From nobody Fri Jul 1 05:20:18 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40CD912D0AA for ; Fri, 1 Jul 2016 05:20:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.626 X-Spam-Level: X-Spam-Status: No, score=-5.626 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v81tdDImxHUp for ; Fri, 1 Jul 2016 05:20:15 -0700 (PDT) Received: from smtp.ee.ethz.ch (smtp.ee.ethz.ch [129.132.2.219]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CB15D12D0A9 for ; Fri, 1 Jul 2016 05:20:14 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by smtp.ee.ethz.ch (Postfix) with ESMTP id 8D7D9D9309 for ; Fri, 1 Jul 2016 14:20:12 +0200 (MEST) X-Virus-Scanned: by amavisd-new on smtp.ee.ethz.ch Received: from smtp.ee.ethz.ch ([127.0.0.1]) by localhost (.ee.ethz.ch [127.0.0.1]) (amavisd-new, port 10024) with LMTP id Qf5c16UN5dUC for ; Fri, 1 Jul 2016 14:20:12 +0200 (MEST) Received: from [82.130.103.143] (nb-10510.ethz.ch [82.130.103.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: mirjak) by smtp.ee.ethz.ch (Postfix) with ESMTPSA id 6134ED9303 for ; Fri, 1 Jul 2016 14:20:12 +0200 (MEST) To: "tcpm@ietf.org" References: <20160630084422.29534.37007.idtracker@ietfa.amsl.com> From: =?UTF-8?Q?Mirja_K=c3=bchlewind?= Message-ID: <57765FEB.3020608@tik.ee.ethz.ch> Date: Fri, 1 Jul 2016 14:19:55 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.8.0 MIME-Version: 1.0 In-Reply-To: <20160630084422.29534.37007.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [tcpm] I-D Action: draft-ietf-tcpm-accurate-ecn-01.txt X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Jul 2016 12:20:17 -0000 Hi, this is an update to keep the document alive with basically no changes. I'm more or less waiting for myself to completely finish the implementation and then adapt some stuff in the appendix accordingly. Sorry for the delay! Mirja On 30.06.2016 10:44, internet-drafts@ietf.org wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the TCP Maintenance and Minor Extensions of the IETF. > > Title : More Accurate ECN Feedback in TCP > Authors : Bob Briscoe > Mirja Kühlewind > Richard Scheffenegger > Filename : draft-ietf-tcpm-accurate-ecn-01.txt > Pages : 37 > Date : 2016-06-30 > > Abstract: > Explicit Congestion Notification (ECN) is a mechanism where network > nodes can mark IP packets instead of dropping them to indicate > incipient congestion to the end-points. Receivers with an ECN- > capable transport protocol feed back this information to the sender. > ECN is specified for TCP in such a way that only one feedback signal > can be transmitted per Round-Trip Time (RTT). Recently, new TCP > mechanisms like Congestion Exposure (ConEx) or Data Center TCP > (DCTCP) need more accurate ECN feedback information whenever more > than one marking is received in one RTT. This document specifies an > experimental scheme to provide more than one feedback signal per RTT > in the TCP header. Given TCP header space is scarce, it overloads > the three existing ECN-related flags in the TCP header and provides > additional information in a new TCP option. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-tcpm-accurate-ecn/ > > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-tcpm-accurate-ecn-01 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=draft-ietf-tcpm-accurate-ecn-01 > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > tcpm mailing list > tcpm@ietf.org > https://www.ietf.org/mailman/listinfo/tcpm > From nobody Fri Jul 8 03:36:08 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 35EA112D824 for ; Fri, 8 Jul 2016 03:36:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.902 X-Spam-Level: X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2WKrE00Lfpql for ; Fri, 8 Jul 2016 03:36:05 -0700 (PDT) Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 144C612D825 for ; Fri, 8 Jul 2016 03:36:05 -0700 (PDT) Received: from fr712umx3.dmz.alcatel-lucent.com (unknown [135.245.210.42]) by Websense Email Security Gateway with ESMTPS id 59157F86CA474; Fri, 8 Jul 2016 10:36:01 +0000 (GMT) Received: from fr711usmtp1.zeu.alcatel-lucent.com (fr711usmtp1.zeu.alcatel-lucent.com [135.239.2.122]) by fr712umx3.dmz.alcatel-lucent.com (GMO-o) with ESMTP id u68Aa3co024690 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 8 Jul 2016 10:36:03 GMT Received: from FR711WXCHHUB02.zeu.alcatel-lucent.com (fr711wxchhub02.zeu.alcatel-lucent.com [135.239.2.112]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id u68Aa13k003975 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 8 Jul 2016 12:36:02 +0200 Received: from FR712WXCHMBA15.zeu.alcatel-lucent.com ([169.254.7.34]) by FR711WXCHHUB02.zeu.alcatel-lucent.com ([135.239.2.112]) with mapi id 14.03.0195.001; Fri, 8 Jul 2016 12:36:02 +0200 From: "Scharf, Michael (Nokia - DE)" To: Hagen Paul Pfeifer , "tcpm@ietf.org" Thread-Topic: [tsvwg] Linux TCP RTO Thread-Index: AQHRz7pPysm3SsT8kUasbeWnvQNhLKAOaXww Date: Fri, 8 Jul 2016 10:36:02 +0000 Message-ID: <655C07320163294895BBADA28372AF5D4890A45A@FR712WXCHMBA15.zeu.alcatel-lucent.com> References: <20160626145148.GA9627@virgo.localdomain> In-Reply-To: <20160626145148.GA9627@virgo.localdomain> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.239.27.40] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [tcpm] [tsvwg] Linux TCP RTO X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 10:36:08 -0000 Thanks a lot for sharing this! Michael -----Original Message----- From: tsvwg [mailto:tsvwg-bounces@ietf.org] On Behalf Of Hagen Paul Pfeifer Sent: Sunday, June 26, 2016 4:52 PM To: tcpm@ietf.org Cc: tsvwg@ietf.org Subject: [tsvwg] Linux TCP RTO For the fellows not constantly following the Linux kernel maillinglist: we = are currently try to adjust Linux's TCP RTO behavior to implement a RFC 629= 8 compliant calculation[1]: https://www.mail-archive.com/netdev@vger.kernel.org/msg114487.html We wrote an small document where we highlighted the current Linux implement= ation, validated our 6298 compliant implementation and presented measuremen= ts comparing both mechanisms: https://docs.google.com/document/d/1pKmPfnQb6fDK4qpiNVkN8cQyGE4wYDZukcuZfR= -BnnM Yuchung tested the modification in large scale at Googles web servers (HTTP= , HTTP2) and first results looks promising: https://www.mail-archive.com/netdev@vger.kernel.org/msg116052.html Hagen [1] some aspects of Linux differs too much to implement a 100% compliant RF= C 6298 mechanism - especially the MinRTO definition differs. From nobody Fri Jul 8 03:50:14 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 20BA712D1AF; Fri, 8 Jul 2016 03:50:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.902 X-Spam-Level: X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bDTtw6XouGBz; Fri, 8 Jul 2016 03:50:10 -0700 (PDT) Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1E3FF12D1EA; Fri, 8 Jul 2016 03:50:10 -0700 (PDT) Received: from fr712umx3.dmz.alcatel-lucent.com (unknown [135.245.210.42]) by Websense Email Security Gateway with ESMTPS id 5785D8C75335D; Fri, 8 Jul 2016 10:50:06 +0000 (GMT) Received: from fr711usmtp1.zeu.alcatel-lucent.com (fr711usmtp1.zeu.alcatel-lucent.com [135.239.2.122]) by fr712umx3.dmz.alcatel-lucent.com (GMO-o) with ESMTP id u68Ao8FI010804 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 8 Jul 2016 10:50:08 GMT Received: from FR711WXCHHUB02.zeu.alcatel-lucent.com (fr711wxchhub02.zeu.alcatel-lucent.com [135.239.2.112]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id u68Ao83B015096 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 8 Jul 2016 12:50:08 +0200 Received: from FR712WXCHMBA15.zeu.alcatel-lucent.com ([169.254.7.34]) by FR711WXCHHUB02.zeu.alcatel-lucent.com ([135.239.2.112]) with mapi id 14.03.0195.001; Fri, 8 Jul 2016 12:50:08 +0200 From: "Scharf, Michael (Nokia - DE)" To: "tcpm@ietf.org" Thread-Topic: IETF 96 in Berlin - draft agenda Thread-Index: AdHZBn2N+zAFjyU3S/eCrj4QUYRASw== Date: Fri, 8 Jul 2016 10:50:07 +0000 Message-ID: <655C07320163294895BBADA28372AF5D4890A4BA@FR712WXCHMBA15.zeu.alcatel-lucent.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.239.27.40] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "tcpm-chairs@ietf.org" Subject: [tcpm] IETF 96 in Berlin - draft agenda X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 10:50:13 -0000 Hi all, A first draft for the agenda for IETF 96 can be found at https://datatracke= r.ietf.org/meeting/96/agenda/tcpm/ and is also copied below. Please let us know if there are any suggestions. Thanks Michael ************************************************ TCPM meeting at IETF-96 Berlin, Germany Monday, July 18, 10:00-12:30 =20 WG Status --------- 10:00 WG status Speaker: Chairs Time: 5 min =20 Working Group Items ------------------- =20 10:05 TCP Extended Data Offset Option Draft: draft-ietf-tcpm-tcp-edo Speaker: Chairs for the authors Time: 5 min =20 10:10 RFC793bis Draft: draft-ietf-tcpm-rfc793bis Speaker: Chairs for editor Time: 5 min =20 10:15 Moving forward draft-ietf-tcpm-rto-consider Draft: draft-ietf-tcpm-rto-consider Speaker: Chairs Time: 20 min Other Items ----------- 10:35 Updates of RACK Linux implementation Draft: draft-cheng-tcpm-rack Speaker: Yuchung Cheng Time: 20 min 10:55 Transports advancements in the Windows networking stack Draft: N/A Speaker: Praveen Balasubramanian Time: 25 min 11:20 TCP Alternative Backoff with ECN (ABE) Draft: draft-khademi-tcpm-alternativebackoff-ecn Speaker: Naeem Khademi Time: 20 min 11:40 TCP Control Block Interdependence (2140bis) Draft: draft-touch-tcpm-2140bis Speaker: Michael Welzl Time: 15 min 11:55 TCP over Constrained-Node Networks Draft: draft-gomez-core-tcp-constrained-node-networks=20 Speaker: Carles Gomez Time: 10 min From nobody Fri Jul 8 05:44:49 2016 Return-Path: X-Original-To: tcpm@ietf.org Delivered-To: tcpm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DD2DA12D67E for ; Fri, 8 Jul 2016 05:44:47 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: X-Test-IDTracker: no X-IETF-IDTracker: 6.25.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160708124447.32079.21160.idtracker@ietfa.amsl.com> Date: Fri, 08 Jul 2016 05:44:47 -0700 From: IETF Secretariat Archived-At: Subject: [tcpm] Milestones changed for tcpm WG X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 12:44:48 -0000 Changed milestone "Submit document obsoleting undeployed TCP extensions to the IESG for publication as an Informational RFC", resolved as "Done". URL: https://datatracker.ietf.org/wg/tcpm/charter/ From nobody Fri Jul 8 14:18:54 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D59912D86E for ; Fri, 8 Jul 2016 14:18:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.601 X-Spam-Level: X-Spam-Status: No, score=-102.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=it-uc3m-es.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VnZD334I7L5I for ; Fri, 8 Jul 2016 14:18:49 -0700 (PDT) Received: from mail-wm0-x236.google.com (mail-wm0-x236.google.com [IPv6:2a00:1450:400c:c09::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 80A9412D1DD for ; Fri, 8 Jul 2016 14:18:47 -0700 (PDT) Received: by mail-wm0-x236.google.com with SMTP id n127so25165507wme.1 for ; Fri, 08 Jul 2016 14:18:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=it-uc3m-es.20150623.gappssmtp.com; s=20150623; h=subject:references:to:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=0Dl6pK0BXOpDkjBSP4JRO5YQ6n+SX/IWjgu4Q1n9RlI=; b=JjGTCbGI3WzwiBjH8sm64Iy0kqCe7MMEhPckcE5gQau9RqVRzxHbeMMJCTKEG42pBa fi/rURUWohcNSuaJ38f7+WIi2pfnxD0ov7Zy91Xg/QE7pgxTDMycLT/A+LPJSW92rohD W0IyJycv9C2wif8wwxxHZsQ0dv5RkWvgLde51Av2rsZ5j9edLfftJq7mQU+WPv2aj50/ QrgSvxcmYtYqwWsaPP5ihaCVI9pd0Qa2OCzRf/Y2uH7ENaCfPVuwhAWCRhujEn8ziss8 RBm0FH2My2QC+9w+CSh1FYRHYnAqmPOwvT+XHK72wOqZHWtu4Dy7pXh6oyKwtt3+mSrT /JKg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:references:to:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=0Dl6pK0BXOpDkjBSP4JRO5YQ6n+SX/IWjgu4Q1n9RlI=; b=VR+Y43+z9J8h9XuAfbMgXSnaxEmjyxd0onzCJgjCqZKJzoaOl1Hy9adRaakSovKPPj nMJZ8h58x80+yhr1MrNe6lixYfTiRUGCs6uDXEt4Bl6bSEL94fThpzqpqho+/YPPSL7r 5kylxqc3PtoEuyfsQ8PSvtcG03MYlTF4uucplx5dxJWVYRr19/rAl5v6YOfXK8lLUCj3 sUHE4pxu8/wVXzkLogRu/HLHGNnrsTnwnRPlNJB7sOvRhg4cbl1cHpupGosJDpBeW0dl 3/RkUHK4z9PMqt0HyoBEo0MA0KnbTFpCDA03zC650l0DT/9aAs9IX5HcE0K0if2HfkoS q/IA== X-Gm-Message-State: ALyK8tJXAsiL8ekPSuPqrP7Vqrcjg1Ly5ovd2CITaIaK175PIEaOfOMgXCz6bwGLZCVFnM/K X-Received: by 10.28.45.15 with SMTP id t15mr385386wmt.37.1468012725771; Fri, 08 Jul 2016 14:18:45 -0700 (PDT) Received: from Macintosh-6.local (237.168.16.95.dynamic.jazztel.es. [95.16.168.237]) by smtp.gmail.com with ESMTPSA id g2sm3456999wjd.5.2016.07.08.14.18.44 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 08 Jul 2016 14:18:44 -0700 (PDT) References: <20160708211635.32095.77047.idtracker@ietfa.amsl.com> To: tcpm IETF list From: marcelo bagnulo braun X-Forwarded-Message-Id: <20160708211635.32095.77047.idtracker@ietfa.amsl.com> Message-ID: <2f56d1b8-7450-42de-4a24-53df9cf4c045@it.uc3m.es> Date: Fri, 8 Jul 2016 23:18:42 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: <20160708211635.32095.77047.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: [tcpm] Fwd: I-D Action: draft-bagnulo-tcpm-tcp-low-rtt-00.txt X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 21:18:52 -0000 Hi, We just submitted this draft for consideration of the WG. Comments are appreciated. Regards, marcelo -------- Mensaje reenviado -------- Asunto: I-D Action: draft-bagnulo-tcpm-tcp-low-rtt-00.txt Fecha: Fri, 08 Jul 2016 14:16:35 -0700 De: internet-drafts@ietf.org Responder a: internet-drafts@ietf.org Para: i-d-announce@ietf.org A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Recommendations for increasing TCP performance in low RTT networks. Authors : Marcelo Bagnulo Koen De Schepper Glenn Judd Filename : draft-bagnulo-tcpm-tcp-low-rtt-00.txt Pages : 7 Date : 2016-07-08 Abstract: This documents compiles a set of issues that negatively affect TCP performance in low RTT networks as well as the recommendations to overcome them. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-bagnulo-tcpm-tcp-low-rtt/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-bagnulo-tcpm-tcp-low-rtt-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ I-D-Announce mailing list I-D-Announce@ietf.org https://www.ietf.org/mailman/listinfo/i-d-announce Internet-Draft directories: http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt From nobody Fri Jul 8 18:01:30 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2690F12B051 for ; Fri, 8 Jul 2016 18:01:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.326 X-Spam-Level: X-Spam-Status: No, score=-3.326 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yv5MA7smdKIl for ; Fri, 8 Jul 2016 18:01:27 -0700 (PDT) Received: from nitro.isi.edu (nitro.isi.edu [128.9.208.207]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5BA0812B040 for ; Fri, 8 Jul 2016 18:01:27 -0700 (PDT) Received: from [128.9.184.232] ([128.9.184.232]) (authenticated bits=0) by nitro.isi.edu (8.13.8/8.13.8) with ESMTP id u6910lHs023845 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Fri, 8 Jul 2016 18:00:47 -0700 (PDT) To: marcelo bagnulo braun , tcpm IETF list References: <20160708211635.32095.77047.idtracker@ietfa.amsl.com> <2f56d1b8-7450-42de-4a24-53df9cf4c045@it.uc3m.es> From: Joe Touch Message-ID: <57804CBE.7030209@isi.edu> Date: Fri, 8 Jul 2016 18:00:46 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.7.2 MIME-Version: 1.0 In-Reply-To: <2f56d1b8-7450-42de-4a24-53df9cf4c045@it.uc3m.es> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-MailScanner-ID: u6910lHs023845 X-ISI-4-69-MailScanner: Found to be clean X-MailScanner-From: touch@isi.edu Archived-At: Subject: Re: [tcpm] Fwd: I-D Action: draft-bagnulo-tcpm-tcp-low-rtt-00.txt X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Jul 2016 01:01:29 -0000 Hi, Marcelo (et al.), - regarding the receive buffer (Sec 5): There are TCPs that autoconfigure this value, but it's not part of the protocol spec - it's an "app layer" resource as far as TCP is concerned. Although it's useful to discuss here, it needs to be considered as external to the protocol. The size of the receive buffer limits TCP performance only in the following ways: - it needs to be large enough to accommodate reordering - it needs to be large enough to hold arriving data while gaps are filled-in (using SACK or timeouts) - it needs to buffer enough data between OS scheduling of the user app that drains the buffer - the buffer size is limited by what the OS allocates to the connection (either by default or by user override) The first two are things TCP could measure and tune, but generally the last two are the constraining factors. Joe On 7/8/2016 2:18 PM, marcelo bagnulo braun wrote: > Hi, > > We just submitted this draft for consideration of the WG. Comments are > appreciated. > > Regards, marcelo > > > > > -------- Mensaje reenviado -------- > Asunto: I-D Action: draft-bagnulo-tcpm-tcp-low-rtt-00.txt > Fecha: Fri, 08 Jul 2016 14:16:35 -0700 > De: internet-drafts@ietf.org > Responder a: internet-drafts@ietf.org > Para: i-d-announce@ietf.org > > > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > > > Title : Recommendations for increasing TCP > performance in low RTT networks. > Authors : Marcelo Bagnulo > Koen De Schepper > Glenn Judd > Filename : draft-bagnulo-tcpm-tcp-low-rtt-00.txt > Pages : 7 > Date : 2016-07-08 > > Abstract: > This documents compiles a set of issues that negatively affect TCP > performance in low RTT networks as well as the recommendations to > overcome them. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-bagnulo-tcpm-tcp-low-rtt/ > > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-bagnulo-tcpm-tcp-low-rtt-00 > > > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > I-D-Announce mailing list > I-D-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/i-d-announce > Internet-Draft directories: http://www.ietf.org/shadow.html > or ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > > _______________________________________________ > tcpm mailing list > tcpm@ietf.org > https://www.ietf.org/mailman/listinfo/tcpm From nobody Sun Jul 10 12:37:18 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C329812B039; Sun, 10 Jul 2016 12:37:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.902 X-Spam-Level: X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JTfXAAxGAxzg; Sun, 10 Jul 2016 12:37:15 -0700 (PDT) Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F66B12D0C5; Sun, 10 Jul 2016 12:37:15 -0700 (PDT) Received: from fr712umx3.dmz.alcatel-lucent.com (unknown [135.245.210.42]) by Websense Email Security Gateway with ESMTPS id 6F3D42584DA25; Sun, 10 Jul 2016 19:37:09 +0000 (GMT) Received: from fr711usmtp1.zeu.alcatel-lucent.com (fr711usmtp1.zeu.alcatel-lucent.com [135.239.2.122]) by fr712umx3.dmz.alcatel-lucent.com (GMO-o) with ESMTP id u6AJbDbt007623 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Sun, 10 Jul 2016 19:37:13 GMT Received: from FR711WXCHHUB01.zeu.alcatel-lucent.com (fr711wxchhub01.zeu.alcatel-lucent.com [135.239.2.111]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id u6AJbCx9007181 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Sun, 10 Jul 2016 21:37:13 +0200 Received: from FR712WXCHMBA15.zeu.alcatel-lucent.com ([169.254.7.34]) by FR711WXCHHUB01.zeu.alcatel-lucent.com ([135.239.2.111]) with mapi id 14.03.0195.001; Sun, 10 Jul 2016 21:37:12 +0200 From: "Scharf, Michael (Nokia - DE)" To: "tcpm@ietf.org" Thread-Topic: [tcpm] IETF 96 in Berlin - draft agenda Thread-Index: AdHZBn2N+zAFjyU3S/eCrj4QUYRASwB25RyA Date: Sun, 10 Jul 2016 19:37:12 +0000 Message-ID: <655C07320163294895BBADA28372AF5D48911156@FR712WXCHMBA15.zeu.alcatel-lucent.com> References: <655C07320163294895BBADA28372AF5D4890A4BA@FR712WXCHMBA15.zeu.alcatel-lucent.com> In-Reply-To: <655C07320163294895BBADA28372AF5D4890A4BA@FR712WXCHMBA15.zeu.alcatel-lucent.com> Accept-Language: de-DE, en-US Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.239.27.41] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "tcpm-chairs@ietf.org" Subject: Re: [tcpm] IETF 96 in Berlin - draft agenda X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Jul 2016 19:37:17 -0000 Given a corresponding request, I have added draft-bagnulo-tcpm-tcp-low-rtt = at the end of the planned TCPM agenda. Thanks Michael From nobody Fri Jul 15 00:59:22 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 366AD12D954; Fri, 15 Jul 2016 00:59:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.902 X-Spam-Level: X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S83dqxu-xpaF; Fri, 15 Jul 2016 00:59:19 -0700 (PDT) Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4F0212D950; Fri, 15 Jul 2016 00:59:19 -0700 (PDT) Received: from fr712umx3.dmz.alcatel-lucent.com (unknown [135.245.210.42]) by Websense Email Security Gateway with ESMTPS id 6D3789E2B81FE; Fri, 15 Jul 2016 07:59:15 +0000 (GMT) Received: from fr711usmtp1.zeu.alcatel-lucent.com (fr711usmtp1.zeu.alcatel-lucent.com [135.239.2.122]) by fr712umx3.dmz.alcatel-lucent.com (GMO-o) with ESMTP id u6F7xHUs018908 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 15 Jul 2016 07:59:17 GMT Received: from FR711WXCHHUB01.zeu.alcatel-lucent.com (fr711wxchhub01.zeu.alcatel-lucent.com [135.239.2.111]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id u6F7xBrp023678 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 15 Jul 2016 09:59:17 +0200 Received: from FR712WXCHMBA15.zeu.alcatel-lucent.com ([169.254.7.34]) by FR711WXCHHUB01.zeu.alcatel-lucent.com ([135.239.2.111]) with mapi id 14.03.0195.001; Fri, 15 Jul 2016 09:59:06 +0200 From: "Scharf, Michael (Nokia - DE)" To: "tcpm@ietf.org" Thread-Topic: Slides please Thread-Index: AdHebsIToLlloSyuRSKWIGCyEFxxhg== Date: Fri, 15 Jul 2016 07:59:06 +0000 Message-ID: <655C07320163294895BBADA28372AF5D4891EAAB@FR712WXCHMBA15.zeu.alcatel-lucent.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.239.27.41] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "tcpm-chairs@ietf.org" Subject: [tcpm] Slides please X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jul 2016 07:59:21 -0000 @Presenters: Please send your slides to the chairs until Sunday 17:00 CET, = given that TCPM meets Monday morning. Follow-up updates of slides are possi= ble, if required. Michael PS: Please add slide numbers. From nobody Fri Jul 15 11:31:15 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37AE112D18A; Fri, 15 Jul 2016 11:31:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zpyBoKu20JQI; Fri, 15 Jul 2016 11:31:11 -0700 (PDT) Received: from server.dnsblock1.com (server.dnsblock1.com [85.13.236.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6AE0F12D107; Fri, 15 Jul 2016 11:31:11 -0700 (PDT) Received: from port-87-193-195-240.static.qsc.de ([87.193.195.240]:45828 helo=[10.199.166.47]) by server.dnsblock1.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.87) (envelope-from ) id 1bO7tE-0005NX-Il; Fri, 15 Jul 2016 19:31:08 +0100 From: Bob Briscoe To: "Black, David" , tsvwg IETF list , tcpm IETF list References: Message-ID: <57892BE9.4020309@bobbriscoe.net> Date: Fri, 15 Jul 2016 19:31:05 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------000802040001040706000000" X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server.dnsblock1.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - bobbriscoe.net X-Get-Message-Sender-Via: server.dnsblock1.com: authenticated_id: in@bobbriscoe.net X-Authenticated-Sender: server.dnsblock1.com: in@bobbriscoe.net Archived-At: Cc: "draft-bagnulo-tsvwg-generalized-ecn@ietf.org" Subject: [tcpm] Case for ECN-capable TCP control packets: draft-bagnulo-tsvwg-generalized-ecn X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jul 2016 18:31:14 -0000 This is a multi-part message in MIME format. --------------000802040001040706000000 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit David, [re-sending to include tsvwg & tcpm, which is what I had intended to do first time.] Here's a heads-up for tsvwg, plus cross-posting to tcpm as suggested, And for a fast read, there's a summary of every argument below. Pls bash the arguments. Summary: The ECN spec [RFC 3168] says various TCP control packets must not be ECN capable. This draft lays out each argument given in the RFCs, and articulates a rebuttal against each one: draft-bagnulo-tsvwg-generalized-ecn Subject to some more experiments, we think this knocks down every reason given, so that all these packets could safely be ECN-capable. Pls read the draft for more details (preferably before responding). Enumeration of arguments about each type of control packet follows, starting with some arguments common to many: ___________________________________________________________________________________________ *Common arguments against ECT* 1. Unreliable congestion notification delivery 2. DoS Attacks Common rebuttals (respectively): 1. No worse than undetectable loss of Not-ECT control packet, and better performance 2. Mandating Not-ECT does not stop attackers using ECT for flooding. Nonetheless, it would allow firewalls to discard control packets not meant to be ECT., however this would negate the benefit of ECT for compliant transports and seems unnecessary for the following reason. RFC3168 (Sec.7) and RFC7567 (Sec.4.2.1) say an AQM MUST turn off ECN support if under persistent overload. This makes it hard for flooding packets to gain from ECT, but more experiments needed to see how much might be gained by an attacker flying "just under the radar". *SYN/ACK** *ECT on SYN/ACK already justified in RFC5562 *SYN** *Arguments against ECT: 1. Unknown ECN capability at the responder (may discard ECT SYN or RST connection) 2. Loss of congestion notification due to lack of support for feeding back CE on SYN at the responder. 3. DoS attacks. Rebuttals (respectively): 1. No RFC mandates these responder behaviours, but 0.6% - 0.8% of Alexa top 1M Web sites (or their network paths) exhibit this. Could retransmit the SYN without ECT, and cache this knowledge to avoid 1 RTT delay in future 2. Support for CE feedback in SYN needed in the TCP wire protocol. Solution proposed in AccECN draft: if SYN/ACK shows lack of support for feeding back CE on SYN (i.e. no support for AccECN) IW MUST be reduced conservatively as if CE on SYN (no need to be as conservative as drop of SYN - cannot be severe congestion as packet got through). Could cache this knowledge. 3. See common DoS Attack rebuttal *Pure ACK** *Arguments against ECT: 1. Unreliable congestion notification delivery 2. No means to feed back congestion notifications (no ACKs of ACKs) Rebuttals (respectively): 1. See common unreliability rebuttal 2. No worse than drop of Pure ACK, and better performance *Retransmission** *Arguments against ECT: 1. Unreliable congestion notification delivery 2. DoS attacks 3. Over-reacting to congestion. Rebuttals (respectively): 1. See common unreliability rebuttal 2. See common DoS Attack rebuttal, complemented by recommendation to ignore CE on out of window packets 3. Correct to react twice to congestion in different RTTs *Window Probe** * Arguments against ECT: 1. Unreliable congestion notification delivery Rebuttal: 1. See common unreliability rebuttal *FIN** * No arguments against using ECT in RFCs. To be discussed in next rev of draft. *RST** * No arguments against using ECT in RFCs To be discussed in next rev of draft. Cheers Bob & Marcelo On 11/07/16 21:28, Black, David wrote: > Marcelo and Bob, > > Interesting draft - I need to read it in more detail ... in my "copious spare time" this week ;-). > > While it is of interest to TSVWG, as general ECN work happens here, I suspect > that as a proposed modification to TCP it would be in the domain of the TCPM WG, > as was the case for RFC 5562. > > Thanks, --David > ---------------------------------------------------- > David L. Black, Distinguished Engineer > EMC, 176 South St., Hopkinton, MA 01748 > +1 (508) 293-7953 Cell: +1 (978) 394-7754 > david.black@emc.com > --------------------------------------------------- > > -- > ________________________________________________________________ > Bob Briscoehttp://bobbriscoe.net/ --------------000802040001040706000000 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit David, [re-sending to include tsvwg & tcpm, which is what I had intended to do first time.]

Here's a heads-up for tsvwg, plus cross-posting to tcpm as suggested,
And for a fast read, there's a summary of every argument below.
Pls bash the arguments.

Summary:
The ECN spec [RFC 3168] says various TCP control packets must not be ECN capable.
This draft lays out each argument given in the RFCs, and articulates a rebuttal against each one:
draft-bagnulo-tsvwg-generalized-ecn
Subject to some more experiments, we think this knocks down every reason given, so that all these packets could safely be ECN-capable.

Pls read the draft for more details (preferably before responding).

Enumeration of arguments about each type of control packet follows, starting with some arguments common to many:
___________________________________________________________________________________________

Common arguments against ECT
  1. Unreliable congestion notification delivery
  2. DoS Attacks
Common rebuttals (respectively):
  1. No worse than undetectable loss of Not-ECT control packet, and better performance
  2. Mandating Not-ECT does not stop attackers using ECT for flooding. Nonetheless, it would allow firewalls to discard control packets not meant to be ECT., however this would negate the benefit of ECT for compliant transports and seems unnecessary for the following reason.
    RFC3168 (Sec.7) and RFC7567 (Sec.4.2.1) say an AQM MUST turn off ECN support if under persistent overload. This makes it hard for flooding packets to gain from ECT, but more experiments needed to see how much might be gained by an attacker flying "just under the radar".

SYN/ACK
ECT on SYN/ACK already justified in RFC5562

SYN
Arguments against ECT:
  1. Unknown ECN capability at the responder (may discard ECT SYN or RST connection)
  2. Loss of congestion notification due to lack of support for feeding back CE on SYN at the responder.
  3. DoS attacks.
Rebuttals (respectively):
  1. No RFC mandates these responder behaviours, but 0.6% - 0.8% of Alexa top 1M Web sites (or their network paths) exhibit this. Could retransmit the SYN without ECT, and cache this knowledge to avoid 1 RTT delay in future
  2. Support for CE feedback in SYN needed in the TCP wire protocol. Solution proposed in AccECN draft: if SYN/ACK shows lack of support for feeding back CE on SYN (i.e. no support for AccECN) IW MUST be reduced conservatively as if CE on SYN (no need to be as conservative as drop of SYN - cannot be severe congestion as packet got through). Could cache this knowledge.
  3. See common DoS Attack rebuttal

Pure ACK
Arguments against ECT:
  1. Unreliable congestion notification delivery
  2. No means to feed back congestion notifications (no ACKs of ACKs)
Rebuttals (respectively):
  1. See common unreliability rebuttal
  2. No worse than drop of Pure ACK, and better performance

Retransmission
Arguments against ECT:
  1. Unreliable congestion notification delivery
  2. DoS attacks
  3. Over-reacting to congestion.
Rebuttals (respectively):
  1. See common unreliability rebuttal
  2. See common DoS Attack rebuttal, complemented by recommendation to ignore CE on out of window packets
  3. Correct to react twice to congestion in different RTTs

Window Probe

Arguments against ECT:
  1. Unreliable congestion notification delivery
Rebuttal:
  1. See common unreliability rebuttal
FIN

No arguments against using ECT in RFCs.
To be discussed in next rev of draft.

RST

No arguments against using ECT in RFCs
To be discussed in next rev of draft.

Cheers


Bob & Marcelo


On 11/07/16 21:28, Black, David wrote:
Marcelo and Bob,

Interesting draft - I need to read it in more detail ... in my "copious spare time" this week ;-).

While it is of interest to TSVWG, as general ECN work happens here, I suspect
that as a proposed modification to TCP it would be in the domain of the TCPM WG,
as was the case for RFC 5562.

