaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEZXRlY3Rpb24gKEJGRCkg cHJvdG9jb2wgaW4gcG9pbnQtdG8tcG9pbnQgVmlydHVhbCBlWHRlbnNpYmxlIExvY2FsPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRGV0ZWN0aW9uIChCRkQpIHByb3RvY29sIGlu IHBvaW50LXRvLXBvaW50IFZpcnR1YWwgZVh0ZW5zaWJsZSBMb2NhbDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwNCI+PHRkPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBB cmVhIE5ldHdvcmsgKFZYTEFOKSB0dW5uZWxzIDxzcGFuIGNsYXNzPSJkZWxldGUiPmZvcm1pbmcg dXA8L3NwYW4+IGFuIG92ZXJsYXkgbmV0d29yay48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgQXJlYSBOZXR3b3JrIChWWExBTikgdHVubmVscyA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij51c2VkIHRvIGZvcm08L3NwYW4+IGFuIG92ZXJsYXkgbmV0d29yay48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+U3RhdHVzIG9mIFRoaXMgTWVtbzwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPlN0YXR1cyBvZiBUaGlzIE1lbW88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCBpcyBzdWJtaXR0ZWQgaW4gZnVsbCBjb25m b3JtYW5jZSB3aXRoIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoaXMg SW50ZXJuZXQtRHJhZnQgaXMgc3VibWl0dGVkIGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0aGU8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4IGFuZCBC Q1AgNzkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcHJvdmlzaW9ucyBvZiBC Q1AgNzggYW5kIEJDUCA3OS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50 ZXJuZXQtRHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5naW5l ZXJpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbnRlcm5ldC1EcmFmdHMg YXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGFzayBGb3JjZSAoSUVURikuICBOb3RlIHRoYXQgb3Ro ZXIgZ3JvdXBzIG1heSBhbHNvIGRpc3RyaWJ1dGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBUYXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFs c28gZGlzdHJpYnV0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgd29ya2luZyBkb2N1 bWVudHMgYXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC08 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3b3JraW5nIGRvY3VtZW50cyBhcyBJ bnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJyZW50IEludGVybmV0LTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgRHJhZnRzIGlzIGF0IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0 Zi5vcmcvZHJhZnRzL2N1cnJlbnQvLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IERyYWZ0cyBpcyBhdCBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJyZW50 Ly48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFy ZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBk b2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0 ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhl ciBkb2N1bWVudHMgYXQgYW55PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aW1lLiAg SXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5jZTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRpbWUuICBJdCBpcyBpbmFwcHJvcHJp YXRlIHRvIHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29y ayBpbiBwcm9ncmVzcy4iPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbWF0ZXJp YWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3MuIjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDA1 Ij48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gSnVuZSA8 c3BhbiBjbGFzcz0iZGVsZXRlIj4xPC9zcGFuPiwgMjAyMC48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCB3aWxsIGV4cGlyZSBvbiBKdW5lIDxz cGFuIGNsYXNzPSJpbnNlcnQiPjIwPC9zcGFuPiwgMjAyMC48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+Q29weXJpZ2h0IE5vdGljZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPkNvcHlyaWdodCBOb3RpY2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg Q29weXJpZ2h0IChjKSAyMDE5IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQg YXMgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQ29weXJpZ2h0IChjKSAy MDE5IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQgYXMgdGhlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkb2N1bWVudCBhdXRob3JzLiAgQWxsIHJpZ2h0cyByZXNl cnZlZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkb2N1bWVudCBhdXRob3Jz LiAgQWxsIHJpZ2h0cyByZXNlcnZlZC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgVGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYgVHJ1c3Qn cyBMZWdhbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoaXMgZG9jdW1lbnQg aXMgc3ViamVjdCB0byBCQ1AgNzggYW5kIHRoZSBJRVRGIFRydXN0J3MgTGVnYWw8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVu dHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBQcm92aXNpb25zIFJlbGF0aW5n IHRvIElFVEYgRG9jdW1lbnRzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAoaHR0cHM6 Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9m PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgKGh0dHBzOi8vdHJ1c3RlZS5pZXRm Lm9yZy9saWNlbnNlLWluZm8pIGluIGVmZmVjdCBvbiB0aGUgZGF0ZSBvZjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgcHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVudC4gIFBsZWFzZSBy ZXZpZXcgdGhlc2UgZG9jdW1lbnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg cHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVudC4gIFBsZWFzZSByZXZpZXcgdGhlc2UgZG9jdW1l bnRzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0i cGFydC0yIiBjbGFzcz0iY2hhbmdlIj48dGQ+PC90ZD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNo YW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYub3JnL3JmY2RpZmYvcmZj ZGlmZi5weWh0I3BhcnQtMiI+PGVtPiBwYWdlIDMsIGxpbmUgODxzcGFuIGNsYXNzPSJoaWRlIj4g wrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxzbWFsbD5za2lwcGluZyB0byBj aGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9yZmNkaWZmL3Jm Y2RpZmYucHlodCNwYXJ0LTIiPjxlbT4gcGFnZSAzLCBsaW5lIDg8c3BhbiBjbGFzcz0iaGlkZSI+ IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaHlwZXJ2aXNvcnMuICBIb3dldmVy LCB0aGUgY29uY2VwdHMgYXJlIGVxdWFsbHkgYXBwbGljYWJsZSB0byBub24tPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaHlwZXJ2aXNvcnMuICBIb3dldmVyLCB0aGUgY29uY2Vw dHMgYXJlIGVxdWFsbHkgYXBwbGljYWJsZSB0byBub24tPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICB2aXJ0dWFsaXplZCBob3N0cyBhdHRhY2hlZCB0byBWVEVQcyBpbiBzd2l0Y2hlcy48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB2aXJ0dWFsaXplZCBob3N0cyBhdHRh Y2hlZCB0byBWVEVQcyBpbiBzd2l0Y2hlcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgSW4gdGhlIGFic2VuY2Ugb2YgYSByb3V0ZXIgaW4gdGhlIG92ZXJsYXksIGEgVk0gY2Fu IGNvbW11bmljYXRlIHdpdGg8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbiB0 aGUgYWJzZW5jZSBvZiBhIHJvdXRlciBpbiB0aGUgb3ZlcmxheSwgYSBWTSBjYW4gY29tbXVuaWNh dGUgd2l0aDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYW5vdGhlciBWTSBvbmx5IGlm IHRoZXkgYXJlIG9uIHRoZSBzYW1lIFZYTEFOIHNlZ21lbnQuICBWTXMgYXJlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYW5vdGhlciBWTSBvbmx5IGlmIHRoZXkgYXJlIG9uIHRo ZSBzYW1lIFZYTEFOIHNlZ21lbnQuICBWTXMgYXJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICB1bmF3YXJlIG9mIFZYTEFOIHR1bm5lbHMgYXMgYSBWWExBTiB0dW5uZWwgaXMgdGVybWlu YXRlZCBvbiBhIFZURVAuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdW5hd2Fy ZSBvZiBWWExBTiB0dW5uZWxzIGFzIGEgVlhMQU4gdHVubmVsIGlzIHRlcm1pbmF0ZWQgb24gYSBW VEVQLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBWVEVQcyBhcmUgcmVzcG9u c2libGUgZm9yIGVuY2Fwc3VsYXRpbmcgYW5kIGRlY2Fwc3VsYXRpbmcgZnJhbWVzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVlRFUHMgYXJlIHJlc3BvbnNpYmxlIGZvciBlbmNh cHN1bGF0aW5nIGFuZCBkZWNhcHN1bGF0aW5nIGZyYW1lczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgZXhjaGFuZ2VkIGFtb25nIFZNcy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBleGNoYW5nZWQgYW1vbmcgVk1zLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDA2Ij48dGQ+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNs YXNzPSJkZWxldGUiPkE8L3NwYW4+YmlsaXR5IHRvIG1vbml0b3IgcGF0aCBjb250aW51aXR5LCBp LmUuLCBwZXJmb3JtIHByb2FjdGl2ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5UaGUgYTwvc3Bhbj5iaWxpdHkgdG8gbW9uaXRvciBwYXRo IGNvbnRpbnVpdHksIGkuZS4sIHBlcmZvcm0gcHJvYWN0aXZlPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBjb250aW51aXR5IGNoZWNrIChDQykgZm9yIHBvaW50LXRvLXBvaW50IChwMnAp IFZYTEFOIHR1bm5lbHMsIGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY29u dGludWl0eSBjaGVjayAoQ0MpIGZvciBwb2ludC10by1wb2ludCAocDJwKSBWWExBTiB0dW5uZWxz LCBpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaW1wb3J0YW50LiAgVGhlIGFzeW5j aHJvbm91cyBtb2RlIG9mIEJGRCwgYXMgZGVmaW5lZCBpbiBbUkZDNTg4MF0sIGlzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW1wb3J0YW50LiAgVGhlIGFzeW5jaHJvbm91cyBt b2RlIG9mIEJGRCwgYXMgZGVmaW5lZCBpbiBbUkZDNTg4MF0sIGlzPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICB1c2VkIHRvIG1vbml0b3IgYSBwMnAgVlhMQU4gdHVubmVsLjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHVzZWQgdG8gbW9uaXRvciBhIHAycCBWWExBTiB0 dW5uZWwuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEluIHRoZSBjYXNlIHdo ZXJlIGEgTXVsdGljYXN0IFNlcnZpY2UgTm9kZSAoTVNOKSAoYXMgZGVzY3JpYmVkIGluPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW4gdGhlIGNhc2Ugd2hlcmUgYSBNdWx0aWNh c3QgU2VydmljZSBOb2RlIChNU04pIChhcyBkZXNjcmliZWQgaW48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIFNlY3Rpb24gMy4zIG9mIFtSRkM4MjkzXSkgcmVzaWRlcyBiZWhpbmQgYSBO ZXR3b3JrIFZpcnR1YWxpemF0aW9uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg U2VjdGlvbiAzLjMgb2YgW1JGQzgyOTNdKSByZXNpZGVzIGJlaGluZCBhIE5ldHdvcmsgVmlydHVh bGl6YXRpb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEVuZHBvaW50IChOVkUpLCB0 aGUgbWVjaGFuaXNtcyBkZXNjcmliZWQgaW4gdGhpcyBkb2N1bWVudCBhcHBseSBhbmQ8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBFbmRwb2ludCAoTlZFKSwgdGhlIG1lY2hhbmlz bXMgZGVzY3JpYmVkIGluIHRoaXMgZG9jdW1lbnQgYXBwbHkgYW5kPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBjYW4sIHRoZXJlZm9yZSwgYmUgdXNlZCB0byB0ZXN0IHRoZSBjb25uZWN0 aXZpdHkgZnJvbSB0aGUgc291cmNlIE5WRTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIGNhbiwgdGhlcmVmb3JlLCBiZSB1c2VkIHRvIHRlc3QgdGhlIGNvbm5lY3Rpdml0eSBmcm9t IHRoZSBzb3VyY2UgTlZFPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0byB0aGUgTVNO LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRvIHRoZSBNU04uPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTMi IGNsYXNzPSJjaGFuZ2UiPjx0ZD48L3RkPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0 PC9zbWFsbD48YSBocmVmPSJodHRwczovL3d3dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNkaWZmLnB5 aHQjcGFydC0zIj48ZW0+IHBhZ2UgNCwgbGluZSAxNzxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3Nw YW4+PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2Ug YXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9yZmNkaWZmL3JmY2RpZmYu cHlodCNwYXJ0LTMiPjxlbT4gcGFnZSA0LCBsaW5lIDE3PHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwv c3Bhbj48L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjMuICBEZXBsb3ltZW50PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+My4gIERlcGxveW1lbnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgRmlndXJlIDEgaWxsdXN0cmF0ZXMgdGhlIHNjZW5hcmlvIHdpdGggdHdvIHNl cnZlcnMsIGVhY2ggb2YgdGhlbTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEZp Z3VyZSAxIGlsbHVzdHJhdGVzIHRoZSBzY2VuYXJpbyB3aXRoIHR3byBzZXJ2ZXJzLCBlYWNoIG9m IHRoZW08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGhvc3RpbmcgdHdvIFZNcy4gIFRo ZSBzZXJ2ZXJzIGhvc3QgVlRFUHMgdGhhdCB0ZXJtaW5hdGUgdHdvIFZYTEFOPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaG9zdGluZyB0d28gVk1zLiAgVGhlIHNlcnZlcnMgaG9z dCBWVEVQcyB0aGF0IHRlcm1pbmF0ZSB0d28gVlhMQU48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIHR1bm5lbHMgd2l0aCBWWExBTiBOZXR3b3JrIElkZW50aWZpZXIgKFZOSSkgbnVtYmVy IDEwMCBhbmQgMjAwPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdHVubmVscyB3 aXRoIFZYTEFOIE5ldHdvcmsgSWRlbnRpZmllciAoVk5JKSBudW1iZXIgMTAwIGFuZCAyMDA8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHJlc3BlY3RpdmVseS4gIFNlcGFyYXRlIEJGRCBz ZXNzaW9ucyBjYW4gYmUgZXN0YWJsaXNoZWQgYmV0d2VlbiB0aGU8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICByZXNwZWN0aXZlbHkuICBTZXBhcmF0ZSBCRkQgc2Vzc2lvbnMgY2Fu IGJlIGVzdGFibGlzaGVkIGJldHdlZW4gdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBWVEVQcyAoSVAxIGFuZCBJUDIpIGZvciBtb25pdG9yaW5nIGVhY2ggb2YgdGhlIFZYTEFOIHR1 bm5lbHMgKFZOSSAxMDA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBWVEVQcyAo SVAxIGFuZCBJUDIpIGZvciBtb25pdG9yaW5nIGVhY2ggb2YgdGhlIFZYTEFOIHR1bm5lbHMgKFZO SSAxMDA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFuZCAyMDApLiAgQW4gaW1wbGVt ZW50YXRpb24gdGhhdCBzdXBwb3J0cyB0aGlzIHNwZWNpZmljYXRpb24gTVVTVCBiZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGFuZCAyMDApLiAgQW4gaW1wbGVtZW50YXRpb24g dGhhdCBzdXBwb3J0cyB0aGlzIHNwZWNpZmljYXRpb24gTVVTVCBiZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgYWJsZSB0byBjb250cm9sIHRoZSBudW1iZXIgb2YgQkZEIHNlc3Npb25z IHRoYXQgY2FuIGJlIGNyZWF0ZWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBh YmxlIHRvIGNvbnRyb2wgdGhlIG51bWJlciBvZiBCRkQgc2Vzc2lvbnMgdGhhdCBjYW4gYmUgY3Jl YXRlZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYmV0d2VlbiB0aGUgc2FtZSBwYWly IG9mIFZURVBzLiAgQkZEIHBhY2tldHMgaW50ZW5kZWQgZm9yIGEgVlRFUCBNVVNUPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYmV0d2VlbiB0aGUgc2FtZSBwYWlyIG9mIFZURVBz LiAgQkZEIHBhY2tldHMgaW50ZW5kZWQgZm9yIGEgVlRFUCBNVVNUPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDA3Ij48dGQ+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIE5P VCBiZSBmb3J3YXJkZWQgdG8gYSBWTTxzcGFuIGNsYXNzPSJkZWxldGUiPiBhcyBhIFZNIG1heSBk cm9wIEJGRCBwYWNrZXRzPC9zcGFuPiBsZWFkaW5nIHRvIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgTk9UIGJlIGZvcndhcmRlZCB0byBhIFZNPHNwYW4gY2xhc3M9Imluc2Vy dCI+LCBhcyBhIFZNIG1heSBkcm9wIEJGRCBwYWNrZXRzLDwvc3Bhbj4gbGVhZGluZyB0byBhPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBmYWxzZSBuZWdhdGl2ZS4gIFRoaXMgbWV0aG9k IGlzIGFwcGxpY2FibGUgd2hldGhlciB0aGUgVlRFUCBpcyBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgZmFsc2UgbmVnYXRpdmUuICBUaGlzIG1ldGhvZCBpcyBhcHBsaWNhYmxl IHdoZXRoZXIgdGhlIFZURVAgaXMgYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdmly dHVhbCBvciBwaHlzaWNhbCBkZXZpY2UuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgdmlydHVhbCBvciBwaHlzaWNhbCBkZXZpY2UuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgICstLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLSs8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgICArLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0rPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICB8ICAgICAgICBTZXJ2ZXIgMSAgICAgICAgICB8 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgfCAgICAgICAgU2VydmVyIDEg ICAgICAgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgfCArLS0tLSstLS0t KyAgKy0tLS0rLS0tLSsgfDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIHwg Ky0tLS0rLS0tLSsgICstLS0tKy0tLS0rIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgIHwgfFZNMS0xICAgIHwgIHxWTTEtMiAgICB8IHw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICAgICB8IHxWTTEtMSAgICB8ICB8Vk0xLTIgICAgfCB8PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICB8IHxWTkkgMTAwICB8ICB8Vk5JIDIwMCAgfCB8PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgfCB8Vk5JIDEwMCAgfCAgfFZOSSAyMDAgIHwg fDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgfCB8ICAgICAgICAgfCAgfCAgICAg ICAgIHwgfDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIHwgfCAgICAgICAg IHwgIHwgICAgICAgICB8IHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIHwgKy0t LS0tLS0tLSsgICstLS0tLS0tLS0rIHw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICB8ICstLS0tLS0tLS0rICArLS0tLS0tLS0tKyB8PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0icGFydC00IiBjbGFzcz0iY2hhbmdlIj48dGQ+ PC90ZD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0 cHM6Ly93d3c2LmlldGYub3JnL3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtNCI+PGVtPiBwYWdl IDUsIGxpbmUgMTE8c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRo PiA8L3RoPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSJo dHRwczovL3d3dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC00Ij48ZW0+IHBh Z2UgNSwgbGluZSAxMTxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48 dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLSs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLSs8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAg ICAgICAgRmlndXJlIDE6IFJlZmVyZW5jZSBWWExBTiBEb21haW48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICBGaWd1cmUgMTogUmVmZXJlbmNlIFZY TEFOIERvbWFpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBBdCB0aGUgc2Ft ZSB0aW1lLCBhIHNlcnZpY2UgbGF5ZXIgQkZEIHNlc3Npb24gbWF5IGJlIHVzZWQgYmV0d2VlbiB0 aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBBdCB0aGUgc2FtZSB0aW1lLCBh IHNlcnZpY2UgbGF5ZXIgQkZEIHNlc3Npb24gbWF5IGJlIHVzZWQgYmV0d2VlbiB0aGU8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRlbmFudHMgb2YgVlRFUHMgSVAxIGFuZCBJUDIgdG8g cHJvdmlkZSBlbmQtdG8tZW5kIGZhdWx0IG1hbmFnZW1lbnQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgdGVuYW50cyBvZiBWVEVQcyBJUDEgYW5kIElQMiB0byBwcm92aWRlIGVu ZC10by1lbmQgZmF1bHQgbWFuYWdlbWVudC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IEluIHN1Y2ggY2FzZSwgZm9yIFZURVBzIEJGRCBDb250cm9sIHBhY2tldHMgb2YgdGhhdCBzZXNz aW9uIGFyZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEluIHN1Y2ggY2FzZSwg Zm9yIFZURVBzIEJGRCBDb250cm9sIHBhY2tldHMgb2YgdGhhdCBzZXNzaW9uIGFyZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaW5kaXN0aW5ndWlzaGFibGUgZnJvbSBkYXRhIHBhY2tl dHMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW5kaXN0aW5ndWlzaGFibGUg ZnJvbSBkYXRhIHBhY2tldHMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEFz IHBlciBTZWN0aW9uIDQsIHRoZSBpbm5lciBkZXN0aW5hdGlvbiBJUCBhZGRyZXNzIFNIT1VMRCBi ZSBzZXQgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBBcyBwZXIgU2VjdGlv biA0LCB0aGUgaW5uZXIgZGVzdGluYXRpb24gSVAgYWRkcmVzcyBTSE9VTEQgYmUgc2V0IHRvPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDA4Ij48 dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPiAgIG9uZSBvZiB0aGUgbG9vcGJhY2sgYWRkcmVzc2VzIDxzcGFuIGNsYXNzPSJk ZWxldGUiPigxMjcvODwvc3Bhbj4gcmFuZ2UgZm9yIElQdjQgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ YW5kPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBvbmUgb2YgdGhl IGxvb3BiYWNrIGFkZHJlc3NlcyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5mcm9tIDEyNy84PC9zcGFu PiByYW5nZSBmb3IgSVB2NCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5vciB0byBvbmUgb2Y8L3NwYW4+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIDA6 MDowOjA6MDpGRkZGOjdGMDA6MC8xMDQ8L3NwYW4+IHJhbmdlIGZvciA8c3BhbiBjbGFzcz0iZGVs ZXRlIj5JUHY2KS48L3NwYW4+ICBUaGVyZSBjb3VsZCBiZSBhIGZpcmV3YWxsPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIElQdjQtbWFwcGVk IElQdjQgbG9vcGJhY2sgYWRkcmVzc2VzIGZyb20gOjpmZmZmOjEyNy4wLjAuMC8xMDQ8L3NwYW4+ IHJhbmdlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGNvbmZpZ3VyZWQgb24gVlRF UCB0byBibG9jayBsb29wYmFjayBhZGRyZXNzZXMgaWYgc2V0IGFzIHRoZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICBmb3IgPHNwYW4gY2xhc3M9Imluc2VydCI+SVB2Ni48L3Nw YW4+ICBUaGVyZSBjb3VsZCBiZSBhIGZpcmV3YWxsIGNvbmZpZ3VyZWQgb24gVlRFUCB0byBibG9j azwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBkZXN0aW5hdGlvbiBJUCBpbiB0aGUg aW5uZXIgSVAgaGVhZGVyLiAgSXQgaXMgUkVDT01NRU5ERUQgdG8gYWxsb3c8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbG9vcGJhY2sgYWRkcmVzc2VzIGlmIHNldCBhcyB0aGUg ZGVzdGluYXRpb24gSVAgaW4gdGhlIGlubmVyIElQPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPiAgIGFkZHJlc3NlcyBmcm9tIHRoZSBsb29wYmFjayByYW5nZSB0aHJvdWdoIGEgZmlyZXdh bGwgb25seSBpZiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5pdCBpczwvc3Bhbj48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgaGVhZGVyLiAgSXQgaXMgUkVDT01NRU5ERUQgdG8gYWxs b3cgYWRkcmVzc2VzIGZyb20gdGhlIGxvb3BiYWNrIHJhbmdlPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPiAgIHVzZWQgYXMgdGhlIGRlc3RpbmF0aW9uIElQIDxzcGFuIGNsYXNzPSJkZWxl dGUiPmFkZHJlc3M8L3NwYW4+IGluIHRoZSBpbm5lciBJUCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5o ZWFkZXIsPC9zcGFuPiBhbmQgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IHRocm91Z2ggYSBmaXJld2FsbCBvbmx5IGlmIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoZXkgYXJl PC9zcGFuPiB1c2VkIGFzIHRoZSBkZXN0aW5hdGlvbiBJUDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICBkZXN0aW5hdGlvbiBVRFAgcG9ydCBpcyBzZXQgdG8gMzc4NCBbUkZDNTg4MV0u PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQi PmFkZHJlc3Nlczwvc3Bhbj4gaW4gdGhlIGlubmVyIElQIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmhl YWRlcjwvc3Bhbj4gYW5kIHRoZSBkZXN0aW5hdGlvbiBVRFAgcG9ydCBpcyBzZXQ8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IHRvIDM3ODQgW1JGQzU4ODFdLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij40LiAg QkZEIFBhY2tldCBUcmFuc21pc3Npb24gb3ZlciBWWExBTiBUdW5uZWw8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij40LiAgQkZEIFBhY2tldCBUcmFuc21pc3Npb24gb3ZlciBWWExBTiBU dW5uZWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlk PSJkaWZmMDAwOSI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBCRkQgcGFja2V0PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ IE1VU1QgYmUgZW5jYXBzdWxhdGVkIGFuZCBzZW50IHRvIGEgcmVtb3RlIFZURVA8L3NwYW4+IGFz PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIEJGRCBwYWNrZXQ8c3BhbiBjbGFz cz0iaW5zZXJ0Ij5zIE1VU1QgYmUgZW5jYXBzdWxhdGVkIGFuZCBzZW50IHRvIGEgcmVtb3RlIFZU RVBzPC9zcGFuPiBhczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZXhwbGFpbmVkIGlu IHRoaXMgc2VjdGlvbi4gIEltcGxlbWVudGF0aW9ucyBTSE9VTEQgZW5zdXJlIHRoYXQgdGhlPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZXhwbGFpbmVkIGluIHRoaXMgc2VjdGlv bi4gIEltcGxlbWVudGF0aW9ucyBTSE9VTEQgZW5zdXJlIHRoYXQgdGhlPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBCRkQgcGFja2V0cyBmb2xsb3cgdGhlIHNhbWUgbG9va3VwIHBhdGgg YXMgVlhMQU4gZGF0YSBwYWNrZXRzIHdpdGhpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIEJGRCBwYWNrZXRzIGZvbGxvdyB0aGUgc2FtZSBsb29rdXAgcGF0aCBhcyBWWExBTiBk YXRhIHBhY2tldHMgd2l0aGluPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUgc2Vu ZGVyIHN5c3RlbS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUgc2VuZGVy IHN5c3RlbS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQkZEIHBhY2tldHMg YXJlIGVuY2Fwc3VsYXRlZCBpbiBWWExBTiBhcyBkZXNjcmliZWQgYmVsb3cuICBUaGUgVlhMQU48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBCRkQgcGFja2V0cyBhcmUgZW5jYXBz dWxhdGVkIGluIFZYTEFOIGFzIGRlc2NyaWJlZCBiZWxvdy4gIFRoZSBWWExBTjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgcGFja2V0IGZvcm1hdCBpcyBkZWZpbmVkIGluIFNlY3Rpb24g NSBvZiBbUkZDNzM0OF0uICBUaGUgT3V0ZXIgSVAvVURQPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgcGFja2V0IGZvcm1hdCBpcyBkZWZpbmVkIGluIFNlY3Rpb24gNSBvZiBbUkZD NzM0OF0uICBUaGUgT3V0ZXIgSVAvVURQPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBh bmQgVlhMQU4gaGVhZGVycyBNVVNUIGJlIGVuY29kZWQgYnkgdGhlIHNlbmRlciBhcyBkZWZpbmVk IGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYW5kIFZYTEFOIGhlYWRlcnMg TVVTVCBiZSBlbmNvZGVkIGJ5IHRoZSBzZW5kZXIgYXMgZGVmaW5lZCBpbjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgW1JGQzczNDhdLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIFtSRkM3MzQ4XS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAw ICAgICAgICAgICAgICAgICAgIDEgICAgICAgICAgICAgICAgICAgMiAgICAgICAgICAgICAgICAg ICAzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAwICAgICAgICAgICAgICAg ICAgIDEgICAgICAgICAgICAgICAgICAgMiAgICAgICAgICAgICAgICAgICAzPC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0icGFydC01IiBjbGFzcz0i Y2hhbmdlIj48dGQ+PC90ZD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+ PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYub3JnL3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQt NSI+PGVtPiBwYWdlIDcsIGxpbmUgNzxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48 L2E+PC90aD48dGg+IDwvdGg+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxs PjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0 LTUiPjxlbT4gcGFnZSA3LCBsaW5lIDc8c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+ PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgVlhMQU4gcGFja2V0LiAgVGhlIGNob2ljZSBvZiBEZXN0aW5h dGlvbiBNQUMgYW5kIERlc3RpbmF0aW9uIElQPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgVlhMQU4gcGFja2V0LiAgVGhlIGNob2ljZSBvZiBEZXN0aW5hdGlvbiBNQUMgYW5kIERl c3RpbmF0aW9uIElQPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhZGRyZXNzZXMgZm9y IHRoZSBpbm5lciBFdGhlcm5ldCBmcmFtZSBNVVNUIGVuc3VyZSB0aGF0IHRoZSBCRkQ8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhZGRyZXNzZXMgZm9yIHRoZSBpbm5lciBFdGhl cm5ldCBmcmFtZSBNVVNUIGVuc3VyZSB0aGF0IHRoZSBCRkQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIENvbnRyb2wgcGFja2V0IGlzIG5vdCBmb3J3YXJkZWQgdG8gYSB0ZW5hbnQgYnV0 IGlzIHByb2Nlc3NlZCBsb2NhbGx5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg Q29udHJvbCBwYWNrZXQgaXMgbm90IGZvcndhcmRlZCB0byBhIHRlbmFudCBidXQgaXMgcHJvY2Vz c2VkIGxvY2FsbHk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGF0IHRoZSByZW1vdGUg VlRFUC4gIFRoZSBpbm5lciBFdGhlcm5ldCBmcmFtZSBjYXJyeWluZyB0aGUgQkZEPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYXQgdGhlIHJlbW90ZSBWVEVQLiAgVGhlIGlubmVy IEV0aGVybmV0IGZyYW1lIGNhcnJ5aW5nIHRoZSBCRkQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIENvbnRyb2wgcGFja2V0LSBoYXMgdGhlIGZvbGxvd2luZyBmb3JtYXQ6PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQ29udHJvbCBwYWNrZXQtIGhhcyB0aGUgZm9sbG93 aW5nIGZvcm1hdDo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgRXRoZXJu ZXQgSGVhZGVyOjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIEV0aGVybmV0 IEhlYWRlcjo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgRGVzdGlu YXRpb24gTUFDOiBUaGlzIE1VU1QgTk9UIGJlIG9mIG9uZSBvZiB0ZW5hbnQncyBNQUM8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBEZXN0aW5hdGlvbiBNQUM6IFRoaXMg TVVTVCBOT1QgYmUgb2Ygb25lIG9mIHRlbmFudCdzIE1BQzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgICAgICAgYWRkcmVzc2VzLiAgVGhlIGRlc3RpbmF0aW9uIE1BQyBhZGRyZXNzIE1B WSBiZSB0aGUgYWRkcmVzczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAg IGFkZHJlc3Nlcy4gIFRoZSBkZXN0aW5hdGlvbiBNQUMgYWRkcmVzcyBNQVkgYmUgdGhlIGFkZHJl c3M8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAw MTAiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgICAgICAgYXNzb2NpYXRlZCB3aXRoIHRoZSBkZXN0aW5hdGlvbiBW VEVQLiAgVGhlIE1BQyBhZGRyZXNzIE1BWSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5iZTwvc3Bhbj48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgYXNzb2NpYXRlZCB3aXRo IHRoZSBkZXN0aW5hdGlvbiBWVEVQLiAgVGhlIE1BQyBhZGRyZXNzIE1BWSA8c3BhbiBjbGFzcz0i aW5zZXJ0Ij5pczwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAg Y29uZmlndXJlZCwgb3IgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+aXQgTUFZIGJlPC9zcGFuPiBsZWFy bmVkIHZpYSBhIGNvbnRyb2wgcGxhbmUgcHJvdG9jb2wuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgICAgICAgIGVpdGhlcjwvc3Bhbj4gY29u ZmlndXJlZCwgb3IgbGVhcm5lZCB2aWEgYSBjb250cm9sIHBsYW5lIHByb3RvY29sLjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgVGhlIGRldGFpbHMgb2YgaG93IHRoZSBNQUMg YWRkcmVzcyBpcyBvYnRhaW5lZCBhcmUgb3V0c2lkZSB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICAgICAgICBUaGUgZGV0YWlscyBvZiBob3cgdGhlIE1BQyBhZGRyZXNzIGlz IG9idGFpbmVkIGFyZSBvdXRzaWRlIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ICAgICAgc2NvcGUgb2YgdGhpcyBkb2N1bWVudC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICAgICBzY29wZSBvZiB0aGlzIGRvY3VtZW50LjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICAgICBTb3VyY2UgTUFDOiBNQUMgYWRkcmVzcyBhc3NvY2lhdGVk IHdpdGggdGhlIG9yaWdpbmF0aW5nIFZURVA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICAgICBTb3VyY2UgTUFDOiBNQUMgYWRkcmVzcyBhc3NvY2lhdGVkIHdpdGggdGhlIG9y aWdpbmF0aW5nIFZURVA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgSVAg aGVhZGVyOjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIElQIGhlYWRlcjo8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgRGVzdGluYXRpb24gSVA6 IElQIGFkZHJlc3MgTVVTVCBOT1QgYmUgb2Ygb25lIG9mIHRlbmFudCdzIElQPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgRGVzdGluYXRpb24gSVA6IElQIGFkZHJlc3Mg TVVTVCBOT1QgYmUgb2Ygb25lIG9mIHRlbmFudCdzIElQPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICAgICBhZGRyZXNzZXMuICBUaGUgSVAgYWRkcmVzcyBTSE9VTEQgYmUgc2VsZWN0 ZWQgZnJvbSB0aGUgcmFuZ2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAg ICBhZGRyZXNzZXMuICBUaGUgSVAgYWRkcmVzcyBTSE9VTEQgYmUgc2VsZWN0ZWQgZnJvbSB0aGUg cmFuZ2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlm ZjAwMTEiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgMTI3LzggZm9yIElQdjQsIGZvciBJUHY2IC0gZnJv bSB0aGUgcmFuZ2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgMTI3 LzggZm9yIElQdjQsIGZvciBJUHY2IC0gZnJvbSB0aGUgcmFuZ2UgPHNwYW4gY2xhc3M9Imluc2Vy dCI+OjpmZmZmOjEyNy4wLjAuMC8xMDQuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICAgICAgICA8c3BhbiBjbGFzcz0iZGVsZXRlIj4wOjA6MDowOjA6RkZGRjo3RjAwOjAv MTA0Ljwvc3Bhbj4gIEFsdGVybmF0aXZlbHksIHRoZSBkZXN0aW5hdGlvbiBJUDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICBBbHRlcm5hdGl2ZWx5LCB0aGUgZGVzdGlu YXRpb24gSVAgYWRkcmVzcyBNQVkgYmUgc2V0IHRvIFZURVAnczwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGJsb2NrIj4gICAgICAgICBhZGRyZXNzIE1BWSBiZSBzZXQgdG8gVlRFUCdzIElQIGFkZHJl c3MuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgIElQIGFkZHJlc3Mu PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIFNvdXJjZSBJUDogSVAg YWRkcmVzcyBvZiB0aGUgb3JpZ2luYXRpbmcgVlRFUC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICAgICAgICBTb3VyY2UgSVA6IElQIGFkZHJlc3Mgb2YgdGhlIG9yaWdpbmF0aW5n IFZURVAuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIFRUTCBvciBI b3AgTGltaXQ6IE1VU1QgYmUgc2V0IHRvIDEgdG8gZW5zdXJlIHRoYXQgdGhlIEJGRDwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIFRUTCBvciBIb3AgTGltaXQ6IE1VU1Qg YmUgc2V0IHRvIDEgdG8gZW5zdXJlIHRoYXQgdGhlIEJGRDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgICAgICAgcGFja2V0IGlzIG5vdCByb3V0ZWQgd2l0aGluIHRoZSBMYXllciAzIHVu ZGVybGF5IG5ldHdvcmsuICBUaGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICAgICAgcGFja2V0IGlzIG5vdCByb3V0ZWQgd2l0aGluIHRoZSBMYXllciAzIHVuZGVybGF5IG5l dHdvcmsuICBUaGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICBhZGRyZXNz ZXMgdGhlIHNjZW5hcmlvIHdoZW4gdGhlIGlubmVyIElQIGRlc3RpbmF0aW9uIGFkZHJlc3MgaXM8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBhZGRyZXNzZXMgdGhlIHNj ZW5hcmlvIHdoZW4gdGhlIGlubmVyIElQIGRlc3RpbmF0aW9uIGFkZHJlc3MgaXM8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIG9mIFZYTEFOIGdhdGV3YXkgYW5kIHRoZXJlIGlz IGEgcm91dGVyIGluIHVuZGVybGF5IHdoaWNoPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgICAgb2YgVlhMQU4gZ2F0ZXdheSBhbmQgdGhlcmUgaXMgYSByb3V0ZXIgaW4gdW5k ZXJsYXkgd2hpY2g8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIHJlbW92ZXMg dGhlIFZYTEFOIGhlYWRlciwgdGhlbiBpdCBpcyBwb3NzaWJsZSB0byByb3V0ZSB0aGU8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICByZW1vdmVzIHRoZSBWWExBTiBoZWFk ZXIsIHRoZW4gaXQgaXMgcG9zc2libGUgdG8gcm91dGUgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgICAgICBwYWNrZXQgYXMgVlhMQU4gIGdhdGV3YXkgYWRkcmVzcyBpcyByb3V0 YWJsZSBhZGRyZXNzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIHBh Y2tldCBhcyBWWExBTiAgZ2F0ZXdheSBhZGRyZXNzIGlzIHJvdXRhYmxlIGFkZHJlc3MuPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0 LTYiIGNsYXNzPSJjaGFuZ2UiPjx0ZD48L3RkPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdl IGF0PC9zbWFsbD48YSBocmVmPSJodHRwczovL3d3dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNkaWZm LnB5aHQjcGFydC02Ij48ZW0+IHBhZ2UgOCwgbGluZSA1MjxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8 L3NwYW4+PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFu Z2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9yZmNkaWZmL3JmY2Rp ZmYucHlodCNwYXJ0LTYiPjxlbT4gcGFnZSA4LCBsaW5lIDUyPHNwYW4gY2xhc3M9ImhpZGUiPiDC tjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBkb2N1bWVudCByZXF1aXJlcyBz ZXR0aW5nIHRoZSBpbm5lciBJUCBUVEwgdG8gMSwgd2hpY2ggY291bGQgYmU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgZG9jdW1lbnQgcmVxdWlyZXMgc2V0dGluZyB0aGUg aW5uZXIgSVAgVFRMIHRvIDEsIHdoaWNoIGNvdWxkIGJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICB1c2VkIGFzIGEgRERvUyBhdHRhY2sgdmVjdG9yLiAgVGh1cyB0aGUgaW1wbGVtZW50 YXRpb24gTVVTVCBoYXZlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXNlZCBh cyBhIEREb1MgYXR0YWNrIHZlY3Rvci4gIFRodXMgdGhlIGltcGxlbWVudGF0aW9uIE1VU1QgaGF2 ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhyb3R0bGluZyBpbiBwbGFjZSB0byBj b250cm9sIHRoZSByYXRlIG9mIEJGRCBDb250cm9sIHBhY2tldHMgc2VudDwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRocm90dGxpbmcgaW4gcGxhY2UgdG8gY29udHJvbCB0aGUg cmF0ZSBvZiBCRkQgQ29udHJvbCBwYWNrZXRzIHNlbnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIHRvIHRoZSBjb250cm9sIHBsYW5lLiAgT24gdGhlIG90aGVyIGhhbmQsIG92ZXItYWdn cmVzc2l2ZSB0aHJvdHRsaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdG8g dGhlIGNvbnRyb2wgcGxhbmUuICBPbiB0aGUgb3RoZXIgaGFuZCwgb3Zlci1hZ2dyZXNzaXZlIHRo cm90dGxpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG9mIEJGRCBDb250cm9sIHBh Y2tldHMgbWF5IGJlY29tZSB0aGUgY2F1c2Ugb2YgdGhlIGluYWJpbGl0eSB0byBmb3JtPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb2YgQkZEIENvbnRyb2wgcGFja2V0cyBtYXkg YmVjb21lIHRoZSBjYXVzZSBvZiB0aGUgaW5hYmlsaXR5IHRvIGZvcm08L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIGFuZCBtYWludGFpbiBCRkQgc2Vzc2lvbiBhdCBzY2FsZS4gIEhlbmNl LCB0aHJvdHRsaW5nIG9mIEJGRCBDb250cm9sPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgYW5kIG1haW50YWluIEJGRCBzZXNzaW9uIGF0IHNjYWxlLiAgSGVuY2UsIHRocm90dGxp bmcgb2YgQkZEIENvbnRyb2w8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHBhY2tldHMg U0hPVUxEIGJlIGFkanVzdGVkIHRvIHBlcm1pdCBCRkQgdG8gd29yayBhY2NvcmRpbmcgdG8gaXRz PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcGFja2V0cyBTSE9VTEQgYmUgYWRq dXN0ZWQgdG8gcGVybWl0IEJGRCB0byB3b3JrIGFjY29yZGluZyB0byBpdHM8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIHByb2NlZHVyZXMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgcHJvY2VkdXJlcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg VGhpcyBkb2N1bWVudCByZWNvbW1lbmRzIHVzaW5nIGFuIGFkZHJlc3MgZnJvbSB0aGUgSW50ZXJu YWwgaG9zdDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoaXMgZG9jdW1lbnQg cmVjb21tZW5kcyB1c2luZyBhbiBhZGRyZXNzIGZyb20gdGhlIEludGVybmFsIGhvc3Q8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMTIiPjx0ZD48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgbG9vcGJhY2sgYWRkcmVzc2VzIDxzcGFuIGNsYXNzPSJkZWxldGUiPigxMjcvODwv c3Bhbj4gcmFuZ2UgZm9yIElQdjQgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YW5kPC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBsb29wYmFjayBhZGRyZXNzZXMgPHNwYW4g Y2xhc3M9Imluc2VydCI+MTI3Lzg8L3NwYW4+IHJhbmdlIGZvciBJUHY0IDxzcGFuIGNsYXNzPSJp bnNlcnQiPm9yIGFuIElQNC1tYXBwZWQgSVB2NDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgMDowOjA6MDowOkZGRkY6N0YwMDowLzEw NDwvc3Bhbj4gcmFuZ2UgZm9yIDxzcGFuIGNsYXNzPSJkZWxldGUiPklQdjYpPC9zcGFuPiBhcyB0 aGUgZGVzdGluYXRpb24gSVA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4g Y2xhc3M9Imluc2VydCI+ICAgbG9vcGJhY2sgYWRkcmVzcyBmcm9tIDo6ZmZmZjoxMjcuMC4wLjAv MTA0PC9zcGFuPiByYW5nZSBmb3IgPHNwYW4gY2xhc3M9Imluc2VydCI+SVB2Njwvc3Bhbj4gYXMg dGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGFkZHJlc3MgaW4gdGhlIGlubmVy IElQIGhlYWRlci4gIFVzaW5nIHN1Y2ggYWRkcmVzcyBwcmV2ZW50cyB0aGU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgZGVzdGluYXRpb24gSVAgYWRkcmVzcyBpbiB0aGUgaW5u ZXIgSVAgaGVhZGVyLiAgVXNpbmcgc3VjaCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5hbjwvc3Bhbj4g YWRkcmVzczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBmb3J3YXJkaW5nIG9mIHRo ZSBlbmNhcHN1bGF0ZWQgQkZEIGNvbnRyb2wgbWVzc2FnZSBieSBhIHRyYW5zaWVudDwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBwcmV2ZW50cyB0aGUgZm9yd2FyZGluZyBvZiB0 aGUgZW5jYXBzdWxhdGVkIEJGRCBjb250cm9sIG1lc3NhZ2UgYnkgYTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICBub2RlIGluIGNhc2UgdGhlIFZYTEFOIHR1bm5lbCBpcyBicm9rZW4g YXMgYWNjb3JkaW5nIHRvIFtSRkMxODEyXTo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+ICAgdHJhbnNpZW50IG5vZGUgaW4gY2FzZSB0aGUgVlhMQU4gdHVubmVsIGlzIGJyb2tlbiBh cyBhY2NvcmRpbmcgdG88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIFtSRkMxODEyXTo8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgQSByb3V0ZXIgU0hPVUxEIE5PVCBmb3J3YXJkLCBleGNlcHQgb3Zl ciBhIGxvb3BiYWNrIGludGVyZmFjZSwgYW55PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgQSByb3V0ZXIgU0hPVUxEIE5PVCBmb3J3YXJkLCBleGNlcHQgb3ZlciBhIGxvb3Bi YWNrIGludGVyZmFjZSwgYW55PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBwYWNr ZXQgdGhhdCBoYXMgYSBkZXN0aW5hdGlvbiBhZGRyZXNzIG9uIG5ldHdvcmsgMTI3LiAgQSByb3V0 ZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBwYWNrZXQgdGhhdCBoYXMg YSBkZXN0aW5hdGlvbiBhZGRyZXNzIG9uIG5ldHdvcmsgMTI3LiAgQSByb3V0ZXI8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIE1BWSBoYXZlIGEgc3dpdGNoIHRoYXQgYWxsb3dzIHRo ZSBuZXR3b3JrIG1hbmFnZXIgdG8gZGlzYWJsZSB0aGVzZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgICAgIE1BWSBoYXZlIGEgc3dpdGNoIHRoYXQgYWxsb3dzIHRoZSBuZXR3b3Jr IG1hbmFnZXIgdG8gZGlzYWJsZSB0aGVzZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ICAgY2hlY2tzLiAgSWYgc3VjaCBhIHN3aXRjaCBpcyBwcm92aWRlZCwgaXQgTVVTVCBkZWZhdWx0 IHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgY2hlY2tzLiAgSWYgc3Vj aCBhIHN3aXRjaCBpcyBwcm92aWRlZCwgaXQgTVVTVCBkZWZhdWx0IHRvPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICBwZXJmb3JtaW5nIHRoZSBjaGVja3MuPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgcGVyZm9ybWluZyB0aGUgY2hlY2tzLjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJZiB0aGUgaW1wbGVtZW50YXRpb24gc3VwcG9ydHMg ZXN0YWJsaXNoaW5nIG11bHRpcGxlIEJGRCBzZXNzaW9uczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIElmIHRoZSBpbXBsZW1lbnRhdGlvbiBzdXBwb3J0cyBlc3RhYmxpc2hpbmcg bXVsdGlwbGUgQkZEIHNlc3Npb25zPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBiZXR3 ZWVuIHRoZSBzYW1lIHBhaXIgb2YgVlRFUHMsIHRoZXJlIFNIT1VMRCBiZSBhIG1lY2hhbmlzbSB0 bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGJldHdlZW4gdGhlIHNhbWUgcGFp ciBvZiBWVEVQcywgdGhlcmUgU0hPVUxEIGJlIGEgbWVjaGFuaXNtIHRvPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBjb250cm9sIHRoZSBtYXhpbXVtIG51bWJlciBvZiBzdWNoIHNlc3Np b25zIHRoYXQgY2FuIGJlIGFjdGl2ZSBhdCB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBjb250cm9sIHRoZSBtYXhpbXVtIG51bWJlciBvZiBzdWNoIHNlc3Npb25zIHRoYXQg Y2FuIGJlIGFjdGl2ZSBhdCB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHNhbWUg dGltZS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBzYW1lIHRpbWUuPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIE90aGVyIHRoYW4gaW5uZXIgSVAgVFRMIHNl dCB0byAxIGFuZCBsaW1pdCB0aGUgbnVtYmVyIG9mIEJGRCBzZXNzaW9uczwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIE90aGVyIHRoYW4gaW5uZXIgSVAgVFRMIHNldCB0byAxIGFu ZCBsaW1pdCB0aGUgbnVtYmVyIG9mIEJGRCBzZXNzaW9uczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgYmV0d2VlbiB0aGUgc2FtZSBwYWlyIG9mIFZURVBzLCB0aGlzIHNwZWNpZmljYXRp b24gZG9lcyBub3QgcmFpc2UgYW55PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg YmV0d2VlbiB0aGUgc2FtZSBwYWlyIG9mIFZURVBzLCB0aGlzIHNwZWNpZmljYXRpb24gZG9lcyBu b3QgcmFpc2UgYW55PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIg aWQ9ImRpZmYwMDEzIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGFkZGl0aW9uYWwgc2VjdXJpdHkgaXNzdWVzIGJl eW9uZCB0aG9zZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5vZiB0aGUgc3BlY2lmaWNhdGlvbnM8L3Nw YW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGFkZGl0aW9uYWwgc2VjdXJp dHkgaXNzdWVzIGJleW9uZCB0aG9zZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5kaXNjdXNzZWQ8L3Nw YW4+IGluIDxzcGFuIGNsYXNzPSJpbnNlcnQiPltSRkM1ODgwXSw8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIHJlZmVycmVkIHRvPC9z cGFuPiBpbiA8c3BhbiBjbGFzcz0iZGVsZXRlIj50aGUgbGlzdCBvZiBub3JtYXRpdmUgcmVmZXJl bmNlcy48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNz PSJpbnNlcnQiPiAgIFtSRkM1ODgxXSwgYW5kIFtSRkM3MzQ4XS48L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjEwLiAgQ29udHJpYnV0b3JzPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+MTAuICBDb250cmlidXRvcnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgUmVzaGFkIFJhaG1hbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIFJlc2hhZCBSYWhtYW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHJyYWhtYW5A Y2lzY28uY29tPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcnJhaG1hbkBjaXNj by5jb208L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIENpc2NvPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgQ2lzY288L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+MTEuICBBY2tub3dsZWRnbWVudHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4x MS4gIEFja25vd2xlZGdtZW50czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBB dXRob3JzIHdvdWxkIGxpa2UgdG8gdGhhbmsgSmVmZiBIYWFzIG9mIEp1bmlwZXIgTmV0d29ya3Mg Zm9yIGhpczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEF1dGhvcnMgd291bGQg bGlrZSB0byB0aGFuayBKZWZmIEhhYXMgb2YgSnVuaXBlciBOZXR3b3JrcyBmb3IgaGlzPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgoKICAgICA8dHI+PHRkPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZD48L3RkPjwv dHI+CiAgICAgPHRyIGlkPSJlbmQiIGJnY29sb3I9ImdyYXkiPjx0aCBjb2xzcGFuPSI1IiBhbGln bj0iY2VudGVyIj4mbmJzcDtFbmQgb2YgY2hhbmdlcy4gMTMgY2hhbmdlIGJsb2Nrcy4mbmJzcDs8 L3RoPjwvdHI+CiAgICAgPHRyIGNsYXNzPSJzdGF0cyI+PHRkPjwvdGQ+PHRoPjxpPjI3IGxpbmVz IGNoYW5nZWQgb3IgZGVsZXRlZDwvaT48L3RoPjx0aD48aT4gPC9pPjwvdGg+PHRoPjxpPjI5IGxp bmVzIGNoYW5nZWQgb3IgYWRkZWQ8L2k+PC90aD48dGQ+PC90ZD48L3RyPgogICAgIDx0cj48dGQg Y29sc3Bhbj0iNSIgYWxpZ249ImNlbnRlciIgY2xhc3M9InNtYWxsIj48YnI+VGhpcyBodG1sIGRp ZmYgd2FzIHByb2R1Y2VkIGJ5IHJmY2RpZmYgMS40Ny4gVGhlIGxhdGVzdCB2ZXJzaW9uIGlzIGF2 YWlsYWJsZSBmcm9tIDxhIGhyZWY9Imh0dHA6Ly93d3cudG9vbHMuaWV0Zi5vcmcvdG9vbHMvcmZj ZGlmZi8iPmh0dHA6Ly90b29scy5pZXRmLm9yZy90b29scy9yZmNkaWZmLzwvYT4gPC90ZD48L3Ry PgogICA8L3Rib2R5PjwvdGFibGU+CiAgIAogICAKPC9ib2R5PjwvaHRtbD4= --0000000000001b42470599fd8745-- From nobody Wed Dec 18 12:20:27 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 619DB120B12; Wed, 18 Dec 2019 12:20:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4pmOVcjGTYmQ; Wed, 18 Dec 2019 12:20:18 -0800 (PST) Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id 9F9CD120967; Wed, 18 Dec 2019 12:20:18 -0800 (PST) Received: by slice.pfrc.org (Postfix, from userid 1001) id 7862C1E2F6; Wed, 18 Dec 2019 15:24:48 -0500 (EST) Date: Wed, 18 Dec 2019 15:24:48 -0500 From: Jeffrey Haas To: Benjamin Kaduk Cc: The IESG , draft-ietf-bfd-vxlan@ietf.org, bfd-chairs@ietf.org, rtg-bfd@ietf.org Subject: Re: Benjamin Kaduk's Discuss on draft-ietf-bfd-vxlan-09: (with DISCUSS and COMMENT) Message-ID: <20191218202448.GC6488@pfrc.org> References: <157653979360.24617.1864402887480503965.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <157653979360.24617.1864402887480503965.idtracker@ietfa.amsl.com> User-Agent: Mutt/1.5.21 (2010-09-15) Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Dec 2019 20:20:21 -0000 Benjamin, On Mon, Dec 16, 2019 at 03:43:13PM -0800, Benjamin Kaduk via Datatracker wrote: > Benjamin Kaduk has entered the following ballot position for > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > > I have a few points that I think merit IESG discussion. > > (1) I see that several directorate reviewers expressed unease at the > destination (IP and) MAC address assignment procedure for the inner > VXLAN headers, and appreciate that there was extensive on-list > discussion (more than I could follow). That said, I failed to find a > clear statement of why the current text is believed to be safe, and in > fact my reading of the current text is that the described procedure is > *not* safe. Pointers to key parts of the WG discusison would be more > than welcome! One high level point that likely didn't survive the rather verbose comment chain is there are two implementations of this draft. Some of the considerations covered in the guidance here is "please don't break shipping code". While this is IETF, and shipping code isn't always a blocking point to document changes, I'd suggest that as a consideration. > To take something of a high-level view of my concerns, if we think of > the VXLAN as being a tunnel between VTEPs that carry encapsulated tenant > traffic, then what we're trying to do is roughly like BFD between VTEPs, > but we want to get fault-detection over as broad a coverage as we can > (the "outermost part of the tunnel"), so we want to have the option of > per-VNI BFD instead of just endpoint-to-endpoint (VTEP-to-VTEP). You've summarized this clearly. Joel Halpern, in particular, raised this point multiple times. Effectively, "what are we testing?" And the response not clearly converging on exactly one of the two possibilities. As is noted in the various IESG discussion, each of the two test points raise slightly different considerations. > However, we end up having to do this by trying to insert a thin filter > into the tenant's address space (i.e., the inner VXLAN header) and pick > out the specific stream of BFD traffic that we're introducing. This is, > in some sense, a namespace grab in what is conceptually the tenant's > namespace, and we have to be careful that what we do is either > guaranteed to not impact the tenant or well-documented and > compartmentalized (akin to the "well-known URIs"). Possibly, and it's certainly a consideration. However, I think I'm less convinced of it being quite the level of violation that seems to be reflected in the rest of the IESG comments in the various other threads. I'll respond to that detail a bit below. > I've made comments at several places in the document that are more > directly tied to specific pieces of text, but in general, if we assume > that the tenant can add/remove new addresses at will within their VXLAN > abstration, then any attempt to preconfigure by mutual agreement the BFD > addresses to use at the VTEPs or to use the VTEP's normal (outer) > address as the sentinel value seems subject to the tenant coming in and > subsequently trying to use that address, leading to (some of) the > tenant's traffic getting silently filtered and interpreted by the VTEP. > If we were using domain names as identifiers, we could allocate > something under .arpa or similar, but I think our options are more > limited when numerical addresses are used. > > The option suggested by the rtg-dir reviewer of always using the > management VNI does not suffer from this namespacing issue, though I > recognize that it does reduce the scope over which fault-detection is > available, for the cases when different VNIs' traffic are routed or > handled differently. This is a clean summary of the considerations. At least a portion of the WG seems to be comfortable with "test to the management VNI". However, another (smaller, I believe) portion were wanting to test one layer further in. > (2) Section 6 says: > > The selection > of the VNI number of the Management VNI MUST be controlled through > management plane. An implementation MAY use VNI number 1 as the > default value for the Management VNI. All VXLAN packets received on > the Management VNI MUST be processed locally and MUST NOT be > forwarded to a tenant. > > It seems like the management VNI concept is something that would apply > to the entire VXLAN deployment and not just to the BFD-using portions; > is this already defined somewhere (in which case we should reference > it), or is it new with this document? In the latter case wouldn't it be > an update to the core VXLAN spec? (I note that there are some > procedural hoops to jump through for an IETF-stream document to update > an ISE-stream document...) The relevant portion of the archive will have the Subject: line text including: "Trapping BFD Control packet at VTEP" A portion of the discussion relating to the magic number of the management VNI suggested '1', instead of '0'. At least some implementations already use '0': https://mailarchive.ietf.org/arch/msg/rtg-bfd/6WfSATmfoPv4AD6RmD-Xb7zz4CE The argument to not use '0' starts roughly here: https://mailarchive.ietf.org/arch/msg/rtg-bfd/z8E_a5k_r4pLLs5YfNsL_Xm9_Us You're correct, IMO, that there's no standard practice and the above seems to support this. I believe this leaves the document authors in the position of being requested to make a recommendation for the default value of this field and knowing that the default would be invalid on some platforms. The alternative is requiring implementations to always configure this value. I suggest the IESG determine whether it wants a default value here or not. If not, the text should be adjusted to require configuration. If yes, the IESG should consider whether the nvo3 group should produce some document that covers current operational practices. > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > 0:0:0:0:0:FFFF:7F00:0/104 range for IPv6). There could be a firewall > configured on VTEP to block loopback addresses if set as the > destination IP in the inner IP header. It is RECOMMENDED to allow > addresses from the loopback range through a firewall only if it is > used as the destination IP address in the inner IP header, and the > destination UDP port is set to 3784 [RFC5881]. > > I think we should reword this to make it clear that the default behavior > is still "block all incoming traffic with loopback destination" and that > the exception is tightly scoped to the encapsulated VXLAN traffic > discussed in this document and the specific destination port *and when > BFD has been configured for the VTEP*. I note that well-known ports are > not reserved ports, and we have no guarangee that only a BFD > implementation would be listening on port 3784. I don't think this consideration is necessarily critical. BFD implementations residing in the related instance communicating to other instances across the vxlan environment would be using RFC 5881 or RFC 5883 style BFD. Since this isn't a tunneled BFD, the IP endpoints of the BFD control traffic will be unicast addresses rather than the reserved "loopback" ranges; i.e. 127/8 ::FFFF:127.0.0.0/104. In order for those ranges to be problematic, it'd be necessary for the client to be able to manually encapsulate a vxlan packet - a security issue of its own. A related point in this discussion is "we're hijacking an address managed by the local tenant". While true, it's in the above ranges and thus somewhat under the auspice of the host OS to assert control. I'm aware of some unusual applications that make use of configured addresses in those ranges for on-box communications, but they're also on the unusual end of things. What sort of text would you want to cover the case that when BFD is run up-to-the-tenant mode in this circumstance that an address MUST be reserved for the BFD over vxlan application and that this address SHALL NOT be available to the tenant for its own use? > VXLAN packet. The choice of Destination MAC and Destination IP > addresses for the inner Ethernet frame MUST ensure that the BFD > Control packet is not forwarded to a tenant but is processed locally > at the remote VTEP. [...] > > This has to be 100% reliable, and I think we need to provide some > example mechanism that has that property even if we don't mandate that > it be the only allowed mechanism. The consideration here, I believe, is that there's currently too much latitude by implementations as to what MAC addresses they use here. Restrict one case, you may break some implementation. The missing element is how a pair of implementations of BFD for vxlan discover the necessary information? As far as BFD is concerned, "tell me!" This seems like work that belongs in nvo3. > Destination MAC: This MUST NOT be of one of tenant's MAC > addresses. The destination MAC address MAY be the address > > But the tenant can start using new MAC addresses at any time! How is > BFD-over-VXLAN going to dynamically detect and avoid that? See above. Either it's coordinated with the ability to prevent the tenant from using it or the underlying vxlan environment needs to provide some mechanism to discover what's been provisioned. > associated with the destination VTEP. The MAC address MAY be > configured, or it MAY be learned via a control plane protocol. > The details of how the MAC address is obtained are outside the > scope of this document. > > This all talks about the MAC address being relatively static > configuration, but per above, I don't think that's safe in the face of a > MUST-level requirement to avoid conflicting with tenant MAC addresses. But is it BFD's responsibility to figure this out? This is what the document is suggesting - a higher level with access to the implementation specifics should be supplying the BFD provisioning information. Or manual provisioning in the absence thereof. -- Jeff From nobody Wed Dec 18 12:27:19 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D8F4120C17; Wed, 18 Dec 2019 12:27:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OqBVjV-566sk; Wed, 18 Dec 2019 12:27:16 -0800 (PST) Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id 33457120C15; Wed, 18 Dec 2019 12:27:16 -0800 (PST) Received: by slice.pfrc.org (Postfix, from userid 1001) id 174961E2F6; Wed, 18 Dec 2019 15:31:46 -0500 (EST) Date: Wed, 18 Dec 2019 15:31:45 -0500 From: Jeffrey Haas To: "Carlos Pignataro (cpignata)" Cc: "Eric Vyncke (evyncke)" , The IESG , "draft-ietf-bfd-vxlan@ietf.org" , "rtg-bfd@ietf.org" , "bfd-chairs@ietf.org" Subject: Re: =?iso-8859-1?Q?=C9ric_Vyncke's_Discus?= =?iso-8859-1?Q?s?= on draft-ietf-bfd-vxlan-09: (with DISCUSS and COMMENT) Message-ID: <20191218203145.GD6488@pfrc.org> References: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Dec 2019 20:27:18 -0000 Carlos, Éric, Note that I'm not an expert in the underlying MPLS technologies. I'll make two notes: BFD for vxlan is in a similar feature-space as RFC 5884, BFD for MPLS. RFC 5884, section 7, paragraph 3, suggests a TTL of 1 and provides a reference to RFC 4379. RFC 4379, section 4.3, provides procedures for TTL of 1. My personal inference would be that implementations at least in MPLS-land really want the TTL to be 1 for purposes of doing appropriate encapsulation checks. I agree that GTSM procedures would suggest we may want TTL of 255. I suggest the answer we're looking for here would be provided by parties with appropriate history on why RFC 4379 recommends its procedures. Failing that, I suspect BFD for vxlan is no worse than 4379. -- Jeff On Tue, Dec 17, 2019 at 05:17:11PM +0000, Carlos Pignataro (cpignata) wrote: > Hi, Éric, > > Regarding you first DISCUSS element, I had brought up the same issue. See the 2nd point at https://mailarchive.ietf.org/arch/msg/rtg-bfd/BL9Ob66Yxie4wX13yZJELbYPLJs > > Thanks, > > Carlos. > > 2019/12/17 åˆå‰3:51ã€Ã‰ric Vyncke via Datatracker >ã®ãƒ¡ãƒ¼ãƒ«: > > Éric Vyncke has entered the following ballot position for > draft-ietf-bfd-vxlan-09: Discuss > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ > > > > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > > > Thank you for the work put into this document. > > I fully second Adam's COMMENT that should be fixed before publication (IMHO > this is a DISCUSS). > > Answers to my COMMENTs below will be welcome, even if those COMMENTs are not > blocking. > > As usual, an answer to the DISCUSS is required to clear my DISCUSS though. > > I hope that this helps to improve the document, > > Regards, > > -éric > > == DISCUSS == > > May be I am not familiar enough with BFD, but, RFC 5881 (the one defining BFD) > specifies the use of TTL = Hop Limit = 255.. Why this document uses a value of > 1 ? > > -- Section 3 -- > IPv4-mapped IPv6 addresses are only to be used inside a host and should never > be transmitted in real packets (including packets inside a tunnel) see section > 4.2 of RFC 4038 (even if informational). As other IESG reviewers, I wonder why > ::1/128 is not used? > > -- Section 8 -- > The document specifies no IANA actions while the shepherd write-up talks about > a IANA action. > > -- Section 9 -- > This section is only about IPv4 (TTL and RFC 1812). Please address IPv6 as well. > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > == COMMENTS == > > RFC 5881 (BFD) states that it applies to IPv4/IPv6 tunnels, may I infer that > this document is only required to address the Ethernet encapsulation ? I.e. > specifying the Ethernet MAC addresses? > > -- Section 3 -- > At first sight, I was surprized by having a BFD session per VXLAN VNI as it > will create some scalability issue, but, I assume that this is to detect > misconfiguration as well. If so, perhaps worth mentionnig the reasoning behind? > > In "the inner destination IP address SHOULD" it is unclear whether it is in the > all BFD packets, or only the request one or ... ? > > -- Section 4 -- > While probably defined in RFC7348, should "FCS" be renamed as "Outer Ethernet > FCS" for consistency with the "Outer Ethernet Header" in figure 2 ? > > Why not using the Source MAC address as the Destination MAC address ? This > would ensure that there is no conflict at the expense of "forcing" the > transmission of the frame even if addressed to itself. > > Please consider rewriting the section about TTL/Hop Limit as it is not easy to > parse/read. > > -- Section 9 -- > It is unclear to me (see also Ben's comment) what is the 'attack vector' of > sending packets with TTL=1 ? > > > From nobody Wed Dec 18 13:28:41 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05DF6120D5F; Wed, 18 Dec 2019 13:28:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.499 X-Spam-Level: X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=SKDgmFPx; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=mv5Jh9LN Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y-TYFWFK8Ipe; Wed, 18 Dec 2019 13:28:37 -0800 (PST) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B97C120CC0; Wed, 18 Dec 2019 13:28:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7772; q=dns/txt; s=iport; t=1576704514; x=1577914114; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=r/YpIZ9DGO+cLza5EM8TmFYB/+kQB5R9joWQ9LaH5xY=; b=SKDgmFPxMwDx1abVkzpmmJVTUZyMRIrvtv6Fu8A2jtyD72ZBpYlBl2tu f5D4YtBxt0wW7kf33NM6KoMAOIjahbRZS6zkYzVkDjW+d2zdpDGRwSYI7 7k6fTN6Q7tK4i1hwgSIknfuB0qYL43fLqihTmHox772ZLkjzrziMC5irV U=; IronPort-PHdr: =?us-ascii?q?9a23=3AR0LLTRI1LatcwHX0QtmcpTVXNCE6p7X5OBIU4Z?= =?us-ascii?q?M7irVIN76u5InmIFeBvKd2lFGcW4Ld5roEkOfQv636EU04qZea+DFnEtRXUg?= =?us-ascii?q?Mdz8AfngguGsmAXEbjLfHsZjAzNM9DT1RiuXq8NBsdFQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CwAABZmfpd/4UNJK1lGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYF8gU1QBWxYIAQLKgqDeoNGA4pygl+YBoFCgRA?= =?us-ascii?q?DVAkBAQEMAQElCAIBAYRAAheCAiQ4EwIDDQEBBAEBAQIBBQRthTcMhV8BAQE?= =?us-ascii?q?DEhERDAEBKQ4BDwIBBgIOCgICIwMCAgIwFAEFCwIEDgUigwABgkYDLgEOA5I?= =?us-ascii?q?6kGQCgTiIYXWBMoJ+AQEFgTUBE0GDGRiCEAMGgQ4oiU+CSRqBQT+BEScggkw?= =?us-ascii?q?+gmQCAQIBgSwBDAYBgy8ygiyNRoI4OYV5iT2PIAqCNYcxikCEIhuCQ4d5hEG?= =?us-ascii?q?LUYNHk1iRfQIEAgQFAg4BAQWBaSJnWBEIcBVlAYJBUBgNjRIMFxWDO4UUhT9?= =?us-ascii?q?0AYEni0UOF4ELAYEPAQE?= X-IronPort-AV: E=Sophos;i="5.69,330,1571702400"; d="scan'208";a="687999411" Received: from alln-core-11.cisco.com ([173.36.13.133]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 18 Dec 2019 21:28:32 +0000 Received: from XCH-RCD-010.cisco.com (xch-rcd-010.cisco.com [173.37.102.20]) by alln-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id xBILSXtA021424 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 18 Dec 2019 21:28:33 GMT Received: from xhs-aln-001.cisco.com (173.37.135.118) by XCH-RCD-010.cisco.com (173.37.102.20) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 18 Dec 2019 15:28:32 -0600 Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 18 Dec 2019 15:28:31 -0600 Received: from NAM04-SN1-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 18 Dec 2019 15:28:31 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=LkaJ7F3CovbEq8dW+t5LUplhAS8wcQ9oFSHT5EbYjcKaiOioVDoAHS1JcLYG6U39QlCH4wNE9tjKmsInxl6QTmCq2zK7+AOeJGUiJZzcZEIF8c6zk1gcBRGhcoMMVQvnXpfjSZKNz1Y/2gD6XyTBHxYgmfE3Des/Z2TGAKUs9/EPzFXJTAaVCUsUhGOsgzBKQ+oQGJjtEzWfHHFwwMMQ/O84288Jt0O4SPtiCJx8kiOFMDn7IDYPa44e3rlcgCn6kXZgnCtSLvr9yHsrmYwNtlWZAD3H/QkKNOwClDc5g55xV+Lc2QDZkxdeCDogn6x2DsWekTDEkmMmon4KIle/dA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=r/YpIZ9DGO+cLza5EM8TmFYB/+kQB5R9joWQ9LaH5xY=; b=dkWCyJIvAmsXTSUFCJAXZbgkjb8+A7D6hRrtI/uVLvxhQhBP0DUI94NGov0UGE2vWhaUG5kbRRsTypAgPOzU1IXcn6z5h+SFxHEizWtaHRL+5qsTQdmnkn/oS2GJCWVoSvYltYglf4rzKrmAGNk/BPM7LO3fvCsxScku5HzXpKQz+LtG99UdK8K95XLpmIgePBs+yfi3RzOkL55V/r1pmABxx3Fw5IAiqJgSGVYovg0PPJFOQvj6BPcDzIwTyVc9xz7ZJGazjxKuIvWY/A+ut/KrbvpqpC/4QbnKvEpulWCKpC/8/8HJ7J/NIX9cMdXv/lRxGS4N1zN3CnNO2KMt6g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=r/YpIZ9DGO+cLza5EM8TmFYB/+kQB5R9joWQ9LaH5xY=; b=mv5Jh9LNkrB/OGcyoMkfQ7rUBhFXTXgmmlcJRR9+V9ti1IRphpZHxqwd7on2+MkgRKlrorCU+Bb4soVsxUE2XEMxE2dpi+axli/hlDyrTCSRZVQtOfvY/Flo4OGLZv37pYdlUIdhn/LLl27cYIcH2Y9i31ycUZPzwedh/+bBxfk= Received: from BN6PR11MB0034.namprd11.prod.outlook.com (10.161.156.160) by BN6PR11MB4116.namprd11.prod.outlook.com (10.255.131.100) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2559.14; Wed, 18 Dec 2019 21:28:31 +0000 Received: from BN6PR11MB0034.namprd11.prod.outlook.com ([fe80::d4cf:20e6:8706:d006]) by BN6PR11MB0034.namprd11.prod.outlook.com ([fe80::d4cf:20e6:8706:d006%5]) with mapi id 15.20.2538.019; Wed, 18 Dec 2019 21:28:31 +0000 From: "Carlos Pignataro (cpignata)" To: Jeffrey Haas CC: "Eric Vyncke (evyncke)" , The IESG , "draft-ietf-bfd-vxlan@ietf.org" , "rtg-bfd@ietf.org" , "bfd-chairs@ietf.org" Subject: =?utf-8?B?UmU6IMOJcmljIFZ5bmNrZSdzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi1iZmQt?= =?utf-8?Q?vxlan-09:_(with_DISCUSS_and_COMMENT)?= Thread-Topic: =?utf-8?B?w4lyaWMgVnluY2tlJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLWJmZC12eGxh?= =?utf-8?Q?n-09:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHVtLc75ryADAJO5Ui6+24NC5naA6e+kjMAgAHIsoD//7wKAA== Date: Wed, 18 Dec 2019 21:28:30 +0000 Message-ID: References: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> <20191218203145.GD6488@pfrc.org> In-Reply-To: <20191218203145.GD6488@pfrc.org> Accept-Language: en-US Content-Language: ja-JP X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.20.0.191208 authentication-results: spf=none (sender IP is ) smtp.mailfrom=cpignata@cisco.com; x-originating-ip: [173.38.117.71] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e16b056a-18de-4ea9-138b-08d784013aa7 x-ms-traffictypediagnostic: BN6PR11MB4116: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0255DF69B9 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(39860400002)(136003)(346002)(396003)(376002)(469094003)(199004)(189003)(501584002)(478600001)(64756008)(66446008)(66476007)(66556008)(6506007)(2906002)(86362001)(966005)(2616005)(33656002)(66946007)(6486002)(81166006)(71200400001)(224303003)(6512007)(186003)(26005)(76116006)(81156014)(66574012)(36756003)(316002)(54906003)(6916009)(4326008)(5660300002)(8936002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR11MB4116; H:BN6PR11MB0034.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: e16b056a-18de-4ea9-138b-08d784013aa7 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Dec 2019 21:28:30.7557 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Vt0KbM7MWNSJFpQmAy7XWBIkgvDUSY3Zj+Zy3Om7ANsKuRncKtP4GDgSRmmwjf73EgK0mLxB1I8jmxrDahf1zw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR11MB4116 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.20, xch-rcd-010.cisco.com X-Outbound-Node: alln-core-11.cisco.com Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Dec 2019 21:28:39 -0000 SGksIEplZmYsDQoNClRoZSBUVEwgb2YgMSByZWNvbW1lbmRlZCBmb3IgUkZDIDQzNzkgLyBSRkMg ODAyOSBTNC4zIGlzIGJlY2F1c2UgaWYgdGhlIE1QTFMgcGFja2V0IGlzIG1pcy1yb3V0ZWQsIG9y IHRoZXJlJ3MgYSBmb3J3YXJkaW5nIG1pcy1wcm9ncmFtbWluZywgdGhlbiBhbiBNUExTIExTRSBw b3Agd291bGQgZXhwb3NlIHRoZSBCRkQgcGFja2V0IGFuZCBzbyB0aGF0IHRoZSBCRkQgaXMgbm90 IGZ1cnRoZXIgbWlzLWZvcndhcmRlZC4NCg0KSW4gdGhlIFZYTEFOIGNhc2UgYW4gaW50ZXJtZWRp YXRlIHJvdXRlciB3b3VsZCBub3QgcmVtb3ZlIHRoZSBWWExBTiBlbmNhcCBiZWNhdXNlIHRoZSBv dXRlciBlbmNhcCBpcyBJUCAod2l0aCBhIGRlc3RpbmF0aW9uIGFkZHJlc3MsIG5vdCBhbiBNUExT IExhYmVsIHRoYXQgY2FuIGJlIG1pcy1pbnRlcnByZXRlZCBpbiBjb250ZXh0KSBhbmQgYSBtaWQt cG9pbnQgcm91dGVyIHdvdWxkIG5vdCB1bmRlcnN0YW5kIFZYTEFOLg0KDQpUaGFua3MsDQoNCkNh cmxvcy4NCg0K77u/MjAxOS8xMi8xOCDljYjlvowzOjI3IOOBq+OAgSJKZWZmcmV5IEhhYXMiIDxq aGFhc0BwZnJjLm9yZz4g44KS5pu444GN6L6844G/44G+44GX44GfOg0KDQogICAgQ2FybG9zLCDD iXJpYywNCiAgICANCiAgICBOb3RlIHRoYXQgSSdtIG5vdCBhbiBleHBlcnQgaW4gdGhlIHVuZGVy bHlpbmcgTVBMUyB0ZWNobm9sb2dpZXMuICBJJ2xsIG1ha2UNCiAgICB0d28gbm90ZXM6DQogICAg DQogICAgQkZEIGZvciB2eGxhbiBpcyBpbiBhIHNpbWlsYXIgZmVhdHVyZS1zcGFjZSBhcyBSRkMg NTg4NCwgQkZEIGZvciBNUExTLg0KICAgIA0KICAgIFJGQyA1ODg0LCBzZWN0aW9uIDcsIHBhcmFn cmFwaCAzLCBzdWdnZXN0cyBhIFRUTCBvZiAxIGFuZCBwcm92aWRlcyBhDQogICAgcmVmZXJlbmNl IHRvIFJGQyA0Mzc5Lg0KICAgIA0KICAgIFJGQyA0Mzc5LCBzZWN0aW9uIDQuMywgcHJvdmlkZXMg cHJvY2VkdXJlcyBmb3IgVFRMIG9mIDEuDQogICAgDQogICAgTXkgcGVyc29uYWwgaW5mZXJlbmNl IHdvdWxkIGJlIHRoYXQgaW1wbGVtZW50YXRpb25zIGF0IGxlYXN0IGluIE1QTFMtbGFuZA0KICAg IHJlYWxseSB3YW50IHRoZSBUVEwgdG8gYmUgMSBmb3IgcHVycG9zZXMgb2YgZG9pbmcgYXBwcm9w cmlhdGUgZW5jYXBzdWxhdGlvbg0KICAgIGNoZWNrcy4gDQogICAgDQogICAgSSBhZ3JlZSB0aGF0 IEdUU00gcHJvY2VkdXJlcyB3b3VsZCBzdWdnZXN0IHdlIG1heSB3YW50IFRUTCBvZiAyNTUuDQog ICAgDQogICAgSSBzdWdnZXN0IHRoZSBhbnN3ZXIgd2UncmUgbG9va2luZyBmb3IgaGVyZSB3b3Vs ZCBiZSBwcm92aWRlZCBieSBwYXJ0aWVzDQogICAgd2l0aCBhcHByb3ByaWF0ZSBoaXN0b3J5IG9u IHdoeSBSRkMgNDM3OSByZWNvbW1lbmRzIGl0cyBwcm9jZWR1cmVzLiAgDQogICAgDQogICAgRmFp bGluZyB0aGF0LCBJIHN1c3BlY3QgQkZEIGZvciB2eGxhbiBpcyBubyB3b3JzZSB0aGFuIDQzNzku DQogICAgDQogICAgLS0gSmVmZg0KICAgIA0KICAgIA0KICAgIE9uIFR1ZSwgRGVjIDE3LCAyMDE5 IGF0IDA1OjE3OjExUE0gKzAwMDAsIENhcmxvcyBQaWduYXRhcm8gKGNwaWduYXRhKSB3cm90ZToN CiAgICA+IEhpLCDDiXJpYywNCiAgICA+IA0KICAgID4gUmVnYXJkaW5nIHlvdSBmaXJzdCBESVND VVNTIGVsZW1lbnQsIEkgaGFkIGJyb3VnaHQgdXAgdGhlIHNhbWUgaXNzdWUuIFNlZSB0aGUgMm5k IHBvaW50IGF0IGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvcnRnLWJmZC9C TDlPYjY2WXhpZTR3WDEzeVpKRUxiWVBMSnMNCiAgICA+IA0KICAgID4gVGhhbmtzLA0KICAgID4g DQogICAgPiBDYXJsb3MuDQogICAgPiANCiAgICA+IDIwMTkvMTIvMTcg5Y2I5YmNMzo1MeOAgcOJ cmljIFZ5bmNrZSB2aWEgRGF0YXRyYWNrZXIgPG5vcmVwbHlAaWV0Zi5vcmc8bWFpbHRvOm5vcmVw bHlAaWV0Zi5vcmc+PuOBruODoeODvOODqzoNCiAgICA+IA0KICAgID4gw4lyaWMgVnluY2tlIGhh cyBlbnRlcmVkIHRoZSBmb2xsb3dpbmcgYmFsbG90IHBvc2l0aW9uIGZvcg0KICAgID4gZHJhZnQt aWV0Zi1iZmQtdnhsYW4tMDk6IERpc2N1c3MNCiAgICA+IA0KICAgID4gV2hlbiByZXNwb25kaW5n LCBwbGVhc2Uga2VlcCB0aGUgc3ViamVjdCBsaW5lIGludGFjdCBhbmQgcmVwbHkgdG8gYWxsDQog ICAgPiBlbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZl ZWwgZnJlZSB0byBjdXQgdGhpcw0KICAgID4gaW50cm9kdWN0b3J5IHBhcmFncmFwaCwgaG93ZXZl ci4pDQogICAgPiANCiAgICA+IA0KICAgID4gUGxlYXNlIHJlZmVyIHRvIGh0dHBzOi8vd3d3Lmll dGYub3JnL2llc2cvc3RhdGVtZW50L2Rpc2N1c3MtY3JpdGVyaWEuaHRtbA0KICAgID4gZm9yIG1v cmUgaW5mb3JtYXRpb24gYWJvdXQgSUVTRyBESVNDVVNTIGFuZCBDT01NRU5UIHBvc2l0aW9ucy4N CiAgICA+IA0KICAgID4gDQogICAgPiBUaGUgZG9jdW1lbnQsIGFsb25nIHdpdGggb3RoZXIgYmFs bG90IHBvc2l0aW9ucywgY2FuIGJlIGZvdW5kIGhlcmU6DQogICAgPiBodHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWJmZC12eGxhbi8NCiAgICA+IA0KICAgID4gDQog ICAgPiANCiAgICA+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAgICA+IERJU0NVU1M6DQogICAgPiAtLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tDQogICAgPiANCiAgICA+IA0KICAgID4gVGhhbmsgeW91IGZvciB0aGUgd29yayBwdXQg aW50byB0aGlzIGRvY3VtZW50Lg0KICAgID4gDQogICAgPiBJIGZ1bGx5IHNlY29uZCBBZGFtJ3Mg Q09NTUVOVCB0aGF0IHNob3VsZCBiZSBmaXhlZCBiZWZvcmUgcHVibGljYXRpb24gKElNSE8NCiAg ICA+IHRoaXMgaXMgYSBESVNDVVNTKS4NCiAgICA+IA0KICAgID4gQW5zd2VycyB0byBteSBDT01N RU5UcyBiZWxvdyB3aWxsIGJlIHdlbGNvbWUsIGV2ZW4gaWYgdGhvc2UgQ09NTUVOVHMgYXJlIG5v dA0KICAgID4gYmxvY2tpbmcuDQogICAgPiANCiAgICA+IEFzIHVzdWFsLCBhbiBhbnN3ZXIgdG8g dGhlIERJU0NVU1MgaXMgcmVxdWlyZWQgdG8gY2xlYXIgbXkgRElTQ1VTUyB0aG91Z2guDQogICAg PiANCiAgICA+IEkgaG9wZSB0aGF0IHRoaXMgaGVscHMgdG8gaW1wcm92ZSB0aGUgZG9jdW1lbnQs DQogICAgPiANCiAgICA+IFJlZ2FyZHMsDQogICAgPiANCiAgICA+IC3DqXJpYw0KICAgID4gDQog ICAgPiA9PSBESVNDVVNTID09DQogICAgPiANCiAgICA+IE1heSBiZSBJIGFtIG5vdCBmYW1pbGlh ciBlbm91Z2ggd2l0aCBCRkQsIGJ1dCwgUkZDIDU4ODEgKHRoZSBvbmUgZGVmaW5pbmcgQkZEKQ0K ICAgID4gc3BlY2lmaWVzIHRoZSB1c2Ugb2YgVFRMID0gSG9wIExpbWl0ID0gMjU1Li4gV2h5IHRo aXMgZG9jdW1lbnQgdXNlcyBhIHZhbHVlIG9mDQogICAgPiAxID8NCiAgICA+IA0KICAgID4gLS0g U2VjdGlvbiAzIC0tDQogICAgPiBJUHY0LW1hcHBlZCBJUHY2IGFkZHJlc3NlcyBhcmUgb25seSB0 byBiZSB1c2VkIGluc2lkZSBhIGhvc3QgYW5kIHNob3VsZCBuZXZlcg0KICAgID4gYmUgdHJhbnNt aXR0ZWQgaW4gcmVhbCBwYWNrZXRzIChpbmNsdWRpbmcgcGFja2V0cyBpbnNpZGUgYSB0dW5uZWwp IHNlZSBzZWN0aW9uDQogICAgPiA0LjIgb2YgUkZDIDQwMzggKGV2ZW4gaWYgaW5mb3JtYXRpb25h bCkuIEFzIG90aGVyIElFU0cgcmV2aWV3ZXJzLCBJIHdvbmRlciB3aHkNCiAgICA+IDo6MS8xMjgg aXMgbm90IHVzZWQ/DQogICAgPiANCiAgICA+IC0tIFNlY3Rpb24gOCAtLQ0KICAgID4gVGhlIGRv Y3VtZW50IHNwZWNpZmllcyBubyBJQU5BIGFjdGlvbnMgd2hpbGUgdGhlIHNoZXBoZXJkIHdyaXRl LXVwIHRhbGtzIGFib3V0DQogICAgPiBhIElBTkEgYWN0aW9uLg0KICAgID4gDQogICAgPiAtLSBT ZWN0aW9uIDkgLS0NCiAgICA+IFRoaXMgc2VjdGlvbiBpcyBvbmx5IGFib3V0IElQdjQgKFRUTCBh bmQgUkZDIDE4MTIpLiBQbGVhc2UgYWRkcmVzcyBJUHY2IGFzIHdlbGwuDQogICAgPiANCiAgICA+ IA0KICAgID4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KICAgID4gQ09NTUVOVDoNCiAgICA+IC0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0NCiAgICA+IA0KICAgID4gPT0gQ09NTUVOVFMgPT0NCiAgICA+IA0KICAgID4gUkZDIDU4ODEg KEJGRCkgc3RhdGVzIHRoYXQgaXQgYXBwbGllcyB0byBJUHY0L0lQdjYgdHVubmVscywgbWF5IEkg aW5mZXIgdGhhdA0KICAgID4gdGhpcyBkb2N1bWVudCBpcyBvbmx5IHJlcXVpcmVkIHRvIGFkZHJl c3MgdGhlIEV0aGVybmV0IGVuY2Fwc3VsYXRpb24gPyBJLmUuDQogICAgPiBzcGVjaWZ5aW5nIHRo ZSBFdGhlcm5ldCBNQUMgYWRkcmVzc2VzPw0KICAgID4gDQogICAgPiAtLSBTZWN0aW9uIDMgLS0N CiAgICA+IEF0IGZpcnN0IHNpZ2h0LCBJIHdhcyBzdXJwcml6ZWQgYnkgaGF2aW5nIGEgQkZEIHNl c3Npb24gcGVyIFZYTEFOIFZOSSBhcyBpdA0KICAgID4gd2lsbCBjcmVhdGUgc29tZSBzY2FsYWJp bGl0eSBpc3N1ZSwgYnV0LCBJIGFzc3VtZSB0aGF0IHRoaXMgaXMgdG8gZGV0ZWN0DQogICAgPiBt aXNjb25maWd1cmF0aW9uIGFzIHdlbGwuIElmIHNvLCBwZXJoYXBzIHdvcnRoIG1lbnRpb25uaWcg dGhlIHJlYXNvbmluZyBiZWhpbmQ/DQogICAgPiANCiAgICA+IEluICJ0aGUgaW5uZXIgZGVzdGlu YXRpb24gSVAgYWRkcmVzcyBTSE9VTEQiIGl0IGlzIHVuY2xlYXIgd2hldGhlciBpdCBpcyBpbiB0 aGUNCiAgICA+IGFsbCBCRkQgcGFja2V0cywgb3Igb25seSB0aGUgcmVxdWVzdCBvbmUgb3IgLi4u ID8NCiAgICA+IA0KICAgID4gLS0gU2VjdGlvbiA0IC0tDQogICAgPiBXaGlsZSBwcm9iYWJseSBk ZWZpbmVkIGluIFJGQzczNDgsIHNob3VsZCAiRkNTIiBiZSByZW5hbWVkIGFzICJPdXRlciBFdGhl cm5ldA0KICAgID4gRkNTIiBmb3IgY29uc2lzdGVuY3kgd2l0aCB0aGUgIk91dGVyIEV0aGVybmV0 IEhlYWRlciIgaW4gZmlndXJlIDIgPw0KICAgID4gDQogICAgPiBXaHkgbm90IHVzaW5nIHRoZSBT b3VyY2UgTUFDIGFkZHJlc3MgYXMgdGhlIERlc3RpbmF0aW9uIE1BQyBhZGRyZXNzID8gVGhpcw0K ICAgID4gd291bGQgZW5zdXJlIHRoYXQgdGhlcmUgaXMgbm8gY29uZmxpY3QgYXQgdGhlIGV4cGVu c2Ugb2YgImZvcmNpbmciIHRoZQ0KICAgID4gdHJhbnNtaXNzaW9uIG9mIHRoZSBmcmFtZSBldmVu IGlmIGFkZHJlc3NlZCB0byBpdHNlbGYuDQogICAgPiANCiAgICA+IFBsZWFzZSBjb25zaWRlciBy ZXdyaXRpbmcgdGhlIHNlY3Rpb24gYWJvdXQgVFRML0hvcCBMaW1pdCBhcyBpdCBpcyBub3QgZWFz eSB0bw0KICAgID4gcGFyc2UvcmVhZC4NCiAgICA+IA0KICAgID4gLS0gU2VjdGlvbiA5IC0tDQog ICAgPiBJdCBpcyB1bmNsZWFyIHRvIG1lIChzZWUgYWxzbyBCZW4ncyBjb21tZW50KSB3aGF0IGlz IHRoZSAnYXR0YWNrIHZlY3Rvcicgb2YNCiAgICA+IHNlbmRpbmcgcGFja2V0cyB3aXRoIFRUTD0x ID8NCiAgICA+IA0KICAgID4gDQogICAgPiANCiAgICANCg0K From nobody Wed Dec 18 13:36:41 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBBAB120236; Wed, 18 Dec 2019 13:36:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EqkmO4FZjLRc; Wed, 18 Dec 2019 13:36:32 -0800 (PST) Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id 809CA12001A; Wed, 18 Dec 2019 13:36:32 -0800 (PST) Received: by slice.pfrc.org (Postfix, from userid 1001) id 725D51E2F6; Wed, 18 Dec 2019 16:41:02 -0500 (EST) Date: Wed, 18 Dec 2019 16:41:02 -0500 From: Jeffrey Haas To: "Carlos Pignataro (cpignata)" Cc: "Eric Vyncke (evyncke)" , The IESG , "draft-ietf-bfd-vxlan@ietf.org" , "rtg-bfd@ietf.org" , "bfd-chairs@ietf.org" Subject: Re: =?iso-8859-1?Q?=C9ric_Vyncke's_Discus?= =?iso-8859-1?Q?s?= on draft-ietf-bfd-vxlan-09: (with DISCUSS and COMMENT) Message-ID: <20191218214102.GF6488@pfrc.org> References: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> <20191218203145.GD6488@pfrc.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Dec 2019 21:36:34 -0000 Carlos, On Wed, Dec 18, 2019 at 09:28:30PM +0000, Carlos Pignataro (cpignata) wrote: > The TTL of 1 recommended for RFC 4379 / RFC 8029 S4.3 is because if the MPLS packet is mis-routed, or there's a forwarding mis-programming, then an MPLS LSE pop would expose the BFD packet and so that the BFD is not further mis-forwarded. > > In the VXLAN case an intermediate router would not remove the VXLAN encap because the outer encap is IP (with a destination address, not an MPLS Label that can be mis-interpreted in context) and a mid-point router would not understand VXLAN. Explained, that now seems obvious. Thanks. :-) But given that point, what precisely is the objection to the inner IP header of the BFD for vxlan having a TTL of 1? I think this is partially a matter of attack spaces varying depending on whether we're targeting the management VNI vs. a tenant. In the case of the management VNI, we (should) have very strong control over what BFD traffic is getting encapsulated. However, for tenant VNI mode, is the argument that depending on what the other vxlan PDU parameters look like, tenant sourced BFD PDUs may be indistinguishable from ones sourced by the management infrastructure? And if so, how would GTSM help us here? -- Jeff From nobody Wed Dec 18 13:46:49 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 579AD120089; Wed, 18 Dec 2019 13:46:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=cooperw.in header.b=EbeyzLDt; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=ZzkQOh2x Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P4_K0ms9D-cv; Wed, 18 Dec 2019 13:46:40 -0800 (PST) Received: from wout2-smtp.messagingengine.com (wout2-smtp.messagingengine.com [64.147.123.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E38DA12001A; Wed, 18 Dec 2019 13:46:39 -0800 (PST) Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.west.internal (Postfix) with ESMTP id 0426F4A4; Wed, 18 Dec 2019 16:46:38 -0500 (EST) Received: from mailfrontend1 ([10.202.2.162]) by compute7.internal (MEProxy); Wed, 18 Dec 2019 16:46:39 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cooperw.in; h= from:message-id:content-type:mime-version:subject:date :in-reply-to:cc:to:references; s=fm1; bh=Uxj3gCBSxZRs54pmAYWCig+ Yv8IzF4cUfzjL9NJzNTA=; b=EbeyzLDtSV8NBQSPhF8QNDyosWK2Z6r8g0Uq6Ig rglUqrTyfbUyGxIK6xeEP9P62LRLhuQ9ueafrpOFMw4SsW2tIJ65O+WG71YyF00J JeJQpxGKCZq4kUPgkDDnwc0TY30f+J6wg///zY3m977ihLeu6u+zMsMYvaop6e7v TSmS79cYlC28rbDg7gkabbEQwpTn0XuMPt5qOHwFItmuhh0B3XkcIZonBVOdYM/Y cR6jYaS6iH84gsMKXBA0XR1mUx9sd2LEYaF86Hpv6jYE50af+tHp84GyH2TtTVQt yQYF6m9JicbcAISP93VY728uxY1dgsaPQTWqukpcelnfnBQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=Uxj3gC BSxZRs54pmAYWCig+Yv8IzF4cUfzjL9NJzNTA=; b=ZzkQOh2xbZeEjmCgNsDsXv glr/EHqaa/rFblPwhkX2IazFqozxQvhVoCFt4ZdL+aw/fcWECGmUFNIaczMgXMsl OHemTfob2dWZyM+aCzS2OE0vSRlCDwXPhd3MuoeSJEWGJ++MaoAbEQLNbm+il2FM ZdPVGpUQFM1F7AeXydrGS31D4qPGeleNcJsrw7XHdWir3gh/o3CZObXem0OcrCle EEXDunyn69v6cwxMSuWiigqB7WcaCqY/gRrd4Qj1XhlOgi1SQXK1NTPApQlhNJhz 14oQv+S1xAYDv8k/DXDWA1LNDkTXdwUhrz/ZTQmxYa9OHddpY0GNNxbHq1te89NQ == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedufedrvddtledgudehtdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpefhkfgtggfuffgjvfhfofesrgdtmherhhdtjeenucfhrhhomheptehlihhs shgrucevohhophgvrhcuoegrlhhishhsrgestghoohhpvghrfidrihhnqeenucffohhmrg hinhepihgvthhfrdhorhhgnecukfhppedujeefrdefkedruddujedrieehnecurfgrrhgr mhepmhgrihhlfhhrohhmpegrlhhishhsrgestghoohhpvghrfidrihhnnecuvehluhhsth gvrhfuihiivgeptd X-ME-Proxy: Received: from dhcp-10-150-9-228.cisco.com (unknown [173.38.117.65]) by mail.messagingengine.com (Postfix) with ESMTPA id 7ED4D8005C; Wed, 18 Dec 2019 16:46:37 -0500 (EST) From: Alissa Cooper Message-Id: <523551D0-BDC8-4DCA-B112-6549CC58898C@cooperw.in> Content-Type: multipart/alternative; boundary="Apple-Mail=_02263575-B3D2-4F2D-8047-F9333AC950FF" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Subject: Re: [Gen-art] Genart telechat review of draft-ietf-bfd-vxlan-09 Date: Wed, 18 Dec 2019 16:46:36 -0500 In-Reply-To: Cc: last-call@ietf.org, General Area Review Team , draft-ietf-bfd-vxlan.all@ietf.org, rtg-bfd WG To: Greg Mirsky , Erik Kline References: <157655999615.24604.538120700710888094@ietfa.amsl.com> X-Mailer: Apple Mail (2.3445.9.1) Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Dec 2019 21:46:42 -0000 --Apple-Mail=_02263575-B3D2-4F2D-8047-F9333AC950FF Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Erik, thanks for your review. Greg, thanks for addressing Erik=E2=80=99s = comments. I entered a No Objection ballot. Alissa > On Dec 17, 2019, at 6:17 PM, Greg Mirsky = wrote: >=20 > Hi Erik, > thank you for your reviews and for sharing thoughts on the selection = of the destination IPv6 address. Following recommendations from Adam, = I've updated the document to use the proper representation of IPv6 = addresses and refer to them as "IPv4-mapped IPv4 loopback addresses". = These updates are in the attached diff.. Adam also noted that RFC 8504 = doesn't have a similar wording regarding the handling of packets = addressed to an address from 127/8 network as RFC 1812 (of course, = referring to IPv4-mapped 127/8 addresses): > A router SHOULD NOT forward, except over a loopback interface, = any > packet that has a destination address on network 127. A router > MAY have a switch that allows the network manager to disable = these > checks. If such a switch is provided, it MUST default to > performing the checks. > I'd note, that the egress BFD system is expected to accept a BFD = packet with the destination IP address from the specified range without = being provisioned for the specific address from that range. Perhaps that = makes the use of this range possible even though its special handling is = not explicitly documented. >=20 > Best regards, > Greg >=20 >=20 > On Mon, Dec 16, 2019 at 9:19 PM Erik Kline via Datatracker = > wrote: > Reviewer: Erik Kline > Review result: Ready with Nits >=20 > I am the assigned Gen-ART reviewer for this draft. The General Area > Review Team (Gen-ART) reviews all IETF documents being processed > by the IESG for the IETF Chair. Please wait for direction from your > document shepherd or AD before posting a new version of the draft. >=20 > For more information, please see the FAQ at >=20 > >. >=20 > Document: draft-ietf-bfd-vxlan-?? > Reviewer: Erik Kline > Review Date: 2019-12-16 > IETF LC End Date: None > IESG Telechat date: 2019-12-19 >=20 > Summary: >=20 > -09 addresses my concerns from -07. Thank you for this. >=20 > The one "nit" is that it seems to have introduced a recommendation to = use > ::ffff:7f00:0/104 as an IPv6 loopback prefix. (a) This document = should follow > the format recommendations of RFC 5952 section 4.3 and lowercase the = "F"s. But > (b) more importantly, I'm not sure how implementations may treats this = space. >=20 > The use of an RFC4291 section-2.5.5.2 mapped v4 address doesn't = necessarily > make the packet a part of an IPv6 connection. Nevertheless, I'm not = sure I > have a strong feeling about this as it may still exercise enough of = the IPv6 > stack in a VTEP. >=20 > I definitely do think that in the case of BFD on the management VNI = targeting > an IPv6 link-local address of the VTEP would be better. However, I = expect that > if ::ffff:127.0.0.0 does prove to have some issues in the future a = -bis can be > written quickly with a recommendation. >=20 > Also, Suresh may have ideas for a solution. >=20 > Major issues: >=20 > Minor issues: >=20 > Nits/editorial comments: >=20 >=20 > _________________________________________= ______ > Gen-art mailing list > Gen-art@ietf.org > https://www.ietf.org/mailman/listinfo/gen-art --Apple-Mail=_02263575-B3D2-4F2D-8047-F9333AC950FF Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Erik,= thanks for your review. Greg, thanks for addressing Erik=E2=80=99s = comments. I entered a No Objection ballot.