Thanks, --David
----------------------------------------------------
David L. Black, Distinguished Engineer
EMC, 176 South St., Hopkinton, MA  01748
+1 (508) 293-7953     Cell: +1 (978) 394-7754
david.black@emc.com        
---------------------------------------------------


-- 
________________________________________________________________
Bob Briscoe                               http://bobbriscoe.net/
--------------000802040001040706000000-- From nobody Fri Jul 15 12:25:08 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAF1312D18D; Fri, 15 Jul 2016 12:25:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.486 X-Spam-Level: X-Spam-Status: No, score=-5.486 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.287] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TEb6cnPx_Zjg; Fri, 15 Jul 2016 12:25:01 -0700 (PDT) Received: from mail-out5.uio.no (mail-out5.uio.no [IPv6:2001:700:100:10::17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C20C712D188; Fri, 15 Jul 2016 12:25:00 -0700 (PDT) Received: from mail-mx2.uio.no ([129.240.10.30]) by mail-out5.uio.no with esmtp (Exim 4.80.1) (envelope-from ) id 1bO8jH-0005gh-7c; Fri, 15 Jul 2016 21:24:55 +0200 Received: from [46.189.28.92] (helo=[10.24.255.5]) by mail-mx2.uio.no with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) user michawe (Exim 4.80) (envelope-from ) id 1bO8jG-00022V-7d; Fri, 15 Jul 2016 21:24:55 +0200 Content-Type: multipart/alternative; boundary="Apple-Mail=_8F1903D8-8D42-4837-A060-B68FABB8283A" Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Michael Welzl In-Reply-To: <57892BE9.4020309@bobbriscoe.net> Date: Fri, 15 Jul 2016 21:25:01 +0200 Message-Id: References: <57892BE9.4020309@bobbriscoe.net> To: Bob Briscoe X-Mailer: Apple Mail (2.3124) X-UiO-SPF-Received: X-UiO-Ratelimit-Test: rcpts/h 9 msgs/h 3 sum rcpts/h 22 sum msgs/h 8 total rcpts 44471 max rcpts/h 54 ratelimit 0 X-UiO-Spam-info: not spam, SpamAssassin (score=-5.0, required=5.0, autolearn=disabled, HTML_MESSAGE=0.001, UIO_MAIL_IS_INTERNAL=-5, uiobl=NO, uiouri=NO) X-UiO-Scanned: 0A32123C720AA820ECB381569D84A2ADE5303EB6 X-UiO-SPAM-Test: remote_host: 46.189.28.92 spam_score: -49 maxlevel 80 minaction 2 bait 0 mail/h: 3 total 20 max/h 9 blacklist 0 greylist 0 ratelimit 0 Archived-At: Cc: "Black, David" , tcpm IETF list , tsvwg IETF list , "draft-bagnulo-tsvwg-generalized-ecn@ietf.org" Subject: Re: [tcpm] Case for ECN-capable TCP control packets: draft-bagnulo-tsvwg-generalized-ecn X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jul 2016 19:25:03 -0000 --Apple-Mail=_8F1903D8-8D42-4837-A060-B68FABB8283A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi, I think this is interesting stuff! Definitely good to work on, I=E2=80=99= m interested to help out if needed. Cheers, Michael > On 15. jul. 2016, at 20.31, Bob Briscoe wrote: >=20 > David, [re-sending to include tsvwg & tcpm, which is what I had = intended to do first time.] >=20 > Here's a heads-up for tsvwg, plus cross-posting to tcpm as suggested, > And for a fast read, there's a summary of every argument below. > Pls bash the arguments. >=20 > Summary: > The ECN spec [RFC 3168] says various TCP control packets must not be = ECN capable. > This draft lays out each argument given in the RFCs, and articulates a = rebuttal against each one: > draft-bagnulo-tsvwg-generalized-ecn = > Subject to some more experiments, we think this knocks down every = reason given, so that all these packets could safely be ECN-capable. >=20 > Pls read the draft for more details (preferably before responding). >=20 > Enumeration of arguments about each type of control packet follows, = starting with some arguments common to many: > = __________________________________________________________________________= _________________ >=20 > Common arguments against ECT > Unreliable congestion notification delivery > DoS Attacks > Common rebuttals (respectively): > No worse than undetectable loss of Not-ECT control packet, and better = performance > Mandating Not-ECT does not stop attackers using ECT for flooding. = Nonetheless, it would allow firewalls to discard control packets not = meant to be ECT., however this would negate the benefit of ECT for = compliant transports and seems unnecessary for the following reason.=20 > RFC3168 (Sec.7) and RFC7567 (Sec.4.2.1) say an AQM MUST turn off ECN = support if under persistent overload. This makes it hard for flooding = packets to gain from ECT, but more experiments needed to see how much = might be gained by an attacker flying "just under the radar". >=20 > SYN/ACK > ECT on SYN/ACK already justified in RFC5562 >=20 > SYN > Arguments against ECT: > Unknown ECN capability at the responder (may discard ECT SYN or RST = connection) > Loss of congestion notification due to lack of support for feeding = back CE on SYN at the responder. > DoS attacks. > Rebuttals (respectively): > No RFC mandates these responder behaviours, but 0.6% - 0.8% of Alexa = top 1M Web sites (or their network paths) exhibit this. Could retransmit = the SYN without ECT, and cache this knowledge to avoid 1 RTT delay in = future > Support for CE feedback in SYN needed in the TCP wire protocol. = Solution proposed in AccECN = draft: if = SYN/ACK shows lack of support for feeding back CE on SYN (i.e. no = support for AccECN) IW MUST be reduced conservatively as if CE on SYN = (no need to be as conservative as drop of SYN - cannot be severe = congestion as packet got through). Could cache this knowledge. > See common DoS Attack rebuttal >=20 > Pure ACK > Arguments against ECT: > Unreliable congestion notification delivery > No means to feed back congestion notifications (no ACKs of ACKs) > Rebuttals (respectively): > See common unreliability rebuttal > No worse than drop of Pure ACK, and better performance >=20 > Retransmission > Arguments against ECT: > Unreliable congestion notification delivery > DoS attacks > Over-reacting to congestion. > Rebuttals (respectively): > See common unreliability rebuttal > See common DoS Attack rebuttal, complemented by recommendation to = ignore CE on out of window packets > Correct to react twice to congestion in different RTTs >=20 > Window Probe >=20 > Arguments against ECT: > Unreliable congestion notification delivery > Rebuttal: > See common unreliability rebuttal > FIN >=20 > No arguments against using ECT in RFCs. > To be discussed in next rev of draft. >=20 > RST >=20 > No arguments against using ECT in RFCs > To be discussed in next rev of draft. >=20 > Cheers >=20 >=20 > Bob & Marcelo >=20 >=20 > On 11/07/16 21:28, Black, David wrote: >> Marcelo and Bob, >>=20 >> Interesting draft - I need to read it in more detail ... in my = "copious spare time" this week ;-). >>=20 >> While it is of interest to TSVWG, as general ECN work happens here, I = suspect >> that as a proposed modification to TCP it would be in the domain of = the TCPM WG, >> as was the case for RFC 5562. >>=20 >> Thanks, --David >> ---------------------------------------------------- >> David L. Black, Distinguished Engineer >> EMC, 176 South St., Hopkinton, MA 01748 >> +1 (508) 293-7953 Cell: +1 (978) 394-7754 >> david.black@emc.com =20 >> --------------------------------------------------- >>=20 >> --=20 >> ________________________________________________________________ >> Bob Briscoe http://bobbriscoe.net/ = _______________________________________________ > tcpm mailing list > tcpm@ietf.org > https://www.ietf.org/mailman/listinfo/tcpm --Apple-Mail=_8F1903D8-8D42-4837-A060-B68FABB8283A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi,

I = think this is interesting stuff!  Definitely good to work on, I=E2=80= =99m interested to help out if needed.

Cheers,
Michael


On 15. jul. 2016, at 20.31, Bob Briscoe <ietf@bobbriscoe.net>= wrote:

=20 =20
David, [re-sending to include tsvwg & tcpm, which is what I had intended to do first time.]

Here's a heads-up for tsvwg, plus cross-posting to tcpm as suggested,
And for a fast read, there's a summary of every argument below.
Pls bash the arguments.

Summary:
The ECN spec [RFC 3168] says various TCP control packets must not be ECN capable.
This draft lays out each argument given in the RFCs, and articulates a rebuttal against each one:
draft-bagnulo-tsvwg-generalized-ecn
Subject to some more experiments, we think this knocks down every reason given, so that all these packets could safely be = ECN-capable.

Pls read the draft for more details (preferably before = responding).

Enumeration of arguments about each type of control packet follows, starting with some arguments common to many:
= __________________________________________________________________________= _________________

Common arguments against ECT
  1. Unreliable congestion notification delivery
  2. DoS Attacks
Common rebuttals (respectively):
  1. No worse than undetectable loss of Not-ECT control = packet, and better performance
  2. Mandating Not-ECT does not stop attackers using ECT = for flooding. Nonetheless, it would allow firewalls to discard control packets not meant to be ECT., however this would negate the benefit of ECT for compliant transports and seems unnecessary for the following reason.
    RFC3168 (Sec.7) and RFC7567 (Sec.4.2.1) say an AQM MUST turn off ECN support if under persistent overload. This makes it hard for flooding packets to gain from ECT, but more experiments needed to see how much might be gained by an attacker flying "just under the radar".

SYN/ACK
ECT on SYN/ACK already justified in RFC5562

SYN
Arguments against ECT:
  1. Unknown ECN capability at the responder (may = discard ECT SYN or RST connection)
  2. Loss of congestion notification due to lack of = support for feeding back CE on SYN at the responder.
  3. DoS attacks.
Rebuttals (respectively):
  1. No RFC mandates these responder behaviours, but = 0.6% - 0.8% of Alexa top 1M Web sites (or their network paths) exhibit this. Could retransmit the SYN without ECT, and cache this knowledge to avoid 1 RTT delay in future
  2. Support for CE feedback in SYN needed in the TCP = wire protocol. Solution proposed in AccECN draft: if SYN/ACK shows lack of support for feeding back CE on SYN (i.e. no support for AccECN) IW MUST be reduced conservatively as if CE on SYN (no need to be as conservative as drop of SYN - cannot be severe congestion as packet got through). Could cache this knowledge.
  3. See common DoS Attack rebuttal

Pure ACK
Arguments against ECT:
  1. Unreliable congestion notification delivery
  2. No means to feed back congestion notifications (no = ACKs of ACKs)
Rebuttals (respectively):
  1. See common unreliability rebuttal
  2. No worse than drop of Pure ACK, and better = performance

Retransmission
Arguments against ECT:
  1. Unreliable congestion notification delivery
  2. DoS attacks
  3. Over-reacting to congestion.
Rebuttals (respectively):
  1. See common unreliability rebuttal
  2. See common DoS Attack rebuttal, complemented by = recommendation to ignore CE on out of window packets
  3. Correct to react twice to congestion in different = RTTs

Window Probe

Arguments against ECT:
  1. Unreliable congestion notification delivery
Rebuttal:
  1. See common unreliability rebuttal
FIN

No arguments against using ECT in RFCs.
To be discussed in next rev of draft.

RST

No arguments against using ECT in RFCs
To be discussed in next rev of draft.

Cheers


Bob & Marcelo


On 11/07/16 21:28, Black, David = wrote:
Marcelo and Bob,

Interesting draft - I need to read it in more detail ... in my "copious =
spare time" this week ;-).

While it is of interest to TSVWG, as general ECN work happens here, I =
suspect
that as a proposed modification to TCP it would be in the domain of the =
TCPM WG,
as was the case for RFC 5562.

Thanks, --David
----------------------------------------------------
David L. Black, Distinguished Engineer
EMC, 176 South St., Hopkinton, MA  01748
+1 (508) 293-7953     Cell: +1 (978) 394-7754
david.black@emc.com  &nb=
sp;    =20
---------------------------------------------------


--=20
________________________________________________________________
Bob Briscoe                               http://bobbriscoe.net/
_______________________________________________
tcpm = mailing list
tcpm@ietf.org
https://www.ietf.org/mailman/listinfo/tcpm

= --Apple-Mail=_8F1903D8-8D42-4837-A060-B68FABB8283A-- From nobody Sat Jul 16 02:14:31 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCEB312D7F1; Sat, 16 Jul 2016 02:14:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.189 X-Spam-Level: X-Spam-Status: No, score=-3.189 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.287, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iqbLp0qiJXnb; Sat, 16 Jul 2016 02:14:24 -0700 (PDT) Received: from trammell.ch (trammell.ch [5.148.172.66]) by ietfa.amsl.com (Postfix) with ESMTP id 62D4812D7E3; Sat, 16 Jul 2016 02:14:24 -0700 (PDT) Received: from dhcp-9999.meeting.ietf.org (dhcp-9999.meeting.ietf.org [31.133.153.153]) by trammell.ch (Postfix) with ESMTPSA id 92F5D1A1675; Sat, 16 Jul 2016 11:14:22 +0200 (CEST) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_24ED7FF2-D681-4669-9BA1-B97B262BE298"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail From: Brian Trammell In-Reply-To: <57892BE9.4020309@bobbriscoe.net> Date: Sat, 16 Jul 2016 11:14:21 +0200 Message-Id: <6CBDEF21-E2A2-4514-BA81-7EF930ABDAF9@trammell.ch> References: <57892BE9.4020309@bobbriscoe.net> To: Bob Briscoe X-Mailer: Apple Mail (2.3124) Archived-At: Cc: "Black, David" , tcpm IETF list , tsvwg IETF list , "draft-bagnulo-tsvwg-generalized-ecn@ietf.org" Subject: Re: [tcpm] [tsvwg] Case for ECN-capable TCP control packets: draft-bagnulo-tsvwg-generalized-ecn X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Jul 2016 09:14:27 -0000 --Apple-Mail=_24ED7FF2-D681-4669-9BA1-B97B262BE298 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 hi Bob, all, Interesting stuff. There is one argument against ECN-marked control packets not appearing = in 3168: the presence of ECT or CE marked TCP control packets is = currently an indication of ECN signaling malfunction in the Internet, = either due to buggy implementations or deployed boxes who still believe = the ToS byte is the ToS byte. In our measurement we haven't seen a lot of this (10^-5 - 10^-6 or so), = but it seems relatively stable as long as we've been looking at it. Allowing TCP control packets to use ECN marking will cause confusion = between correct signaling and incorrect signaling, which makes this = measurement methodology no longer available. It's a minor problem, admittedly, but it will blind us to the ability to = continue monitoring the de-deployemnt of these broken middleboxes and = endpoints. Cheers, Brian > On 15 Jul 2016, at 20:31, Bob Briscoe wrote: >=20 > David, [re-sending to include tsvwg & tcpm, which is what I had = intended to do first time.] >=20 > Here's a heads-up for tsvwg, plus cross-posting to tcpm as suggested, > And for a fast read, there's a summary of every argument below. > Pls bash the arguments. >=20 > Summary: > The ECN spec [RFC 3168] says various TCP control packets must not be = ECN capable. > This draft lays out each argument given in the RFCs, and articulates a = rebuttal against each one: > draft-bagnulo-tsvwg-generalized-ecn > Subject to some more experiments, we think this knocks down every = reason given, so that all these packets could safely be ECN-capable. >=20 > Pls read the draft for more details (preferably before responding). >=20 > Enumeration of arguments about each type of control packet follows, = starting with some arguments common to many: > = __________________________________________________________________________= _________________ >=20 > Common arguments against ECT > =E2=80=A2 Unreliable congestion notification delivery > =E2=80=A2 DoS Attacks > Common rebuttals (respectively): > =E2=80=A2 No worse than undetectable loss of Not-ECT control = packet, and better performance > =E2=80=A2 Mandating Not-ECT does not stop attackers using ECT = for flooding. Nonetheless, it would allow firewalls to discard control = packets not meant to be ECT., however this would negate the benefit of = ECT for compliant transports and seems unnecessary for the following = reason. > RFC3168 (Sec.7) and RFC7567 (Sec.4.2.1) say an AQM MUST turn off ECN = support if under persistent overload. This makes it hard for flooding = packets to gain from ECT, but more experiments needed to see how much = might be gained by an attacker flying "just under the radar". >=20 > SYN/ACK > ECT on SYN/ACK already justified in RFC5562 >=20 > SYN > Arguments against ECT: > =E2=80=A2 Unknown ECN capability at the responder (may discard = ECT SYN or RST connection) > =E2=80=A2 Loss of congestion notification due to lack of support = for feeding back CE on SYN at the responder. > =E2=80=A2 DoS attacks. > Rebuttals (respectively): > =E2=80=A2 No RFC mandates these responder behaviours, but 0.6% - = 0.8% of Alexa top 1M Web sites (or their network paths) exhibit this. = Could retransmit the SYN without ECT, and cache this knowledge to avoid = 1 RTT delay in future > =E2=80=A2 Support for CE feedback in SYN needed in the TCP wire = protocol. Solution proposed in AccECN draft: if SYN/ACK shows lack of = support for feeding back CE on SYN (i.e. no support for AccECN) IW MUST = be reduced conservatively as if CE on SYN (no need to be as conservative = as drop of SYN - cannot be severe congestion as packet got through). = Could cache this knowledge. > =E2=80=A2 See common DoS Attack rebuttal >=20 > Pure ACK > Arguments against ECT: > =E2=80=A2 Unreliable congestion notification delivery > =E2=80=A2 No means to feed back congestion notifications (no = ACKs of ACKs) > Rebuttals (respectively): > =E2=80=A2 See common unreliability rebuttal > =E2=80=A2 No worse than drop of Pure ACK, and better performance >=20 > Retransmission > Arguments against ECT: > =E2=80=A2 Unreliable congestion notification delivery > =E2=80=A2 DoS attacks > =E2=80=A2 Over-reacting to congestion. > Rebuttals (respectively): > =E2=80=A2 See common unreliability rebuttal > =E2=80=A2 See common DoS Attack rebuttal, complemented by = recommendation to ignore CE on out of window packets > =E2=80=A2 Correct to react twice to congestion in different RTTs >=20 > Window Probe >=20 > Arguments against ECT: > =E2=80=A2 Unreliable congestion notification delivery > Rebuttal: > =E2=80=A2 See common unreliability rebuttal > FIN >=20 > No arguments against using ECT in RFCs. > To be discussed in next rev of draft. >=20 > RST >=20 > No arguments against using ECT in RFCs > To be discussed in next rev of draft. >=20 > Cheers >=20 >=20 > Bob & Marcelo >=20 >=20 > On 11/07/16 21:28, Black, David wrote: >> Marcelo and Bob, >>=20 >> Interesting draft - I need to read it in more detail ... in my = "copious spare time" this week ;-). >>=20 >> While it is of interest to TSVWG, as general ECN work happens here, I = suspect >> that as a proposed modification to TCP it would be in the domain of = the TCPM WG, >> as was the case for RFC 5562. >>=20 >> Thanks, --David >> ---------------------------------------------------- >> David L. Black, Distinguished Engineer >> EMC, 176 South St., Hopkinton, MA 01748 >> +1 (508) 293-7953 Cell: +1 (978) 394-7754 >>=20 >> david.black@emc.com >>=20 >> --------------------------------------------------- >>=20 >>=20 >> -- >> ________________________________________________________________ >> Bob Briscoe >> http://bobbriscoe.net/ --Apple-Mail=_24ED7FF2-D681-4669-9BA1-B97B262BE298 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXifrtAAoJEIoSt78L6kajD5cP/AkWnqm+Nf6ANSpJHrwGXnpS xfSLG9CbU1GoNEjg+NMlAAtvavGzo5gjWEefo8Ox4F/oWKiJCheulESDPg0MnLJC Dk+dC3OTs0tKD1y4BJgsHALAFAmGsxjnYRk/LBk7MvYSLrG2677NXAaCuM6G4cxC pX38i91qFQO89+KTn8aYBKhx/kc3nhjKKRPsnEMDVhFSmSia/wBMcoZ+PXWu2t9o bJX9NU2F4OJ2oZ7J6VmZIdUIb///uZP4uwxYV+X93yLgRu79HIpLhAj6xJLypb0I 1NiitA9MHK4vYKpxcLhORXp/QzkYUjwUU0qUDJ/ngwtp3+XTNq2tK7EmEzG1V7IM XAJxLqjh2MIKIQoDoLzHgt40OjZmN/G3F1l2cvjiUOa8ILnz02BlwDBBhMWXfif0 j1VXFwCGwP9I3L7dw4UOyxekcCcFGheYhWy1powA+lWMUiPizLPaBrggfggrP3cu TSXo53IYbM+6HkKlmRFX+smf8NFzCZj3BasPAW/WIztg6uB8votCdP4fJ6uaFJMM m+Y64CfQT2HEO2uWxVbYOgkC71hKPeY1pRv3OQwUjD5+qtNPGEsOKkDbWuRqCi+L w8J75OEpn7X/yncJPH2c9ETjVlVHtk2Aj+FNHRU4dsHX4P0gzv7uz6IfbkZI2AXs Cb+8AsQSXdYxyTArdfpd =egE6 -----END PGP SIGNATURE----- --Apple-Mail=_24ED7FF2-D681-4669-9BA1-B97B262BE298-- From nobody Sat Jul 16 03:04:27 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 378BC12D848; Sat, 16 Jul 2016 03:04:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GwfZE23xboHl; Sat, 16 Jul 2016 03:04:24 -0700 (PDT) Received: from mail-qt0-x22b.google.com (mail-qt0-x22b.google.com [IPv6:2607:f8b0:400d:c0d::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4D6612B075; Sat, 16 Jul 2016 03:04:24 -0700 (PDT) Received: by mail-qt0-x22b.google.com with SMTP id j35so71224196qtj.2; Sat, 16 Jul 2016 03:04:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date:cc:message-id:references :to; bh=MoAis9Li73HSpqn2SuwLp1E0y4p9gvUhZwYcB1G03WU=; b=ifHjFN8kUDRs0f7mbnZWuvbuwR4+BsTddhdbSuV99sv97t6XYnqj1o5SgszH0x2wyk jjXyypHxBqihLmAn821WhcqHWQhybvH9Mg5Ztq0+YOBhGrlrmt+QDfPmbTpKF5ba4Poy 0Zx8OUFh4+dunIR7oUR0lJO5SAQ5CRj2p0Zfc19lpNsh8DyleTf/CqIsbeHqZPqvEEjp Pt7THtUsD/QJeIO6KfLZE7qcjz26eJd+phnuMXifTFP/GYA6Dj0L0ywFHmQqmxh2yHHh i+ZOwCmDJ8jB1E/YuOBdOegIovwT/l307bMZQUavqsXF04fmOn6GtfXt+RWllooV+FBS tIgw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=MoAis9Li73HSpqn2SuwLp1E0y4p9gvUhZwYcB1G03WU=; b=mUFplItvL2qkgpnfca0mDxlYBe3YCOf3WGWHuaXPw82zqAXnYWbnGFtqeH4cm+pQUx YV4WsJajHGHfRQW/4G5K6lsiG4cfMmC9mBQ4zCjCCe/nF1typ++UkebmoamyErBsxipy E7M56lYU2DTKRKFvgTAGD4wxh2x3MGbxFliOKrGhF09Ds0fdzW6HMloLKy/Cg5FWAyvJ j/yKXXx1eg88xkh0PM2H6FXNeGtOAbdZrA+sptDUXQJsBLwPz5Q1l7C4iqixHP79Lowd IIMQZYATnedgzqTbchvzdUOir9WqoFEYTwH4PzrzHe0tECwLGA1ZuW30HX934DaRmSro 2rIA== X-Gm-Message-State: ALyK8tLtlX5ZZpLcKChnmRxjCqxm+157SrughQILyHZxQkJEK33nmEu9tvVE4fjnJlZNwg== X-Received: by 10.200.52.85 with SMTP id v21mr35654904qtb.21.1468663463748; Sat, 16 Jul 2016 03:04:23 -0700 (PDT) Received: from dhcp-8c5c.meeting.ietf.org (dhcp-8c5c.meeting.ietf.org. [31.133.140.92]) by smtp.gmail.com with ESMTPSA id w16sm1968099qta.10.2016.07.16.03.04.21 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sat, 16 Jul 2016 03:04:22 -0700 (PDT) Content-Type: multipart/alternative; boundary="Apple-Mail=_678AEBE8-AFE1-415D-9C8E-C1A185CF2B94" Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Aaron Falk In-Reply-To: <6CBDEF21-E2A2-4514-BA81-7EF930ABDAF9@trammell.ch> Date: Sat, 16 Jul 2016 12:04:20 +0200 Message-Id: <8D821D3E-2924-4C74-8178-9E8AEBC9DD35@gmail.com> References: <57892BE9.4020309@bobbriscoe.net> <6CBDEF21-E2A2-4514-BA81-7EF930ABDAF9@trammell.ch> To: Brian Trammell X-Mailer: Apple Mail (2.3124) Archived-At: Cc: tcpm IETF list , tsvwg IETF list , "draft-bagnulo-tsvwg-generalized-ecn@ietf.org" Subject: Re: [tcpm] [tsvwg] Case for ECN-capable TCP control packets: draft-bagnulo-tsvwg-generalized-ecn X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Jul 2016 10:04:26 -0000 --Apple-Mail=_678AEBE8-AFE1-415D-9C8E-C1A185CF2B94 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Jul 16, 2016, at 11:14 AM, Brian Trammell wrote: >=20 > There is one argument against ECN-marked control packets not appearing = in 3168: the presence of ECT or CE marked TCP control packets is = currently an indication of ECN signaling malfunction in the Internet, = either due to buggy implementations or deployed boxes who still believe = the ToS byte is the ToS byte. >=20 > In our measurement we haven't seen a lot of this (10^-5 - 10^-6 or = so), but it seems relatively stable as long as we've been looking at it. >=20 > Allowing TCP control packets to use ECN marking will cause confusion = between correct signaling and incorrect signaling, which makes this = measurement methodology no longer available. >=20 > It's a minor problem, admittedly, but it will blind us to the ability = to continue monitoring the de-deployemnt of these broken middleboxes and = endpoints. So, it isn=E2=80=99t a feature, it=E2=80=99s a bug?= --Apple-Mail=_678AEBE8-AFE1-415D-9C8E-C1A185CF2B94 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On Jul 16, 2016, at 11:14 AM, Brian Trammell <ietf@trammell.ch> = wrote:

There is one argument against ECN-marked control = packets not appearing in 3168: the presence of ECT or CE marked TCP = control packets is currently an indication of ECN signaling malfunction = in the Internet, either due to buggy implementations or deployed boxes = who still believe the ToS byte is the ToS byte.

In our measurement we haven't = seen a lot of this (10^-5 - 10^-6 or so), but it seems relatively stable = as long as we've been looking at it.

Allowing TCP control packets to use ECN marking = will cause confusion between correct signaling and incorrect signaling, = which makes this measurement methodology no longer available.

It's a minor problem, = admittedly, but it will blind us to the ability to continue monitoring = the de-deployemnt of these broken middleboxes and = endpoints.

So, it isn=E2=80=99t a feature, it=E2=80=99s a = bug?
= --Apple-Mail=_678AEBE8-AFE1-415D-9C8E-C1A185CF2B94-- From nobody Sat Jul 16 03:08:36 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8EB2612B075 for ; Sat, 16 Jul 2016 03:08:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.607 X-Spam-Level: X-Spam-Status: No, score=-5.607 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qcu3wGME6X2R for ; Sat, 16 Jul 2016 03:08:32 -0700 (PDT) Received: from mail-in3.euro.apple.com (mail-in3.euro.apple.com [17.72.148.13]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6DA1012D846 for ; Sat, 16 Jul 2016 03:08:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=apple.com; s=mailout2048s; c=relaxed/simple; q=dns/txt; i=@apple.com; t=1468663707; x=2332577307; h=From:Sender:Reply-To:Subject:Date:Message-id:To:Cc:MIME-version:Content-type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-reply-to:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=Ue18vvcW2XyFJKBa3GuMTrQ1kQHt/nMuuxjX60F6w3k=; b=BGmO3caeGnfEtAUNZFRyZFU9IpGlhxPO1JoXht+Ue826AXqPnJ22abNBEtGtx1pB OF3ENn634WJ9OUgB5PIBL51uD46FYJt+FwdI9ZDxaahxHVxrxAWyjINqM03O0wH6 Qobzvalpf8rmCcaxD7tAHAXVRFonI0IEKJjIFE0nAwBFy0+ERnCvogoylByZjQap 7MF3pfvGf+/vpaYoAThgtDuZz1XylpQ53guAdvUfzL4ROtfPzGbJzNbV9xOEFTl3 HJcB1o1pSq3Hze8b/slv6pc5LNFaK/yb8d0eN9mFMf8upiOMZ/p//oYINdT5zkyj ilAvIBKUFem6D61Je06t7w==; Received: from relay2.euro.apple.com ( [17.66.55.12]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail-in3.euro.apple.com (Symantec Mail Security) with SMTP id EB.8F.16926.B970A875; Sat, 16 Jul 2016 11:08:27 +0100 (BST) X-AuditID: 1148940d-f791b6d00000421e-40-578a079bf4a8 Received: from phonehome1 ( [17.72.133.81]) (using TLS with cipher DHE-RSA-AES128-SHA (128/128 bits)) (Client did not present a certificate) by relay2.euro.apple.com (Symantec Mail Security) with SMTP id B9.2D.22244.B970A875; Sat, 16 Jul 2016 11:08:27 +0100 (BST) Received: from uklon5-asavpn-l2tp-17-78-215-26.euro.apple.com (uklon5-asavpn-l2tp-17-78-215-26.euro.apple.com [17.78.215.26]) by phonehome1.euro.apple.com (Oracle Communications Messaging Server 7.0.5.37.0 64bit (built Nov 11 2015)) with ESMTPSA id <0OAE00MQ7K5Q9W60@phonehome1.euro.apple.com>; Sat, 16 Jul 2016 11:08:27 +0100 (IST) Sender: dschinazi@apple.com Content-type: multipart/alternative; boundary="Apple-Mail=_0F233442-F59F-4024-AF87-145E0F529CB9" MIME-version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: David Schinazi In-reply-to: <57892BE9.4020309@bobbriscoe.net> Date: Sat, 16 Jul 2016 12:08:13 +0200 Message-id: <0EE6E830-0364-40C4-AC62-A7CBA660CE42@apple.com> References: <57892BE9.4020309@bobbriscoe.net> To: Bob Briscoe X-Mailer: Apple Mail (2.3124) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrHLMWRmVeSWpSXmKPExsUi6GTOozubvSvc4PFqHYsFjROZLLadnM9k cezNXTYHZo8lS34yBTBGcdmkpOZklqUW6dslcGU8vtjFVLAhr2LxpXlsDYyTIroYOTkkBEwk Tp2+zg5hi0lcuLeerYuRi0NIYCaTxOPLD5hhig4d62SBSPQySSw4eJURwrnGJPG/p58VpEpY QFqi68JdMJtZIEmi++odNhCbV0BPYvLRBjaImmSJ218mA03l4GAT0JI4sMYIJMwJVLK84zEb SJhFQFXi4hUukPHMAmcZJY6dXMAIMcZGYmvjLrAxQgKFEv1bL7OA1IsA1a9sV4G4U1biyclF YHdKCGxhk7j/6hT7BEbhWUgumoXkIoi4tsSyha+ZZwGNYhbQkZi8kBEiLC+x/e0cZpiSj+eP MC1gZFvFKJ6bmJmjm5lnrJdaWpSvl1hQkJOql5yfu4kRFCseU3h3MF4/aHiIUYCDUYmHN+5X Z7gQa2JZcWXuIUYJDmYlEd4fLF3hQrwpiZVVqUX58UWlOanFhxilOViUxHkbDhWFCwmkJ5ak ZqemFqQWwWSZODilGhiXrmzZNPW4e6+6trhgfvDUH0Ycv90Mj1aY7pRY817eoGbxh5C8E9Nm iqkJ7Om5dDMvdMl5swzXXjVh6x8sig16r+T3PFzvEHl5EltpafW0Td17hDcE6VTr5HILW276 tP2Vp9ukab9yooOZUjbvnLjks9hl3y96IuWBjlu/q0t/uPuLwUftYosSS3FGoqEWc1FxIgCZ I4F4kQIAAA== X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrGLMWRmVeSWpSXmKPExsUi6NEaqDubvSvcYMMHBYsFjROZLLadnM9k cezNXTYHZo8lS34yBTBGcdmkpOZklqUW6dslcGU8vtjFVLAhr2LxpXlsDYyTIroYOTkkBEwk Dh3rZIGwxSQu3FvP1sXIxSEk0MskseDgVUYI5xqTxP+eflaQKmEBaYmuC3fBbGaBJInuq3fY QGxeAT2JyUcb2CBqkiVuf5nM3MXIwcEmoCVxYI0RSJgTqGR5x2M2kDCLgKrExStcIOOZBc4y Shw7uYARYoyNxNbGXWBjhAQKJfq3XmYBqRcBql/ZrgJxp6zEk5OLWCYwCsxCcsQsJEdAxLUl li18zTwLqJtZQEdi8kJGiLC8xPa3c5hhSj6eP8K0gJFtFaNoUWpOYqWRXmppUb5eYkFBTqpe cn7uJkZQaDuZ8+xgfHXQ8BCjAAejEg/vv5+d4UKsiWXFlbmHGCU4mJVEeH+wdIUL8aYkVlal FuXHF5XmpBYfYpTmYFES5/U7oB0uJJCeWJKanZpakFoEk2Xi4JRqYJzrMv1q38eyI4+eW3ju X/azw28B36vATvMqU7Oq899SvjlOeD0t+HiCx/yNU197l+40jygrOpqWaDrnxsN39ds+cL/4 UFn3PvfWdcmeU1e3StWtP/OqYs9x9ll/asw7OPxnn9nYW3Lr3d8rjJNvcCf0nMoM6s+U37Yv Mqp878+lxpW1S9/K+FQosRRnJBpqMRcVJwIA7CsNSmkCAAA= Archived-At: Cc: "Black, David" , tcpm IETF list , tsvwg IETF list , "draft-bagnulo-tsvwg-generalized-ecn@ietf.org" Subject: Re: [tcpm] Case for ECN-capable TCP control packets: draft-bagnulo-tsvwg-generalized-ecn X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Jul 2016 10:08:33 -0000 --Apple-Mail=_0F233442-F59F-4024-AF87-145E0F529CB9 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Bob, This is interesting and promising work. It looks like it's scheduled in tcpm if time permits; let's hope time = does permit! David > On Jul 15, 2016, at 20:31, Bob Briscoe wrote: >=20 > David, [re-sending to include tsvwg & tcpm, which is what I had = intended to do first time.] >=20 > Here's a heads-up for tsvwg, plus cross-posting to tcpm as suggested, > And for a fast read, there's a summary of every argument below. > Pls bash the arguments. >=20 > Summary: > The ECN spec [RFC 3168] says various TCP control packets must not be = ECN capable. > This draft lays out each argument given in the RFCs, and articulates a = rebuttal against each one: > draft-bagnulo-tsvwg-generalized-ecn = > Subject to some more experiments, we think this knocks down every = reason given, so that all these packets could safely be ECN-capable. >=20 > Pls read the draft for more details (preferably before responding). >=20 > Enumeration of arguments about each type of control packet follows, = starting with some arguments common to many: > = __________________________________________________________________________= _________________ >=20 > Common arguments against ECT > Unreliable congestion notification delivery > DoS Attacks > Common rebuttals (respectively): > No worse than undetectable loss of Not-ECT control packet, and better = performance > Mandating Not-ECT does not stop attackers using ECT for flooding. = Nonetheless, it would allow firewalls to discard control packets not = meant to be ECT., however this would negate the benefit of ECT for = compliant transports and seems unnecessary for the following reason.=20 > RFC3168 (Sec.7) and RFC7567 (Sec.4.2.1) say an AQM MUST turn off ECN = support if under persistent overload. This makes it hard for flooding = packets to gain from ECT, but more experiments needed to see how much = might be gained by an attacker flying "just under the radar". >=20 > SYN/ACK > ECT on SYN/ACK already justified in RFC5562 >=20 > SYN > Arguments against ECT: > Unknown ECN capability at the responder (may discard ECT SYN or RST = connection) > Loss of congestion notification due to lack of support for feeding = back CE on SYN at the responder. > DoS attacks. > Rebuttals (respectively): > No RFC mandates these responder behaviours, but 0.6% - 0.8% of Alexa = top 1M Web sites (or their network paths) exhibit this. Could retransmit = the SYN without ECT, and cache this knowledge to avoid 1 RTT delay in = future > Support for CE feedback in SYN needed in the TCP wire protocol. = Solution proposed in AccECN = draft: if = SYN/ACK shows lack of support for feeding back CE on SYN (i.e. no = support for AccECN) IW MUST be reduced conservatively as if CE on SYN = (no need to be as conservative as drop of SYN - cannot be severe = congestion as packet got through). Could cache this knowledge. > See common DoS Attack rebuttal >=20 > Pure ACK > Arguments against ECT: > Unreliable congestion notification delivery > No means to feed back congestion notifications (no ACKs of ACKs) > Rebuttals (respectively): > See common unreliability rebuttal > No worse than drop of Pure ACK, and better performance >=20 > Retransmission > Arguments against ECT: > Unreliable congestion notification delivery > DoS attacks > Over-reacting to congestion. > Rebuttals (respectively): > See common unreliability rebuttal > See common DoS Attack rebuttal, complemented by recommendation to = ignore CE on out of window packets > Correct to react twice to congestion in different RTTs >=20 > Window Probe >=20 > Arguments against ECT: > Unreliable congestion notification delivery > Rebuttal: > See common unreliability rebuttal > FIN >=20 > No arguments against using ECT in RFCs. > To be discussed in next rev of draft. >=20 > RST >=20 > No arguments against using ECT in RFCs > To be discussed in next rev of draft. >=20 > Cheers >=20 >=20 > Bob & Marcelo >=20 >=20 > On 11/07/16 21:28, Black, David wrote: >> Marcelo and Bob, >>=20 >> Interesting draft - I need to read it in more detail ... in my = "copious spare time" this week ;-). >>=20 >> While it is of interest to TSVWG, as general ECN work happens here, I = suspect >> that as a proposed modification to TCP it would be in the domain of = the TCPM WG, >> as was the case for RFC 5562. >>=20 >> Thanks, --David >> ---------------------------------------------------- >> David L. Black, Distinguished Engineer >> EMC, 176 South St., Hopkinton, MA 01748 >> +1 (508) 293-7953 Cell: +1 (978) 394-7754 >> david.black@emc.com =20 >> --------------------------------------------------- >>=20 >> --=20 >> ________________________________________________________________ >> Bob Briscoe http://bobbriscoe.net/ = _______________________________________________ > tcpm mailing list > tcpm@ietf.org > https://www.ietf.org/mailman/listinfo/tcpm --Apple-Mail=_0F233442-F59F-4024-AF87-145E0F529CB9 Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii Bob,

This is interesting and promising work.
It looks like it's scheduled in tcpm if time permits; let's hope time does permit!

David


On Jul 15, 2016, at 20:31, Bob Briscoe <ietf@bobbriscoe.net> wrote:

David, [re-sending to include tsvwg & tcpm, which is what I had intended to do first time.]

Here's a heads-up for tsvwg, plus cross-posting to tcpm as suggested,
And for a fast read, there's a summary of every argument below.
Pls bash the arguments.

Summary:
The ECN spec [RFC 3168] says various TCP control packets must not be ECN capable.
This draft lays out each argument given in the RFCs, and articulates a rebuttal against each one:
draft-bagnulo-tsvwg-generalized-ecn
Subject to some more experiments, we think this knocks down every reason given, so that all these packets could safely be ECN-capable.

Pls read the draft for more details (preferably before responding).

Enumeration of arguments about each type of control packet follows, starting with some arguments common to many:
___________________________________________________________________________________________

Common arguments against ECT
  1. Unreliable congestion notification delivery
  2. DoS Attacks
Common rebuttals (respectively):
  1. No worse than undetectable loss of Not-ECT control packet, and better performance
  2. Mandating Not-ECT does not stop attackers using ECT for flooding. Nonetheless, it would allow firewalls to discard control packets not meant to be ECT., however this would negate the benefit of ECT for compliant transports and seems unnecessary for the following reason.
    RFC3168 (Sec.7) and RFC7567 (Sec.4.2.1) say an AQM MUST turn off ECN support if under persistent overload. This makes it hard for flooding packets to gain from ECT, but more experiments needed to see how much might be gained by an attacker flying "just under the radar".

SYN/ACK
ECT on SYN/ACK already justified in RFC5562

SYN
Arguments against ECT:
  1. Unknown ECN capability at the responder (may discard ECT SYN or RST connection)
  2. Loss of congestion notification due to lack of support for feeding back CE on SYN at the responder.
  3. DoS attacks.
Rebuttals (respectively):
  1. No RFC mandates these responder behaviours, but 0.6% - 0.8% of Alexa top 1M Web sites (or their network paths) exhibit this. Could retransmit the SYN without ECT, and cache this knowledge to avoid 1 RTT delay in future
  2. Support for CE feedback in SYN needed in the TCP wire protocol. Solution proposed in AccECN draft: if SYN/ACK shows lack of support for feeding back CE on SYN (i.e. no support for AccECN) IW MUST be reduced conservatively as if CE on SYN (no need to be as conservative as drop of SYN - cannot be severe congestion as packet got through). Could cache this knowledge.
  3. See common DoS Attack rebuttal

Pure ACK
Arguments against ECT:
  1. Unreliable congestion notification delivery
  2. No means to feed back congestion notifications (no ACKs of ACKs)
Rebuttals (respectively):
  1. See common unreliability rebuttal
  2. No worse than drop of Pure ACK, and better performance

Retransmission
Arguments against ECT:
  1. Unreliable congestion notification delivery
  2. DoS attacks
  3. Over-reacting to congestion.
Rebuttals (respectively):
  1. See common unreliability rebuttal
  2. See common DoS Attack rebuttal, complemented by recommendation to ignore CE on out of window packets
  3. Correct to react twice to congestion in different RTTs

Window Probe

Arguments against ECT:
  1. Unreliable congestion notification delivery
Rebuttal:
  1. See common unreliability rebuttal
FIN

No arguments against using ECT in RFCs.
To be discussed in next rev of draft.

RST

No arguments against using ECT in RFCs
To be discussed in next rev of draft.

Cheers


Bob & Marcelo


On 11/07/16 21:28, Black, David wrote:
Marcelo and Bob,

Interesting draft - I need to read it in more detail ... in my "copious spare time" this week ;-).

While it is of interest to TSVWG, as general ECN work happens here, I suspect
that as a proposed modification to TCP it would be in the domain of the TCPM WG,
as was the case for RFC 5562.

Thanks, --David
----------------------------------------------------
David L. Black, Distinguished Engineer
EMC, 176 South St., Hopkinton, MA  01748
+1 (508) 293-7953     Cell: +1 (978) 394-7754
david.black@emc.com        
---------------------------------------------------


-- 
________________________________________________________________
Bob Briscoe                               http://bobbriscoe.net/
_______________________________________________
tcpm mailing list
tcpm@ietf.org
https://www.ietf.org/mailman/listinfo/tcpm