Alissa


On Dec 17, 2019, at 6:17 PM, Greg Mirsky <gregimirsky@gmail.com> wrote:

Hi Erik,
thank you = for your reviews and for sharing thoughts on the selection of the = destination IPv6 address. Following recommendations from Adam, I've = updated the document to use the proper representation of IPv6 addresses = and refer to them as "IPv4-mapped IPv4 loopback addresses". These = updates are in the attached diff.. Adam also noted that RFC 8504 doesn't = have a similar wording regarding the handling of packets addressed to an = address from 127/8 network as RFC 1812 (of course, referring to = IPv4-mapped 127/8 addresses):
      A router SHOULD = NOT forward, except over a loopback interface, any
  =     packet that has a destination address on network = 127.  A router
      MAY have a switch = that allows the network manager to disable these
  =     checks.  If such a switch is provided, it MUST = default to
      performing the checks.
I'd note, that the egress BFD system is = expected to accept a BFD packet with the destination IP address from the = specified range without being provisioned for the specific address from = that range. Perhaps that makes the use of this range possible even = though its special handling is not explicitly documented.

Best regards,
Greg


On Mon, Dec 16, 2019 at 9:19 PM Erik Kline via = Datatracker <noreply@ietf.org> wrote:
Reviewer: Erik Kline
Review result: Ready with Nits

I am the assigned Gen-ART reviewer for this draft. The General Area
Review Team (Gen-ART) reviews all IETF documents being processed
by the IESG for the IETF Chair. Please wait for direction from your
document shepherd or AD before posting a new version of the draft.

For more information, please see the FAQ at

<https://trac.ietf.org/trac/gen/wiki/GenArtfaq>.

Document: draft-ietf-bfd-vxlan-??
Reviewer: Erik Kline
Review Date: 2019-12-16
IETF LC End Date: None
IESG Telechat date: 2019-12-19

Summary:

-09 addresses my concerns from -07.  Thank you for this.

The one "nit" is that it seems to have introduced a recommendation to = use
::ffff:7f00:0/104 as an IPv6 loopback prefix.  (a) This document = should follow
the format recommendations of RFC 5952 section 4.3 and lowercase the = "F"s.  But
(b) more importantly, I'm not sure how implementations may treats this = space.

The use of an RFC4291 section-2.5.5.2 mapped v4 address doesn't = necessarily
make the packet a part of an IPv6 connection.  Nevertheless, I'm = not sure I
have a strong feeling about this as it may still exercise enough of the = IPv6
stack in a VTEP.

I definitely do think that in the case of BFD on the management VNI = targeting
an IPv6 link-local address of the VTEP would be better.  However, I = expect that
if ::ffff:127.0.0.0 does prove to have some issues in the future a -bis = can be
written quickly with a recommendation.

Also, Suresh may have ideas for a solution.

Major issues:

Minor issues:

Nits/editorial comments:


<Diff_ draft-ietf-bfd-vxlan-09.txt - = draft-ietf-bfd-vxlan-10.txt.html>_______________________________= ________________
Gen-art mailing list
Gen-art@ietf.org
https://www.ietf.org/mailman/listinfo/gen-art

= --Apple-Mail=_02263575-B3D2-4F2D-8047-F9333AC950FF-- From nobody Wed Dec 18 14:03:08 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C0F1E120089; Wed, 18 Dec 2019 14:03:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IJpxQ15GiPmH; Wed, 18 Dec 2019 14:03:01 -0800 (PST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E3DBA12001A; Wed, 18 Dec 2019 14:03:00 -0800 (PST) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id xBIM2rmo017729 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 18 Dec 2019 17:02:56 -0500 Date: Wed, 18 Dec 2019 14:02:46 -0800 From: Benjamin Kaduk To: Jeffrey Haas Cc: The IESG , draft-ietf-bfd-vxlan@ietf.org, bfd-chairs@ietf.org, rtg-bfd@ietf.org Subject: Re: Benjamin Kaduk's Discuss on draft-ietf-bfd-vxlan-09: (with DISCUSS and COMMENT) Message-ID: <20191218220246.GK81833@kduck.mit.edu> References: <157653979360.24617.1864402887480503965.idtracker@ietfa.amsl.com> <20191218202448.GC6488@pfrc.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20191218202448.GC6488@pfrc.org> User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Dec 2019 22:03:04 -0000 Hi Jeff, I think I can only touch on a few points before telechat-time rolls around, and will finish off afterwards. On Wed, Dec 18, 2019 at 03:24:48PM -0500, Jeffrey Haas wrote: > Benjamin, > > On Mon, Dec 16, 2019 at 03:43:13PM -0800, Benjamin Kaduk via Datatracker wrote: > > Benjamin Kaduk has entered the following ballot position for > > ---------------------------------------------------------------------- > > DISCUSS: > > ---------------------------------------------------------------------- > > > > I have a few points that I think merit IESG discussion. > > > > (1) I see that several directorate reviewers expressed unease at the > > destination (IP and) MAC address assignment procedure for the inner > > VXLAN headers, and appreciate that there was extensive on-list > > discussion (more than I could follow). That said, I failed to find a > > clear statement of why the current text is believed to be safe, and in > > fact my reading of the current text is that the described procedure is > > *not* safe. Pointers to key parts of the WG discusison would be more > > than welcome! > > One high level point that likely didn't survive the rather verbose comment > chain is there are two implementations of this draft. Some of the > considerations covered in the guidance here is "please don't break shipping > code". > > While this is IETF, and shipping code isn't always a blocking point to > document changes, I'd suggest that as a consideration. It did indeed not survive (at least my pass through) the comment chain, so thank you for calling it out. It is indeed a consideration, and I expect some actual discussion on the call tomorrow. > > To take something of a high-level view of my concerns, if we think of > > the VXLAN as being a tunnel between VTEPs that carry encapsulated tenant > > traffic, then what we're trying to do is roughly like BFD between VTEPs, > > but we want to get fault-detection over as broad a coverage as we can > > (the "outermost part of the tunnel"), so we want to have the option of > > per-VNI BFD instead of just endpoint-to-endpoint (VTEP-to-VTEP). > > You've summarized this clearly. Joel Halpern, in particular, raised this > point multiple times. Effectively, "what are we testing?" And the response > not clearly converging on exactly one of the two possibilities. > > As is noted in the various IESG discussion, each of the two test points > raise slightly different considerations. > > > However, we end up having to do this by trying to insert a thin filter > > into the tenant's address space (i.e., the inner VXLAN header) and pick > > out the specific stream of BFD traffic that we're introducing. This is, > > in some sense, a namespace grab in what is conceptually the tenant's > > namespace, and we have to be careful that what we do is either > > guaranteed to not impact the tenant or well-documented and > > compartmentalized (akin to the "well-known URIs"). > > Possibly, and it's certainly a consideration. However, I think I'm less > convinced of it being quite the level of violation that seems to be > reflected in the rest of the IESG comments in the various other threads. > I'll respond to that detail a bit below. > > > I've made comments at several places in the document that are more > > directly tied to specific pieces of text, but in general, if we assume > > that the tenant can add/remove new addresses at will within their VXLAN > > abstration, then any attempt to preconfigure by mutual agreement the BFD > > addresses to use at the VTEPs or to use the VTEP's normal (outer) > > address as the sentinel value seems subject to the tenant coming in and > > subsequently trying to use that address, leading to (some of) the > > tenant's traffic getting silently filtered and interpreted by the VTEP. > > If we were using domain names as identifiers, we could allocate > > something under .arpa or similar, but I think our options are more > > limited when numerical addresses are used. > > > > The option suggested by the rtg-dir reviewer of always using the > > management VNI does not suffer from this namespacing issue, though I > > recognize that it does reduce the scope over which fault-detection is > > available, for the cases when different VNIs' traffic are routed or > > handled differently. > > This is a clean summary of the considerations. At least a portion of the WG > seems to be comfortable with "test to the management VNI". However, another > (smaller, I believe) portion were wanting to test one layer further in. It is reassuring that I at least managed to summarize the situation tolerably. Is it fair to say that testing "one layer further in" is a superset of what "test to the managemenet VNI" can do? > > (2) Section 6 says: > > > > The selection > > of the VNI number of the Management VNI MUST be controlled through > > management plane. An implementation MAY use VNI number 1 as the > > default value for the Management VNI. All VXLAN packets received on > > the Management VNI MUST be processed locally and MUST NOT be > > forwarded to a tenant. > > > > It seems like the management VNI concept is something that would apply > > to the entire VXLAN deployment and not just to the BFD-using portions; > > is this already defined somewhere (in which case we should reference > > it), or is it new with this document? In the latter case wouldn't it be > > an update to the core VXLAN spec? (I note that there are some > > procedural hoops to jump through for an IETF-stream document to update > > an ISE-stream document...) > > The relevant portion of the archive will have the Subject: line text > including: > "Trapping BFD Control packet at VTEP" > > A portion of the discussion relating to the magic number of the management > VNI suggested '1', instead of '0'. > > At least some implementations already use '0': > https://mailarchive.ietf.org/arch/msg/rtg-bfd/6WfSATmfoPv4AD6RmD-Xb7zz4CE > > The argument to not use '0' starts roughly here: > https://mailarchive.ietf.org/arch/msg/rtg-bfd/z8E_a5k_r4pLLs5YfNsL_Xm9_Us > > You're correct, IMO, that there's no standard practice and the above seems > to support this. I believe this leaves the document authors in the position > of being requested to make a recommendation for the default value of this > field and knowing that the default would be invalid on some platforms. > > The alternative is requiring implementations to always configure this value. > > I suggest the IESG determine whether it wants a default value here or not. > If not, the text should be adjusted to require configuration. If yes, the > IESG should consider whether the nvo3 group should produce some document > that covers current operational practices. That does sound like something we should try to talk about on the telechat as well; thanks for raising it so clearly. > > ---------------------------------------------------------------------- > > COMMENT: > > ---------------------------------------------------------------------- > > 0:0:0:0:0:FFFF:7F00:0/104 range for IPv6). There could be a firewall > > configured on VTEP to block loopback addresses if set as the > > destination IP in the inner IP header. It is RECOMMENDED to allow > > addresses from the loopback range through a firewall only if it is > > used as the destination IP address in the inner IP header, and the > > destination UDP port is set to 3784 [RFC5881]. > > > > I think we should reword this to make it clear that the default behavior > > is still "block all incoming traffic with loopback destination" and that > > the exception is tightly scoped to the encapsulated VXLAN traffic > > discussed in this document and the specific destination port *and when > > BFD has been configured for the VTEP*. I note that well-known ports are > > not reserved ports, and we have no guarangee that only a BFD > > implementation would be listening on port 3784. > > I don't think this consideration is necessarily critical. I think I'm in agreement about its criticality, and will see if I can come up with some actual text ... later. -Ben > BFD implementations residing in the related instance communicating to other > instances across the vxlan environment would be using RFC 5881 or RFC 5883 > style BFD. Since this isn't a tunneled BFD, the IP endpoints of the BFD > control traffic will be unicast addresses rather than the reserved > "loopback" ranges; i.e. 127/8 ::FFFF:127.0.0.0/104. In order for those > ranges to be problematic, it'd be necessary for the client to be able to > manually encapsulate a vxlan packet - a security issue of its own. > > A related point in this discussion is "we're hijacking an address managed by > the local tenant". While true, it's in the above ranges and thus somewhat > under the auspice of the host OS to assert control. I'm aware of some > unusual applications that make use of configured addresses in those ranges > for on-box communications, but they're also on the unusual end of things. > > What sort of text would you want to cover the case that when BFD is run > up-to-the-tenant mode in this circumstance that an address MUST be reserved > for the BFD over vxlan application and that this address SHALL NOT be > available to the tenant for its own use? > > > VXLAN packet. The choice of Destination MAC and Destination IP > > addresses for the inner Ethernet frame MUST ensure that the BFD > > Control packet is not forwarded to a tenant but is processed locally > > at the remote VTEP. [...] > > > > This has to be 100% reliable, and I think we need to provide some > > example mechanism that has that property even if we don't mandate that > > it be the only allowed mechanism. > > The consideration here, I believe, is that there's currently too much > latitude by implementations as to what MAC addresses they use here. > Restrict one case, you may break some implementation. > > The missing element is how a pair of implementations of BFD for vxlan > discover the necessary information? As far as BFD is concerned, "tell me!" > This seems like work that belongs in nvo3. > > > Destination MAC: This MUST NOT be of one of tenant's MAC > > addresses. The destination MAC address MAY be the address > > > > But the tenant can start using new MAC addresses at any time! How is > > BFD-over-VXLAN going to dynamically detect and avoid that? > > See above. Either it's coordinated with the ability to prevent the tenant > from using it or the underlying vxlan environment needs to provide some > mechanism to discover what's been provisioned. > > > associated with the destination VTEP. The MAC address MAY be > > configured, or it MAY be learned via a control plane protocol. > > The details of how the MAC address is obtained are outside the > > scope of this document. > > > > This all talks about the MAC address being relatively static > > configuration, but per above, I don't think that's safe in the face of a > > MUST-level requirement to avoid conflicting with tenant MAC addresses. > > But is it BFD's responsibility to figure this out? This is what the > document is suggesting - a higher level with access to the implementation > specifics should be supplying the BFD provisioning information. Or manual > provisioning in the absence thereof. > > -- Jeff From nobody Wed Dec 18 14:14:02 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F410120836; Wed, 18 Dec 2019 14:13:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mTSfUv54uiQa; Wed, 18 Dec 2019 14:13:54 -0800 (PST) Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id 48FE5120089; Wed, 18 Dec 2019 14:13:54 -0800 (PST) Received: by slice.pfrc.org (Postfix, from userid 1001) id 320B61E2F6; Wed, 18 Dec 2019 17:18:24 -0500 (EST) Date: Wed, 18 Dec 2019 17:18:24 -0500 From: Jeffrey Haas To: Benjamin Kaduk Cc: The IESG , draft-ietf-bfd-vxlan@ietf.org, bfd-chairs@ietf.org, rtg-bfd@ietf.org Subject: Re: Benjamin Kaduk's Discuss on draft-ietf-bfd-vxlan-09: (with DISCUSS and COMMENT) Message-ID: <20191218221823.GG6488@pfrc.org> References: <157653979360.24617.1864402887480503965.idtracker@ietfa.amsl.com> <20191218202448.GC6488@pfrc.org> <20191218220246.GK81833@kduck.mit.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20191218220246.GK81833@kduck.mit.edu> User-Agent: Mutt/1.5.21 (2010-09-15) Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Dec 2019 22:13:55 -0000 Ben, On Wed, Dec 18, 2019 at 02:02:46PM -0800, Benjamin Kaduk wrote: > On Wed, Dec 18, 2019 at 03:24:48PM -0500, Jeffrey Haas wrote: > > This is a clean summary of the considerations. At least a portion of the WG > > seems to be comfortable with "test to the management VNI". However, another > > (smaller, I believe) portion were wanting to test one layer further in. > > It is reassuring that I at least managed to summarize the situation > tolerably. Is it fair to say that testing "one layer further in" is a > superset of what "test to the managemenet VNI" can do? Fundamentally, this is all BFD. The issue is almost always considerations related to encapsulation. The meta concern here is that if you test to the management VNI, the operator has a lot of control over things that are clean from a security perspective. The minute you test one layer deeper, it's still the same thing... but you now have a lot of sharp edges you have to worry about. In all of these situations, the main consideration from a security perspective and an encapsulation perspective is "don't step on the toes of the user". But that said, vxlan environments are provided to contain tenants, have their own provisioning ecosystems, and security considerations in how they are provisioned and operated. As long as the security and operational considerations are understood by the operator, they can decide whether "testing one layer further in" gives them good benefit vs. the additional security considerations. And that said, two fundamental portions of BFD operations and security still apply here: - Discriminators need to be known to mess with existing sessions. This means the main consideration for someone not in the tenant environment is privacy. Such privacy is an overall consideration for vxlan environments. - Authentication mechanisms in BFD may still be deployed which further reduce the attack space. Basically, if your vxlan environment is appropriately operated and secured, the main attacker of this session is the tenant itself. And they have all sorts of bad things they can do to knock down their own reachability from one VTEP to another. I.e. it's a stupid attack. :-) -- Jeff From nobody Wed Dec 18 18:20:02 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E283120026; Wed, 18 Dec 2019 18:20:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xMVQshCqeS7x; Wed, 18 Dec 2019 18:19:58 -0800 (PST) Received: from mail-lf1-x130.google.com (mail-lf1-x130.google.com [IPv6:2a00:1450:4864:20::130]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 63EBC120018; Wed, 18 Dec 2019 18:19:58 -0800 (PST) Received: by mail-lf1-x130.google.com with SMTP id 9so3150165lfq.10; Wed, 18 Dec 2019 18:19:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=tT7dVRvjOlAbdg9QAR4jk70JZXUZzR+dkra9DnH2z2Q=; b=mC+L42FpxL/pn613WE5n3snwkHCWBiJZqLGMcPVH07UPZ7F4Om06w9fhy4IKVr+6Ta 5JGszsQpc0g1rpEwJnpwq9ExJoLwkYzKb0p3sTxz9Vh3amRCDMfMsPwzvyjPM3E+7yek HNKQ15hWfxlVjFMdN7COr6yorgn4Nblydwi0OR58n8utINNuNKLw7ZaoiaoT8i0TONnM hsuaeDo6qGa+MzxSWKvxEqCqU3kjada3iQzY9CQQNaKHvAFBVMTNGfpX+HZ3Iu3oHgGf bOsv8HJYobl31s38hcK8yjjNTh3Nuw3g/JE7CaeZAOI54bSSug1wT/vP/LpWSFCY9aG5 MlnA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=tT7dVRvjOlAbdg9QAR4jk70JZXUZzR+dkra9DnH2z2Q=; b=b5c46NjAMZrtOZ6Fpt/M4ZyYwqpjRSwXCce2cJ57a47S8J3giI6vVwJ2eIU9x0+aoq +Nf4WZqFDsn1yHLDgZwXGDqGCafgEqsqQgji+BW5tNmvcSlkvu3J+QCu9ndgtzDFvlP+ wi6LfOTF2LHZuAWRkOHlk7s6QabculwfeqfHHOEAAueRE0xjS91p8NfTlTVlFIPRkHEG FKPx8YA/TUkl1MQSJh1lEC6mK/4KFkrFQ4+0MIOWy7ztlRRGkkOgd1z27TXTGbiwlfpE bTf+RWlRmjjiQ4Jf5ivY/arQvy/EDeynTygY70F+IaIUGnoU/NeMAzugYINbB89tppti d+gQ== X-Gm-Message-State: APjAAAUBEiA7sNTgMhDdR9OS6Z370GpDmdVuuMKkEOZwP9vPhEOYtCYl YeOO2KYcBq/diwkwcAFb15D90W8/45sQbK1CA+4= X-Google-Smtp-Source: APXvYqwRFwes+xgVIi49CQSJsUz5/sESxQno+OmunxIpxI6U45lARDFV7mLLKREAA/Wnaf9mVZ7LG+b4Zs4gKUv2pDc= X-Received: by 2002:a19:f00d:: with SMTP id p13mr3803360lfc.37.1576721996661; Wed, 18 Dec 2019 18:19:56 -0800 (PST) MIME-Version: 1.0 References: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> <20191218203145.GD6488@pfrc.org> <20191218214102.GF6488@pfrc.org> In-Reply-To: <20191218214102.GF6488@pfrc.org> From: Greg Mirsky Date: Wed, 18 Dec 2019 18:19:45 -0800 Message-ID: Subject: =?UTF-8?Q?Re=3A_=C3=89ric_Vyncke=27s_Discuss_on_draft=2Dietf=2Dbfd=2Dvxlan=2D0?= =?UTF-8?Q?9=3A_=28with_DISCUSS_and_COMMENT=29?= To: Jeffrey Haas Cc: "Carlos Pignataro (cpignata)" , "Eric Vyncke (evyncke)" , The IESG , "draft-ietf-bfd-vxlan@ietf.org" , "rtg-bfd@ietf.org" , "bfd-chairs@ietf.org" Content-Type: multipart/alternative; boundary="000000000000854ae1059a05322b" Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Dec 2019 02:20:01 -0000 --000000000000854ae1059a05322b Content-Type: text/plain; charset="UTF-8" Hi Carlos, Jeff, et al., thank you for a very insightful discussion. Based on the input from the experts familiar with VXLAN deployment scenario the following text was added to justify the requirement to set TTL or Hop Limit to 1: TTL or Hop Limit: MUST be set to 1 to ensure that the BFD packet is not routed within the Layer 3 underlay network. This addresses the scenario when the inner IP destination address is of VXLAN gateway and there is a router in underlay which removes the VXLAN header, then it is possible to route the packet as VXLAN gateway address is routable address. Best regards, Greg On Wed, Dec 18, 2019 at 1:36 PM Jeffrey Haas wrote: > Carlos, > > On Wed, Dec 18, 2019 at 09:28:30PM +0000, Carlos Pignataro (cpignata) > wrote: > > The TTL of 1 recommended for RFC 4379 / RFC 8029 S4.3 is because if the > MPLS packet is mis-routed, or there's a forwarding mis-programming, then an > MPLS LSE pop would expose the BFD packet and so that the BFD is not further > mis-forwarded. > > > > In the VXLAN case an intermediate router would not remove the VXLAN > encap because the outer encap is IP (with a destination address, not an > MPLS Label that can be mis-interpreted in context) and a mid-point router > would not understand VXLAN. > > Explained, that now seems obvious. Thanks. :-) > > But given that point, what precisely is the objection to the inner IP > header > of the BFD for vxlan having a TTL of 1? > > I think this is partially a matter of attack spaces varying depending on > whether we're targeting the management VNI vs. a tenant. In the case of > the > management VNI, we (should) have very strong control over what BFD traffic > is getting encapsulated. > > However, for tenant VNI mode, is the argument that depending on what the > other vxlan PDU parameters look like, tenant sourced BFD PDUs may be > indistinguishable from ones sourced by the management infrastructure? And > if so, how would GTSM help us here? > > -- Jeff > > --000000000000854ae1059a05322b Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Carlos, Jeff, et al.,
thank you for a very insightf= ul discussion.
Based on the input from the experts familiar with = VXLAN deployment scenario the following text was added to justify the requi= rement to set TTL or Hop Limit to 1:
=C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0TTL or Hop Limit: MUST be set to 1 to ensure that the BFD
=C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0packet is not routed within the Layer 3 underlay= network.=C2=A0 This
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0addresses the sce= nario when the inner IP destination address is
=C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0of VXLAN gateway and there is a router in underlay which
=C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0removes the VXLAN header, then it is possibl= e to route the
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0packet as VXLAN =C2=A0g= ateway address is routable address.