--Apple-Mail=_0F233442-F59F-4024-AF87-145E0F529CB9-- From nobody Sat Jul 16 09:14:00 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7EEA12D12F; Sat, 16 Jul 2016 09:13:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.011 X-Spam-Level: X-Spam-Status: No, score=-2.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bPbBYjaFvgNy; Sat, 16 Jul 2016 09:13:52 -0700 (PDT) Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0122.outbound.protection.outlook.com [104.47.32.122]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9424E12B016; Sat, 16 Jul 2016 09:13:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=baEGo7Ex890kb8FfuWz7IEijR31KHbjBItmBdk1nytA=; b=hDzgLI4pjjfzkIw36Lj0qcAmixh53qGwpFE+MSMr3nyT9UY/F5A6G7shKntd8Ke9jpWxnF+0tYX7XOJV2naeJmbqToDVdDuFTWxZf6qBtr3VciutD5dKpDNru5qnCl3KbeoIZ+ya69VHMH6RjwYZb/9UPCXbvucpVtnYmdOcTUU= Received: from BN1PR03MB008.namprd03.prod.outlook.com (10.255.224.38) by BN1PR03MB008.namprd03.prod.outlook.com (10.255.224.38) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.523.12; Sat, 16 Jul 2016 16:13:50 +0000 Received: from BN1PR03MB008.namprd03.prod.outlook.com ([169.254.5.66]) by BN1PR03MB008.namprd03.prod.outlook.com ([169.254.5.66]) with mapi id 15.01.0523.029; Sat, 16 Jul 2016 16:13:50 +0000 From: Praveen Balasubramanian To: Bob Briscoe , "Black, David" , tsvwg IETF list , tcpm IETF list Thread-Topic: [tcpm] Case for ECN-capable TCP control packets: draft-bagnulo-tsvwg-generalized-ecn Thread-Index: AQHR3scWdDYbfMi2KUC3rf4+P8G5DqAbOjlg Date: Sat, 16 Jul 2016 16:13:49 +0000 Message-ID: References: <57892BE9.4020309@bobbriscoe.net> In-Reply-To: <57892BE9.4020309@bobbriscoe.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=pravb@microsoft.com; x-originating-ip: [2001:4898:80e8:d::6c7] x-ms-office365-filtering-correlation-id: 6d1accce-a116-4221-d9f6-08d3ad942c95 x-microsoft-exchange-diagnostics: 1; BN1PR03MB008; 6:z0VOFPzskZRK8z6Mz9N3Jw0Aso3GeqZEY7/juuQH9ETX8xa2AN+2JFlLB4bkeImbLpONiFxsRUcb1ppduq8qqxqD7KKOzWM5Al5NBVJfCSjMce71PU6ffVt2LtoOhs4zuUsdgEfWKWKaxJk95VpL+wOHeIBGtpSZueBaNPpX8OrCKMM7rH7CBHzpf7t64HNM3s2JqxEhH/Mpf0gO2y/YfEAzy1NrTIgmHv/KscWFg/4wXEdcnEIimj9P3ODUTwpKsh/y3Jp4fIVmwvpy+5PefJZMXkYnBIc8MovFzAxS+xKmdXBVnttP77OU7eITNv6tavdnn05T12IJaVu94YufJA==; 5:iJ2BqSmRHbUxKv7OaW/80YPnHynAGA0Yl9/DsZIqWS9g81t+VtoF1fuxmX8aXwMwj9oH+nMN03YUsJxL5BPimXzF26Kjxuh4bOmr5MU1ZboT1rBRLnHHj74+pOj1F8rOQZfgiUDlE2C1+617r40TFA==; 24:9mXCp4eTrrxYirbEWqjaRNN9koDBWFL68WCPKUGXD5+DLs15NaA0Z1YUsWGA0o5SSw1i94dG0sVBNhsz/tSdFMXAe/52Q0JgssgXrtwaXh8=; 7:H1rTnK4Y0oFacnlMzxSUwvSALrC7le5HqWCDReT7S6vcxCLbcPsT2hP3GZKwv6PYzJYaff/Udizl5SksExHit/fp94UkYXgGGwOAOVrKtay1z28zimG5gakXJYyKe6OZGHBiAWyGtLMWX4tlc9EmPTRGYaGn7eTOGdZwY5PCF+M8st0aH+346Mqra0gDwDSx5iVbfr6vqet/Sd5/0fWNry0avsaEgCQQcmmZB2O/swCrsDQ1ldIIW1ctcoucN9SP x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN1PR03MB008; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6055026)(61426038)(61427038); SRVR:BN1PR03MB008; BCL:0; PCL:0; RULEID:; SRVR:BN1PR03MB008; x-forefront-prvs: 0005B05917 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(7916002)(24454002)(377454003)(189002)(199003)(92566002)(33656002)(122556002)(586003)(230783001)(15975445007)(81156014)(10290500002)(4326007)(7736002)(86362001)(10400500002)(76576001)(8936002)(7696003)(19300405004)(9686002)(7846002)(74316002)(2906002)(10090500001)(790700001)(5005710100001)(97736004)(81166006)(8676002)(86612001)(102836003)(6116002)(87936001)(5003600100003)(7906003)(16236675004)(15395725005)(105586002)(50986999)(5001770100001)(8666005)(3280700002)(99286002)(19580405001)(19580395003)(11100500001)(3660700001)(189998001)(5002640100001)(19625215002)(19617315012)(106356001)(2900100001)(2950100001)(8990500004)(76176999)(54356999)(106116001)(101416001)(68736007)(7059030)(3826002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR03MB008; H:BN1PR03MB008.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BN1PR03MB008869F87113A749F089AB9B6340BN1PR03MB008namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jul 2016 16:13:49.9884 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR03MB008 Archived-At: Cc: "draft-bagnulo-tsvwg-generalized-ecn@ietf.org" Subject: Re: [tcpm] Case for ECN-capable TCP control packets: draft-bagnulo-tsvwg-generalized-ecn X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Jul 2016 16:13:56 -0000 --_000_BN1PR03MB008869F87113A749F089AB9B6340BN1PR03MB008namprd_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhpcyBpcyBjZXJ0YWlubHkgaW50ZXJlc3Rpbmcgd29yayBhbmQgdmVyeSByZWxldmFudC4NCg0K TWFya2luZyBFQ1Qgb24gU1lOIG1ha2VzIHNlbnNlIGFuZCBkYXRhIHNob3dzIHRoYXQgZm9yIHNj aGVtZXMgbGlrZSBEQ1RDUCwgbm90IG1hcmtpbmcgU1lOIHB1dHMgbmV3IGZsb3dzIGVzdGFibGlz aG1lbnQgYXQgYSBkaXNhZHZhbnRhZ2UgZXNwZWNpYWxseSB3aGVuIHNjaGVtZXMgbGlrZSBEdWFs IFEgQVFNIGFyZSBpbiBwbGF5LiBGSU4gb2NjdXBpZXMgYSBieXRlIGluIHNlcXVlbmNlIG51bWJl ciBzcGFjZSBzbyBtYXJraW5nIEVDVCBvbiBwYWNrZXQgd2l0aCBGSU4gKHdpdGggb3Igd2l0aG91 dCBkYXRhKSBzZWVtcyByZWFzb25hYmxlLiBNYXJraW5nIFJTVCBpcyBwcm9iYWJseSBoYXJtbGVz cy4gSSBkb27igJl0IGhhdmUgYSBzdHJvbmcgb3BpbmlvbiBhYm91dCB3aW5kb3cgcHJvYmVzIGFu ZCByZXRyYW5zbWlzc2lvbnMgYnV0IHRoZSBjb25zaXN0ZW5jeSBhcmd1bWVudCBzaG91bGQgaG9s ZCB1bmxlc3MgdGhlcmUgaXMgYSBkZW1vbnN0cmFibGUgRG9TIGF0dGFjay4NCg0KTXkgbWFpbiBj b25jZXJuIGlzIHdpdGggcHVyZSBBQ0tzLiBJZiB0aGUgcmVjZWl2ZXIgaXMgYSBkdW1iIHJlZmxl Y3RvciBieSBzZW5kaW5nIEVDRSB1cG9uIHJlY2VpdmluZyBhbnkgY29udHJvbCBwYWNrZXQgbWFy a2VkIHdpdGggQ0UgdGhlbiBpdCBjb3VsZCBpbnRlcmZlcmUgd2l0aCDigJxhY2N1cmF0ZSBFQ07i gJ0gbGlrZSBzY2hlbWVzLiBGb3IgZXhhbXBsZSBpZiB0aGUgYXBwbGljYXRpb24gaGFzIGJpLWRp cmVjdGlvbmFsIHRyYWZmaWMgdGhlbiBob3cgd291bGQgdGhlIHNlbmRlciBkaXN0aW5ndWlzaCBh IEVDRSB3YXMgaW4gcmVzcG9uc2UgdG8gYSBtYXJrIG9uIGEgZGF0YSBwYWNrZXQgdmVyc3VzIGFu IEFDSyBwYWNrZXQ/IEkgYW0gb2YgdGhlIG9waW5pb24gdGhhdCB0aGUgcmVjZWl2ZXIgc2hvdWxk IG5vdCBlY2hvIEVDTiBtYXJrcyBvbiBwdXJlIEFDSyBwYWNrZXRzLiBBbnkgb3RoZXIgaWRlYXM/ DQoNCkkgdGhpbmsgYnJpbmdpbmcgdGhpcyB1cCBmb3IgZGlzY3Vzc2lvbiBpbiB3b3JraW5nIGdy b3VwIHdvdWxkIGJlIHZlcnkgdmFsdWFibGUuDQoNClRoYW5rcw0KDQpGcm9tOiB0Y3BtIFttYWls dG86dGNwbS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgQm9iIEJyaXNjb2UNClNlbnQ6 IEZyaWRheSwgSnVseSAxNSwgMjAxNiAxMTozMSBBTQ0KVG86IEJsYWNrLCBEYXZpZCA8ZGF2aWQu YmxhY2tAZW1jLmNvbT47IHRzdndnIElFVEYgbGlzdCA8dHN2d2dAaWV0Zi5vcmc+OyB0Y3BtIElF VEYgbGlzdCA8dGNwbUBpZXRmLm9yZz4NCkNjOiBkcmFmdC1iYWdudWxvLXRzdndnLWdlbmVyYWxp emVkLWVjbkBpZXRmLm9yZw0KU3ViamVjdDogW3RjcG1dIENhc2UgZm9yIEVDTi1jYXBhYmxlIFRD UCBjb250cm9sIHBhY2tldHM6IGRyYWZ0LWJhZ251bG8tdHN2d2ctZ2VuZXJhbGl6ZWQtZWNuDQoN CkRhdmlkLCBbcmUtc2VuZGluZyB0byBpbmNsdWRlIHRzdndnICYgdGNwbSwgd2hpY2ggaXMgd2hh dCBJIGhhZCBpbnRlbmRlZCB0byBkbyBmaXJzdCB0aW1lLl0NCg0KSGVyZSdzIGEgaGVhZHMtdXAg Zm9yIHRzdndnLCBwbHVzIGNyb3NzLXBvc3RpbmcgdG8gdGNwbSBhcyBzdWdnZXN0ZWQsDQpBbmQg Zm9yIGEgZmFzdCByZWFkLCB0aGVyZSdzIGEgc3VtbWFyeSBvZiBldmVyeSBhcmd1bWVudCBiZWxv dy4NClBscyBiYXNoIHRoZSBhcmd1bWVudHMuDQoNClN1bW1hcnk6DQpUaGUgRUNOIHNwZWMgW1JG QyAzMTY4XSBzYXlzIHZhcmlvdXMgVENQIGNvbnRyb2wgcGFja2V0cyBtdXN0IG5vdCBiZSBFQ04g Y2FwYWJsZS4NClRoaXMgZHJhZnQgbGF5cyBvdXQgZWFjaCBhcmd1bWVudCBnaXZlbiBpbiB0aGUg UkZDcywgYW5kIGFydGljdWxhdGVzIGEgcmVidXR0YWwgYWdhaW5zdCBlYWNoIG9uZToNCmRyYWZ0 LWJhZ251bG8tdHN2d2ctZ2VuZXJhbGl6ZWQtZWNuPGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1iYWdudWxvLXRzdndnLWdlbmVyYWxpemVkLWVjbj4NClN1YmplY3QgdG8gc29tZSBt b3JlIGV4cGVyaW1lbnRzLCB3ZSB0aGluayB0aGlzIGtub2NrcyBkb3duIGV2ZXJ5IHJlYXNvbiBn aXZlbiwgc28gdGhhdCBhbGwgdGhlc2UgcGFja2V0cyBjb3VsZCBzYWZlbHkgYmUgRUNOLWNhcGFi bGUuDQoNClBscyByZWFkIHRoZSBkcmFmdCBmb3IgbW9yZSBkZXRhaWxzIChwcmVmZXJhYmx5IGJl Zm9yZSByZXNwb25kaW5nKS4NCg0KRW51bWVyYXRpb24gb2YgYXJndW1lbnRzIGFib3V0IGVhY2gg dHlwZSBvZiBjb250cm9sIHBhY2tldCBmb2xsb3dzLCBzdGFydGluZyB3aXRoIHNvbWUgYXJndW1l bnRzIGNvbW1vbiB0byBtYW55Og0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K DQpDb21tb24gYXJndW1lbnRzIGFnYWluc3QgRUNUDQoNCiAgMS4gIFVucmVsaWFibGUgY29uZ2Vz dGlvbiBub3RpZmljYXRpb24gZGVsaXZlcnkNCiAgMi4gIERvUyBBdHRhY2tzDQpDb21tb24gcmVi dXR0YWxzIChyZXNwZWN0aXZlbHkpOg0KDQogIDEuICBObyB3b3JzZSB0aGFuIHVuZGV0ZWN0YWJs ZSBsb3NzIG9mIE5vdC1FQ1QgY29udHJvbCBwYWNrZXQsIGFuZCBiZXR0ZXIgcGVyZm9ybWFuY2UN CiAgMi4gIE1hbmRhdGluZyBOb3QtRUNUIGRvZXMgbm90IHN0b3AgYXR0YWNrZXJzIHVzaW5nIEVD VCBmb3IgZmxvb2RpbmcuIE5vbmV0aGVsZXNzLCBpdCB3b3VsZCBhbGxvdyBmaXJld2FsbHMgdG8g ZGlzY2FyZCBjb250cm9sIHBhY2tldHMgbm90IG1lYW50IHRvIGJlIEVDVC4sIGhvd2V2ZXIgdGhp cyB3b3VsZCBuZWdhdGUgdGhlIGJlbmVmaXQgb2YgRUNUIGZvciBjb21wbGlhbnQgdHJhbnNwb3J0 cyBhbmQgc2VlbXMgdW5uZWNlc3NhcnkgZm9yIHRoZSBmb2xsb3dpbmcgcmVhc29uLg0KUkZDMzE2 OCAoU2VjLjcpIGFuZCBSRkM3NTY3IChTZWMuNC4yLjEpIHNheSBhbiBBUU0gTVVTVCB0dXJuIG9m ZiBFQ04gc3VwcG9ydCBpZiB1bmRlciBwZXJzaXN0ZW50IG92ZXJsb2FkLiBUaGlzIG1ha2VzIGl0 IGhhcmQgZm9yIGZsb29kaW5nIHBhY2tldHMgdG8gZ2FpbiBmcm9tIEVDVCwgYnV0IG1vcmUgZXhw ZXJpbWVudHMgbmVlZGVkIHRvIHNlZSBob3cgbXVjaCBtaWdodCBiZSBnYWluZWQgYnkgYW4gYXR0 YWNrZXIgZmx5aW5nICJqdXN0IHVuZGVyIHRoZSByYWRhciIuDQoNClNZTi9BQ0sNCkVDVCBvbiBT WU4vQUNLIGFscmVhZHkganVzdGlmaWVkIGluIFJGQzU1NjINCg0KU1lODQpBcmd1bWVudHMgYWdh aW5zdCBFQ1Q6DQoNCiAgMS4gIFVua25vd24gRUNOIGNhcGFiaWxpdHkgYXQgdGhlIHJlc3BvbmRl ciAobWF5IGRpc2NhcmQgRUNUIFNZTiBvciBSU1QgY29ubmVjdGlvbikNCiAgMi4gIExvc3Mgb2Yg Y29uZ2VzdGlvbiBub3RpZmljYXRpb24gZHVlIHRvIGxhY2sgb2Ygc3VwcG9ydCBmb3IgZmVlZGlu ZyBiYWNrIENFIG9uIFNZTiBhdCB0aGUgcmVzcG9uZGVyLg0KICAzLiAgRG9TIGF0dGFja3MuDQpS ZWJ1dHRhbHMgKHJlc3BlY3RpdmVseSk6DQoNCiAgMS4gIE5vIFJGQyBtYW5kYXRlcyB0aGVzZSBy ZXNwb25kZXIgYmVoYXZpb3VycywgYnV0IDAuNiUgLSAwLjglIG9mIEFsZXhhIHRvcCAxTSBXZWIg c2l0ZXMgKG9yIHRoZWlyIG5ldHdvcmsgcGF0aHMpIGV4aGliaXQgdGhpcy4gQ291bGQgcmV0cmFu c21pdCB0aGUgU1lOIHdpdGhvdXQgRUNULCBhbmQgY2FjaGUgdGhpcyBrbm93bGVkZ2UgdG8gYXZv aWQgMSBSVFQgZGVsYXkgaW4gZnV0dXJlDQogIDIuICBTdXBwb3J0IGZvciBDRSBmZWVkYmFjayBp biBTWU4gbmVlZGVkIGluIHRoZSBUQ1Agd2lyZSBwcm90b2NvbC4gU29sdXRpb24gcHJvcG9zZWQg aW4gQWNjRUNOPGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXRjcG0tYWNj dXJhdGUtZWNuPiBkcmFmdDogaWYgU1lOL0FDSyBzaG93cyBsYWNrIG9mIHN1cHBvcnQgZm9yIGZl ZWRpbmcgYmFjayBDRSBvbiBTWU4gKGkuZS4gbm8gc3VwcG9ydCBmb3IgQWNjRUNOKSBJVyBNVVNU IGJlIHJlZHVjZWQgY29uc2VydmF0aXZlbHkgYXMgaWYgQ0Ugb24gU1lOIChubyBuZWVkIHRvIGJl IGFzIGNvbnNlcnZhdGl2ZSBhcyBkcm9wIG9mIFNZTiAtIGNhbm5vdCBiZSBzZXZlcmUgY29uZ2Vz dGlvbiBhcyBwYWNrZXQgZ290IHRocm91Z2gpLiBDb3VsZCBjYWNoZSB0aGlzIGtub3dsZWRnZS4N CiAgMy4gIFNlZSBjb21tb24gRG9TIEF0dGFjayByZWJ1dHRhbA0KDQpQdXJlIEFDSw0KQXJndW1l bnRzIGFnYWluc3QgRUNUOg0KDQogIDEuICBVbnJlbGlhYmxlIGNvbmdlc3Rpb24gbm90aWZpY2F0 aW9uIGRlbGl2ZXJ5DQogIDIuICBObyBtZWFucyB0byBmZWVkIGJhY2sgY29uZ2VzdGlvbiBub3Rp ZmljYXRpb25zIChubyBBQ0tzIG9mIEFDS3MpDQpSZWJ1dHRhbHMgKHJlc3BlY3RpdmVseSk6DQoN CiAgMS4gIFNlZSBjb21tb24gdW5yZWxpYWJpbGl0eSByZWJ1dHRhbA0KICAyLiAgTm8gd29yc2Ug dGhhbiBkcm9wIG9mIFB1cmUgQUNLLCBhbmQgYmV0dGVyIHBlcmZvcm1hbmNlDQoNClJldHJhbnNt aXNzaW9uDQpBcmd1bWVudHMgYWdhaW5zdCBFQ1Q6DQoNCiAgMS4gIFVucmVsaWFibGUgY29uZ2Vz dGlvbiBub3RpZmljYXRpb24gZGVsaXZlcnkNCiAgMi4gIERvUyBhdHRhY2tzDQogIDMuICBPdmVy LXJlYWN0aW5nIHRvIGNvbmdlc3Rpb24uDQpSZWJ1dHRhbHMgKHJlc3BlY3RpdmVseSk6DQoNCiAg MS4gIFNlZSBjb21tb24gdW5yZWxpYWJpbGl0eSByZWJ1dHRhbA0KICAyLiAgU2VlIGNvbW1vbiBE b1MgQXR0YWNrIHJlYnV0dGFsLCBjb21wbGVtZW50ZWQgYnkgcmVjb21tZW5kYXRpb24gdG8gaWdu b3JlIENFIG9uIG91dCBvZiB3aW5kb3cgcGFja2V0cw0KICAzLiAgQ29ycmVjdCB0byByZWFjdCB0 d2ljZSB0byBjb25nZXN0aW9uIGluIGRpZmZlcmVudCBSVFRzDQoNCldpbmRvdyBQcm9iZQ0KDQpB cmd1bWVudHMgYWdhaW5zdCBFQ1Q6DQoNCiAgMS4gIFVucmVsaWFibGUgY29uZ2VzdGlvbiBub3Rp ZmljYXRpb24gZGVsaXZlcnkNClJlYnV0dGFsOg0KDQogIDEuICBTZWUgY29tbW9uIHVucmVsaWFi aWxpdHkgcmVidXR0YWwNCkZJTg0KDQpObyBhcmd1bWVudHMgYWdhaW5zdCB1c2luZyBFQ1QgaW4g UkZDcy4NClRvIGJlIGRpc2N1c3NlZCBpbiBuZXh0IHJldiBvZiBkcmFmdC4NCg0KUlNUDQoNCk5v IGFyZ3VtZW50cyBhZ2FpbnN0IHVzaW5nIEVDVCBpbiBSRkNzDQpUbyBiZSBkaXNjdXNzZWQgaW4g bmV4dCByZXYgb2YgZHJhZnQuDQoNCkNoZWVycw0KDQoNCkJvYiAmIE1hcmNlbG8NCg0KT24gMTEv MDcvMTYgMjE6MjgsIEJsYWNrLCBEYXZpZCB3cm90ZToNCg0KTWFyY2VsbyBhbmQgQm9iLA0KDQoN Cg0KSW50ZXJlc3RpbmcgZHJhZnQgLSBJIG5lZWQgdG8gcmVhZCBpdCBpbiBtb3JlIGRldGFpbCAu Li4gaW4gbXkgImNvcGlvdXMgc3BhcmUgdGltZSIgdGhpcyB3ZWVrIDstKS4NCg0KDQoNCldoaWxl IGl0IGlzIG9mIGludGVyZXN0IHRvIFRTVldHLCBhcyBnZW5lcmFsIEVDTiB3b3JrIGhhcHBlbnMg aGVyZSwgSSBzdXNwZWN0DQoNCnRoYXQgYXMgYSBwcm9wb3NlZCBtb2RpZmljYXRpb24gdG8gVENQ IGl0IHdvdWxkIGJlIGluIHRoZSBkb21haW4gb2YgdGhlIFRDUE0gV0csDQoNCmFzIHdhcyB0aGUg Y2FzZSBmb3IgUkZDIDU1NjIuDQoNCg0KDQpUaGFua3MsIC0tRGF2aWQNCg0KLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQpEYXZpZCBMLiBCbGFj aywgRGlzdGluZ3Vpc2hlZCBFbmdpbmVlcg0KDQpFTUMsIDE3NiBTb3V0aCBTdC4sIEhvcGtpbnRv biwgTUEgIDAxNzQ4DQoNCisxICg1MDgpIDI5My03OTUzICAgICBDZWxsOiArMSAoOTc4KSAzOTQt Nzc1NA0KDQpkYXZpZC5ibGFja0BlbWMuY29tPG1haWx0bzpkYXZpZC5ibGFja0BlbWMuY29tPg0K DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0K DQoNCi0tDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCg0KQm9iIEJyaXNjb2UgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgaHR0cDovL2JvYmJyaXNjb2UubmV0Lw0K --_000_BN1PR03MB008869F87113A749F089AB9B6340BN1PR03MB008namprd_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsNCglwYW5vc2UtMToyIDEx IDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcg Um9tYW4iLHNlcmlmOw0KCWNvbG9yOmJsYWNrO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9u OnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5k ZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6 IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTou MDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsN Cgljb2xvcjpibGFjazt9DQpzcGFuLkhUTUxQcmVmb3JtYXR0ZWRDaGFyDQoJe21zby1zdHlsZS1u YW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJ bXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIjsNCglmb250LWZhbWlseTpDb25zb2xh czsNCgljb2xvcjpibGFjazt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29u b3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0K CW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1l cyBOZXcgUm9tYW4iLHNlcmlmOw0KCWNvbG9yOmJsYWNrO30NCnNwYW4uRW1haWxTdHlsZTIwDQoJ e21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0 eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2Vj dGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEu MGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBE ZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MzYwOTM1MDM4Ow0KCW1zby1s aXN0LXRlbXBsYXRlLWlkczoxNjU5MjgyODc4O30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2 ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtdGFiLXN0b3A6 MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxp c3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDoyLjBpbjsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVs NQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxl dmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC10YWItc3Rv cDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluO30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpA bGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDENCgl7 bXNvLWxpc3QtaWQ6NDYyOTY5NjI5Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczoxOTczNDc5NTY2 O30NCkBsaXN0IGwxOmxldmVsMQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwx OmxldmVsMg0KCXttc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDMNCgl7 bXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw0DQoJe21zby1sZXZlbC10 YWItc3RvcDoyLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1p bmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsNQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6Mi41 aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjt9DQpAbGlzdCBsMTpsZXZlbDYNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3Qg bDE6bGV2ZWw3DQoJe21zby1sZXZlbC10YWItc3RvcDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsOA0K CXttc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDkNCgl7bXNvLWxldmVs LXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDINCgl7bXNvLWxpc3QtaWQ6NDg2ODI0NDg1Ow0KCW1z by1saXN0LXRlbXBsYXRlLWlkczo4MzI3MzM1MTA7fQ0KQGxpc3QgbDI6bGV2ZWwxDQoJe21zby1s ZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDI6bGV2ZWwyDQoJe21zby1sZXZlbC10YWItc3Rv cDoxLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluO30NCkBsaXN0IGwyOmxldmVsMw0KCXttc28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpA bGlzdCBsMjpsZXZlbDQNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDI6bGV2 ZWw1DQoJe21zby1sZXZlbC10YWItc3RvcDoyLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwyOmxldmVsNg0KCXttc28t bGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMjpsZXZlbDcNCgl7bXNvLWxldmVsLXRhYi1z dG9wOjMuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47fQ0KQGxpc3QgbDI6bGV2ZWw4DQoJe21zby1sZXZlbC10YWItc3RvcDo0LjBpbjsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30N CkBsaXN0IGwyOmxldmVsOQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMw0K CXttc28tbGlzdC1pZDo0OTEwMjY2NzQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjE3MzQxMjI3 ODI7fQ0KQGxpc3QgbDM6bGV2ZWwxDQoJe21zby1sZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3Qg bDM6bGV2ZWwyDQoJe21zby1sZXZlbC10YWItc3RvcDoxLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwzOmxldmVsMw0K CXttc28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMzpsZXZlbDQNCgl7bXNvLWxldmVs LXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDM6bGV2ZWw1DQoJe21zby1sZXZlbC10YWItc3RvcDoy LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluO30NCkBsaXN0IGwzOmxldmVsNg0KCXttc28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlz dCBsMzpsZXZlbDcNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDM6bGV2ZWw4 DQoJe21zby1sZXZlbC10YWItc3RvcDo0LjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwzOmxldmVsOQ0KCXttc28tbGV2 ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNA0KCXttc28tbGlzdC1pZDoxMDMzMjYyNjI0Ow0K CW1zby1saXN0LXRlbXBsYXRlLWlkczotMTg5MTQ3MDUzNjt9DQpAbGlzdCBsNDpsZXZlbDENCgl7 bXNvLWxldmVsLXRhYi1zdG9wOi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNDpsZXZlbDINCgl7bXNvLWxldmVsLXRh Yi1zdG9wOjEuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47fQ0KQGxpc3QgbDQ6bGV2ZWwzDQoJe21zby1sZXZlbC10YWItc3RvcDoxLjVp bjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu O30NCkBsaXN0IGw0OmxldmVsNA0KCXttc28tbGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBs NDpsZXZlbDUNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDQ6bGV2ZWw2DQoJ e21zby1sZXZlbC10YWItc3RvcDozLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw0OmxldmVsNw0KCXttc28tbGV2ZWwt dGFiLXN0b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNDpsZXZlbDgNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjQu MGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47fQ0KQGxpc3QgbDQ6bGV2ZWw5DQoJe21zby1sZXZlbC10YWItc3RvcDo0LjVpbjsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0 IGw1DQoJe21zby1saXN0LWlkOjEzODA2NjY4Nzg7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi0x MjAzNjIzMTM4O30NCkBsaXN0IGw1OmxldmVsMQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30N CkBsaXN0IGw1OmxldmVsMg0KCXttc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNTps ZXZlbDMNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDU6bGV2ZWw0DQoJe21z by1sZXZlbC10YWItc3RvcDoyLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw1OmxldmVsNQ0KCXttc28tbGV2ZWwtdGFi LXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjt9DQpAbGlzdCBsNTpsZXZlbDYNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjMuMGlu Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 fQ0KQGxpc3QgbDU6bGV2ZWw3DQoJe21zby1sZXZlbC10YWItc3RvcDozLjVpbjsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw1 OmxldmVsOA0KCXttc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNTpsZXZlbDkNCgl7 bXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDYNCgl7bXNvLWxpc3QtaWQ6MTY5MTk1 NDM0MjsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6MTk1NzQzNTU4O30NCkBsaXN0IGw2OmxldmVs MQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw2OmxldmVsMg0KCXttc28tbGV2 ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNjpsZXZlbDMNCgl7bXNvLWxldmVsLXRhYi1zdG9w OjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47fQ0KQGxpc3QgbDY6bGV2ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDoyLjBpbjsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBs aXN0IGw2OmxldmVsNQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNjpsZXZl bDYNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDY6bGV2ZWw3DQoJe21zby1s ZXZlbC10YWItc3RvcDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw2OmxldmVsOA0KCXttc28tbGV2ZWwtdGFiLXN0 b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjt9DQpAbGlzdCBsNjpsZXZlbDkNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0K QGxpc3QgbDcNCgl7bXNvLWxpc3QtaWQ6MTg3NDIyOTcwNzsNCgltc28tbGlzdC10ZW1wbGF0ZS1p ZHM6MjExNzI1NTg2ODt9DQpAbGlzdCBsNzpsZXZlbDENCgl7bXNvLWxldmVsLXRhYi1zdG9wOi41 aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjt9DQpAbGlzdCBsNzpsZXZlbDINCgl7bXNvLWxldmVsLXRhYi1zdG9wOjEuMGluOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3Qg bDc6bGV2ZWwzDQoJe21zby1sZXZlbC10YWItc3RvcDoxLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw3OmxldmVsNA0K CXttc28tbGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNzpsZXZlbDUNCgl7bXNvLWxldmVs LXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDc6bGV2ZWw2DQoJe21zby1sZXZlbC10YWItc3RvcDoz LjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluO30NCkBsaXN0IGw3OmxldmVsNw0KCXttc28tbGV2ZWwtdGFiLXN0b3A6My41aW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlz dCBsNzpsZXZlbDgNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDc6bGV2ZWw5 DQoJe21zby1sZXZlbC10YWItc3RvcDo0LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw4DQoJe21zby1saXN0LWlkOjE4 ODM1ODg3NTE7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi0xNzc5NTUwODg4O30NCkBsaXN0IGw4 OmxldmVsMQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw4OmxldmVsMg0KCXtt c28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsODpsZXZlbDMNCgl7bXNvLWxldmVsLXRh Yi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47fQ0KQGxpc3QgbDg6bGV2ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDoyLjBp bjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu O30NCkBsaXN0IGw4OmxldmVsNQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBs ODpsZXZlbDYNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDg6bGV2ZWw3DQoJ e21zby1sZXZlbC10YWItc3RvcDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw4OmxldmVsOA0KCXttc28tbGV2ZWwt dGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsODpsZXZlbDkNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjQu NWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47fQ0KQGxpc3QgbDkNCgl7bXNvLWxpc3QtaWQ6MjA0OTUzMDExODsNCgltc28tbGlzdC10ZW1w bGF0ZS1pZHM6LTQwNjQzNDA2NDt9DQpAbGlzdCBsOTpsZXZlbDENCgl7bXNvLWxldmVsLXRhYi1z dG9wOi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjt9DQpAbGlzdCBsOTpsZXZlbDINCgl7bXNvLWxldmVsLXRhYi1zdG9wOjEuMGluOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0K QGxpc3QgbDk6bGV2ZWwzDQoJe21zby1sZXZlbC10YWItc3RvcDoxLjVpbjsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw5Omxl dmVsNA0KCXttc28tbGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsOTpsZXZlbDUNCgl7bXNv LWxldmVsLXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDk6bGV2ZWw2DQoJe21zby1sZXZlbC10YWIt c3RvcDozLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluO30NCkBsaXN0IGw5OmxldmVsNw0KCXttc28tbGV2ZWwtdGFiLXN0b3A6My41aW47 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9 DQpAbGlzdCBsOTpsZXZlbDgNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDk6 bGV2ZWw5DQoJe21zby1sZXZlbC10YWItc3RvcDo0LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCm9sDQoJe21hcmdpbi1ib3R0b206 MGluO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGluO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUg bXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2 IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFw ZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4N CjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGJnY29s b3I9IndoaXRlIiBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2 IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOndpbmRvd3RleHQiPlRoaXMgaXMgY2VydGFpbmx5IGludGVyZXN0aW5nIHdvcmsg YW5kIHZlcnkgcmVsZXZhbnQuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6d2luZG93dGV4dCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OndpbmRvd3RleHQiPk1hcmtpbmcgRUNUIG9uIFNZTiBtYWtlcyBzZW5zZSBhbmQgZGF0YSBzaG93 cyB0aGF0IGZvciBzY2hlbWVzIGxpa2UgRENUQ1AsIG5vdCBtYXJraW5nIFNZTiBwdXRzIG5ldyBm bG93cyBlc3RhYmxpc2htZW50IGF0IGEgZGlzYWR2YW50YWdlIGVzcGVjaWFsbHkgd2hlbiBzY2hl bWVzDQogbGlrZSBEdWFsIFEgQVFNIGFyZSBpbiBwbGF5LiBGSU4gb2NjdXBpZXMgYSBieXRlIGlu IHNlcXVlbmNlIG51bWJlciBzcGFjZSBzbyBtYXJraW5nIEVDVCBvbiBwYWNrZXQgd2l0aCBGSU4g KHdpdGggb3Igd2l0aG91dCBkYXRhKSBzZWVtcyByZWFzb25hYmxlLiBNYXJraW5nIFJTVCBpcyBw cm9iYWJseSBoYXJtbGVzcy4gSSBkb27igJl0IGhhdmUgYSBzdHJvbmcgb3BpbmlvbiBhYm91dCB3 aW5kb3cgcHJvYmVzIGFuZCByZXRyYW5zbWlzc2lvbnMgYnV0DQogdGhlIGNvbnNpc3RlbmN5IGFy Z3VtZW50IHNob3VsZCBob2xkIHVubGVzcyB0aGVyZSBpcyBhIGRlbW9uc3RyYWJsZSBEb1MgYXR0 YWNrLiA8bzpwPg0KPC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjp3aW5kb3d0ZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6d2luZG93dGV4dCI+ TXkgbWFpbiBjb25jZXJuIGlzIHdpdGggcHVyZSBBQ0tzLiBJZiB0aGUgcmVjZWl2ZXIgaXMgYSBk dW1iIHJlZmxlY3RvciBieSBzZW5kaW5nIEVDRSB1cG9uIHJlY2VpdmluZyBhbnkgY29udHJvbCBw YWNrZXQgbWFya2VkIHdpdGggQ0UgdGhlbiBpdCBjb3VsZCBpbnRlcmZlcmUNCiB3aXRoIOKAnGFj Y3VyYXRlIEVDTuKAnSBsaWtlIHNjaGVtZXMuIEZvciBleGFtcGxlIGlmIHRoZSBhcHBsaWNhdGlv biBoYXMgYmktZGlyZWN0aW9uYWwgdHJhZmZpYyB0aGVuIGhvdyB3b3VsZCB0aGUgc2VuZGVyIGRp c3Rpbmd1aXNoIGEgRUNFIHdhcyBpbiByZXNwb25zZSB0byBhIG1hcmsgb24gYSBkYXRhIHBhY2tl dCB2ZXJzdXMgYW4gQUNLIHBhY2tldD8gSSBhbSBvZiB0aGUgb3BpbmlvbiB0aGF0IHRoZSByZWNl aXZlciBzaG91bGQgbm90IGVjaG8gRUNODQogbWFya3Mgb24gcHVyZSBBQ0sgcGFja2V0cy4gQW55 IG90aGVyIGlkZWFzPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjp3aW5kb3d0ZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6d2luZG93 dGV4dCI+SSB0aGluayBicmluZ2luZyB0aGlzIHVwIGZvciBkaXNjdXNzaW9uIGluIHdvcmtpbmcg Z3JvdXAgd291bGQgYmUgdmVyeSB2YWx1YWJsZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6d2luZG93dGV4dCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOndpbmRvd3RleHQiPlRoYW5rczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjp3aW5kb3d0ZXh0Ij48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOndpbmRvd3RleHQi PkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6d2luZG93dGV4dCI+IHRjcG0g W21haWx0bzp0Y3BtLWJvdW5jZXNAaWV0Zi5vcmddDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPkJvYiBC cmlzY29lPGJyPg0KPGI+U2VudDo8L2I+IEZyaWRheSwgSnVseSAxNSwgMjAxNiAxMTozMSBBTTxi cj4NCjxiPlRvOjwvYj4gQmxhY2ssIERhdmlkICZsdDtkYXZpZC5ibGFja0BlbWMuY29tJmd0Ozsg dHN2d2cgSUVURiBsaXN0ICZsdDt0c3Z3Z0BpZXRmLm9yZyZndDs7IHRjcG0gSUVURiBsaXN0ICZs dDt0Y3BtQGlldGYub3JnJmd0Ozxicj4NCjxiPkNjOjwvYj4gZHJhZnQtYmFnbnVsby10c3Z3Zy1n ZW5lcmFsaXplZC1lY25AaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gW3RjcG1dIENhc2Ug Zm9yIEVDTi1jYXBhYmxlIFRDUCBjb250cm9sIHBhY2tldHM6IGRyYWZ0LWJhZ251bG8tdHN2d2ct Z2VuZXJhbGl6ZWQtZWNuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+RGF2aWQsIFtyZS1zZW5kaW5nIHRvIGluY2x1ZGUgdHN2d2cgJmFtcDsgdGNwbSwgd2hp Y2ggaXMgd2hhdCBJIGhhZCBpbnRlbmRlZCB0byBkbyBmaXJzdCB0aW1lLl08YnI+DQo8YnI+DQpI ZXJlJ3MgYSBoZWFkcy11cCBmb3IgdHN2d2csIHBsdXMgY3Jvc3MtcG9zdGluZyB0byB0Y3BtIGFz IHN1Z2dlc3RlZCw8YnI+DQpBbmQgZm9yIGEgZmFzdCByZWFkLCB0aGVyZSdzIGEgc3VtbWFyeSBv ZiBldmVyeSBhcmd1bWVudCBiZWxvdy48YnI+DQpQbHMgYmFzaCB0aGUgYXJndW1lbnRzLjxicj4N Cjxicj4NClN1bW1hcnk6PGJyPg0KVGhlIEVDTiBzcGVjIFtSRkMgMzE2OF0gc2F5cyB2YXJpb3Vz IFRDUCBjb250cm9sIHBhY2tldHMgbXVzdCBub3QgYmUgRUNOIGNhcGFibGUuPGJyPg0KVGhpcyBk cmFmdCBsYXlzIG91dCBlYWNoIGFyZ3VtZW50IGdpdmVuIGluIHRoZSBSRkNzLCBhbmQgYXJ0aWN1 bGF0ZXMgYSByZWJ1dHRhbCBhZ2FpbnN0IGVhY2ggb25lOjxicj4NCjxhIGhyZWY9Imh0dHBzOi8v dG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1iYWdudWxvLXRzdndnLWdlbmVyYWxpemVkLWVjbiI+ ZHJhZnQtYmFnbnVsby10c3Z3Zy1nZW5lcmFsaXplZC1lY248L2E+PGJyPg0KU3ViamVjdCB0byBz b21lIG1vcmUgZXhwZXJpbWVudHMsIHdlIHRoaW5rIHRoaXMga25vY2tzIGRvd24gZXZlcnkgcmVh c29uIGdpdmVuLCBzbyB0aGF0IGFsbCB0aGVzZSBwYWNrZXRzIGNvdWxkIHNhZmVseSBiZSBFQ04t Y2FwYWJsZS48YnI+DQo8YnI+DQpQbHMgcmVhZCB0aGUgZHJhZnQgZm9yIG1vcmUgZGV0YWlscyAo cHJlZmVyYWJseSBiZWZvcmUgcmVzcG9uZGluZykuPGJyPg0KPGJyPg0KRW51bWVyYXRpb24gb2Yg YXJndW1lbnRzIGFib3V0IGVhY2ggdHlwZSBvZiBjb250cm9sIHBhY2tldCBmb2xsb3dzLCBzdGFy dGluZyB3aXRoIHNvbWUgYXJndW1lbnRzIGNvbW1vbiB0byBtYW55Ojxicj4NCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX188YnI+DQo8YnI+DQo8Yj5Db21tb24gYXJndW1lbnRzIGFn YWluc3QgRUNUPC9iPjxvOnA+PC9vOnA+PC9wPg0KPG9sIHN0YXJ0PSIxIiB0eXBlPSIxIj4NCjxs aSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPg0KVW5yZWxpYWJs ZSBjb25nZXN0aW9uIG5vdGlmaWNhdGlvbiBkZWxpdmVyeTxvOnA+PC9vOnA+PC9saT48bGkgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj4NCkRvUyBBdHRhY2tzPG86 cD48L286cD48L2xpPjwvb2w+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Db21tb24gcmVidXR0YWxz IChyZXNwZWN0aXZlbHkpOjxvOnA+PC9vOnA+PC9wPg0KPG9sIHN0YXJ0PSIxIiB0eXBlPSIxIj4N CjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDggbGV2ZWwxIGxmbzIiPg0KTm8gd29y c2UgdGhhbiB1bmRldGVjdGFibGUgbG9zcyBvZiBOb3QtRUNUIGNvbnRyb2wgcGFja2V0LCBhbmQg YmV0dGVyIHBlcmZvcm1hbmNlPG86cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87 bXNvLWxpc3Q6bDggbGV2ZWwxIGxmbzIiPg0KTWFuZGF0aW5nIE5vdC1FQ1QgZG9lcyBub3Qgc3Rv cCBhdHRhY2tlcnMgdXNpbmcgRUNUIGZvciBmbG9vZGluZy4gTm9uZXRoZWxlc3MsIGl0IHdvdWxk IGFsbG93IGZpcmV3YWxscyB0byBkaXNjYXJkIGNvbnRyb2wgcGFja2V0cyBub3QgbWVhbnQgdG8g YmUgRUNULiwgaG93ZXZlciB0aGlzIHdvdWxkIG5lZ2F0ZSB0aGUgYmVuZWZpdCBvZiBFQ1QgZm9y IGNvbXBsaWFudCB0cmFuc3BvcnRzIGFuZCBzZWVtcyB1bm5lY2Vzc2FyeSBmb3IgdGhlIGZvbGxv d2luZw0KIHJlYXNvbi4gPGJyPg0KUkZDMzE2OCAoU2VjLjcpIGFuZCBSRkM3NTY3IChTZWMuNC4y LjEpIHNheSBhbiBBUU0gTVVTVCB0dXJuIG9mZiBFQ04gc3VwcG9ydCBpZiB1bmRlciBwZXJzaXN0 ZW50IG92ZXJsb2FkLiBUaGlzIG1ha2VzIGl0IGhhcmQgZm9yIGZsb29kaW5nIHBhY2tldHMgdG8g Z2FpbiBmcm9tIEVDVCwgYnV0IG1vcmUgZXhwZXJpbWVudHMgbmVlZGVkIHRvIHNlZSBob3cgbXVj aCBtaWdodCBiZSBnYWluZWQgYnkgYW4gYXR0YWNrZXIgZmx5aW5nICZxdW90O2p1c3QgdW5kZXIN CiB0aGUgcmFkYXImcXVvdDsuPG86cD48L286cD48L2xpPjwvb2w+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48YnI+DQo8Yj5TWU4vQUNLPGJyPg0KPC9iPkVDVCBvbiBTWU4vQUNLIGFscmVhZHkganVz dGlmaWVkIGluIFJGQzU1NjI8YnI+DQo8YnI+DQo8Yj5TWU48YnI+DQo8L2I+QXJndW1lbnRzIGFn YWluc3QgRUNUOjxvOnA+PC9vOnA+PC9wPg0KPG9sIHN0YXJ0PSIxIiB0eXBlPSIxIj4NCjxsaSBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDkgbGV2ZWwxIGxmbzMiPg0KVW5rbm93biBFQ04g Y2FwYWJpbGl0eSBhdCB0aGUgcmVzcG9uZGVyIChtYXkgZGlzY2FyZCBFQ1QgU1lOIG9yIFJTVCBj b25uZWN0aW9uKTxvOnA+PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1saXN0 Omw5IGxldmVsMSBsZm8zIj4NCkxvc3Mgb2YgY29uZ2VzdGlvbiBub3RpZmljYXRpb24gZHVlIHRv IGxhY2sgb2Ygc3VwcG9ydCBmb3IgZmVlZGluZyBiYWNrIENFIG9uIFNZTiBhdCB0aGUgcmVzcG9u ZGVyLjxvOnA+PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1saXN0Omw5IGxl dmVsMSBsZm8zIj4NCkRvUyBhdHRhY2tzLjxvOnA+PC9vOnA+PC9saT48L29sPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+UmVidXR0YWxzIChyZXNwZWN0aXZlbHkpOjxvOnA+PC9vOnA+PC9wPg0KPG9s IHN0YXJ0PSIxIiB0eXBlPSIxIj4NCjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDUg bGV2ZWwxIGxmbzQiPg0KTm8gUkZDIG1hbmRhdGVzIHRoZXNlIHJlc3BvbmRlciBiZWhhdmlvdXJz LCBidXQgMC42JSAtIDAuOCUgb2YgQWxleGEgdG9wIDFNIFdlYiBzaXRlcyAob3IgdGhlaXIgbmV0 d29yayBwYXRocykgZXhoaWJpdCB0aGlzLiBDb3VsZCByZXRyYW5zbWl0IHRoZSBTWU4gd2l0aG91 dCBFQ1QsIGFuZCBjYWNoZSB0aGlzIGtub3dsZWRnZSB0byBhdm9pZCAxIFJUVCBkZWxheSBpbiBm dXR1cmU8bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsNSBs ZXZlbDEgbGZvNCI+DQpTdXBwb3J0IGZvciBDRSBmZWVkYmFjayBpbiBTWU4gbmVlZGVkIGluIHRo ZSBUQ1Agd2lyZSBwcm90b2NvbC4gU29sdXRpb24gcHJvcG9zZWQgaW4NCjxhIGhyZWY9Imh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXRjcG0tYWNjdXJhdGUtZWNuIj5BY2NF Q048L2E+IGRyYWZ0OiBpZiBTWU4vQUNLIHNob3dzIGxhY2sgb2Ygc3VwcG9ydCBmb3IgZmVlZGlu ZyBiYWNrIENFIG9uIFNZTiAoaS5lLiBubyBzdXBwb3J0IGZvciBBY2NFQ04pIElXIE1VU1QgYmUg cmVkdWNlZCBjb25zZXJ2YXRpdmVseSBhcyBpZiBDRSBvbiBTWU4gKG5vIG5lZWQgdG8gYmUgYXMg Y29uc2VydmF0aXZlIGFzDQogZHJvcCBvZiBTWU4gLSBjYW5ub3QgYmUgc2V2ZXJlIGNvbmdlc3Rp b24gYXMgcGFja2V0IGdvdCB0aHJvdWdoKS4gQ291bGQgY2FjaGUgdGhpcyBrbm93bGVkZ2UuPG86 cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDUgbGV2ZWwxIGxm bzQiPg0KU2VlIGNvbW1vbiBEb1MgQXR0YWNrIHJlYnV0dGFsPG86cD48L286cD48L2xpPjwvb2w+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8Yj5QdXJlIEFDSzxicj4NCjwvYj5Bcmd1bWVu dHMgYWdhaW5zdCBFQ1Q6PG86cD48L286cD48L3A+DQo8b2wgc3RhcnQ9IjEiIHR5cGU9IjEiPg0K PGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsNCBsZXZlbDEgbGZvNSI+DQpVbnJlbGlh YmxlIGNvbmdlc3Rpb24gbm90aWZpY2F0aW9uIGRlbGl2ZXJ5PG86cD48L286cD48L2xpPjxsaSBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDQgbGV2ZWwxIGxmbzUiPg0KTm8gbWVhbnMgdG8g ZmVlZCBiYWNrIGNvbmdlc3Rpb24gbm90aWZpY2F0aW9ucyAobm8gQUNLcyBvZiBBQ0tzKTxvOnA+ PC9vOnA+PC9saT48L29sPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UmVidXR0YWxzIChyZXNwZWN0 aXZlbHkpOiA8bzpwPjwvbzpwPjwvcD4NCjxvbCBzdGFydD0iMSIgdHlwZT0iMSI+DQo8bGkgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvO21zby1saXN0Omw2IGxldmVsMSBsZm82Ij4NClNlZSBjb21tb24gdW5y ZWxpYWJpbGl0eSByZWJ1dHRhbDxvOnA+PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv O21zby1saXN0Omw2IGxldmVsMSBsZm82Ij4NCk5vIHdvcnNlIHRoYW4gZHJvcCBvZiBQdXJlIEFD SywgYW5kIGJldHRlciBwZXJmb3JtYW5jZTxvOnA+PC9vOnA+PC9saT48L29sPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGJyPg0KPGI+UmV0cmFuc21pc3Npb248YnI+DQo8L2I+QXJndW1lbnRzIGFn YWluc3QgRUNUOjxvOnA+PC9vOnA+PC9wPg0KPG9sIHN0YXJ0PSIxIiB0eXBlPSIxIj4NCjxsaSBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDMgbGV2ZWwxIGxmbzciPg0KVW5yZWxpYWJsZSBj b25nZXN0aW9uIG5vdGlmaWNhdGlvbiBkZWxpdmVyeTxvOnA+PC9vOnA+PC9saT48bGkgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvO21zby1saXN0OmwzIGxldmVsMSBsZm83Ij4NCkRvUyBhdHRhY2tzPG86cD48 L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDMgbGV2ZWwxIGxmbzci Pg0KT3Zlci1yZWFjdGluZyB0byBjb25nZXN0aW9uLjxvOnA+PC9vOnA+PC9saT48L29sPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+UmVidXR0YWxzIChyZXNwZWN0aXZlbHkpOjxvOnA+PC9vOnA+PC9w Pg0KPG9sIHN0YXJ0PSIxIiB0eXBlPSIxIj4NCjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxp c3Q6bDEgbGV2ZWwxIGxmbzgiPg0KU2VlIGNvbW1vbiB1bnJlbGlhYmlsaXR5IHJlYnV0dGFsPG86 cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDEgbGV2ZWwxIGxm bzgiPg0KU2VlIGNvbW1vbiBEb1MgQXR0YWNrIHJlYnV0dGFsLCBjb21wbGVtZW50ZWQgYnkgcmVj b21tZW5kYXRpb24gdG8gaWdub3JlIENFIG9uIG91dCBvZiB3aW5kb3cgcGFja2V0czxvOnA+PC9v OnA+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1saXN0OmwxIGxldmVsMSBsZm84Ij4N CkNvcnJlY3QgdG8gcmVhY3QgdHdpY2UgdG8gY29uZ2VzdGlvbiBpbiBkaWZmZXJlbnQgUlRUczxv OnA+PC9vOnA+PC9saT48L29sPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGI+V2luZG93 IFByb2JlPGJyPg0KPC9iPjxicj4NCkFyZ3VtZW50cyBhZ2FpbnN0IEVDVDo8bzpwPjwvbzpwPjwv cD4NCjxvbCBzdGFydD0iMSIgdHlwZT0iMSI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1s aXN0OmwyIGxldmVsMSBsZm85Ij4NClVucmVsaWFibGUgY29uZ2VzdGlvbiBub3RpZmljYXRpb24g ZGVsaXZlcnk8bzpwPjwvbzpwPjwvbGk+PC9vbD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJlYnV0 dGFsOjxvOnA+PC9vOnA+PC9wPg0KPG9sIHN0YXJ0PSIxIiB0eXBlPSIxIj4NCjxsaSBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG87bXNvLWxpc3Q6bDcgbGV2ZWwxIGxmbzEwIj4NClNlZSBjb21tb24gdW5yZWxp YWJpbGl0eSByZWJ1dHRhbDxvOnA+PC9vOnA+PC9saT48L29sPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48Yj5GSU48YnI+DQo8L2I+PGJyPg0KTm8g YXJndW1lbnRzIGFnYWluc3QgdXNpbmcgRUNUIGluIFJGQ3MuPGJyPg0KVG8gYmUgZGlzY3Vzc2Vk IGluIG5leHQgcmV2IG9mIGRyYWZ0Ljxicj4NCjxicj4NCjxiPlJTVDxicj4NCjwvYj48YnI+DQpO byBhcmd1bWVudHMgYWdhaW5zdCB1c2luZyBFQ1QgaW4gUkZDczxicj4NClRvIGJlIGRpc2N1c3Nl ZCBpbiBuZXh0IHJldiBvZiBkcmFmdC48YnI+DQo8YnI+DQpDaGVlcnM8YnI+DQo8YnI+DQo8YnI+ DQpCb2IgJmFtcDsgTWFyY2Vsbzxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPk9uIDExLzA3LzE2IDIxOjI4LCBCbGFjaywgRGF2aWQgd3JvdGU6 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUu MHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHByZT5NYXJjZWxvIGFuZCBCb2IsPG86cD48L286 cD48L3ByZT4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjxwcmU+SW50ZXJlc3Rpbmcg ZHJhZnQgLSBJIG5lZWQgdG8gcmVhZCBpdCBpbiBtb3JlIGRldGFpbCAuLi4gaW4gbXkgJnF1b3Q7 Y29waW91cyBzcGFyZSB0aW1lJnF1b3Q7IHRoaXMgd2VlayA7LSkuPG86cD48L286cD48L3ByZT4N CjxwcmU+PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjxwcmU+V2hpbGUgaXQgaXMgb2YgaW50ZXJl c3QgdG8gVFNWV0csIGFzIGdlbmVyYWwgRUNOIHdvcmsgaGFwcGVucyBoZXJlLCBJIHN1c3BlY3Q8 bzpwPjwvbzpwPjwvcHJlPg0KPHByZT50aGF0IGFzIGEgcHJvcG9zZWQgbW9kaWZpY2F0aW9uIHRv IFRDUCBpdCB3b3VsZCBiZSBpbiB0aGUgZG9tYWluIG9mIHRoZSBUQ1BNIFdHLDxvOnA+PC9vOnA+ PC9wcmU+DQo8cHJlPmFzIHdhcyB0aGUgY2FzZSBmb3IgUkZDIDU1NjIuPG86cD48L286cD48L3By ZT4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjxwcmU+VGhhbmtzLCAtLURhdmlkPG86 cD48L286cD48L3ByZT4NCjxwcmU+LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLTxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPkRhdmlkIEwuIEJsYWNrLCBE aXN0aW5ndWlzaGVkIEVuZ2luZWVyPG86cD48L286cD48L3ByZT4NCjxwcmU+RU1DLCAxNzYgU291 dGggU3QuLCBIb3BraW50b24sIE1BJm5ic3A7IDAxNzQ4PG86cD48L286cD48L3ByZT4NCjxwcmU+ JiM0MzsxICg1MDgpIDI5My03OTUzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IENlbGw6ICYjNDM7 MSAoOTc4KSAzOTQtNzc1NDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxhIGhyZWY9Im1haWx0bzpk YXZpZC5ibGFja0BlbWMuY29tIj5kYXZpZC5ibGFja0BlbWMuY29tPC9hPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08bzpwPjwvbzpw PjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+ DQo8cHJlPi0tIDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188bzpwPjwvbzpwPjwvcHJl Pg0KPHByZT5Cb2IgQnJpc2NvZSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8YSBocmVmPSJodHRwOi8vYm9iYnJpc2NvZS5u ZXQvIj5odHRwOi8vYm9iYnJpc2NvZS5uZXQvPC9hPjxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2Nr cXVvdGU+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BN1PR03MB008869F87113A749F089AB9B6340BN1PR03MB008namprd_-- From nobody Sat Jul 16 15:41:04 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CFAFB12B037; Sat, 16 Jul 2016 15:41:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.89 X-Spam-Level: X-Spam-Status: No, score=-1.89 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tK4aie91CO8s; Sat, 16 Jul 2016 15:40:59 -0700 (PDT) Received: from server.dnsblock1.com (server.dnsblock1.com [85.13.236.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 323FC12B009; Sat, 16 Jul 2016 15:40:58 -0700 (PDT) Received: from dhcp-8ee4.meeting.ietf.org ([31.133.142.228]:43598) by server.dnsblock1.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.87) (envelope-from ) id 1bOYGV-0000BN-Q8; Sat, 16 Jul 2016 23:40:55 +0100 To: Praveen Balasubramanian , "Black, David" , tsvwg IETF list , tcpm IETF list References: <57892BE9.4020309@bobbriscoe.net> From: Bob Briscoe Message-ID: <578AB7F7.2090403@bobbriscoe.net> Date: Sat, 16 Jul 2016 23:40:55 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------000800010604000406060702" X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server.dnsblock1.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - bobbriscoe.net X-Get-Message-Sender-Via: server.dnsblock1.com: authenticated_id: in@bobbriscoe.net X-Authenticated-Sender: server.dnsblock1.com: in@bobbriscoe.net Archived-At: Cc: "draft-bagnulo-tsvwg-generalized-ecn@ietf.org" Subject: Re: [tcpm] Case for ECN-capable TCP control packets: draft-bagnulo-tsvwg-generalized-ecn X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Jul 2016 22:41:03 -0000 This is a multi-part message in MIME format. --------------000800010604000406060702 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Praveen, On 16/07/16 17:13, Praveen Balasubramanian wrote: > > This is certainly interesting work and very relevant. > > Marking ECT on SYN makes sense and data shows that for schemes like > DCTCP, not marking SYN puts new flows establishment at a disadvantage > especially when schemes like Dual Q AQM are in play. > Not just for DCTCP. For just normal public Internet, if the loss probability is say 0.2%, then 1 in 500 flows will lose the SYN and stall for a timeout when it starts. Given there are so many small flows, that's surprisingly often. Nothing to do with this draft, but I've written-up some tips for configuring the AQM in a DC to mitigate this problem if you are not using ECT SYNs. See "{Note 1}" at the end. > FIN occupies a byte in sequence number space so marking ECT on packet > with FIN (with or without data) seems reasonable. Marking RST is > probably harmless. I don’t have a strong opinion about window probes > and retransmissions but the consistency argument should hold unless > there is a demonstrable DoS attack. > See draft for argument about DoS. > > My main concern is with pure ACKs. If the receiver is a dumb reflector > by sending ECE upon receiving any control packet marked with CE then > it could interfere with “accurate ECN” like schemes. For example if > the application has bi-directional traffic then how would the sender > distinguish a ECE was in response to a mark on a data packet versus an > ACK packet? I am of the opinion that the receiver should not echo ECN > marks on pure ACK packets. Any other ideas? > In AccECN at the moment, we have a dumb receiver with two feedback methods so the sender can choose not to react to CE on Pure ACKs (or it can react - it has the info to do either). If the sender were to set ECT on pure ACKs: i) the count of CE marked packets it would get back from the receiver in the ACE field would include pure ACKS ii) the count of CE-marked bytes it would get back from the receiver in the (optional) ECEB field would not count marked pure ACKS (because they contain no bytes). You have told me already that you don't want to use the TCP option part of AccECN (part (ii) above). Well, then what can I say - you can't have the features of the optional part you choose not to use :| If you can work out a way to do this that suits you better, without adding complexity, that would save me having to! If you don't set ECT on pure ACKs you lose the benefit of near-zero loss of ACKs (quantified in the draft - marginal - you just get occasional pauses in the clocking out of packets, then a little catch-up burst when the next ACK arrives). > I think bringing this up for discussion in working group would be very > valuable. > Thanks for sharing your thoughts. Bob {Note 1}: For DCTCP in your own DC, surely you can use ECT SYNs (and ECT on DNS?). If not (why?), you can improve the situation (depending on the capabilities of your switches) by configuring WRED on each switch with two AQMs using the ECN field as the classifier between them (one for Not-ECT, the other for any other ECN codepoint). You can still config both REDs as for DCTCP with a step at K packets. And config the EWMA parameter of the ECN RED to zero as normal for DCTCP, but config the other (drop) with a higher EWMA parameter so it uses a moving average of the queue to determine drop. Then a) it won't be so jumpy for drop, avoiding losing so many SYNs and DNS datagrams; but b) it will still have the same threshold for marking vs drop in the long-run, ensuring roughly equal throughput for any long-running non-ECN flows. > Thanks > > *From:*tcpm [mailto:tcpm-bounces@ietf.org] *On Behalf Of *Bob Briscoe > *Sent:* Friday, July 15, 2016 11:31 AM > *To:* Black, David ; tsvwg IETF list > ; tcpm IETF list > *Cc:* draft-bagnulo-tsvwg-generalized-ecn@ietf.org > *Subject:* [tcpm] Case for ECN-capable TCP control packets: > draft-bagnulo-tsvwg-generalized-ecn > > David, [re-sending to include tsvwg & tcpm, which is what I had > intended to do first time.] > > Here's a heads-up for tsvwg, plus cross-posting to tcpm as suggested, > And for a fast read, there's a summary of every argument below. > Pls bash the arguments. > > Summary: > The ECN spec [RFC 3168] says various TCP control packets must not be > ECN capable. > This draft lays out each argument given in the RFCs, and articulates a > rebuttal against each one: > draft-bagnulo-tsvwg-generalized-ecn > > Subject to some more experiments, we think this knocks down every > reason given, so that all these packets could safely be ECN-capable. > > Pls read the draft for more details (preferably before responding). > > Enumeration of arguments about each type of control packet follows, > starting with some arguments common to many: > ___________________________________________________________________________________________ > > *Common arguments against ECT* > > 1. Unreliable congestion notification delivery > 2. DoS Attacks > > Common rebuttals (respectively): > > 1. No worse than undetectable loss of Not-ECT control packet, and > better performance > 2. Mandating Not-ECT does not stop attackers using ECT for flooding. > Nonetheless, it would allow firewalls to discard control packets > not meant to be ECT., however this would negate the benefit of ECT > for compliant transports and seems unnecessary for the following > reason. > RFC3168 (Sec.7) and RFC7567 (Sec.4.2.1) say an AQM MUST turn off > ECN support if under persistent overload. This makes it hard for > flooding packets to gain from ECT, but more experiments needed to > see how much might be gained by an attacker flying "just under the > radar". > > > *SYN/ACK > *ECT on SYN/ACK already justified in RFC5562 > > *SYN > *Arguments against ECT: > > 1. Unknown ECN capability at the responder (may discard ECT SYN or > RST connection) > 2. Loss of congestion notification due to lack of support for feeding > back CE on SYN at the responder. > 3. DoS attacks. > > Rebuttals (respectively): > > 1. No RFC mandates these responder behaviours, but 0.6% - 0.8% of > Alexa top 1M Web sites (or their network paths) exhibit this. > Could retransmit the SYN without ECT, and cache this knowledge to > avoid 1 RTT delay in future > 2. Support for CE feedback in SYN needed in the TCP wire protocol. > Solution proposed in AccECN > draft: > if SYN/ACK shows lack of support for feeding back CE on SYN (i.e. > no support for AccECN) IW MUST be reduced conservatively as if CE > on SYN (no need to be as conservative as drop of SYN - cannot be > severe congestion as packet got through). Could cache this knowledge. > 3. See common DoS Attack rebuttal > > > *Pure ACK > *Arguments against ECT: > > 1. Unreliable congestion notification delivery > 2. No means to feed back congestion notifications (no ACKs of ACKs) > > Rebuttals (respectively): > > 1. See common unreliability rebuttal > 2. No worse than drop of Pure ACK, and better performance > > > *Retransmission > *Arguments against ECT: > > 1. Unreliable congestion notification delivery > 2. DoS attacks > 3. Over-reacting to congestion. > > Rebuttals (respectively): > > 1. See common unreliability rebuttal > 2. See common DoS Attack rebuttal, complemented by recommendation to > ignore CE on out of window packets > 3. Correct to react twice to congestion in different RTTs > > > *Window Probe > * > Arguments against ECT: > > 1. Unreliable congestion notification delivery > > Rebuttal: > > 1. See common unreliability rebuttal > > *FIN > * > No arguments against using ECT in RFCs. > To be discussed in next rev of draft. > > *RST > * > No arguments against using ECT in RFCs > To be discussed in next rev of draft. > > Cheers > > > Bob & Marcelo > > On 11/07/16 21:28, Black, David wrote: > > Marcelo and Bob, > > Interesting draft - I need to read it in more detail ... in my "copious spare time" this week ;-). > > While it is of interest to TSVWG, as general ECN work happens here, I suspect > > that as a proposed modification to TCP it would be in the domain of the TCPM WG, > > as was the case for RFC 5562. > > Thanks, --David > > ---------------------------------------------------- > > David L. Black, Distinguished Engineer > > EMC, 176 South St., Hopkinton, MA 01748 > > +1 (508) 293-7953 Cell: +1 (978) 394-7754 > > david.black@emc.com > > --------------------------------------------------- > > > > -- > > ________________________________________________________________ > > Bob Briscoehttp://bobbriscoe.net/ > -- ________________________________________________________________ Bob Briscoe http://bobbriscoe.net/ --------------000800010604000406060702 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit Praveen,

On 16/07/16 17:13, Praveen Balasubramanian wrote:

This is certainly interesting work and very relevant.

 

Marking ECT on SYN makes sense and data shows that for schemes like DCTCP, not marking SYN puts new flows establishment at a disadvantage especially when schemes like Dual Q AQM are in play.

Not just for DCTCP.
For just normal public Internet, if the loss probability is say 0.2%, then 1 in 500 flows will lose the SYN and stall for a timeout when it starts. Given there are so many small flows, that's surprisingly often.

Nothing to do with this draft, but I've written-up some tips for configuring the AQM in a DC to mitigate this problem if you are not using ECT SYNs. See "{Note 1}" at the end.

FIN occupies a byte in sequence number space so marking ECT on packet with FIN (with or without data) seems reasonable. Marking RST is probably harmless. I don’t have a strong opinion about window probes and retransmissions but the consistency argument should hold unless there is a demonstrable DoS attack.

See draft for argument about DoS.

 

My main concern is with pure ACKs. If the receiver is a dumb reflector by sending ECE upon receiving any control packet marked with CE then it could interfere with “accurate ECN” like schemes. For example if the application has bi-directional traffic then how would the sender distinguish a ECE was in response to a mark on a data packet versus an ACK packet? I am of the opinion that the receiver should not echo ECN marks on pure ACK packets. Any other ideas?

In AccECN at the moment, we have a dumb receiver with two feedback methods so the sender can choose not to react to CE on Pure ACKs (or it can react - it has the info to do either). If the sender were to set ECT on pure ACKs:
i) the count of CE marked packets it would get back from the receiver in the ACE field would include pure ACKS
ii) the count of CE-marked bytes it would get back from the receiver in the (optional) ECEB field would not count marked pure ACKS (because they contain no bytes).

You have told me already that you don't want to use the TCP option part of AccECN (part (ii) above). Well, then what can I say - you can't have the features of the optional part you choose not to use :|
If you can work out a way to do this that suits you better, without adding complexity, that would save me having to!

If you don't set ECT on pure ACKs you lose the benefit of near-zero loss of ACKs (quantified in the draft - marginal - you just get occasional pauses in the clocking out of packets, then a little catch-up burst when the next ACK arrives).

 

I think bringing this up for discussion in working group would be very valuable.


Thanks for sharing your thoughts.



Bob

{Note 1}:
For DCTCP in your own DC, surely you can use ECT SYNs (and ECT on DNS?).

If not (why?), you can improve the situation (depending on the capabilities of your switches) by configuring WRED on each switch with two AQMs using the ECN field as the classifier between them (one for Not-ECT, the other for any other ECN codepoint). You can still config both REDs as for DCTCP with a step at K packets. And config the EWMA parameter of the ECN RED to zero as normal for DCTCP, but config the other (drop) with a higher EWMA parameter so it uses a moving average of the queue to determine drop. Then
a) it won't be so jumpy for drop, avoiding losing so many SYNs and DNS datagrams; but
b) it will still have the same threshold for marking vs drop in the long-run, ensuring roughly equal throughput for any long-running non-ECN flows.


 

Thanks

 

From: tcpm [mailto:tcpm-bounces@ietf.org] On Behalf Of Bob Briscoe
Sent: Friday, July 15, 2016 11:31 AM
To: Black, David <david.black@emc.com>; tsvwg IETF list <tsvwg@ietf.org>; tcpm IETF list <tcpm@ietf.org>
Cc: draft-bagnulo-tsvwg-generalized-ecn@ietf.org
Subject: [tcpm] Case for ECN-capable TCP control packets: draft-bagnulo-tsvwg-generalized-ecn

 

David, [re-sending to include tsvwg & tcpm, which is what I had intended to do first time.]

Here's a heads-up for tsvwg, plus cross-posting to tcpm as suggested,
And for a fast read, there's a summary of every argument below.
Pls bash the arguments.

Summary:
The ECN spec [RFC 3168] says various TCP control packets must not be ECN capable.
This draft lays out each argument given in the RFCs, and articulates a rebuttal against each one:
draft-bagnulo-tsvwg-generalized-ecn
Subject to some more experiments, we think this knocks down every reason given, so that all these packets could safely be ECN-capable.

Pls read the draft for more details (preferably before responding).

Enumeration of arguments about each type of control packet follows, starting with some arguments common to many:
___________________________________________________________________________________________

Common arguments against ECT

  1. Unreliable congestion notification delivery
  2. DoS Attacks

Common rebuttals (respectively):

  1. No worse than undetectable loss of Not-ECT control packet, and better performance
  2. Mandating Not-ECT does not stop attackers using ECT for flooding. Nonetheless, it would allow firewalls to discard control packets not meant to be ECT., however this would negate the benefit of ECT for compliant transports and seems unnecessary for the following reason.
    RFC3168 (Sec.7) and RFC7567 (Sec.4.2.1) say an AQM MUST turn off ECN support if under persistent overload. This makes it hard for flooding packets to gain from ECT, but more experiments needed to see how much might be gained by an attacker flying "just under the radar".


SYN/ACK
ECT on SYN/ACK already justified in RFC5562

SYN
Arguments against ECT:

  1. Unknown ECN capability at the responder (may discard ECT SYN or RST connection)
  2. Loss of congestion notification due to lack of support for feeding back CE on SYN at the responder.
  3. DoS attacks.

Rebuttals (respectively):

  1. No RFC mandates these responder behaviours, but 0.6% - 0.8% of Alexa top 1M Web sites (or their network paths) exhibit this. Could retransmit the SYN without ECT, and cache this knowledge to avoid 1 RTT delay in future
  2. Support for CE feedback in SYN needed in the TCP wire protocol. Solution proposed in AccECN draft: if SYN/ACK shows lack of support for feeding back CE on SYN (i.e. no support for AccECN) IW MUST be reduced conservatively as if CE on SYN (no need to be as conservative as drop of SYN - cannot be severe congestion as packet got through). Could cache this knowledge.
  3. See common DoS Attack rebuttal


Pure ACK
Arguments against ECT:

  1. Unreliable congestion notification delivery
  2. No means to feed back congestion notifications (no ACKs of ACKs)

Rebuttals (respectively):

  1. See common unreliability rebuttal
  2. No worse than drop of Pure ACK, and better performance


Retransmission
Arguments against ECT:

  1. Unreliable congestion notification delivery
  2. DoS attacks
  3. Over-reacting to congestion.

Rebuttals (respectively):

  1. See common unreliability rebuttal
  2. See common DoS Attack rebuttal, complemented by recommendation to ignore CE on out of window packets
  3. Correct to react twice to congestion in different RTTs


Window Probe

Arguments against ECT:

  1. Unreliable congestion notification delivery

Rebuttal:

  1. See common unreliability rebuttal

FIN

No arguments against using ECT in RFCs.
To be discussed in next rev of draft.

RST

No arguments against using ECT in RFCs
To be discussed in next rev of draft.

Cheers


Bob & Marcelo

On 11/07/16 21:28, Black, David wrote:

Marcelo and Bob,
 
Interesting draft - I need to read it in more detail ... in my "copious spare time" this week ;-).
 
While it is of interest to TSVWG, as general ECN work happens here, I suspect
that as a proposed modification to TCP it would be in the domain of the TCPM WG,
as was the case for RFC 5562.
 
Thanks, --David
----------------------------------------------------
David L. Black, Distinguished Engineer
EMC, 176 South St., Hopkinton, MA  01748
+1 (508) 293-7953     Cell: +1 (978) 394-7754
david.black@emc.com        
---------------------------------------------------



-- 
________________________________________________________________
Bob Briscoe                               http://bobbriscoe.net/