Best regar= ds,
Greg

On Wed, Dec 18, 2019 at 1:36 PM Jeffrey Haas <jhaas@pfrc.org> wrote:
Carlos,

On Wed, Dec 18, 2019 at 09:28:30PM +0000, Carlos Pignataro (cpignata) wrote= :
> The TTL of 1 recommended for RFC 4379 / RFC 8029 S4.3 is because if th= e MPLS packet is mis-routed, or there's a forwarding mis-programming, t= hen an MPLS LSE pop would expose the BFD packet and so that the BFD is not = further mis-forwarded.
>
> In the VXLAN case an intermediate router would not remove the VXLAN en= cap because the outer encap is IP (with a destination address, not an MPLS = Label that can be mis-interpreted in context) and a mid-point router would = not understand VXLAN.

Explained, that now seems obvious.=C2=A0 Thanks. :-)

But given that point, what precisely is the objection to the inner IP heade= r
of the BFD for vxlan having a TTL of 1?

I think this is partially a matter of attack spaces varying depending on whether we're targeting the management VNI vs. a tenant.=C2=A0 In the c= ase of the
management VNI, we (should) have very strong control over what BFD traffic<= br> is getting encapsulated.=C2=A0

However, for tenant VNI mode, is the argument that depending on what the other vxlan PDU parameters look like, tenant sourced BFD PDUs may be
indistinguishable from ones sourced by the management infrastructure?=C2=A0= And
if so, how would GTSM help us here?

-- Jeff

--000000000000854ae1059a05322b-- From nobody Wed Dec 18 18:37:24 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02814120026; Wed, 18 Dec 2019 18:37:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.036 X-Spam-Level: X-Spam-Status: No, score=-0.036 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, KHOP_HELO_FCRDNS=0.399, NORMAL_HTTP_TO_IP=0.001, NUMERIC_HTTP_ADDR=1.242, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=nostrum.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xzHvF64mdwYY; Wed, 18 Dec 2019 18:37:15 -0800 (PST) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A888A120018; Wed, 18 Dec 2019 18:37:15 -0800 (PST) Received: from Svantevit.local (99-152-146-228.lightspeed.dllstx.sbcglobal.net [99.152.146.228]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id xBJ2b9M9083058 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 18 Dec 2019 20:37:10 -0600 (CST) (envelope-from adam@nostrum.com) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nostrum.com; s=default; t=1576723031; bh=puyl72t+9YlXLgXFqOzCRnb4hiTn1GDthAexLMNygck=; h=Subject:To:Cc:References:From:Date:In-Reply-To; b=hWauslzEe/cbBcb7hDDI+syKC0J79cNYBuVQeG/GUScqqbgAxotMKNCiBQvAQB9/L 5wi/gWCPeO5rDZCNcHBo5fh30PLEyhzdZ44s7J6ghxfgnjnVG7JQdnMdvDot493xzr Kekvq2jf0LPt0oM2TdILuF5Qik+nFHiSTEb+oEeA= X-Authentication-Warning: raven.nostrum.com: Host 99-152-146-228.lightspeed.dllstx.sbcglobal.net [99.152.146.228] claimed to be Svantevit.local Subject: Re: Adam Roach's No Objection on draft-ietf-bfd-vxlan-09: (with COMMENT) To: Greg Mirsky Cc: The IESG , draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, rtg-bfd WG References: <157656670090.24465.17703971379844970449.idtracker@ietfa.amsl.com> From: Adam Roach Message-ID: <9b1ec49d-6797-e9e9-eef5-2085f7a0dcce@nostrum.com> Date: Wed, 18 Dec 2019 20:37:03 -0600 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Thunderbird/60.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------A9CB57509BDEE4635D9E299F" Content-Language: en-US Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Dec 2019 02:37:18 -0000 This is a multi-part message in MIME format. --------------A9CB57509BDEE4635D9E299F Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit On 12/17/19 4:35 PM, Greg Mirsky wrote: > Hi Adam, > thank you for your review and the very clear suggestions, all is the > most helpful. I've followed your recommendations and applied changes > to the working version of the draft. Attached, please find the diff > that highlights updates. Also, please find my notes in-line tagged GIM>>. > > Best regards, > Greg > > On Mon, Dec 16, 2019 at 11:11 PM Adam Roach via Datatracker > > wrote: > > Adam Roach has entered the following ballot position for > draft-ietf-bfd-vxlan-09: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut > this > introductory paragraph, however.) > > > Please refer to > https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > Thanks for the work that everyone has put into this document. I have > a couple of relatively important, related comments that should be > taken into account prior to publication. > > --------------------------------------------------------------------------- > > §3: > > >  As per Section 4, the inner destination IP address SHOULD be set to > >  one of the loopback addresses (127/8 range for IPv4 and > >  0:0:0:0:0:FFFF:7F00:0/104 range for IPv6). > > Please consider reformatting this IPv6 address according to the > recommendations > of RFC 5952 (paying particular attention to sections 4.2.1, 4.3, > and 5): > > ::ffff:127.0.0.0/104 > > It's also worth noting that, as a practical matter, modern > operating systems do > not seem to bind to anything in the IPv4-mapped range assigned to > IPv4 loopback: > > Linux: > >   ~$ ping6 ::ffff:127.0.0.1 >   PING ::ffff:127.0.0.1(::ffff:127.0.0.1) 56 data bytes >   ^C >   --- ::ffff:127.0.0.1 ping statistics --- >   14 packets transmitted, 0 received, 100% packet loss, time 13316ms > > MacOS: > >   ~$ ping6 ::ffff:127.0.0.1 >   PING6(56=40+8+8 bytes) ::ffff:127.0.0.1 --> ::ffff:127.0.0.1 >   ping6: sendmsg: Invalid argument >   ping6: wrote ::ffff:127.0.0.1 16 chars, ret=-1 > > > It is not clear to me whether this poses an issue for your > intended usage. > > GIM>> Thank you for sharing very interesting facts on the handling of > these addresses. I don't think that implementation on the egress BFD > node would listen on the particular address, more likely it would be > on the value of the well-known UDP port. The goal of using one of the > addresses from this range is to prevent leaking packets from a broken > VXLAN tunnel (as was the original goal in RFC 4379/8029 and RFC 5884). I'm a little unclear about the scope of leakage that is causing concern here. If you simply want to prevent the packets from making it to an end host, there are a lot of choices you can make that guarantee an address that has no ultimate destination. If the concern is, instead, that the packet might be sent to one or more other routers when the tunnel is broken (even if it never reaches a host), then what you're doing here is unlikely to achieve your goals. As I attempted to highlight below, there is no reason to believe that an IPv6 router is going to treat ::ffff:127.0.0.0/104 any differently than any other IPv4-mapped address. Unless you're in the default-free zone, It's either heading towards a default router or a v6/v4 gateway, and probably won't be dropped until it reaches an ingress to the v4 network. On the other hand, if you *are* in the DFZ, my my understanding (and I'm not a routing person, so it's kind of a lay understanding) is that guaranteeing a packet drop in the default-free zone simply requires that the corresponding prefix isn't configured or announced. The IETF protocol IP blocks I mention below have that property. In short, I don't think your solution addresses your implied threat model (regardless of which of the preceding two situations apply), and at the same time is an abuse of the semantic meaning of loopback addresses. I'm feeling like I might not understand the problem being addressed by this approach. Perhaps if you explained the exact nature of the bad things that might happen when a tunnel breaks and some other inner address is used (with the assumption that such inner address would never correspond to a real host, and would never correspond to an advertised route, as would be true for my suggestions below), it would help. > > In any case, please do not refer to ::ffff:127.0.0.0/104 > as "loopback > addresses": IPv6 has only one loopback address defined (::1). The > range > you cite is best described as "IPv4-mapped IPv4 loopback addresses." > Alternately -- and this is probably better -- use "::1/128" instead of > "::ffff:127.0.0.0/104 " for the inner IP > header destination address. > > As an aside, I share Benjamin's unease around the use of loopback > addresses > in this fashion. It may be worth noting that IETF protocols can > reserve > addresses in the 192.0.0.0/24 and 2001::/23 > blocks if necessary, and such > reserved addresses won't ever correspond to a valid destination. > > (There is corresponding text in section 4 that all of the > preceding pertains > to as well) > > --------------------------------------------------------------------------- > > §9: > > >  This document recommends using an address from the Internal host > >  loopback addresses (127/8 range for IPv4 and > >  0:0:0:0:0:FFFF:7F00:0/104 range for IPv6) as the destination IP > >  address in the inner IP header.  Using such address prevents the > >  forwarding of the encapsulated BFD control message by a transient > >  node in case the VXLAN tunnel is broken as according to [RFC1812]: > > > >     A router SHOULD NOT forward, except over a loopback > interface, any > >     packet that has a destination address on network 127.  A router > >     MAY have a switch that allows the network manager to disable > these > >     checks.  If such a switch is provided, it MUST default to > >     performing the checks. > > In addition to the comments above about IPv6 address formatting, the > improper use of "loopback" terminology as it applies to IPv6, and > concerns about using localhost: it's worth noting that this text in > RFC 1812 refers to IPv4 routers -- RFC 8504 has no equivalent > language, > and so the use of ::ffff:127.0.0.0/104 > implies no special router handling. > ::1 *probably* does, at least as a practical matter. > > GIM>> As noted above, the reason of using addresses from this range > was to prevent packets from being routed in case a tunnel is broken. > Do you think that the lack of the wording similar to RFC 1812 should > be a concern for RFC 8029 and RFC 5884 that use the same range for the > destination IP address? > --------------A9CB57509BDEE4635D9E299F Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit
On 12/17/19 4:35 PM, Greg Mirsky wrote:
Hi Adam,
thank you for your review and the very clear suggestions, all is the most helpful. I've followed your recommendations and applied changes to the working version of the draft. Attached, please find the diff that highlights updates. Also, please find my notes in-line tagged GIM>>.

Best regards,
Greg

On Mon, Dec 16, 2019 at 11:11 PM Adam Roach via Datatracker <noreply@ietf.org> wrote:
Adam Roach has entered the following ballot position for
draft-ietf-bfd-vxlan-09: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Thanks for the work that everyone has put into this document. I have
a couple of relatively important, related comments that should be
taken into account prior to publication.

---------------------------------------------------------------------------

§3:

>  As per Section 4, the inner destination IP address SHOULD be set to
>  one of the loopback addresses (127/8 range for IPv4 and
>  0:0:0:0:0:FFFF:7F00:0/104 range for IPv6).

Please consider reformatting this IPv6 address according to the recommendations
of RFC 5952 (paying particular attention to sections 4.2.1, 4.3, and 5):

::ffff:127.0.0.0/104

It's also worth noting that, as a practical matter, modern operating systems do
not seem to bind to anything in the IPv4-mapped range assigned to IPv4 loopback:

Linux:

  ~$ ping6 ::ffff:127.0.0.1
  PING ::ffff:127.0.0.1(::ffff:127.0.0.1) 56 data bytes
  ^C
  --- ::ffff:127.0.0.1 ping statistics ---
  14 packets transmitted, 0 received, 100% packet loss, time 13316ms

MacOS:

  ~$ ping6 ::ffff:127.0.0.1
  PING6(56=40+8+8 bytes) ::ffff:127.0.0.1 --> ::ffff:127.0.0.1
  ping6: sendmsg: Invalid argument
  ping6: wrote ::ffff:127.0.0.1 16 chars, ret=-1


It is not clear to me whether this poses an issue for your intended usage.
GIM>> Thank you for sharing very interesting facts on the handling of these addresses. I don't think that implementation on the egress BFD node would listen on the particular address, more likely it would be on the value of the well-known UDP port. The goal of using one of the addresses from this range is to prevent leaking packets from a broken VXLAN tunnel (as was the original goal in RFC 4379/8029 and RFC 5884).


I'm a little unclear about the scope of leakage that is causing concern here. If you simply want to prevent the packets from making it to an end host, there are a lot of choices you can make that guarantee an address that has no ultimate destination.

If the concern is, instead, that the packet might be sent to one or more other routers when the tunnel is broken (even if it never reaches a host), then what you're doing here is unlikely to achieve your goals. As I attempted to highlight below, there is no reason to believe that an IPv6 router is going to treat ::ffff:127.0.0.0/104 any differently than any other IPv4-mapped address. Unless you're in the default-free zone, It's either heading towards a default router or a v6/v4 gateway, and probably won't be dropped until it reaches an ingress to the v4 network.

On the other hand, if you *are* in the DFZ, my my understanding (and I'm not a routing person, so it's kind of a lay understanding) is that guaranteeing a packet drop in the default-free zone simply requires that the corresponding prefix isn't configured or announced. The IETF protocol IP blocks I mention below have that property.

In short, I don't think your solution addresses your implied threat model (regardless of which of the preceding two situations apply), and at the same time is an abuse of the semantic meaning of loopback addresses.

I'm feeling like I might not understand the problem being addressed by this approach. Perhaps if you explained the exact nature of the bad things that might happen when a tunnel breaks and some other inner address is used (with the assumption that such inner address would never correspond to a real host, and would never correspond to an advertised route, as would be true for my suggestions below), it would help.



In any case, please do not refer to ::ffff:127.0.0.0/104 as "loopback
addresses": IPv6 has only one loopback address defined (::1). The range
you cite is best described as "IPv4-mapped IPv4 loopback addresses."
Alternately -- and this is probably better -- use "::1/128" instead of
"::ffff:127.0.0.0/104" for the inner IP header destination address.

As an aside, I share Benjamin's unease around the use of loopback addresses
in this fashion. It may be worth noting that IETF protocols can reserve
addresses in the 192.0.0.0/24 and 2001::/23 blocks if necessary, and such
reserved addresses won't ever correspond to a valid destination.

(There is corresponding text in section 4 that all of the preceding pertains
to as well)

---------------------------------------------------------------------------

§9:

>  This document recommends using an address from the Internal host
>  loopback addresses (127/8 range for IPv4 and
>  0:0:0:0:0:FFFF:7F00:0/104 range for IPv6) as the destination IP
>  address in the inner IP header.  Using such address prevents the
>  forwarding of the encapsulated BFD control message by a transient
>  node in case the VXLAN tunnel is broken as according to [RFC1812]:
>
>     A router SHOULD NOT forward, except over a loopback interface, any
>     packet that has a destination address on network 127.  A router
>     MAY have a switch that allows the network manager to disable these
>     checks.  If such a switch is provided, it MUST default to
>     performing the checks.

In addition to the comments above about IPv6 address formatting, the
improper use of "loopback" terminology as it applies to IPv6, and
concerns about using localhost: it's worth noting that this text in
RFC 1812 refers to IPv4 routers -- RFC 8504 has no equivalent language,
and so the use of ::ffff:127.0.0.0/104 implies no special router handling.
::1 *probably* does, at least as a practical matter.
GIM>> As noted above, the reason of using addresses from this range was to prevent packets from being routed in case a tunnel is broken. Do you think that the lack of the wording similar to RFC 1812 should be a concern for RFC 8029 and RFC 5884 that use the same range for the destination IP address?


--------------A9CB57509BDEE4635D9E299F-- From nobody Wed Dec 18 19:22:41 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 071BA120018; Wed, 18 Dec 2019 19:22:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.498 X-Spam-Level: X-Spam-Status: No, score=-14.498 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Kv6nUXWr; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=H//8KHCn Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RtwDm8RPDPQP; Wed, 18 Dec 2019 19:22:33 -0800 (PST) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D28F12004F; Wed, 18 Dec 2019 19:22:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2718; q=dns/txt; s=iport; t=1576725753; x=1577935353; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=QxgXXmj97AkZkdaEdyrLr9dlUR5Ex8hQSIYzXLD93B4=; b=Kv6nUXWrUEbJxtQzlpZJka365gsax4JTJXNNiAZj0eLvY+JPYOGMcWWp IQ4izRKNp3fHIit1tgcKmAR1scphpOPL2OFi5waiR7WnGGEpBdfWJLNWm SB6fIqWMcKSrcvPzWmWmQkzqeJuN9IaQWVisnle++7d6T/njOMIuvpXJZ o=; IronPort-PHdr: =?us-ascii?q?9a23=3AlbVWARHcmK8YQyr73TQCPZ1GYnJ96bzpIg4Y7I?= =?us-ascii?q?YmgLtSc6Oluo7vJ1Hb+e4z1Q3SRYuO7fVChqKWqK3mVWEaqbe5+HEZON0pNV?= =?us-ascii?q?cejNkO2QkpAcqLE0r+efXybiM8FdhLfFRk5Hq8d0NSHZW2ag=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DgAQBr7Ppd/5FdJa1lGwEBAQEBAQE?= =?us-ascii?q?FAQEBEQEBAwMBAQGBfIFNUAWBRCAECyqEBoNGA4pzgl+BAZcFglIDVAkBAQE?= =?us-ascii?q?MAQEtAgEBhEACF4ICJDgTAgMNAQEEAQEBAgEFBG2FNwyFXgEBAQECARIREQw?= =?us-ascii?q?BATcBBAsCAQYCDgoCAhkNAgICMBUFCwIEDgUigwCCRwMOIAGRV5BkAoE4iGF?= =?us-ascii?q?1gTKCfgEBBYUnGIIQCYEOKIlPgkkagUE/gREnIIIXNT6ESAGDEDKCLI9+OY8?= =?us-ascii?q?2jyAKgjWWFBuaUYNHojGDJwIEAgQFAg4BAQWBaSKBWHAVZQGCQT4SGA2NEgw?= =?us-ascii?q?XFYM7ilN0gSiPQwEB?= X-IronPort-AV: E=Sophos;i="5.69,330,1571702400"; d="scan'208";a="687662633" Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by rcdn-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 19 Dec 2019 03:22:32 +0000 Received: from XCH-RCD-008.cisco.com (xch-rcd-008.cisco.com [173.37.102.18]) by rcdn-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id xBJ3MVw2017519 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 19 Dec 2019 03:22:32 GMT Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-RCD-008.cisco.com (173.37.102.18) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 18 Dec 2019 21:22:31 -0600 Received: from xhs-aln-001.cisco.com (173.37.135.118) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 18 Dec 2019 21:22:31 -0600 Received: from NAM04-CO1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 18 Dec 2019 21:22:30 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ACmyKkIWiW9bYr102U0hrUsFgARe6NnUhPNYty1Zn2dPiiWopBOzsRH1uOf4k5H1wTaT5+xiPLkSm8wu+p2+XxeDUQK1YDy+5u3HyBAPP2oXFqUlFEjdn5Dpste+uBdX9yrGsEXc7FeKvVCbCHMjeKfLsYW62Z5gS69dqngv1CaPQIFhVhno4ULnzvl7Nc9f4WkJtrUENab1rxnY7zcoC0l973tw1IkTaPhOjuNHK5fbf07CFJD1nWaeXHnz+HTiOS38zk5Ay9euGHWtv9cTspoBSoCgOaJ8HMbA3iBuGvqRc8LAB4vjIjD8KhVFLmm4EZ5/oj5eMeSNzI7VVedDzw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QxgXXmj97AkZkdaEdyrLr9dlUR5Ex8hQSIYzXLD93B4=; b=nZzsyJUNa0mQC/W10CNjkSH6/gRh08CAOi30oES2vSHal/z4pw5WlDl0TQmVAk/RBeZSA8YtdsWI2+uvGiUoW6WR8NHuZcxCzUX0ewPnmknExKGzhBr8YwZn0sEqWxRHP/cVjsSmxi/g1e298tof2THoLhKpDhfbZ8oQRwYWl4QU8WBLlqZzflDkISn+B34c2wp9u+sXQbQ4OjqvlY1xOaVsyw4/OCo/34bnAg4bhgVn9W+cpgFMZFuCtgHjes2i532Z0VH/nYKmyJHlZ+Zi5FrxI0A5bYfc446XlqZ6/X8EeYG6+2hofJAJOFOTNLuzNET+EVl4CEws43VzFMnmgQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QxgXXmj97AkZkdaEdyrLr9dlUR5Ex8hQSIYzXLD93B4=; b=H//8KHCnzJ+0hMbi9yy4kHazR0cbmDYpu08CpFkIcX7XjcDEs0hVX/101yQtKKtBj87aOAj8Oh8ahPpK5Xp0nhLHhx9cpM3r4T8PQTK9F+G/a9+WGOITJmZuYaH7Do4l6cH28wmcncTucaNMJqt/fXMyEfRZSSTuC9u6J06p5uQ= Received: from BN6PR11MB0034.namprd11.prod.outlook.com (10.161.156.160) by BN6PR11MB1459.namprd11.prod.outlook.com (10.172.21.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2559.14; Thu, 19 Dec 2019 03:22:29 +0000 Received: from BN6PR11MB0034.namprd11.prod.outlook.com ([fe80::d4cf:20e6:8706:d006]) by BN6PR11MB0034.namprd11.prod.outlook.com ([fe80::d4cf:20e6:8706:d006%5]) with mapi id 15.20.2538.019; Thu, 19 Dec 2019 03:22:29 +0000 From: "Carlos Pignataro (cpignata)" To: Jeff Haas CC: "rtg-bfd@ietf.org" , "Eric Vyncke (evyncke)" , "draft-ietf-bfd-vxlan@ietf.org" , The IESG , "bfd-chairs@ietf.org" Subject: =?utf-8?B?UmU6IMOJcmljIFZ5bmNrZSdzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi1iZmQt?= =?utf-8?Q?vxlan-09:_(with_DISCUSS_and_COMMENT)?= Thread-Topic: =?utf-8?B?w4lyaWMgVnluY2tlJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLWJmZC12eGxh?= =?utf-8?Q?n-09:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHVtLc75ryADAJO5Ui6+24NC5naA6e+kjMAgAHIsoD//7wKAIAAV1IAgABfYYA= Date: Thu, 19 Dec 2019 03:22:28 +0000 Message-ID: References: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> <20191218203145.GD6488@pfrc.org> <20191218214102.GF6488@pfrc.org> In-Reply-To: <20191218214102.GF6488@pfrc.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3608.40.2.2.4) authentication-results: spf=none (sender IP is ) smtp.mailfrom=cpignata@cisco.com; x-originating-ip: [2600:1700:760:21aa:e09b:cbbd:7c40:1c9c] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 101eac64-af56-4c7b-64bb-08d78432ad91 x-ms-traffictypediagnostic: BN6PR11MB1459: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0256C18696 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(376002)(346002)(366004)(39860400002)(136003)(199004)(189003)(6486002)(186003)(478600001)(4326008)(36756003)(33656002)(86362001)(6512007)(2616005)(54906003)(316002)(66574012)(81156014)(76116006)(66446008)(66556008)(66946007)(64756008)(5660300002)(6916009)(71200400001)(8936002)(81166006)(6506007)(224303003)(66476007)(2906002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR11MB1459; H:BN6PR11MB0034.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: tBqpqZPslnRUTCaGfDNietB4EmAZAu+0TYdiolJnrfRE/gZxpf9hKXb7FZ951zuyggUAk2nfA0NVT+MzqLzwAjPHOjncjEQVD3H3mzLvqiywzkePvaoeELj2b6vkkKb9c4VYxdAiy2HcQSSIv9jknbzPXIdE+8AevCxl29ciUxVQoIaEJ4v31jVV0kgv2H1e5J4Cz/AZ7k9IL40908QQcDt3joHsxwC1q7fCwkVSy03m/x9rzPRq9e5AI+A8LEHrpIuoh6ZA1zjcEy2XkxOMPKxuDssgMojKQrOq/GxJemE+rvR9L3Gn/r7zSFK1l2Qr57JDZstGvzweIEjpzP+zC1EK7VmQ4on0AT37LdFCmV7lRyWTDJhNCbb3Z9o/UZ5NrbayZIG7Fgnkmz6UzhxvSFQHk1D92CNgTq/9ift23uv4n0nVRaJlhJA5rTHQ529m Content-Type: text/plain; charset="utf-8" Content-ID: <93F47CF87E15B547AF7AC25476EBF783@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 101eac64-af56-4c7b-64bb-08d78432ad91 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Dec 2019 03:22:28.9153 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: DxJfpet7uNVULMVIWiETABV7NKSbBGsGKEmY93EjC5E/0bt7uwrpVBi8qOWheSiVgBZCpEOeoUgYoE3klLcj+g== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR11MB1459 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.18, xch-rcd-008.cisco.com X-Outbound-Node: rcdn-core-9.cisco.com Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Dec 2019 03:22:36 -0000 SGksIEplZmYsDQoNCj4gMjAxOS8xMi8xOCDljYjlvow0OjQx44CBSmVmZnJleSBIYWFzIDxqaGFh c0BwZnJjLm9yZz7jga7jg6Hjg7zjg6s6DQo+IA0KPiBDYXJsb3MsDQo+IA0KPiBPbiBXZWQsIERl YyAxOCwgMjAxOSBhdCAwOToyODozMFBNICswMDAwLCBDYXJsb3MgUGlnbmF0YXJvIChjcGlnbmF0 YSkgd3JvdGU6DQo+PiBUaGUgVFRMIG9mIDEgcmVjb21tZW5kZWQgZm9yIFJGQyA0Mzc5IC8gUkZD IDgwMjkgUzQuMyBpcyBiZWNhdXNlIGlmIHRoZSBNUExTIHBhY2tldCBpcyBtaXMtcm91dGVkLCBv ciB0aGVyZSdzIGEgZm9yd2FyZGluZyBtaXMtcHJvZ3JhbW1pbmcsIHRoZW4gYW4gTVBMUyBMU0Ug cG9wIHdvdWxkIGV4cG9zZSB0aGUgQkZEIHBhY2tldCBhbmQgc28gdGhhdCB0aGUgQkZEIGlzIG5v dCBmdXJ0aGVyIG1pcy1mb3J3YXJkZWQuDQo+PiANCj4+IEluIHRoZSBWWExBTiBjYXNlIGFuIGlu dGVybWVkaWF0ZSByb3V0ZXIgd291bGQgbm90IHJlbW92ZSB0aGUgVlhMQU4gZW5jYXAgYmVjYXVz ZSB0aGUgb3V0ZXIgZW5jYXAgaXMgSVAgKHdpdGggYSBkZXN0aW5hdGlvbiBhZGRyZXNzLCBub3Qg YW4gTVBMUyBMYWJlbCB0aGF0IGNhbiBiZSBtaXMtaW50ZXJwcmV0ZWQgaW4gY29udGV4dCkgYW5k IGEgbWlkLXBvaW50IHJvdXRlciB3b3VsZCBub3QgdW5kZXJzdGFuZCBWWExBTi4NCj4gDQo+IEV4 cGxhaW5lZCwgdGhhdCBub3cgc2VlbXMgb2J2aW91cy4gIFRoYW5rcy4gOi0pDQo+IA0KPiBCdXQg Z2l2ZW4gdGhhdCBwb2ludCwgd2hhdCBwcmVjaXNlbHkgaXMgdGhlIG9iamVjdGlvbiB0byB0aGUg aW5uZXIgSVAgaGVhZGVyDQo+IG9mIHRoZSBCRkQgZm9yIHZ4bGFuIGhhdmluZyBhIFRUTCBvZiAx Pw0KDQpUaGUgaW50ZW50IHdvdWxkIGJlIHRvIHByb3RlY3Qgb2YgcG90ZW50aWFsIGF0dGFja3Mg YmV5b25kIHRoZSBlbmNhcHN1bGF0aW5nIGVuZHBvaW50IChpLmUuLCBwYWNrZXQgY29taW5nIGlu dG8gdGhlIFZURVAgdnMuIHNvdXJjZWQsIG9mZi1saW5rIHNwb29maW5nKS4NCg0KPiANCj4gSSB0 aGluayB0aGlzIGlzIHBhcnRpYWxseSBhIG1hdHRlciBvZiBhdHRhY2sgc3BhY2VzIHZhcnlpbmcg ZGVwZW5kaW5nIG9uDQo+IHdoZXRoZXIgd2UncmUgdGFyZ2V0aW5nIHRoZSBtYW5hZ2VtZW50IFZO SSB2cy4gYSB0ZW5hbnQuICBJbiB0aGUgY2FzZSBvZiB0aGUNCj4gbWFuYWdlbWVudCBWTkksIHdl IChzaG91bGQpIGhhdmUgdmVyeSBzdHJvbmcgY29udHJvbCBvdmVyIHdoYXQgQkZEIHRyYWZmaWMN Cj4gaXMgZ2V0dGluZyBlbmNhcHN1bGF0ZWQuICANCj4gDQo+IEhvd2V2ZXIsIGZvciB0ZW5hbnQg Vk5JIG1vZGUsIGlzIHRoZSBhcmd1bWVudCB0aGF0IGRlcGVuZGluZyBvbiB3aGF0IHRoZQ0KPiBv dGhlciB2eGxhbiBQRFUgcGFyYW1ldGVycyBsb29rIGxpa2UsIHRlbmFudCBzb3VyY2VkIEJGRCBQ RFVzIG1heSBiZQ0KPiBpbmRpc3Rpbmd1aXNoYWJsZSBmcm9tIG9uZXMgc291cmNlZCBieSB0aGUg bWFuYWdlbWVudCBpbmZyYXN0cnVjdHVyZT8gIEFuZA0KPiBpZiBzbywgaG93IHdvdWxkIEdUU00g aGVscCB1cyBoZXJlPw0KDQpUZW5hbnQgc291cmNlZCBCRkQgUERVcyB3b3VsZCBub3QgdXNlIGhv c3QgbG9vcGJhY2sgZGVzdCBhZGRyZXNzZXMuIFNjYW5uaW5nIHRocm91Z2ggUzYgb2YgZHJhZnQt aWV0Zi1iZmQtdnhsYW4tMDksICJNQVkgc3VwcG9ydCB0aGUgdXNlIG9mIHRoZSBNYW5hZ2VtZW50 IFZOSeKAnS4NCg0KQW5kIGlmIHRoZXJlIGFyZSBhbHJlYWR5IHByb3RlY3Rpb25zIGZvciBub3Qg b3Zlci1mb3J3YXJkaW5nIHRoZSBCRkQgcGFrLCB0aGUgZmxpcC1xdWVzdGlvbiBpcyDigJx3aGF0 IGRvZXMgVFRMID0gMSBidWcgeW91P+KAnQ0KDQpNeSBhc3N1bXB0aW9uIHdhcyB0aGF0IGlmIHRo ZSBiYXNlIEJGRCBzcGVjcyBzYXkg4oCcR1NUTSBpcyB1c2VmdWzigJ0sIHdoeSBub3QgaGVyZT8N Cg0KVGhhbmtzLA0KDQpDYXJsb3MuDQoNCj4gDQo+IC0tIEplZmYNCj4gDQoNCg== From nobody Thu Dec 19 02:56:57 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F6F6120BDB; Wed, 18 Dec 2019 18:10:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.596 X-Spam-Level: X-Spam-Status: No, score=-0.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_COMMENT_SAVED_URL=1.391, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OUxzipsQAQxf; Wed, 18 Dec 2019 18:10:07 -0800 (PST) Received: from mail-lj1-x229.google.com (mail-lj1-x229.google.com [IPv6:2a00:1450:4864:20::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 56A211200D6; Wed, 18 Dec 2019 18:10:06 -0800 (PST) Received: by mail-lj1-x229.google.com with SMTP id j26so4363171ljc.12; Wed, 18 Dec 2019 18:10:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Zs/Vli8t7NraVCxCoPbS19iUeeuwoJelATCdbZ8oRq4=; b=FMWb369KVSD9Ja+pISjCtPOsgPoMWh4Ar/ADbwbxSGIj/wAFRYweqTv/M7CjGS8Kba g1iQbTEkfG3FTJm3MqdRdKJibUn2RFezRfe/7pV7Ewpqgrus9l95JFoZyP+fp5oT6Bwe JAdnDgn34Gh/D6Cd4lktCCmWDUcsI1OPv39wGCm+j0l9NivJjeKvuOqUlII6tBVWmDJ1 pZDtn0c1qgfsjywJYgpWxFNAB3ygktedXWzRA1PdBz0/41c9capm4OUIjJYxpKVT270a 3iiQuHgGI340NWJBXnDBWeSGoimlwWKh2ni0yHVLMgbkHQUnQHbC/Gezq4eDjAj+hXrY St8Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Zs/Vli8t7NraVCxCoPbS19iUeeuwoJelATCdbZ8oRq4=; b=QOueGNIzWjx0GGrMKLLc1VcAFc+rNCY04YvAD3vAfz+FJU2hitpyeg5ZIljAib3CrP Ao4I16UTkf7IOClYnqDBwUDKD8iwKWr/ZlwzL1RcEkqvO8EXEu/Pab+na4s11wkRucJN YkXCoiohE0Bb+hR1xlnIzvBuH/9tCmuiZZc11w+ddna1UuGHGjT0Sx8jJ0DE0q4esbHk GqRNCGU64OwtFRYiC/L8ul0Fx4jIVMMSRCGiQFUixi6XPTj9Z8Ru0j7LwRaq97CO5rSl 2LNl6U6UOcV5cNpqWqEFolhOIjyHoEYz+lvCgE2fxYM9eTmHgRbWb0+L+Sfr38LMoKih tocg== X-Gm-Message-State: APjAAAWHxy3DEU/yUCdf707zdN+RhSPKpZOGMHfQsMJpMwpDi9LTNqZU BUoYnOBbUxXrsQB17s63IcpQO58fHAV88PvOWOq1MwsY X-Google-Smtp-Source: APXvYqy3+s0+rHqgEcQwTarO3dp45GjLD5qkmW5Mm1Z6Wwvnz/8Zpmd/Ow32HBive/jsY8FofwVytGg12PIcyBDxwuc= X-Received: by 2002:a2e:6c06:: with SMTP id h6mr3918550ljc.246.1576721404268; Wed, 18 Dec 2019 18:10:04 -0800 (PST) MIME-Version: 1.0 References: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> In-Reply-To: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> From: Greg Mirsky Date: Wed, 18 Dec 2019 18:09:53 -0800 Message-ID: Subject: =?UTF-8?Q?Re=3A_=C3=89ric_Vyncke=27s_Discuss_on_draft=2Dietf=2Dbfd=2Dvxlan=2D0?= =?UTF-8?Q?9=3A_=28with_DISCUSS_and_COMMENT=29?= To: =?UTF-8?B?w4lyaWMgVnluY2tl?= Cc: The IESG , draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, rtg-bfd WG Content-Type: multipart/mixed; boundary="0000000000003794bf059a050f53" Archived-At: X-Mailman-Approved-At: Thu, 19 Dec 2019 02:56:56 -0800 X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Dec 2019 02:10:14 -0000 --0000000000003794bf059a050f53 Content-Type: multipart/alternative; boundary="0000000000003794bd059a050f51" --0000000000003794bd059a050f51 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Eric, thank you for your review, comments, and suggestions. Please find my answers below under GIM>> tag. Also, attached is the diff to the working version of the document that includes updates that Adam has suggested. Best regards, Greg On Tue, Dec 17, 2019 at 12:51 AM =C3=89ric Vyncke via Datatracker < noreply@ietf.org> wrote: > =C3=89ric Vyncke has entered the following ballot position for > draft-ietf-bfd-vxlan-09: Discuss > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ > > > > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > > > Thank you for the work put into this document. > > I fully second Adam's COMMENT that should be fixed before publication (IM= HO > this is a DISCUSS). > GIM>> I've applied changes suggested by Adam to the working version of the document. > > Answers to my COMMENTs below will be welcome, even if those COMMENTs are > not > blocking. > > As usual, an answer to the DISCUSS is required to clear my DISCUSS though= . > > I hope that this helps to improve the document, > > Regards, > > -=C3=A9ric > > =3D=3D DISCUSS =3D=3D > > May be I am not familiar enough with BFD, but, RFC 5881 (the one defining > BFD) > specifies the use of TTL =3D Hop Limit =3D 255.. Why this document uses a > value of > 1 ? > GIM>> Jeff and Carlos are in a very detailed and insightful discussion. I'll wait for its conclusion and follow on their agreement. > -- Section 3 -- > IPv4-mapped IPv6 addresses are only to be used inside a host and should > never > be transmitted in real packets (including packets inside a tunnel) see > section > 4.2 of RFC 4038 (even if informational). As other IESG reviewers, I wonde= r > why > ::1/128 is not used? > GIM>> The mechanism of using an address from the loopback address range or IPv4-mapped addresses of that range may be used to create entropy and monitor ECMP paths in an IP/MPLS network (RFC 8029 and RFC 5884). This specification uses the same mechanism for ECMP environment in the underlay network. > > -- Section 8 -- > The document specifies no IANA actions while the shepherd write-up talks > about > a IANA action. > GIM>> RtgDir review from Joel Halpern and the extensive discussion on BFD WG list lead to this change. As a result, the request to allocate a MAC address to be used as the destination MAC address in the inner Ethernet header was withdrawn and removed from the specification. > > -- Section 9 -- > This section is only about IPv4 (TTL and RFC 1812). Please address IPv6 a= s > well. > GIM>> Added "or Hop Limit". Please let me know if you agree. As for a IPv6 relevant reference equivalent to RFC 1812, Adam Roach has noted that RFC 8504 does not have anything of the kind. At the same time, the use of IPv4-mapped loopback address range has been mandated in RFC 8029 and RFC 5884. > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > =3D=3D COMMENTS =3D=3D > > RFC 5881 (BFD) states that it applies to IPv4/IPv6 tunnels, may I infer > that > this document is only required to address the Ethernet encapsulation ? I.= e. > specifying the Ethernet MAC addresses? > GIM>> There were several threads on encapsulation of BFD Control packet over VXLAN that, in my estimation, gathered 150+ messages. As you've noticed from the Shepherd write-up, the use of the dedicated MAC address was proposed, discussed, and documented. But later the WG decided not to use the dedicated MAC as the destination MAC in the inner Ethernet frame. Similarly, we had an extended discussion, including valuable input from implementors of BFD over VXLAN, on the selection of the destination IP address in the inner IP header. And another set of issues was discovered related to the selection of VXLAN VNI value when encapsulating BFD control packet. I hope we've analyzed all encapsulation issues and documented them sufficiently for the benefit of future implementations. > > -- Section 3 -- > At first sight, I was surprized by having a BFD session per VXLAN VNI as = it > will create some scalability issue, but, I assume that this is to detect > misconfiguration as well. If so, perhaps worth mentionnig the reasoning > behind? > GIM>> I agree, detecting misconfiguration might be one of the reasons to run BFD over some VXLAN VNIs. Would the following text be acceptable: NEW TEXT: Using a BFD session to monitor a set of VXLAN VNIs between the same pair of VTEPs might help to detect and localize problems caused by misconfiguration. > > In "the inner destination IP address SHOULD" it is unclear whether it is > in the > all BFD packets, or only the request one or ... ? > GIM>> This is applicable to all BFD control packets transmitted over a VXLAN tunnel. To clarify, I propose the following change: OLD TEXT: As per Section 4, the inner destination IP address SHOULD be set to ... NEW TEXT: For BFD Control packets encapsulated in VXLAN (Figure 2), the inner destination IP address SHOULD be set to ... > > -- Section 4 -- > While probably defined in RFC7348, should "FCS" be renamed as "Outer > Ethernet > FCS" for consistency with the "Outer Ethernet Header" in figure 2 ? > GIM>> Would s/FCS/Outer FCS/ be acceptable? > > Why not using the Source MAC address as the Destination MAC address ? Thi= s > would ensure that there is no conflict at the expense of "forcing" the > transmission of the frame even if addressed to itself. > GIM>> Based on the input from experts familar with existing implementations, WG decided not to require the use of the specific MAC address. I think that using the Source MAC as the Destination might be one of the options an implementation will use. > > Please consider rewriting the section about TTL/Hop Limit as it is not > easy to > parse/read. > GIM>> Could you help me kindly and point to the problematic text? > > -- Section 9 -- > It is unclear to me (see also Ben's comment) what is the 'attack vector' = of > sending packets with TTL=3D1 ? > GIM>> Another input from experts familiar with VXLAN and its deployments reflected in the following: TTL or Hop Limit: MUST be set to 1 to ensure that the BFD packet is not routed within the Layer 3 underlay network. This addresses the scenario when the inner IP destination address is of VXLAN gateway and there is a router in underlay which removes the VXLAN header, then it is possible to route the packet as VXLAN gateway address is routable address. --0000000000003794bd059a050f51 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Eric,
thank you for your review, c= omments, and suggestions. Please find my answers=C2=A0below under GIM>&g= t; tag. Also, attached is the diff to the working version of the document t= hat includes updates that Adam has suggested.

Best= regards,
Greg


On Tue, Dec 17, 2019 at 12:51 = AM =C3=89ric Vyncke via Datatracker <noreply@ietf.org> wrote:
=C3=89ric Vyncke has entered the following ballot position= for
draft-ietf-bfd-vxlan-09: Discuss

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/s= tatement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-bf= d-vxlan/



----------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------


Thank you for the work put into this document.

I fully second Adam's COMMENT that should be fixed before publication (= IMHO
this is a DISCUSS).
GIM>> I've applied chang= es suggested by Adam to the working version of the document.=C2=A0

Answers to my COMMENTs below will be welcome, even if those COMMENTs are no= t
blocking.

As usual, an answer to the DISCUSS is required to clear my DISCUSS though.<= br>
I hope that this helps to improve the document,

Regards,

-=C3=A9ric

=3D=3D DISCUSS =3D=3D

May be I am not familiar enough with BFD, but, RFC 5881 (the one defining B= FD)
specifies the use of TTL =3D Hop Limit =3D 255.. Why this document uses a v= alue of
1 ?
GIM>> Jeff and Carlos are in a very detailed= and insightful discussion. I'll wait for its conclusion and follow on = their agreement.


-- Section 3 --
IPv4-mapped IPv6 addresses are only to be used inside a host and should nev= er
be transmitted in real packets (including packets inside a tunnel) see sect= ion
4.2 of RFC 4038 (even if informational). As other IESG reviewers, I wonder = why
::1/128 is not used?
GIM>> The mechanism of usin= g an address from the loopback address range or IPv4-mapped addresses of th= at range may be used to create entropy and monitor ECMP paths in an IP/MPLS= network (RFC 8029 and RFC 5884). This specification uses the same mechanis= m for ECMP environment in the underlay network.

-- Section 8 --
The document specifies no IANA actions while the shepherd write-up talks ab= out
a IANA action.
GIM>> RtgDir review from Joel Hal= pern and the extensive discussion on BFD WG list lead to this change. As a = result, the request to allocate a MAC address to be used as the destination= MAC address in the inner Ethernet header was withdrawn and removed from th= e specification.

-- Section 9 --
This section is only about IPv4 (TTL and RFC 1812). Please address IPv6 as = well.
GIM>> Added "or Hop Limit". Plea= se let me know if you agree. As for a IPv6 relevant reference equivalent to= RFC 1812, Adam Roach has noted that RFC 8504 does not have anything of the= kind. At the same time, the use of IPv4-mapped loopback address range has = been mandated in RFC 8029 and RFC 5884.


----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

=3D=3D COMMENTS =3D=3D

RFC 5881 (BFD) states that it applies to IPv4/IPv6 tunnels, may I infer tha= t
this document is only required to address the Ethernet encapsulation ? I.e.=
specifying the Ethernet MAC addresses?
GIM>> The= re were several threads on encapsulation of BFD Control packet over VXLAN t= hat, in my estimation, gathered 150+ messages. As you've noticed from t= he Shepherd write-up, the use of the dedicated MAC address was proposed, di= scussed, and documented. But later the WG decided not to use the dedicated = MAC as the destination MAC in the inner Ethernet frame. Similarly, we had a= n extended discussion, including valuable input from implementors of BFD ov= er VXLAN, on the selection of the destination IP address in the inner IP he= ader. And another set of issues was discovered related to the selection of = VXLAN VNI value when encapsulating=C2=A0 BFD control packet. I hope we'= ve analyzed all encapsulation issues and documented them sufficiently for t= he benefit of future implementations.

-- Section 3 --
At first sight, I was surprized by having a BFD session per VXLAN VNI as it=
will create some scalability issue, but, I assume that this is to detect misconfiguration as well. If so, perhaps worth mentionnig the reasoning beh= ind?
GIM>> I agree, detecting misconfiguration m= ight be one of the reasons to run BFD over some VXLAN VNIs. Would the follo= wing text be acceptable:

NEW TEXT:
=C2= =A0 =C2=A0Using a BFD session to monitor a set of VXLAN VNIs between
=C2= =A0 =C2=A0the same pair of VTEPs might help to detect and localize problems=
=C2=A0 =C2=A0caused by misconfiguration.

In "the inner destination IP address SHOULD" it is unclear whethe= r it is in the
all BFD packets, or only the request one or ... ?
GIM&= gt;> This is applicable to all BFD control packets transmitted over a VX= LAN tunnel. To clarify, I propose the following change:
OLD TEXT:=
As per Section 4, the inner destination IP address SHOULD be set= to ...
NEW TEXT:
=C2=A0 =C2=A0For BFD Control pack= ets encapsulated in VXLAN
=C2=A0 =C2=A0(Figure 2), the inner destination= IP address SHOULD be set to ...

-- Section 4 --
While probably defined in RFC7348, should "FCS" be renamed as &qu= ot;Outer Ethernet
FCS" for consistency with the "Outer Ethernet Header" in fig= ure 2 ?
GIM>> Would s/FCS/Outer FCS/ be acceptab= le?

Why not using the Source MAC address as the Destination MAC address ? This<= br> would ensure that there is no conflict at the expense of "forcing"= ; the
transmission of the frame even if addressed to itself.
GIM>> Based on the input from experts familar with existing implemen= tations, WG decided not to require the use of the specific MAC address. I t= hink that using the Source MAC as the Destination might be one of the optio= ns an implementation will use.=C2=A0

Please consider rewriting the section about TTL/Hop Limit as it is not easy= to
parse/read.
GIM>> Could you help me kindly and p= oint to the problematic text?=C2=A0

-- Section 9 --
It is unclear to me (see also Ben's comment) what is the 'attack ve= ctor' of
sending packets with TTL=3D1 ?
GIM>> Another inp= ut from experts familiar with VXLAN and its deployments reflected in the fo= llowing:
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 TTL or Hop Limit: MUS= T be set to 1 to ensure that the BFD
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0packet is not routed within the Layer 3 underlay network.=C2=A0 This
= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0addresses the scenario when the inner IP = destination address is
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0of VXLAN gatewa= y and there is a router in underlay which
=C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0removes the VXLAN header, then it is possible to route the
=C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0packet as VXLAN =C2=A0gateway address is routabl= e address.
--0000000000003794bd059a050f51-- --0000000000003794bf059a050f53 Content-Type: text/html; charset="UTF-8"; name="Diff_ draft-ietf-bfd-vxlan-09.txt - draft-ietf-bfd-vxlan-10.txt.html" Content-Disposition: attachment; filename="Diff_ draft-ietf-bfd-vxlan-09.txt - draft-ietf-bfd-vxlan-10.txt.html" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_k4c377ux0 PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h bC5kdGQiPgo8IS0tIHNhdmVkIGZyb20gdXJsPSgwMDQyKWh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9y ZmNkaWZmL3JmY2RpZmYucHlodCAtLT4KPGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5 OTkveGh0bWwiIGNsYXNzPSJncl9fd3d3Nl9pZXRmX29yZyI+PGhlYWQ+PG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgiPiAKICAg CiAgPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1TdHlsZS1UeXBlIiBjb250ZW50PSJ0ZXh0L2Nz cyI+IAogIDx0aXRsZT5EaWZmOiBkcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQgLSBkcmFmdC1p ZXRmLWJmZC12eGxhbi0xMC50eHQ8L3RpdGxlPiAKICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAK ICAgIGJvZHkgICAgeyBtYXJnaW46IDAuNGV4OyBtYXJnaW4tcmlnaHQ6IGF1dG87IH0gCiAgICB0 ciAgICAgIHsgfSAKICAgIHRkICAgICAgeyB3aGl0ZS1zcGFjZTogcHJlOyBmb250LWZhbWlseTog bW9ub3NwYWNlOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBmb250LXNpemU6IDAuODZlbTt9IAogICAg dGggICAgICB7IGZvbnQtc2l6ZTogMC44NmVtOyB9IAogICAgLnNtYWxsICB7IGZvbnQtc2l6ZTog MC42ZW07IGZvbnQtc3R5bGU6IGl0YWxpYzsgZm9udC1mYW1pbHk6IFZlcmRhbmEsIEhlbHZldGlj YSwgc2Fucy1zZXJpZjsgfSAKICAgIC5sZWZ0ICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyB9 IAogICAgLnJpZ2h0ICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkY7IH0gCiAgICAuZGlmZiAgIHsg YmFja2dyb3VuZC1jb2xvcjogI0NDRjsgfSAKICAgIC5sYmxvY2sgeyBiYWNrZ3JvdW5kLWNvbG9y OiAjQkZCOyB9IAogICAgLnJibG9jayB7IGJhY2tncm91bmQtY29sb3I6ICNGRjg7IH0gCiAgICAu aW5zZXJ0IHsgYmFja2dyb3VuZC1jb2xvcjogIzhGRjsgfSAKICAgIC5kZWxldGUgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjQUNGOyB9IAogICAgLnZvaWQgICB7IGJhY2tncm91bmQtY29sb3I6ICNGRkI7 IH0gCiAgICAuY29udCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAKICAgIC5saW5lYnIg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFBOyB9IAogICAgLmxpbmVubyB7IGNvbG9yOiByZWQ7IGJh Y2tncm91bmQtY29sb3I6ICNGRkY7IGZvbnQtc2l6ZTogMC43ZW07IHRleHQtYWxpZ246IHJpZ2h0 OyBwYWRkaW5nOiAwIDJweDsgfSAKICAgIC5lbGlwc2lzeyBiYWNrZ3JvdW5kLWNvbG9yOiAjQUFB OyB9IAogICAgLmxlZnQgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjREREOyB9IAogICAgLnJp Z2h0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAKICAgIC5sYmxvY2sgLmNvbnQg eyBiYWNrZ3JvdW5kLWNvbG9yOiAjOUQ5OyB9IAogICAgLnJibG9jayAuY29udCB7IGJhY2tncm91 bmQtY29sb3I6ICNERDY7IH0gCiAgICAuaW5zZXJ0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjog IzBERDsgfSAKICAgIC5kZWxldGUgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjOEFEOyB9IAog ICAgLnN0YXRzLCAuc3RhdHMgdGQsIC5zdGF0cyB0aCB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7 IHBhZGRpbmc6IDJweCAwOyB9IAogICAgc3Bhbi5oaWRlIHsgZGlzcGxheTogbm9uZTsgY29sb3I6 ICNhYWE7fSAgICBhOmhvdmVyIHNwYW4geyBkaXNwbGF5OiBpbmxpbmU7IH0gICAgdHIuY2hhbmdl IHsgYmFja2dyb3VuZC1jb2xvcjogZ3JheTsgfSAKICAgIHRyLmNoYW5nZSBhIHsgdGV4dC1kZWNv cmF0aW9uOiBub25lOyBjb2xvcjogYmxhY2sgfSAKICA8L3N0eWxlPiAKICAgICA8c2NyaXB0Pgp2 YXIgY2h1bmtfaW5kZXggPSAwOwp2YXIgb2xkX2NodW5rID0gbnVsbDsKCmZ1bmN0aW9uIGZvcm1h dF9jaHVuayhpbmRleCkgewogICAgdmFyIHByZWZpeCA9ICJkaWZmIjsKICAgIHZhciBzdHIgPSBp bmRleC50b1N0cmluZygpOwogICAgZm9yICh4PTA7IHg8KDQtc3RyLmxlbmd0aCk7ICsreCkgewog ICAgICAgIHByZWZpeCs9JzAnOwogICAgfQogICAgcmV0dXJuIHByZWZpeCArIHN0cjsKfQoKZnVu Y3Rpb24gZmluZF9jaHVuayhuKXsKICAgIHJldHVybiBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCd0 cltpZCQ9IicgKyBuICsgJyJdJyk7Cn0KCmZ1bmN0aW9uIGNoYW5nZV9jaHVuayhvZmZzZXQpIHsK ICAgIHZhciBpbmRleCA9IGNodW5rX2luZGV4ICsgb2Zmc2V0OwogICAgdmFyIG5ld19zdHI7CiAg ICB2YXIgbmV3X2NodW5rOwoKICAgIG5ld19zdHIgPSBmb3JtYXRfY2h1bmsoaW5kZXgpOwogICAg bmV3X2NodW5rID0gZmluZF9jaHVuayhuZXdfc3RyKTsKICAgIGlmICghbmV3X2NodW5rKSB7CiAg ICAgICAgcmV0dXJuOwogICAgfQogICAgaWYgKG9sZF9jaHVuaykgewogICAgICAgIG9sZF9jaHVu ay5zdHlsZS5vdXRsaW5lID0gIiI7CiAgICB9CiAgICBvbGRfY2h1bmsgPSBuZXdfY2h1bms7CiAg ICBvbGRfY2h1bmsuc3R5bGUub3V0bGluZSA9ICIxcHggc29saWQgcmVkIjsKICAgIHdpbmRvdy5s b2NhdGlvbi5yZXBsYWNlKCIjIiArIG5ld19zdHIpCiAgICB3aW5kb3cuc2Nyb2xsQnkoMCwtMTAw KTsKICAgIGNodW5rX2luZGV4ID0gaW5kZXg7Cn0KCmRvY3VtZW50Lm9ua2V5ZG93biA9IGZ1bmN0 aW9uKGUpIHsKICAgIHN3aXRjaCAoZS5rZXlDb2RlKSB7CiAgICBjYXNlIDc4OgogICAgICAgIGNo YW5nZV9jaHVuaygxKTsKICAgICAgICBicmVhazsKICAgIGNhc2UgODA6CiAgICAgICAgY2hhbmdl X2NodW5rKC0xKTsKICAgICAgICBicmVhazsKICAgIH0KfTsKICAgPC9zY3JpcHQ+IAo8L2hlYWQ+ IAo8Ym9keSBkYXRhLWdyLWMtcy1sb2FkZWQ9InRydWUiPiAKICA8dGFibGUgYm9yZGVyPSIwIiBj ZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiPiAKICA8dGJvZHk+PHRyIGlkPSJwYXJ0LTEi IGJnY29sb3I9Im9yYW5nZSI+PHRoPjwvdGg+PHRoPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRm Lm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1iZmQtdnhsYW4tMDkudHh0IiBzdHlsZT0iY29s b3I6IzAwODsgdGV4dC1kZWNvcmF0aW9uOm5vbmU7Ij4mbHQ7PC9hPiZuYnNwOzxhIGhyZWY9Imh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQiIHN0 eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1pZXRmLWJmZC12eGxhbi0wOS50eHQ8L2E+Jm5ic3A7PC90 aD48dGg+IDwvdGg+PHRoPiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1pZXRmLWJmZC12eGxhbi0xMC50eHQiIHN0eWxlPSJjb2xvcjojMDA4Ij5kcmFmdC1p ZXRmLWJmZC12eGxhbi0xMC50eHQ8L2E+Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYu b3JnL3JmY2RpZmY/dXJsMT1kcmFmdC1pZXRmLWJmZC12eGxhbi0xMC50eHQiIHN0eWxlPSJjb2xv cjojMDA4OyB0ZXh0LWRlY29yYXRpb246bm9uZTsiPiZndDs8L2E+PC90aD48dGg+PC90aD48L3Ry PiAKICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij5CRkQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBT LiBQYWxsYWdhdHRpLCBFZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5CRkQgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBTLiBQYWxsYWdh dHRpLCBFZC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkludGVybmV0LURyYWZ0ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFZNd2FyZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFZNd2FyZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+SW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFMuIFBhcmFnaXJpPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+SW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFMuIFBhcmFnaXJpPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHIgaWQ9ImRpZmYwMDAxIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPkV4cGlyZXM6IEp1bmUgPHNwYW4gY2xh c3M9ImRlbGV0ZSI+MSwgMjAyMCA8L3NwYW4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgIElu ZGl2aWR1YWwgQ29udHJpYnV0b3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RXhw aXJlczogSnVuZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4yMCwgMjAyMDwvc3Bhbj4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgSW5kaXZpZHVhbCBDb250cmlidXRvcjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFYuIEdvdmluZGFuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFYuIEdvdmluZGFuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBNdWRp Z29uZGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBNdWRpZ29uZGE8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBDaXNjbzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgRy4gTWlyc2t5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Ry4gTWlyc2t5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBaVEUgQ29ycC48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBaVEUgQ29ycC48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDIiPjx0ZD48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxz cGFuIGNsYXNzPSJkZWxldGUiPk5vdmVtYmVyIDI5PC9zcGFuPiwgMjAxOTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9Imluc2VydCI+RGVjZW1iZXIgMTg8L3NwYW4+ LCAyMDE5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgQkZEIGZvciBWWExBTjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQkZEIGZvciBWWExBTjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwMyI+PHRkPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICAgICAgICAgICAgICAgICAgICAgICBkcmFmdC1pZXRmLWJmZC12eGxhbi08c3BhbiBjbGFzcz0i ZGVsZXRlIj4wOTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAg ICAgICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1iZmQtdnhsYW4tPHNwYW4gY2xhc3M9Imluc2Vy dCI+MTA8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkFic3RyYWN0PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+QWJzdHJhY3Q8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHVzZSBvZiB0aGUg QmlkaXJlY3Rpb25hbCBGb3J3YXJkaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHVzZSBvZiB0aGUgQmlkaXJlY3Rpb25hbCBG b3J3YXJkaW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEZXRlY3Rpb24gKEJGRCkg cHJvdG9jb2wgaW4gcG9pbnQtdG8tcG9pbnQgVmlydHVhbCBlWHRlbnNpYmxlIExvY2FsPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRGV0ZWN0aW9uIChCRkQpIHByb3RvY29sIGlu IHBvaW50LXRvLXBvaW50IFZpcnR1YWwgZVh0ZW5zaWJsZSBMb2NhbDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAwNCI+PHRkPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBB cmVhIE5ldHdvcmsgKFZYTEFOKSB0dW5uZWxzIDxzcGFuIGNsYXNzPSJkZWxldGUiPmZvcm1pbmcg dXA8L3NwYW4+IGFuIG92ZXJsYXkgbmV0d29yay48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgQXJlYSBOZXR3b3JrIChWWExBTikgdHVubmVscyA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij51c2VkIHRvIGZvcm08L3NwYW4+IGFuIG92ZXJsYXkgbmV0d29yay48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+U3RhdHVzIG9mIFRoaXMgTWVtbzwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPlN0YXR1cyBvZiBUaGlzIE1lbW88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCBpcyBzdWJtaXR0ZWQgaW4gZnVsbCBjb25m b3JtYW5jZSB3aXRoIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoaXMg SW50ZXJuZXQtRHJhZnQgaXMgc3VibWl0dGVkIGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0aGU8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4IGFuZCBC Q1AgNzkuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcHJvdmlzaW9ucyBvZiBC Q1AgNzggYW5kIEJDUCA3OS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50 ZXJuZXQtRHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5naW5l ZXJpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbnRlcm5ldC1EcmFmdHMg YXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGFzayBGb3JjZSAoSUVURikuICBOb3RlIHRoYXQgb3Ro ZXIgZ3JvdXBzIG1heSBhbHNvIGRpc3RyaWJ1dGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBUYXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFs c28gZGlzdHJpYnV0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgd29ya2luZyBkb2N1 bWVudHMgYXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC08 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB3b3JraW5nIGRvY3VtZW50cyBhcyBJ bnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJyZW50IEludGVybmV0LTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgRHJhZnRzIGlzIGF0IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0 Zi5vcmcvZHJhZnRzL2N1cnJlbnQvLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IERyYWZ0cyBpcyBhdCBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJyZW50 Ly48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFy ZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBk b2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0 ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhl ciBkb2N1bWVudHMgYXQgYW55PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aW1lLiAg SXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5jZTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRpbWUuICBJdCBpcyBpbmFwcHJvcHJp YXRlIHRvIHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29y ayBpbiBwcm9ncmVzcy4iPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgbWF0ZXJp YWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3MuIjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDA1 Ij48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gSnVuZSA8 c3BhbiBjbGFzcz0iZGVsZXRlIj4xPC9zcGFuPiwgMjAyMC48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCB3aWxsIGV4cGlyZSBvbiBKdW5lIDxz cGFuIGNsYXNzPSJpbnNlcnQiPjIwPC9zcGFuPiwgMjAyMC48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+Q29weXJpZ2h0IE5vdGljZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPkNvcHlyaWdodCBOb3RpY2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg Q29weXJpZ2h0IChjKSAyMDE5IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQg YXMgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQ29weXJpZ2h0IChjKSAy MDE5IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQgYXMgdGhlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkb2N1bWVudCBhdXRob3JzLiAgQWxsIHJpZ2h0cyByZXNl cnZlZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkb2N1bWVudCBhdXRob3Jz LiAgQWxsIHJpZ2h0cyByZXNlcnZlZC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgVGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYgVHJ1c3Qn cyBMZWdhbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoaXMgZG9jdW1lbnQg aXMgc3ViamVjdCB0byBCQ1AgNzggYW5kIHRoZSBJRVRGIFRydXN0J3MgTGVnYWw8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVu dHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBQcm92aXNpb25zIFJlbGF0aW5n IHRvIElFVEYgRG9jdW1lbnRzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAoaHR0cHM6 Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9m PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgKGh0dHBzOi8vdHJ1c3RlZS5pZXRm Lm9yZy9saWNlbnNlLWluZm8pIGluIGVmZmVjdCBvbiB0aGUgZGF0ZSBvZjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgcHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVudC4gIFBsZWFzZSBy ZXZpZXcgdGhlc2UgZG9jdW1lbnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg cHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVudC4gIFBsZWFzZSByZXZpZXcgdGhlc2UgZG9jdW1l bnRzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0i cGFydC0yIiBjbGFzcz0iY2hhbmdlIj48dGQ+PC90ZD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNo YW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYub3JnL3JmY2RpZmYvcmZj ZGlmZi5weWh0I3BhcnQtMiI+PGVtPiBwYWdlIDIsIGxpbmUgMTY8c3BhbiBjbGFzcz0iaGlkZSI+ IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48c21hbGw+c2tpcHBpbmcgdG8g Y2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSJodHRwczovL3d3dzYuaWV0Zi5vcmcvcmZjZGlmZi9y ZmNkaWZmLnB5aHQjcGFydC0yIj48ZW0+IHBhZ2UgMiwgbGluZSAxNjxzcGFuIGNsYXNzPSJoaWRl Ij4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUgVHJ1c3QgTGVnYWwgUHJv dmlzaW9ucyBhbmQgYXJlIHByb3ZpZGVkIHdpdGhvdXQgd2FycmFudHkgYXM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUgVHJ1c3QgTGVnYWwgUHJvdmlzaW9ucyBhbmQgYXJl IHByb3ZpZGVkIHdpdGhvdXQgd2FycmFudHkgYXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIGRlc2NyaWJlZCBpbiB0aGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZS48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExp Y2Vuc2UuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPlRhYmxlIG9mIENvbnRlbnRz PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+VGFibGUgb2YgQ29udGVudHM8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMS4gIEludHJvZHVjdGlvbiAgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAyPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgMS4gIEludHJvZHVjdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAyPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAyLiAgQ29udmVudGlvbnMgdXNlZCBpbiB0aGlzIGRvY3VtZW50IC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgIDM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAy LiAgQ29udmVudGlvbnMgdXNlZCBpbiB0aGlzIGRvY3VtZW50IC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgIDM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgMi4xLiAgVGVybWlu b2xvZ3kgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMzwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgMi4xLiAgVGVybWlub2xvZ3kgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAyLjIuICBSZXF1aXJlbWVudHMgTGFuZ3VhZ2UgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICAyLjIuICBSZXF1aXJlbWVudHMgTGFuZ3VhZ2UgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAz LiAgRGVwbG95bWVudCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgIDQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAzLiAgRGVwbG95 bWVudCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg IDQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAw MDYiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgNC4gIEJGRCBQYWNrZXQgVHJhbnNtaXNzaW9uIG92ZXIgVlhMQU4g VHVubmVsIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj41PC9zcGFu PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA0LiAgQkZEIFBhY2tldCBUcmFu c21pc3Npb24gb3ZlciBWWExBTiBUdW5uZWwgLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNs YXNzPSJpbnNlcnQiPjY8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDUu ICBSZWNlcHRpb24gb2YgQkZEIFBhY2tldCBmcm9tIFZYTEFOIFR1bm5lbCAuIC4gLiAuIC4gLiAu IC4gLiAuICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Nzwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgNS4gIFJlY2VwdGlvbiBvZiBCRkQgUGFja2V0IGZyb20gVlhMQU4g VHVubmVsIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij44PC9zcGFu PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgIDUuMS4gIERlbXVsdGlwbGV4aW5n IG9mIHRoZSBCRkQgUGFja2V0ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNz PSJkZWxldGUiPjg8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAg NS4xLiAgRGVtdWx0aXBsZXhpbmcgb2YgdGhlIEJGRCBQYWNrZXQgIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICAgPHNwYW4gY2xhc3M9Imluc2VydCI+OTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgNi4gIFVzZSBvZiB0aGUgU3BlY2lmaWMgVk5JIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj44PC9zcGFuPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA2LiAgVXNlIG9mIHRoZSBTcGVjaWZp YyBWTkkgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNz PSJpbnNlcnQiPjk8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDcuICBF Y2hvIEJGRCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ODwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgNy4gIEVjaG8gQkZEICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij45PC9zcGFuPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA4LiAgSUFOQSBDb25zaWRlcmF0aW9ucyAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNzPSJk ZWxldGUiPjg8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDguICBJ QU5BIENvbnNpZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICAgPHNwYW4gY2xhc3M9Imluc2VydCI+OTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgOS4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj44PC9zcGFuPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA5LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlv bnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNzPSJp bnNlcnQiPjk8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDEwLiBDb250 cmlidXRvcnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+OTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgMTAuIENvbnRyaWJ1dG9ycyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPjEwPC9zcGFuPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAxMS4gQWNrbm93bGVkZ21lbnRzIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDxzcGFuIGNsYXNzPSJkZWxl dGUiPjk8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDExLiBBY2tu b3dsZWRnbWVudHMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xMDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgMTIuIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj45PC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAxMi4gUmVmZXJlbmNlcyAgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9Imluc2Vy dCI+MTA8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgMTIuMS4gIE5v cm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAg PHNwYW4gY2xhc3M9ImRlbGV0ZSI+OTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgICAxMi4xLiAgTm9ybWF0aXZlIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPjEwPC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgIDEyLjIuICBJbmZvcm1hdGlvbmFsIFJlZmVyZW5j ZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ MTA8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgMTIuMi4gIElu Zm9ybWF0aW9uYWwgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xMTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgQXV0aG9ycycgQWRkcmVzc2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNzPSJkZWxldGUiPjEwPC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBBdXRob3JzJyBBZGRyZXNzZXMgIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9Imluc2VydCI+ MTE8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjEuICBJbnRyb2R1Y3Rp b248L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xLiAgSW50cm9kdWN0aW9uPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICJWaXJ0dWFsIGVYdGVuc2libGUgTG9jYWwg QXJlYSBOZXR3b3JrIiAoVlhMQU4pIFtSRkM3MzQ4XSBwcm92aWRlcyBhbjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICJWaXJ0dWFsIGVYdGVuc2libGUgTG9jYWwgQXJlYSBOZXR3 b3JrIiAoVlhMQU4pIFtSRkM3MzQ4XSBwcm92aWRlcyBhbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgZW5jYXBzdWxhdGlvbiBzY2hlbWUgdGhhdCBhbGxvd3MgYnVpbGRpbmcgYW4gb3Zl cmxheSBuZXR3b3JrIGJ5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZW5jYXBz dWxhdGlvbiBzY2hlbWUgdGhhdCBhbGxvd3MgYnVpbGRpbmcgYW4gb3ZlcmxheSBuZXR3b3JrIGJ5 PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkZWNvdXBsaW5nIHRoZSBhZGRyZXNzIHNw YWNlIG9mIHRoZSBhdHRhY2hlZCB2aXJ0dWFsIGhvc3RzIGZyb20gdGhhdDwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRlY291cGxpbmcgdGhlIGFkZHJlc3Mgc3BhY2Ugb2YgdGhl IGF0dGFjaGVkIHZpcnR1YWwgaG9zdHMgZnJvbSB0aGF0PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBvZiB0aGUgbmV0d29yay48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBvZiB0aGUgbmV0d29yay48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgT25l IHVzZSBvZiBWWExBTiBpcyBpbiBkYXRhIGNlbnRlcnMgaW50ZXJjb25uZWN0aW5nIHZpcnR1YWwg bWFjaGluZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBPbmUgdXNlIG9mIFZY TEFOIGlzIGluIGRhdGEgY2VudGVycyBpbnRlcmNvbm5lY3RpbmcgdmlydHVhbCBtYWNoaW5lczwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgKFZNcykgb2YgYSB0ZW5hbnQuICBWWExBTiBh ZGRyZXNzZXMgcmVxdWlyZW1lbnRzIG9mIHRoZSBMYXllciAyIGFuZDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIChWTXMpIG9mIGEgdGVuYW50LiAgVlhMQU4gYWRkcmVzc2VzIHJl cXVpcmVtZW50cyBvZiB0aGUgTGF5ZXIgMiBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTMiIGNsYXNzPSJjaGFuZ2UiPjx0ZD48L3Rk Pjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSJodHRwczov L3d3dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC0zIj48ZW0+IHBhZ2UgMywg bGluZSA4PHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90 aD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6 Ly93d3c2LmlldGYub3JnL3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtMyI+PGVtPiBwYWdlIDMs IGxpbmUgODxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBoeXBlcnZpc29ycy4gIEhvd2V2ZXIsIHRoZSBjb25jZXB0cyBhcmUgZXF1YWxseSBhcHBs aWNhYmxlIHRvIG5vbi08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBoeXBlcnZp c29ycy4gIEhvd2V2ZXIsIHRoZSBjb25jZXB0cyBhcmUgZXF1YWxseSBhcHBsaWNhYmxlIHRvIG5v bi08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHZpcnR1YWxpemVkIGhvc3RzIGF0dGFj aGVkIHRvIFZURVBzIGluIHN3aXRjaGVzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIHZpcnR1YWxpemVkIGhvc3RzIGF0dGFjaGVkIHRvIFZURVBzIGluIHN3aXRjaGVzLjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJbiB0aGUgYWJzZW5jZSBvZiBhIHJvdXRl ciBpbiB0aGUgb3ZlcmxheSwgYSBWTSBjYW4gY29tbXVuaWNhdGUgd2l0aDwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIEluIHRoZSBhYnNlbmNlIG9mIGEgcm91dGVyIGluIHRoZSBv dmVybGF5LCBhIFZNIGNhbiBjb21tdW5pY2F0ZSB3aXRoPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBhbm90aGVyIFZNIG9ubHkgaWYgdGhleSBhcmUgb24gdGhlIHNhbWUgVlhMQU4gc2Vn bWVudC4gIFZNcyBhcmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhbm90aGVy IFZNIG9ubHkgaWYgdGhleSBhcmUgb24gdGhlIHNhbWUgVlhMQU4gc2VnbWVudC4gIFZNcyBhcmU8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVuYXdhcmUgb2YgVlhMQU4gdHVubmVscyBh cyBhIFZYTEFOIHR1bm5lbCBpcyB0ZXJtaW5hdGVkIG9uIGEgVlRFUC48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICB1bmF3YXJlIG9mIFZYTEFOIHR1bm5lbHMgYXMgYSBWWExBTiB0 dW5uZWwgaXMgdGVybWluYXRlZCBvbiBhIFZURVAuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIFZURVBzIGFyZSByZXNwb25zaWJsZSBmb3IgZW5jYXBzdWxhdGluZyBhbmQgZGVj YXBzdWxhdGluZyBmcmFtZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBWVEVQ cyBhcmUgcmVzcG9uc2libGUgZm9yIGVuY2Fwc3VsYXRpbmcgYW5kIGRlY2Fwc3VsYXRpbmcgZnJh bWVzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBleGNoYW5nZWQgYW1vbmcgVk1zLjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGV4Y2hhbmdlZCBhbW9uZyBWTXMuPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAw MDciPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+QTwvc3Bhbj5iaWxpdHkgdG8g bW9uaXRvciBwYXRoIGNvbnRpbnVpdHksIGkuZS4sIHBlcmZvcm0gcHJvYWN0aXZlPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPlRoZSBhPC9z cGFuPmJpbGl0eSB0byBtb25pdG9yIHBhdGggY29udGludWl0eSwgaS5lLiwgcGVyZm9ybSBwcm9h Y3RpdmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNvbnRpbnVpdHkgY2hlY2sgKEND KSBmb3IgcG9pbnQtdG8tcG9pbnQgKHAycCkgVlhMQU4gdHVubmVscywgaXM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjb250aW51aXR5IGNoZWNrIChDQykgZm9yIHBvaW50LXRv LXBvaW50IChwMnApIFZYTEFOIHR1bm5lbHMsIGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBpbXBvcnRhbnQuICBUaGUgYXN5bmNocm9ub3VzIG1vZGUgb2YgQkZELCBhcyBkZWZpbmVk IGluIFtSRkM1ODgwXSwgaXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpbXBv cnRhbnQuICBUaGUgYXN5bmNocm9ub3VzIG1vZGUgb2YgQkZELCBhcyBkZWZpbmVkIGluIFtSRkM1 ODgwXSwgaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVzZWQgdG8gbW9uaXRvciBh IHAycCBWWExBTiB0dW5uZWwuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXNl ZCB0byBtb25pdG9yIGEgcDJwIFZYTEFOIHR1bm5lbC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgSW4gdGhlIGNhc2Ugd2hlcmUgYSBNdWx0aWNhc3QgU2VydmljZSBOb2RlIChN U04pIChhcyBkZXNjcmliZWQgaW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJ biB0aGUgY2FzZSB3aGVyZSBhIE11bHRpY2FzdCBTZXJ2aWNlIE5vZGUgKE1TTikgKGFzIGRlc2Ny aWJlZCBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgU2VjdGlvbiAzLjMgb2YgW1JG QzgyOTNdKSByZXNpZGVzIGJlaGluZCBhIE5ldHdvcmsgVmlydHVhbGl6YXRpb248L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBTZWN0aW9uIDMuMyBvZiBbUkZDODI5M10pIHJlc2lk ZXMgYmVoaW5kIGEgTmV0d29yayBWaXJ0dWFsaXphdGlvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgRW5kcG9pbnQgKE5WRSksIHRoZSBtZWNoYW5pc21zIGRlc2NyaWJlZCBpbiB0aGlz IGRvY3VtZW50IGFwcGx5IGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEVu ZHBvaW50IChOVkUpLCB0aGUgbWVjaGFuaXNtcyBkZXNjcmliZWQgaW4gdGhpcyBkb2N1bWVudCBh cHBseSBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNhbiwgdGhlcmVmb3JlLCBi ZSB1c2VkIHRvIHRlc3QgdGhlIGNvbm5lY3Rpdml0eSBmcm9tIHRoZSBzb3VyY2UgTlZFPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY2FuLCB0aGVyZWZvcmUsIGJlIHVzZWQgdG8g dGVzdCB0aGUgY29ubmVjdGl2aXR5IGZyb20gdGhlIHNvdXJjZSBOVkU8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIHRvIHRoZSBNU04uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgdG8gdGhlIE1TTi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHIgaWQ9InBhcnQtNCIgY2xhc3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxz bWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5p ZXRmLm9yZy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTQiPjxlbT4gcGFnZSA0LCBsaW5lIDE0 PHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+ PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2 LmlldGYub3JnL3JmY2RpZmYvcmZjZGlmZi5weWh0I3BhcnQtNCI+PGVtPiBwYWdlIDQsIGxpbmUg MTQ8c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg MTQgW1JGQzIxMTldIFtSRkM4MTc0XSB3aGVuLCBhbmQgb25seSB3aGVuLCB0aGV5IGFwcGVhciBp biBhbGw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAxNCBbUkZDMjExOV0gW1JG QzgxNzRdIHdoZW4sIGFuZCBvbmx5IHdoZW4sIHRoZXkgYXBwZWFyIGluIGFsbDwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgY2FwaXRhbHMsIGFzIHNob3duIGhlcmUuPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY2FwaXRhbHMsIGFzIHNob3duIGhlcmUuPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjMuICBEZXBsb3ltZW50PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+My4gIERlcGxveW1lbnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgRmlndXJlIDEgaWxsdXN0cmF0ZXMgdGhlIHNjZW5hcmlvIHdpdGggdHdvIHNlcnZl cnMsIGVhY2ggb2YgdGhlbTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEZpZ3Vy ZSAxIGlsbHVzdHJhdGVzIHRoZSBzY2VuYXJpbyB3aXRoIHR3byBzZXJ2ZXJzLCBlYWNoIG9mIHRo ZW08L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGhvc3RpbmcgdHdvIFZNcy4gIFRoZSBz ZXJ2ZXJzIGhvc3QgVlRFUHMgdGhhdCB0ZXJtaW5hdGUgdHdvIFZYTEFOPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgaG9zdGluZyB0d28gVk1zLiAgVGhlIHNlcnZlcnMgaG9zdCBW VEVQcyB0aGF0IHRlcm1pbmF0ZSB0d28gVlhMQU48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIHR1bm5lbHMgd2l0aCBWWExBTiBOZXR3b3JrIElkZW50aWZpZXIgKFZOSSkgbnVtYmVyIDEw MCBhbmQgMjAwPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdHVubmVscyB3aXRo IFZYTEFOIE5ldHdvcmsgSWRlbnRpZmllciAoVk5JKSBudW1iZXIgMTAwIGFuZCAyMDA8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHJlc3BlY3RpdmVseS4gIFNlcGFyYXRlIEJGRCBzZXNz aW9ucyBjYW4gYmUgZXN0YWJsaXNoZWQgYmV0d2VlbiB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICByZXNwZWN0aXZlbHkuICBTZXBhcmF0ZSBCRkQgc2Vzc2lvbnMgY2FuIGJl IGVzdGFibGlzaGVkIGJldHdlZW4gdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBW VEVQcyAoSVAxIGFuZCBJUDIpIGZvciBtb25pdG9yaW5nIGVhY2ggb2YgdGhlIFZYTEFOIHR1bm5l bHMgKFZOSSAxMDA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBWVEVQcyAoSVAx IGFuZCBJUDIpIGZvciBtb25pdG9yaW5nIGVhY2ggb2YgdGhlIFZYTEFOIHR1bm5lbHMgKFZOSSAx MDA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAw MDgiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgYW5kIDIwMCkuICBBbiBpbXBsZW1lbnRhdGlvbiB0aGF0IHN1cHBv cnRzIHRoaXMgc3BlY2lmaWNhdGlvbiBNVVNUIGJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgIGFuZCAyMDApLiAgPHNwYW4gY2xhc3M9Imluc2VydCI+VXNpbmcgYSBCRkQgc2Vz c2lvbiB0byBtb25pdG9yIGEgc2V0IG9mIFZYTEFOIFZOSXMgYmV0d2Vlbjwvc3Bhbj48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYWJsZSB0byBjb250cm9sIHRoZSBudW1iZXIgb2Yg QkZEIHNlc3Npb25zIHRoYXQgY2FuIGJlIGNyZWF0ZWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgdGhlIHNhbWUgcGFpciBvZiBWVEVQcyBt aWdodCBoZWxwIHRvIGRldGVjdCBhbmQgbG9jYWxpemUgcHJvYmxlbXM8L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGJldHdlZW4gdGhlIHNhbWUgcGFpciBvZiBWVEVQcy4g IEJGRCBwYWNrZXRzIGludGVuZGVkIGZvciBhIFZURVAgTVVTVDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBjYXVzZWQgYnkgbWlzY29uZmln dXJhdGlvbi48L3NwYW4+ICBBbiBpbXBsZW1lbnRhdGlvbiB0aGF0IHN1cHBvcnRzIHRoaXM8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgTk9UIGJlIGZvcndhcmRlZCB0byBhIDxzcGFu IGNsYXNzPSJkZWxldGUiPlZNPC9zcGFuPiBhcyBhIFZNIG1heSBkcm9wIEJGRCA8c3BhbiBjbGFz cz0iZGVsZXRlIj5wYWNrZXRzPC9zcGFuPiBsZWFkaW5nIHRvIGE8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJibG9jayI+ICAgc3BlY2lmaWNhdGlvbiBNVVNUIGJlIGFibGUgdG8gY29udHJvbCB0 aGUgbnVtYmVyIG9mIEJGRCBzZXNzaW9ucyB0aGF0PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPiAgIGZhbHNlIG5lZ2F0aXZlLiAgVGhpcyBtZXRob2QgaXMgYXBwbGljYWJsZSB3aGV0aGVy IHRoZSBWVEVQIGlzIGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgY2FuIGJl IGNyZWF0ZWQgYmV0d2VlbiB0aGUgc2FtZSBwYWlyIG9mIFZURVBzLiAgQkZEIHBhY2tldHMgaW50 ZW5kZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgdmlydHVhbCBvciBwaHlzaWNh bCBkZXZpY2UuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGZvciBhIFZURVAg TVVTVCBOT1QgYmUgZm9yd2FyZGVkIHRvIGEgPHNwYW4gY2xhc3M9Imluc2VydCI+Vk0sPC9zcGFu PiBhcyBhIFZNIG1heSBkcm9wIEJGRDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+cGFj a2V0cyw8L3NwYW4+IGxlYWRpbmcgdG8gYSBmYWxzZSBuZWdhdGl2ZS4gIFRoaXMgbWV0aG9kIGlz IGFwcGxpY2FibGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPiAgIHdoZXRoZXIgdGhlIFZURVAgaXMgYSB2aXJ0dWFsIG9yIHBo eXNpY2FsIGRldmljZS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgKy0t LS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tKzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICstLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLSs8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgIHwgICAgICAgIFNlcnZlciAxICAgICAgICAgIHw8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgICB8ICAgICAgICBTZXJ2ZXIgMSAgICAgICAgICB8PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICB8ICstLS0tKy0tLS0rICArLS0tLSstLS0tKyB8 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgfCArLS0tLSstLS0tKyAgKy0t LS0rLS0tLSsgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgfCB8Vk0xLTEgICAg fCAgfFZNMS0yICAgIHwgfDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIHwg fFZNMS0xICAgIHwgIHxWTTEtMiAgICB8IHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgIHwgfFZOSSAxMDAgIHwgIHxWTkkgMjAwICB8IHw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICAgICB8IHxWTkkgMTAwICB8ICB8Vk5JIDIwMCAgfCB8PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICAgICB8IHwgICAgICAgICB8ICB8ICAgICAgICAgfCB8PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgfCB8ICAgICAgICAgfCAgfCAgICAgICAgIHwg fDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgfCArLS0tLS0tLS0tKyAgKy0tLS0t LS0tLSsgfDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIHwgKy0tLS0tLS0t LSsgICstLS0tLS0tLS0rIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIHwgICAg ICAgIFZURVAgKElQMSkgICAgICAgIHw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICB8ICAgICAgICBWVEVQIChJUDEpICAgICAgICB8PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICArLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tKzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9InBhcnQtNSIgY2xh c3M9ImNoYW5nZSI+PHRkPjwvdGQ+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3Nt YWxsPjxhIGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9yZmNkaWZmL3JmY2RpZmYucHlodCNw YXJ0LTUiPjxlbT4gcGFnZSA1LCBsaW5lIDEwPHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48 L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwv c21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYub3JnL3JmY2RpZmYvcmZjZGlmZi5weWh0 I3BhcnQtNSI+PGVtPiBwYWdlIDUsIGxpbmUgMzk8c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFu PjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB8ICAgICAgU2VydmVyIDIgICAgICAgICAgICB8PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAg ICAgU2VydmVyIDIgICAgICAgICAgICB8PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLSs8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSs8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgRmlndXJl IDE6IFJlZmVyZW5jZSBWWExBTiBEb21haW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICAgICAgICAgICAgICAgICBGaWd1cmUgMTogUmVmZXJlbmNlIFZYTEFOIERvbWFpbjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBBdCB0aGUgc2FtZSB0aW1lLCBhIHNl cnZpY2UgbGF5ZXIgQkZEIHNlc3Npb24gbWF5IGJlIHVzZWQgYmV0d2VlbiB0aGU8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBBdCB0aGUgc2FtZSB0aW1lLCBhIHNlcnZpY2UgbGF5 ZXIgQkZEIHNlc3Npb24gbWF5IGJlIHVzZWQgYmV0d2VlbiB0aGU8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIHRlbmFudHMgb2YgVlRFUHMgSVAxIGFuZCBJUDIgdG8gcHJvdmlkZSBlbmQt dG8tZW5kIGZhdWx0IG1hbmFnZW1lbnQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgdGVuYW50cyBvZiBWVEVQcyBJUDEgYW5kIElQMiB0byBwcm92aWRlIGVuZC10by1lbmQgZmF1 bHQgbWFuYWdlbWVudC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEluIHN1Y2ggY2Fz ZSwgZm9yIFZURVBzIEJGRCBDb250cm9sIHBhY2tldHMgb2YgdGhhdCBzZXNzaW9uIGFyZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEluIHN1Y2ggY2FzZSwgZm9yIFZURVBzIEJG RCBDb250cm9sIHBhY2tldHMgb2YgdGhhdCBzZXNzaW9uIGFyZTwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgaW5kaXN0aW5ndWlzaGFibGUgZnJvbSBkYXRhIHBhY2tldHMuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaW5kaXN0aW5ndWlzaGFibGUgZnJvbSBkYXRhIHBh Y2tldHMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBp ZD0iZGlmZjAwMDkiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+QXMgcGVyIFNl Y3Rpb24gNCw8L3NwYW4+IHRoZSBpbm5lciBkZXN0aW5hdGlvbiBJUCBhZGRyZXNzIFNIT1VMRCBi ZSBzZXQgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9 Imluc2VydCI+Rm9yIEJGRCBDb250cm9sIHBhY2tldHMgZW5jYXBzdWxhdGVkIGluIFZYTEFOIChG aWd1cmUgMiksPC9zcGFuPiB0aGUgaW5uZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgb25lIG9mIHRoZSBsb29wYmFjayBhZGRyZXNzZXMgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+KDEy Ny84PC9zcGFuPiByYW5nZSBmb3IgSVB2NCA8c3BhbiBjbGFzcz0iZGVsZXRlIj5hbmQ8L3NwYW4+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGRlc3RpbmF0aW9uIElQIGFkZHJl c3MgU0hPVUxEIGJlIHNldCB0byBvbmUgb2YgdGhlIGxvb3BiYWNrIGFkZHJlc3NlczwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAwOjA6MDowOjA6 RkZGRjo3RjAwOjAvMTA0PC9zcGFuPiByYW5nZSBmb3IgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+SVB2 NikuPC9zcGFuPiAgVGhlcmUgY291bGQgYmUgYSBmaXJld2FsbDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5mcm9tIDEyNy84PC9zcGFuPiBy YW5nZSBmb3IgSVB2NCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5vciB0byBvbmUgb2YgSVB2NC1tYXBw ZWQgSVB2NCBsb29wYmFjazwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg Y29uZmlndXJlZCBvbiBWVEVQIHRvIGJsb2NrIGxvb3BiYWNrIGFkZHJlc3NlcyBpZiBzZXQgYXMg dGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQi PiAgIGFkZHJlc3NlcyBmcm9tIDo6ZmZmZjoxMjcuMC4wLjAvMTA0PC9zcGFuPiByYW5nZSBmb3Ig PHNwYW4gY2xhc3M9Imluc2VydCI+SVB2Ni48L3NwYW4+ICBUaGVyZSBjb3VsZCBiZSBhPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij4gICBmaXJld2FsbCBjb25maWd1cmVkIG9uIFZURVAgdG8gYmxvY2sgbG9vcGJhY2sgYWRkcmVz c2VzIGlmIHNldCBhcyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRlc3RpbmF0 aW9uIElQIGluIHRoZSBpbm5lciBJUCBoZWFkZXIuICBJdCBpcyBSRUNPTU1FTkRFRCB0byBhbGxv dzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRlc3RpbmF0aW9uIElQIGluIHRo ZSBpbm5lciBJUCBoZWFkZXIuICBJdCBpcyBSRUNPTU1FTkRFRCB0byBhbGxvdzwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAxMCI+PHRkPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij4gICBhZGRyZXNzZXMgZnJvbSB0aGUgbG9vcGJhY2sgcmFuZ2UgdGhyb3VnaCBhIGZpcmV3YWxs IG9ubHkgaWYgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+aXQgaXM8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPiAgIGFkZHJlc3NlcyBmcm9tIHRoZSBsb29wYmFjayByYW5nZSB0 aHJvdWdoIGEgZmlyZXdhbGwgb25seSBpZiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij50aGV5IGFyZTwv c3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgdXNlZCBhcyB0aGUgZGVzdGlu YXRpb24gSVAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YWRkcmVzczwvc3Bhbj4gaW4gdGhlIGlubmVy IElQIDxzcGFuIGNsYXNzPSJkZWxldGUiPmhlYWRlciw8L3NwYW4+IGFuZCB0aGU8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdXNlZCBhcyB0aGUgZGVzdGluYXRpb24gSVAgPHNw YW4gY2xhc3M9Imluc2VydCI+YWRkcmVzc2VzPC9zcGFuPiBpbiB0aGUgaW5uZXIgSVAgPHNwYW4g Y2xhc3M9Imluc2VydCI+aGVhZGVyPC9zcGFuPiBhbmQgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBkZXN0aW5hdGlvbiBVRFAgcG9ydCBpcyBzZXQgdG8gMzc4NCBbUkZDNTg4MV0u PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZGVzdGluYXRpb24gVURQIHBvcnQg aXMgc2V0IHRvIDM3ODQgW1JGQzU4ODFdLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij40LiAgQkZEIFBhY2tldCBUcmFuc21pc3Npb24gb3ZlciBWWExBTiBUdW5uZWw8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij40LiAgQkZEIFBhY2tldCBUcmFuc21pc3Npb24gb3ZlciBW WExBTiBUdW5uZWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyIGlkPSJkaWZmMDAxMSI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBCRkQgcGFja2V0PHNwYW4gY2xhc3M9ImRl bGV0ZSI+IE1VU1QgYmUgZW5jYXBzdWxhdGVkIGFuZCBzZW50IHRvIGEgcmVtb3RlIFZURVA8L3Nw YW4+IGFzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIEJGRCBwYWNrZXQ8c3Bh biBjbGFzcz0iaW5zZXJ0Ij5zIE1VU1QgYmUgZW5jYXBzdWxhdGVkIGFuZCBzZW50IHRvIGEgcmVt b3RlIFZURVBzPC9zcGFuPiBhczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZXhwbGFp bmVkIGluIHRoaXMgc2VjdGlvbi4gIEltcGxlbWVudGF0aW9ucyBTSE9VTEQgZW5zdXJlIHRoYXQg dGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZXhwbGFpbmVkIGluIHRoaXMg c2VjdGlvbi4gIEltcGxlbWVudGF0aW9ucyBTSE9VTEQgZW5zdXJlIHRoYXQgdGhlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBCRkQgcGFja2V0cyBmb2xsb3cgdGhlIHNhbWUgbG9va3Vw IHBhdGggYXMgVlhMQU4gZGF0YSBwYWNrZXRzIHdpdGhpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIEJGRCBwYWNrZXRzIGZvbGxvdyB0aGUgc2FtZSBsb29rdXAgcGF0aCBhcyBW WExBTiBkYXRhIHBhY2tldHMgd2l0aGluPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0 aGUgc2VuZGVyIHN5c3RlbS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUg c2VuZGVyIHN5c3RlbS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQkZEIHBh Y2tldHMgYXJlIGVuY2Fwc3VsYXRlZCBpbiBWWExBTiBhcyBkZXNjcmliZWQgYmVsb3cuICBUaGUg VlhMQU48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBCRkQgcGFja2V0cyBhcmUg ZW5jYXBzdWxhdGVkIGluIFZYTEFOIGFzIGRlc2NyaWJlZCBiZWxvdy4gIFRoZSBWWExBTjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcGFja2V0IGZvcm1hdCBpcyBkZWZpbmVkIGluIFNl Y3Rpb24gNSBvZiBbUkZDNzM0OF0uICBUaGUgT3V0ZXIgSVAvVURQPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgcGFja2V0IGZvcm1hdCBpcyBkZWZpbmVkIGluIFNlY3Rpb24gNSBv ZiBbUkZDNzM0OF0uICBUaGUgT3V0ZXIgSVAvVURQPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBhbmQgVlhMQU4gaGVhZGVycyBNVVNUIGJlIGVuY29kZWQgYnkgdGhlIHNlbmRlciBhcyBk ZWZpbmVkIGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYW5kIFZYTEFOIGhl YWRlcnMgTVVTVCBiZSBlbmNvZGVkIGJ5IHRoZSBzZW5kZXIgYXMgZGVmaW5lZCBpbjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW1JGQzczNDhdLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIFtSRkM3MzQ4XS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICAwICAgICAgICAgICAgICAgICAgIDEgICAgICAgICAgICAgICAgICAgMiAgICAgICAgICAg ICAgICAgICAzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAwICAgICAgICAg ICAgICAgICAgIDEgICAgICAgICAgICAgICAgICAgMiAgICAgICAgICAgICAgICAgICAzPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0icGFydC02IiBj bGFzcz0iY2hhbmdlIj48dGQ+PC90ZD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwv c21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYub3JnL3JmY2RpZmYvcmZjZGlmZi5weWh0 I3BhcnQtNiI+PGVtPiBwYWdlIDYsIGxpbmUgNDA8c3BhbiBjbGFzcz0iaGlkZSI+IMK2PC9zcGFu PjwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0 PC9zbWFsbD48YSBocmVmPSJodHRwczovL3d3dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNkaWZmLnB5 aHQjcGFydC02Ij48ZW0+IHBhZ2UgNywgbGluZSA0MDxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3Nw YW4+PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHw8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICArLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKzwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICB8PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICAgfiAgICAgICAgICAgICAgICAgICAgICAgICBJbm5lciBVRFAgSGVhZGVyICAgICAgICAgICAg ICAgICAgICAgIH48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgfiAgICAgICAg ICAgICAgICAgICAgICAgICBJbm5lciBVRFAgSGVhZGVyICAgICAgICAgICAgICAgICAgICAgIH48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICB8ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgfCAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHw8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICB+ICAgICAgICAgICAgICAgICAgICAgICBCRkQgQ29udHJvbCBQYWNrZXQgICAgICAgICAg ICAgICAgICAgICB+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgIH4gICAgICAg ICAgICAgICAgICAgICAgIEJGRCBDb250cm9sIFBhY2tldCAgICAgICAgICAgICAgICAgICAgIH48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICB8ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDEy Ij48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9ImRl bGV0ZSI+ICAgIEZDUyAgIDwvc3Bhbj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgIHw8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgIHwgICAgICAgICAgICAgICAgICAgICAg ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5PdXRlciAgRkNTPC9zcGFuPiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgfDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgIEZpZ3VyZSAyOiBWWExBTiBFbmNhcHN1bGF0 aW9uIG9mIEJGRCBDb250cm9sIFBhY2tldDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICAgICAgIEZpZ3VyZSAyOiBWWExBTiBFbmNhcHN1bGF0aW9uIG9mIEJGRCBDb250cm9s IFBhY2tldDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUgQkZEIHBhY2tl dCBNVVNUIGJlIGNhcnJpZWQgaW5zaWRlIHRoZSBpbm5lciBFdGhlcm5ldCBmcmFtZSBvZiB0aGU8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgQkZEIHBhY2tldCBNVVNUIGJl IGNhcnJpZWQgaW5zaWRlIHRoZSBpbm5lciBFdGhlcm5ldCBmcmFtZSBvZiB0aGU8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFZYTEFOIHBhY2tldC4gIFRoZSBjaG9pY2Ugb2YgRGVzdGlu YXRpb24gTUFDIGFuZCBEZXN0aW5hdGlvbiBJUDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIFZYTEFOIHBhY2tldC4gIFRoZSBjaG9pY2Ugb2YgRGVzdGluYXRpb24gTUFDIGFuZCBE ZXN0aW5hdGlvbiBJUDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYWRkcmVzc2VzIGZv ciB0aGUgaW5uZXIgRXRoZXJuZXQgZnJhbWUgTVVTVCBlbnN1cmUgdGhhdCB0aGUgQkZEPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYWRkcmVzc2VzIGZvciB0aGUgaW5uZXIgRXRo ZXJuZXQgZnJhbWUgTVVTVCBlbnN1cmUgdGhhdCB0aGUgQkZEPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBDb250cm9sIHBhY2tldCBpcyBub3QgZm9yd2FyZGVkIHRvIGEgdGVuYW50IGJ1 dCBpcyBwcm9jZXNzZWQgbG9jYWxseTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IENvbnRyb2wgcGFja2V0IGlzIG5vdCBmb3J3YXJkZWQgdG8gYSB0ZW5hbnQgYnV0IGlzIHByb2Nl c3NlZCBsb2NhbGx5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhdCB0aGUgcmVtb3Rl IFZURVAuICBUaGUgaW5uZXIgRXRoZXJuZXQgZnJhbWUgY2FycnlpbmcgdGhlIEJGRDwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGF0IHRoZSByZW1vdGUgVlRFUC4gIFRoZSBpbm5l ciBFdGhlcm5ldCBmcmFtZSBjYXJyeWluZyB0aGUgQkZEPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBDb250cm9sIHBhY2tldC0gaGFzIHRoZSBmb2xsb3dpbmcgZm9ybWF0OjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIENvbnRyb2wgcGFja2V0LSBoYXMgdGhlIGZvbGxv d2luZyBmb3JtYXQ6PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIEV0aGVy bmV0IEhlYWRlcjo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBFdGhlcm5l dCBIZWFkZXI6PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIERlc3Rp bmF0aW9uIE1BQzogVGhpcyBNVVNUIE5PVCBiZSBvZiBvbmUgb2YgdGVuYW50J3MgTUFDPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgRGVzdGluYXRpb24gTUFDOiBUaGlz IE1VU1QgTk9UIGJlIG9mIG9uZSBvZiB0ZW5hbnQncyBNQUM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgICAgIGFkZHJlc3Nlcy4gIFRoZSBkZXN0aW5hdGlvbiBNQUMgYWRkcmVzcyBN QVkgYmUgdGhlIGFkZHJlc3M8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAg ICBhZGRyZXNzZXMuICBUaGUgZGVzdGluYXRpb24gTUFDIGFkZHJlc3MgTUFZIGJlIHRoZSBhZGRy ZXNzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYw MDEzIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPiAgICAgICAgIGFzc29jaWF0ZWQgd2l0aCB0aGUgZGVzdGluYXRpb24g VlRFUC4gIFRoZSBNQUMgYWRkcmVzcyBNQVkgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+YmU8L3NwYW4+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgIGFzc29jaWF0ZWQgd2l0 aCB0aGUgZGVzdGluYXRpb24gVlRFUC4gIFRoZSBNQUMgYWRkcmVzcyBNQVkgPHNwYW4gY2xhc3M9 Imluc2VydCI+aXM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAg IGNvbmZpZ3VyZWQsIG9yIDxzcGFuIGNsYXNzPSJkZWxldGUiPml0IE1BWSBiZTwvc3Bhbj4gbGVh cm5lZCB2aWEgYSBjb250cm9sIHBsYW5lIHByb3RvY29sLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICAgICAgICBlaXRoZXI8L3NwYW4+IGNv bmZpZ3VyZWQsIG9yIGxlYXJuZWQgdmlhIGEgY29udHJvbCBwbGFuZSBwcm90b2NvbC48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIFRoZSBkZXRhaWxzIG9mIGhvdyB0aGUgTUFD IGFkZHJlc3MgaXMgb2J0YWluZWQgYXJlIG91dHNpZGUgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgICAgICAgVGhlIGRldGFpbHMgb2YgaG93IHRoZSBNQUMgYWRkcmVzcyBp cyBvYnRhaW5lZCBhcmUgb3V0c2lkZSB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgICAgIHNjb3BlIG9mIHRoaXMgZG9jdW1lbnQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgICAgc2NvcGUgb2YgdGhpcyBkb2N1bWVudC48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgU291cmNlIE1BQzogTUFDIGFkZHJlc3MgYXNzb2NpYXRl ZCB3aXRoIHRoZSBvcmlnaW5hdGluZyBWVEVQPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgICAgICAgU291cmNlIE1BQzogTUFDIGFkZHJlc3MgYXNzb2NpYXRlZCB3aXRoIHRoZSBv cmlnaW5hdGluZyBWVEVQPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIElQ IGhlYWRlcjo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBJUCBoZWFkZXI6 PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgIERlc3RpbmF0aW9uIElQ OiBJUCBhZGRyZXNzIE1VU1QgTk9UIGJlIG9mIG9uZSBvZiB0ZW5hbnQncyBJUDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgIERlc3RpbmF0aW9uIElQOiBJUCBhZGRyZXNz IE1VU1QgTk9UIGJlIG9mIG9uZSBvZiB0ZW5hbnQncyBJUDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgICAgICAgYWRkcmVzc2VzLiAgVGhlIElQIGFkZHJlc3MgU0hPVUxEIGJlIHNlbGVj dGVkIGZyb20gdGhlIHJhbmdlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg ICAgYWRkcmVzc2VzLiAgVGhlIElQIGFkZHJlc3MgU0hPVUxEIGJlIHNlbGVjdGVkIGZyb20gdGhl IHJhbmdlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRp ZmYwMDE0Ij48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgICAgIDEyNy84IGZvciBJUHY0LCBmb3IgSVB2NiAtIGZy b20gdGhlIHJhbmdlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgIDEy Ny84IGZvciBJUHY0LCBmb3IgSVB2NiAtIGZyb20gdGhlIHJhbmdlIDxzcGFuIGNsYXNzPSJpbnNl cnQiPjo6ZmZmZjoxMjcuMC4wLjAvMTA0Ljwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgICAgICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+MDowOjA6MDowOkZGRkY6N0YwMDow LzEwNC48L3NwYW4+ICBBbHRlcm5hdGl2ZWx5LCB0aGUgZGVzdGluYXRpb24gSVA8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgICAgQWx0ZXJuYXRpdmVseSwgdGhlIGRlc3Rp bmF0aW9uIElQIGFkZHJlc3MgTUFZIGJlIHNldCB0byBWVEVQJ3M8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgICAgICAgYWRkcmVzcyBNQVkgYmUgc2V0IHRvIFZURVAncyBJUCBhZGRy ZXNzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICBJUCBhZGRyZXNz LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICBTb3VyY2UgSVA6IElQ IGFkZHJlc3Mgb2YgdGhlIG9yaWdpbmF0aW5nIFZURVAuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgICAgICAgU291cmNlIElQOiBJUCBhZGRyZXNzIG9mIHRoZSBvcmlnaW5hdGlu ZyBWVEVQLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICBUVEwgb3Ig SG9wIExpbWl0OiBNVVNUIGJlIHNldCB0byAxIHRvIGVuc3VyZSB0aGF0IHRoZSBCRkQ8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBUVEwgb3IgSG9wIExpbWl0OiBNVVNU IGJlIHNldCB0byAxIHRvIGVuc3VyZSB0aGF0IHRoZSBCRkQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgICAgIHBhY2tldCBpcyBub3Qgcm91dGVkIHdpdGhpbiB0aGUgTGF5ZXIgMyB1 