-- 
________________________________________________________________
Bob Briscoe                               http://bobbriscoe.net/
--------------000800010604000406060702-- From nobody Sun Jul 17 13:26:05 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA36B12B029 for ; Sun, 17 Jul 2016 13:26:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.011 X-Spam-Level: X-Spam-Status: No, score=-2.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I4FTIrousXgc for ; Sun, 17 Jul 2016 13:25:59 -0700 (PDT) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0093.outbound.protection.outlook.com [104.47.36.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C2BCE12B006 for ; Sun, 17 Jul 2016 13:25:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Owj9FEvao7rzRWAMsCyUyVtIsfjyIKf/NWHxkv/B1ws=; b=duSmN/PfI4DAVGWxheMVVaQFftZ18fPL6A0/kCV9pVyUtnslLFh2WJ53XzoUABTI0BqtaBsadMxRltp7WDpPRK6CzQm0Xb02b9rhuAj2ReMk+ht7Hs9q+ik3HlG2y2Gz29jXMyl8l4Jgh6HMxYgAbXPH0XvP4k27TNZgxG66Wdw= Received: from BN1PR03MB008.namprd03.prod.outlook.com (10.255.224.38) by BN1PR03MB005.namprd03.prod.outlook.com (10.255.224.35) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.523.12; Sun, 17 Jul 2016 20:25:55 +0000 Received: from BN1PR03MB008.namprd03.prod.outlook.com ([169.254.5.66]) by BN1PR03MB008.namprd03.prod.outlook.com ([169.254.5.66]) with mapi id 15.01.0523.029; Sun, 17 Jul 2016 20:25:56 +0000 From: Praveen Balasubramanian To: Bob Briscoe Thread-Topic: Review of draft-ietf-tcpm-dctcp-01 Thread-Index: AQHRGMDBGTpsEllovUSobL5AqqWT0Z6S8nXA Date: Sun, 17 Jul 2016 20:25:56 +0000 Message-ID: References: <563CF0F7.6070302@bobbriscoe.net> In-Reply-To: <563CF0F7.6070302@bobbriscoe.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=pravb@microsoft.com; x-originating-ip: [46.189.28.231] x-ms-office365-filtering-correlation-id: 1c297cd7-9798-41cd-f4ed-08d3ae808ed7 x-microsoft-exchange-diagnostics: 1; BN1PR03MB005; 6:pwXJYE2YVqS7qBsYXhcPX4/XB/6LvG+FGTAAXT9/0WEZxdEyg20dQHNyN/NFR2r/kyWf/nq8pC9qoZxAZYf+EZhV4rLMukizpmzJgaU4sXvgpYz8V5P70wGhIEhR5eg3UizUn7jLallZg+cRA6fR0LglA+xF+jxtXnhyDnYqVRzucP40jOZpRb01Nz0IQ8rktob8MKypRIHhO0bVPgtedNtW0Po3bFrwcw751Mfg/M+ouYaYdVJaO+cdISmQyc+9EDax/fef/PfmzF0CBb5BnsB8yJNPxMJWZ2RRUZ3pZo5UoKHuMwhvw3zgLZLzC/RypISymWnuemBJ/oBHC4l54g==; 5:2G2umoMtl6K5tTYEmP0EOhGblv7vPfMMoDp47vlWdq9E8ICdTdQ1RCVjPBj7uGk9HZ2s1wEaZZ21XUo9uKmjUjfmHwXVmTnzuBEK4oz5ACSBUKJp1lYBh+rkm8fqJbXy5/pPZxeDFkEI+zQ90VURXg==; 24:1stvBcK+tAeXFAXM5/+nWdT1aswb6AWRmoRpBXarfIP5YlEDBRDYZwPXhpYpRGVeaDInyEoi3sYL9O800vKItcxaGHZfDmSBG+yM0js8hBE=; 7:iplwDKXLmLdT63R53v6MBr25FVGHJZ4M55Rsv9BhTa+xM4xk8+AcAqElxK2qebIFMuBUKAcSX48YP+yINyKkoj9hXtfUqm1DF0Bu52ijli9MxCgQ+/EvjB2HXbfKgnXjbIqp0ZxPDjkIyoNcCoqd8Knuj1B6Kwsd685+uTahYzJYTmg5IKlRhoIhTq3vhvw437MnooCZeK/+sWIzoSaM9HQwKP5Kzb5Hdzt36RO6E/+0SNuYppGLZo/P+YHcyEMv x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN1PR03MB005; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(192374486261705)(189930954265078)(222014917165493)(219752817060721)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026)(61426038)(61427038); SRVR:BN1PR03MB005; BCL:0; PCL:0; RULEID:; SRVR:BN1PR03MB005; x-forefront-prvs: 00064751B6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(7916002)(52044002)(199003)(189002)(377454003)(5002640100001)(76576001)(92566002)(7906003)(7846002)(97736004)(9686002)(5003600100003)(7696003)(7736002)(2900100001)(19300405004)(3660700001)(68736007)(2950100001)(110136002)(74316002)(19580405001)(8990500004)(19625215002)(99286002)(8676002)(3280700002)(15975445007)(19580395003)(81166006)(81156014)(189998001)(8936002)(86612001)(76176999)(230783001)(86362001)(54356999)(790700001)(6116002)(102836003)(3846002)(586003)(50986999)(105586002)(19617315012)(106116001)(16236675004)(15395725005)(106356001)(87936001)(10290500002)(10400500002)(5005710100001)(66066001)(122556002)(2906002)(101416001)(33656002)(4326007)(10090500001)(579004); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR03MB005; H:BN1PR03MB008.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BN1PR03MB008D16E15DCBE49E7C21A4AB6350BN1PR03MB008namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jul 2016 20:25:56.1986 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR03MB005 Archived-At: Cc: tcpm IETF list Subject: Re: [tcpm] Review of draft-ietf-tcpm-dctcp-01 X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jul 2016 20:26:04 -0000 --_000_BN1PR03MB008D16E15DCBE49E7C21A4AB6350BN1PR03MB008namprd_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIEJvYi4gU29ycnkgZm9yIHRoZSA8cmlkaWN1bG91cz4gZGVsYXkuIENvbW1lbnRzIGlu bGluZSBwcmVmaXhlZCBieSA8UHJhdmVlbj4uIE1vc3Qgb2YgdGhlc2UgZWRpdHMgd2lsbCBiZSBp biB0aGUgbmV4dCByZXZpc2lvbi4NCg0KVGhhbmtzDQoNCkZyb206IEJvYiBCcmlzY29lIFttYWls dG86aWV0ZkBib2JicmlzY29lLm5ldF0NClNlbnQ6IEZyaWRheSwgTm92ZW1iZXIgNiwgMjAxNSAx MDoyNyBBTQ0KVG86IFByYXZlZW4gQmFsYXN1YnJhbWFuaWFuIDxwcmF2YkBtaWNyb3NvZnQuY29t PjsgRUdHRVJULCBMYXJzIDxsYXJzQG5ldGFwcC5jb20+OyBTdGVwaGVuIEJlbnNsZXkgPHNiZW5z QG1pY3Jvc29mdC5jb20+OyBEYXZlIFRoYWxlciA8ZHRoYWxlckBtaWNyb3NvZnQuY29tPjsgZ2xl bm4uanVkZEBtb3JnYW5zdGFubGV5LmNvbQ0KQ2M6IHRjcG0gSUVURiBsaXN0IDx0Y3BtQGlldGYu b3JnPg0KU3ViamVjdDogUmV2aWV3IG9mIGRyYWZ0LWlldGYtdGNwbS1kY3RjcC0wMQ0KDQpQcmF2 ZWVuICYgY28tYXV0aG9ycywNCg0KQXMgcHJvbWlzZWQsIGhlcmUncyBteSByZXZpZXcgb2YgZHJh ZnQtaWV0Zi10Y3BtLWRjdGNwLTAxDQoNCkdlbmVyYWwgQ29tbWVudHMNCg0KSW4gZ2VuZXJhbCwg aW4gdGhlIGNvbW1lbnRzIGJlbG93IEkgaGF2ZSB0cmllZCB0byByZWR1Y2UgdGhlIG11bHRpcGxl IGFzc3VtcHRpb25zIGFib3V0IGNvbnRyb2xsZWQgZW52aXJvbm1lbnRzIGRvd24gdG8gdGhlIG9u ZSBhc3N1bXB0aW9uIHRoYXQgdGhleSBhcmUgY29udHJvbGxlZCBieSBhIHNpbmdsZSBhdXRob3Jp dHkuIEkgYmVsaWV2ZSBEQ1RDUCBjYW4gd29yayB3aXRob3V0IHRoZSBvdGhlciBhc3N1bXB0aW9u cywgc28gdGhlIGZvbGxvd2luZyBkbyBub3QgYXBwbHkgaW4gYWxsIGNvbnRyb2xsZWQgZW52aXJv bm1lbnRzOg0KICAqIG5vdCBhbHdheXMgbG93IFJUVCAoZS5nLiBpbnRlci1EQyBzY2VuYXJpb3Ms IG9yIGdsb2JhbCBwcml2YXRlIG5ldHdvcmtzKQ0KICAqIG5vdCBhbHdheXMgbm8gcmlzayBvZiB0 cmFmZmljIGF0dGFja3MgKGUuZy4gaW50ZXJuYWxseSBhcnJhbmdlZCBhdHRhY2tzKQ0KSSBtYXkg aGF2ZSBtaXNzZWQgc29tZSBvdGhlciBvY2N1cnJlbmNlcyBvZiB0aGVzZSBhc3N1bXB0aW9ucywg c28gcGxzIGZlZWwgZnJlZSB0byBzZWVrIG91dCB0aGVtIGFsbC4NCg0KPFByYXZlZW4+IERDVENQ IGNhbiBiZSBleHRlbmRlZCB0byBvdGhlciBlbnZpcm9ubWVudHMgYnV0IHRoaXMgZHJhZnQgZG9l cyBub3QgY292ZXIgYW55IG9mIHRoYXQuIEl0IGlzIGV4cGxpY2l0bHkgZm9yIGRlcGxveW1lbnQg aW4gYSBkYXRhY2VudGVyIHdoZXJlIHRoZSBSVFQgaXMgbG93IGFuZCB0aGVyZSBpcyBubyByaXNr IG9mIGludGVybmFsIGF0dGFjay4gV2UgY2Fubm90IGNvdmVyIG90aGVyIHNjZW5hcmlvcyB0aGF0 IGhhdmUgbm90IGJlZW4gdGVzdGVkIG9yIGRlcGxveWVkLiBBbGwgdGhlIGtub3duIGRlcGxveW1l bnRzIGFyZSBpbiBjb250cm9sbGVkIGRhdGFjZW50ZXJzLiBUaGUgVENQIFByYWd1ZSBlZmZvcnQg c2hvdWxkIHJlc3VsdCBpbiBhIGRyYWZ0IHRoYXQgY292ZXJzIGFkZGl0aW9uYWwgcmVxdWlyZW1l bnRzIHRoYXQgd2lsbCBtYWtlIERDVENQIHdvcmsgd2VsbCBvbiBoaWdoIGxhdGVuY3kgbGlua3Mu DQoNCg0KTWFueSBvZiB0aGUgY29tbWVudHMgYXJndWUgd2l0aCB5b3VyIGNob2ljZXMgb2YgTVVT VCwgU0hPVUxELCBNQVkgZXRjLiBUaGlzIG1pZ2h0IHNlZW0gbml0LXBpY2tpbmcsIGdpdmVuIHRo ZSBwcmltYXJ5IHB1cnBvc2UgaXMgdG8gZG9jdW1lbnQgdGhlIGFsZ28uIEhvd2V2ZXIsIGl0IHdv dWxkIGJlIHdyb25nIHRvIHJlcXVpcmUgdGhpbmdzIHRoYXQgYXJlbid0IHJlcXVpcmVkIG9yIHRv IGFsbG93IGV4Y2VwdGlvbnMgd2hlbiBleGNlcHRpb25zIHdvdWxkIG5vdCBiZSBpbnRlcm9wZXJh YmxlLiBBbiBhbHRlcm5hdGl2ZSBhcHByb2FjaCB3b3VsZCBiZSB0byBqdXN0IHJlbW92ZSBhbGwg Y2FwaXRhbGlzZWQgbGFuZ3VhZ2UuDQoNCjxQcmF2ZWVuPiBJIGFtIGZpbmUgd2l0aCByZW1vdmlu ZyBzdWNoIGNhcGl0YWxpemF0aW9uIGV4Y2VwdCBmb3Igd2hlbiByZW1vdmluZyBpdCB3aWxsIGxl YWQgdG8gaW50ZXJvcCBwcm9ibGVtcyBiZXR3ZWVuIGRpZmZlcmVudCBpbXBsZW1lbnRhdGlvbnMg b2YgRENUQ1AuIEkgYW0gcmVzcG9uZGluZyB0byBlYWNoIGNvbW1lbnQgYmVsb3cgYW5kIGFkZGlu ZyB3aGV0aGVyIHRoZSBuZXcgcmV2aXNpb24gd2lsbCBmaXggaXQgbm90Lg0KDQpTZWN0aW9uLWJ5 LXNlY3Rpb24gcmV2aWV3Lg0KDQpBYnN0cmFjdA0KDQpJIHRoaW5rIGl0IG5lZWRzIHRvIGhhdmUg YW4gYXBwbGljYWJpbGl0eSBzdGF0ZW1lbnQgaW4gdGhlIGFic3RyYWN0IChhbmQgaW50cm9kdWN0 aW9uKSB0aGF0IHJlZmVycyB0byB0aGUgZGVwbG95bWVudCBhbmQgaW1wbGVtZW50YXRpb24gc3Rh dHVzIHNlY3Rpb25zIGF0IHRoZSBlbmQuIFNvbWV0aGluZyBsaWtlOg0KDQoiVGhpcyBpcyBhbiBp bmZvcm1hdGlvbmFsIHNwZWNpZmljYXRpb24gb2YgdGhlIGltcGxlbWVudGF0aW9uIG9mIERDVENQ IGluIE1pY3Jvc29mdCBXaW5kb3dzIFNlcnZlciAyMDEyLiBJdCBpcyBhcHBsaWNhYmxlIHRvIGRl cGxveW1lbnRzIGluIGNvbnRyb2xsZWQgZW52aXJvbm1lbnRzIGxpa2UgZGF0YSBjZW50cmVzIGJ1 dCBpdCBNVVNUIE5PVCBiZSBkZXBsb3llZCBvdmVyIHRoZSBwdWJsaWMgSW50ZXJuZXQgd2l0aG91 dCBhZGRpdGlvbmFsIG1lYXN1cmVzLCBhcyBkZXRhaWxlZCBpbiBzZWN0aW9ucyA0LTYuICINCg0K PFByYXZlZW4+IFRoaXMgaXMgYWxyZWFkeSBhZGRyZXNzZWQgaW4gdGhlIGludHJvZHVjdGlvbi4g SSBkb27igJl0IHNlZSB0aGUgdmFsdWUgb2YgcmVwZWF0aW5nIGl0IG11bHRpcGxlIHRpbWVzLiBB biBpbXBsZW1lbnRlciB3aWxsIHJlYWQgdGhlIGludHJvZHVjdGlvbi4gSWYgeW91IHN0aWxsIGZl ZWwgc3Ryb25nbHksIHdlIGNhbiBhZGQgaXQgdG8gdGhlIGFic3RyYWN0IGFuZCByZW1vdmUgaXQg ZnJvbSB0aGUgaW50cm9kdWN0aW9uIHNlY3Rpb24uIFRoaXMgZHJhZnQgd2lsbCBub3QgY292ZXIg YW55IGFkZGl0aW9uYWwgbWVhc3VyZXMgdGhhdCBhcmUgaW50ZW5kZWQgZm9yIGRlcGxveW1lbnRz IG91dHNpZGUgdGhlIGRhdGFjZW50ZXIg4oCTIHRoYXTigJlzIG5vdCB0aGUgaW50ZW5kZWQgcHVy cG9zZS4NCg0KDQoxLiBJbnRybw0Kcy9pdHMgbWFueSBzZXJ2ZXJzLw0KIC90aGVpciBtYW55IHNl cnZlcnMvDQoNCjxQcmF2ZWVuPiBGaXhlZCBpbiBuZXh0IHJldmlzaW9uLg0KDQoNCiIuLi5saW1p dGVkIHF1ZXVlIGNhcGFjaXRpZXMuLi4iDQpJIHVuZGVyc3RhbmQgdGhhdCB0aGUgbW90aXZhdGlv biBoYXMgYmVlbiBhYmJyZXZpYXRlZCwgYnV0IEkgdGhpbmsgdGhpcyBoYXMgbG9zdCB0b28gbXVj aC4gUGVyaGFwcyBtZW50aW9uIG1lbW9yeSBzaGFyZWQgYmV0d2VlbiBpbnRlcmZhY2VzLCBzbyBl aXRoZXIgYmxvYXRlZCBidWZmZXJzIG9yIHRvbyBsaXR0bGUsIG1ha2luZyB0cmFmZmljIHN1c2Nl cHRpYmxlIHRvIHBhY2tldCBsb3NzZXM/DQoNCiAgIFtSRkMzMTY4XSBkZXNjcmliZXMgYSBtZWNo YW5pc20gZm9yIHVzaW5nIEV4cGxpY2l0IENvbmdlc3Rpb24NCiAgIE5vdGlmaWNhdGlvbiAoRUNO KSBmcm9tIHRoZSBzd2l0Y2hlcyBmb3IgZWFybHkgZGV0ZWN0aW9uIG9mDQogICBjb25nZXN0aW9u LCByYXRoZXIgdGhhbiB3YWl0aW5nIGZvciBwYWNrZXQgbG9zcyB0byBvY2N1ci4NCg0KVGhpcyBp c24ndCBjb3JyZWN0LiAzMTY4IHJlcXVpcmVzIEVDTiBtYXJraW5nIHRvIG9jY3VyIG5vIGVhcmxp ZXIgdGhhbiBkcm9wLiBJdCBpcyBwcmVjaXNlbHkgdGhhdCAzMTY4IGRvZXMgbm90IGFsbG93IGVh cmx5IG1hcmtpbmcgdW5sZXNzIHRoZXJlIGlzIGFsc28gZWFybHkgZHJvcCB0aGF0IGlzIHRoZSBw cm9ibGVtLg0KDQo8UHJhdmVlbj4gRml4ZWQgaW4gbmV4dCByZXZpc2lvbi4NCg0KDQogICBJdCBp cyByZWNvbW1lbmRlZCB0aGF0IERDVENQIGJlIGRlcGxveWVkLi4uDQoNCiJyZWNvbW1lbmRlZCIg aXMgdG9vIHdlYWsuIEkgc3VnZ2VzdCB5b3UgdXNlIHNvbWV0aGluZyBsaWtlIHRoZSBhcHBsaWNh YmlsaXR5IHRleHQgZ2l2ZW4gYWJvdmUsIGJvdGggaGVyZSBhbmQgaW4gdGhlIGFic3RyYWN0Lg0K DQo8UHJhdmVlbj4gQWRkZWQgdGhlIHdvcmQg4oCcb25seeKAnSB0byBtYWtlIHRoaXMgc3Ryb25n ZXIgcGVyIE1pY2hhZWzigJlzIHJldmlldy4gRml4ZWQgaW4gbmV4dCByZXZpc2lvbi4NCg0KDQoN CjIuIFRlcm1pbm9sb2d5DQoNClN1Z2dlc3QgeW91IGV4cGxhaW4gdGhhdCBjYXBpdGFsaXNlZCB3 b3JkcyBhcmUgbm90IHF1aXRlIHRoZSBzYW1lIGFzIGluIG1vc3QgUkZDczoNCiJOb3JtYXRpdmUg bGFuZ3VhZ2UgaXMgdXNlZCB0byBkZXNjcmliZSBob3cgbmVjZXNzYXJ5IHRoZSB2YXJpb3VzIGFz cGVjdHMgb2YgdGhlIE1pY3Jvc29mdCBpbXBsZW1lbnRhdGlvbiBhcmUgZm9yIGludGVyb3BlcmFi aWxpdHksIGJ1dCBldmVuIGNvbXBsaWFudCBpbXBsZW1lbnRhdGlvbnMgd2l0aG91dCB0aGUgbWVh c3VyZXMgaW4gc2VjdGlvbnMgNC02IHdvdWxkIHN0aWxsIG9ubHkgYmUgc2FmZSB0byBkZXBsb3kg aW4gY29udHJvbGxlZCBlbnZpcm9ubWVudHMuIg0KDQo8UHJhdmVlbj4gRmFpciBlbm91Z2guIEFk ZGVkIHRleHQgaW4gbmV4dCByZXZpc2lvbi4NCg0KDQozLiBEQ1RDUCBBbGdvDQoNClRoZSB0aHJl ZSBidWxsZXRzIHNheSBubyBtb3JlIHRoYW4gInRoaXMgaXMgbm9ybWFsIHN0dWZmIi4gV291bGQg aXQgYmUgYmV0dGVyIHRvIHN1cHBsZW1lbnQgZWFjaCBzZW50ZW5jZSB3aXRoIGEgYnJpZWYgcGhy YXNlIHNheWluZyB3aGF0IGlzIGRpZmZlcmVudCBhYm91dCBlYWNoIGFzcGVjdCBjb21wYXJlZCB0 byBSRkMzMTY4Pw0KDQo8UHJhdmVlbj4gVGhlIGdvYWwgaGVyZSBpdCB0byBkZXNjcmliZSB0aGUg Y2hhbmdlcyBuZWVkZWQgb24gdG9wIG9mIDMxNjggc28gSSBkb27igJl0IHRoaW5rIGZ1cnRoZXIg ZXhwbGFuYXRpb24gaXMgbmVjZXNzYXJ5Lg0KDQoNCjMuMSBNYXJraW5nDQoNClRoaXMgbmVlZHMg dG8gc2F5IHNvbWV0aGluZyBhYm91dCBob3cgeW91IG1hcmsgdGhlIElQIGhlYWRlciBmcm9tIEwy LiBJIHN1Z2dlc3QgeW91IHJlZmVyIHRvIHRoZSB1cC1hbmQtZm9yd2FyZCBtb2RlIG9mIGRyYWZ0 LWlldGYtdHN2d2ctZWNuLWVuY2FwLg0KDQo8UHJhdmVlbj4gV2h5IGlzIHRoYXQgcmVsZXZhbnQg dG8gdGhpcyBkb2N1bWVudD8gSXQgaXMgbm90IGludGVuZGVkIGFzIGEgc3BlY2lmaWNhdGlvbiBm b3Igb3BlcmF0aW9uIG9mIEwyIHN3aXRjaGVzLiBXb27igJl0IGZpeC4NCg0Kcy9zZW5kaW5nIHJh dGUvDQogL2xpbmsgcmF0ZS8NCg0KDQo8UHJhdmVlbj4gRml4ZWQgaW4gbmV4dCByZXZpc2lvbg0K DQoNCg0KMy4yDQoNCkNVUlJFTlQ6DQoNCiAgIDEuICBJZiB0aGUgQ0UgY29kZXBvaW50IGlzIHNl dCBhbmQgRENUQ1AuQ0UgaXMgZmFsc2UsIHNlbmQgYW4gQUNLIGZvcg0KDQogICAgICAgYW55IHBy ZXZpb3VzbHkgdW5hY2tub3dsZWRnZWQgcGFja2V0cyBhbmQgc2V0IERDVENQLkNFIHRvIHRydWUu DQoNCg0KDQogICAyLiAgSWYgdGhlIENFIGNvZGVwb2ludCBpcyBub3Qgc2V0IGFuZCBEQ1RDUC5D RSBpcyB0cnVlLCBzZW5kIGFuIEFDSw0KDQogICAgICAgZm9yIGFueSBwcmV2aW91c2x5IHVuYWNr bm93bGVkZ2VkIHBhY2tldHMgYW5kIHNldCBEQ1RDUC5DRSB0bw0KDQogICAgICAgZmFsc2UuDQpT VUdHRVNURUQ6DQoNCiAgIDEuICBJZiB0aGUgQ0UgY29kZXBvaW50IGlzIHNldCBhbmQgRENUQ1Au Q0UgaXMgZmFsc2UsIHNldCBEQ1RDUC5DRSB0bw0KDQogICAgICAgdHJ1ZSBhbmQgc2VuZCBhbiBB Q0sgZm9yIGFueSBwcmV2aW91c2x5IHVuYWNrbm93bGVkZ2VkIHBhY2tldHMuDQoNCg0KDQogICAy LiAgSWYgdGhlIENFIGNvZGVwb2ludCBpcyBub3Qgc2V0IGFuZCBEQ1RDUC5DRSBpcyB0cnVlLCBz ZXQgRENUQ1AuQ0UNCg0KICAgICAgIHRvIGZhbHNlIGFuZCBzZW5kIGFuIEFDSyBmb3IgYW55IHBy ZXZpb3VzbHkgdW5hY2tub3dsZWRnZWQgcGFja2V0cy4NCiAgICBUaGUgZmlndXJlIHdvdWxkIGhh dmUgdG8gYmUgY2hhbmdlZCB0byBiZSBjb25zaXN0ZW50IHRvby4NClJBVElPTkFMRToNCklmIHRo ZSByZWNlaXZlciBjaGFuZ2VzIERDVENQLkNFIC9hZnRlci8gc2VuZGluZyB0aGUgQUNLIGxpa2Ug dGhpcywgaXQgZGVsYXlzIGVhY2ggc2lnbmFsIHVudGlsIHRoZSBmb2xsb3dpbmcgQUNLIGlzIHNl bnQuIFRoYXQgY291bGQgYWRkIGEgZGVsYXkgb2YgYW55dGhpbmcgZnJvbSAxIHRvIG0gcGFja2V0 cy4gSSd2ZSBuZXZlciB1bmRlcnN0b29kIHdoeSB0aGUgb3JkZXIgb2YgdGhlc2Ugb3BlcmF0aW9u cyB3YXMgc3BlY2lmaWVkIGluIHRoaXMgd2F5LiBJZiB0aGVyZSBpcyBubyByZWFzb24sIHRoZW4g SSBzdWdnZXN0IHRoYXQgaXQgaXMgc3BlY2lmaWVkIGluIHRoZSBvcHBvc2l0ZSBvcmRlciwgYXMg SSBkZXNjcmliZSBhYm92ZS4NCg0KQSBub3RlIGNvdWxkIGJlIGFkZGVkIHRvIHNheSB0aGUgV2lu ZG93cyBTZXJ2ZXIgMTIgaW1wbGVtZW50YXRpb24gZG9lcyB0aGVzZSBzdGVwcyBpbiByZXZlcnNl IG9yZGVyLCBidXQgdGhlIG9yZGVyIHNwZWNpZmllZCBpcyBwcmVmZXJyZWQgYmVjYXVzZSBpdCBy ZWR1Y2VzIHNpZ25hbGxpbmcgZGVsYXkgYW5kIGhhcyBubyBpbnRlcm9wZXJhYmlsaXR5IGlzc3Vl cyB3aXRoIHRoZSBvcmlnaW5hbCBXaW5kb3dzIGltcGxlbWVudGF0aW9uLg0KPFByYXZlZW4+IFdv buKAmXQgZml4LiBUaGlzIGlzIGhvdyB0aGUgV2luZG93cyBpbXBsZW1lbnRhdGlvbiBiZWhhdmVz IHNvIHRoZSBvcmRlcmluZyBpcyByZXF1aXJlZC4gQm90aCB0aGUgcGFwZXIgYW5kIHRoZSBkcmFm dCBhcmUgY29uc2lzdGVudCBpbiB0aGlzLiBUaGVyZSBpcyBubyBkZWxheSBiZWluZyBpbnRyb2R1 Y2VkIGhlcmUuIFRoaXMgQUNLIGlzIHNlbnQgaW1tZWRpYXRlbHkgc28gdGhlIG9yZGVyIGRvZXMg bm90IG1hdHRlci4NCg0KDQoNCg0KDQoNCg0KICAgVGhlIGhhbmRsaW5nIG9mIHRoZSAiQ29uZ2Vz dGlvbiBXaW5kb3cgUmVkdWNlZCIgKENXUikgYml0IGlzIGFsc28NCg0KICAgZXhhY3RseSBhcyBw ZXIgW1JGQzMxNjg8aHR0cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29t Lz91cmw9aHR0cHMlM2ElMmYlMmZ0b29scy5pZXRmLm9yZyUyZmh0bWwlMmZyZmMzMTY4JmRhdGE9 MDElN2MwMSU3Y3ByYXZiJTQwbWljcm9zb2Z0LmNvbSU3Y2E1NzJiMGJhOGUxYjQ3ZDNlNDRhMDhk MmU2ZDdlMDNmJTdjNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN2MxJnNkYXRhPUNl OW01cTBYemtiUU5XRWIxcnFtWHJxeDEyVWY0TERzY3JVQXo1Qzc4ZVklM2Q+XSBpbmNsdWRpbmcg W1JGQzMxNjgtRVJSQVRBMzYzOTxodHRwczovL25hMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0 bG9vay5jb20vP3VybD1odHRwcyUzYSUyZiUyZnRvb2xzLmlldGYub3JnJTJmaHRtbCUyZmRyYWZ0 LWlldGYtdGNwbS1kY3RjcC0wMSUyM3JlZi1SRkMzMTY4LUVSUkFUQTM2MzkmZGF0YT0wMSU3YzAx JTdjcHJhdmIlNDBtaWNyb3NvZnQuY29tJTdjYTU3MmIwYmE4ZTFiNDdkM2U0NGEwOGQyZTZkN2Uw M2YlN2M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3YzEmc2RhdGE9d0RKdiUyYmN5 cFhqNWxheWZ6dlFHaFhZcUI2a3dsOGxXJTJmcGRRNGlZZzJjTjglM2Q+XS4gIFRoYXQgaXMsIG9u DQoNCiAgIHJlY2VpcHQgb2YgYSBzZWdtZW50IHdpdGggYm90aCB0aGUgQ0UgYW5kIENXUiBiaXRz IHNldCwgQ1dSIGlzDQoNCiAgIHByb2Nlc3NlZCBmaXJzdCBhbmQgdGhlbiBFQ0UgaXMgcHJvY2Vz c2VkLg0KRXZlbiB0aG8gdGhpcyBpcyB0aGUgcmVjZWl2ZXIgc2VjdGlvbiwgSSBzdWdnZXN0Og0K cy9UaGUgaGFuZGxpbmcvUmVjZWl2ZXIgaGFuZGxpbmcvDQoNCjxQcmF2ZWVuPiBJc27igJl0IHRo aXMgYXNzdW1lZCBieSBhIHJlYWRlciBmYW1pbGlhciB3aXRoIDMxNjg/IEJ1dCB0aGlzIGlzIGEg bWlub3IgZWRpdG9yaWFsIGZpeCBzbyBmaXhlZCBpbiB0aGUgbmV4dCByZXZpc2lvbi4NCg0KV2hh dGV2ZXIsIHRoaXMgY2Fubm90IGJlIGNvcnJlY3QuIEEgRENUQ1AgcmVjZWl2ZXIgc3VyZWx5IGRv ZXMgbm90aGluZyBvbiByZWNlaXB0IG9mIENXUiwgd2hlcmVhcyBhbiBSRkMzMTY4IHJlY2VpdmVy IGRvZXMgc29tZXRoaW5nLiBBIERDVENQIHJlY2VpdmVyIGNlcnRhaW5seSBjYW5ub3QgZG8gZXhh Y3RseSB3aGF0IFJGQzMxNjggc2F5cywgYmVjYXVzZSB0aGF0IHNheXMgc3RvcCBzZXR0aW5nIEVD RSBvbiByZWNlaXB0IG9mIENXUiB1bnRpbCB0aGUgbmV4dCBDRSBhcnJpdmVzLCB3aGljaCB3b3Vs ZCBzdXJlbHkgYnJlYWsgdGhpcyBmZWVkYmFjayBwcm90b2NvbC4NCg0KPFByYXZlZW4+IEkgZG9u 4oCZdCBzZWUgd2h5IHRoaXMgd291bGQgYnJlYWsgdGhlIGZlZWRiYWNrIHByb3RvY29sLiBUaGUg cmVjZWl2ZXIgd2lsbCBzdGFydCBlY2hvaW5nIGFnYWluIGFzIHNvb24gYXMgaXQgc2VlcyB0aGUg Zmlyc3QgQ0UgYXJyaXZlcyBhZ2Fpbi4gSWYgcGFja2V0IGhhcyBib3RoIENXUiBhbmQgQ0Ugc2V0 IHRoZW4gQ0UgdGFrZXMgcHJlY2VkZW5jZSBhbmQgdGhlIGVjaG9pbmcgaXMgZG9uZS4NCg0KDQoz LjMNCg0KICAgRENUQ1AuQWxwaGEsIHdoaWNoIGlzIGluaXRpYWxpemVkIHRvIDEgYW5kIE1VU1Qg YmUgdXBkYXRlZA0KDQogICBhcyBmb2xsb3dzOg0Kcy9NVVNUL1NIT1VMRC8NCkFuZCBhZGQgIkFu IGFsdGVybmF0aXZlIGNvbmdlc3Rpb24gYXZvaWRhbmNlIGFsZ29yaXRobSBNQVkgYmUgdXNlZCwg YnV0IGl0IE1VU1QgbGVhZCB0byBmbG93IHJhdGUgaW52ZXJzZWx5IHByb3BvcnRpb25hbCB0byAx L00iLg0KDQpSYXRpb25hbGU6IFRoZXJlIGFyZSBtYW55IHdheXMgdG8gaW1wbGVtZW50IGludGVy b3BlcmFibGUgMS9wIGNjLiBUaGlzIGlzIGp1c3Qgb25lLg0KDQo8UHJhdmVlbj4gQWx0ZXJuYXRl IGFsZ29yaXRobXMgYXJlIG91dCBvZiBzY29wZSBvZiB0aGlzIGRyYWZ0LiBXZSBjYW5ub3Qgc2F5 IHdpdGhvdXQgaW50ZXJvcCB0ZXN0aW5nIGlmIGEgZGlmZmVyZW50IGFsZ29yaXRobSB3aWxsIHBl cmZvcm0gd2VsbCBpbiBkYXRhY2VudGVycyBvciBpbnRlcm9wIHdlbGwgd2l0aCBleGlzdGluZyBp bXBsZW1lbnRhdGlvbnMuIElmIHRoZXJlIGFyZSBvdGhlciB3YXlzIHRvIGltcGxlbWVudCAxL3Ag dGhleSBzaG91bGQgYmUgY292ZXJlZCBieSBvdGhlciBkcmFmdHMuIFRoaXMgZHJhZnQgd2lsbCBv bmx5IGRlc2NyaWJlIHRoZSBhbGdvcml0aG0gdGhhdCBoYXMgYmVlbiB0ZXN0ZWQgYW5kIGRlcGxv eWVkLiBUaGF0IHNhaWQgSSBhbSB3aWxsaW5nIHRvIG1ha2UgaXQgYSBTSE9VTEQgc28gZml4ZWQg aW4gdGhlIG5leHQgcmV2aXNpb24uDQoNCg0KDQogICBEQ1RDUC5CeXRlc1NlbnQNClRoaXMgdmFy aWFibGUgYWN0dWFsbHkgY291bnRzIGJ5dGVzIHJlY2VpdmVkLiBpdCdzIHByZXR0eSBjb25mdXNp bmcgdG8gY2FsbCBpdCBCeXRlc1NlbnQuDQoNCjxQcmF2ZWVuPiBObywgdGhpcyBpcyB0cmFja2lu ZyBieXRlcyB0aGF0IGhhdmUgYmVlbiBzZW50Lg0KDQoNCnMvVENQIFNBQ0sgb3B0aW9ucyBbUkZD MjAxOF0gYXJlIGlnbm9yZWQuLw0KIC9UaGUgc2VuZGVyIE1VU1QgaWdub3JlIFRDUCBTQUNLIG9w dGlvbnMgW1JGQzIwMThdIGZvciB0aGlzIGNvbXB1dGF0aW9uLi8NClJBVElPTkFMRToNCiAgYSkg SSB0aGluayB0aGUgaWRlYSBpcyB0byBpZ25vcmUgQ0UgbWFya3MgYWZ0ZXIgYSBnYXAgYmVjYXVz ZSwgaWYgdGhlIGdhcCBiZWNvbWVzIGNvbnNpZGVyZWQgYSBsb3NzLCB0aGUgcmVzcG9uc2UgdG8g bG9zcyB3aWxsIG92ZXJyaWRlIGFueSBuZWVkIHRvIGNvdW50IGluY29taW5nIENFIG1hcmtzIGZv ciB0aGUgZm9sbG93aW5nIHJvdW5kIHRyaXAuIEhvd2V2ZXIsIGlmIHRoZSBnYXAgaXMgZmlsbGVk IGJlZm9yZSBpdCBpcyBjb25zaWRlcmVkIGEgbG9zcyB7Tm90ZSAxfSwgdGhlbiBDRSBtYXJrcyB0 aGF0IHdlcmUgaWdub3JlZCBiZWNhdXNlIHRoZXkgYXJyaXZlZCBhZnRlciBhIGdhcCB3aWxsIG5l ZWQgdG8gYmUgInVuaWdub3JlZCIuDQogIGIpIFdlIG5lZWQgdG8gbWFrZSBjbGVhciB0aGF0IFNB Q0sgaXMgbm90IGlnbm9yZWQgYWx0b2dldGhlciwgb25seSBmb3IgdGhpcyBjb21wdXRhdGlvbi4N Cg0Ke05vdGUgMX06IEkgY2FuIHRoaW5rIG9mIHR3byBjYXNlczoNCiogTGVzcyB0aGFuIHRocmVl IGR1cGFja3MgdGhlbiB0aGUgZ2FwIGlzIGZpbGxlZA0KKiBUaGUgZ2FwIGlzIGZpbGxlZCBieSBh IGRlbGF5ZWQgc2VnbWVudCBzbyB0aGF0IGFuIGVhcmxpZXIgcmV0cmFuc21pc3Npb24gd2FzIHNw dXJpb3VzDQo8UHJhdmVlbj4gT2sgSSB3aWxsIHVwZGF0ZSB0aGUgdGV4dC4NCg0KDQoNCnRoZSBz ZW5kZXIgTVVTVCB1cGRhdGUgY3duZCBhcyBmb2xsb3dzOg0KDQogICAgICBjd25kID0gY3duZCAq ICgxIC0gRENUQ1AuQWxwaGEgLyAyKQ0Kcy9NVVNUL1NIT1VMRC8NClJhdGlvbmFsZTogQWx0ZXJu YXRpdmUgaW50ZXJvcGVyYWJsZSByZXNwb25zZSBmdW5jdGlvbnMgYXJlIHBvc3NpYmxlLiBGb3Ig aW5zdGFuY2UgYW4gYWxnb3JpdGhtIGxpa2UgUmVsZW50bGVzcyBUQ1AgdGhhdCBzaW1wbHkgcmVk dWNlcyBjd25kIGJ5IGhhbGYgdGhlIHNpemUgb2YgYW55IENFLW1hcmtlZCBzZWdtZW50LiBUaGVu IHRoZXJlIGlzIG5vIEFscGhhIGFuZCBubyBnIHZhcmlhYmxlLg0KDQoNCjxQcmF2ZWVuPiBGaXhl ZA0KDQoNCg0KQ1VSUkVOVDoNCg0KICAgSnVzdCBhcyBzcGVjaWZpZWQgaW4gW1JGQzMxNjg8aHR0 cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM2El MmYlMmZ0b29scy5pZXRmLm9yZyUyZmh0bWwlMmZyZmMzMTY4JmRhdGE9MDElN2MwMSU3Y3ByYXZi JTQwbWljcm9zb2Z0LmNvbSU3Y2E1NzJiMGJhOGUxYjQ3ZDNlNDRhMDhkMmU2ZDdlMDNmJTdjNzJm OTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN2MxJnNkYXRhPUNlOW01cTBYemtiUU5XRWIx cnFtWHJxeDEyVWY0TERzY3JVQXo1Qzc4ZVklM2Q+XSwgVENQIHNob3VsZCBub3QgcmVhY3QgdG8g Y29uZ2VzdGlvbg0KDQogICBpbmRpY2F0aW9ucyBtb3JlIHRoYW4gb25jZSBmb3IgZXZlcnkgd2lu ZG93IG9mIGRhdGEuDQpTVUdHRVNURUQ6DQoNCiAgIEp1c3QgYXMgc3BlY2lmaWVkIGluIFtSRkMz MTY4PGh0dHBzOi8vbmEwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0 dHBzJTNhJTJmJTJmdG9vbHMuaWV0Zi5vcmclMmZodG1sJTJmcmZjMzE2OCZkYXRhPTAxJTdjMDEl N2NwcmF2YiU0MG1pY3Jvc29mdC5jb20lN2NhNTcyYjBiYThlMWI0N2QzZTQ0YTA4ZDJlNmQ3ZTAz ZiU3YzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdjMSZzZGF0YT1DZTltNXEwWHpr YlFOV0ViMXJxbVhycXgxMlVmNExEc2NyVUF6NUM3OGVZJTNkPl0sIERDVENQIGRvZXMgbm90IHJl YWN0IHRvIGNvbmdlc3Rpb24NCg0KICAgaW5kaWNhdGlvbnMgbW9yZSB0aGFuIG9uY2UgZm9yIGV2 ZXJ5IHdpbmRvdyBvZiBkYXRhLg0KSSBkb24ndCBrbm93IHdoZXRoZXIgeW91IGludGVuZGVkIHRo aXMgdG8gYmUgYW4gdXBwZXItY2FzZSBTSE9VTEQgTk9ULiBJZiBzbywgSSB3b3VsZCBhcmd1ZSBh Z2FpbnN0IHRoaXMgYmVpbmcgbm9ybWF0aXZlLCBiZWNhdXNlIGl0IGlzbid0IG5lY2Vzc2FyeSBm b3IgaW50ZXJvcDsgdGhlcmVmb3JlIEkndmUgc3VnZ2VzdGVkIGF2b2lkaW5nIGhlICdzaG91bGQn IHdvcmQuDQoNCg0KPFByYXZlZW4+IEZpeGVkDQoNCg0KDQoNCiAgIFRoZSBzZXR0aW5nIG9mDQoN CiAgIHRoZSAiQ29uZ2VzdGlvbiBXaW5kb3cgUmVkdWNlZCIgKENXUikgYml0IGlzIGFsc28gZXhh Y3RseSBhcyBwZXINCg0KICAgW1JGQzMxNjg8aHR0cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90ZWN0 aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM2ElMmYlMmZ0b29scy5pZXRmLm9yZyUyZmh0bWwl MmZyZmMzMTY4JmRhdGE9MDElN2MwMSU3Y3ByYXZiJTQwbWljcm9zb2Z0LmNvbSU3Y2E1NzJiMGJh OGUxYjQ3ZDNlNDRhMDhkMmU2ZDdlMDNmJTdjNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRi NDclN2MxJnNkYXRhPUNlOW01cTBYemtiUU5XRWIxcnFtWHJxeDEyVWY0TERzY3JVQXo1Qzc4ZVkl M2Q+XS4NCg0KDQoNCg0KSXQgaXMgd3JvbmcgdG8gc2F5ICJleGFjdGx5Ii4gVGhlIHNlbmRlciBj ZXJ0YWlubHkgc2V0cyBDV1Igd2hlbiBpdCBkb2VzIGEgY29uZ2VzdGlvbiByZXNwb25zZS4gQnV0 IGluIERDVENQIHRoZSBjb25nZXN0aW9uIHJlc3BvbnNlIG9jY3VycyBldmVyeSBSVFQsIHRyaWdn ZXJlZCBieSBpdHMgb3duIG1lYXN1cmVtZW50LXBlcmlvZCBsb2dpYywgd2hlcmVhcyBpbiBSRkMz MTY4IGl0IGlzIHRyaWdnZXJlZCBieSB0aGUgYXJyaXZhbCBvZiBhbiBFQ0UgYWZ0ZXIgdGhlIEFD SyBvZiBhbnkgcHJldmlvdXMgc2VnbWVudCBpdCBzZW50IHdpdGggQ1dSIHNldC4NCg0KSSB0aGlu ayBpdCBpcyB3b3J0aCBzYXlpbmcgdGhhdCBzZXR0aW5nIENXUiBpcyBuZWNlc3NhcnkgZm9yIHNh ZmV0eSwgb3RoZXJ3aXNlIGluIHRoZSBjYXNlIHdoZXJlIHRoZXJlIGhhcyBiZWVuIGEgY29uZmln dXJhdGlvbiBtYW5hZ2VtZW50IGVycm9yIGFuZCB0aGUgcmVjZWl2ZXIgY29tcGxpZXMgd2l0aCBS RkMgMzE2OCBub3QgRENUQ1AsIGl0IHdpbGwgY29udGludWUgc2VuZGluZyBFQ0UgZm9yIGV2ZXIg YW5kIHN0YXJ2ZSB0aGUgc2Vzc2lvbi4NCg0KSXQgbWlnaHQgaGVscCB0byBleHBsaWNpdGx5IGNv bmZpcm0gdGhhdDoNCiJPdGhlciBhc3BlY3RzIG9mIFRDUCBjb25nZXN0aW9uIGF2b2lkYW5jZSBh bmQgY29udHJvbCBzdWNoIGFzIHRoZSBzbG93IHN0YXJ0IHBoYXNlIGFyZSBubyBkaWZmZXJlbnQg dG8gdGhvc2UgaW4gUkZDNTY4MS4iDQoNCg0KPFByYXZlZW4+IEZpeGVkIHRoYXQgQ1dSIGlzIG5l ZWRlZCBmb3Igc2FmZXR5LiBOb3QgYWRkaW5nIHRoZSB0ZXh0IGFyb3VuZCA1NjgxLCBpdCBpcyBw cmVzdW1lZC4NCg0KDQozLjQgU1lOLCBTWU4tQUNLLCBSU1QNCg0KICAgW1JGQzMxNjhdIHJlcXVp cmVzIHRoYXQgYSBjb21wbGlhbnQgVENQIE1VU1QgTk9UIHNldCBFQ1Qgb24gU1lOIG9yDQogICBT WU4tQUNLIHBhY2tldHMuDQoNCnMvTVVTVCBOT1QvJ01VU1QgTk9UJy8NClJhdGlvbmFsZTogQmVz dCB0byBtYWtlIGl0IGNsZWFyIHRoaXMgaXMgcXVvdGluZyBhIG5vcm1hdGl2ZSBzdGF0ZW1lbnQg aW4gYW5vdGhlciBSRkMsIGJlY2F1c2UgaXQgaXMgZ29pbmcgdG8gYmUgY29udHJhZGljdGVkLg0K DQpDVVJSRU5UDQoNCiAgIFRoZXNlIFJGQ3MsIGhvd2V2ZXIsIGFyZQ0KDQogICBpbnRlbmRlZCBm b3IgZ2VuZXJhbCBJbnRlcm5ldCB1c2UsIGFuZCBkbyBub3QgZGlyZWN0bHkgYXBwbHkgdG8gYQ0K DQogICBjb250cm9sbGVkIGRhdGFjZW50ZXIgZW52aXJvbm1lbnQuDQoNCi4uLg0KDQogICBGb3Ig RENUQ1AgY29ubmVjdGlvbnMsIHRoZSBzZW5kZXINCg0KICAgU0hPVUxEIHNldCBFQ1QgZm9yIFNZ TiwgU1lOLUFDSyBhbmQgUlNUIHBhY2tldHMuDQpTVUdHRVNURUQ6DQoNCiAgIEFsc28sIGEgU1lO IGlzIHNlbnQgYmVmb3JlIHRoZSBFQ04tY2FwYWJpbGl0eSBoYXMgYmVlbg0KICAgbmVnb3RpYXRl ZCwgc28gaWYgaXQgaXMgQ0UtbWFya2VkLCBhIG5vbi1FQ04gVENQIHNlcnZlciB3b3VsZCBub3QN CiAgIHJlY29nbmlzZSB0aGUgbWFya2luZy4gUkZDIDMxNjggZG9lcyBub3Qgc3BlY2lmeSB0aGUg RUNOIGZpZWxkIG9uDQogICBhIFJTVC4gVGhlIHNlY3VyaXR5IGNvbmNlcm5zIGFkZHJlc3NlZCBi eSB0aGVzZSBSRkNzDQogICBtaWdodCBub3QgYXBwbHkgaW4gY29udHJvbGxlZCBlbnZpcm9ubWVu dHMgbGlrZSBkYXRhIGNlbnRyZXMsIGFuZA0KICAgaXQgbWlnaHQgbm90IGJlIG5lY2Vzc2FyeSB0 byBjYXRlciBmb3IgdGhlIHByZXNlbmNlIG9mIG5vbi1FQ04NCiAgIHNlcnZlcnMuDQouLi4NCg0K ICAgVGhlcmVmb3JlLCB0aGUgc2VuZGVyIE1VU1Qgc2V0IEVDVCBmb3IgU1lOL0FDSyBhbmQgUlNU IHBhY2tldHMgYW5kIGENCg0KICAgY29uZmlndXJhdGlvbiBvcHRpb24gU0hPVUxEIGJlIHByb3Zp ZGVkIHRvIHNldCBFQ1QgZm9yIFNZTnMuDQpSQVRJT05BTEU6DQogICBUaGUgZHJhZnQgc2hvdWxk IGF2b2lkIGFzc3VtaW5nIHRoYXQgc2VjdXJpdHkgY29uY2VybnMgZG8gbm90IGFwcGx5IGluIGFs bCBjb250cm9sbGVkIGVudmlyb25tZW50cy4NCk5PVEU6DQogICBUaGlzIG1pZ2h0IG5vdCByZWZs ZWN0IHRoZSB3YXkgeW91ciBpbXBsZW1lbnRhdGlvbiBpcyBjb2RlZCwgc28geW91IG1pZ2h0IHdh bnQgdG8gbWFrZSB0aGF0IGNsZWFyLg0KDQo8UHJhdmVlbj4gQWRkaW5nIHNvbWUgdGV4dCBhcm91 bmQgc2VjdXJpdHkgY29uY2VybnMuDQoNCg0KDQo0LiBJbXBsZW1lbnRhdGlvbiBJc3N1ZXMNCg0K Q1VSUkVOVDoNCg0KICAgdGhlIGltcGxlbWVudGF0aW9uIE1VU1QgY2hvb3NlIGEgc3VpdGFibGUN Cg0KICAgZXN0aW1hdGlvbiBnYWluLiAgW0RDVENQMTA8aHR0cHM6Ly9uYTAxLnNhZmVsaW5rcy5w cm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM2ElMmYlMmZ0b29scy5pZXRmLm9yZyUy Zmh0bWwlMmZkcmFmdC1pZXRmLXRjcG0tZGN0Y3AtMDElMjNyZWYtRENUQ1AxMCZkYXRhPTAxJTdj MDElN2NwcmF2YiU0MG1pY3Jvc29mdC5jb20lN2NhNTcyYjBiYThlMWI0N2QzZTQ0YTA4ZDJlNmQ3 ZTAzZiU3YzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdjMSZzZGF0YT0zM2RSVVV4 eU5hMnRjWDB4SnRNbDEybld3eklkSFphNmoza2dBTDFkeElNJTNkPl0gcHJvdmlkZXMgYSB0aGVv cmV0aWNhbCBiYXNpcw0KU1VHR0VTVDoNCg0KICAgdGhlIGltcGxlbWVudGF0aW9uIHdpbGwgbmVl ZCB0byBjaG9vc2UgYSBzdWl0YWJsZQ0KDQogICBlc3RpbWF0aW9uIGdhaW4uICBbQURDVENQMTA8 aHR0cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMl M2ElMmYlMmZ0b29scy5pZXRmLm9yZyUyZmh0bWwlMmZkcmFmdC1pZXRmLXRjcG0tZGN0Y3AtMDEl MjNyZWYtRENUQ1AxMCZkYXRhPTAxJTdjMDElN2NwcmF2YiU0MG1pY3Jvc29mdC5jb20lN2NhNTcy YjBiYThlMWI0N2QzZTQ0YTA4ZDJlNmQ3ZTAzZiU3YzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2Qw MTFkYjQ3JTdjMSZzZGF0YT0zM2RSVVV4eU5hMnRjWDB4SnRNbDEybld3eklkSFphNmoza2dBTDFk eElNJTNkPl0gcHJvdmlkZXMgYSB0aGVvcmV0aWNhbCBiYXNpcyAuLi4NClJBVElPTkFMRToNCiAg IGEpIEFzIGFib3ZlLCB0aGlzIGlzIG9ubHkgb25lIHdheSB0byBpbXBsZW1lbnQgdGhlIGNjLCBh bmQgb3RoZXJzIGNvdWxkIHdlbGwgcHJvdmUgdG8gYmUgaW50ZXJvcGVyYWJsZSB3aGVuIHRlc3Rl ZC4NCiAgIGIpIE1vcmUgcGFydGljdWxhcmx5LCBpdCB3b3VsZCBiZSBiZXR0ZXIgZm9yIGFuIGlt cGxlbWVudGF0aW9uIHRvIGFkYXB0IHRoZSBlc3RpbWF0aW9uIGdhaW4gdG8gdGhlIFJUVCwgc28g dGhlIHNwZWMgb3VnaHQgbm90IHRvIGltcGx5IHRoYXQgb25lIHZhbHVlIGhhcyB0byBiZSBjaG9z ZW4uDQogICBjKSBUaGUgbGF0ZXIgcGFwZXIgW0FEQ1RDUDEwXSBwcm92aWRlcyBhIGNvcnJlY3Rl ZCB3YXkgdG8gZGV0ZXJtaW5lIHRoZSBnYWluLiBGcm9tIG1lbW9yeSAoSSdtIG9mZmxpbmUgYXQg dGhlIG1vKSBpdCBhdCBsZWFzdCBtYWtlcyB0aHJvdWdocHV0IGludmVyc2VseSBwcm9wb3J0aW9u YWwgdG8gMS9SVFQsIHdoZXJlYXMgdGhlIGFwcHJvYWNoIGluIFtEQ1RDUDEwXSBtYWRlIGl0IGlu dmVyc2VseSBwcm9wb3J0aW9uYWwgdG8gMS8oUlRUXjIpLiBJIGJlbGlldmUgdGhlIExpbnV4IGlt cGxlbWVudGF0aW9uIHVzZXMgdGhlIFtBRENUQ1AxMF0gYXBwcm9hY2guDQoNCjxQcmF2ZWVuPiBG YWlyIGVub3VnaC4gVXBkYXRlZC4NCg0KDQogICBUaGUgaW1wbGVtZW50YXRpb24gbXVzdCBhbHNv IGRlY2lkZSB3aGVuIHRvIHVzZSBEQ1RDUC4NCg0KLi4uDQoNCiAgIGxpa2VseSBpbiB0aGUgc2Ft ZSBkYXRhY2VudGVyIG5ldHdvcmsuDQpUaGUgMm5kICYgM3JkIHBhcmFzIGFyZSBhIG1peCBvZiBp bXBsZW1lbnRhdGlvbiBhbmQgZGVwbG95bWVudCBpc3N1ZXMsIGJ1dCBtb3N0bHkgZGVwbG95bWVu dCwgc28gdGhleSBtaWdodCBiZSBiZXR0ZXIgbW92ZWQgdG8gdGhlIGRlcGxveW1lbnQgaXNzdWVz IHNlY3Rpb24uDQoNCg0KPFByYXZlZW4+IEkgdGhpbmsgdGhleSBhcmUgbWFpbmx5IGltcGxlbWVu dGF0aW9uIGlzc3VlcyDigJMgdGhlIGZhY3QgdGhhdCBhIGxhY2sgb2YgbmVnb3RpYXRpb24gbWVj aGFuaXNtIHBsYWNlcyBhIGJ1cmRlbiBvbiB0aGUgaW1wbGVtZW50YXRpb24gdG8gcHJvdmlkZSBr bm9icyBvciBoZXVyaXN0aWNzIHRvIHVzZSBEQ1RDUC4NCg0KDQoNCkNVUlJFTlQ6DQoNCiAgIEl0 IGlzIFJFQ09NTUVOREVEIHRoYXQgYW4gaW1wbGVtZW50YXRpb24gZGVhbCB3aXRoIGxvc3MgZXBp c29kZXMgaW4NCg0KICAgdGhlIHNhbWUgd2F5IGFzIGNvbnZlbnRpb25hbCBUQ1AuDQoNCi4uLg0K DQogICBEQ1RDUCBpbXBsZW1lbnRhdGlvbiBNQVkgYWxzbyBhbGxvdyBjb25maWd1cmF0aW9uIG9m IHJlc2V0dGluZyB0aGUNCg0KICAgdmFsdWUgb2YgRENUQ1AuQWxwaGEgYXMgcGFydCBvZiBwcm9j ZXNzaW5nIGFueSBsb3NzIGVwaXNvZGVzLg0KU1VHR0VTVEVEOiBNb3ZlIHRoaXMgd2hvbGUgcGFy YSB0byAzLjMgU2VuZGVyIEJlaGF2aW91ciBzZWN0aW9uLCBhbmQ6DQoNCiAgIEFuIGltcGxlbWVu dGF0aW9uIE1VU1QgZGVhbCB3aXRoIGxvc3MgZXBpc29kZXMgaW4NCg0KICAgdGhlIHNhbWUgd2F5 IGFzIGNvbnZlbnRpb25hbCBUQ1AuDQoNCi4uLg0KDQogICBEQ1RDUCBpbXBsZW1lbnRhdGlvbiBT SE9VTEQgYWxzbyByZXNldCB0aGUNCg0KICAgdmFsdWUgb2YgRENUQ1AuQWxwaGEgYXMgcGFydCBv ZiBwcm9jZXNzaW5nIGFueSBsb3NzIGVwaXNvZGVzLg0KDQogICBUaGlzIGFzcGVjdCBvZiB0aGUg YmVoYXZpb3VyIE1BWSBiZSBjb25maWd1cmFibGUuDQpSQVRJT05BTEU6DQogICBhKSBUaGVyZSB3 b3VsZCBuZXZlciBiZSBhIGNhc2UgZm9yIG5vdCBmYWxsaW5nIGJhY2sgdG8gY29udmVudGlvbmFs IFRDUCAgKG9yIGRvIHlvdSBoYXZlIG9uZT8pLCBzbyAiUkVDT01NRU5ERUQiIGlzIHRvbyB3ZWFr Lg0KICAgYikgSSBoYXZlIHRyaWVkIHRvIGludGVycHJldCB3aGF0IHlvdSBtaWdodCBoYXZlIG1l YW50IGFib3V0IHJlc2V0dGluZyBBbHBoYS4gSSdtIG5vdCBzdXJlIHdoeSB5b3UgdGhpbmsgaXQg bWlnaHQgbmVlZCB0byBiZSBjb25maWd1cmFibGUgdGhvdWdoPw0KPFByYXZlZW4+IFllcyB0aGlz IGlzIGEgdXNlZnVsIHN1Z2dlc3Rpb24uIE1ha2luZyBsb3NzIGhhbmRsaW5nIGEgbXVzdCBpbiBz ZW5kZXIgc2VjdGlvbi4gUmVzZXQgb2YgYWxwaGEgd2FzIGRpc2N1c3NlZCBpbiB0Y3BtIGxpc3Qs IGFuZCBMaW51eCBpbXBsZW1lbnRhdGlvbiBzdXBwb3J0cyBpdC4NCg0KDQoNCiAgIC4uLml0IGlz IGFsc28gUkVDT01NRU5ERUQgdGhhdCBhbiBpbXBsZW1lbnRhdGlvbiBhbGxvdw0KDQogICBjb25m aWd1cmF0aW9uIG9mIHJlc3RhcnRpbmcgdGhlIGNvbmdlc3Rpb24gd2luZG93IChjd25kKSBvZiBp ZGxlDQoNCiAgIERDVENQIGNvbm5lY3Rpb25zDQpXaGVyZSBzcGVjaWFsIGltcGxlbWVudGF0aW9u IG1lYXN1cmVzIGFyZSBuZWNlc3NhcnkgZm9yIGxvdyBSVFQsIHRoZXNlIHNob3VsZCBiZSByZWxh dGVkIHRvIHRoZSBtZWFzdXJlZCBSVFQsIG5vdCBoYXJkLWNvZGVkLiBUaGVyZSBpcyBhbiBhc3N1 bXB0aW9uIGluIGEgbnVtYmVyIG9mIHBsYWNlcyAgdGhhdCAiZGF0YSBjZW50cmUiIGltcGxpZXMg bG93IFJUVC4gT2YgY291cnNlIHRoaXMgaXMgdHJ1ZSBpbiBhIHNpbmdsZSBEQywgYnV0IEkgYmVs aWV2ZSB0aGUgdGhlIHNpbmdsZSBhZG1pbiBhc3BlY3Qgb2YgYSBEQyBpcyB3aGF0IGNoYXJhY3Rl cmlzZXMgRENUQ1AsIG5vdCB0aGUgbG93IFJUVCBhc3BlY3QuIFdpdGggdGhlIG1vZGlmaWNhdGlv bnMgaW4gW0FEQ1RDUF0sIERDVENQIGdlbmVyYWxpc2VzIHRvIGEgbmV0d29yayB3aXRoIGxhcmdl ciBSVFRzIGFzIGxvbmcgYXMgaXQgaXMgc3RpbGwgIG9wZXJhdGVkIGJ5IGEgc2luZ2xlIGFkbWlu Lg0KDQoNCjxQcmF2ZWVuPiB0aGlzIHBhcmFncmFwaCBoYXMgbm93IGJlZW4gcmVtb3ZlZCBwZXIg TWljaGFlbHPigJkgZmVlZGJhY2suDQoNCg0KQ1VSUkVOVDoNCiAgIFtSRkMzMTY4XSBmb3JiaWRz IHRoZSBFQ04tbWFya2luZyBvZiBwdXJlIEFDSyBwYWNrZXRzLCBiZWNhdXNlIG9mIHRoZQ0KICAg aW5hYmlsaXR5IG9mIFRDUCB0byBtaXRpZ2F0ZSBBQ0stcGF0aCBjb25nZXN0aW9uIGFuZCBwcm90 b2NvbC13aXNlDQogICBwcmVmZXJlbnRpYWwgdHJlYXRtZW50IGJ5IHJvdXRlcnMuICBIb3dldmVy LCBkcm9wcGluZyBwdXJlIEFDS3MgLQ0KICAgcmF0aGVyIHRoYW4gRUNOIG1hcmtpbmcgdGhlbSAt IGhhcyBkaXNhZHZhbnRhZ2VzIGZvciB0eXBpY2FsDQogICBkYXRhY2VudGVyIHRyYWZmaWMgcGF0 dGVybnMuICBCZWNhdXNlIG9mIHRoZSBwcmV2YWxlbmNlIG9mIGJ1cnN0eQ0KICAgdHJhZmZpYyBw YXR0ZXJucyB0aGF0IGZlYXR1cmUgdHJhbnNpZW50IGNvbmdlc3Rpb24sIGRyb3BwaW5nIG9mIEFD S3MNCiAgIGNhdXNlcyBzdWJzZXF1ZW50IHJldHJhbnNtaXNzaW9ucy4gSXQgaXMgUkVDT01NRU5E RUQgdGhhdCBhbg0KICAgaW1wbGVtZW50YXRpb24gcHJvdmlkZSBhIGNvbmZpZ3VyYXRpb24ga25v YiB0aGF0IHdpbGwgY2F1c2UgRUNUIHRvIGJlIHNldA0KICAgb24gc3VjaCBjb250cm9sIHBhY2tl cywgd2hpY2ggY2FuIGJlIHVzZWQgaW4gZW52aXJvbm1lbnRzIHdoZXJlIHN1Y2gNCiAgIGNvbmNl cm5zIGRvIG5vdCBhcHBseS4NClNVR0dFU1RFRDoNCiAgIFtSRkMzMTY4XSBmb3JiaWRzIHRoZSBF Q04tbWFya2luZyBvZiBwdXJlIEFDSyBwYWNrZXRzLCBiZWNhdXNlIG9mIHRoZQ0KICAgaW5hYmls aXR5IG9mIFRDUCB0byBtaXRpZ2F0ZSBBQ0stcGF0aCBjb25nZXN0aW9uIGFuZCB0aGUgZXh0cmEN CiAgIGFkdmFudGFnZSB0byBpbmplY3Rpb24gYXR0YWNrZXJzIHRoYXQgRUNOIGlzIHBlcmNlaXZl ZCB0byBvZmZlci4NCiAgIEZvciB0aGUgbGF0dGVyIHJlYXNvbiBSRkMgMzE2OCBhbHNvIGZvcmJp ZHMgRUNOLW1hcmtpbmcgb2YNCiAgIHJldHJhbnNtaXNzaW9ucywgd2luZG93IHByb2JlcyBhbmQg UlNUcy4NCg0KICAgSG93ZXZlciwgZHJvcHBpbmcgYWxsIHRoZXNlIGNvbnRyb2wgcGFja2V0cyAt DQogICByYXRoZXIgdGhhbiBFQ04gbWFya2luZyB0aGVtIC0gaGFzIGNvbnNpZGVyYWJsZSBwZXJm b3JtYW5jZQ0KICAgZGlzYWR2YW50YWdlcy4gIEl0IGlzIFJFQ09NTUVOREVEIHRoYXQgYW4NCiAg IGltcGxlbWVudGF0aW9uIHByb3ZpZGUgYSBjb25maWd1cmF0aW9uIGtub2IgdGhhdCB3aWxsIGNh dXNlIEVDVCB0byBiZSBzZXQNCiAgIG9uIHN1Y2ggY29udHJvbCBwYWNrZXMsIHdoaWNoIGNhbiBi ZSB1c2VkIGluIGVudmlyb25tZW50cyB3aGVyZSBzdWNoDQogICBjb25jZXJucyBkbyBub3QgYXBw bHkuDQpOT1RFOg0KICAgVGhpcyBtaWdodCBub3QgcmVmbGVjdCB0aGUgd2F5IHlvdXIgaW1wbGVt ZW50YXRpb24gaXMgY29kZWQsIHNvIHlvdSBtaWdodCB3YW50IHRvIG1ha2UgdGhhdCBjbGVhci4N Cg0KDQoNCjxQcmF2ZWVuPiBGaXhlZA0KDQoNCjUuIERlcGxveW1lbnQgSXNzdWVzDQoNCiAgIElm DQoNCiAgIHRoZSB0cmFmZmljIGluIHRoZSBkYXRhY2VudGVyIGlzIGEgbWl4IG9mIGNvbnZlbnRp b25hbCBUQ1AgYW5kIERDVENQLA0KDQogICBpdCBpcyBSRUNPTU1FTkRFRCB0aGF0IERDVENQIHRy YWZmaWMgYmUgc2VncmVnYXRlZCBmcm9tIGNvbnZlbnRpb25hbA0KDQogICBUQ1AgdHJhZmZpYy4N CkluIGEgZGF0YSBjZW50cmUgKG9yIGFueXdoZXJlKSwgaXMgdGhlcmUgYW55IGNhc2Ugd2hlcmUg bm90IHNlZ3JlZ2F0aW5nIHRoZW0gd291bGQgbWFrZSBzZW5zZT8gSWYgbm90LCB0aGlzIG5lZWRz IHRvIGJlIGEgTVVTVCwgbm90IGp1c3QgYSBSRUNPTU1FTkRFRC4gSSBjYW4gaW1hZ2luZSBjYXNl cyB3aGVyZSB0aGVyZSBpcyBubyBsb25nLXJ1bm5pbmcgY29udmVudGlvbmFsIFRDUCBvciBubyBs b25nLXJ1bm5pbmcgRENUQ1AsIGJ1dCB0aGF0J3MgY292ZXJlZCBieSB0aGUgImlmIiBhdCB0aGUg c3RhcnQgb2YgdGhlIHNlbnRlbmNlLg0KDQpZb3UgbWlnaHQgd2FudCB0byByZWZlciB0byBkcmFm dC1icmlzY29lLWFxbS1kdWFscS1jb3VwbGVkIGFzIGFub3RoZXIgc2VncmVnYXRpb24gYXBwcm9h Y2ggaGVyZSB0b28uDQoNCiAgIFNpbmNlIERDVENQIHJlbGllcyBvbiBjb25nZXN0aW9uIG1hcmtp bmcgYnkgdGhlIHN3aXRjaGVzLCBEQ1RDUCBjYW4NCg0KICAgb25seSBiZSBkZXBsb3llZCBpbiBk YXRhY2VudGVycyB3aGVyZSB0aGUgZW50aXJlIG5ldHdvcmsNCg0KICAgaW5mcmFzdHJ1Y3R1cmUg c3VwcG9ydHMgRUNOLg0KU3VyZWx5LCB0aGUgImZhbGwtYmFjayB0byBjb252ZW50aW9uYWwgVENQ IG9uIGxvc3MiIHJ1bGUgbWVhbnMgeW91IGNhbiBkZWxldGUgdGhpcyBjb25zdHJhaW50Lg0KDQo8 UHJhdmVlbj4gUmV3b3JkZWQgdG8gaW1wbHkgdGhhdCBEQ1RDUCB3aWxsIG9ubHkgd29yayBhcyBl eHBlY3RlZCBpbiBzdWNoIGNhc2VzLg0KDQoNCiAgIEENCg0KICAgdmFyaWFudCBvZiBEQ1RDUCB0 aGF0IGNhbiBiZSBkZXBsb3llZCB1bmlsYXRlcmFsbHkgYW5kIG9ubHkgcmVxdWlyZXMNCg0KICAg c3RhbmRhcmQgRUNOIGJlaGF2aW9yIGhhcyBiZWVuIGRlc2NyaWJlZCBpbiBbT0RDVENQPGh0dHBz Oi8vbmEwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNhJTJm JTJmdG9vbHMuaWV0Zi5vcmclMmZodG1sJTJmZHJhZnQtaWV0Zi10Y3BtLWRjdGNwLTAxJTIzcmVm LU9EQ1RDUCZkYXRhPTAxJTdjMDElN2NwcmF2YiU0MG1pY3Jvc29mdC5jb20lN2NhNTcyYjBiYThl MWI0N2QzZTQ0YTA4ZDJlNmQ3ZTAzZiU3YzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3 JTdjMSZzZGF0YT1ad2ZKMExnSFEzdmslMmJNRDB3aWlhNXlMcmNNTVNVQmNHZ1BZWG1lUnU4aEUl M2Q+XVtCU0RDQU5dLA0KDQpXaGljaCBwYXJ0IG9mICJzdGFuZGFyZCBFQ04gYmVoYXZpb3VyIiBk byB5b3UgbWVhbj8gVGhlIGhvc3QgcGFydD8gVGhlIG5ldHdvcmsgcGFydD8gVGhlIHJlY2VpdmVy IHBhcnQ/IEFuZCAiY2FuIGJlIGRlcGxveWVkIHVuaWxhdGVyYWxseSIgb3VnaHQgdG8gYmUgaW4g dGhlIGFjdGl2ZSB2b2ljZSBub3QgdGhlIHBhc3NpdmUsIHdoaWNoIHdvdWxkIGhlbHAgcmVzb2x2 ZSB0aGUgYW1iaWd1aXR5IHRvby4NCg0KSSBoYXZlbid0IHJlYWQgW09EQ1RDUF0gYW5kIFtCU0RD QU5dIChJJ20gb2ZmbGluZSBvbiBhIHBsYW5lIGF0IHRoZSBtbykuIEFyZSB0aGV5IHNpbWlsYXIg dG8gIkluc3RhbnQgRUNOIiBpbiBbV3UxMl0gbGlzdGVkIGJlbG93PyBJZiBub3QsIHRoYXQgY291 bGQgYmUgcmVmZXJyZWQgdG8gYXMgd2VsbCBmb3IgYSB0ZWNobmlxdWUgdGhhdCB1c2VzIHRoZSBy ZWd1bGFyIEVDTiBob3N0IGJlaGF2aW91ci4NCg0KDQo8UHJhdmVlbj4gVGhpcyBlZGl0IHByZWRh dGVzIG1lIGFuZCAgSSBkb27igJl0IGhhdmUgdGhlIGZ1bGwgY29udGV4dCwgSSBhbSBsZWF2aW5n IHRoaXMgYXMgaXMuDQoNCg0KDQo2LiBLbm93biBJc3N1ZXMNCg0KRmlyc3QgcGFyYSBjb3VsZCBy ZWZlciB0byBhcHBlbmRpeCBBIG9mIFJGQzc1NjAsIHdoaWNoIGRlc2NyaWJlcyB0aGUgcHJvYmxl bSBwcmVjaXNlbHkuDQoNCg0KDQoNCkEgbWV0aG9kIGZvciBpbXByb3ZpbmcgdGhlIGZhaXJuZXNz IG9mIERDVENQIGhhcyBiZWVuIHByb3Bvc2VkDQoNCiAgIGluIFtBRENUQ1A8aHR0cHM6Ly9uYTAx LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM2ElMmYlMmZ0b29s cy5pZXRmLm9yZyUyZmh0bWwlMmZkcmFmdC1pZXRmLXRjcG0tZGN0Y3AtMDElMjNyZWYtQURDVENQ JmRhdGE9MDElN2MwMSU3Y3ByYXZiJTQwbWljcm9zb2Z0LmNvbSU3Y2E1NzJiMGJhOGUxYjQ3ZDNl NDRhMDhkMmU2ZDdlMDNmJTdjNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN2MxJnNk YXRhPWVkVTJUUEdwTHZ5Rkd2Z29jRFJKaVlSUXlqQ1QlMmZXRU9nUzJNd213ell1VSUzZD5dLCBi dXQgcmVxdWlyZXMgYWRkaXRpb25hbCBleHBlcmltZW50YWwgZXZhbHVhdGlvbi4NCnMvZmFpcm5l c3MvUlRUIGZhaXJuZXNzLw0KDQooSW4gb3VyIGV4cGVyaW1lbnRzLCBpdCdzIG11Y2ggYmV0dGVy IHRoYW4gd2l0aG91dC4pDQoNCg0KPFByYXZlZW4+IEdvYWwgaXMgdG8gY2l0ZSBvdGhlciB3b3Jr IHRoYXQgY2FuIGFkZHJlc3MgcG90ZW50aWFsIGlzc3Vlcy4gSXQgaXMgbm90IGEgcmVjb21tZW5k YXRpb24uIHMvZmFpcm5lc3MvUlRUIGZhaXJuZXNzLyBGaXhlZCBpbiBuZXh0IHJldmlzaW9uLg0K DQoNCjExLiBSZWZlcmVuY2VzDQoNCkkgdGhpbmsgdGhlIGZvbGxvd2luZyBhcmUgY2l0ZWQgbm9y bWF0aXZlbHksIG5vdCBqdXN0IGluZm9ybWF0aXZlbHk6DQpSRkM1NjgxLCBSRkM1NTYyLg0KDQpB ZGRpdGlvbmFsIGluZm9ybWF0aW9uYWwgUmVmZXJlbmNlOg0KDQpbV3UxMl0gV3UsIEguLCBKdSwg Si4sIEx1LCBHLiwgR3VvLCBDLiwgWGlvbmcsIFkuICYgWmhhbmcsIFkuLCAiVHVuaW5nIEVDTiBm b3IgRGF0YSBDZW50ZXIgTmV0d29ya3MsIiBJbjogUHJvY2VlZGluZ3Mgb2YgdGhlIDh0aCBJbnRl cm5hdGlvbmFsIENvbmZlcmVuY2Ugb24gRW1lcmdpbmcgTmV0d29ya2luZyBFeHBlcmltZW50cyBh bmQgVGVjaG5vbG9naWVzIENvTkVYVCAnMTIgcHAuMjUtMzYgQUNNICgyMDEyKQ0KDQoNCjxQcmF2 ZWVuPiBDaXRhdGlvbiB0byBSRkNzIHVwZGF0ZWQgYXMgbm9ybWF0aXZlLiBOb3QgaW5jbHVkaW5n IHRoZSBuZXcgcmVmZXJlbmNlIHNpbmNlIGV2ZW4gdGhvdWdoIGl0IG1heSBiZSByZWxldmFudCDi gJMgaXQgd2FzIG5vdCB1c2VkIGFzIGEgcmVmZXJlbmNlIGluIHdyaXRpbmcgdGhlIGRyYWZ0Lg0K DQoNClRoYXQncyBpdC4gSFRILg0KDQoNCkJvYg0KDQoNCi0tDQoNCl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0KQm9iIEJy aXNjb2UgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaHR0cDovL2JvYmJyaXNjb2UubmV0 LzxodHRwczovL25hMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRw JTNhJTJmJTJmYm9iYnJpc2NvZS5uZXQlMmYmZGF0YT0wMSU3YzAxJTdjcHJhdmIlNDBtaWNyb3Nv ZnQuY29tJTdjYTU3MmIwYmE4ZTFiNDdkM2U0NGEwOGQyZTZkN2UwM2YlN2M3MmY5ODhiZjg2ZjE0 MWFmOTFhYjJkN2NkMDExZGI0NyU3YzEmc2RhdGE9aUV2aFdqOUZDUG96V0FwOHJueGs1VlpkTkYl MmZ2N1c3YUQxQ3A0TXhPaVNzJTNkPg0K --_000_BN1PR03MB008D16E15DCBE49E7C21A4AB6350BN1PR03MB008namprd_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHRpdGxl PlJldmlldyBvZiBkcmFmdC1pZXRmLXRjcG0tZGN0Y3AtMDE8L3RpdGxlPg0KPHN0eWxlPjwhLS0N Ci8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJy aWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAy IDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1z b05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAw MDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4i LHNlcmlmOw0KCWNvbG9yOmJsYWNrO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy bGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5l O30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwg UHJlZm9ybWF0dGVkIENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0 Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgljb2xv cjpibGFjazt9DQp0dA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJZm9udC1mYW1pbHk6IkNv dXJpZXIgTmV3Ijt9DQpzcGFuLkhUTUxQcmVmb3JtYXR0ZWRDaGFyDQoJe21zby1zdHlsZS1uYW1l OiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNv LXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIjsNCglmb250LWZhbWlseTpDb25zb2xhczsN Cgljb2xvcjpibGFjazt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3Jt YWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1h cmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBO ZXcgUm9tYW4iLHNlcmlmOw0KCWNvbG9yOmJsYWNrO30NCnNwYW4uRW1haWxTdHlsZTIxDQoJe21z by1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm Ow0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjINCgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWwtY29tcG9zZTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCglj b2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9y dC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6 OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29y ZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUg bXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2 IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFw ZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4N CjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGJnY29s b3I9IndoaXRlIiBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2 IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPlRoYW5rcyBCb2IuIFNvcnJ5IGZvciB0aGUgJmx0O3JpZGljdWxv dXMmZ3Q7IGRlbGF5LiBDb21tZW50cyBpbmxpbmUgcHJlZml4ZWQgYnkgJmx0O1ByYXZlZW4mZ3Q7 LiBNb3N0IG9mIHRoZXNlIGVkaXRzIHdpbGwgYmUgaW4gdGhlIG5leHQgcmV2aXNpb24uPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5UaGFua3M8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFG NDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBp biAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjp3aW5kb3d0ZXh0Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOndpbmRv d3RleHQiPiBCb2IgQnJpc2NvZSBbbWFpbHRvOmlldGZAYm9iYnJpc2NvZS5uZXRdDQo8YnI+DQo8 Yj5TZW50OjwvYj4gRnJpZGF5LCBOb3ZlbWJlciA2LCAyMDE1IDEwOjI3IEFNPGJyPg0KPGI+VG86 PC9iPiBQcmF2ZWVuIEJhbGFzdWJyYW1hbmlhbiAmbHQ7cHJhdmJAbWljcm9zb2Z0LmNvbSZndDs7 IEVHR0VSVCwgTGFycyAmbHQ7bGFyc0BuZXRhcHAuY29tJmd0OzsgU3RlcGhlbiBCZW5zbGV5ICZs dDtzYmVuc0BtaWNyb3NvZnQuY29tJmd0OzsgRGF2ZSBUaGFsZXIgJmx0O2R0aGFsZXJAbWljcm9z b2Z0LmNvbSZndDs7IGdsZW5uLmp1ZGRAbW9yZ2Fuc3RhbmxleS5jb208YnI+DQo8Yj5DYzo8L2I+ IHRjcG0gSUVURiBsaXN0ICZsdDt0Y3BtQGlldGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9i PiBSZXZpZXcgb2YgZHJhZnQtaWV0Zi10Y3BtLWRjdGNwLTAxPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UHJhdmVlbiAmYW1wOyBjby1hdXRob3JzLDxicj4N Cjxicj4NCkFzIHByb21pc2VkLCBoZXJlJ3MgbXkgcmV2aWV3IG9mIGRyYWZ0LWlldGYtdGNwbS1k Y3RjcC0wMTxicj4NCjxicj4NCjxiPjx1PkdlbmVyYWwgQ29tbWVudHM8YnI+DQo8L3U+PC9iPjxi cj4NCkluIGdlbmVyYWwsIGluIHRoZSBjb21tZW50cyBiZWxvdyBJIGhhdmUgdHJpZWQgdG8gcmVk dWNlIHRoZSBtdWx0aXBsZSBhc3N1bXB0aW9ucyBhYm91dCBjb250cm9sbGVkIGVudmlyb25tZW50 cyBkb3duIHRvIHRoZSBvbmUgYXNzdW1wdGlvbiB0aGF0IHRoZXkgYXJlIGNvbnRyb2xsZWQgYnkg YSBzaW5nbGUgYXV0aG9yaXR5LiBJIGJlbGlldmUgRENUQ1AgY2FuIHdvcmsgd2l0aG91dCB0aGUg b3RoZXIgYXNzdW1wdGlvbnMsIHNvIHRoZSBmb2xsb3dpbmcNCiBkbyBub3QgYXBwbHkgaW4gYWxs IGNvbnRyb2xsZWQgZW52aXJvbm1lbnRzOjxicj4NCiZuYnNwOyAqIG5vdCBhbHdheXMgbG93IFJU VCAoZS5nLiBpbnRlci1EQyBzY2VuYXJpb3MsIG9yIGdsb2JhbCBwcml2YXRlIG5ldHdvcmtzKTxi cj4NCiZuYnNwOyAqIG5vdCBhbHdheXMgbm8gcmlzayBvZiB0cmFmZmljIGF0dGFja3MgKGUuZy4g aW50ZXJuYWxseSBhcnJhbmdlZCBhdHRhY2tzKTxicj4NCkkgbWF5IGhhdmUgbWlzc2VkIHNvbWUg b3RoZXIgb2NjdXJyZW5jZXMgb2YgdGhlc2UgYXNzdW1wdGlvbnMsIHNvIHBscyBmZWVsIGZyZWUg dG8gc2VlayBvdXQgdGhlbSBhbGwuPGJyPg0KPGJyPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5 N0QiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbHQ7UHJhdmVlbiZndDsgRENUQ1AgY2FuIGJlIGV4dGVu ZGVkIHRvIG90aGVyIGVudmlyb25tZW50cyBidXQgdGhpcyBkcmFmdCBkb2VzIG5vdCBjb3ZlciBh bnkgb2YgdGhhdC4gSXQgaXMgZXhwbGljaXRseSBmb3IgZGVwbG95bWVudCBpbiBhIGRhdGFjZW50 ZXIgd2hlcmUgdGhlIFJUVA0KIGlzIGxvdyBhbmQgdGhlcmUgaXMgbm8gcmlzayBvZiBpbnRlcm5h bCBhdHRhY2suIFdlIGNhbm5vdCBjb3ZlciBvdGhlciBzY2VuYXJpb3MgdGhhdCBoYXZlIG5vdCBi ZWVuIHRlc3RlZCBvciBkZXBsb3llZC4gQWxsIHRoZSBrbm93biBkZXBsb3ltZW50cyBhcmUgaW4g Y29udHJvbGxlZCBkYXRhY2VudGVycy4gVGhlIFRDUCBQcmFndWUgZWZmb3J0IHNob3VsZCByZXN1 bHQgaW4gYSBkcmFmdCB0aGF0IGNvdmVycyBhZGRpdGlvbmFsIHJlcXVpcmVtZW50cw0KIHRoYXQg d2lsbCBtYWtlIERDVENQIHdvcmsgd2VsbCBvbiBoaWdoIGxhdGVuY3kgbGlua3MuIDxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48YnI+DQpNYW55IG9mIHRoZSBjb21tZW50cyBhcmd1ZSB3aXRoIHlvdXIgY2hvaWNlcyBv ZiBNVVNULCBTSE9VTEQsIE1BWSBldGMuIFRoaXMgbWlnaHQgc2VlbSBuaXQtcGlja2luZywgZ2l2 ZW4gdGhlIHByaW1hcnkgcHVycG9zZSBpcyB0byBkb2N1bWVudCB0aGUgYWxnby4gSG93ZXZlciwg aXQgd291bGQgYmUgd3JvbmcgdG8gcmVxdWlyZSB0aGluZ3MgdGhhdCBhcmVuJ3QgcmVxdWlyZWQg b3IgdG8gYWxsb3cgZXhjZXB0aW9ucyB3aGVuIGV4Y2VwdGlvbnMgd291bGQNCiBub3QgYmUgaW50 ZXJvcGVyYWJsZS4gQW4gYWx0ZXJuYXRpdmUgYXBwcm9hY2ggd291bGQgYmUgdG8ganVzdCByZW1v dmUgYWxsIGNhcGl0YWxpc2VkIGxhbmd1YWdlLjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZsdDtQ cmF2ZWVuJmd0OyBJIGFtIGZpbmUgd2l0aCByZW1vdmluZyBzdWNoIGNhcGl0YWxpemF0aW9uIGV4 Y2VwdCBmb3Igd2hlbiByZW1vdmluZyBpdCB3aWxsIGxlYWQgdG8gaW50ZXJvcCBwcm9ibGVtcyBi ZXR3ZWVuIGRpZmZlcmVudCBpbXBsZW1lbnRhdGlvbnMgb2YgRENUQ1AuIEkNCiBhbSByZXNwb25k aW5nIHRvIGVhY2ggY29tbWVudCBiZWxvdyBhbmQgYWRkaW5nIHdoZXRoZXIgdGhlIG5ldyByZXZp c2lvbiB3aWxsIGZpeCBpdCBub3QuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PGJyPg0KPGI+PHU+U2VjdGlvbi1ieS1zZWN0aW9uIHJldmlldy48YnI+DQo8L3U+ PC9iPjxicj4NCjxiPkFic3RyYWN0PGJyPg0KPC9iPjxicj4NCkkgdGhpbmsgaXQgbmVlZHMgdG8g aGF2ZSBhbiBhcHBsaWNhYmlsaXR5IHN0YXRlbWVudCBpbiB0aGUgYWJzdHJhY3QgKGFuZCBpbnRy b2R1Y3Rpb24pIHRoYXQgcmVmZXJzIHRvIHRoZSBkZXBsb3ltZW50IGFuZCBpbXBsZW1lbnRhdGlv biBzdGF0dXMgc2VjdGlvbnMgYXQgdGhlIGVuZC4gU29tZXRoaW5nIGxpa2U6PGJyPg0KPGJyPg0K JnF1b3Q7VGhpcyBpcyBhbiBpbmZvcm1hdGlvbmFsIHNwZWNpZmljYXRpb24gb2YgdGhlIGltcGxl bWVudGF0aW9uIG9mIERDVENQIGluIE1pY3Jvc29mdCBXaW5kb3dzIFNlcnZlciAyMDEyLiBJdCBp cyBhcHBsaWNhYmxlIHRvIGRlcGxveW1lbnRzIGluIGNvbnRyb2xsZWQgZW52aXJvbm1lbnRzIGxp a2UgZGF0YSBjZW50cmVzIGJ1dCBpdCBNVVNUIE5PVCBiZSBkZXBsb3llZCBvdmVyIHRoZSBwdWJs aWMgSW50ZXJuZXQgd2l0aG91dCBhZGRpdGlvbmFsIG1lYXN1cmVzLA0KIGFzIGRldGFpbGVkIGlu IHNlY3Rpb25zIDQtNi4gJnF1b3Q7PGJyPg0KPGJyPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5 N0QiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbHQ7UHJhdmVlbiZndDsgVGhpcyBpcyBhbHJlYWR5IGFk ZHJlc3NlZCBpbiB0aGUgaW50cm9kdWN0aW9uLiBJIGRvbuKAmXQgc2VlIHRoZSB2YWx1ZSBvZiBy ZXBlYXRpbmcgaXQgbXVsdGlwbGUgdGltZXMuIEFuIGltcGxlbWVudGVyIHdpbGwgcmVhZCB0aGUg