bmRlcmxheSBuZXR3b3JrLiAgVGhpczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg ICAgICAgIHBhY2tldCBpcyBub3Qgcm91dGVkIHdpdGhpbiB0aGUgTGF5ZXIgMyB1bmRlcmxheSBu ZXR3b3JrLiAgVGhpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgYWRkcmVz c2VzIHRoZSBzY2VuYXJpbyB3aGVuIHRoZSBpbm5lciBJUCBkZXN0aW5hdGlvbiBhZGRyZXNzIGlz PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgYWRkcmVzc2VzIHRoZSBz Y2VuYXJpbyB3aGVuIHRoZSBpbm5lciBJUCBkZXN0aW5hdGlvbiBhZGRyZXNzIGlzPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICBvZiBWWExBTiBnYXRld2F5IGFuZCB0aGVyZSBp cyBhIHJvdXRlciBpbiB1bmRlcmxheSB3aGljaDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgICAgICAgIG9mIFZYTEFOIGdhdGV3YXkgYW5kIHRoZXJlIGlzIGEgcm91dGVyIGluIHVu ZGVybGF5IHdoaWNoPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICByZW1vdmVz IHRoZSBWWExBTiBoZWFkZXIsIHRoZW4gaXQgaXMgcG9zc2libGUgdG8gcm91dGUgdGhlPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgcmVtb3ZlcyB0aGUgVlhMQU4gaGVh ZGVyLCB0aGVuIGl0IGlzIHBvc3NpYmxlIHRvIHJvdXRlIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgICAgcGFja2V0IGFzIFZYTEFOICBnYXRld2F5IGFkZHJlc3MgaXMgcm91 dGFibGUgYWRkcmVzcy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICBw YWNrZXQgYXMgVlhMQU4gIGdhdGV3YXkgYWRkcmVzcyBpcyByb3V0YWJsZSBhZGRyZXNzLjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0icGFy dC03IiBjbGFzcz0iY2hhbmdlIj48dGQ+PC90ZD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5n ZSBhdDwvc21hbGw+PGEgaHJlZj0iaHR0cHM6Ly93d3c2LmlldGYub3JnL3JmY2RpZmYvcmZjZGlm Zi5weWh0I3BhcnQtNyI+PGVtPiBwYWdlIDcsIGxpbmUgNDI8c3BhbiBjbGFzcz0iaGlkZSI+IMK2 PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hh bmdlIGF0PC9zbWFsbD48YSBocmVmPSJodHRwczovL3d3dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNk aWZmLnB5aHQjcGFydC03Ij48ZW0+IHBhZ2UgOCwgbGluZSA0MjxzcGFuIGNsYXNzPSJoaWRlIj4g wrY8L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBlbmNvZGVkIGFzIHNwZWNpZmll ZCBpbiBbUkZDNTg4MV0uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgZW5j b2RlZCBhcyBzcGVjaWZpZWQgaW4gW1JGQzU4ODFdLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij41LiAgUmVjZXB0aW9uIG9mIEJGRCBQYWNrZXQgZnJvbSBWWExBTiBUdW5uZWw8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij41LiAgUmVjZXB0aW9uIG9mIEJGRCBQYWNrZXQg ZnJvbSBWWExBTiBUdW5uZWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgT25j ZSBhIHBhY2tldCBpcyByZWNlaXZlZCwgVlRFUCBNVVNUIHZhbGlkYXRlIHRoZSBwYWNrZXQuICBJ ZiB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBPbmNlIGEgcGFja2V0IGlz IHJlY2VpdmVkLCBWVEVQIE1VU1QgdmFsaWRhdGUgdGhlIHBhY2tldC4gIElmIHRoZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRGVzdGluYXRpb24gTUFDIG9mIHRoZSBpbm5lciBFdGhl cm5ldCBmcmFtZSBtYXRjaGVzIG9uZSBvZiB0aGUgTUFDPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgRGVzdGluYXRpb24gTUFDIG9mIHRoZSBpbm5lciBFdGhlcm5ldCBmcmFtZSBt YXRjaGVzIG9uZSBvZiB0aGUgTUFDPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhZGRy ZXNzZXMgYXNzb2NpYXRlZCB3aXRoIHRoZSBWVEVQIHRoZSBwYWNrZXQgTVVTVCBiZSBwcm9jZXNz ZWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhZGRyZXNzZXMgYXNzb2NpYXRl ZCB3aXRoIHRoZSBWVEVQIHRoZSBwYWNrZXQgTVVTVCBiZSBwcm9jZXNzZWQ8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIGZ1cnRoZXIuICBJZiB0aGUgRGVzdGluYXRpb24gTUFDIG9mIHRo ZSBpbm5lciBFdGhlcm5ldCBmcmFtZSBkb2Vzbid0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgZnVydGhlci4gIElmIHRoZSBEZXN0aW5hdGlvbiBNQUMgb2YgdGhlIGlubmVyIEV0 aGVybmV0IGZyYW1lIGRvZXNuJ3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG1hdGNo IGFueSBvZiBWVEVQJ3MgTUFDIGFkZHJlc3NlcywgdGhlbiB0aGUgcHJvY2Vzc2luZyBvZiB0aGU8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBtYXRjaCBhbnkgb2YgVlRFUCdzIE1B QyBhZGRyZXNzZXMsIHRoZW4gdGhlIHByb2Nlc3Npbmcgb2YgdGhlPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICByZWNlaXZlZCBWWExBTiBwYWNrZXQgTVVTVCBmb2xsb3cgdGhlIHByb2Nl ZHVyZXMgZGVzY3JpYmVkIGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcmVj ZWl2ZWQgVlhMQU4gcGFja2V0IE1VU1QgZm9sbG93IHRoZSBwcm9jZWR1cmVzIGRlc2NyaWJlZCBp bjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAx NSI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICBTZWN0aW9uIDQuMSBbUkZDNzM0OF0uICBJZiB0aGUgQkZEIHNlc3Np b24gaXMgdXNpbmcgdGhlIE1hbmFnZW1lbnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+ICAgU2VjdGlvbiA0LjEgPHNwYW4gY2xhc3M9Imluc2VydCI+b2YgPC9zcGFuPltSRkM3MzQ4 XS4gIElmIHRoZSBCRkQgc2Vzc2lvbiBpcyB1c2luZyB0aGUgTWFuYWdlbWVudDwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgVk5JIChTZWN0aW9uIDYpLCBCRkQgQ29udHJvbCBwYWNrZXRz IHdpdGggdW5rbm93biBNQUMgYWRkcmVzcyBNVVNUPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgVk5JIChTZWN0aW9uIDYpLCBCRkQgQ29udHJvbCBwYWNrZXRzIHdpdGggdW5rbm93 biBNQUMgYWRkcmVzcyBNVVNUPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBOT1QgYmUg Zm9yd2FyZGVkIHRvIFZNcy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBOT1Qg YmUgZm9yd2FyZGVkIHRvIFZNcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyIGlkPSJkaWZmMDAxNiI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBUaGUgVURQIGRlc3RpbmF0 aW9uIHBvcnQgYW5kIHRoZSBUVEwgb2YgdGhlIGlubmVyIElQIHBhY2tldCBNVVNUIGJlPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIFRoZSBVRFAgZGVzdGluYXRpb24gcG9ydCBh bmQgdGhlIFRUTCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5vciBIb3AgTGltaXQ8L3NwYW4+IG9mIHRo ZSBpbm5lciBJUDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB2YWxpZGF0ZWQgdG8g ZGV0ZXJtaW5lIGlmIHRoZSByZWNlaXZlZCBwYWNrZXQgY2FuIGJlIHByb2Nlc3NlZCBieTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBwYWNrZXQgTVVTVCBiZSB2YWxpZGF0ZWQg dG8gZGV0ZXJtaW5lIGlmIHRoZSByZWNlaXZlZCBwYWNrZXQgY2FuIGJlPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPiAgIEJGRC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ ICAgcHJvY2Vzc2VkIGJ5IEJGRC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NS4x LiAgRGVtdWx0aXBsZXhpbmcgb2YgdGhlIEJGRCBQYWNrZXQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij41LjEuICBEZW11bHRpcGxleGluZyBvZiB0aGUgQkZEIFBhY2tldDwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEZW11bHRpcGxleGluZyBvZiBJUCBCRkQgcGFj a2V0IGhhcyBiZWVuIGRlZmluZWQgaW4gU2VjdGlvbiAzIG9mPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgRGVtdWx0aXBsZXhpbmcgb2YgSVAgQkZEIHBhY2tldCBoYXMgYmVlbiBk ZWZpbmVkIGluIFNlY3Rpb24gMyBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW1JG QzU4ODFdLiAgU2luY2UgbXVsdGlwbGUgQkZEIHNlc3Npb25zIG1heSBiZSBydW5uaW5nIGJldHdl ZW4gdHdvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzU4ODFdLiAgU2lu Y2UgbXVsdGlwbGUgQkZEIHNlc3Npb25zIG1heSBiZSBydW5uaW5nIGJldHdlZW4gdHdvPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBWVEVQcywgdGhlcmUgbmVlZHMgdG8gYmUgYSBtZWNo YW5pc20gZm9yIGRlbXVsdGlwbGV4aW5nIHJlY2VpdmVkIEJGRDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIFZURVBzLCB0aGVyZSBuZWVkcyB0byBiZSBhIG1lY2hhbmlzbSBmb3Ig ZGVtdWx0aXBsZXhpbmcgcmVjZWl2ZWQgQkZEPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBwYWNrZXRzIHRvIHRoZSBwcm9wZXIgc2Vzc2lvbi4gIEZvciBkZW11bHRpcGxleGluZyBwYWNr ZXRzIHdpdGggWW91cjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHBhY2tldHMg dG8gdGhlIHByb3BlciBzZXNzaW9uLiAgRm9yIGRlbXVsdGlwbGV4aW5nIHBhY2tldHMgd2l0aCBZ b3VyPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEaXNjcmltaW5hdG9yIGVxdWFsIHRv IDAsIGEgQkZEIHNlc3Npb24gTVVTVCBiZSBpZGVudGlmaWVkIHVzaW5nIHRoZTwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIERpc2NyaW1pbmF0b3IgZXF1YWwgdG8gMCwgYSBCRkQg c2Vzc2lvbiBNVVNUIGJlIGlkZW50aWZpZWQgdXNpbmcgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBsb2dpY2FsIGxpbmsgb3ZlciB3aGljaCB0aGUgQkZEIENvbnRyb2wgcGFja2V0 IGlzIHJlY2VpdmVkLiAgSW4gdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg bG9naWNhbCBsaW5rIG92ZXIgd2hpY2ggdGhlIEJGRCBDb250cm9sIHBhY2tldCBpcyByZWNlaXZl ZC4gIEluIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY2FzZSBvZiBWWExBTiwg dGhlIFZOSSBudW1iZXIgaWRlbnRpZmllcyB0aGF0IGxvZ2ljYWwgbGluay4gIElmIEJGRDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNhc2Ugb2YgVlhMQU4sIHRoZSBWTkkgbnVt YmVyIGlkZW50aWZpZXMgdGhhdCBsb2dpY2FsIGxpbmsuICBJZiBCRkQ8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTgiIGNsYXNzPSJjaGFu Z2UiPjx0ZD48L3RkPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBo cmVmPSJodHRwczovL3d3dzYuaWV0Zi5vcmcvcmZjZGlmZi9yZmNkaWZmLnB5aHQjcGFydC04Ij48 ZW0+IHBhZ2UgOCwgbGluZSA0MjxzcGFuIGNsYXNzPSJoaWRlIj4gwrY8L3NwYW4+PC9lbT48L2E+ PC90aD48dGg+IDwvdGg+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxh IGhyZWY9Imh0dHBzOi8vd3d3Ni5pZXRmLm9yZy9yZmNkaWZmL3JmY2RpZmYucHlodCNwYXJ0LTgi PjxlbT4gcGFnZSA5LCBsaW5lIDQyPHNwYW4gY2xhc3M9ImhpZGUiPiDCtjwvc3Bhbj48L2VtPjwv YT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgU3VwcG9ydCBmb3IgZWNobyBCRkQgaXMgb3V0c2lkZSB0 aGUgc2NvcGUgb2YgdGhpcyBkb2N1bWVudC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBTdXBwb3J0IGZvciBlY2hvIEJGRCBpcyBvdXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzIGRv Y3VtZW50LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij44LiAgSUFOQSBDb25zaWRl cmF0aW9uczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjguICBJQU5BIENvbnNpZGVy YXRpb25zPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoaXMgc3BlY2lmaWNh dGlvbiBoYXMgbm8gSUFOQSBhY3Rpb24gcmVxdWVzdGVkLiAgVGhpcyBzZWN0aW9uIG1heSBiZTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoaXMgc3BlY2lmaWNhdGlvbiBoYXMg bm8gSUFOQSBhY3Rpb24gcmVxdWVzdGVkLiAgVGhpcyBzZWN0aW9uIG1heSBiZTwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgZGVsZXRlZCBiZWZvcmUgdGhlIHB1YmxpY2F0aW9uLjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRlbGV0ZWQgYmVmb3JlIHRoZSBwdWJsaWNh dGlvbi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+OS4gIFNlY3VyaXR5IENvbnNp ZGVyYXRpb25zPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+OS4gIFNlY3VyaXR5IENv bnNpZGVyYXRpb25zPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0ciBpZD0iZGlmZjAwMTciPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgVGhlIGRvY3VtZW50IHJlcXVpcmVzIHNl dHRpbmcgdGhlIGlubmVyIElQIFRUTCB0byAxLCB3aGljaCBjb3VsZCBiZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICBUaGUgZG9jdW1lbnQgcmVxdWlyZXMgc2V0dGluZyB0aGUg aW5uZXIgSVAgVFRMIDxzcGFuIGNsYXNzPSJpbnNlcnQiPm9yIEhvcCBMaW1pdDwvc3Bhbj4gdG8g MSw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgdXNlZCBhcyBhIEREb1MgYXR0YWNr IHZlY3Rvci4gIFRodXMgdGhlIGltcGxlbWVudGF0aW9uIE1VU1QgaGF2ZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICB3aGljaCBjb3VsZCBiZSB1c2VkIGFzIGEgRERvUyBhdHRh Y2sgdmVjdG9yLiAgVGh1cyB0aGUgaW1wbGVtZW50YXRpb248L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgdGhyb3R0bGluZyBpbiBwbGFjZSB0byBjb250cm9sIHRoZSByYXRlIG9mIEJG RCBDb250cm9sIHBhY2tldHMgc2VudDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICBNVVNUIGhhdmUgdGhyb3R0bGluZyBpbiBwbGFjZSB0byBjb250cm9sIHRoZSByYXRlIG9mIEJG RCBDb250cm9sPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHRvIHRoZSBjb250cm9s IHBsYW5lLiAgT24gdGhlIG90aGVyIGhhbmQsIDxzcGFuIGNsYXNzPSJkZWxldGUiPm92ZXItYWdn cmVzc2l2ZTwvc3Bhbj4gdGhyb3R0bGluZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij4gICBwYWNrZXRzIHNlbnQgdG8gdGhlIGNvbnRyb2wgcGxhbmUuICBPbiB0aGUgb3RoZXIgaGFu ZCwgPHNwYW4gY2xhc3M9Imluc2VydCI+b3Zlci08L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPiAgIG9mIEJGRCBDb250cm9sIHBhY2tldHMgbWF5IGJlY29tZSB0aGUgY2F1c2Ug b2YgdGhlIGluYWJpbGl0eSB0byBmb3JtPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGFnZ3Jlc3NpdmU8L3NwYW4+IHRocm90dGxpbmcgb2Yg QkZEIENvbnRyb2wgcGFja2V0cyBtYXkgYmVjb21lIHRoZSBjYXVzZSBvZjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICBhbmQgbWFpbnRhaW4gQkZEIHNlc3Npb24gYXQgc2NhbGUuICBI ZW5jZSwgdGhyb3R0bGluZyBvZiBCRkQgQ29udHJvbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj4gICB0aGUgaW5hYmlsaXR5IHRvIGZvcm0gYW5kIG1haW50YWluIEJGRCBzZXNzaW9u IGF0IHNjYWxlLiAgSGVuY2UsPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHBhY2tl dHMgU0hPVUxEIGJlIGFkanVzdGVkIHRvIHBlcm1pdCBCRkQgdG8gd29yayBhY2NvcmRpbmcgdG8g aXRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHRocm90dGxpbmcgb2YgQkZE IENvbnRyb2wgcGFja2V0cyBTSE9VTEQgYmUgYWRqdXN0ZWQgdG8gcGVybWl0IEJGRCB0bzwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBwcm9jZWR1cmVzLjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICB3b3JrIGFjY29yZGluZyB0byBpdHMgcHJvY2VkdXJlcy48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCByZWNvbW1lbmRz IHVzaW5nIGFuIGFkZHJlc3MgZnJvbSB0aGUgSW50ZXJuYWwgaG9zdDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIFRoaXMgZG9jdW1lbnQgcmVjb21tZW5kcyB1c2luZyBhbiBhZGRy ZXNzIGZyb20gdGhlIEludGVybmFsIGhvc3Q8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMTgiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgbG9vcGJhY2sgYWRkcmVz c2VzIDxzcGFuIGNsYXNzPSJkZWxldGUiPigxMjcvODwvc3Bhbj4gcmFuZ2UgZm9yIElQdjQgPHNw YW4gY2xhc3M9ImRlbGV0ZSI+YW5kPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICBsb29wYmFjayBhZGRyZXNzZXMgPHNwYW4gY2xhc3M9Imluc2VydCI+MTI3Lzg8L3Nw YW4+IHJhbmdlIGZvciBJUHY0IDxzcGFuIGNsYXNzPSJpbnNlcnQiPm9yIGFuIElQNC1tYXBwZWQg SVB2NDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRl bGV0ZSI+ICAgMDowOjA6MDowOkZGRkY6N0YwMDowLzEwNDwvc3Bhbj4gcmFuZ2UgZm9yIDxzcGFu IGNsYXNzPSJkZWxldGUiPklQdjYpPC9zcGFuPiBhcyB0aGUgZGVzdGluYXRpb24gSVA8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgbG9vcGJh Y2sgYWRkcmVzcyBmcm9tIDo6ZmZmZjoxMjcuMC4wLjAvMTA0PC9zcGFuPiByYW5nZSBmb3IgPHNw YW4gY2xhc3M9Imluc2VydCI+SVB2Njwvc3Bhbj4gYXMgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPiAgIGFkZHJlc3MgaW4gdGhlIGlubmVyIElQIGhlYWRlci4gIFVzaW5nIHN1Y2gg YWRkcmVzcyBwcmV2ZW50cyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg ZGVzdGluYXRpb24gSVAgYWRkcmVzcyBpbiB0aGUgaW5uZXIgSVAgaGVhZGVyLiAgVXNpbmcgc3Vj aCA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5hbjwvc3Bhbj4gYWRkcmVzczwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICBmb3J3YXJkaW5nIG9mIHRoZSBlbmNhcHN1bGF0ZWQgQkZEIGNvbnRy b2wgbWVzc2FnZSBieSBhIHRyYW5zaWVudDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2Nr Ij4gICBwcmV2ZW50cyB0aGUgZm9yd2FyZGluZyBvZiB0aGUgZW5jYXBzdWxhdGVkIEJGRCBjb250 cm9sIG1lc3NhZ2UgYnkgYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBub2RlIGlu IGNhc2UgdGhlIFZYTEFOIHR1bm5lbCBpcyBicm9rZW4gYXMgYWNjb3JkaW5nIHRvIFtSRkMxODEy XTo8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdHJhbnNpZW50IG5vZGUgaW4g Y2FzZSB0aGUgVlhMQU4gdHVubmVsIGlzIGJyb2tlbiBhcyBhY2NvcmRpbmcgdG88L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IFtSRkMxODEyXTo8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgQSByb3V0 ZXIgU0hPVUxEIE5PVCBmb3J3YXJkLCBleGNlcHQgb3ZlciBhIGxvb3BiYWNrIGludGVyZmFjZSwg YW55PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgQSByb3V0ZXIgU0hPVUxE IE5PVCBmb3J3YXJkLCBleGNlcHQgb3ZlciBhIGxvb3BiYWNrIGludGVyZmFjZSwgYW55PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBwYWNrZXQgdGhhdCBoYXMgYSBkZXN0aW5hdGlv biBhZGRyZXNzIG9uIG5ldHdvcmsgMTI3LiAgQSByb3V0ZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICAgICBwYWNrZXQgdGhhdCBoYXMgYSBkZXN0aW5hdGlvbiBhZGRyZXNzIG9u IG5ldHdvcmsgMTI3LiAgQSByb3V0ZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAg IE1BWSBoYXZlIGEgc3dpdGNoIHRoYXQgYWxsb3dzIHRoZSBuZXR3b3JrIG1hbmFnZXIgdG8gZGlz YWJsZSB0aGVzZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIE1BWSBoYXZl IGEgc3dpdGNoIHRoYXQgYWxsb3dzIHRoZSBuZXR3b3JrIG1hbmFnZXIgdG8gZGlzYWJsZSB0aGVz ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgY2hlY2tzLiAgSWYgc3VjaCBhIHN3 aXRjaCBpcyBwcm92aWRlZCwgaXQgTVVTVCBkZWZhdWx0IHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgICAgY2hlY2tzLiAgSWYgc3VjaCBhIHN3aXRjaCBpcyBwcm92aWRlZCwg aXQgTVVTVCBkZWZhdWx0IHRvPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBwZXJm b3JtaW5nIHRoZSBjaGVja3MuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg cGVyZm9ybWluZyB0aGUgY2hlY2tzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBJZiB0aGUgaW1wbGVtZW50YXRpb24gc3VwcG9ydHMgZXN0YWJsaXNoaW5nIG11bHRpcGxlIEJG RCBzZXNzaW9uczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIElmIHRoZSBpbXBs ZW1lbnRhdGlvbiBzdXBwb3J0cyBlc3RhYmxpc2hpbmcgbXVsdGlwbGUgQkZEIHNlc3Npb25zPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBiZXR3ZWVuIHRoZSBzYW1lIHBhaXIgb2YgVlRF UHMsIHRoZXJlIFNIT1VMRCBiZSBhIG1lY2hhbmlzbSB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIGJldHdlZW4gdGhlIHNhbWUgcGFpciBvZiBWVEVQcywgdGhlcmUgU0hPVUxE IGJlIGEgbWVjaGFuaXNtIHRvPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjb250cm9s IHRoZSBtYXhpbXVtIG51bWJlciBvZiBzdWNoIHNlc3Npb25zIHRoYXQgY2FuIGJlIGFjdGl2ZSBh dCB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjb250cm9sIHRoZSBtYXhp bXVtIG51bWJlciBvZiBzdWNoIHNlc3Npb25zIHRoYXQgY2FuIGJlIGFjdGl2ZSBhdCB0aGU8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHNhbWUgdGltZS48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBzYW1lIHRpbWUuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMTkiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgT3RoZXIgdGhh biBpbm5lciBJUCBUVEwgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+c2V0PC9zcGFuPiB0byAxIGFuZCBs aW1pdCB0aGUgbnVtYmVyIG9mIEJGRCBzZXNzaW9uczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj4gICBPdGhlciB0aGFuIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnNldHRpbmcgdGhlIHZh bHVlIG9mPC9zcGFuPiBpbm5lciBJUCBUVEwgPHNwYW4gY2xhc3M9Imluc2VydCI+b3IgSG9wIExp bWl0PC9zcGFuPiB0byAxIGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBiZXR3 ZWVuIHRoZSBzYW1lIHBhaXIgb2YgVlRFUHMsIHRoaXMgc3BlY2lmaWNhdGlvbiBkb2VzIG5vdCBy YWlzZSBhbnk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbGltaXQgdGhlIG51 bWJlciBvZiBCRkQgc2Vzc2lvbnMgYmV0d2VlbiB0aGUgc2FtZSBwYWlyIG9mIFZURVBzLCB0aGlz PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGFkZGl0aW9uYWwgc2VjdXJpdHkgaXNz dWVzIGJleW9uZCB0aG9zZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5vZiB0aGUgc3BlY2lmaWNhdGlv bnM8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHNwZWNpZmljYXRp b24gZG9lcyBub3QgcmFpc2UgYW55IGFkZGl0aW9uYWwgc2VjdXJpdHkgaXNzdWVzIGJleW9uZDwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICByZWZl cnJlZCB0bzwvc3Bhbj4gaW4gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+dGhlIGxpc3Qgb2Ygbm9ybWF0 aXZlIHJlZmVyZW5jZXMuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICB0aG9zZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5kaXNjdXNzZWQ8L3NwYW4+IGluIDxzcGFuIGNs YXNzPSJpbnNlcnQiPltSRkM1ODgwXSwgW1JGQzU4ODFdLCBhbmQgW1JGQzczNDhdLjwvc3Bhbj48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+MTAuICBDb250cmlidXRvcnM8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xMC4gIENvbnRyaWJ1dG9yczwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBSZXNoYWQgUmFobWFuPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgUmVzaGFkIFJhaG1hbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgcnJhaG1hbkBjaXNjby5jb208L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBy cmFobWFuQGNpc2NvLmNvbTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQ2lzY288L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBDaXNjbzwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4xMS4gIEFja25vd2xlZGdtZW50czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjExLiAgQWNrbm93bGVkZ21lbnRzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIEF1dGhvcnMgd291bGQgbGlrZSB0byB0aGFuayBKZWZmIEhhYXMgb2YgSnVuaXBl ciBOZXR3b3JrcyBmb3IgaGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQXV0 aG9ycyB3b3VsZCBsaWtlIHRvIHRoYW5rIEplZmYgSGFhcyBvZiBKdW5pcGVyIE5ldHdvcmtzIGZv ciBoaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CgogICAgIDx0cj48dGQ+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkPjwvdGQ+PC90cj4KICAgICA8dHIgaWQ9ImVuZCIgYmdjb2xvcj0iZ3JheSI+PHRoIGNvbHNw YW49IjUiIGFsaWduPSJjZW50ZXIiPiZuYnNwO0VuZCBvZiBjaGFuZ2VzLiAxOSBjaGFuZ2UgYmxv Y2tzLiZuYnNwOzwvdGg+PC90cj4KICAgICA8dHIgY2xhc3M9InN0YXRzIj48dGQ+PC90ZD48dGg+ PGk+NTkgbGluZXMgY2hhbmdlZCBvciBkZWxldGVkPC9pPjwvdGg+PHRoPjxpPiA8L2k+PC90aD48 dGg+PGk+NjMgbGluZXMgY2hhbmdlZCBvciBhZGRlZDwvaT48L3RoPjx0ZD48L3RkPjwvdHI+CiAg ICAgPHRyPjx0ZCBjb2xzcGFuPSI1IiBhbGlnbj0iY2VudGVyIiBjbGFzcz0ic21hbGwiPjxicj5U aGlzIGh0bWwgZGlmZiB3YXMgcHJvZHVjZWQgYnkgcmZjZGlmZiAxLjQ3LiBUaGUgbGF0ZXN0IHZl cnNpb24gaXMgYXZhaWxhYmxlIGZyb20gPGEgaHJlZj0iaHR0cDovL3d3dy50b29scy5pZXRmLm9y Zy90b29scy9yZmNkaWZmLyI+aHR0cDovL3Rvb2xzLmlldGYub3JnL3Rvb2xzL3JmY2RpZmYvPC9h PiA8L3RkPjwvdHI+CiAgIDwvdGJvZHk+PC90YWJsZT4KICAgCiAgIAo8L2JvZHk+PC9odG1sPg== --0000000000003794bf059a050f53-- From nobody Thu Dec 19 04:07:08 2019 Return-Path: X-Original-To: rtg-bfd@ietf.org Delivered-To: rtg-bfd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B685E1200F7; Thu, 19 Dec 2019 04:07:01 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Suresh Krishnan via Datatracker To: "The IESG" Cc: draft-ietf-bfd-vxlan@ietf.org, Jeffrey Haas , bfd-chairs@ietf.org, jhaas@pfrc.org, rtg-bfd@ietf.org Subject: Suresh Krishnan's No Objection on draft-ietf-bfd-vxlan-09: (with COMMENT) X-Test-IDTracker: no X-IETF-IDTracker: 6.113.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Suresh Krishnan Message-ID: <157675722173.27396.5387089468901577570.idtracker@ietfa.amsl.com> Date: Thu, 19 Dec 2019 04:07:01 -0800 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Dec 2019 12:07:02 -0000 Suresh Krishnan has entered the following ballot position for draft-ietf-bfd-vxlan-09: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-bfd-vxlan/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Support Eric's DISCUSS on the IPv6 destination address and would like to see this clarified and resolved. From nobody Thu Dec 19 04:48:52 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F320D120121; Thu, 19 Dec 2019 04:48:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.497 X-Spam-Level: X-Spam-Status: No, score=-14.497 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=TNiw0RJ0; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=aZIfIWPf Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W0_0b0tZ3QJN; Thu, 19 Dec 2019 04:48:48 -0800 (PST) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D537112006D; Thu, 19 Dec 2019 04:48:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=13737; q=dns/txt; s=iport; t=1576759727; x=1577969327; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=EaOymXoj19R8XjY950K9gXwW0Zg6DBSOhBBXysqWZnA=; b=TNiw0RJ0Bb2sMQSrsU/fVPrQfiN9m0FlAfErs71NVJSumAWt3/VUSKyH Z43G8jXLiQO0fSZ0q2X+2WaAxGuYqTwOb4EowYaOxlzLCW4y7tdsdw7xE 8Jl3XkGg3DYER4GZ1lWSVyPd/AHIOFJCdUcbvyj8TTjXoG6vK5jj2A6vK E=; IronPort-PHdr: =?us-ascii?q?9a23=3A7GsFFBMmk5QX1z3C42gl6mtXPHoupqn0MwgJ65?= =?us-ascii?q?Eul7NJdOG58o//OFDEu60/l0fHCIPc7f8My/HbtaztQyQh2d6AqzhDFf4ETB?= =?us-ascii?q?oZkYMTlg0kDtSCDBj2Mu/sZC83NM9DT1RiuXq8NBsdFQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0APAQAicPtd/40NJK1kGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYF8gR4vUAVsWCAECyqEBoNGA4pzgl+JXolJhGG?= =?us-ascii?q?CUgNUCQEBAQwBAS0CAQGEQAIXggQkOBMCAw0BAQQBAQECAQUEbYU3DIVeAQE?= =?us-ascii?q?BAQMSER0BASkOAQ8CAQgRAwECAScDAgICHxEUBgMIAgQBDQUigwABgXlNAy4?= =?us-ascii?q?BoVMCgTiIYXWBMoJ+AQEFhScNC4IMCYE2iVCCSRqBQT+BEScggkw+ghuCCEY?= =?us-ascii?q?WgloygiyPfjmFV5g+QwqCNJFyhCYbgkOHeZAVg0eLCopuj2MCBAIEBQIOAQE?= =?us-ascii?q?FgWkigVhwFWUBgkFQGA2NEgwXFYM7ilN0gSiNLoJAAQE?= X-IronPort-AV: E=Sophos;i="5.69,331,1571702400"; d="scan'208,217";a="690587319" Received: from alln-core-8.cisco.com ([173.36.13.141]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 19 Dec 2019 12:48:46 +0000 Received: from XCH-RCD-008.cisco.com (xch-rcd-008.cisco.com [173.37.102.18]) by alln-core-8.cisco.com (8.15.2/8.15.2) with ESMTPS id xBJCmkKr020113 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 19 Dec 2019 12:48:46 GMT Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-RCD-008.cisco.com (173.37.102.18) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 19 Dec 2019 06:48:45 -0600 Received: from xhs-rtp-001.cisco.com (64.101.210.228) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 19 Dec 2019 06:48:45 -0600 Received: from NAM11-CO1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Thu, 19 Dec 2019 07:48:45 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=asURlHdgxH/wwjtahEAqkQk28viPdls8VHy0QkZHyU9isS5wb6AGRZkhmWCi/Ik+tWnhKUru2DOolOzsqSgUS3wcc4eSpKE6Hi7/XEGj6Efg5UZ9/LeccVLCPlN44tx85PZ0dKTFsYAIZoCgV7GppAP/5rOV3K1NpZ9KZqgN89GNs7XC7GJ65HE0ut+rsX4eUaJcnRO0p5wH5U3a7q1YP7Q9oEIKI4K2i1g8deJqsT6xuuklHoq/aKSMEiozdlqy21nS0wS7LMe36ktbaHn8i48b5QAYHtK0LVWaB+wxbyHUEfgFhxudvi1/GQm/UOZZBKNixRfc/32mVmV6BJCzEg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EaOymXoj19R8XjY950K9gXwW0Zg6DBSOhBBXysqWZnA=; b=GaixkRvRGcvHwm3z+6PgLnjzFBi+K/dev8j7EDgdEjeFrZcyGSypo6eMKBmH6LX9ipkWknwQKg8Mhpfwjio6kdox6z28wu0BgnyRmvCFbXx+fXGHp1odLqekmr+Y2jgyyvnoGVGNiAtN4lkLZzISWUcPOjQrsHkKTEyIh3AZrRqaZJhTiKKL4gxed0RWcWboMMTusqJW3RC9P7bfVqzwKtClHQADtxI5cY+mS3qhouWvS1w20oZ5szMWboTAeNouzeaHjPJ2P3VAG046+udtah7HAidTzXP2IfhlgESO65SSkqPArJzqkP+XLbNfGqXKY7XU9YN/5h5K8hJV3MPi4Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EaOymXoj19R8XjY950K9gXwW0Zg6DBSOhBBXysqWZnA=; b=aZIfIWPfWz1Y/6EX8gVv092G5MGshGFPsLW/nW3Z5jIVRuWs/Jv05kN9Jx8hm29t65oufZrEqlgWvOBK0RCZZed08uq6eY/9IGs3DLA6YH05C8DWn8UQ86A3YeHI6rEpRN0VZMyV2dUF8R33PdAOltRjhJYGqsqiHVZK8rCUlJg= Received: from DM5PR11MB1753.namprd11.prod.outlook.com (10.175.88.141) by DM5PR11MB1836.namprd11.prod.outlook.com (10.175.86.145) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2538.18; Thu, 19 Dec 2019 12:48:44 +0000 Received: from DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::f8ba:7d8d:391d:4302]) by DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::f8ba:7d8d:391d:4302%12]) with mapi id 15.20.2559.012; Thu, 19 Dec 2019 12:48:43 +0000 From: "Eric Vyncke (evyncke)" To: Greg Mirsky , Jeffrey Haas CC: "Carlos Pignataro (cpignata)" , The IESG , "draft-ietf-bfd-vxlan@ietf.org" , "rtg-bfd@ietf.org" , "bfd-chairs@ietf.org" Subject: =?utf-8?B?UmU6IMOJcmljIFZ5bmNrZSdzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi1iZmQt?= =?utf-8?Q?vxlan-09:_(with_DISCUSS_and_COMMENT)?= Thread-Topic: =?utf-8?B?w4lyaWMgVnluY2tlJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLWJmZC12eGxh?= =?utf-8?Q?n-09:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHVteIq5ryADAJO5Ui6+24NC5naA6fAasRigABPBoCAAMB/gA== Date: Thu, 19 Dec 2019 12:48:43 +0000 Message-ID: <3E08A000-91DE-448A-8AAF-77D34D82C226@cisco.com> References: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> <20191218203145.GD6488@pfrc.org> <20191218214102.GF6488@pfrc.org> In-Reply-To: Accept-Language: fr-BE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.20.0.191208 authentication-results: spf=none (sender IP is ) smtp.mailfrom=evyncke@cisco.com; x-originating-ip: [2001:420:c0c1:36:31d1:af5:af8e:a461] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 812a7d33-8bc9-45a6-491e-08d78481c819 x-ms-traffictypediagnostic: DM5PR11MB1836: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0256C18696 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(376002)(366004)(346002)(136003)(39860400002)(189003)(199004)(8936002)(6486002)(478600001)(2616005)(33656002)(86362001)(2906002)(4326008)(81166006)(6506007)(71200400001)(5660300002)(81156014)(316002)(36756003)(91956017)(76116006)(186003)(224303003)(66946007)(66476007)(6512007)(66574012)(64756008)(110136005)(53546011)(54906003)(66556008)(66446008); DIR:OUT; SFP:1101; SCL:1; SRVR:DM5PR11MB1836; H:DM5PR11MB1753.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: FUEXDZFyW19uA4hEDA0h0m4xyWkEYPBfEbMyWX+Beqhutk/upxLG8LR95pHXlWuxYGFhSKgD+uDkkgmrtL29z8rn6qFlB6n/uqXqmToWZxe3j9f6V6YmSWh+f067ErPCCwRHquVKsv+15mMjHNAbhS6OhrnKFG1dELJZNyMXq5+k6uiaxd4TkW7TIIUGLOVhn3LlG5zh4UXYMtrhnjY3Y6TBDXcA4ArwNqIc3zGEbyotpAryYggxMOwkGljeSI0Wx7PnA7iitCpEWIGWN4fZfdq8bUSKFaMO4vD8D/WShXJ28kxJBPK80dIUbCCqW8VKcYGJdIUOVwPV7I9xxMWrLJRqmp8F9YRZ+arbMstTKtf+K96axk8UMap8fmu6NjVXNprSK9qjNOq6KtUR/+syZhB7TMsM/ksiqDf+AZcNj5dsDLSCm+p1dFEAx5e0b5MU Content-Type: multipart/alternative; boundary="_000_3E08A00091DE448A8AAF77D34D82C226ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 812a7d33-8bc9-45a6-491e-08d78481c819 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Dec 2019 12:48:43.8102 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: WZZz9YeTXNUPZYgNW4/MbWyZKNrSLXODwjwWbyvrz79VGD2VWeBN+IK/qolLUCozGJdosJFNU4xkHstN6pzT4Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR11MB1836 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.18, xch-rcd-008.cisco.com X-Outbound-Node: alln-core-8.cisco.com Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Dec 2019 12:48:50 -0000 --_000_3E08A00091DE448A8AAF77D34D82C226ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 R3JlZywNCg0KVGhhbmsgeW91IGZvciB0aGUgbmV3IHRleHQgYnV0IEkgc3RpbGwgYmVsaWV2ZSB0 aGF0IGZvcndhcmRpbmcgaW4gdGhlIGRhdGEgcGxhbmUgYSBwYWNrZXQgd2l0aCBUVEwvSEw9MjU0 IChhc3N1bWluZyBUVEwvSEw9MjU1IGF0IHNvdXJjZSkgaXMgbGVzcyBhbiBpc3N1ZSB0aGFuIGZv cmNpbmcgdGhlIGNvbnRyb2wgcGxhbmUgb2YgYSBWTkkvZ2F0ZXdheSB0byByZXBseSB0byBhIHJl bW90ZSBCRkQgKHRoZSB3aG9sZSBpZGVhIGJlaGluZCBHVFNNIGlzIHRvIGFjY2VwdCBvbmx5IGxv Y2FsIHRyYWZmaWMpLiBNb3Jlb3ZlciwgYSBiYWQgYmVoYXZpbmcgcm91dGVycyBpcyBwcm9iYWJs eSBsZXNzIHByb2JhYmxlIHRoYW4gYSBiYWQgYmVoYXZpbmcgVk0gKGFsdGhvdWdoIEkgYW0gdW5z dXJlIGFib3V0IHRoZSB0aHJlYXQgbW9kZWwgaW4gdGhpcyBjYXNlKS4NCg0KRWxzZSwgcGxlYXNl IHMvIHJlbW92ZXMgdGhlIFZYTEFOIGhlYWRlci8gcmVtb3ZlcyB0aGUgb3V0ZXIgSVAgKyBVRFAg KyBWWExBTiBoZWFkZXJzLw0KDQpBbHNvLCBub3RlIHRoYXQgSVB2NiBwYWNrZXRzIHdpdGggSEw9 MCBidXQgd2l0aCBhIG1hdGNoaW5nIGRlc3QgYWRkciB3aWxsIGJlIGFjY2VwdGVkIGJ5IElQdjYg bm9kZXMuDQoNCi3DqXJpYw0KDQpGcm9tOiBHcmVnIE1pcnNreSA8Z3JlZ2ltaXJza3lAZ21haWwu Y29tPg0KRGF0ZTogVGh1cnNkYXksIDE5IERlY2VtYmVyIDIwMTkgYXQgMDM6MjANClRvOiBKZWZm cmV5IEhhYXMgPGpoYWFzQHBmcmMub3JnPg0KQ2M6ICJDYXJsb3MgUGlnbmF0YXJvIChjcGlnbmF0 YSkiIDxjcGlnbmF0YUBjaXNjby5jb20+LCBFcmljIFZ5bmNrZSA8ZXZ5bmNrZUBjaXNjby5jb20+ LCBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZz4sICJkcmFmdC1pZXRmLWJmZC12eGxhbkBpZXRmLm9y ZyIgPGRyYWZ0LWlldGYtYmZkLXZ4bGFuQGlldGYub3JnPiwgInJ0Zy1iZmRAaWV0Zi5vcmciIDxy dGctYmZkQGlldGYub3JnPiwgImJmZC1jaGFpcnNAaWV0Zi5vcmciIDxiZmQtY2hhaXJzQGlldGYu b3JnPg0KU3ViamVjdDogUmU6IMOJcmljIFZ5bmNrZSdzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi1i ZmQtdnhsYW4tMDk6ICh3aXRoIERJU0NVU1MgYW5kIENPTU1FTlQpDQoNCkhpIENhcmxvcywgSmVm ZiwgZXQgYWwuLA0KdGhhbmsgeW91IGZvciBhIHZlcnkgaW5zaWdodGZ1bCBkaXNjdXNzaW9uLg0K QmFzZWQgb24gdGhlIGlucHV0IGZyb20gdGhlIGV4cGVydHMgZmFtaWxpYXIgd2l0aCBWWExBTiBk ZXBsb3ltZW50IHNjZW5hcmlvIHRoZSBmb2xsb3dpbmcgdGV4dCB3YXMgYWRkZWQgdG8ganVzdGlm eSB0aGUgcmVxdWlyZW1lbnQgdG8gc2V0IFRUTCBvciBIb3AgTGltaXQgdG8gMToNCiAgICAgICAg IFRUTCBvciBIb3AgTGltaXQ6IE1VU1QgYmUgc2V0IHRvIDEgdG8gZW5zdXJlIHRoYXQgdGhlIEJG RA0KICAgICAgICAgcGFja2V0IGlzIG5vdCByb3V0ZWQgd2l0aGluIHRoZSBMYXllciAzIHVuZGVy bGF5IG5ldHdvcmsuICBUaGlzDQogICAgICAgICBhZGRyZXNzZXMgdGhlIHNjZW5hcmlvIHdoZW4g dGhlIGlubmVyIElQIGRlc3RpbmF0aW9uIGFkZHJlc3MgaXMNCiAgICAgICAgIG9mIFZYTEFOIGdh dGV3YXkgYW5kIHRoZXJlIGlzIGEgcm91dGVyIGluIHVuZGVybGF5IHdoaWNoDQogICAgICAgICBy ZW1vdmVzIHRoZSBWWExBTiBoZWFkZXIsIHRoZW4gaXQgaXMgcG9zc2libGUgdG8gcm91dGUgdGhl DQogICAgICAgICBwYWNrZXQgYXMgVlhMQU4gIGdhdGV3YXkgYWRkcmVzcyBpcyByb3V0YWJsZSBh ZGRyZXNzLg0KDQpCZXN0IHJlZ2FyZHMsDQpHcmVnDQoNCk9uIFdlZCwgRGVjIDE4LCAyMDE5IGF0 IDE6MzYgUE0gSmVmZnJleSBIYWFzIDxqaGFhc0BwZnJjLm9yZzxtYWlsdG86amhhYXNAcGZyYy5v cmc+PiB3cm90ZToNCkNhcmxvcywNCg0KT24gV2VkLCBEZWMgMTgsIDIwMTkgYXQgMDk6Mjg6MzBQ TSArMDAwMCwgQ2FybG9zIFBpZ25hdGFybyAoY3BpZ25hdGEpIHdyb3RlOg0KPiBUaGUgVFRMIG9m IDEgcmVjb21tZW5kZWQgZm9yIFJGQyA0Mzc5IC8gUkZDIDgwMjkgUzQuMyBpcyBiZWNhdXNlIGlm IHRoZSBNUExTIHBhY2tldCBpcyBtaXMtcm91dGVkLCBvciB0aGVyZSdzIGEgZm9yd2FyZGluZyBt aXMtcHJvZ3JhbW1pbmcsIHRoZW4gYW4gTVBMUyBMU0UgcG9wIHdvdWxkIGV4cG9zZSB0aGUgQkZE IHBhY2tldCBhbmQgc28gdGhhdCB0aGUgQkZEIGlzIG5vdCBmdXJ0aGVyIG1pcy1mb3J3YXJkZWQu DQo+DQo+IEluIHRoZSBWWExBTiBjYXNlIGFuIGludGVybWVkaWF0ZSByb3V0ZXIgd291bGQgbm90 IHJlbW92ZSB0aGUgVlhMQU4gZW5jYXAgYmVjYXVzZSB0aGUgb3V0ZXIgZW5jYXAgaXMgSVAgKHdp dGggYSBkZXN0aW5hdGlvbiBhZGRyZXNzLCBub3QgYW4gTVBMUyBMYWJlbCB0aGF0IGNhbiBiZSBt aXMtaW50ZXJwcmV0ZWQgaW4gY29udGV4dCkgYW5kIGEgbWlkLXBvaW50IHJvdXRlciB3b3VsZCBu b3QgdW5kZXJzdGFuZCBWWExBTi4NCg0KRXhwbGFpbmVkLCB0aGF0IG5vdyBzZWVtcyBvYnZpb3Vz LiAgVGhhbmtzLiA6LSkNCg0KQnV0IGdpdmVuIHRoYXQgcG9pbnQsIHdoYXQgcHJlY2lzZWx5IGlz IHRoZSBvYmplY3Rpb24gdG8gdGhlIGlubmVyIElQIGhlYWRlcg0Kb2YgdGhlIEJGRCBmb3Igdnhs YW4gaGF2aW5nIGEgVFRMIG9mIDE/DQoNCkkgdGhpbmsgdGhpcyBpcyBwYXJ0aWFsbHkgYSBtYXR0 ZXIgb2YgYXR0YWNrIHNwYWNlcyB2YXJ5aW5nIGRlcGVuZGluZyBvbg0Kd2hldGhlciB3ZSdyZSB0 YXJnZXRpbmcgdGhlIG1hbmFnZW1lbnQgVk5JIHZzLiBhIHRlbmFudC4gIEluIHRoZSBjYXNlIG9m IHRoZQ0KbWFuYWdlbWVudCBWTkksIHdlIChzaG91bGQpIGhhdmUgdmVyeSBzdHJvbmcgY29udHJv bCBvdmVyIHdoYXQgQkZEIHRyYWZmaWMNCmlzIGdldHRpbmcgZW5jYXBzdWxhdGVkLg0KDQpIb3dl dmVyLCBmb3IgdGVuYW50IFZOSSBtb2RlLCBpcyB0aGUgYXJndW1lbnQgdGhhdCBkZXBlbmRpbmcg b24gd2hhdCB0aGUNCm90aGVyIHZ4bGFuIFBEVSBwYXJhbWV0ZXJzIGxvb2sgbGlrZSwgdGVuYW50 IHNvdXJjZWQgQkZEIFBEVXMgbWF5IGJlDQppbmRpc3Rpbmd1aXNoYWJsZSBmcm9tIG9uZXMgc291 cmNlZCBieSB0aGUgbWFuYWdlbWVudCBpbmZyYXN0cnVjdHVyZT8gIEFuZA0KaWYgc28sIGhvdyB3 b3VsZCBHVFNNIGhlbHAgdXMgaGVyZT8NCg0KLS0gSmVmZg0K --_000_3E08A00091DE448A8AAF77D34D82C226ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpz cGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250 LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29D aHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4w cHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdp bjo3Mi4wcHQgNzIuMHB0IDcyLjBwdCA3Mi4wcHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdl OldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMi IGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPkdyZWcsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5r IHlvdSBmb3IgdGhlIG5ldyB0ZXh0IGJ1dCBJIHN0aWxsIGJlbGlldmUgdGhhdCBmb3J3YXJkaW5n IGluIHRoZSBkYXRhIHBsYW5lIGEgcGFja2V0IHdpdGggVFRML0hMPTI1NCAoYXNzdW1pbmcgVFRM L0hMPTI1NSBhdCBzb3VyY2UpIGlzIGxlc3MgYW4gaXNzdWUgdGhhbiBmb3JjaW5nIHRoZSBjb250 cm9sIHBsYW5lIG9mIGEgVk5JL2dhdGV3YXkgdG8gcmVwbHkgdG8gYSByZW1vdGUgQkZEICh0aGUg d2hvbGUNCiBpZGVhIGJlaGluZCBHVFNNIGlzIHRvIGFjY2VwdCBvbmx5IGxvY2FsIHRyYWZmaWMp LiBNb3Jlb3ZlciwgYSBiYWQgYmVoYXZpbmcgcm91dGVycyBpcyBwcm9iYWJseSBsZXNzIHByb2Jh YmxlIHRoYW4gYSBiYWQgYmVoYXZpbmcgVk0gKGFsdGhvdWdoIEkgYW0gdW5zdXJlIGFib3V0IHRo ZSB0aHJlYXQgbW9kZWwgaW4gdGhpcyBjYXNlKS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RWxz ZSwgcGxlYXNlIHMvIHJlbW92ZXMgdGhlIFZYTEFOIGhlYWRlci8gcmVtb3ZlcyB0aGUgb3V0ZXIg SVAgJiM0MzsgVURQICYjNDM7IFZYTEFOIGhlYWRlcnMvPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkFsc28sIG5vdGUgdGhhdCBJUHY2IHBhY2tldHMgd2l0aCBITD0wIGJ1dCB3aXRoIGEgbWF0Y2hp bmcgZGVzdCBhZGRyIHdpbGwgYmUgYWNjZXB0ZWQgYnkgSVB2NiBub2Rlcy48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+LcOpcmljPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6 c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0KPC9zcGFuPjwvYj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+R3JlZyBNaXJza3kgJmx0O2dyZWdpbWly c2t5QGdtYWlsLmNvbSZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+VGh1cnNkYXksIDE5IERlY2VtYmVy IDIwMTkgYXQgMDM6MjA8YnI+DQo8Yj5UbzogPC9iPkplZmZyZXkgSGFhcyAmbHQ7amhhYXNAcGZy Yy5vcmcmZ3Q7PGJyPg0KPGI+Q2M6IDwvYj4mcXVvdDtDYXJsb3MgUGlnbmF0YXJvIChjcGlnbmF0 YSkmcXVvdDsgJmx0O2NwaWduYXRhQGNpc2NvLmNvbSZndDssIEVyaWMgVnluY2tlICZsdDtldnlu Y2tlQGNpc2NvLmNvbSZndDssIFRoZSBJRVNHICZsdDtpZXNnQGlldGYub3JnJmd0OywgJnF1b3Q7 ZHJhZnQtaWV0Zi1iZmQtdnhsYW5AaWV0Zi5vcmcmcXVvdDsgJmx0O2RyYWZ0LWlldGYtYmZkLXZ4 bGFuQGlldGYub3JnJmd0OywgJnF1b3Q7cnRnLWJmZEBpZXRmLm9yZyZxdW90OyAmbHQ7cnRnLWJm ZEBpZXRmLm9yZyZndDssICZxdW90O2JmZC1jaGFpcnNAaWV0Zi5vcmcmcXVvdDsgJmx0O2JmZC1j aGFpcnNAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiDDiXJpYyBWeW5ja2Un cyBEaXNjdXNzIG9uIGRyYWZ0LWlldGYtYmZkLXZ4bGFuLTA5OiAod2l0aCBESVNDVVNTIGFuZCBD T01NRU5UKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+SGkgQ2FybG9zLCBKZWZmLCBldCBhbC4sIDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPnRoYW5rIHlv dSBmb3IgYSB2ZXJ5IGluc2lnaHRmdWwgZGlzY3Vzc2lvbi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PkJhc2VkIG9uIHRoZSBpbnB1dCBmcm9tIHRoZSBleHBlcnRzIGZhbWlsaWFyIHdpdGggVlhMQU4g ZGVwbG95bWVudCBzY2VuYXJpbyB0aGUgZm9sbG93aW5nIHRleHQgd2FzIGFkZGVkIHRvIGp1c3Rp ZnkgdGhlIHJlcXVpcmVtZW50IHRvIHNldCBUVEwgb3IgSG9wIExpbWl0IHRvIDE6PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij4mbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7VFRMIG9yIEhv cCBMaW1pdDogTVVTVCBiZSBzZXQgdG8gMSB0byBlbnN1cmUgdGhhdCB0aGUgQkZEPGJyPg0KJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3BhY2tldCBpcyBub3Qgcm91dGVkIHdpdGhp biB0aGUgTGF5ZXIgMyB1bmRlcmxheSBuZXR3b3JrLiZuYnNwOyBUaGlzPGJyPg0KJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2FkZHJlc3NlcyB0aGUgc2NlbmFyaW8gd2hlbiB0aGUg aW5uZXIgSVAgZGVzdGluYXRpb24gYWRkcmVzcyBpczxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDtvZiBWWExBTiBnYXRld2F5IGFuZCB0aGVyZSBpcyBhIHJvdXRlciBpbiB1 bmRlcmxheSB3aGljaDxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtyZW1v dmVzIHRoZSBWWExBTiBoZWFkZXIsIHRoZW4gaXQgaXMgcG9zc2libGUgdG8gcm91dGUgdGhlPGJy Pg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3BhY2tldCBhcyBWWExBTiAmbmJz cDtnYXRld2F5IGFkZHJlc3MgaXMgcm91dGFibGUgYWRkcmVzcy48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+QmVzdCByZWdhcmRzLDxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+R3JlZzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij5PbiBXZWQsIERlYyAxOCwgMjAxOSBhdCAxOjM2IFBNIEplZmZyZXkgSGFhcyAm bHQ7PGEgaHJlZj0ibWFpbHRvOmpoYWFzQHBmcmMub3JnIj5qaGFhc0BwZnJjLm9yZzwvYT4mZ3Q7 IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVy Om5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNt IDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowY20iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowY207bWFyZ2luLXJpZ2h0OjBjbTtt YXJnaW4tYm90dG9tOjEyLjBwdDttYXJnaW4tbGVmdDozNi4wcHQiPg0KQ2FybG9zLDxicj4NCjxi cj4NCk9uIFdlZCwgRGVjIDE4LCAyMDE5IGF0IDA5OjI4OjMwUE0gJiM0MzswMDAwLCBDYXJsb3Mg UGlnbmF0YXJvIChjcGlnbmF0YSkgd3JvdGU6PGJyPg0KJmd0OyBUaGUgVFRMIG9mIDEgcmVjb21t ZW5kZWQgZm9yIFJGQyA0Mzc5IC8gUkZDIDgwMjkgUzQuMyBpcyBiZWNhdXNlIGlmIHRoZSBNUExT IHBhY2tldCBpcyBtaXMtcm91dGVkLCBvciB0aGVyZSdzIGEgZm9yd2FyZGluZyBtaXMtcHJvZ3Jh bW1pbmcsIHRoZW4gYW4gTVBMUyBMU0UgcG9wIHdvdWxkIGV4cG9zZSB0aGUgQkZEIHBhY2tldCBh bmQgc28gdGhhdCB0aGUgQkZEIGlzIG5vdCBmdXJ0aGVyIG1pcy1mb3J3YXJkZWQuPGJyPg0KJmd0 OyA8YnI+DQomZ3Q7IEluIHRoZSBWWExBTiBjYXNlIGFuIGludGVybWVkaWF0ZSByb3V0ZXIgd291 bGQgbm90IHJlbW92ZSB0aGUgVlhMQU4gZW5jYXAgYmVjYXVzZSB0aGUgb3V0ZXIgZW5jYXAgaXMg SVAgKHdpdGggYSBkZXN0aW5hdGlvbiBhZGRyZXNzLCBub3QgYW4gTVBMUyBMYWJlbCB0aGF0IGNh biBiZSBtaXMtaW50ZXJwcmV0ZWQgaW4gY29udGV4dCkgYW5kIGEgbWlkLXBvaW50IHJvdXRlciB3 b3VsZCBub3QgdW5kZXJzdGFuZCBWWExBTi48YnI+DQo8YnI+DQpFeHBsYWluZWQsIHRoYXQgbm93 IHNlZW1zIG9idmlvdXMuJm5ic3A7IFRoYW5rcy4gOi0pPGJyPg0KPGJyPg0KQnV0IGdpdmVuIHRo YXQgcG9pbnQsIHdoYXQgcHJlY2lzZWx5IGlzIHRoZSBvYmplY3Rpb24gdG8gdGhlIGlubmVyIElQ IGhlYWRlcjxicj4NCm9mIHRoZSBCRkQgZm9yIHZ4bGFuIGhhdmluZyBhIFRUTCBvZiAxPzxicj4N Cjxicj4NCkkgdGhpbmsgdGhpcyBpcyBwYXJ0aWFsbHkgYSBtYXR0ZXIgb2YgYXR0YWNrIHNwYWNl cyB2YXJ5aW5nIGRlcGVuZGluZyBvbjxicj4NCndoZXRoZXIgd2UncmUgdGFyZ2V0aW5nIHRoZSBt YW5hZ2VtZW50IFZOSSB2cy4gYSB0ZW5hbnQuJm5ic3A7IEluIHRoZSBjYXNlIG9mIHRoZTxicj4N Cm1hbmFnZW1lbnQgVk5JLCB3ZSAoc2hvdWxkKSBoYXZlIHZlcnkgc3Ryb25nIGNvbnRyb2wgb3Zl ciB3aGF0IEJGRCB0cmFmZmljPGJyPg0KaXMgZ2V0dGluZyBlbmNhcHN1bGF0ZWQuJm5ic3A7IDxi cj4NCjxicj4NCkhvd2V2ZXIsIGZvciB0ZW5hbnQgVk5JIG1vZGUsIGlzIHRoZSBhcmd1bWVudCB0 aGF0IGRlcGVuZGluZyBvbiB3aGF0IHRoZTxicj4NCm90aGVyIHZ4bGFuIFBEVSBwYXJhbWV0ZXJz IGxvb2sgbGlrZSwgdGVuYW50IHNvdXJjZWQgQkZEIFBEVXMgbWF5IGJlPGJyPg0KaW5kaXN0aW5n dWlzaGFibGUgZnJvbSBvbmVzIHNvdXJjZWQgYnkgdGhlIG1hbmFnZW1lbnQgaW5mcmFzdHJ1Y3R1 cmU/Jm5ic3A7IEFuZDxicj4NCmlmIHNvLCBob3cgd291bGQgR1RTTSBoZWxwIHVzIGhlcmU/PGJy Pg0KPGJyPg0KLS0gSmVmZjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_3E08A00091DE448A8AAF77D34D82C226ciscocom_-- From nobody Thu Dec 19 06:10:04 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 148CA12081F; Thu, 19 Dec 2019 06:09:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.499 X-Spam-Level: X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=dByd1Qn8; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=U4JcV+9b Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yWcZcvMV8V3R; Thu, 19 Dec 2019 06:09:52 -0800 (PST) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 136B0120810; Thu, 19 Dec 2019 06:09:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=37013; q=dns/txt; s=iport; t=1576764592; x=1577974192; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=xK1/zW/UGLIpxz4RaiGr651s7PvMa+zT6963F0Exyz8=; b=dByd1Qn8fL62HCpIE9S98xm5KT9ZmXcFbObs5HzTEbnRKvW4e6+4+yCr WaGHDT59NYXSWLIE1jebSbyhHaUSGX4IslhEolfZsGKt1TGHDHoS/AaYm tVMnJ0gKSKf7nbf3s+8NUWxC/ROgXs+9PyzgXCxdI7avAjHMbq5ivS4PL U=; IronPort-PHdr: =?us-ascii?q?9a23=3ADExfNRSeHaZTcdA5I9SJGBA/RNpsv++ubAcI9p?= =?us-ascii?q?oqja5Pea2//pPkeVbS/uhpkESXBdfA8/wRje3QvuigQmEG7Zub+FE6OJ1XH1?= =?us-ascii?q?5g640NmhA4RsuMCEn1NvnvOiEkDcJJV1JN9HCgOk8TE8H7NBXf?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CsDgBvhPtd/51dJa1kHgELHIMaLyQ?= =?us-ascii?q?sBWxYIAQLKoQGg0YDinSCX4lejiqBQoEQA1QJAQEBDAEBIwoCAQGEQAIXggU?= =?us-ascii?q?kOBMCAw0BAQQBAQECAQUEbYU3DIVeAQEBAQMSER0BASkOAQ8CAQgRAwECIQc?= =?us-ascii?q?DAgICHxEUBgMIAgQOBSKDAAGBeU0DLgEOoWUCgTiIYXWBMoJ+AQEFgUlBgx0?= =?us-ascii?q?NC4IMAwaBNolQgkkagUE/gREnIIFOfj6CG0kCAQIBgSwBDAYBBzgNCYJaMoI?= =?us-ascii?q?sjToMB4IxOYVXgkKGe45WK0MKgjSHMopABIQiG4JDh3mBA4M+giqJKpAXhwy?= =?us-ascii?q?CHI9jAgQCBAUCDgEBBYFpImdYEQhwFTsqAYJBUBgNjRI4gzuFFIU/dAGBJ40?= =?us-ascii?q?uDheBPF8BAQ?= X-IronPort-AV: E=Sophos;i="5.69,332,1571702400"; d="scan'208,217";a="686043873" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 19 Dec 2019 14:09:50 +0000 Received: from XCH-ALN-003.cisco.com (xch-aln-003.cisco.com [173.36.7.13]) by rcdn-core-6.cisco.com (8.15.2/8.15.2) with ESMTPS id xBJE9oB2004756 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 19 Dec 2019 14:09:50 GMT Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-ALN-003.cisco.com (173.36.7.13) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 19 Dec 2019 08:09:49 -0600 Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 19 Dec 2019 09:09:48 -0500 Received: from NAM10-DM6-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Thu, 19 Dec 2019 08:09:48 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=iJWMOvMoVeeKJy0zapinqp2whzBc3SHc/4aKSI5w/UKtTAWKbB0cu8kEJS4PyM2TEbB4PvDzUxamMjvGx9zvOyFpx6dPM4LsUvD6tvpgul4ih2djlf8eZSUhSnDF7cJ839/0vE36yzPMXIg23+wG/O4ZO+RXgHhH3VuqWYeEorqdWOgkv9/sXfCNZS63WXQ2NCJcEb4Qk9Q1kp0DTK6BtNVwCQPvYy5bvc9PfTAFhfD7PB9XDXt+F27sXoRTIapZ5fQT4wCGgo9a2oBUgBiGz0vtBRGKe/Q8S/yFuQIcijgRfeOY/RLksaQT7tNBYQbHi+gRRvq3SA5DA+DgJK5bog== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xK1/zW/UGLIpxz4RaiGr651s7PvMa+zT6963F0Exyz8=; b=AKNpmJUCB9JF3IKJiDKnFtsMxIEd+D6MhG69rJs2/Ll2nhetEacXPZf40mOx3X47RP3qXBwkM3j40+tWx69SymCAeyJcwf/rM5F2aUWp8nBZx53jocwEb5wTQMBKQDfMjA+xfQ+w0Ug0rfZ25mFH6ARWBv+KbP/uIboV1Smx4utBwfV9dCEjY5IPO/kAMkn2klGPARwKD0EftUuFEfqjMRT2PfonvtthnU3hXRdJBi/xpBtFaxbkN1xuUEJ//MLCYP9NdeTQnNBPifAt1g1Hgv/menNkAqPobyR/tv+Cp/6v8eJxADOxwO6d84Vcy0AY1st+YQ/CJ/qq+4UDZnaBFQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xK1/zW/UGLIpxz4RaiGr651s7PvMa+zT6963F0Exyz8=; b=U4JcV+9bPO0c8aRmakb7hG/VjZmW4A2EW59KeFrC41LF5sPFeByDoDvaKIumvb2Xxwf2zrnzfg9BgGUfNcFOaKrsAD3lCdIDYGyp14zmMPxoDjT0bR486MrBdQl2XSEPI4djIAPM+/ASKzizJUXtWtuhNnf8qgoTcGqzJlIpyjQ= Received: from DM5PR11MB1753.namprd11.prod.outlook.com (10.175.88.141) by DM5PR11MB1514.namprd11.prod.outlook.com (10.172.35.137) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2559.14; Thu, 19 Dec 2019 14:09:47 +0000 Received: from DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::f8ba:7d8d:391d:4302]) by DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::f8ba:7d8d:391d:4302%12]) with mapi id 15.20.2559.012; Thu, 19 Dec 2019 14:09:47 +0000 From: "Eric Vyncke (evyncke)" To: Greg Mirsky CC: The IESG , "draft-ietf-bfd-vxlan@ietf.org" , Jeffrey Haas , "bfd-chairs@ietf.org" , rtg-bfd WG Subject: =?utf-8?B?UmU6IMOJcmljIFZ5bmNrZSdzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi1iZmQt?= =?utf-8?Q?vxlan-09:_(with_DISCUSS_and_COMMENT)?= Thread-Topic: =?utf-8?B?w4lyaWMgVnluY2tlJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLWJmZC12eGxh?= =?utf-8?Q?n-09:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHVthFm5ryADAJO5Ui6+24NC5naA6fBkJAA Date: Thu, 19 Dec 2019 14:09:47 +0000 Message-ID: References: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: fr-BE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.20.0.191208 authentication-results: spf=none (sender IP is ) smtp.mailfrom=evyncke@cisco.com; x-originating-ip: [2001:420:c0c1:36:31d1:af5:af8e:a461] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: bf7aae9f-ef4a-44b3-ae80-08d7848d1b02 x-ms-traffictypediagnostic: DM5PR11MB1514: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0256C18696 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(396003)(39860400002)(346002)(136003)(366004)(469094003)(501584002)(78114003)(199004)(51444003)(189003)(6506007)(6486002)(66556008)(966005)(6916009)(224303003)(91956017)(76116006)(66946007)(186003)(66476007)(4326008)(64756008)(66446008)(53546011)(36756003)(8936002)(2906002)(86362001)(478600001)(71200400001)(21615005)(54906003)(2616005)(5660300002)(6512007)(66574012)(81166006)(316002)(33656002)(81156014); DIR:OUT; SFP:1101; SCL:1; SRVR:DM5PR11MB1514; H:DM5PR11MB1753.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_C77DB9D20DAF4A91B64CDC055C10519Fciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: bf7aae9f-ef4a-44b3-ae80-08d7848d1b02 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Dec 2019 14:09:47.3940 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: cpzj3hsziWTJpQJMT3B7kfChaWpSp/TXXRtF9p+BjW0iNWdXIACVKE31HylL5bkN+wXGKBhoo63VxWnB5a9u8Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR11MB1514 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.13, xch-aln-003.cisco.com X-Outbound-Node: rcdn-core-6.cisco.com Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Dec 2019 14:09:56 -0000 --_000_C77DB9D20DAF4A91B64CDC055C10519Fciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 R3JlZywNCg0KMm5kIHJlcGx5IGFzIHlvdSByZXBsaWVkIGluIDIgbWVzc2FnZXMgOy0pDQoNClBs ZWFzZSBzZWUgaW4tbGluZSBmb3IgRVY+DQoNCkJ1dCwgZm9yIHRoZSBtb3N0IGNyaXRpY2FsIElN SE8gaXNzdWUgYWJvdXQgdXNpbmcgSVB2NC1tYXBwZWQgSVB2NiBhZGRyZXNzZXMsIEkgaGFkIGEg bG9vayBhdCBSRkMgODAyOSBhbmQgUkZDIDU4ODQgYW5kIHdhcywgaG9uZXN0bHksIHNob2NrZWQg YnkgdGhlaXIgdXNlIG9mIElQdjQtbWFwcGVkIGFkZHJlc3NlcyBvdmVyIHRoZSB3aXJlIOKAnGp1 c3QgdG8gYWRkIGVudHJvcHnigJ0uDQoNCkZpcnN0LCBpdCBpcyBub3QgYmVjYXVzZSBhIG1pc3Rh a2UgaGFzIGJlZW4gbWFkZSBpbiB0aGUgcGFzdCB0aGF0IHJlcGVhdGluZyB0aGUgc2FtZSBtaXN0 YWtlIGlzIGEgZ29vZCB0aGluZyA7LSkNCg0KU2Vjb25kLCBhZGRpbmcgZW50cm9weSBjb3VsZCBh bHNvIGJlIGRvbmUgd2l0aCB0aGUgSVB2NiBmbG93IGZpZWxkLg0KDQpUaGlyZCwgSSB3b25kZXIg d2h5IGFkZGluZyBlbnRyb3B5IGluIHRoZSBpbm5lci9vdmVybGF5IElQIGhlYWRlciB3b3VsZCBh c3Npc3QgdGhlIEVDTVAgaW4gdGhlIHVuZGVybGF5IGFzIEkgaGF2ZSBkb3VidCB0aGF0IHVuZGVy bGF5IGRhdGEgcGxhbmUgd2lsbCBsb29rIHNvIGRlZXAgaW50byB0aGUgcGFja2V0cyAuLi4gU28s IGlzbuKAmXQgaXQgdXNlbGVzcyBpbiB0aGlzIGNhc2UgPw0KDQpUaGFuayB5b3UgYWdhaW4gZm9y IHRoZSB3b3JrIGFuZCB5b3VyIHJlcGx5DQoNCi3DqXJpYw0KDQoNCg0KRnJvbTogR3JlZyBNaXJz a3kgPGdyZWdpbWlyc2t5QGdtYWlsLmNvbT4NCkRhdGU6IFRodXJzZGF5LCAxOSBEZWNlbWJlciAy MDE5IGF0IDAzOjE3DQpUbzogRXJpYyBWeW5ja2UgPGV2eW5ja2VAY2lzY28uY29tPg0KQ2M6IFRo ZSBJRVNHIDxpZXNnQGlldGYub3JnPiwgImRyYWZ0LWlldGYtYmZkLXZ4bGFuQGlldGYub3JnIiA8 ZHJhZnQtaWV0Zi1iZmQtdnhsYW5AaWV0Zi5vcmc+LCBKZWZmcmV5IEhhYXMgPGpoYWFzQHBmcmMu b3JnPiwgImJmZC1jaGFpcnNAaWV0Zi5vcmciIDxiZmQtY2hhaXJzQGlldGYub3JnPiwgcnRnLWJm ZCBXRyA8cnRnLWJmZEBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiDDiXJpYyBWeW5ja2UncyBEaXNj dXNzIG9uIGRyYWZ0LWlldGYtYmZkLXZ4bGFuLTA5OiAod2l0aCBESVNDVVNTIGFuZCBDT01NRU5U KQ0KDQpIaSBFcmljLA0KdGhhbmsgeW91IGZvciB5b3VyIHJldmlldywgY29tbWVudHMsIGFuZCBz dWdnZXN0aW9ucy4gUGxlYXNlIGZpbmQgbXkgYW5zd2VycyBiZWxvdyB1bmRlciBHSU0+PiB0YWcu IEFsc28sIGF0dGFjaGVkIGlzIHRoZSBkaWZmIHRvIHRoZSB3b3JraW5nIHZlcnNpb24gb2YgdGhl IGRvY3VtZW50IHRoYXQgaW5jbHVkZXMgdXBkYXRlcyB0aGF0IEFkYW0gaGFzIHN1Z2dlc3RlZC4N Cg0KQmVzdCByZWdhcmRzLA0KR3JlZw0KDQoNCk9uIFR1ZSwgRGVjIDE3LCAyMDE5IGF0IDEyOjUx IEFNIMOJcmljIFZ5bmNrZSB2aWEgRGF0YXRyYWNrZXIgPG5vcmVwbHlAaWV0Zi5vcmc8bWFpbHRv Om5vcmVwbHlAaWV0Zi5vcmc+PiB3cm90ZToNCsOJcmljIFZ5bmNrZSBoYXMgZW50ZXJlZCB0aGUg Zm9sbG93aW5nIGJhbGxvdCBwb3NpdGlvbiBmb3INCmRyYWZ0LWlldGYtYmZkLXZ4bGFuLTA5OiBE aXNjdXNzDQoNCldoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGluZSBp bnRhY3QgYW5kIHJlcGx5IHRvIGFsbA0KZW1haWwgYWRkcmVzc2VzIGluY2x1ZGVkIGluIHRoZSBU byBhbmQgQ0MgbGluZXMuIChGZWVsIGZyZWUgdG8gY3V0IHRoaXMNCmludHJvZHVjdG9yeSBwYXJh Z3JhcGgsIGhvd2V2ZXIuKQ0KDQoNClBsZWFzZSByZWZlciB0byBodHRwczovL3d3dy5pZXRmLm9y Zy9pZXNnL3N0YXRlbWVudC9kaXNjdXNzLWNyaXRlcmlhLmh0bWwNCmZvciBtb3JlIGluZm9ybWF0 aW9uIGFib3V0IElFU0cgRElTQ1VTUyBhbmQgQ09NTUVOVCBwb3NpdGlvbnMuDQoNCg0KVGhlIGRv Y3VtZW50LCBhbG9uZyB3aXRoIG90aGVyIGJhbGxvdCBwb3NpdGlvbnMsIGNhbiBiZSBmb3VuZCBo ZXJlOg0KaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1iZmQtdnhs YW4vDQoNCg0KDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpESVNDVVNTOg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQoNClRo YW5rIHlvdSBmb3IgdGhlIHdvcmsgcHV0IGludG8gdGhpcyBkb2N1bWVudC4NCg0KSSBmdWxseSBz ZWNvbmQgQWRhbSdzIENPTU1FTlQgdGhhdCBzaG91bGQgYmUgZml4ZWQgYmVmb3JlIHB1YmxpY2F0 aW9uIChJTUhPDQp0aGlzIGlzIGEgRElTQ1VTUykuDQpHSU0+PiBJJ3ZlIGFwcGxpZWQgY2hhbmdl cyBzdWdnZXN0ZWQgYnkgQWRhbSB0byB0aGUgd29ya2luZyB2ZXJzaW9uIG9mIHRoZSBkb2N1bWVu dC4NCg0KQW5zd2VycyB0byBteSBDT01NRU5UcyBiZWxvdyB3aWxsIGJlIHdlbGNvbWUsIGV2ZW4g aWYgdGhvc2UgQ09NTUVOVHMgYXJlIG5vdA0KYmxvY2tpbmcuDQoNCkFzIHVzdWFsLCBhbiBhbnN3 ZXIgdG8gdGhlIERJU0NVU1MgaXMgcmVxdWlyZWQgdG8gY2xlYXIgbXkgRElTQ1VTUyB0aG91Z2gu DQoNCkkgaG9wZSB0aGF0IHRoaXMgaGVscHMgdG8gaW1wcm92ZSB0aGUgZG9jdW1lbnQsDQoNClJl Z2FyZHMsDQoNCi3DqXJpYw0KDQo9PSBESVNDVVNTID09DQoNCk1heSBiZSBJIGFtIG5vdCBmYW1p bGlhciBlbm91Z2ggd2l0aCBCRkQsIGJ1dCwgUkZDIDU4ODEgKHRoZSBvbmUgZGVmaW5pbmcgQkZE KQ0Kc3BlY2lmaWVzIHRoZSB1c2Ugb2YgVFRMID0gSG9wIExpbWl0ID0gMjU1Li4gV2h5IHRoaXMg ZG9jdW1lbnQgdXNlcyBhIHZhbHVlIG9mDQoxID8NCkdJTT4+IEplZmYgYW5kIENhcmxvcyBhcmUg aW4gYSB2ZXJ5IGRldGFpbGVkIGFuZCBpbnNpZ2h0ZnVsIGRpc2N1c3Npb24uIEknbGwgd2FpdCBm b3IgaXRzIGNvbmNsdXNpb24gYW5kIGZvbGxvdyBvbiB0aGVpciBhZ3JlZW1lbnQuDQoNCkVWPiBz ZWUgbXkgcHJldmlvdXMgZW1haWwgYWJvdXQgdGhpcy4NCg0KDQotLSBTZWN0aW9uIDMgLS0NCklQ djQtbWFwcGVkIElQdjYgYWRkcmVzc2VzIGFyZSBvbmx5IHRvIGJlIHVzZWQgaW5zaWRlIGEgaG9z dCBhbmQgc2hvdWxkIG5ldmVyDQpiZSB0cmFuc21pdHRlZCBpbiByZWFsIHBhY2tldHMgKGluY2x1 ZGluZyBwYWNrZXRzIGluc2lkZSBhIHR1bm5lbCkgc2VlIHNlY3Rpb24NCjQuMiBvZiBSRkMgNDAz OCAoZXZlbiBpZiBpbmZvcm1hdGlvbmFsKS4gQXMgb3RoZXIgSUVTRyByZXZpZXdlcnMsIEkgd29u ZGVyIHdoeQ0KOjoxLzEyOCBpcyBub3QgdXNlZD8NCkdJTT4+IFRoZSBtZWNoYW5pc20gb2YgdXNp bmcgYW4gYWRkcmVzcyBmcm9tIHRoZSBsb29wYmFjayBhZGRyZXNzIHJhbmdlIG9yIElQdjQtbWFw cGVkIGFkZHJlc3NlcyBvZiB0aGF0IHJhbmdlIG1heSBiZSB1c2VkIHRvIGNyZWF0ZSBlbnRyb3B5 IGFuZCBtb25pdG9yIEVDTVAgcGF0aHMgaW4gYW4gSVAvTVBMUyBuZXR3b3JrIChSRkMgODAyOSBh bmQgUkZDIDU4ODQpLiBUaGlzIHNwZWNpZmljYXRpb24gdXNlcyB0aGUgc2FtZSBtZWNoYW5pc20g Zm9yIEVDTVAgZW52aXJvbm1lbnQgaW4gdGhlIHVuZGVybGF5IG5ldHdvcmsuDQoNCi0tIFNlY3Rp b24gOCAtLQ0KVGhlIGRvY3VtZW50IHNwZWNpZmllcyBubyBJQU5BIGFjdGlvbnMgd2hpbGUgdGhl IHNoZXBoZXJkIHdyaXRlLXVwIHRhbGtzIGFib3V0DQphIElBTkEgYWN0aW9uLg0KR0lNPj4gUnRn RGlyIHJldmlldyBmcm9tIEpvZWwgSGFscGVybiBhbmQgdGhlIGV4dGVuc2l2ZSBkaXNjdXNzaW9u IG9uIEJGRCBXRyBsaXN0IGxlYWQgdG8gdGhpcyBjaGFuZ2UuIEFzIGEgcmVzdWx0LCB0aGUgcmVx dWVzdCB0byBhbGxvY2F0ZSBhIE1BQyBhZGRyZXNzIHRvIGJlIHVzZWQgYXMgdGhlIGRlc3RpbmF0 aW9uIE1BQyBhZGRyZXNzIGluIHRoZSBpbm5lciBFdGhlcm5ldCBoZWFkZXIgd2FzIHdpdGhkcmF3 biBhbmQgcmVtb3ZlZCBmcm9tIHRoZSBzcGVjaWZpY2F0aW9uLg0KDQpFVj4gY2FuIHRoZSBkb2N1 bWVudCBzaGVwaGVyZCB1cGRhdGUgdGhlIHNoZXBoZXJkIHdyaXRlIHVwID8NCg0KDQoNCg0KLS0g U2VjdGlvbiA5IC0tDQpUaGlzIHNlY3Rpb24gaXMgb25seSBhYm91dCBJUHY0IChUVEwgYW5kIFJG QyAxODEyKS4gUGxlYXNlIGFkZHJlc3MgSVB2NiBhcyB3ZWxsLg0KR0lNPj4gQWRkZWQgIm9yIEhv cCBMaW1pdCIuIFBsZWFzZSBsZXQgbWUga25vdyBpZiB5b3UgYWdyZWUuIEFzIGZvciBhIElQdjYg cmVsZXZhbnQgcmVmZXJlbmNlIGVxdWl2YWxlbnQgdG8gUkZDIDE4MTIsIEFkYW0gUm9hY2ggaGFz IG5vdGVkIHRoYXQgUkZDIDg1MDQgZG9lcyBub3QgaGF2ZSBhbnl0aGluZyBvZiB0aGUga2luZC4g QXQgdGhlIHNhbWUgdGltZSwgdGhlIHVzZSBvZiBJUHY0LW1hcHBlZCBsb29wYmFjayBhZGRyZXNz IHJhbmdlIGhhcyBiZWVuIG1hbmRhdGVkIGluIFJGQyA4MDI5IGFuZCBSRkMgNTg4NC4NCg0KRVY+ IE9LLCBldmVuIGlmIEkgZG8gbm90IGxpa2UgdGhlIHVuYmFsYW5jZQ0KDQoNCi0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0NCkNPTU1FTlQ6DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCj09IENPTU1FTlRTID09DQoNClJGQyA1ODgx IChCRkQpIHN0YXRlcyB0aGF0IGl0IGFwcGxpZXMgdG8gSVB2NC9JUHY2IHR1bm5lbHMsIG1heSBJ IGluZmVyIHRoYXQNCnRoaXMgZG9jdW1lbnQgaXMgb25seSByZXF1aXJlZCB0byBhZGRyZXNzIHRo ZSBFdGhlcm5ldCBlbmNhcHN1bGF0aW9uID8gSS5lLg0Kc3BlY2lmeWluZyB0aGUgRXRoZXJuZXQg TUFDIGFkZHJlc3Nlcz8NCkdJTT4+IFRoZXJlIHdlcmUgc2V2ZXJhbCB0aHJlYWRzIG9uIGVuY2Fw c3VsYXRpb24gb2YgQkZEIENvbnRyb2wgcGFja2V0IG92ZXIgVlhMQU4gdGhhdCwgaW4gbXkgZXN0 aW1hdGlvbiwgZ2F0aGVyZWQgMTUwKyBtZXNzYWdlcy4gQXMgeW91J3ZlIG5vdGljZWQgZnJvbSB0 aGUgU2hlcGhlcmQgd3JpdGUtdXAsIHRoZSB1c2Ugb2YgdGhlIGRlZGljYXRlZCBNQUMgYWRkcmVz cyB3YXMgcHJvcG9zZWQsIGRpc2N1c3NlZCwgYW5kIGRvY3VtZW50ZWQuIEJ1dCBsYXRlciB0aGUg V0cgZGVjaWRlZCBub3QgdG8gdXNlIHRoZSBkZWRpY2F0ZWQgTUFDIGFzIHRoZSBkZXN0aW5hdGlv biBNQUMgaW4gdGhlIGlubmVyIEV0aGVybmV0IGZyYW1lLiBTaW1pbGFybHksIHdlIGhhZCBhbiBl eHRlbmRlZCBkaXNjdXNzaW9uLCBpbmNsdWRpbmcgdmFsdWFibGUgaW5wdXQgZnJvbSBpbXBsZW1l bnRvcnMgb2YgQkZEIG92ZXIgVlhMQU4sIG9uIHRoZSBzZWxlY3Rpb24gb2YgdGhlIGRlc3RpbmF0 aW9uIElQIGFkZHJlc3MgaW4gdGhlIGlubmVyIElQIGhlYWRlci4gQW5kIGFub3RoZXIgc2V0IG9m IGlzc3VlcyB3YXMgZGlzY292ZXJlZCByZWxhdGVkIHRvIHRoZSBzZWxlY3Rpb24gb2YgVlhMQU4g Vk5JIHZhbHVlIHdoZW4gZW5jYXBzdWxhdGluZyAgQkZEIGNvbnRyb2wgcGFja2V0LiBJIGhvcGUg d2UndmUgYW5hbHl6ZWQgYWxsIGVuY2Fwc3VsYXRpb24gaXNzdWVzIGFuZCBkb2N1bWVudGVkIHRo ZW0gc3VmZmljaWVudGx5IGZvciB0aGUgYmVuZWZpdCBvZiBmdXR1cmUgaW1wbGVtZW50YXRpb25z Lg0KDQpFVj4gYWN0dWFsbHksIEkgd2FzIG5vdCBjbGVhci4gSSB3b25kZXIgd2h5IFJGQyA1ODgx ICh0aGF0IGNsYWltcyB0byBiZSBhcHBsaWNhYmxlIHRvIElQdjQvSVB2NiB0dW5uZWxzKSBpcyBu b3QgYXBwbGljYWJsZSB0byBWWExBTi4NCg0KDQotLSBTZWN0aW9uIDMgLS0NCkF0IGZpcnN0IHNp Z2h0LCBJIHdhcyBzdXJwcml6ZWQgYnkgaGF2aW5nIGEgQkZEIHNlc3Npb24gcGVyIFZYTEFOIFZO SSBhcyBpdA0Kd2lsbCBjcmVhdGUgc29tZSBzY2FsYWJpbGl0eSBpc3N1ZSwgYnV0LCBJIGFzc3Vt ZSB0aGF0IHRoaXMgaXMgdG8gZGV0ZWN0DQptaXNjb25maWd1cmF0aW9uIGFzIHdlbGwuIElmIHNv LCBwZXJoYXBzIHdvcnRoIG1lbnRpb25uaWcgdGhlIHJlYXNvbmluZyBiZWhpbmQ/DQpHSU0+PiBJ IGFncmVlLCBkZXRlY3RpbmcgbWlzY29uZmlndXJhdGlvbiBtaWdodCBiZSBvbmUgb2YgdGhlIHJl YXNvbnMgdG8gcnVuIEJGRCBvdmVyIHNvbWUgVlhMQU4gVk5Jcy4gV291bGQgdGhlIGZvbGxvd2lu ZyB0ZXh0IGJlIGFjY2VwdGFibGU6DQoNCk5FVyBURVhUOg0KICAgVXNpbmcgYSBCRkQgc2Vzc2lv biB0byBtb25pdG9yIGEgc2V0IG9mIFZYTEFOIFZOSXMgYmV0d2Vlbg0KICAgdGhlIHNhbWUgcGFp ciBvZiBWVEVQcyBtaWdodCBoZWxwIHRvIGRldGVjdCBhbmQgbG9jYWxpemUgcHJvYmxlbXMNCiAg IGNhdXNlZCBieSBtaXNjb25maWd1cmF0aW9uLg0KDQoNCkVWPiBwZXJmZWN0LCB0aGFuayB5b3UN Cg0KSW4gInRoZSBpbm5lciBkZXN0aW5hdGlvbiBJUCBhZGRyZXNzIFNIT1VMRCIgaXQgaXMgdW5j bGVhciB3aGV0aGVyIGl0IGlzIGluIHRoZQ0KYWxsIEJGRCBwYWNrZXRzLCBvciBvbmx5IHRoZSBy ZXF1ZXN0IG9uZSBvciAuLi4gPw0KR0lNPj4gVGhpcyBpcyBhcHBsaWNhYmxlIHRvIGFsbCBCRkQg Y29udHJvbCBwYWNrZXRzIHRyYW5zbWl0dGVkIG92ZXIgYSBWWExBTiB0dW5uZWwuIFRvIGNsYXJp ZnksIEkgcHJvcG9zZSB0aGUgZm9sbG93aW5nIGNoYW5nZToNCk9MRCBURVhUOg0KQXMgcGVyIFNl Y3Rpb24gNCwgdGhlIGlubmVyIGRlc3RpbmF0aW9uIElQIGFkZHJlc3MgU0hPVUxEIGJlIHNldCB0 byAuLi4NCk5FVyBURVhUOg0KICAgRm9yIEJGRCBDb250cm9sIHBhY2tldHMgZW5jYXBzdWxhdGVk IGluIFZYTEFODQogICAoRmlndXJlIDIpLCB0aGUgaW5uZXIgZGVzdGluYXRpb24gSVAgYWRkcmVz cyBTSE9VTEQgYmUgc2V0IHRvIC4uLg0KRVY+IG9rLCB0aGFuayB5b3UNCg0KLS0gU2VjdGlvbiA0 IC0tDQpXaGlsZSBwcm9iYWJseSBkZWZpbmVkIGluIFJGQzczNDgsIHNob3VsZCAiRkNTIiBiZSBy ZW5hbWVkIGFzICJPdXRlciBFdGhlcm5ldA0KRkNTIiBmb3IgY29uc2lzdGVuY3kgd2l0aCB0aGUg Ik91dGVyIEV0aGVybmV0IEhlYWRlciIgaW4gZmlndXJlIDIgPw0KR0lNPj4gV291bGQgcy9GQ1Mv T3V0ZXIgRkNTLyBiZSBhY2NlcHRhYmxlPw0KRVY+IHBlcmZlY3QNCg0KV2h5IG5vdCB1c2luZyB0 aGUgU291cmNlIE1BQyBhZGRyZXNzIGFzIHRoZSBEZXN0aW5hdGlvbiBNQUMgYWRkcmVzcyA/IFRo aXMNCndvdWxkIGVuc3VyZSB0aGF0IHRoZXJlIGlzIG5vIGNvbmZsaWN0IGF0IHRoZSBleHBlbnNl IG9mICJmb3JjaW5nIiB0aGUNCnRyYW5zbWlzc2lvbiBvZiB0aGUgZnJhbWUgZXZlbiBpZiBhZGRy ZXNzZWQgdG8gaXRzZWxmLg0KR0lNPj4gQmFzZWQgb24gdGhlIGlucHV0IGZyb20gZXhwZXJ0cyBm YW1pbGFyIHdpdGggZXhpc3RpbmcgaW1wbGVtZW50YXRpb25zLCBXRyBkZWNpZGVkIG5vdCB0byBy ZXF1aXJlIHRoZSB1c2Ugb2YgdGhlIHNwZWNpZmljIE1BQyBhZGRyZXNzLiBJIHRoaW5rIHRoYXQg dXNpbmcgdGhlIFNvdXJjZSBNQUMgYXMgdGhlIERlc3RpbmF0aW9uIG1pZ2h0IGJlIG9uZSBvZiB0 aGUgb3B0aW9ucyBhbiBpbXBsZW1lbnRhdGlvbiB3aWxsIHVzZS4NCkVWPiBvaw0KDQpQbGVhc2Ug Y29uc2lkZXIgcmV3cml0aW5nIHRoZSBzZWN0aW9uIGFib3V0IFRUTC9Ib3AgTGltaXQgYXMgaXQg aXMgbm90IGVhc3kgdG8NCnBhcnNlL3JlYWQuDQpHSU0+PiBDb3VsZCB5b3UgaGVscCBtZSBraW5k bHkgYW5kIHBvaW50IHRvIHRoZSBwcm9ibGVtYXRpYyB0ZXh0Pw0KDQotLSBTZWN0aW9uIDkgLS0N Ckl0IGlzIHVuY2xlYXIgdG8gbWUgKHNlZSBhbHNvIEJlbidzIGNvbW1lbnQpIHdoYXQgaXMgdGhl ICdhdHRhY2sgdmVjdG9yJyBvZg0Kc2VuZGluZyBwYWNrZXRzIHdpdGggVFRMPTEgPw0KR0lNPj4g QW5vdGhlciBpbnB1dCBmcm9tIGV4cGVydHMgZmFtaWxpYXIgd2l0aCBWWExBTiBhbmQgaXRzIGRl cGxveW1lbnRzIHJlZmxlY3RlZCBpbiB0aGUgZm9sbG93aW5nOg0KICAgICAgICAgIFRUTCBvciBI b3AgTGltaXQ6IE1VU1QgYmUgc2V0IHRvIDEgdG8gZW5zdXJlIHRoYXQgdGhlIEJGRA0KICAgICAg ICAgcGFja2V0IGlzIG5vdCByb3V0ZWQgd2l0aGluIHRoZSBMYXllciAzIHVuZGVybGF5IG5ldHdv cmsuICBUaGlzDQogICAgICAgICBhZGRyZXNzZXMgdGhlIHNjZW5hcmlvIHdoZW4gdGhlIGlubmVy IElQIGRlc3RpbmF0aW9uIGFkZHJlc3MgaXMNCiAgICAgICAgIG9mIFZYTEFOIGdhdGV3YXkgYW5k IHRoZXJlIGlzIGEgcm91dGVyIGluIHVuZGVybGF5IHdoaWNoDQogICAgICAgICByZW1vdmVzIHRo ZSBWWExBTiBoZWFkZXIsIHRoZW4gaXQgaXMgcG9zc2libGUgdG8gcm91dGUgdGhlDQogICAgICAg ICBwYWNrZXQgYXMgVlhMQU4gIGdhdGV3YXkgYWRkcmVzcyBpcyByb3V0YWJsZSBhZGRyZXNzLg0K DQpFVj4gSSBkbyBub3Qgd2FudCB0byBkaXNjdXNzIHRoZSBITD0xIChjZnIgdG9wIG9mIHRoaXMg ZW1haWwgbWVzc2FnZSkgYnV0IG1vcmUgYWJvdXQgcmVxdWVzdGluZyBtb3JlIGluZm9ybWF0aW9u IGFib3V0IHRoZSAqKmF0dGFjayB2ZWN0b3IqKiBvZiBwYWNrZXRzIHdpdGggSEw9MSA/IEUuZy4s IGl0IGlzIGFib3V0IGZvcmNpbmcgdGhlIGV4cGlyZWQgcGFja2V0IHRvIHRoZSBtYWluIENQVSBy YXRoZXIgdGhhbiBkYXRhIHBsYW5lIEFTSUM/IFJlYWxseSB1bmNsZWFyIHdoYXQgdGhlIGF0dGFj ayBpcyB3aXRoIHBhY2tldCBoYXZpbmcgSEw9MQ0KDQoNCg== --_000_C77DB9D20DAF4A91B64CDC055C10519Fciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <5E73C3501323CB4DBB248ACD5EB66672@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpz cGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250 LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29D aHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4w cHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdp bjo3Mi4wcHQgNzIuMHB0IDcyLjBwdCA3Mi4wcHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdl OldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMi IGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPkdyZWcsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjI8c3Vw Pm5kPC9zdXA+IHJlcGx5IGFzIHlvdSByZXBsaWVkIGluIDIgbWVzc2FnZXMgOy0pPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPlBsZWFzZSBzZWUgaW4tbGluZSBmb3IgRVYmZ3Q7PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkJ1dCwgZm9yIHRoZSBtb3N0IGNyaXRpY2FsIElNSE8gaXNzdWUgYWJvdXQg dXNpbmcgSVB2NC1tYXBwZWQgSVB2NiBhZGRyZXNzZXMsIEkgaGFkIGEgbG9vayBhdCBSRkMgODAy OSBhbmQgUkZDIDU4ODQgYW5kIHdhcywgaG9uZXN0bHksIHNob2NrZWQgYnkgdGhlaXIgdXNlIG9m IElQdjQtbWFwcGVkIGFkZHJlc3NlcyBvdmVyIHRoZSB3aXJlIOKAnGp1c3QgdG8gYWRkIGVudHJv cHnigJ0uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkZpcnN0LCBpdCBpcyBub3QgYmVjYXVzZSBh IG1pc3Rha2UgaGFzIGJlZW4gbWFkZSBpbiB0aGUgcGFzdCB0aGF0IHJlcGVhdGluZyB0aGUgc2Ft ZSBtaXN0YWtlIGlzIGEgZ29vZCB0aGluZyA7LSk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U2Vj b25kLCBhZGRpbmcgZW50cm9weSBjb3VsZCBhbHNvIGJlIGRvbmUgd2l0aCB0aGUgSVB2NiBmbG93 IGZpZWxkLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGlyZCwgSSB3b25kZXIgd2h5IGFkZGlu ZyBlbnRyb3B5IGluIHRoZSBpbm5lci9vdmVybGF5IElQIGhlYWRlciB3b3VsZCBhc3Npc3QgdGhl IEVDTVAgaW4gdGhlIHVuZGVybGF5IGFzIEkgaGF2ZSBkb3VidCB0aGF0IHVuZGVybGF5IGRhdGEg cGxhbmUgd2lsbCBsb29rIHNvIGRlZXAgaW50byB0aGUgcGFja2V0cyAuLi4gU28sIGlzbuKAmXQg aXQgdXNlbGVzcyBpbiB0aGlzIGNhc2UgPzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFuayB5 b3UgYWdhaW4gZm9yIHRoZSB3b3JrIGFuZCB5b3VyIHJlcGx5PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPi3DqXJpYzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQg MGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206 DQo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5H cmVnIE1pcnNreSAmbHQ7Z3JlZ2ltaXJza3lAZ21haWwuY29tJmd0Ozxicj4NCjxiPkRhdGU6IDwv Yj5UaHVyc2RheSwgMTkgRGVjZW1iZXIgMjAxOSBhdCAwMzoxNzxicj4NCjxiPlRvOiA8L2I+RXJp YyBWeW5ja2UgJmx0O2V2eW5ja2VAY2lzY28uY29tJmd0Ozxicj4NCjxiPkNjOiA8L2I+VGhlIElF U0cgJmx0O2llc2dAaWV0Zi5vcmcmZ3Q7LCAmcXVvdDtkcmFmdC1pZXRmLWJmZC12eGxhbkBpZXRm Lm9yZyZxdW90OyAmbHQ7ZHJhZnQtaWV0Zi1iZmQtdnhsYW5AaWV0Zi5vcmcmZ3Q7LCBKZWZmcmV5 IEhhYXMgJmx0O2poYWFzQHBmcmMub3JnJmd0OywgJnF1b3Q7YmZkLWNoYWlyc0BpZXRmLm9yZyZx dW90OyAmbHQ7YmZkLWNoYWlyc0BpZXRmLm9yZyZndDssIHJ0Zy1iZmQgV0cgJmx0O3J0Zy1iZmRA aWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiDDiXJpYyBWeW5ja2UncyBEaXNj dXNzIG9uIGRyYWZ0LWlldGYtYmZkLXZ4bGFuLTA5OiAod2l0aCBESVNDVVNTIGFuZCBDT01NRU5U KTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPkhpIEVyaWMsIDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPnRoYW5rIHlvdSBmb3IgeW91ciByZXZp ZXcsIGNvbW1lbnRzLCBhbmQgc3VnZ2VzdGlvbnMuIFBsZWFzZSBmaW5kIG15IGFuc3dlcnMmbmJz cDtiZWxvdyB1bmRlciBHSU0mZ3Q7Jmd0OyB0YWcuIEFsc28sIGF0dGFjaGVkIGlzIHRoZSBkaWZm IHRvIHRoZSB3b3JraW5nIHZlcnNpb24gb2YgdGhlIGRvY3VtZW50IHRoYXQgaW5jbHVkZXMgdXBk YXRlcyB0aGF0IEFkYW0gaGFzIHN1Z2dlc3RlZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+QmVzdCByZWdhcmRzLDxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+R3JlZzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPk9uIFR1ZSwgRGVjIDE3LCAyMDE5IGF0IDEy OjUxIEFNIMOJcmljIFZ5bmNrZSB2aWEgRGF0YXRyYWNrZXIgJmx0OzxhIGhyZWY9Im1haWx0bzpu b3JlcGx5QGlldGYub3JnIj5ub3JlcGx5QGlldGYub3JnPC9hPiZndDsgd3JvdGU6PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVm dDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2luLWxl ZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij7DiXJpYyBWeW5ja2UgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2lu ZyBiYWxsb3QgcG9zaXRpb24gZm9yPGJyPg0KZHJhZnQtaWV0Zi1iZmQtdnhsYW4tMDk6IERpc2N1 c3M8YnI+DQo8YnI+DQpXaGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxp bmUgaW50YWN0IGFuZCByZXBseSB0byBhbGw8YnI+DQplbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQg aW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0byBjdXQgdGhpczxicj4NCmludHJv ZHVjdG9yeSBwYXJhZ3JhcGgsIGhvd2V2ZXIuKTxicj4NCjxicj4NCjxicj4NClBsZWFzZSByZWZl ciB0byA8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9pZXNnL3N0YXRlbWVudC9kaXNjdXNz LWNyaXRlcmlhLmh0bWwiIHRhcmdldD0iX2JsYW5rIj4NCmh0dHBzOi8vd3d3LmlldGYub3JnL2ll c2cvc3RhdGVtZW50L2Rpc2N1c3MtY3JpdGVyaWEuaHRtbDwvYT48YnI+DQpmb3IgbW9yZSBpbmZv cm1hdGlvbiBhYm91dCBJRVNHIERJU0NVU1MgYW5kIENPTU1FTlQgcG9zaXRpb25zLjxicj4NCjxi cj4NCjxicj4NClRoZSBkb2N1bWVudCwgYWxvbmcgd2l0aCBvdGhlciBiYWxsb3QgcG9zaXRpb25z LCBjYW4gYmUgZm91bmQgaGVyZTo8YnI+DQo8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmll dGYub3JnL2RvYy9kcmFmdC1pZXRmLWJmZC12eGxhbi8iIHRhcmdldD0iX2JsYW5rIj5odHRwczov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWJmZC12eGxhbi88L2E+PGJyPg0K PGJyPg0KPGJyPg0KPGJyPg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxicj4NCkRJU0NVU1M6PGJyPg0KLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLTxicj4NCjxicj4NCjxicj4NClRoYW5rIHlvdSBmb3IgdGhlIHdvcmsgcHV0IGludG8g dGhpcyBkb2N1bWVudC48YnI+DQo8YnI+DQpJIGZ1bGx5IHNlY29uZCBBZGFtJ3MgQ09NTUVOVCB0 aGF0IHNob3VsZCBiZSBmaXhlZCBiZWZvcmUgcHVibGljYXRpb24gKElNSE88YnI+DQp0aGlzIGlz IGEgRElTQ1VTUykuPG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+R0lNJmd0OyZndDsgSSd2 ZSBhcHBsaWVkIGNoYW5nZXMgc3VnZ2VzdGVkIGJ5IEFkYW0gdG8gdGhlIHdvcmtpbmcgdmVyc2lv biBvZiB0aGUgZG9jdW1lbnQuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1 b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3Bh ZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBj bSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48YnI+ DQpBbnN3ZXJzIHRvIG15IENPTU1FTlRzIGJlbG93IHdpbGwgYmUgd2VsY29tZSwgZXZlbiBpZiB0 aG9zZSBDT01NRU5UcyBhcmUgbm90PGJyPg0KYmxvY2tpbmcuPGJyPg0KPGJyPg0KQXMgdXN1YWws IGFuIGFuc3dlciB0byB0aGUgRElTQ1VTUyBpcyByZXF1aXJlZCB0byBjbGVhciBteSBESVNDVVNT IHRob3VnaC48YnI+DQo8YnI+DQpJIGhvcGUgdGhhdCB0aGlzIGhlbHBzIHRvIGltcHJvdmUgdGhl IGRvY3VtZW50LDxicj4NCjxicj4NClJlZ2FyZHMsPGJyPg0KPGJyPg0KLcOpcmljPGJyPg0KPGJy Pg0KPT0gRElTQ1VTUyA9PTxicj4NCjxicj4NCk1heSBiZSBJIGFtIG5vdCBmYW1pbGlhciBlbm91 Z2ggd2l0aCBCRkQsIGJ1dCwgUkZDIDU4ODEgKHRoZSBvbmUgZGVmaW5pbmcgQkZEKTxicj4NCnNw ZWNpZmllcyB0aGUgdXNlIG9mIFRUTCA9IEhvcCBMaW1pdCA9IDI1NS4uIFdoeSB0aGlzIGRvY3Vt ZW50IHVzZXMgYSB2YWx1ZSBvZjxicj4NCjEgPzxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3Rl Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PkdJTSZndDsmZ3Q7IEplZmYgYW5kIENhcmxvcyBhcmUgaW4gYSB2ZXJ5IGRldGFpbGVkIGFuZCBp bnNpZ2h0ZnVsIGRpc2N1c3Npb24uIEknbGwgd2FpdCBmb3IgaXRzIGNvbmNsdXNpb24gYW5kIGZv bGxvdyBvbiB0aGVpciBhZ3JlZW1lbnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5FViZndDsgc2VlIG15IHByZXZpb3Vz IGVtYWlsIGFib3V0IHRoaXMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5v bmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDYu MHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowY20iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PGJyPg0KLS0gU2VjdGlvbiAzIC0tPGJy Pg0KSVB2NC1tYXBwZWQgSVB2NiBhZGRyZXNzZXMgYXJlIG9ubHkgdG8gYmUgdXNlZCBpbnNpZGUg YSBob3N0IGFuZCBzaG91bGQgbmV2ZXI8YnI+DQpiZSB0cmFuc21pdHRlZCBpbiByZWFsIHBhY2tl dHMgKGluY2x1ZGluZyBwYWNrZXRzIGluc2lkZSBhIHR1bm5lbCkgc2VlIHNlY3Rpb248YnI+DQo0 LjIgb2YgUkZDIDQwMzggKGV2ZW4gaWYgaW5mb3JtYXRpb25hbCkuIEFzIG90aGVyIElFU0cgcmV2 aWV3ZXJzLCBJIHdvbmRlciB3aHk8YnI+DQo6OjEvMTI4IGlzIG5vdCB1c2VkPzxvOnA+PC9vOnA+ PC9wPg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPkdJTSZndDsmZ3Q7IFRoZSBtZWNoYW5pc20gb2YgdXNpbmcgYW4g YWRkcmVzcyBmcm9tIHRoZSBsb29wYmFjayBhZGRyZXNzIHJhbmdlIG9yIElQdjQtbWFwcGVkIGFk ZHJlc3NlcyBvZiB0aGF0IHJhbmdlIG1heSBiZSB1c2VkIHRvIGNyZWF0ZSBlbnRyb3B5IGFuZCBt b25pdG9yIEVDTVAgcGF0aHMgaW4gYW4gSVAvTVBMUyBuZXR3b3JrIChSRkMgODAyOSBhbmQgUkZD IDU4ODQpLg0KIFRoaXMgc3BlY2lmaWNhdGlvbiB1c2VzIHRoZSBzYW1lIG1lY2hhbmlzbSBmb3Ig RUNNUCBlbnZpcm9ubWVudCBpbiB0aGUgdW5kZXJsYXkgbmV0d29yay48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlk ICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0Ljhw dDttYXJnaW4tcmlnaHQ6MGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPjxicj4NCi0tIFNlY3Rpb24gOCAtLTxicj4NClRoZSBkb2N1bWVudCBzcGVj aWZpZXMgbm8gSUFOQSBhY3Rpb25zIHdoaWxlIHRoZSBzaGVwaGVyZCB3cml0ZS11cCB0YWxrcyBh Ym91dDxicj4NCmEgSUFOQSBhY3Rpb24uPG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+R0lN Jmd0OyZndDsgUnRnRGlyIHJldmlldyBmcm9tIEpvZWwgSGFscGVybiBhbmQgdGhlIGV4dGVuc2l2 ZSBkaXNjdXNzaW9uIG9uIEJGRCBXRyBsaXN0IGxlYWQgdG8gdGhpcyBjaGFuZ2UuIEFzIGEgcmVz dWx0LCB0aGUgcmVxdWVzdCB0byBhbGxvY2F0ZSBhIE1BQyBhZGRyZXNzIHRvIGJlIHVzZWQgYXMg dGhlIGRlc3RpbmF0aW9uIE1BQyBhZGRyZXNzIGluIHRoZSBpbm5lcg0KIEV0aGVybmV0IGhlYWRl ciB3YXMgd2l0aGRyYXduIGFuZCByZW1vdmVkIGZyb20gdGhlIHNwZWNpZmljYXRpb24uPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkVWJmd0OyBjYW4gdGhlIGRvY3VtZW50IHNoZXBoZXJkIHVwZGF0 ZSB0aGUgc2hlcGhlcmQgd3JpdGUgdXAgPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2tx dW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtw YWRkaW5nOjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDow Y20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+PGJyPg0KLS0gU2VjdGlvbiA5IC0tPGJyPg0KVGhpcyBzZWN0aW9uIGlz IG9ubHkgYWJvdXQgSVB2NCAoVFRMIGFuZCBSRkMgMTgxMikuIFBsZWFzZSBhZGRyZXNzIElQdjYg YXMgd2VsbC48bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5HSU0mZ3Q7Jmd0OyBBZGRlZCAm cXVvdDtvciBIb3AgTGltaXQmcXVvdDsuIFBsZWFzZSBsZXQgbWUga25vdyBpZiB5b3UgYWdyZWUu IEFzIGZvciBhIElQdjYgcmVsZXZhbnQgcmVmZXJlbmNlIGVxdWl2YWxlbnQgdG8gUkZDIDE4MTIs IEFkYW0gUm9hY2ggaGFzIG5vdGVkIHRoYXQgUkZDIDg1MDQgZG9lcyBub3QgaGF2ZSBhbnl0aGlu ZyBvZiB0aGUga2luZC4gQXQgdGhlIHNhbWUgdGltZSwgdGhlDQogdXNlIG9mIElQdjQtbWFwcGVk IGxvb3BiYWNrIGFkZHJlc3MgcmFuZ2UgaGFzIGJlZW4gbWFuZGF0ZWQgaW4gUkZDIDgwMjkgYW5k IFJGQyA1ODg0LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5FViZndDsgT0ssIGV2ZW4gaWYgSSBk byBub3QgbGlrZSB0aGUgdW5iYWxhbmNlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1 b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3Bh ZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBj bSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48YnI+ DQo8YnI+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyPg0KQ09NTUVOVDo8YnI+DQotLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJy Pg0KPGJyPg0KPT0gQ09NTUVOVFMgPT08YnI+DQo8YnI+DQpSRkMgNTg4MSAoQkZEKSBzdGF0ZXMg dGhhdCBpdCBhcHBsaWVzIHRvIElQdjQvSVB2NiB0dW5uZWxzLCBtYXkgSSBpbmZlciB0aGF0PGJy Pg0KdGhpcyBkb2N1bWVudCBpcyBvbmx5IHJlcXVpcmVkIHRvIGFkZHJlc3MgdGhlIEV0aGVybmV0 IGVuY2Fwc3VsYXRpb24gPyBJLmUuPGJyPg0Kc3BlY2lmeWluZyB0aGUgRXRoZXJuZXQgTUFDIGFk ZHJlc3Nlcz88bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5HSU0mZ3Q7Jmd0OyBUaGVyZSB3 ZXJlIHNldmVyYWwgdGhyZWFkcyBvbiBlbmNhcHN1bGF0aW9uIG9mIEJGRCBDb250cm9sIHBhY2tl dCBvdmVyIFZYTEFOIHRoYXQsIGluIG15IGVzdGltYXRpb24sIGdhdGhlcmVkIDE1MCYjNDM7IG1l c3NhZ2VzLiBBcyB5b3UndmUgbm90aWNlZCBmcm9tIHRoZSBTaGVwaGVyZCB3cml0ZS11cCwgdGhl IHVzZSBvZiB0aGUgZGVkaWNhdGVkIE1BQyBhZGRyZXNzDQogd2FzIHByb3Bvc2VkLCBkaXNjdXNz ZWQsIGFuZCBkb2N1bWVudGVkLiBCdXQgbGF0ZXIgdGhlIFdHIGRlY2lkZWQgbm90IHRvIHVzZSB0 aGUgZGVkaWNhdGVkIE1BQyBhcyB0aGUgZGVzdGluYXRpb24gTUFDIGluIHRoZSBpbm5lciBFdGhl cm5ldCBmcmFtZS4gU2ltaWxhcmx5LCB3ZSBoYWQgYW4gZXh0ZW5kZWQgZGlzY3Vzc2lvbiwgaW5j bHVkaW5nIHZhbHVhYmxlIGlucHV0IGZyb20gaW1wbGVtZW50b3JzIG9mIEJGRCBvdmVyIFZYTEFO LCBvbiB0aGUNCiBzZWxlY3Rpb24gb2YgdGhlIGRlc3RpbmF0aW9uIElQIGFkZHJlc3MgaW4gdGhl IGlubmVyIElQIGhlYWRlci4gQW5kIGFub3RoZXIgc2V0IG9mIGlzc3VlcyB3YXMgZGlzY292ZXJl ZCByZWxhdGVkIHRvIHRoZSBzZWxlY3Rpb24gb2YgVlhMQU4gVk5JIHZhbHVlIHdoZW4gZW5jYXBz dWxhdGluZyZuYnNwOyBCRkQgY29udHJvbCBwYWNrZXQuIEkgaG9wZSB3ZSd2ZSBhbmFseXplZCBh bGwgZW5jYXBzdWxhdGlvbiBpc3N1ZXMgYW5kIGRvY3VtZW50ZWQgdGhlbQ0KIHN1ZmZpY2llbnRs eSBmb3IgdGhlIGJlbmVmaXQgb2YgZnV0dXJlIGltcGxlbWVudGF0aW9ucy48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+RVYmZ3Q7IGFjdHVhbGx5LCBJIHdhcyBub3QgY2xlYXIuIEkgd29uZGVyIHdo eSBSRkMgNTg4MSAodGhhdCBjbGFpbXMgdG8gYmUgYXBwbGljYWJsZSB0byBJUHY0L0lQdjYgdHVu bmVscykgaXMgbm90IGFwcGxpY2FibGUgdG8gVlhMQU4uPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGlu ZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGNtIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxicj4NCi0t IFNlY3Rpb24gMyAtLTxicj4NCkF0IGZpcnN0IHNpZ2h0LCBJIHdhcyBzdXJwcml6ZWQgYnkgaGF2 aW5nIGEgQkZEIHNlc3Npb24gcGVyIFZYTEFOIFZOSSBhcyBpdDxicj4NCndpbGwgY3JlYXRlIHNv bWUgc2NhbGFiaWxpdHkgaXNzdWUsIGJ1dCwgSSBhc3N1bWUgdGhhdCB0aGlzIGlzIHRvIGRldGVj dDxicj4NCm1pc2NvbmZpZ3VyYXRpb24gYXMgd2VsbC4gSWYgc28sIHBlcmhhcHMgd29ydGggbWVu dGlvbm5pZyB0aGUgcmVhc29uaW5nIGJlaGluZD88bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90 ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij5HSU0mZ3Q7Jmd0OyBJIGFncmVlLCBkZXRlY3RpbmcgbWlzY29uZmlndXJhdGlvbiBtaWdodCBi ZSBvbmUgb2YgdGhlIHJlYXNvbnMgdG8gcnVuIEJGRCBvdmVyIHNvbWUgVlhMQU4gVk5Jcy4gV291 bGQgdGhlIGZvbGxvd2luZyB0ZXh0IGJlIGFjY2VwdGFibGU6PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPk5FVyBURVhUOjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+Jm5ic3A7ICZuYnNwO1VzaW5nIGEgQkZEIHNlc3Npb24gdG8gbW9uaXRvciBhIHNldCBv ZiBWWExBTiBWTklzIGJldHdlZW48YnI+DQombmJzcDsgJm5ic3A7dGhlIHNhbWUgcGFpciBvZiBW VEVQcyBtaWdodCBoZWxwIHRvIGRldGVjdCBhbmQgbG9jYWxpemUgcHJvYmxlbXM8YnI+DQombmJz cDsgJm5ic3A7Y2F1c2VkIGJ5IG1pc2NvbmZpZ3VyYXRpb24uPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RVYmZ3Q7IHBl cmZlY3QsIHRoYW5rIHlvdTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBj bSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowY20iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PGJyPg0KSW4gJnF1 b3Q7dGhlIGlubmVyIGRlc3RpbmF0aW9uIElQIGFkZHJlc3MgU0hPVUxEJnF1b3Q7IGl0IGlzIHVu Y2xlYXIgd2hldGhlciBpdCBpcyBpbiB0aGU8YnI+DQphbGwgQkZEIHBhY2tldHMsIG9yIG9ubHkg dGhlIHJlcXVlc3Qgb25lIG9yIC4uLiA/PG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+R0lN Jmd0OyZndDsgVGhpcyBpcyBhcHBsaWNhYmxlIHRvIGFsbCBCRkQgY29udHJvbCBwYWNrZXRzIHRy YW5zbWl0dGVkIG92ZXIgYSBWWExBTiB0dW5uZWwuIFRvIGNsYXJpZnksIEkgcHJvcG9zZSB0aGUg Zm9sbG93aW5nIGNoYW5nZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPk9MRCBURVhUOjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+QXMgcGVyIFNlY3Rpb24gNCwgdGhlIGlubmVyIGRlc3RpbmF0aW9uIElQ IGFkZHJlc3MgU0hPVUxEIGJlIHNldCB0byAuLi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPk5FVyBU RVhUOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jm5ic3A7ICZuYnNwO0ZvciBCRkQgQ29udHJvbCBw YWNrZXRzIGVuY2Fwc3VsYXRlZCBpbiBWWExBTjxicj4NCiZuYnNwOyAmbmJzcDsoRmlndXJlIDIp LCB0aGUgaW5uZXIgZGVzdGluYXRpb24gSVAgYWRkcmVzcyBTSE9VTEQgYmUgc2V0IHRvIC4uLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RVYmZ3Q7IG9rLCB0aGFuayB5b3U8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowY20gMGNtIDBjbSA2LjBwdDtt YXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxicj4NCi0tIFNlY3Rpb24gNCAtLTxicj4NCldo aWxlIHByb2JhYmx5IGRlZmluZWQgaW4gUkZDNzM0OCwgc2hvdWxkICZxdW90O0ZDUyZxdW90OyBi ZSByZW5hbWVkIGFzICZxdW90O091dGVyIEV0aGVybmV0PGJyPg0KRkNTJnF1b3Q7IGZvciBjb25z aXN0ZW5jeSB3aXRoIHRoZSAmcXVvdDtPdXRlciBFdGhlcm5ldCBIZWFkZXImcXVvdDsgaW4gZmln dXJlIDIgPzxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkdJTSZndDsmZ3Q7IFdvdWxkIHMv RkNTL091dGVyIEZDUy8gYmUgYWNjZXB0YWJsZT88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPkVWJmd0OyBwZXJmZWN0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1 b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3Bh ZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBj bSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48YnI+ DQpXaHkgbm90IHVzaW5nIHRoZSBTb3VyY2UgTUFDIGFkZHJlc3MgYXMgdGhlIERlc3RpbmF0aW9u IE1BQyBhZGRyZXNzID8gVGhpczxicj4NCndvdWxkIGVuc3VyZSB0aGF0IHRoZXJlIGlzIG5vIGNv bmZsaWN0IGF0IHRoZSBleHBlbnNlIG9mICZxdW90O2ZvcmNpbmcmcXVvdDsgdGhlPGJyPg0KdHJh bnNtaXNzaW9uIG9mIHRoZSBmcmFtZSBldmVuIGlmIGFkZHJlc3NlZCB0byBpdHNlbGYuPG86cD48 L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+R0lNJmd0OyZndDsgQmFzZWQgb24gdGhlIGlucHV0IGZy b20gZXhwZXJ0cyBmYW1pbGFyIHdpdGggZXhpc3RpbmcgaW1wbGVtZW50YXRpb25zLCBXRyBkZWNp ZGVkIG5vdCB0byByZXF1aXJlIHRoZSB1c2Ugb2YgdGhlIHNwZWNpZmljIE1BQyBhZGRyZXNzLiBJ IHRoaW5rIHRoYXQgdXNpbmcgdGhlIFNvdXJjZSBNQUMgYXMgdGhlIERlc3RpbmF0aW9uIG1pZ2h0 IGJlIG9uZSBvZg0KIHRoZSBvcHRpb25zIGFuIGltcGxlbWVudGF0aW9uIHdpbGwgdXNlLiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RVYmZ3Q7IG9rPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVm dDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2luLWxl ZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij48YnI+DQpQbGVhc2UgY29uc2lkZXIgcmV3cml0aW5nIHRoZSBz ZWN0aW9uIGFib3V0IFRUTC9Ib3AgTGltaXQgYXMgaXQgaXMgbm90IGVhc3kgdG88YnI+DQpwYXJz ZS9yZWFkLjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkdJTSZndDsmZ3Q7IENvdWxkIHlv dSBoZWxwIG1lIGtpbmRseSBhbmQgcG9pbnQgdG8gdGhlIHByb2JsZW1hdGljIHRleHQ/Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTti b3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7 bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48YnI+DQotLSBTZWN0aW9uIDkgLS08YnI+DQpJ dCBpcyB1bmNsZWFyIHRvIG1lIChzZWUgYWxzbyBCZW4ncyBjb21tZW50KSB3aGF0IGlzIHRoZSAn YXR0YWNrIHZlY3Rvcicgb2Y8YnI+DQpzZW5kaW5nIHBhY2tldHMgd2l0aCBUVEw9MSA/PG86cD48 L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+R0lNJmd0OyZndDsgQW5vdGhlciBpbnB1dCBmcm9tIGV4 cGVydHMgZmFtaWxpYXIgd2l0aCBWWExBTiBhbmQgaXRzIGRlcGxveW1lbnRzIHJlZmxlY3RlZCBp biB0aGUgZm9sbG93aW5nOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyBUVEwgb3IgSG9wIExpbWl0OiBNVVNUIGJlIHNldCB0byAxIHRvIGVu c3VyZSB0aGF0IHRoZSBCRkQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwO3BhY2tldCBpcyBub3Qgcm91dGVkIHdpdGhpbiB0aGUgTGF5ZXIgMyB1bmRlcmxh eSBuZXR3b3JrLiZuYnNwOyBUaGlzPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwO2FkZHJlc3NlcyB0aGUgc2NlbmFyaW8gd2hlbiB0aGUgaW5uZXIgSVAgZGVzdGluYXRpb24g YWRkcmVzcyBpczxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtvZiBWWExB TiBnYXRld2F5IGFuZCB0aGVyZSBpcyBhIHJvdXRlciBpbiB1bmRlcmxheSB3aGljaDxicj4NCiZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtyZW1vdmVzIHRoZSBWWExBTiBoZWFkZXIs IHRoZW4gaXQgaXMgcG9zc2libGUgdG8gcm91dGUgdGhlPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwO3BhY2tldCBhcyBWWExBTiAmbmJzcDtnYXRld2F5IGFkZHJlc3MgaXMg cm91dGFibGUgYWRkcmVzcy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RVYmZ3Q7IEkgZG8gbm90 IHdhbnQgdG8gZGlzY3VzcyB0aGUgSEw9MSAoY2ZyIHRvcCBvZiB0aGlzIGVtYWlsIG1lc3NhZ2Up IGJ1dCBtb3JlIGFib3V0IHJlcXVlc3RpbmcgbW9yZSBpbmZvcm1hdGlvbiBhYm91dCB0aGUgKiph dHRhY2sgdmVjdG9yKiogb2YgcGFja2V0cyB3aXRoIEhMPTEgPyBFLmcuLCBpdCBpcyBhYm91dCBm b3JjaW5nIHRoZSBleHBpcmVkIHBhY2tldCB0byB0aGUgbWFpbiBDUFUgcmF0aGVyIHRoYW4NCiBk YXRhIHBsYW5lIEFTSUM/IFJlYWxseSB1bmNsZWFyIHdoYXQgdGhlIGF0dGFjayBpcyB3aXRoIHBh Y2tldCBoYXZpbmcgSEw9MTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_C77DB9D20DAF4A91B64CDC055C10519Fciscocom_-- From nobody Thu Dec 19 10:01:57 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98F4D1209AA; Thu, 19 Dec 2019 10:01:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IwI-zU6fMyAD; Thu, 19 Dec 2019 10:01:47 -0800 (PST) Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id D19A81208FE; Thu, 19 Dec 2019 10:01:39 -0800 (PST) Received: by slice.pfrc.org (Postfix, from userid 1001) id 8DED61E2F6; Thu, 19 Dec 2019 13:06:10 -0500 (EST) Date: Thu, 19 Dec 2019 13:06:10 -0500 From: Jeffrey Haas To: "Carlos Pignataro (cpignata)" Cc: "rtg-bfd@ietf.org" , "Eric Vyncke (evyncke)" , "draft-ietf-bfd-vxlan@ietf.org" , The IESG , "bfd-chairs@ietf.org" Subject: Re: =?iso-8859-1?Q?=C9ric_Vyncke's_Discus?= =?iso-8859-1?Q?s?= on draft-ietf-bfd-vxlan-09: (with DISCUSS and COMMENT) Message-ID: <20191219180609.GA27686@pfrc.org> References: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> <20191218203145.GD6488@pfrc.org> <20191218214102.GF6488@pfrc.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Dec 2019 18:01:50 -0000 Carlos, On Thu, Dec 19, 2019 at 03:22:28AM +0000, Carlos Pignataro (cpignata) wrote: > > 2019/12/18 åˆå¾Œ4:41ã€Jeffrey Haas ã®ãƒ¡ãƒ¼ãƒ«: > > But given that point, what precisely is the objection to the inner IP header > > of the BFD for vxlan having a TTL of 1? > > The intent would be to protect of potential attacks beyond the encapsulating endpoint (i.e., packet coming into the VTEP vs. sourced, off-link spoofing). I'm sorry if I'm seeing oblivious, but I'm missing something. The encapsulated packet's outer IP header, if single hop, could certainly benefit from GTSM procedures. But once you're more than one hop away, and you're vulnerable to general attacks against packet insertion that the base vxlan PDUs have, how exactly does setting the TTL one way or the other provide protection? > > I think this is partially a matter of attack spaces varying depending on > > whether we're targeting the management VNI vs. a tenant. In the case of the > > management VNI, we (should) have very strong control over what BFD traffic > > is getting encapsulated. > > > > However, for tenant VNI mode, is the argument that depending on what the > > other vxlan PDU parameters look like, tenant sourced BFD PDUs may be > > indistinguishable from ones sourced by the management infrastructure? And > > if so, how would GTSM help us here? > > Tenant sourced BFD PDUs would not use host loopback dest addresses. Scanning through S6 of draft-ietf-bfd-vxlan-09, "MAY support the use of the Management VNIâ€. > > And if there are already protections for not over-forwarding the BFD pak, the flip-question is “what does TTL = 1 bug you?†> > My assumption was that if the base BFD specs say “GSTM is usefulâ€, why not here? Personally, I'm mostly ambivalent if it helps. If my observation above above about insertion attacks is valid, then using GTSM for the inner IP packet isn't helpful for protecting against what GTSM is intended for. This leave us with roughly two modes: - With GTSM, enforce the usual related BFD procedure. If packets aren't "caught" by BFD, they have the potential to bounce around until they expire. Either way, BFD should go Down and the max damage is a number of BFD packets eventually settling back to the 1/sec timer. - Without GTSM, exactly the same, just with less distance. So, presuming my observation is valid: It doesn't help. It doesn't hurt (much). If we want to require it, go for it. But it doesn't help your security story at all and using it perhaps confuses people about it actually helping. So, don't insist on it for security reasons. -- Jeff From nobody Thu Dec 19 11:14:51 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60359120BF6; Thu, 19 Dec 2019 11:14:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CYlk770tr01r; Thu, 19 Dec 2019 11:14:40 -0800 (PST) Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id A0C74120B68; Thu, 19 Dec 2019 11:14:40 -0800 (PST) Received: by slice.pfrc.org (Postfix, from userid 1001) id AD68C1E2F6; Thu, 19 Dec 2019 14:19:10 -0500 (EST) Date: Thu, 19 Dec 2019 14:19:10 -0500 From: Jeffrey Haas To: Adam Roach Cc: Greg Mirsky , The IESG , draft-ietf-bfd-vxlan@ietf.org, bfd-chairs@ietf.org, rtg-bfd WG Subject: Re: Adam Roach's No Objection on draft-ietf-bfd-vxlan-09: (with COMMENT) Message-ID: <20191219191910.GA31892@pfrc.org> References: <157656670090.24465.17703971379844970449.idtracker@ietfa.amsl.com> <9b1ec49d-6797-e9e9-eef5-2085f7a0dcce@nostrum.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <9b1ec49d-6797-e9e9-eef5-2085f7a0dcce@nostrum.com> User-Agent: Mutt/1.5.21 (2010-09-15) Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Dec 2019 19:14:44 -0000 Adam, [re: directing packets to the loopback network] On Wed, Dec 18, 2019 at 08:37:03PM -0600, Adam Roach wrote: > I'm a little unclear about the scope of leakage that is causing > concern here. If you simply want to prevent the packets from making > it to an end host, there are a lot of choices you can make that > guarantee an address that has no ultimate destination. > > If the concern is, instead, that the packet might be sent to one or > more other routers when the tunnel is broken (even if it never > reaches a host), then what you're doing here is unlikely to achieve > your goals. As I attempted to highlight below, there is no reason to > believe that an IPv6 router is going to treat ::ffff:127.0.0.0/104 > any differently than any other IPv4-mapped address. Unless you're in > the default-free zone, It's either heading towards a default router > or a v6/v4 gateway, and probably won't be dropped until it reaches > an ingress to the v4 network. > > On the other hand, if you *are* in the DFZ, my my understanding (and > I'm not a routing person, so it's kind of a lay understanding) is > that guaranteeing a packet drop in the default-free zone simply > requires that the corresponding prefix isn't configured or > announced. The IETF protocol IP blocks I mention below have that > property. > > In short, I don't think your solution addresses your implied threat > model (regardless of which of the preceding two situations apply), > and at the same time is an abuse of the semantic meaning of loopback > addresses. > > I'm feeling like I might not understand the problem being addressed > by this approach. Perhaps if you explained the exact nature of the > bad things that might happen when a tunnel breaks and some other > inner address is used (with the assumption that such inner address > would never correspond to a real host, and would never correspond to > an advertised route, as would be true for my suggestions below), it > would help. Tersely: In RFC 5884, BFD PDUs are carried in IP/UDP and are intended to be delivered over a MPLS tunnel directly to the relevant endpoint. The destination IP address is irrelevant - we're trying to talk to that endpoint. The mechanism used in 5884 was to choose something from the loopback network as a place to put _something_ for IP that had the semantics of "the thing I'm talking to". Yes, it's a bit of a hack. But it's a deployed hack. And very similar, the ::FFFF:127.0.0.0/104 network was leveraged. I believe you can draw the following conclusions: - The tunnel decapsulation infrastructure can look for BFD encapsulated packets and ensure that BFD is what ends up dealing with such packets. This style of practice is fairly common in routers. - In the absence of a decapsulation mechanism, an address still needs to be chosen. But this now increases the provisioning overhead. And even so, carrying of that provisioning information to the necessary session state for BFD is out of scope of the spec - we just care that there's an address. If you don't like this practice, deployed as it is, please feel free to suggest an alternative that accomplishes the same goals. And be mindful, there's running code here. -- Jeff From nobody Thu Dec 19 12:13:04 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40E91120B93; Thu, 19 Dec 2019 12:13:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=XweYyXiv; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=hmQGmpQv Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id twkMyOhvu-zt; Thu, 19 Dec 2019 12:13:00 -0800 (PST) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4935F120A96; Thu, 19 Dec 2019 12:13:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6098; q=dns/txt; s=iport; t=1576786380; x=1577995980; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=xW85fga+bJs0RZrwpUp1r2iqo+egc4zRXAdao7iaTkg=; b=XweYyXivAvj8pBFiKbGp8mkWIDqTgqoPhpYNW8ECtgC436YffejoRD0y Xfu6v9b8C2Hkh0CyQPUUeb1+lizTZwnc+CZRh3U8mn83xfSRREG39NlMm 0d9JToTGZJs0wf8g05/IVB/kjgDv3Yk4cbz+PBolszSegeXupmWtAuZPe s=; IronPort-PHdr: =?us-ascii?q?9a23=3AOES9hhJnPGBB5m3VFdmcpTVXNCE6p7X5OBIU4Z?= =?us-ascii?q?M7irVIN76u5InmIFeBvKd2lFGcW4Ld5roEkOfQv636EU04qZea+DFnEtRXUg?= =?us-ascii?q?Mdz8AfngguGsmAXEbjLfHsZjAzNM9DT1RiuXq8NBsdFQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CcBQB22ftd/4gNJK1lHAEBAQEBBwE?= =?us-ascii?q?BEQEEBAEBgXyBTVAFbFggBAsqCoN8g0YDinOCX4EBlweCUgNUCQEBAQwBASU?= =?us-ascii?q?IAgEBhEACF4IFJDgTAgMNAQEEAQEBAgEFBG2FNwyFXgEBAQECARIREQwBATc?= =?us-ascii?q?BBAsCAQYCDgoCAiYCAgIwFQULAgQOBRsHgwABgkYDDiABDgORI5BkAoE4iGF?= =?us-ascii?q?1gTKCfgEBBYE1AYNvGIIMAwaBDiiJUIJJGoFBP4ERJyCCFzU+gmQCgWIBgxA?= =?us-ascii?q?ygiyPfjmdZHQKgjSHMo5mG5pRg0eTXI5YgycCBAIEBQIOAQEFgWkigVhwFTs?= =?us-ascii?q?qAYJBPhIYDY0SDBcVgzuFFIU/dIEojlwBgQ8BAQ?= X-IronPort-AV: E=Sophos;i="5.69,333,1571702400"; d="scan'208";a="386318340" Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 19 Dec 2019 20:12:59 +0000 Received: from XCH-ALN-005.cisco.com (xch-aln-005.cisco.com [173.36.7.15]) by alln-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id xBJKCxST017489 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 19 Dec 2019 20:12:59 GMT Received: from xhs-rtp-002.cisco.com (64.101.210.229) by XCH-ALN-005.cisco.com (173.36.7.15) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 19 Dec 2019 14:12:58 -0600 Received: from xhs-rcd-003.cisco.com (173.37.227.248) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 19 Dec 2019 15:12:57 -0500 Received: from NAM10-MW2-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Thu, 19 Dec 2019 14:12:57 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MqCy1nrbHNCWprk0YVN/UIg3ZWdMuPKQcJ4d4OOcy0ppN8T8+dyN3nvCG7ThF2b2bby36s767mCJcYGxubpEAwudGOekVddsOKOLtPbRmDYc0cCfifVxkWCz6xdfiienhLolFN0Q83gNg9vWSpf2IGj7UwmD/pD5pwTzw3kZcMVM5B/zu7krx+NGM9IRrk4CJ2w1UeuBFO4a7DwfQw9wLeiJ2x7mQcw16Z2ZGs2JbIz7HCJdbEULCscOxq2RTFRKruvvy0+JdFWJYRIvhJG6rwF/udG7bc2iltxaMKMrONGb3vigUVuwrQZcR7oJgVFh8erqIUHCE0EsKYq7YkgJqg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xW85fga+bJs0RZrwpUp1r2iqo+egc4zRXAdao7iaTkg=; b=UVJmVErzAkmQ4ZZfjoR/yUV+rcHpBs5JXIMv003MAL1RxnMcYw0/YyWP8VhovYBRxVngqsFe61TMKVRlMWcyQoi8dkAviKYr8kihdJnKtK5MXJk/p3CFQcW07W4OnZ8f7obSg6icLtJ4nY0j+znaU/IhgBmf0pGEz0E1SXcGO+awDfc7vl37y1Ien7z9vkZrjjxBp4G8AbBPINNO9+UsyqFwyp0TBzZUNA3WPb3ctfO/CdpYLMe0Grmzlv9UmOccNnLj/Nh72YtC3dteQ99Y9unfoA7AFfSu+Zjm9FBx4KVTjJ8WfUXYW6gpkXDj9vkB/3+Hljf+NMn8YtnFdJdyZw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xW85fga+bJs0RZrwpUp1r2iqo+egc4zRXAdao7iaTkg=; b=hmQGmpQvidJnOaUu87fmCg5EtQYlR2watG6zMv7/Gopx0v4V/VFPB2wrSYnkuDNOAtgYKT13nTfyfOxpxCNwCjLRHJXGczp4HSv/xX0tM6r2curfNYp7KsAamTFGOBn48ahsHfTujv5v6xBafEFJCeTQacGgyq9gRk/gda7NZ5E= Received: from BN6PR11MB0034.namprd11.prod.outlook.com (10.161.156.160) by BN6PR11MB3971.namprd11.prod.outlook.com (10.255.129.209) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2559.13; Thu, 19 Dec 2019 20:12:56 +0000 Received: from BN6PR11MB0034.namprd11.prod.outlook.com ([fe80::d4cf:20e6:8706:d006]) by BN6PR11MB0034.namprd11.prod.outlook.com ([fe80::d4cf:20e6:8706:d006%5]) with mapi id 15.20.2538.019; Thu, 19 Dec 2019 20:12:56 +0000 From: "Carlos Pignataro (cpignata)" To: Jeff Haas CC: "rtg-bfd@ietf.org" , "Eric Vyncke (evyncke)" , "draft-ietf-bfd-vxlan@ietf.org" , The IESG , "bfd-chairs@ietf.org" Subject: =?utf-8?B?UmU6IMOJcmljIFZ5bmNrZSdzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi1iZmQt?= =?utf-8?Q?vxlan-09:_(with_DISCUSS_and_COMMENT)?= Thread-Topic: =?utf-8?B?w4lyaWMgVnluY2tlJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLWJmZC12eGxh?= =?utf-8?Q?n-09:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHVtLc75ryADAJO5Ui6+24NC5naA6e+kjMAgAHIsoD//7wKAIAAV1IAgABfYYCAAPbrAIAAI2qA Date: Thu, 19 Dec 2019 20:12:56 +0000 Message-ID: <4744CBE3-E9EC-439D-B699-C301CFF200D3@cisco.com> References: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> <20191218203145.GD6488@pfrc.org> <20191218214102.GF6488@pfrc.org> <20191219180609.GA27686@pfrc.org> In-Reply-To: <20191219180609.GA27686@pfrc.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3608.40.2.2.4) authentication-results: spf=none (sender IP is ) smtp.mailfrom=cpignata@cisco.com; x-originating-ip: [173.38.117.67] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: b5f4e28d-3392-4ad1-aa5a-08d784bfd645 x-ms-traffictypediagnostic: BN6PR11MB3971: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0256C18696 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(39860400002)(376002)(346002)(366004)(136003)(199004)(189003)(6916009)(26005)(224303003)(6512007)(966005)(478600001)(2616005)(6506007)(71200400001)(33656002)(316002)(6486002)(8936002)(81156014)(54906003)(4326008)(81166006)(86362001)(186003)(2906002)(5660300002)(64756008)(66476007)(66446008)(66946007)(91956017)(66556008)(36756003)(76116006); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR11MB3971; H:BN6PR11MB0034.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: JZ+MtjBSOOiuVT8NyhjFGRhRppnnv6saNe5s6+z2xe1q+vYS7xzkypamocvM+rkIdSq/GTvobU730Qq1OyVp3aR7ejNRvqZg2fVLX2fjZlE/ZSt0g8ZkWIPlN4rNwThsu9sXodCVsY0H1QJXZd4rqtjicoJEsNMNAbTty2Qsx1lik5iikc6/2Qm+dSIgnShd9LX8LquysVEkEHcW55tf9SBju94kDZCMYJ9Hai/LmAVpH0evsKSIO64PapiJjTfs9PiVunb97Gh6NG5AG5+KNDaRLgR90HQnpLoWdxztTKxYw28bZwjLMSLNoaxOxgtpU5BF4DLN404Q2mpsS0wv0Ktkwho2c82AFWLEDjCbvtUijb8DZZi6NauNOdZYqL6RIYWohPTI4oiWlBQgWra8yrOHPceoOH3nHY3RxbIf34PB+FoD7kOhvpA1zHX35UtFUr0GPVY23CvAs/kI2WHMQCvfoe1CjuGDaMlkx3QSekY= Content-Type: text/plain; charset="utf-8" Content-ID: <794DFDDAC812F14680490BEAC941745D@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: b5f4e28d-3392-4ad1-aa5a-08d784bfd645 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Dec 2019 20:12:56.3514 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: +vd0JeDDkVSJJmgZEV/Uqxb33jr9CRh5QIlKPbi1tkHTSbqDeVlc7rbfV1QNhDgCGZdbAEtOeQWN6Pn6JunfTQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR11MB3971 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.15, xch-aln-005.cisco.com X-Outbound-Node: alln-core-3.cisco.com Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Dec 2019 20:13:02 -0000 SGksIEplZmYsDQoNCj4gMjAxOS8xMi8xOSDljYjlvowxOjA244CBSmVmZnJleSBIYWFzIDxqaGFh c0BwZnJjLm9yZz7jga7jg6Hjg7zjg6s6DQo+IA0KPiBDYXJsb3MsDQo+IA0KPiBPbiBUaHUsIERl YyAxOSwgMjAxOSBhdCAwMzoyMjoyOEFNICswMDAwLCBDYXJsb3MgUGlnbmF0YXJvIChjcGlnbmF0 YSkgd3JvdGU6DQo+Pj4gMjAxOS8xMi8xOCDljYjlvow0OjQx44CBSmVmZnJleSBIYWFzIDxqaGFh c0BwZnJjLm9yZz7jga7jg6Hjg7zjg6s6DQo+Pj4gQnV0IGdpdmVuIHRoYXQgcG9pbnQsIHdoYXQg cHJlY2lzZWx5IGlzIHRoZSBvYmplY3Rpb24gdG8gdGhlIGlubmVyIElQIGhlYWRlcg0KPj4+IG9m IHRoZSBCRkQgZm9yIHZ4bGFuIGhhdmluZyBhIFRUTCBvZiAxPw0KPj4gDQo+PiBUaGUgaW50ZW50 IHdvdWxkIGJlIHRvIHByb3RlY3Qgb2YgcG90ZW50aWFsIGF0dGFja3MgYmV5b25kIHRoZSBlbmNh cHN1bGF0aW5nIGVuZHBvaW50IChpLmUuLCBwYWNrZXQgY29taW5nIGludG8gdGhlIFZURVAgdnMu IHNvdXJjZWQsIG9mZi1saW5rIHNwb29maW5nKS4NCj4gDQo+IEknbSBzb3JyeSBpZiBJJ20gc2Vl aW5nIG9ibGl2aW91cywgYnV0IEknbSBtaXNzaW5nIHNvbWV0aGluZy4NCj4gDQoNCk5vIG5lZWQg dG8gYmUgc29ycnkg4oCUIHVzZWZ1bCBkaWFsb2d1ZSEgVGhhbmsgeW91IQ0KDQo+IFRoZSBlbmNh cHN1bGF0ZWQgcGFja2V0J3Mgb3V0ZXIgSVAgaGVhZGVyLCBpZiBzaW5nbGUgaG9wLCBjb3VsZCBj ZXJ0YWlubHkNCj4gYmVuZWZpdCBmcm9tIEdUU00gcHJvY2VkdXJlcy4NCj4gDQo+IEJ1dCBvbmNl IHlvdSdyZSBtb3JlIHRoYW4gb25lIGhvcCBhd2F5LCBhbmQgeW91J3JlIHZ1bG5lcmFibGUgdG8g Z2VuZXJhbA0KPiBhdHRhY2tzIGFnYWluc3QgcGFja2V0IGluc2VydGlvbiB0aGF0IHRoZSBiYXNl IHZ4bGFuIFBEVXMgaGF2ZSwgaG93IGV4YWN0bHkNCj4gZG9lcyBzZXR0aW5nIHRoZSBUVEwgb25l IHdheSBvciB0aGUgb3RoZXIgcHJvdmlkZSBwcm90ZWN0aW9uPw0KDQpUaGluayBvZiB0aGUgVlhM QU4gdHVubmVsIGFzIGEgc2lnbGUtaG9wIGxpbmsuIFllcywgbWlkcG9pbnQvaW4tdHJhbnNpdCBw YWNrZXQgaW5zZXJ0aW9uIGlzIGFuIGF0dGFjayB2ZWN0b3Igbm90IGNvdmVyZWQgYnkgR1RTTS1p bmcgdGhlIGlubmVyIElQLiBIb3dldmVyLCB0cmFmZmljIGZyb20gb3V0c2lkZSB0aGUgVlhMQU4g KGkuZS4sIGZyb20gb3V0c2lkZSB0aGUgaW5mcmFzdHJ1Y3R1cmUpIHJvdXRlZCBpbnRvIHRoZSB0 dW5uZWwgY291bGQgbm90IGhhdmUgYSAyNTUgVFRML0hMLg0KDQo+IA0KPj4+IEkgdGhpbmsgdGhp cyBpcyBwYXJ0aWFsbHkgYSBtYXR0ZXIgb2YgYXR0YWNrIHNwYWNlcyB2YXJ5aW5nIGRlcGVuZGlu ZyBvbg0KPj4+IHdoZXRoZXIgd2UncmUgdGFyZ2V0aW5nIHRoZSBtYW5hZ2VtZW50IFZOSSB2cy4g YSB0ZW5hbnQuICBJbiB0aGUgY2FzZSBvZiB0aGUNCj4+PiBtYW5hZ2VtZW50IFZOSSwgd2UgKHNo b3VsZCkgaGF2ZSB2ZXJ5IHN0cm9uZyBjb250cm9sIG92ZXIgd2hhdCBCRkQgdHJhZmZpYw0KPj4+ IGlzIGdldHRpbmcgZW5jYXBzdWxhdGVkLiAgDQo+Pj4gDQo+Pj4gSG93ZXZlciwgZm9yIHRlbmFu dCBWTkkgbW9kZSwgaXMgdGhlIGFyZ3VtZW50IHRoYXQgZGVwZW5kaW5nIG9uIHdoYXQgdGhlDQo+ Pj4gb3RoZXIgdnhsYW4gUERVIHBhcmFtZXRlcnMgbG9vayBsaWtlLCB0ZW5hbnQgc291cmNlZCBC RkQgUERVcyBtYXkgYmUNCj4+PiBpbmRpc3Rpbmd1aXNoYWJsZSBmcm9tIG9uZXMgc291cmNlZCBi eSB0aGUgbWFuYWdlbWVudCBpbmZyYXN0cnVjdHVyZT8gIEFuZA0KPj4+IGlmIHNvLCBob3cgd291 bGQgR1RTTSBoZWxwIHVzIGhlcmU/DQo+PiANCj4+IFRlbmFudCBzb3VyY2VkIEJGRCBQRFVzIHdv dWxkIG5vdCB1c2UgaG9zdCBsb29wYmFjayBkZXN0IGFkZHJlc3Nlcy4gU2Nhbm5pbmcgdGhyb3Vn aCBTNiBvZiBkcmFmdC1pZXRmLWJmZC12eGxhbi0wOSwgIk1BWSBzdXBwb3J0IHRoZSB1c2Ugb2Yg dGhlIE1hbmFnZW1lbnQgVk5J4oCdLg0KPj4gDQo+PiBBbmQgaWYgdGhlcmUgYXJlIGFscmVhZHkg cHJvdGVjdGlvbnMgZm9yIG5vdCBvdmVyLWZvcndhcmRpbmcgdGhlIEJGRCBwYWssIHRoZSBmbGlw LXF1ZXN0aW9uIGlzIOKAnHdoYXQgZG9lcyBUVEwgPSAxIGJ1ZyB5b3U/4oCdDQo+PiANCj4+IE15 IGFzc3VtcHRpb24gd2FzIHRoYXQgaWYgdGhlIGJhc2UgQkZEIHNwZWNzIHNheSDigJxHU1RNIGlz IHVzZWZ1bOKAnSwgd2h5IG5vdCBoZXJlPw0KPiANCj4gUGVyc29uYWxseSwgSSdtIG1vc3RseSBh bWJpdmFsZW50IGlmIGl0IGhlbHBzLiAgDQo+IA0KDQpJIGFtIGFsc28gbm90IGZpeGF0ZWQgaW4g YW55IHNvbHV0aW9uLiANCg0KSG93ZXZlciwgSSBhbSBub3QgYW1iaXZhbGVudCBhYm91dCBjb21t ZW50cyBiZWluZyBzaW1wbHkgaWdub3JlZC4gSSB3b3VsZCBsaWtlIHRoZSBFZGl0b3JzIGFuZCBw ZW4taG9sZGVycyBvZiB0aGlzIGRvY3VtZW50IHRvIGFjdHVhbGx5IHJlc3BvbmQgdG8gY29tbWVu dHMuDQoNCkkgYW0gbm90IGxvb2tpbmcgZm9yIGEgc3BlY2lmaWMgYW5zd2VyLCBidXQgSSBhbSBs b29raW5nIGZvciBhIHRob3VnaHRmdWwsIGRlbGliZXJhdGUsIGV4cGxpY2l0LCBhbmQgaW50ZW50 aW9uYWwgZGVjaXNpb24sIHNoYXJlZCBvbiB0aGUgbGlzdC4gVGhhdOKAmXMgdGhlIHJvbGUgb2Yg RWRpdG9ycy4NCg0KRm9yIGV4YW1wbGUsIHNlZSBjb21tZW50ICMyIGluIHRoaXMgbm90ZSBmcm9t IEp1bmUgMjAxOSBodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gvbXNnL3J0Zy1iZmQv Qkw5T2I2Nll4aWU0d1gxM3laSkVMYllQTEpzIA0KDQpUaGF0IGNvbW1lbnQsIGFzIHdlbGwgYXMg b3RoZXJzIG9uIHRoYXQgc2FtZSBub3RlLCB3ZXJlIG5vdCBldmVyIHJlc3BvbmRlZCB0byBvciBh Y2tub3dsZWRnZWQuDQoNCkkgcmVtaW5kZWQgdGhlIGVkaXRvciB0aGF0IHNvbWUgY29tbWVudHMg d2VyZSBub3QgYmVpbmcgYW5zd2VyZWQgdG86IGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcv YXJjaC9tc2cvcnRnLWJmZC91ekF0bGQtUDdxQjNCNXozTlZpRng4M29hR0ENCg0KU3RpbGwsIHRo YXQgdGhyZWFkIGRpZCBub3QgZXZlbiBhdHRlbXB0IHRvIGFuc3dlciBteSBxdWVzdGlvbiAjMi4N Cg0KPiBJZiBteSBvYnNlcnZhdGlvbiBhYm92ZSBhYm92ZSBhYm91dCBpbnNlcnRpb24gYXR0YWNr cyBpcyB2YWxpZCwgdGhlbiB1c2luZw0KPiBHVFNNIGZvciB0aGUgaW5uZXIgSVAgcGFja2V0IGlz bid0IGhlbHBmdWwgZm9yIHByb3RlY3RpbmcgYWdhaW5zdCB3aGF0IEdUU00NCj4gaXMgaW50ZW5k ZWQgZm9yLiAgVGhpcyBsZWF2ZSB1cyB3aXRoIHJvdWdobHkgdHdvIG1vZGVzOg0KDQpZZXMsIGl0 IGlzIHZhbGlkLCBidXQgaXQgaXMgbm90IHRoZSBvbmx5IGF0dGFjayB2ZWN0b3IuDQoNCj4gDQo+ IC0gV2l0aCBHVFNNLCBlbmZvcmNlIHRoZSB1c3VhbCByZWxhdGVkIEJGRCBwcm9jZWR1cmUuICBJ ZiBwYWNrZXRzIGFyZW4ndA0KPiAgImNhdWdodCIgYnkgQkZELCB0aGV5IGhhdmUgdGhlIHBvdGVu dGlhbCB0byBib3VuY2UgYXJvdW5kIHVudGlsIHRoZXkNCj4gIGV4cGlyZS4gIEVpdGhlciB3YXks IEJGRCBzaG91bGQgZ28gRG93biBhbmQgdGhlIG1heCBkYW1hZ2UgaXMgYSBudW1iZXIgb2YNCj4g IEJGRCBwYWNrZXRzIGV2ZW50dWFsbHkgc2V0dGxpbmcgYmFjayB0byB0aGUgMS9zZWMgdGltZXIu DQo+IC0gV2l0aG91dCBHVFNNLCBleGFjdGx5IHRoZSBzYW1lLCBqdXN0IHdpdGggbGVzcyBkaXN0 YW5jZS4NCj4gDQo+IFNvLCBwcmVzdW1pbmcgbXkgb2JzZXJ2YXRpb24gaXMgdmFsaWQ6DQo+IEl0 IGRvZXNuJ3QgaGVscC4NCj4gSXQgZG9lc24ndCBodXJ0IChtdWNoKS4NCj4gSWYgd2Ugd2FudCB0 byByZXF1aXJlIGl0LCBnbyBmb3IgaXQuDQo+IA0KDQpJIGhhdmUgdGhlIHNhbWUgcXVlc3Rpb24g YXMgYmVmb3JlIHRob3VnaC4NCg0KVG8gbWUgdGhlIHJlYWwgdmVjdG9yIG9mIHF1ZXN0aW9ucyBp czogSWYgdGhlIGJhc2UgR1RTTSBzcGVjIHJlcXVpcmVzIGl0LCB3aHkgaXMgdGhhdCByZXF1aXJl bWVudCByZWxheGVkPyBXaGVyZSBpcyBpdCBleHBsYWluZWQgaW4gdGhlIGRvY3VtZW50Pw0KDQo+ IEJ1dCBpdCBkb2Vzbid0IGhlbHAgeW91ciBzZWN1cml0eSBzdG9yeSBhdCBhbGwgYW5kIHVzaW5n IGl0IHBlcmhhcHMgY29uZnVzZXMNCj4gcGVvcGxlIGFib3V0IGl0IGFjdHVhbGx5IGhlbHBpbmcu ICBTbywgZG9uJ3QgaW5zaXN0IG9uIGl0IGZvciBzZWN1cml0eQ0KPiByZWFzb25zLg0KDQpJIHdv dWxkIHNheSDigJxkb27igJl0IGluc2lzdCBvbiBpdCBmb3IgZXZlcnkgcG9zc2libGUgc2VjdXJp dHkgcmVhc29u4oCdLiBUaGUgZmFjdCB0aGF0IHRoZXJlIGFyZSBzb21lIGNhc2VzIG5vdCBjb3Zl cmVkIGRvZXMgbm90IGltcGx5IHRoYXQgdGhlcmUgYXJlIG5vbmUuDQoNCg0KDQo+IA0KPiAtLSBK ZWZmDQoNCg== From nobody Thu Dec 19 12:33:44 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4C21120ACE; Thu, 19 Dec 2019 12:33:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JrhHBc28RMXT; Thu, 19 Dec 2019 12:33:33 -0800 (PST) Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id 7D2F7120A96; Thu, 19 Dec 2019 12:33:33 -0800 (PST) Received: by slice.pfrc.org (Postfix, from userid 1001) id 768ED1E2F6; Thu, 19 Dec 2019 15:38:04 -0500 (EST) Date: Thu, 19 Dec 2019 15:38:04 -0500 From: Jeffrey Haas To: "Carlos Pignataro (cpignata)" Cc: "rtg-bfd@ietf.org" , "Eric Vyncke (evyncke)" , "draft-ietf-bfd-vxlan@ietf.org" , The IESG , "bfd-chairs@ietf.org" Subject: Re: =?iso-8859-1?Q?=C9ric_Vyncke's_Discus?= =?iso-8859-1?Q?s?= on draft-ietf-bfd-vxlan-09: (with DISCUSS and COMMENT) Message-ID: <20191219203804.GB31892@pfrc.org> References: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> <20191218203145.GD6488@pfrc.org> <20191218214102.GF6488@pfrc.org> <20191219180609.GA27686@pfrc.org> <4744CBE3-E9EC-439D-B699-C301CFF200D3@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <4744CBE3-E9EC-439D-B699-C301CFF200D3@cisco.com> User-Agent: Mutt/1.5.21 (2010-09-15) Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Dec 2019 20:33:36 -0000 Carlos, On Thu, Dec 19, 2019 at 08:12:56PM +0000, Carlos Pignataro (cpignata) wrote: > > 2019/12/19 åˆå¾Œ1:06ã€Jeffrey Haas ã®ãƒ¡ãƒ¼ãƒ«: Interesting. You're a bit more multi-lingual that I knew. :-) > > The encapsulated packet's outer IP header, if single hop, could certainly > > benefit from GTSM procedures. > > > > But once you're more than one hop away, and you're vulnerable to general > > attacks against packet insertion that the base vxlan PDUs have, how exactly > > does setting the TTL one way or the other provide protection? > > Think of the VXLAN tunnel as a sigle-hop link. Yes, midpoint/in-transit packet insertion is an attack vector not covered by GTSM-ing the inner IP. However, traffic from outside the VXLAN (i.e., from outside the infrastructure) routed into the tunnel could not have a 255 TTL/HL. Right. That was the host attack from within tenant space that I was talking about earlier. But as you note here, that can also be an external insertion attack as well. > However, I am not ambivalent about comments being simply ignored. I would like the Editors and pen-holders of this document to actually respond to comments. As Shepherd, you have my apologies then. When I was reviewing the last set of comments, I thought I had caught all flagged messages with your open issues. But as you may note, the threads went very long. > I am not looking for a specific answer, but I am looking for a thoughtful, deliberate, explicit, and intentional decision, shared on the list. That’s the role of Editors. > > For example, see comment #2 in this note from June 2019 https://mailarchive.ietf.org/arch/msg/rtg-bfd/BL9Ob66Yxie4wX13yZJELbYPLJs Specifically covering this issue. > > That comment, as well as others on that same note, were not ever responded to or acknowledged. > > I reminded the editor that some comments were not being answered to: https://mailarchive.ietf.org/arch/msg/rtg-bfd/uzAtld-P7qB3B5z3NViFx83oaGA That one did go to list traffic and I did take time to cover what I believed was reasonable justification for not mentioning it. > > If my observation above above about insertion attacks is valid, then using > > GTSM for the inner IP packet isn't helpful for protecting against what GTSM > > is intended for. This leave us with roughly two modes: > > Yes, it is valid, but it is not the only attack vector. I'm unclear what you're flagging here. Yes, we can attack all sorts of things here, but we're discussing very specifically TTL and its use in mitigating attacks viz. GTSM. > > - With GTSM, enforce the usual related BFD procedure. If packets aren't > > "caught" by BFD, they have the potential to bounce around until they > > expire. Either way, BFD should go Down and the max damage is a number of > > BFD packets eventually settling back to the 1/sec timer. > > - Without GTSM, exactly the same, just with less distance. > > > > So, presuming my observation is valid: > > It doesn't help. > > It doesn't hurt (much). > > If we want to require it, go for it. > > > > I have the same question as before though. > > To me the real vector of questions is: If the base GTSM spec requires it, why is that requirement relaxed? Where is it explained in the document? See my prior ambivalence. :-) It's reasonable modulo one of the two prior implementations saying "this is a big deal!" to say "for our purposes, we wish to use the security considerations of 5881". As I noted for the IESG, the considerations we have currently reflect 5884. And while your explanation for 5884's situation was helpful, I'm not entirely clear why the vxlan encapsulation is so entirely different with regard to its impact vs. MPLS and thus the 5884 scenario. > > But it doesn't help your security story at all and using it perhaps confuses > > people about it actually helping. So, don't insist on it for security > > reasons. > > I would say “don’t insist on it for every possible security reasonâ€. The fact that there are some cases not covered does not imply that there are none. If there's at least one well articulated one, that's sufficient. What I'm trying to get talked into is that there is such reason where this really helps. If that's protecting vs. traffic that originates in the tenant's networking space that hits the tunnel and happens to be destined to an inner-IP address that is the tenant assigned address space that is not in the loopback network address space, that'll do. But it also feeds into my related commentary on some considerations are scenario specific. In particular, if we're using the 5884 loopback network trick, you can't originate such traffic from the tenant network. (Hopefully the IESG reviewers have noted this.) -- Jeff From nobody Thu Dec 19 13:38:38 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2BB101208B0; Thu, 19 Dec 2019 13:38:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Dp6aB6uq; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=qpepkSCQ Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CG8UR2FHddcy; Thu, 19 Dec 2019 13:38:34 -0800 (PST) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27A6A120865; Thu, 19 Dec 2019 13:38:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10096; q=dns/txt; s=iport; t=1576791514; x=1578001114; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=2X12owqghMumdGy2zbQXhSqe/Xj+NS8/l54n3fD1d80=; b=Dp6aB6uqGnnANEvIX2wgaiN88WXxdpLrjj7F62xrsmOqJXJY4sn0VCIT OHJnGu0P1yW0ciZyppAsbr9NThEasgoTf2JcBgsqc4Z5iwwOApSPVeWOh TegaIGTG3McoBlppUpYmeZPAA2z6oV/ctC6Q+44g63yKEYK0lMEEWAxuh c=; IronPort-PHdr: =?us-ascii?q?9a23=3AXNnZmhzEWjzeog3XCy+N+z0EezQntrPoPwUc9p?= =?us-ascii?q?sgjfdUf7+++4j5YhWN/u1j2VnOW4iTq+lJjebbqejBYSQB+t7A1RJKa5lQT1?= =?us-ascii?q?kAgMQSkRYnBZuOEUz0Kvf2ZgQxHd9JUxlu+HToeUU=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CwAABV7Ptd/5hdJa1lGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYF8gU1QBWxYIAQLKgqDfINGA4p0gl+YCIFCgRA?= =?us-ascii?q?DVAkBAQEMAQElCAIBAYRAAheCBSQ4EwIDDQEBBAEBAQIBBQRthTcMhV4BAQE?= =?us-ascii?q?BAgESEREMAQE3AQQLAgEGAg4KAgImAgICMBUFCwIEDgUigwABgkYDDiABDgO?= =?us-ascii?q?RFZBkAoE4iGF1gTKCfgEBBYE1AQMCg2IYggwDBoEOKIlQgkkagUE/gREnIIJ?= =?us-ascii?q?MPoJkAQEDgS0BDAYBHgGDEDKCLI0rglM5jziOLHQKgjSHMo5mG4JDh3mEQYt?= =?us-ascii?q?Ug0eNL4YtjliDJwIEAgQFAg4BAQWBaSJncXAVOyoBgkE+EhgNjRIMFxWDO4U?= =?us-ascii?q?UhT90gSiNLA4XgQsBgQ8BAQ?= X-IronPort-AV: E=Sophos;i="5.69,333,1571702400"; d="scan'208";a="393912822" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 19 Dec 2019 21:38:33 +0000 Received: from XCH-ALN-004.cisco.com (xch-aln-004.cisco.com [173.36.7.14]) by rcdn-core-1.cisco.com (8.15.2/8.15.2) with ESMTPS id xBJLcW82022134 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 19 Dec 2019 21:38:32 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-ALN-004.cisco.com (173.36.7.14) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 19 Dec 2019 15:38:31 -0600 Received: from xhs-rcd-002.cisco.com (173.37.227.247) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 19 Dec 2019 15:38:31 -0600 Received: from NAM04-CO1-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Thu, 19 Dec 2019 15:38:31 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=dOHBVEXT0ejZoRoUutcwgsd1xCKTdevNU76b8fneNTzoKqZRxhRc6RHzmq5LGpPkTocOCbxzX2znjQoBt1O2ScHo8aVMmRdq+uZtxXZ1294mZTKdR2lcSnXfpCtoNYhTqNZ/bv+fTt+Jj2p6V2CbcRgcgMl0FrRiUOr+dBSiFMGDJRDmBUpK/cekF5TjleZUYatPi8mGB8s3rt/0ARvNoe8wc0uqNLIN3ILmJgcXv3M5xZ0gy0N7MRKfJd8bd9KhPL9mjmLfonb9ZKYu+Bb7dwr/P0n21LJ+HCBuCJ3FsX4ksCW+wcSxgcqBVvFdoMLgO14ZHO89+YZ3tZSrc/5vsg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=2X12owqghMumdGy2zbQXhSqe/Xj+NS8/l54n3fD1d80=; b=h215k4ERV9+X8+2uGfgOM18F7FY5M44JaQObebD3+ooYqWtKUQyE7zSOWWPw+8S8owctokFpxMztk/PGG7PC5KqXZS78tExl23m46vBovnZNe9VCAl/khgWdZ2N94xv9LQb0PDbaTKfJcGZJLCkyQ2gIWhr57Y2EPvXsez1Xy6/YGufmw/KS8aMreKOOHcrazaXM+NBl1Hqo7AxHsXY265gp6PvJrRT1aEHxkqJbdxjtDtGQqIt7mz0gVHp9HmRzzCci8OzVDIGIGgq8WVff6+7tC8sjzZUstNl6kDG7IqmK7DykTMnU2abjaNOj802qnmWOp2GQsRQNmEZ1w6TmKA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=2X12owqghMumdGy2zbQXhSqe/Xj+NS8/l54n3fD1d80=; b=qpepkSCQHWTHeFI2uQ/DEHVYUpCKU9VU75pdPbraVeAY6l0AqBZjvq0jWUMQN+a4AVb8PW9NKyJPeY7m+EfP5Gt4ezL7NEDwWlaLpNl6+hpDsmbsWzeBSCCBHVzGK0v1GmAFb6hg1JNSCyneDVGca8r4VEB6X1EuZV/G5vs7XdE= Received: from BN6PR11MB0034.namprd11.prod.outlook.com (10.161.156.160) by BN6PR11MB1763.namprd11.prod.outlook.com (10.175.99.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2559.14; Thu, 19 Dec 2019 21:38:30 +0000 Received: from BN6PR11MB0034.namprd11.prod.outlook.com ([fe80::d4cf:20e6:8706:d006]) by BN6PR11MB0034.namprd11.prod.outlook.com ([fe80::d4cf:20e6:8706:d006%5]) with mapi id 15.20.2538.019; Thu, 19 Dec 2019 21:38:29 +0000 From: "Carlos Pignataro (cpignata)" To: Jeff Haas CC: "rtg-bfd@ietf.org" , "Eric Vyncke (evyncke)" , "draft-ietf-bfd-vxlan@ietf.org" , The IESG , "bfd-chairs@ietf.org" Subject: =?utf-8?B?UmU6IMOJcmljIFZ5bmNrZSdzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi1iZmQt?= =?utf-8?Q?vxlan-09:_(with_DISCUSS_and_COMMENT)?= Thread-Topic: =?utf-8?B?w4lyaWMgVnluY2tlJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLWJmZC12eGxh?= =?utf-8?Q?n-09:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHVtLc75ryADAJO5Ui6+24NC5naA6e+kjMAgAHIsoD//7wKAIAAV1IAgABfYYCAAPbrAIAAI2qAgAAHBwCAABDgAA== Date: Thu, 19 Dec 2019 21:38:29 +0000 Message-ID: References: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> <20191218203145.GD6488@pfrc.org> <20191218214102.GF6488@pfrc.org> <20191219180609.GA27686@pfrc.org> <4744CBE3-E9EC-439D-B699-C301CFF200D3@cisco.com> <20191219203804.GB31892@pfrc.org> In-Reply-To: <20191219203804.GB31892@pfrc.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3608.40.2.2.4) authentication-results: spf=none (sender IP is ) smtp.mailfrom=cpignata@cisco.com; x-originating-ip: [173.38.117.67] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: c1f47708-5713-4bc2-18b0-08d784cbc9f5 x-ms-traffictypediagnostic: BN6PR11MB1763: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0256C18696 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(136003)(39860400002)(346002)(376002)(396003)(199004)(189003)(51914003)(6486002)(966005)(66946007)(224303003)(316002)(54906003)(66446008)(6512007)(66556008)(64756008)(6916009)(71200400001)(76116006)(6506007)(91956017)(2906002)(4326008)(36756003)(5660300002)(186003)(66476007)(33656002)(86362001)(81156014)(81166006)(26005)(478600001)(2616005)(8936002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR11MB1763; H:BN6PR11MB0034.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: c1f47708-5713-4bc2-18b0-08d784cbc9f5 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Dec 2019 21:38:29.2298 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: NUGsXHSYAmLa83qZwPfhj8srV7IbxBNRNlS9hb6xiQ61P9NoNIbQImkjlmMeBDj8ZuhvVKwVknB7NSMPO+W7Kg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR11MB1763 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.14, xch-aln-004.cisco.com X-Outbound-Node: rcdn-core-1.cisco.com Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Dec 2019 21:38:37 -0000 SGksIEplZmYsDQoNClRoYW5rcyBmb3IgdGhlIGRhaWxvZ3VlIGFuZCBwbGVhc2Ugc2VlIGlubGlu ZSBzb21lIGZvbGxvdy11cHMuDQoNCj4gMjAxOS8xMi8xOSDljYjlvowzOjM444CBSmVmZnJleSBI YWFzIDxqaGFhc0BwZnJjLm9yZz7jga7jg6Hjg7zjg6s6DQo+IA0KPiBDYXJsb3MsDQo+IA0KPiBP biBUaHUsIERlYyAxOSwgMjAxOSBhdCAwODoxMjo1NlBNICswMDAwLCBDYXJsb3MgUGlnbmF0YXJv IChjcGlnbmF0YSkgd3JvdGU6DQo+Pj4gMjAxOS8xMi8xOSDljYjlvowxOjA244CBSmVmZnJleSBI YWFzIDxqaGFhc0BwZnJjLm9yZz7jga7jg6Hjg7zjg6s6DQo+IA0KPiBJbnRlcmVzdGluZy4gIFlv dSdyZSBhIGJpdCBtb3JlIG11bHRpLWxpbmd1YWwgdGhhdCBJIGtuZXcuIDotKQ0KDQpJIGNhbiBy ZWFkIEVtb2ppIDotKSANCg0KPiANCj4+PiBUaGUgZW5jYXBzdWxhdGVkIHBhY2tldCdzIG91dGVy IElQIGhlYWRlciwgaWYgc2luZ2xlIGhvcCwgY291bGQgY2VydGFpbmx5DQo+Pj4gYmVuZWZpdCBm cm9tIEdUU00gcHJvY2VkdXJlcy4NCj4+PiANCj4+PiBCdXQgb25jZSB5b3UncmUgbW9yZSB0aGFu IG9uZSBob3AgYXdheSwgYW5kIHlvdSdyZSB2dWxuZXJhYmxlIHRvIGdlbmVyYWwNCj4+PiBhdHRh Y2tzIGFnYWluc3QgcGFja2V0IGluc2VydGlvbiB0aGF0IHRoZSBiYXNlIHZ4bGFuIFBEVXMgaGF2 ZSwgaG93IGV4YWN0bHkNCj4+PiBkb2VzIHNldHRpbmcgdGhlIFRUTCBvbmUgd2F5IG9yIHRoZSBv dGhlciBwcm92aWRlIHByb3RlY3Rpb24/DQo+PiANCj4+IFRoaW5rIG9mIHRoZSBWWExBTiB0dW5u ZWwgYXMgYSBzaWdsZS1ob3AgbGluay4gWWVzLCBtaWRwb2ludC9pbi10cmFuc2l0IHBhY2tldCBp bnNlcnRpb24gaXMgYW4gYXR0YWNrIHZlY3RvciBub3QgY292ZXJlZCBieSBHVFNNLWluZyB0aGUg aW5uZXIgSVAuIEhvd2V2ZXIsIHRyYWZmaWMgZnJvbSBvdXRzaWRlIHRoZSBWWExBTiAoaS5lLiwg ZnJvbSBvdXRzaWRlIHRoZSBpbmZyYXN0cnVjdHVyZSkgcm91dGVkIGludG8gdGhlIHR1bm5lbCBj b3VsZCBub3QgaGF2ZSBhIDI1NSBUVEwvSEwuDQo+IA0KPiBSaWdodC4gIFRoYXQgd2FzIHRoZSBo b3N0IGF0dGFjayBmcm9tIHdpdGhpbiB0ZW5hbnQgc3BhY2UgdGhhdCBJIHdhcyB0YWxraW5nDQo+ IGFib3V0IGVhcmxpZXIuICBCdXQgYXMgeW91IG5vdGUgaGVyZSwgdGhhdCBjYW4gYWxzbyBiZSBh biBleHRlcm5hbCBpbnNlcnRpb24NCj4gYXR0YWNrIGFzIHdlbGwuDQo+IA0KPj4gSG93ZXZlciwg SSBhbSBub3QgYW1iaXZhbGVudCBhYm91dCBjb21tZW50cyBiZWluZyBzaW1wbHkgaWdub3JlZC4g SSB3b3VsZCBsaWtlIHRoZSBFZGl0b3JzIGFuZCBwZW4taG9sZGVycyBvZiB0aGlzIGRvY3VtZW50 IHRvIGFjdHVhbGx5IHJlc3BvbmQgdG8gY29tbWVudHMuDQo+IA0KPiBBcyBTaGVwaGVyZCwgeW91 IGhhdmUgbXkgYXBvbG9naWVzIHRoZW4uICBXaGVuIEkgd2FzIHJldmlld2luZyB0aGUgbGFzdCBz ZXQNCj4gb2YgY29tbWVudHMsIEkgdGhvdWdodCBJIGhhZCBjYXVnaHQgYWxsIGZsYWdnZWQgbWVz c2FnZXMgd2l0aCB5b3VyIG9wZW4NCj4gaXNzdWVzLiAgQnV0IGFzIHlvdSBtYXkgbm90ZSwgdGhl IHRocmVhZHMgd2VudCB2ZXJ5IGxvbmcuDQoNCk9oLCBubywgbm8gbmVlZC4gSSB0aGluayB0aGVy ZeKAmXMgc2hhcmVkIHJlc3BvbnNpYmlsaXR5IGJldHdlZW4gdGhlIGVkaXRvcnMsIHNoZXBoZXJk LCBhbmQgV0cgYXMgYSB3aG9sZS4gQnV0IGl0IHJlYWxseSBzdGFydHMgd2l0aCB0aGUgZWRpdG9y cy4NCg0KTm90IGhhdmluZyBhbiBhZ3JlZWQtdXBvbiB0cmFja2luZyBzeXN0ZW0gaW4gdGhlIElF VEYgZG9lcyBub3QgaGVscCBlaXRoZXLigKYNCg0KV2hpbGUgYXQgaXQsIHRob3VnaCwgb3V0IG9m IHRoZSA2IGlzc3VlcyBicm91Z2h0IHVwIG9uIHRoYXQgZW1haWwsIEkgb25seSBzYXcgYSByZXNw b25zZSB0byBpc3N1ZSAjNCAoYW5kIG5vdCB3ZSBhcmUgZGlzY3Vzc2luZyBJc3N1ZSAjMikuIEkg d291bGQgbm90IG1pbmQgdGhlIGF1dGhvcnMgcmVzcG9uZGluZyB0byB0aGUgb3RoZXJzIDotKSAN Cg0KPiANCj4+IEkgYW0gbm90IGxvb2tpbmcgZm9yIGEgc3BlY2lmaWMgYW5zd2VyLCBidXQgSSBh bSBsb29raW5nIGZvciBhIHRob3VnaHRmdWwsIGRlbGliZXJhdGUsIGV4cGxpY2l0LCBhbmQgaW50 ZW50aW9uYWwgZGVjaXNpb24sIHNoYXJlZCBvbiB0aGUgbGlzdC4gVGhhdOKAmXMgdGhlIHJvbGUg b2YgRWRpdG9ycy4NCj4+IA0KPj4gRm9yIGV4YW1wbGUsIHNlZSBjb21tZW50ICMyIGluIHRoaXMg bm90ZSBmcm9tIEp1bmUgMjAxOSBodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gvbXNn L3J0Zy1iZmQvQkw5T2I2Nll4aWU0d1gxM3laSkVMYllQTEpzIA0KPiANCj4gU3BlY2lmaWNhbGx5 IGNvdmVyaW5nIHRoaXMgaXNzdWUuDQo+IA0KPj4gDQo+PiBUaGF0IGNvbW1lbnQsIGFzIHdlbGwg YXMgb3RoZXJzIG9uIHRoYXQgc2FtZSBub3RlLCB3ZXJlIG5vdCBldmVyIHJlc3BvbmRlZCB0byBv ciBhY2tub3dsZWRnZWQuDQo+PiANCj4+IEkgcmVtaW5kZWQgdGhlIGVkaXRvciB0aGF0IHNvbWUg Y29tbWVudHMgd2VyZSBub3QgYmVpbmcgYW5zd2VyZWQgdG86IGh0dHBzOi8vbWFpbGFyY2hpdmUu aWV0Zi5vcmcvYXJjaC9tc2cvcnRnLWJmZC91ekF0bGQtUDdxQjNCNXozTlZpRng4M29hR0ENCj4g DQo+IFRoYXQgb25lIGRpZCBnbyB0byBsaXN0IHRyYWZmaWMgYW5kIEkgZGlkIHRha2UgdGltZSB0 byBjb3ZlciB3aGF0IEkgYmVsaWV2ZWQNCj4gd2FzIHJlYXNvbmFibGUganVzdGlmaWNhdGlvbiBm b3Igbm90IG1lbnRpb25pbmcgaXQuDQo+IA0KPj4+IElmIG15IG9ic2VydmF0aW9uIGFib3ZlIGFi b3ZlIGFib3V0IGluc2VydGlvbiBhdHRhY2tzIGlzIHZhbGlkLCB0aGVuIHVzaW5nDQo+Pj4gR1RT TSBmb3IgdGhlIGlubmVyIElQIHBhY2tldCBpc24ndCBoZWxwZnVsIGZvciBwcm90ZWN0aW5nIGFn YWluc3Qgd2hhdCBHVFNNDQo+Pj4gaXMgaW50ZW5kZWQgZm9yLiAgVGhpcyBsZWF2ZSB1cyB3aXRo IHJvdWdobHkgdHdvIG1vZGVzOg0KPj4gDQo+PiBZZXMsIGl0IGlzIHZhbGlkLCBidXQgaXQgaXMg bm90IHRoZSBvbmx5IGF0dGFjayB2ZWN0b3IuDQo+IA0KPiBJJ20gdW5jbGVhciB3aGF0IHlvdSdy ZSBmbGFnZ2luZyBoZXJlLiAgWWVzLCB3ZSBjYW4gYXR0YWNrIGFsbCBzb3J0cyBvZg0KPiB0aGlu Z3MgaGVyZSwgYnV0IHdlJ3JlIGRpc2N1c3NpbmcgdmVyeSBzcGVjaWZpY2FsbHkgVFRMIGFuZCBp dHMgdXNlIGluDQo+IG1pdGlnYXRpbmcgYXR0YWNrcyB2aXouIEdUU00uDQo+IA0KPj4+IC0gV2l0 aCBHVFNNLCBlbmZvcmNlIHRoZSB1c3VhbCByZWxhdGVkIEJGRCBwcm9jZWR1cmUuICBJZiBwYWNr ZXRzIGFyZW4ndA0KPj4+ICJjYXVnaHQiIGJ5IEJGRCwgdGhleSBoYXZlIHRoZSBwb3RlbnRpYWwg dG8gYm91bmNlIGFyb3VuZCB1bnRpbCB0aGV5DQo+Pj4gZXhwaXJlLiAgRWl0aGVyIHdheSwgQkZE IHNob3VsZCBnbyBEb3duIGFuZCB0aGUgbWF4IGRhbWFnZSBpcyBhIG51bWJlciBvZg0KPj4+IEJG RCBwYWNrZXRzIGV2ZW50dWFsbHkgc2V0dGxpbmcgYmFjayB0byB0aGUgMS9zZWMgdGltZXIuDQo+ Pj4gLSBXaXRob3V0IEdUU00sIGV4YWN0bHkgdGhlIHNhbWUsIGp1c3Qgd2l0aCBsZXNzIGRpc3Rh bmNlLg0KPj4+IA0KPj4+IFNvLCBwcmVzdW1pbmcgbXkgb2JzZXJ2YXRpb24gaXMgdmFsaWQ6DQo+ Pj4gSXQgZG9lc24ndCBoZWxwLg0KPj4+IEl0IGRvZXNuJ3QgaHVydCAobXVjaCkuDQo+Pj4gSWYg d2Ugd2FudCB0byByZXF1aXJlIGl0LCBnbyBmb3IgaXQuDQo+Pj4gDQo+PiANCj4+IEkgaGF2ZSB0 aGUgc2FtZSBxdWVzdGlvbiBhcyBiZWZvcmUgdGhvdWdoLg0KPj4gDQo+PiBUbyBtZSB0aGUgcmVh bCB2ZWN0b3Igb2YgcXVlc3Rpb25zIGlzOiBJZiB0aGUgYmFzZSBHVFNNIHNwZWMgcmVxdWlyZXMg aXQsIHdoeSBpcyB0aGF0IHJlcXVpcmVtZW50IHJlbGF4ZWQ/IFdoZXJlIGlzIGl0IGV4cGxhaW5l ZCBpbiB0aGUgZG9jdW1lbnQ/DQo+IA0KPiBTZWUgbXkgcHJpb3IgYW1iaXZhbGVuY2UuIDotKSAg SXQncyByZWFzb25hYmxlIG1vZHVsbyBvbmUgb2YgdGhlIHR3byBwcmlvcg0KPiBpbXBsZW1lbnRh dGlvbnMgc2F5aW5nICJ0aGlzIGlzIGEgYmlnIGRlYWwhIiB0byBzYXkgImZvciBvdXIgcHVycG9z ZXMsIHdlDQo+IHdpc2ggdG8gdXNlIHRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBvZiA1ODgx Ii4gIEFzIEkgbm90ZWQgZm9yIHRoZSBJRVNHLA0KPiB0aGUgY29uc2lkZXJhdGlvbnMgd2UgaGF2 ZSBjdXJyZW50bHkgcmVmbGVjdCA1ODg0LiAgQW5kIHdoaWxlIHlvdXINCj4gZXhwbGFuYXRpb24g Zm9yIDU4ODQncyBzaXR1YXRpb24gd2FzIGhlbHBmdWwsIEknbSBub3QgZW50aXJlbHkgY2xlYXIg d2h5IHRoZQ0KPiB2eGxhbiBlbmNhcHN1bGF0aW9uIGlzIHNvIGVudGlyZWx5IGRpZmZlcmVudCB3 aXRoIHJlZ2FyZCB0byBpdHMgaW1wYWN0IHZzLg0KPiBNUExTIGFuZCB0aHVzIHRoZSA1ODg0IHNj ZW5hcmlvLg0KDQpUaGlzIGlzIGEgbW9zdCB1c2VmdWwgY2xhcmlmaWNhdGlvbiBhbmQgcGVyaGFw cyBnb2VzIHRvIHRoZSBjb3JlIG9mIHRoZSBkaWZmZXJlbnQgaW4gcGVyc3BlY3RpdmUuDQoNClRv IG1lLCBSRkMgNTg4NCBpcyBub3QgdGhlIG1vc3Qgc2ltaWxhciBzY2VuYXJpbyB0byBWWExBTi4g UkZDIDU4ODQgY29uY2VybnMgaXRzZWxmIHdpdGggYSB1bmktZGlyZWN0aW9uYWwgbGFiZWwtc3dh cHBpbmctb3ItcG9wcGluZy1ob3AtYnktaG9wIHBhcmFkaWdtIHdoZXJlIHBvcHBpbmcgdG9vIG1h bnkgTGFiZWwgU3RhY2sgRW50cmllcyAoTFNFcykgaW4tZmxpZ2h0IG1pZC10dW5uZWwgd291bGQg ZXhwb3NlIHRoZSBpbm5lciBwYWNrZXQgdG8gdGhlIHBvaW50IG9mIGJlaW5nIG1pcy1mb3J3YXJk ZWQgYW5kIGxldCBsb29zZSBpbiB0aGUgY29yZSBpbmZyYXN0cnVjdHVyZS4gDQoNClRoZSBzYW1l IGlzIG5vdCB0aGUgY2FzZSBmb3IgVlhMQU4sIHdoaWNoIHJlYWxseSBzZWVtcyBtb3JlIHNpbWls YXIgdG8gUkZDIDU4ODUgb3IgNTg4MSwgdGhlIGZvcm1lciBzYXlpbmc6DQogICAgICBUaGUgVGlt ZSB0bw0KICAgICAgTGl2ZS9Ib3AgTGltaXQgYW5kIEdlbmVyYWxpemVkIFRUTCBTZWN1cml0eSBN ZWNoYW5pc20gKEdUU00pDQogICAgICBwcm9jZWR1cmVzIGZyb20gU2VjdGlvbiA1IG9mIFtSRkM1 ODgxXSBhcHBseSB0byB0aGlzDQogICAgICBlbmNhcHN1bGF0aW9uLCBhbmQgaGVuY2UgdGhlIFRU TC9Ib3AgTGltaXQgaXMgc2V0IHRvIDI1NS4NCg0KDQpBbmQgd2hpbGUgbG9va2luZyBhdCB0aGlz LCB0aGUgZG9jdW1lbnQgc2VlbXMgdG8gc2hvdyBmdXJ0aGVyIGNvbmZ1c2lvbiBhcm91bmQgdGhp cy4NCg0KUzkgb2YgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtYmZkLXZ4 bGFuLTA5IHNheXM6DQoNCiAgIFRoaXMgZG9jdW1lbnQgcmVjb21tZW5kcyB1c2luZyBhbiBhZGRy ZXNzIGZyb20gdGhlIEludGVybmFsIGhvc3QNCiAgIGxvb3BiYWNrIGFkZHJlc3NlcyAoMTI3Lzgg cmFuZ2UgZm9yIElQdjQgYW5kDQogICAwOjA6MDowOjA6RkZGRjo3RjAwOjAvMTA0IHJhbmdlIGZv ciBJUHY2KSBhcyB0aGUgZGVzdGluYXRpb24gSVANCiAgIGFkZHJlc3MgaW4gdGhlIGlubmVyIElQ IGhlYWRlci4gIFVzaW5nIHN1Y2ggYWRkcmVzcyBwcmV2ZW50cyB0aGUNCiAgIGZvcndhcmRpbmcg b2YgdGhlIGVuY2Fwc3VsYXRlZCBCRkQgY29udHJvbCBtZXNzYWdlIGJ5IGEgdHJhbnNpZW50DQog ICBub2RlIGluIGNhc2UgdGhlIFZYTEFOIHR1bm5lbCBpcyBicm9rZW4gYXMgYWNjb3JkaW5nIHRv IFtSRkMxODEyXToNCg0KDQpIb3dldmVyLCBhIHRyYW5zaWVudCBub2RlIGNhbm5vdCBleHBvc2Ug dGhlIElubmVyIGhlYWRlciBzaW5jZSBpdCBkb2VzIG5vdCB1bmRlcnN0YW5kIFZYTEFOIG9yIHRo ZSBjb250ZXh0IG9mIFZYTEFO4oCmIHRoYXTigJlzIHRoZSBkaWZmZXJlbmNlIHdpdGggTVBMUy4u LiANCg0KPiANCj4+PiBCdXQgaXQgZG9lc24ndCBoZWxwIHlvdXIgc2VjdXJpdHkgc3RvcnkgYXQg YWxsIGFuZCB1c2luZyBpdCBwZXJoYXBzIGNvbmZ1c2VzDQo+Pj4gcGVvcGxlIGFib3V0IGl0IGFj dHVhbGx5IGhlbHBpbmcuICBTbywgZG9uJ3QgaW5zaXN0IG9uIGl0IGZvciBzZWN1cml0eQ0KPj4+ IHJlYXNvbnMuDQo+PiANCj4+IEkgd291bGQgc2F5IOKAnGRvbuKAmXQgaW5zaXN0IG9uIGl0IGZv ciBldmVyeSBwb3NzaWJsZSBzZWN1cml0eSByZWFzb27igJ0uIFRoZSBmYWN0IHRoYXQgdGhlcmUg YXJlIHNvbWUgY2FzZXMgbm90IGNvdmVyZWQgZG9lcyBub3QgaW1wbHkgdGhhdCB0aGVyZSBhcmUg bm9uZS4NCj4gDQo+IElmIHRoZXJlJ3MgYXQgbGVhc3Qgb25lIHdlbGwgYXJ0aWN1bGF0ZWQgb25l LCB0aGF0J3Mgc3VmZmljaWVudC4gIFdoYXQgSSdtDQo+IHRyeWluZyB0byBnZXQgdGFsa2VkIGlu dG8gaXMgdGhhdCB0aGVyZSBpcyBzdWNoIHJlYXNvbiB3aGVyZSB0aGlzIHJlYWxseQ0KPiBoZWxw cy4NCj4gDQo+IElmIHRoYXQncyBwcm90ZWN0aW5nIHZzLiB0cmFmZmljIHRoYXQgb3JpZ2luYXRl cyBpbiB0aGUgdGVuYW50J3MgbmV0d29ya2luZw0KPiBzcGFjZSB0aGF0IGhpdHMgdGhlIHR1bm5l bCBhbmQgaGFwcGVucyB0byBiZSBkZXN0aW5lZCB0byBhbiBpbm5lci1JUCBhZGRyZXNzDQo+IHRo YXQgaXMgdGhlIHRlbmFudCBhc3NpZ25lZCBhZGRyZXNzIHNwYWNlIHRoYXQgaXMgbm90IGluIHRo ZSBsb29wYmFjaw0KPiBuZXR3b3JrIGFkZHJlc3Mgc3BhY2UsIHRoYXQnbGwgZG8uICBCdXQgaXQg YWxzbyBmZWVkcyBpbnRvIG15IHJlbGF0ZWQNCj4gY29tbWVudGFyeSBvbiBzb21lIGNvbnNpZGVy YXRpb25zIGFyZSBzY2VuYXJpbyBzcGVjaWZpYy4gIEluIHBhcnRpY3VsYXIsIGlmDQo+IHdlJ3Jl IHVzaW5nIHRoZSA1ODg0IGxvb3BiYWNrIG5ldHdvcmsgdHJpY2ssIHlvdSBjYW4ndCBvcmlnaW5h dGUgc3VjaA0KPiB0cmFmZmljIGZyb20gdGhlIHRlbmFudCBuZXR3b3JrLiAgKEhvcGVmdWxseSB0 aGUgSUVTRyByZXZpZXdlcnMgaGF2ZSBub3RlZA0KPiB0aGlzLikNCj4gDQoNClRoYXTigJlzIGV4 YWN0bHkgdGhlIGNhc2Ug4oCUIHRyYWZmaWMgb24gdGhlIHRlbmFudOKAmXMgbmV0d29yayBiZWlu ZyB0dW5uZWxlZC4gVGhleSBhcmUgc2NlbmFyaW8tc3BlY2lmaWMgYW5kIHRoaW5uZXIgYnV0IG5v bi1udWxsLg0KDQpZb3VyIGNvbW1lbnQgYWJvdXQgdGhlIGRlc3RpbmF0aW9uIGFkZHJlc3MgYmVp bmcgYSBsb29wYmFjayBpcyB1c2VmdWwuIFRoZSBkb2N1bWVudCBzYXlzIFNIT1VMRCwgbm90IE1V U1QgdXNlIDEyNy84IG9yIDo6RkZGRjoxMjcuMC4wLjAvMTA0Lg0KDQpUaGFuayB5b3UsDQoNCkNh cmxvcy4NCg0KPiAtLSBKZWZmDQoNCg== From nobody Thu Dec 19 17:46:07 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 93482120044; Thu, 19 Dec 2019 17:46:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FBUTKTDyack0; Thu, 19 Dec 2019 17:45:58 -0800 (PST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6743D12000F; Thu, 19 Dec 2019 17:45:58 -0800 (PST) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id xBK1jr0O001864 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 19 Dec 2019 20:45:56 -0500 Date: Thu, 19 Dec 2019 17:45:52 -0800 From: Benjamin Kaduk To: Jeffrey Haas Cc: The IESG , draft-ietf-bfd-vxlan@ietf.org, bfd-chairs@ietf.org, rtg-bfd@ietf.org Subject: Re: Benjamin Kaduk's Discuss on draft-ietf-bfd-vxlan-09: (with DISCUSS and COMMENT) Message-ID: <20191220014552.GG35479@kduck.mit.edu> References: <157653979360.24617.1864402887480503965.idtracker@ietfa.amsl.com> <20191218202448.GC6488@pfrc.org> <20191218220246.GK81833@kduck.mit.edu> <20191218221823.GG6488@pfrc.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20191218221823.GG6488@pfrc.org> User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Dec 2019 01:46:01 -0000 Hi Jeff, On Wed, Dec 18, 2019 at 05:18:24PM -0500, Jeffrey Haas wrote: > Ben, > > On Wed, Dec 18, 2019 at 02:02:46PM -0800, Benjamin Kaduk wrote: > > On Wed, Dec 18, 2019 at 03:24:48PM -0500, Jeffrey Haas wrote: > > > This is a clean summary of the considerations. At least a portion of the WG > > > seems to be comfortable with "test to the management VNI". However, another > > > (smaller, I believe) portion were wanting to test one layer further in. > > > > It is reassuring that I at least managed to summarize the situation > > tolerably. Is it fair to say that testing "one layer further in" is a > > superset of what "test to the managemenet VNI" can do? > > Fundamentally, this is all BFD. The issue is almost always considerations > related to encapsulation. > > The meta concern here is that if you test to the management VNI, the > operator has a lot of control over things that are clean from a security > perspective. > > The minute you test one layer deeper, it's still the same thing... but you > now have a lot of sharp edges you have to worry about. > > In all of these situations, the main consideration from a security > perspective and an encapsulation perspective is "don't step on the toes of > the user". But that said, vxlan environments are provided to contain > tenants, have their own provisioning ecosystems, and security considerations > in how they are provisioned and operated. As long as the security and > operational considerations are understood by the operator, they can decide > whether "testing one layer further in" gives them good benefit vs. the > additional security considerations. > > And that said, two fundamental portions of BFD operations and security still > apply here: > - Discriminators need to be known to mess with existing sessions. This > means the main consideration for someone not in the tenant environment is > privacy. Such privacy is an overall consideration for vxlan environments. > - Authentication mechanisms in BFD may still be deployed which further > reduce the attack space. > > Basically, if your vxlan environment is appropriately operated and secured, > the main attacker of this session is the tenant itself. And they have all > sorts of bad things they can do to knock down their own reachability from > one VTEP to another. I.e. it's a stupid attack. :-) I think in this message you've managed to get a pithy form of both main flavors of my concern: "don't step on the toes of the user" and "[the tenant has] all sorts of bad things they can do to knock down their own reachability" :) Less pithily, to keep the isolation between tenant and infrastructure, the tenant can't send stuff that gets interpreted by the infrastructure [as directed at the infrastructure], and the infrastructure can't intercept and parse as directed at itself tenant traffic. As you note, the former is likely not a terribly interesting attack, as the scope ought to be limited to just knocking out the tenant's own connection. So I'm more concerned about the latter case -- making sure the infrastructure doesn't eat up something the tenant wanted to send over the tunnel. That includes all sorts of weird things tenants might try to do, that might not even be fully in spec (depending on what the contract between tenant and provider looks like, I suppose). There's several technologies involved here that I don't have a great handle on, so I'm hoping to see an explanation of how that's prevented, in a simple enough fashion for my tiny brain to take in. -Ben From nobody Thu Dec 19 18:00:57 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02DF3120013; Thu, 19 Dec 2019 18:00:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LXPo2AsyP9Cs; Thu, 19 Dec 2019 18:00:49 -0800 (PST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9377B12000F; Thu, 19 Dec 2019 18:00:49 -0800 (PST) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id xBK20jIQ006816 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 19 Dec 2019 21:00:47 -0500 Date: Thu, 19 Dec 2019 18:00:44 -0800 From: Benjamin Kaduk To: Jeffrey Haas Cc: rtg-bfd@ietf.org, draft-ietf-bfd-vxlan@ietf.org, The IESG , bfd-chairs@ietf.org Subject: Re: Benjamin Kaduk's Discuss on draft-ietf-bfd-vxlan-09: (with DISCUSS and COMMENT) Message-ID: <20191220020044.GH35479@kduck.mit.edu> References: <157653979360.24617.1864402887480503965.idtracker@ietfa.amsl.com> <20191218202448.GC6488@pfrc.org> <20191218220246.GK81833@kduck.mit.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20191218220246.GK81833@kduck.mit.edu> User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Dec 2019 02:00:52 -0000 On Wed, Dec 18, 2019 at 02:02:46PM -0800, Benjamin Kaduk wrote: > Hi Jeff, > > I think I can only touch on a few points before telechat-time rolls around, > and will finish off afterwards. as promised... > On Wed, Dec 18, 2019 at 03:24:48PM -0500, Jeffrey Haas wrote: > > Benjamin, > > > > On Mon, Dec 16, 2019 at 03:43:13PM -0800, Benjamin Kaduk via Datatracker wrote: > > > Benjamin Kaduk has entered the following ballot position for > > > ---------------------------------------------------------------------- > > > DISCUSS: > > > ---------------------------------------------------------------------- > > > > > > I have a few points that I think merit IESG discussion. > > > > > > (1) I see that several directorate reviewers expressed unease at the > > > destination (IP and) MAC address assignment procedure for the inner > > > VXLAN headers, and appreciate that there was extensive on-list > > > discussion (more than I could follow). That said, I failed to find a > > > clear statement of why the current text is believed to be safe, and in > > > fact my reading of the current text is that the described procedure is > > > *not* safe. Pointers to key parts of the WG discusison would be more > > > than welcome! > > > > One high level point that likely didn't survive the rather verbose comment > > chain is there are two implementations of this draft. Some of the > > considerations covered in the guidance here is "please don't break shipping > > code". > > > > While this is IETF, and shipping code isn't always a blocking point to > > document changes, I'd suggest that as a consideration. > > It did indeed not survive (at least my pass through) the comment chain, so > thank you for calling it out. It is indeed a consideration, and I expect > some actual discussion on the call tomorrow. > > > > To take something of a high-level view of my concerns, if we think of > > > the VXLAN as being a tunnel between VTEPs that carry encapsulated tenant > > > traffic, then what we're trying to do is roughly like BFD between VTEPs, > > > but we want to get fault-detection over as broad a coverage as we can > > > (the "outermost part of the tunnel"), so we want to have the option of > > > per-VNI BFD instead of just endpoint-to-endpoint (VTEP-to-VTEP). > > > > You've summarized this clearly. Joel Halpern, in particular, raised this > > point multiple times. Effectively, "what are we testing?" And the response > > not clearly converging on exactly one of the two possibilities. > > > > As is noted in the various IESG discussion, each of the two test points > > raise slightly different considerations. > > > > > However, we end up having to do this by trying to insert a thin filter > > > into the tenant's address space (i.e., the inner VXLAN header) and pick > > > out the specific stream of BFD traffic that we're introducing. This is, > > > in some sense, a namespace grab in what is conceptually the tenant's > > > namespace, and we have to be careful that what we do is either > > > guaranteed to not impact the tenant or well-documented and > > > compartmentalized (akin to the "well-known URIs"). > > > > Possibly, and it's certainly a consideration. However, I think I'm less > > convinced of it being quite the level of violation that seems to be > > reflected in the rest of the IESG comments in the various other threads. > > I'll respond to that detail a bit below. > > > > > I've made comments at several places in the document that are more > > > directly tied to specific pieces of text, but in general, if we assume > > > that the tenant can add/remove new addresses at will within their VXLAN > > > abstration, then any attempt to preconfigure by mutual agreement the BFD > > > addresses to use at the VTEPs or to use the VTEP's normal (outer) > > > address as the sentinel value seems subject to the tenant coming in and > > > subsequently trying to use that address, leading to (some of) the > > > tenant's traffic getting silently filtered and interpreted by the VTEP. > > > If we were using domain names as identifiers, we could allocate > > > something under .arpa or similar, but I think our options are more > > > limited when numerical addresses are used. > > > > > > The option suggested by the rtg-dir reviewer of always using the > > > management VNI does not suffer from this namespacing issue, though I > > > recognize that it does reduce the scope over which fault-detection is > > > available, for the cases when different VNIs' traffic are routed or > > > handled differently. > > > > This is a clean summary of the considerations. At least a portion of the WG > > seems to be comfortable with "test to the management VNI". However, another > > (smaller, I believe) portion were wanting to test one layer further in. > > It is reassuring that I at least managed to summarize the situation > tolerably. Is it fair to say that testing "one layer further in" is a > superset of what "test to the managemenet VNI" can do? > > > > (2) Section 6 says: > > > > > > The selection > > > of the VNI number of the Management VNI MUST be controlled through > > > management plane. An implementation MAY use VNI number 1 as the > > > default value for the Management VNI. All VXLAN packets received on > > > the Management VNI MUST be processed locally and MUST NOT be > > > forwarded to a tenant. > > > > > > It seems like the management VNI concept is something that would apply > > > to the entire VXLAN deployment and not just to the BFD-using portions; > > > is this already defined somewhere (in which case we should reference > > > it), or is it new with this document? In the latter case wouldn't it be > > > an update to the core VXLAN spec? (I note that there are some > > > procedural hoops to jump through for an IETF-stream document to update > > > an ISE-stream document...) > > > > The relevant portion of the archive will have the Subject: line text > > including: > > "Trapping BFD Control packet at VTEP" > > > > A portion of the discussion relating to the magic number of the management > > VNI suggested '1', instead of '0'. > > > > At least some implementations already use '0': > > https://mailarchive.ietf.org/arch/msg/rtg-bfd/6WfSATmfoPv4AD6RmD-Xb7zz4CE > > > > The argument to not use '0' starts roughly here: > > https://mailarchive.ietf.org/arch/msg/rtg-bfd/z8E_a5k_r4pLLs5YfNsL_Xm9_Us > > > > You're correct, IMO, that there's no standard practice and the above seems > > to support this. I believe this leaves the document authors in the position > > of being requested to make a recommendation for the default value of this > > field and knowing that the default would be invalid on some platforms. > > > > The alternative is requiring implementations to always configure this value. > > > > I suggest the IESG determine whether it wants a default value here or not. > > If not, the text should be adjusted to require configuration. If yes, the > > IESG should consider whether the nvo3 group should produce some document > > that covers current operational practices. > > That does sound like something we should try to talk about on the telechat > as well; thanks for raising it so clearly. We did get to talk about it briefly, though without a clear conclusion. Since there's not much of a clear preexisting description of the management VNI that we can cite, I'm leaning towards just noting that (most?) implementations offer a concept of "management VNI", that the management VNI can be useful for giving confidence that BFD traffic does not interfere with tenant traffic, and the details of how to use the management VNI are implementation-specific. But it would not be hard to convince me that there is a better path to take! > > > ---------------------------------------------------------------------- > > > COMMENT: > > > ---------------------------------------------------------------------- > > > 0:0:0:0:0:FFFF:7F00:0/104 range for IPv6). There could be a firewall > > > configured on VTEP to block loopback addresses if set as the > > > destination IP in the inner IP header. It is RECOMMENDED to allow > > > addresses from the loopback range through a firewall only if it is > > > used as the destination IP address in the inner IP header, and the > > > destination UDP port is set to 3784 [RFC5881]. > > > > > > I think we should reword this to make it clear that the default behavior > > > is still "block all incoming traffic with loopback destination" and that > > > the exception is tightly scoped to the encapsulated VXLAN traffic > > > discussed in this document and the specific destination port *and when > > > BFD has been configured for the VTEP*. I note that well-known ports are > > > not reserved ports, and we have no guarangee that only a BFD > > > implementation would be listening on port 3784. > > > > I don't think this consideration is necessarily critical. > > I think I'm in agreement about its criticality, and will see if I can come > up with some actual text ... later. I think the sense I have is something like: % It is common to have a firewall configured on the VTEP (akin to general % common practice for all machines) to drop incoming traffic where the % inner IP header contains a loopback address as the destination address. % In general, such traffic would be the result of misconfiguration, and % such a policy improves network safety. However, the procedures specified % in this document can result in such traffic, so it is RECOMMENDED to only % allow incoming traffic with loopback-range inner destination IP address % when the destination UDP port is set to 3784 and BFD has been configured % on the VTEP. But if that's not correct, no need to spend more time on it. > > BFD implementations residing in the related instance communicating to other > > instances across the vxlan environment would be using RFC 5881 or RFC 5883 > > style BFD. Since this isn't a tunneled BFD, the IP endpoints of the BFD > > control traffic will be unicast addresses rather than the reserved > > "loopback" ranges; i.e. 127/8 ::FFFF:127.0.0.0/104. In order for those > > ranges to be problematic, it'd be necessary for the client to be able to > > manually encapsulate a vxlan packet - a security issue of its own. > > > > A related point in this discussion is "we're hijacking an address managed by > > the local tenant". While true, it's in the above ranges and thus somewhat > > under the auspice of the host OS to assert control. I'm aware of some > > unusual applications that make use of configured addresses in those ranges > > for on-box communications, but they're also on the unusual end of things. > > > > What sort of text would you want to cover the case that when BFD is run > > up-to-the-tenant mode in this circumstance that an address MUST be reserved > > for the BFD over vxlan application and that this address SHALL NOT be > > available to the tenant for its own use? I'd like to hold off on proposing text until some of the other threads come to a conclusion; what mechanism we want to use (and thus write about) may depend on what scenarios we're trying to prevent. > > > VXLAN packet. The choice of Destination MAC and Destination IP > > > addresses for the inner Ethernet frame MUST ensure that the BFD > > > Control packet is not forwarded to a tenant but is processed locally > > > at the remote VTEP. [...] > > > > > > This has to be 100% reliable, and I think we need to provide some > > > example mechanism that has that property even if we don't mandate that > > > it be the only allowed mechanism. > > > > The consideration here, I believe, is that there's currently too much > > latitude by implementations as to what MAC addresses they use here. > > Restrict one case, you may break some implementation. > > > > The missing element is how a pair of implementations of BFD for vxlan > > discover the necessary information? As far as BFD is concerned, "tell me!" > > This seems like work that belongs in nvo3. That seems likely. I suspect that what we'll end up with here is something akin to "here's a procedure you can use that will work, but if you want to use some other procedure that works, we aren't stopping you". > > > Destination MAC: This MUST NOT be of one of tenant's MAC > > > addresses. The destination MAC address MAY be the address > > > > > > But the tenant can start using new MAC addresses at any time! How is > > > BFD-over-VXLAN going to dynamically detect and avoid that? > > > > See above. Either it's coordinated with the ability to prevent the tenant > > from using it or the underlying vxlan environment needs to provide some > > mechanism to discover what's been provisioned. > > > > > associated with the destination VTEP. The MAC address MAY be > > > configured, or it MAY be learned via a control plane protocol. > > > The details of how the MAC address is obtained are outside the > > > scope of this document. > > > > > > This all talks about the MAC address being relatively static > > > configuration, but per above, I don't think that's safe in the face of a > > > MUST-level requirement to avoid conflicting with tenant MAC addresses. > > > > But is it BFD's responsibility to figure this out? This is what the > > document is suggesting - a higher level with access to the implementation > > specifics should be supplying the BFD provisioning information. Or manual > > provisioning in the absence thereof. I don't really disagree; I'm more trying to get a sense of which parts are dynamic and which parts (relatively) static -- my current sense is that everything in the tenant space can be very dynamic, but that the BFD provisioning is fairly static. That would lead to something of an impedance mismatch if the dynamic stuff the tenant is doing could generate a conflict with the static configuration -- it would be a sign that we're doing something at the wrong level. But, as implied earlier, I'm still trying to wrap my head around the system as a whole. Thanks, Ben From nobody Fri Dec 20 01:35:06 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36D9D120807; Fri, 20 Dec 2019 01:35:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=DI4cSaLX; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=Jmidemzv Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id matq5xR_JkGN; Fri, 20 Dec 2019 01:35:02 -0800 (PST) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A5BB120806; Fri, 20 Dec 2019 01:35:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1098; q=dns/txt; s=iport; t=1576834502; x=1578044102; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=j0XVS/TC8xYH/uvveDwys4ZO14q+AKmmBGDoJZ7gezc=; b=DI4cSaLXRYLON/is47wDEy55elDAa9VsDXeDLoiFT72JfHA9RakXc+2I AwwXm4DZlOtA+zYzvNYYBfthG/xz4dcZ8sDb+kZe+6slhzrdTSx6MiAUa C51728GUHLHMS7Y/HwOApkaAt1+ENRblc++uZ4NcqHldMIhRQtiCeRFYH I=; IronPort-PHdr: =?us-ascii?q?9a23=3AulofzRJtg21KxheNDtmcpTVXNCE6p7X5OBIU4Z?= =?us-ascii?q?M7irVIN76u5InmIFeBvad2lFGcW4Ld5roEkOfQv636EU04qZea+DFnEtRXUg?= =?us-ascii?q?Mdz8AfngguGsmAXEDlPfjhbCESF8VZX1gj9Ha+YgBY?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0B+AQB+lfxd/4gNJK1kHAEBAQEBBwE?= =?us-ascii?q?BEQEEBAEBgWsEAQELAYFMUAWBRCAECyqEB4NGA4pzgjqYLYJSA1QJAQEBDAE?= =?us-ascii?q?BLQIBAYRAAheCBSQ3Bg4CAw0BAQQBAQECAQUEbYU3DIVfAgEDEhERDAEBNwE?= =?us-ascii?q?PAgEIDgwCJgICAjAVBQsCBAENBSKDAIJHAy4BoB4CgTiIYXWBMoJ+AQEFhRw?= =?us-ascii?q?YggwJgQ4oAYwYGoFBP4ERJwwUgkw+hGCCeTKCLJA4nlkKgjSWGBuaVYNHiwq?= =?us-ascii?q?aVAIEAgQFAg4BAQWBaCOBWHAVZQGCQVAYDY0SOIM7ilN0gSiSMAEB?= X-IronPort-AV: E=Sophos;i="5.69,335,1571702400"; d="scan'208";a="394288423" Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 20 Dec 2019 09:34:57 +0000 Received: from XCH-ALN-010.cisco.com (xch-aln-010.cisco.com [173.36.7.20]) by alln-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id xBK9Yv4K023243 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 20 Dec 2019 09:34:57 GMT Received: from xhs-rcd-001.cisco.com (173.37.227.246) by XCH-ALN-010.cisco.com (173.36.7.20) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 20 Dec 2019 03:34:56 -0600 Received: from xhs-rcd-002.cisco.com (173.37.227.247) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 20 Dec 2019 03:34:55 -0600 Received: from NAM02-BL2-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Fri, 20 Dec 2019 03:34:55 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=L7UrAATJMs4syODsscuJz9UiIQofpiz8Pc7WpuxiVdM3Uy7Yf0x7XCQIWxpO++JF/ISDqMvzBDPm55gr5bhpNfWXj+yspPn44HoH2WWYUMcdIaEFCYo/RI2vaTRhVpwQL1+UcpjCSh9Xd//mBtOEOYLwzjYOtMxryIN6PL0TAlfBxkuJhqywxhAS0LIo/VtKmBBe1n/3FNW4hth5xcvN3BV+RW57WRilhlTodvRbwrdk02Y0yRX4yHEwF15lY0Wyq6RSdLWbLKhusJzCy3gf/7UvfcoxVxI2XO6yNDx8s3/JbsAFpWoJRf0toaU0NtcQmYE8uAuN4fWcKs6rqPscIQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=j0XVS/TC8xYH/uvveDwys4ZO14q+AKmmBGDoJZ7gezc=; b=GbBHa2XQVTqkpoGXfc59hhvstrDa3gCuzc14Pr5qljomEmx+fyTeJd0DvL+3uvWsMIfwGT2OOurindyv7TtOqKTkqyc551eCI9R9lFBO9zXahd1520y/juHpx4zqiJj+AjTC0NCS5ANp2PkILL7KPxxHvXKy9QrecGguwPgvCeVeg5cD0k9nh5RsrT/SgFwtUJxhMLO4n+IVeAsM5CDVPkwFP83GMR5IWxYSigttwEAtLHPXBCrwTbXgXd53wSz/GK14DmSsDI8ft6tl2N1Auvz8NnfbMOg2H3Gthfvwr0eQ8p+Nf9U6F1/G87NB97lG/4abICKX57Ohk9EJtJb3ug== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=j0XVS/TC8xYH/uvveDwys4ZO14q+AKmmBGDoJZ7gezc=; b=JmidemzvcCGephFGDx0CaIVnXTqaAwAh1FDh2P1x1ESy6wEJO9G5ACKRHqWyv4bXyRN+G5zeOA0WmaaGxfPLUAd9s/iCAT3ZhxpZjIEFMV7EH8EsuQfEFH5YfqR6TbM9S/xL/LT63ET54jxQOyJLnaq4qjbi9UUkd1YlSlvQWKY= Received: from DM5PR11MB1753.namprd11.prod.outlook.com (10.175.88.141) by DM5PR11MB1689.namprd11.prod.outlook.com (10.168.108.9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2538.20; Fri, 20 Dec 2019 09:34:54 +0000 Received: from DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::f8ba:7d8d:391d:4302]) by DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::f8ba:7d8d:391d:4302%12]) with mapi id 15.20.2559.012; Fri, 20 Dec 2019 09:34:54 +0000 From: "Eric Vyncke (evyncke)" To: Jeffrey Haas , "Carlos Pignataro (cpignata)" CC: "rtg-bfd@ietf.org" , "draft-ietf-bfd-vxlan@ietf.org" , "bfd-chairs@ietf.org" , The IESG Subject: =?utf-8?B?UmU6IMOJcmljIFZ5bmNrZSdzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi1iZmQt?= =?utf-8?Q?vxlan-09:_(with_DISCUSS_and_COMMENT)?= Thread-Topic: =?utf-8?B?w4lyaWMgVnluY2tlJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLWJmZC12eGxh?= =?utf-8?Q?n-09:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHVtpb95ryADAJO5Ui6+24NC5naA6fB5DkAgAAHBQCAAOnPAA== Date: Fri, 20 Dec 2019 09:34:54 +0000 Message-ID: References: <157657269782.26511.12421406428553874826.idtracker@ietfa.amsl.com> <20191218203145.GD6488@pfrc.org> <20191218214102.GF6488@pfrc.org> <20191219180609.GA27686@pfrc.org> <4744CBE3-E9EC-439D-B699-C301CFF200D3@cisco.com> <20191219203804.GB31892@pfrc.org> In-Reply-To: <20191219203804.GB31892@pfrc.org> Accept-Language: fr-BE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.20.0.191208 authentication-results: spf=none (sender IP is ) smtp.mailfrom=evyncke@cisco.com; x-originating-ip: [2001:420:c0c1:36:b427:b647:1e61:1da1] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 630a3408-4c52-4cf6-1b4a-08d7852fdf0c x-ms-traffictypediagnostic: DM5PR11MB1689: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-forefront-prvs: 025796F161 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(136003)(346002)(376002)(396003)(366004)(189003)(199004)(478600001)(6636002)(224303003)(4326008)(54906003)(33656002)(110136005)(6486002)(71200400001)(4744005)(316002)(2616005)(86362001)(91956017)(76116006)(36756003)(66946007)(6512007)(5660300002)(66556008)(2906002)(81166006)(81156014)(64756008)(66476007)(186003)(66446008)(8936002)(6506007); DIR:OUT; SFP:1101; SCL:1; SRVR:DM5PR11MB1689; H:DM5PR11MB1753.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: UKr2R6yIMwBvjusgnLS0KMhYk8se3GDx2SrAyj29Zka7Dj+zQzMuXtCpMGqqtduIvdTRju14A3FcFiG1bgv5UiaZsql1vtovDqWogzrPb7q76bu7GwUsjJz+0Q33nMVOTP3wxUKw4sAW8zPg4fUVJPM0buNHpw0xPoCpwQQ7if3uwMxbqWdVXxJIl34BEOLJgn6mzJyYMrP4zmOWYopv9OlZkjsIXkRieV91AFEOAOsuwKJduLwBt1mWIW3Mm2e63XJgs60wL1WKWOJiW39wC5qnfUBQDwZS6d5a6kUGRyBf61s0bmAZ9+oYc1MipCJBflcRDlV9kne5e1xDhHGqW0N9av7aKHyuNoxLTqrqE23h+ii1YzQatYVDB3WtJ/LjTgg7vS8BD2lOvh1Rh3CFkbvyc8LgVRne6rL9guth0sEw/HT00RC/vyGzFkTU/CIX Content-Type: text/plain; charset="utf-8" Content-ID: <3CA5FD89FBB60540ABD651066A9AA578@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 630a3408-4c52-4cf6-1b4a-08d7852fdf0c X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Dec 2019 09:34:54.6854 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: IbqnUB99/KW4pUbkq3Ce19g1lbuT7TfeY9chHXeNEwpCCauDy3gt1bEh/F5x18VhnEBkwvAGjTQ3foAifHHLXw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR11MB1689 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.20, xch-aln-010.cisco.com X-Outbound-Node: alln-core-3.cisco.com Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Dec 2019 09:35:04 -0000 SmVmZnJleSwNCg0KSWYgeW91IGFuZCB0aGUgYXV0aG9ycyBhcmUgYW1iaXZhbGVudCB0byBITD0y NTUsIHRoZW4gSSB3b3VsZCBzdWdnZXN0IHRvIHN0aWNrIHRvIHRoZSBvcmlnaW5hbCBCRkQgc3Bl YyBhbmQgdXNlIEhMPTI1NQ0KDQpSZWdhcmRzDQoNCi3DqXJpYw0KDQrvu79PbiAxOS8xMi8yMDE5 LCAyMTozMywgImllc2cgb24gYmVoYWxmIG9mIEplZmZyZXkgSGFhcyIgPGllc2ctYm91bmNlc0Bp ZXRmLm9yZyBvbiBiZWhhbGYgb2YgamhhYXNAcGZyYy5vcmc+IHdyb3RlOg0KDQogICAgDQogICAg U2VlIG15IHByaW9yIGFtYml2YWxlbmNlLiA6LSkgIEl0J3MgcmVhc29uYWJsZSBtb2R1bG8gb25l IG9mIHRoZSB0d28gcHJpb3INCiAgICBpbXBsZW1lbnRhdGlvbnMgc2F5aW5nICJ0aGlzIGlzIGEg YmlnIGRlYWwhIiB0byBzYXkgImZvciBvdXIgcHVycG9zZXMsIHdlDQogICAgd2lzaCB0byB1c2Ug dGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIG9mIDU4ODEiLiAgQXMgSSBub3RlZCBmb3IgdGhl IElFU0csDQogICAgdGhlIGNvbnNpZGVyYXRpb25zIHdlIGhhdmUgY3VycmVudGx5IHJlZmxlY3Qg NTg4NC4gIEFuZCB3aGlsZSB5b3VyDQogICAgZXhwbGFuYXRpb24gZm9yIDU4ODQncyBzaXR1YXRp b24gd2FzIGhlbHBmdWwsIEknbSBub3QgZW50aXJlbHkgY2xlYXIgd2h5IHRoZQ0KICAgIHZ4bGFu IGVuY2Fwc3VsYXRpb24gaXMgc28gZW50aXJlbHkgZGlmZmVyZW50IHdpdGggcmVnYXJkIHRvIGl0 cyBpbXBhY3QgdnMuDQogICAgTVBMUyBhbmQgdGh1cyB0aGUgNTg4NCBzY2VuYXJpby4NCiAgICAN Cg0K From nobody Sun Dec 22 11:01:04 2019 Return-Path: X-Original-To: rtg-bfd@ietf.org Delivered-To: rtg-bfd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 787D21200F1; Sun, 22 Dec 2019 11:00:56 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: rtg-bfd@ietf.org Subject: I-D Action: draft-mirsky-bfd-mpls-demand-06.txt X-Test-IDTracker: no X-IETF-IDTracker: 6.115.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: rtg-bfd@ietf.org Message-ID: <157704125632.11775.1175953310338417644@ietfa.amsl.com> Date: Sun, 22 Dec 2019 11:00:56 -0800 Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Dec 2019 19:00:57 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Bidirectional Forwarding Detection WG of the IETF. Title : BFD in Demand Mode over Point-to-Point MPLS LSP Author : Greg Mirsky Filename : draft-mirsky-bfd-mpls-demand-06.txt Pages : 5 Date : 2019-12-22 Abstract: This document describes procedures for using Bidirectional Forwarding Detection (BFD) in Demand mode to detect data plane failures in Multiprotocol Label Switching (MPLS) point-to-point Label Switched Paths. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-mirsky-bfd-mpls-demand/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-mirsky-bfd-mpls-demand-06 https://datatracker.ietf.org/doc/html/draft-mirsky-bfd-mpls-demand-06 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-mirsky-bfd-mpls-demand-06 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Dec 27 07:28:06 2019 Return-Path: X-Original-To: rtg-bfd@ietfa.amsl.com Delivered-To: rtg-bfd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B53F12004A; Fri, 27 Dec 2019 07:28:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7nqcA2bFN7h7; Fri, 27 Dec 2019 07:28:02 -0800 (PST) Received: from mail-wm1-x335.google.com (mail-wm1-x335.google.com [IPv6:2a00:1450:4864:20::335]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B9D6120026; Fri, 27 Dec 2019 07:28:02 -0800 (PST) Received: by mail-wm1-x335.google.com with SMTP id f129so8498131wmf.2; Fri, 27 Dec 2019 07:28:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ecZJKc6/vVSqIdPE6KWyWrRGiCqOt5UfL9jxJe/eF0w=; b=h3pE4SinVK9gT/oMVvob2HhTUw5NK7Jzh426EPXtvYelOcvqRAwdUeiYdo5KNye1ch jEaX8vPGrimlrkRiKBu2SPluBUeiwzWrnd4vQg79laQWeoG+2FvzWl9WRYrFLVE/0Z5R vOVKkT5emRWvKJqmf8BsGS72kPzcEZcndWQpz1AWTkOwKY85LWZXWBTejK6rHWqKdMCI qcE23ymv+sRWLatFFiuwXt6C5CSET4dJzWpI9W6waDPfUfzIPIrD5rU7CN5Y1cf5p4eQ wZOsGhWzbf9J9YsJkw79ZZNDV+lXLObUG3iQfl1V+azlc9gaGeGwlQO6BNASKD1HcE5f slDA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ecZJKc6/vVSqIdPE6KWyWrRGiCqOt5UfL9jxJe/eF0w=; b=KQJERrANItb5+mXKnJLzaQVBpcF4OKZgAn7BMsuIlXCUP7WPeNKq65qdpLyScnSyyt QXtDhp9oElMcXXLsLG18QhSncugK2Q498vAdBRseiE4CnXtEndjKQBCQ+aQHNGePJ8Uy S4QDX3hbCq/D7siOOG2Kiz1CbcH0q5Zbbs14NYpTl0YG9qPzDBWvqCdAms7zvXtEElMz 8yf+Nxk8ZcRttpcJKl/WYCCY5lj7483anLuAfoYT5lc07r9ZOqt//hjEvfj32V5smL0K 14xs28uG5eixgtu+SW9nujp0WAEXuXKqJkAiYru0UTdQtIRRW93zwSQRTKFoEZiEhFpv EAXw== X-Gm-Message-State: APjAAAXmPCMMAJDyuHI7J6DJy8nQlCL2HryOaYUiffD5La4kTtpLWPYy bS1j7PoXsw9na4PrJ0TMvbfP8LM340GSButOhEQ= X-Google-Smtp-Source: APXvYqxUmp4i2XZXr9z1DJCI9fVD3Vg68l2wsw4RDA0U/uEXqyu+H/7VNfODliBQvEYkN0dp16eIXMg8uy2wGDxHAQ4= X-Received: by 2002:a7b:c956:: with SMTP id i22mr19671355wml.67.1577460480973; Fri, 27 Dec 2019 07:28:00 -0800 (PST) MIME-Version: 1.0 References: <157656992287.26356.12991667526690255621@ietfa.amsl.com> In-Reply-To: <157656992287.26356.12991667526690255621@ietfa.amsl.com> From: Santosh P K Date: Fri, 27 Dec 2019 20:57:49 +0530 Message-ID: Subject: Re: Opsdir telechat review of draft-ietf-bfd-vxlan-09 To: =?UTF-8?B?SsO8cmdlbiBTY2jDtm53w6RsZGVy?= Cc: ops-dir@ietf.org, last-call@ietf.org, rtg-bfd WG , draft-ietf-bfd-vxlan.all@ietf.org Content-Type: multipart/alternative; boundary="0000000000009d9f36059ab12307" Archived-At: X-BeenThere: rtg-bfd@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "RTG Area: Bidirectional Forwarding Detection DT" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Dec 2019 15:28:05 -0000 --0000000000009d9f36059ab12307 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hello, Please see my inline comments tagged [SPK]. On Tue, Dec 17, 2019 at 1:35 PM J=C3=BCrgen Sch=C3=B6nw=C3=A4lder via Datat= racker < noreply@ietf.org> wrote: > Reviewer: J=C3=BCrgen Sch=C3=B6nw=C3=A4lder > Review result: Has Nits > > I have only a limited understanding of VXLAN and BFD technology. > Hence, some of my question may look odd to the insiders. > > - Never heard of this IPv6 loopback address space before. Is it OK to > allocate and use it this way? > [SPK] We have received suggestions from other IESG review we coming up with text which will address this. - Why is echo BFD outside the scope of this document? Can I just turn > on echo mode or will extra specifications be needed? > [SPK] Echo BFD to work we need destination IP address to be set to sending VTEP address so that BFD packet is looped back when VTEP decapsulate VXLAN header. Currently VTEP IP address may be used by tenant and hence this needs more discussion and may need extension document. We have kept the scope limited to async BFD for this document. > - Nits: > > OLD > > Ability to monitor path continuity > > NEW > > The ability to monitor path continuity > > OLD > > BFD packet MUST be encapsulated > > NEW > > BFD packets MUST be encapsulated > > --0000000000009d9f36059ab12307 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello,
=C2=A0 =C2=A0 =C2=A0Please see= my inline=C2=A0comments tagged [SPK].

On Tue, Dec 17, 2019 at 1:35 PM= J=C3=BCrgen Sch=C3=B6nw=C3=A4lder via Datatracker <noreply@ietf.org> wrote:
Reviewer: J=C3=BCrgen Sch=C3=B6nw=C3=A4lde= r
Review result: Has Nits

I have only a limited understanding of VXLAN and BFD technology.
Hence, some of my question may look odd to the insiders.

- Never heard of this IPv6 loopback address space before. Is it OK to
=C2=A0 allocate and use it this way?
=C2=A0
= [SPK] We have received=C2=A0suggestions from other IESG review we coming up= with text which will address this.

- Why is echo BFD outside the scope of this document? Can I just turn
=C2=A0 on echo mode or will extra specifications be needed?
=C2=A0
[SPK] Echo BFD to work we need destination IP addres= s to be set to sending VTEP address so that BFD packet is looped back when = VTEP decapsulate VXLAN header. Currently VTEP IP address may be used by ten= ant and hence this needs more discussion and may need extension document. W= e have kept the scope limited to async BFD for this document.=C2=A0


- Nits:

=C2=A0 OLD

=C2=A0 =C2=A0 Ability to monitor path continuity

=C2=A0 NEW

=C2=A0 =C2=A0 The ability to monitor path continuity

=C2=A0 OLD

=C2=A0 =C2=A0 BFD packet MUST be encapsulated

=C2=A0 NEW

=C2=A0 =C2=A0 BFD packets MUST be encapsulated

--0000000000009d9f36059ab12307--