aW50cm9kdWN0aW9uLiBJZiB5b3UNCiBzdGlsbCBmZWVsIHN0cm9uZ2x5LCB3ZSBjYW4gYWRkIGl0 IHRvIHRoZSBhYnN0cmFjdCBhbmQgcmVtb3ZlIGl0IGZyb20gdGhlIGludHJvZHVjdGlvbiBzZWN0 aW9uLiBUaGlzIGRyYWZ0IHdpbGwgbm90IGNvdmVyIGFueSBhZGRpdGlvbmFsIG1lYXN1cmVzIHRo YXQgYXJlIGludGVuZGVkIGZvciBkZXBsb3ltZW50cyBvdXRzaWRlIHRoZSBkYXRhY2VudGVyIOKA kyB0aGF04oCZcyBub3QgdGhlIGludGVuZGVkIHB1cnBvc2UuDQo8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0K PGI+MS4gSW50cm88YnI+DQo8L2I+cy9pdHMgbWFueSBzZXJ2ZXJzLzxicj4NCiZuYnNwOy90aGVp ciBtYW55IHNlcnZlcnMvPGJyPg0KPGJyPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjojMUY0OTdEIj4mbHQ7UHJhdmVlbiZndDsgRml4ZWQgaW4gbmV4dCByZXZpc2lvbi48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGJyPg0KJnF1b3Q7Li4ubGltaXRlZCBxdWV1ZSBjYXBhY2l0aWVzLi4uJnF1 b3Q7IDxicj4NCkkgdW5kZXJzdGFuZCB0aGF0IHRoZSBtb3RpdmF0aW9uIGhhcyBiZWVuIGFiYnJl dmlhdGVkLCBidXQgSSB0aGluayB0aGlzIGhhcyBsb3N0IHRvbyBtdWNoLiBQZXJoYXBzIG1lbnRp b24gbWVtb3J5IHNoYXJlZCBiZXR3ZWVuIGludGVyZmFjZXMsIHNvIGVpdGhlciBibG9hdGVkIGJ1 ZmZlcnMgb3IgdG9vIGxpdHRsZSwgbWFraW5nIHRyYWZmaWMgc3VzY2VwdGlibGUgdG8gcGFja2V0 IGxvc3Nlcz88YnI+DQo8YnI+DQo8dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZu YnNwOyZuYnNwOyBbUkZDMzE2OF0gZGVzY3JpYmVzIGEgbWVjaGFuaXNtIGZvciB1c2luZyBFeHBs aWNpdCBDb25nZXN0aW9uPC9zcGFuPjwvdHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxicj4NCjx0dD4mbmJzcDsmbmJz cDsgTm90aWZpY2F0aW9uIChFQ04pIGZyb20gdGhlIHN3aXRjaGVzIGZvciBlYXJseSBkZXRlY3Rp b24gb2Y8L3R0Pjxicj4NCjx0dD4mbmJzcDsmbmJzcDsgY29uZ2VzdGlvbiwgcmF0aGVyIHRoYW4g d2FpdGluZyBmb3IgcGFja2V0IGxvc3MgdG8gb2NjdXIuPC90dD48YnI+DQo8L3NwYW4+PGJyPg0K VGhpcyBpc24ndCBjb3JyZWN0LiAzMTY4IHJlcXVpcmVzIEVDTiBtYXJraW5nIHRvIG9jY3VyIG5v IGVhcmxpZXIgdGhhbiBkcm9wLiBJdCBpcyBwcmVjaXNlbHkgdGhhdCAzMTY4IGRvZXMgbm90IGFs bG93IGVhcmx5IG1hcmtpbmcgdW5sZXNzIHRoZXJlIGlzIGFsc28gZWFybHkgZHJvcCB0aGF0IGlz IHRoZSBwcm9ibGVtLjxicj4NCjxicj4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7 Y29sb3I6IzFGNDk3RCI+Jmx0O1ByYXZlZW4mZ3Q7IEZpeGVkIGluIG5leHQgcmV2aXNpb24uPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxicj4NCjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7 Jm5ic3A7IEl0IGlzIHJlY29tbWVuZGVkIHRoYXQgRENUQ1AgYmUgZGVwbG95ZWQuLi48L3NwYW4+ PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+PGJyPg0KPC9zcGFuPjxicj4NCiZxdW90O3JlY29tbWVuZGVkJnF1b3Q7 IGlzIHRvbyB3ZWFrLiBJIHN1Z2dlc3QgeW91IHVzZSBzb21ldGhpbmcgbGlrZSB0aGUgYXBwbGlj YWJpbGl0eSB0ZXh0IGdpdmVuIGFib3ZlLCBib3RoIGhlcmUgYW5kIGluIHRoZSBhYnN0cmFjdC48 c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj4mbHQ7UHJhdmVlbiZndDsgQWRkZWQgdGhlIHdvcmQg4oCcb25seeKAnSB0 byBtYWtlIHRoaXMgc3Ryb25nZXIgcGVyIE1pY2hhZWzigJlzIHJldmlldy4gRml4ZWQgaW4gbmV4 dCByZXZpc2lvbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPGI+Mi4gVGVybWlub2xvZ3k8YnI+ DQo8L2I+PGJyPg0KU3VnZ2VzdCB5b3UgZXhwbGFpbiB0aGF0IGNhcGl0YWxpc2VkIHdvcmRzIGFy ZSBub3QgcXVpdGUgdGhlIHNhbWUgYXMgaW4gbW9zdCBSRkNzOjxicj4NCiZxdW90O05vcm1hdGl2 ZSBsYW5ndWFnZSBpcyB1c2VkIHRvIGRlc2NyaWJlIGhvdyBuZWNlc3NhcnkgdGhlIHZhcmlvdXMg YXNwZWN0cyBvZiB0aGUgTWljcm9zb2Z0IGltcGxlbWVudGF0aW9uIGFyZSBmb3IgaW50ZXJvcGVy YWJpbGl0eSwgYnV0IGV2ZW4gY29tcGxpYW50IGltcGxlbWVudGF0aW9ucyB3aXRob3V0IHRoZSBt ZWFzdXJlcyBpbiBzZWN0aW9ucyA0LTYgd291bGQgc3RpbGwgb25seSBiZSBzYWZlIHRvIGRlcGxv eSBpbiBjb250cm9sbGVkIGVudmlyb25tZW50cy4mcXVvdDs8YnI+DQo8YnI+DQo8c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZsdDtQcmF2ZWVuJmd0OyBG YWlyIGVub3VnaC4gQWRkZWQgdGV4dCBpbiBuZXh0IHJldmlzaW9uLjwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGJyPg0KPGI+My4gRENUQ1AgQWxnbzxicj4NCjwvYj48YnI+DQpUaGUg dGhyZWUgYnVsbGV0cyBzYXkgbm8gbW9yZSB0aGFuICZxdW90O3RoaXMgaXMgbm9ybWFsIHN0dWZm JnF1b3Q7LiBXb3VsZCBpdCBiZSBiZXR0ZXIgdG8gc3VwcGxlbWVudCBlYWNoIHNlbnRlbmNlIHdp dGggYSBicmllZiBwaHJhc2Ugc2F5aW5nIHdoYXQgaXMgZGlmZmVyZW50IGFib3V0IGVhY2ggYXNw ZWN0IGNvbXBhcmVkIHRvIFJGQzMxNjg/PGJyPg0KPGJyPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbHQ7UHJhdmVlbiZndDsgVGhlIGdvYWwgaGVyZSBp dCB0byBkZXNjcmliZSB0aGUgY2hhbmdlcyBuZWVkZWQgb24gdG9wIG9mIDMxNjggc28gSSBkb27i gJl0IHRoaW5rIGZ1cnRoZXIgZXhwbGFuYXRpb24gaXMgbmVjZXNzYXJ5Lg0KPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pjxicj4NCjxiPjMuMSBNYXJraW5nPGJyPg0KPC9iPjxicj4NClRoaXMgbmVlZHMgdG8gc2F5IHNv bWV0aGluZyBhYm91dCBob3cgeW91IG1hcmsgdGhlIElQIGhlYWRlciBmcm9tIEwyLiBJIHN1Z2dl c3QgeW91IHJlZmVyIHRvIHRoZSB1cC1hbmQtZm9yd2FyZCBtb2RlIG9mIGRyYWZ0LWlldGYtdHN2 d2ctZWNuLWVuY2FwLjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZsdDtQcmF2ZWVuJmd0OyBXaHkg aXMgdGhhdCByZWxldmFudCB0byB0aGlzIGRvY3VtZW50PyBJdCBpcyBub3QgaW50ZW5kZWQgYXMg YSBzcGVjaWZpY2F0aW9uIGZvciBvcGVyYXRpb24gb2YgTDIgc3dpdGNoZXMuIFdvbuKAmXQgZml4 Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCnMvc2Vu ZGluZyByYXRlLzxicj4NCiZuYnNwOy9saW5rIHJhdGUvPGJyPg0KPGJyPg0KPHNwYW4gc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3 RCI+Jmx0O1ByYXZlZW4mZ3Q7IEZpeGVkIGluIG5leHQgcmV2aXNpb248bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3 RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxiPjMuMiA8YnI+DQo8L2I+PGJyPg0KQ1VSUkVO VDo8bzpwPjwvbzpwPjwvcD4NCjxwcmU+Jm5ic3A7Jm5ic3A7IDEuJm5ic3A7IElmIHRoZSBDRSBj b2RlcG9pbnQgaXMgc2V0IGFuZCBEQ1RDUC5DRSBpcyBmYWxzZSwgc2VuZCBhbiBBQ0sgZm9yPG86 cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IGFueSBwcmV2aW91c2x5IHVuYWNrbm93bGVkZ2VkIHBhY2tldHMgYW5kIHNldCBEQ1RDUC5DRSB0 byB0cnVlLjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8 cHJlPiZuYnNwOyZuYnNwOyAyLiZuYnNwOyBJZiB0aGUgQ0UgY29kZXBvaW50IGlzIG5vdCBzZXQg YW5kIERDVENQLkNFIGlzIHRydWUsIHNlbmQgYW4gQUNLPG86cD48L286cD48L3ByZT4NCjxwcmU+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGZvciBhbnkgcHJldmlvdXNseSB1 bmFja25vd2xlZGdlZCBwYWNrZXRzIGFuZCBzZXQgRENUQ1AuQ0UgdG88bzpwPjwvbzpwPjwvcHJl Pg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgZmFsc2UuPG86cD48 L286cD48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlNVR0dFU1RFRDo8bzpwPjwvbzpwPjwv cD4NCjxwcmU+Jm5ic3A7Jm5ic3A7IDEuJm5ic3A7IElmIHRoZSBDRSBjb2RlcG9pbnQgaXMgc2V0 IGFuZCBEQ1RDUC5DRSBpcyBmYWxzZSwgc2V0IERDVENQLkNFIHRvIDxvOnA+PC9vOnA+PC9wcmU+ DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3RydWUgYW5k IHNlbmQgYW4gQUNLIGZvciBhbnkgcHJldmlvdXNseSB1bmFja25vd2xlZGdlZCBwYWNrZXRzLjxv OnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNw OyZuYnNwOyAyLiZuYnNwOyBJZiB0aGUgQ0UgY29kZXBvaW50IGlzIG5vdCBzZXQgYW5kIERDVENQ LkNFIGlzIHRydWUsIHNldCBEQ1RDUC5DRTxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB0byBmYWxzZSBhbmQgc2VuZCBhbiBBQ0sgZm9y IGFueSBwcmV2aW91c2x5IHVuYWNrbm93bGVkZ2VkIHBhY2tldHMuPG86cD48L286cD48L3ByZT4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7IFRoZSBmaWd1cmUgd291bGQgaGF2ZSB0byBiZSBjaGFuZ2VkIHRvIGJlIGNv bnNpc3RlbnQgdG9vLjxicj4NClJBVElPTkFMRTo8YnI+DQpJZiB0aGUgcmVjZWl2ZXIgY2hhbmdl cyBEQ1RDUC5DRSAvYWZ0ZXIvIHNlbmRpbmcgdGhlIEFDSyBsaWtlIHRoaXMsIGl0IGRlbGF5cyBl YWNoIHNpZ25hbCB1bnRpbCB0aGUgZm9sbG93aW5nIEFDSyBpcyBzZW50LiBUaGF0IGNvdWxkIGFk ZCBhIGRlbGF5IG9mIGFueXRoaW5nIGZyb20gMSB0byBtIHBhY2tldHMuIEkndmUgbmV2ZXIgdW5k ZXJzdG9vZCB3aHkgdGhlIG9yZGVyIG9mIHRoZXNlIG9wZXJhdGlvbnMgd2FzIHNwZWNpZmllZCBp biB0aGlzDQogd2F5LiBJZiB0aGVyZSBpcyBubyByZWFzb24sIHRoZW4gSSBzdWdnZXN0IHRoYXQg aXQgaXMgc3BlY2lmaWVkIGluIHRoZSBvcHBvc2l0ZSBvcmRlciwgYXMgSSBkZXNjcmliZSBhYm92 ZS48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48YnI+DQpBIG5v dGUgY291bGQgYmUgYWRkZWQgdG8gc2F5IHRoZSBXaW5kb3dzIFNlcnZlciAxMiBpbXBsZW1lbnRh dGlvbiBkb2VzIHRoZXNlIHN0ZXBzIGluIHJldmVyc2Ugb3JkZXIsIGJ1dCB0aGUgb3JkZXIgc3Bl Y2lmaWVkIGlzIHByZWZlcnJlZCBiZWNhdXNlIGl0IHJlZHVjZXMgc2lnbmFsbGluZyBkZWxheSBh bmQgaGFzIG5vIGludGVyb3BlcmFiaWxpdHkgaXNzdWVzIHdpdGggdGhlIG9yaWdpbmFsIFdpbmRv d3MgaW1wbGVtZW50YXRpb24uDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5 N0QiPiZsdDtQcmF2ZWVuJmd0OyBXb27igJl0IGZpeC4gVGhpcyBpcyBob3cgdGhlIFdpbmRvd3Mg aW1wbGVtZW50YXRpb24gYmVoYXZlcyBzbyB0aGUgb3JkZXJpbmcgaXMgcmVxdWlyZWQuIEJvdGgg dGhlIHBhcGVyIGFuZCB0aGUgZHJhZnQgYXJlDQogY29uc2lzdGVudCBpbiB0aGlzLiBUaGVyZSBp cyBubyBkZWxheSBiZWluZyBpbnRyb2R1Y2VkIGhlcmUuIFRoaXMgQUNLIGlzIHNlbnQgaW1tZWRp YXRlbHkgc28gdGhlIG9yZGVyIGRvZXMgbm90IG1hdHRlci4NCjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwcmU+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdE Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IFRoZSBo YW5kbGluZyBvZiB0aGUgJnF1b3Q7Q29uZ2VzdGlvbiBXaW5kb3cgUmVkdWNlZCZxdW90OyAoQ1dS KSBiaXQgaXMgYWxzbzxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyBleGFjdGx5 IGFzIHBlciBbPGEgaHJlZj0iaHR0cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxv b2suY29tLz91cmw9aHR0cHMlM2ElMmYlMmZ0b29scy5pZXRmLm9yZyUyZmh0bWwlMmZyZmMzMTY4 JmFtcDtkYXRhPTAxJTdjMDElN2NwcmF2YiU0MG1pY3Jvc29mdC5jb20lN2NhNTcyYjBiYThlMWI0 N2QzZTQ0YTA4ZDJlNmQ3ZTAzZiU3YzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdj MSZhbXA7c2RhdGE9Q2U5bTVxMFh6a2JRTldFYjFycW1YcnF4MTJVZjRMRHNjclVBejVDNzhlWSUz ZCIgdGl0bGU9IiZxdW90O1RoZSBBZGRpdGlvbiBvZiBFeHBsaWNpdCBDb25nZXN0aW9uIE5vdGlm aWNhdGlvbiAoRUNOKSB0byBJUCZxdW90OyI+UkZDMzE2ODwvYT5dIGluY2x1ZGluZyBbPGEgaHJl Zj0iaHR0cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0 cHMlM2ElMmYlMmZ0b29scy5pZXRmLm9yZyUyZmh0bWwlMmZkcmFmdC1pZXRmLXRjcG0tZGN0Y3At MDElMjNyZWYtUkZDMzE2OC1FUlJBVEEzNjM5JmFtcDtkYXRhPTAxJTdjMDElN2NwcmF2YiU0MG1p Y3Jvc29mdC5jb20lN2NhNTcyYjBiYThlMWI0N2QzZTQ0YTA4ZDJlNmQ3ZTAzZiU3YzcyZjk4OGJm ODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdjMSZhbXA7c2RhdGE9d0RKdiUyYmN5cFhqNWxheWZ6 dlFHaFhZcUI2a3dsOGxXJTJmcGRRNGlZZzJjTjglM2QiPlJGQzMxNjgtRVJSQVRBMzYzOTwvYT5d LiZuYnNwOyBUaGF0IGlzLCBvbjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyBy ZWNlaXB0IG9mIGEgc2VnbWVudCB3aXRoIGJvdGggdGhlIENFIGFuZCBDV1IgYml0cyBzZXQsIENX UiBpczxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyBwcm9jZXNzZWQgZmlyc3Qg YW5kIHRoZW4gRUNFIGlzIHByb2Nlc3NlZC48bzpwPjwvbzpwPjwvcHJlPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+RXZlbiB0aG8gdGhpcyBpcyB0aGUgcmVjZWl2ZXIgc2VjdGlvbiwgSSBzdWdnZXN0 Ojxicj4NCnMvVGhlIGhhbmRsaW5nL1JlY2VpdmVyIGhhbmRsaW5nLzxicj4NCjxicj4NCjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jmx0O1ByYXZlZW4mZ3Q7 IElzbuKAmXQgdGhpcyBhc3N1bWVkIGJ5IGEgcmVhZGVyIGZhbWlsaWFyIHdpdGggMzE2OD8gQnV0 IHRoaXMgaXMgYSBtaW5vciBlZGl0b3JpYWwgZml4IHNvIGZpeGVkIGluIHRoZSBuZXh0IHJldmlz aW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCldo YXRldmVyLCB0aGlzIGNhbm5vdCBiZSBjb3JyZWN0LiBBIERDVENQIHJlY2VpdmVyIHN1cmVseSBk b2VzIG5vdGhpbmcgb24gcmVjZWlwdCBvZiBDV1IsIHdoZXJlYXMgYW4gUkZDMzE2OCByZWNlaXZl ciBkb2VzIHNvbWV0aGluZy4gQSBEQ1RDUCByZWNlaXZlciBjZXJ0YWlubHkgY2Fubm90IGRvIGV4 YWN0bHkgd2hhdCBSRkMzMTY4IHNheXMsIGJlY2F1c2UgdGhhdCBzYXlzIHN0b3Agc2V0dGluZyBF Q0Ugb24gcmVjZWlwdCBvZiBDV1IgdW50aWwNCiB0aGUgbmV4dCBDRSBhcnJpdmVzLCB3aGljaCB3 b3VsZCBzdXJlbHkgYnJlYWsgdGhpcyBmZWVkYmFjayBwcm90b2NvbC48YnI+DQo8YnI+DQo8c3Bh biBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZsdDtQcmF2ZWVuJmd0 OyBJIGRvbuKAmXQgc2VlIHdoeSB0aGlzIHdvdWxkIGJyZWFrIHRoZSBmZWVkYmFjayBwcm90b2Nv bC4gVGhlIHJlY2VpdmVyIHdpbGwgc3RhcnQgZWNob2luZyBhZ2FpbiBhcyBzb29uIGFzIGl0IHNl ZXMgdGhlIGZpcnN0IENFIGFycml2ZXMgYWdhaW4uIElmIHBhY2tldA0KIGhhcyBib3RoIENXUiBh bmQgQ0Ugc2V0IHRoZW4gQ0UgdGFrZXMgcHJlY2VkZW5jZSBhbmQgdGhlIGVjaG9pbmcgaXMgZG9u ZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGJyPg0KPGI+My4zIDwvYj48bzpwPjwvbzpwPjwvcD4NCjxwcmU+Jm5i c3A7Jm5ic3A7Jm5ic3A7RENUQ1AuQWxwaGEsIHdoaWNoIGlzIGluaXRpYWxpemVkIHRvIDEgYW5k IE1VU1QgYmUgdXBkYXRlZDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyBhcyBm b2xsb3dzOjxvOnA+PC9vOnA+PC9wcmU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5zL01VU1QvU0hP VUxELzxicj4NCkFuZCBhZGQgJnF1b3Q7QW4gYWx0ZXJuYXRpdmUgY29uZ2VzdGlvbiBhdm9pZGFu Y2UgYWxnb3JpdGhtIE1BWSBiZSB1c2VkLCBidXQgaXQgTVVTVCBsZWFkIHRvIGZsb3cgcmF0ZSBp bnZlcnNlbHkgcHJvcG9ydGlvbmFsIHRvIDEvTSZxdW90Oy48YnI+DQo8YnI+DQpSYXRpb25hbGU6 IFRoZXJlIGFyZSBtYW55IHdheXMgdG8gaW1wbGVtZW50IGludGVyb3BlcmFibGUgMS9wIGNjLiBU aGlzIGlzIGp1c3Qgb25lLg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZs dDtQcmF2ZWVuJmd0OyBBbHRlcm5hdGUgYWxnb3JpdGhtcyBhcmUgb3V0IG9mIHNjb3BlIG9mIHRo aXMgZHJhZnQuIFdlIGNhbm5vdCBzYXkgd2l0aG91dCBpbnRlcm9wIHRlc3RpbmcgaWYgYSBkaWZm ZXJlbnQgYWxnb3JpdGhtIHdpbGwgcGVyZm9ybSB3ZWxsIGluIGRhdGFjZW50ZXJzDQogb3IgaW50 ZXJvcCB3ZWxsIHdpdGggZXhpc3RpbmcgaW1wbGVtZW50YXRpb25zLiBJZiB0aGVyZSBhcmUgb3Ro ZXIgd2F5cyB0byBpbXBsZW1lbnQgMS9wIHRoZXkgc2hvdWxkIGJlIGNvdmVyZWQgYnkgb3RoZXIg ZHJhZnRzLiBUaGlzIGRyYWZ0IHdpbGwgb25seSBkZXNjcmliZSB0aGUgYWxnb3JpdGhtIHRoYXQg aGFzIGJlZW4gdGVzdGVkIGFuZCBkZXBsb3llZC4gVGhhdCBzYWlkIEkgYW0gd2lsbGluZyB0byBt YWtlIGl0IGEgU0hPVUxEIHNvIGZpeGVkDQogaW4gdGhlIG5leHQgcmV2aXNpb24uPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cHJlPiZuYnNwOyZuYnNwOyBEQ1RDUC5CeXRlc1NlbnQ8bzpwPjwvbzpwPjwvcHJl Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5UaGlz IHZhcmlhYmxlIGFjdHVhbGx5IGNvdW50cyBieXRlcyByZWNlaXZlZC4gaXQncyBwcmV0dHkgY29u ZnVzaW5nIHRvIGNhbGwgaXQgQnl0ZXNTZW50Ljxicj4NCjxicj4NCjxzcGFuIHN0eWxlPSJjb2xv cjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdE Ij4mbHQ7UHJhdmVlbiZndDsgTm8sIHRoaXMgaXMgdHJhY2tpbmcgYnl0ZXMgdGhhdCBoYXZlIGJl ZW4gc2VudC4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPg0Kcy9UQ1AgU0FDSyBvcHRpb25zIFtSRkMyMDE4 XSBhcmUgaWdub3JlZC4vPGJyPg0KJm5ic3A7L1RoZSBzZW5kZXIgTVVTVCBpZ25vcmUgVENQIFNB Q0sgb3B0aW9ucyBbUkZDMjAxOF0gZm9yIHRoaXMgY29tcHV0YXRpb24uLzxicj4NClJBVElPTkFM RTogPGJyPg0KJm5ic3A7IGEpIEkgdGhpbmsgdGhlIGlkZWEgaXMgdG8gaWdub3JlIENFIG1hcmtz IGFmdGVyIGEgZ2FwIGJlY2F1c2UsIGlmIHRoZSBnYXAgYmVjb21lcyBjb25zaWRlcmVkIGEgbG9z cywgdGhlIHJlc3BvbnNlIHRvIGxvc3Mgd2lsbCBvdmVycmlkZSBhbnkgbmVlZCB0byBjb3VudCBp bmNvbWluZyBDRSBtYXJrcyBmb3IgdGhlIGZvbGxvd2luZyByb3VuZCB0cmlwLiBIb3dldmVyLCBp ZiB0aGUgZ2FwIGlzIGZpbGxlZCBiZWZvcmUgaXQgaXMgY29uc2lkZXJlZA0KIGEgbG9zcyB7Tm90 ZSAxfSwgdGhlbiBDRSBtYXJrcyB0aGF0IHdlcmUgaWdub3JlZCBiZWNhdXNlIHRoZXkgYXJyaXZl ZCBhZnRlciBhIGdhcCB3aWxsIG5lZWQgdG8gYmUgJnF1b3Q7dW5pZ25vcmVkJnF1b3Q7Lg0KPGJy Pg0KJm5ic3A7IGIpIFdlIG5lZWQgdG8gbWFrZSBjbGVhciB0aGF0IFNBQ0sgaXMgbm90IGlnbm9y ZWQgYWx0b2dldGhlciwgb25seSBmb3IgdGhpcyBjb21wdXRhdGlvbi48YnI+DQo8YnI+DQp7Tm90 ZSAxfTogSSBjYW4gdGhpbmsgb2YgdHdvIGNhc2VzOjxicj4NCiogTGVzcyB0aGFuIHRocmVlIGR1 cGFja3MgdGhlbiB0aGUgZ2FwIGlzIGZpbGxlZDxicj4NCiogVGhlIGdhcCBpcyBmaWxsZWQgYnkg YSBkZWxheWVkIHNlZ21lbnQgc28gdGhhdCBhbiBlYXJsaWVyIHJldHJhbnNtaXNzaW9uIHdhcyBz cHVyaW91czxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jmx0O1ByYXZl ZW4mZ3Q7IE9rIEkgd2lsbCB1cGRhdGUgdGhlIHRleHQuPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHByZT50 aGUgc2VuZGVyIE1VU1QgdXBkYXRlIGN3bmQgYXMgZm9sbG93czo8bzpwPjwvbzpwPjwvcHJlPg0K PHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgY3duZCA9IGN3bmQgKiAoMSAtIERD VENQLkFscGhhIC8gMik8bzpwPjwvbzpwPjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+cy9N VVNUL1NIT1VMRC88YnI+DQpSYXRpb25hbGU6IEFsdGVybmF0aXZlIGludGVyb3BlcmFibGUgcmVz cG9uc2UgZnVuY3Rpb25zIGFyZSBwb3NzaWJsZS4gRm9yIGluc3RhbmNlIGFuIGFsZ29yaXRobSBs aWtlIFJlbGVudGxlc3MgVENQIHRoYXQgc2ltcGx5IHJlZHVjZXMgY3duZCBieSBoYWxmIHRoZSBz aXplIG9mIGFueSBDRS1tYXJrZWQgc2VnbWVudC4gVGhlbiB0aGVyZSBpcyBubyBBbHBoYSBhbmQg bm8gZyB2YXJpYWJsZS48YnI+DQo8YnI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbHQ7UHJhdmVlbiZndDsg Rml4ZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCkNVUlJFTlQ6 PG86cD48L286cD48L3A+DQo8cHJlPiZuYnNwOyZuYnNwOyBKdXN0IGFzIHNwZWNpZmllZCBpbiBb PGEgaHJlZj0iaHR0cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91 cmw9aHR0cHMlM2ElMmYlMmZ0b29scy5pZXRmLm9yZyUyZmh0bWwlMmZyZmMzMTY4JmFtcDtkYXRh PTAxJTdjMDElN2NwcmF2YiU0MG1pY3Jvc29mdC5jb20lN2NhNTcyYjBiYThlMWI0N2QzZTQ0YTA4 ZDJlNmQ3ZTAzZiU3YzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdjMSZhbXA7c2Rh dGE9Q2U5bTVxMFh6a2JRTldFYjFycW1YcnF4MTJVZjRMRHNjclVBejVDNzhlWSUzZCIgdGl0bGU9 IiZxdW90O1RoZSBBZGRpdGlvbiBvZiBFeHBsaWNpdCBDb25nZXN0aW9uIE5vdGlmaWNhdGlvbiAo RUNOKSB0byBJUCZxdW90OyI+UkZDMzE2ODwvYT5dLCBUQ1Agc2hvdWxkIG5vdCByZWFjdCB0byBj b25nZXN0aW9uPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IGluZGljYXRpb25z IG1vcmUgdGhhbiBvbmNlIGZvciBldmVyeSB3aW5kb3cgb2YgZGF0YS48bzpwPjwvbzpwPjwvcHJl Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U1VHR0VTVEVEOjxvOnA+PC9vOnA+PC9wPg0KPHByZT4m bmJzcDsmbmJzcDsgSnVzdCBhcyBzcGVjaWZpZWQgaW4gWzxhIGhyZWY9Imh0dHBzOi8vbmEwMS5z YWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNhJTJmJTJmdG9vbHMu aWV0Zi5vcmclMmZodG1sJTJmcmZjMzE2OCZhbXA7ZGF0YT0wMSU3YzAxJTdjcHJhdmIlNDBtaWNy b3NvZnQuY29tJTdjYTU3MmIwYmE4ZTFiNDdkM2U0NGEwOGQyZTZkN2UwM2YlN2M3MmY5ODhiZjg2 ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3YzEmYW1wO3NkYXRhPUNlOW01cTBYemtiUU5XRWIxcnFt WHJxeDEyVWY0TERzY3JVQXo1Qzc4ZVklM2QiIHRpdGxlPSImcXVvdDtUaGUgQWRkaXRpb24gb2Yg RXhwbGljaXQgQ29uZ2VzdGlvbiBOb3RpZmljYXRpb24gKEVDTikgdG8gSVAmcXVvdDsiPlJGQzMx Njg8L2E+XSwgRENUQ1AgZG9lcyBub3QgcmVhY3QgdG8gY29uZ2VzdGlvbjxvOnA+PC9vOnA+PC9w cmU+DQo8cHJlPiZuYnNwOyZuYnNwOyBpbmRpY2F0aW9ucyBtb3JlIHRoYW4gb25jZSBmb3IgZXZl cnkgd2luZG93IG9mIGRhdGEuPG86cD48L286cD48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkkgZG9uJ3Qga25vdyB3aGV0aGVyIHlvdSBpbnRlbmRlZCB0aGlzIHRvIGJlIGFuIHVwcGVyLWNh c2UgU0hPVUxEIE5PVC4gSWYgc28sIEkgd291bGQgYXJndWUgYWdhaW5zdCB0aGlzIGJlaW5nIG5v cm1hdGl2ZSwgYmVjYXVzZSBpdCBpc24ndCBuZWNlc3NhcnkgZm9yIGludGVyb3A7IHRoZXJlZm9y ZSBJJ3ZlIHN1Z2dlc3RlZCBhdm9pZGluZyBoZSAnc2hvdWxkJyB3b3JkLjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cHJlPiZsdDtQ cmF2ZWVuJmd0OyBGaXhlZDxvOnA+PC9vOnA+PC9wcmU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cHJl PiZuYnNwOyZuYnNwOyBUaGUgc2V0dGluZyBvZjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNw OyZuYnNwOyB0aGUgJnF1b3Q7Q29uZ2VzdGlvbiBXaW5kb3cgUmVkdWNlZCZxdW90OyAoQ1dSKSBi aXQgaXMgYWxzbyBleGFjdGx5IGFzIHBlcjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZu YnNwOyBbPGEgaHJlZj0iaHR0cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2su Y29tLz91cmw9aHR0cHMlM2ElMmYlMmZ0b29scy5pZXRmLm9yZyUyZmh0bWwlMmZyZmMzMTY4JmFt cDtkYXRhPTAxJTdjMDElN2NwcmF2YiU0MG1pY3Jvc29mdC5jb20lN2NhNTcyYjBiYThlMWI0N2Qz ZTQ0YTA4ZDJlNmQ3ZTAzZiU3YzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdjMSZh bXA7c2RhdGE9Q2U5bTVxMFh6a2JRTldFYjFycW1YcnF4MTJVZjRMRHNjclVBejVDNzhlWSUzZCIg dGl0bGU9IiZxdW90O1RoZSBBZGRpdGlvbiBvZiBFeHBsaWNpdCBDb25nZXN0aW9uIE5vdGlmaWNh dGlvbiAoRUNOKSB0byBJUCZxdW90OyI+UkZDMzE2ODwvYT5dLjxvOnA+PC9vOnA+PC9wcmU+DQo8 cHJlPjxvOnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8cHJlPiA8bzpwPjwvbzpwPjwvcHJlPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+SXQgaXMgd3JvbmcgdG8gc2F5ICZxdW90O2V4YWN0bHkmcXVvdDsu IFRoZSBzZW5kZXIgY2VydGFpbmx5IHNldHMgQ1dSIHdoZW4gaXQgZG9lcyBhIGNvbmdlc3Rpb24g cmVzcG9uc2UuIEJ1dCBpbiBEQ1RDUCB0aGUgY29uZ2VzdGlvbiByZXNwb25zZSBvY2N1cnMgZXZl cnkgUlRULCB0cmlnZ2VyZWQgYnkgaXRzIG93biBtZWFzdXJlbWVudC1wZXJpb2QgbG9naWMsIHdo ZXJlYXMgaW4gUkZDMzE2OCBpdCBpcyB0cmlnZ2VyZWQgYnkNCiB0aGUgYXJyaXZhbCBvZiBhbiBF Q0UgYWZ0ZXIgdGhlIEFDSyBvZiBhbnkgcHJldmlvdXMgc2VnbWVudCBpdCBzZW50IHdpdGggQ1dS IHNldC48YnI+DQo8YnI+DQpJIHRoaW5rIGl0IGlzIHdvcnRoIHNheWluZyB0aGF0IHNldHRpbmcg Q1dSIGlzIG5lY2Vzc2FyeSBmb3Igc2FmZXR5LCBvdGhlcndpc2UgaW4gdGhlIGNhc2Ugd2hlcmUg dGhlcmUgaGFzIGJlZW4gYSBjb25maWd1cmF0aW9uIG1hbmFnZW1lbnQgZXJyb3IgYW5kIHRoZSBy ZWNlaXZlciBjb21wbGllcyB3aXRoIFJGQyAzMTY4IG5vdCBEQ1RDUCwgaXQgd2lsbCBjb250aW51 ZSBzZW5kaW5nIEVDRSBmb3IgZXZlciBhbmQgc3RhcnZlIHRoZSBzZXNzaW9uLjxicj4NCjxicj4N Ckl0IG1pZ2h0IGhlbHAgdG8gZXhwbGljaXRseSBjb25maXJtIHRoYXQ6IDxicj4NCiZxdW90O090 aGVyIGFzcGVjdHMgb2YgVENQIGNvbmdlc3Rpb24gYXZvaWRhbmNlIGFuZCBjb250cm9sIHN1Y2gg YXMgdGhlIHNsb3cgc3RhcnQgcGhhc2UgYXJlIG5vIGRpZmZlcmVudCB0byB0aG9zZSBpbiBSRkM1 NjgxLiZxdW90Ozxicj4NCjxicj4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZsdDtQcmF2ZWVuJmd0OyBGaXhl ZCB0aGF0IENXUiBpcyBuZWVkZWQgZm9yIHNhZmV0eS4gTm90IGFkZGluZyB0aGUgdGV4dCBhcm91 bmQgNTY4MSwgaXQgaXMgcHJlc3VtZWQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxiPjMuNCBTWU4sIFNZ Ti1BQ0ssIFJTVDxicj4NCjwvYj48YnI+DQo8dHQ+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQiPiZuYnNwOyZuYnNwOyBbUkZDMzE2OF0gcmVxdWlyZXMgdGhhdCBhIGNvbXBsaWFudCBUQ1Ag TVVTVCBOT1Qgc2V0IEVDVCBvbiBTWU4gb3I8L3NwYW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPHR0 PiZuYnNwOyZuYnNwOyBTWU4tQUNLIHBhY2tldHMuPC90dD48YnI+DQo8L3NwYW4+PGJyPg0Kcy9N VVNUIE5PVC8nTVVTVCBOT1QnLzxicj4NClJhdGlvbmFsZTogQmVzdCB0byBtYWtlIGl0IGNsZWFy IHRoaXMgaXMgcXVvdGluZyBhIG5vcm1hdGl2ZSBzdGF0ZW1lbnQgaW4gYW5vdGhlciBSRkMsIGJl Y2F1c2UgaXQgaXMgZ29pbmcgdG8gYmUgY29udHJhZGljdGVkLjxicj4NCjxicj4NCkNVUlJFTlQ8 bzpwPjwvbzpwPjwvcD4NCjxwcmU+Jm5ic3A7Jm5ic3A7IFRoZXNlIFJGQ3MsIGhvd2V2ZXIsIGFy ZTxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyBpbnRlbmRlZCBmb3IgZ2VuZXJh bCBJbnRlcm5ldCB1c2UsIGFuZCBkbyBub3QgZGlyZWN0bHkgYXBwbHkgdG8gYTxvOnA+PC9vOnA+ PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyBjb250cm9sbGVkIGRhdGFjZW50ZXIgZW52aXJvbm1l bnQuPG86cD48L286cD48L3ByZT4NCjxwcmU+Li4uPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5i c3A7Jm5ic3A7IEZvciBEQ1RDUCBjb25uZWN0aW9ucywgdGhlIHNlbmRlcjxvOnA+PC9vOnA+PC9w cmU+DQo8cHJlPiZuYnNwOyZuYnNwOyBTSE9VTEQgc2V0IEVDVCBmb3IgU1lOLCBTWU4tQUNLIGFu ZCBSU1QgcGFja2V0cy48bzpwPjwvbzpwPjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U1VH R0VTVEVEOjxicj4NCjxicj4NCjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5i c3A7Jm5ic3A7IEFsc28sIGEgU1lOIGlzIHNlbnQgYmVmb3JlIHRoZSBFQ04tY2FwYWJpbGl0eSBo YXMgYmVlbjwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8dHQ+Jm5ic3A7Jm5ic3A7IG5lZ290 aWF0ZWQsIHNvIGlmIGl0IGlzIENFLW1hcmtlZCwgYSBub24tRUNOIFRDUCBzZXJ2ZXIgd291bGQg bm90PC90dD48YnI+DQo8dHQ+Jm5ic3A7Jm5ic3A7IHJlY29nbmlzZSB0aGUgbWFya2luZy4gUkZD IDMxNjggZG9lcyBub3Qgc3BlY2lmeSB0aGUgRUNOIGZpZWxkIG9uIDwvdHQ+PGJyPg0KPHR0PiZu YnNwOyZuYnNwOyBhIFJTVC4gVGhlIHNlY3VyaXR5IGNvbmNlcm5zIGFkZHJlc3NlZCBieSB0aGVz ZSBSRkNzIDwvdHQ+PGJyPg0KPHR0PiZuYnNwOyZuYnNwOyBtaWdodCBub3QgYXBwbHkgaW4gY29u dHJvbGxlZCBlbnZpcm9ubWVudHMgbGlrZSBkYXRhIGNlbnRyZXMsIGFuZCA8L3R0Pjxicj4NCjx0 dD4mbmJzcDsmbmJzcDsgaXQgbWlnaHQgbm90IGJlIG5lY2Vzc2FyeSB0byBjYXRlciBmb3IgdGhl IHByZXNlbmNlIG9mIG5vbi1FQ04gPC90dD48YnI+DQo8dHQ+Jm5ic3A7Jm5ic3A7IHNlcnZlcnMu PC90dD48YnI+DQo8dHQ+Li4uPC90dD48L3NwYW4+PG86cD48L286cD48L3A+DQo8cHJlPiZuYnNw OyZuYnNwOyBUaGVyZWZvcmUsIHRoZSBzZW5kZXIgTVVTVCBzZXQgRUNUIGZvciBTWU4vQUNLIGFu ZCBSU1QgcGFja2V0cyBhbmQgYSA8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsm bmJzcDtjb25maWd1cmF0aW9uIG9wdGlvbiBTSE9VTEQgYmUgcHJvdmlkZWQgdG8gc2V0IEVDVCBm b3IgU1lOcy48bzpwPjwvbzpwPjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UkFUSU9OQUxF Ojxicj4NCiZuYnNwOyZuYnNwOyBUaGUgZHJhZnQgc2hvdWxkIGF2b2lkIGFzc3VtaW5nIHRoYXQg c2VjdXJpdHkgY29uY2VybnMgZG8gbm90IGFwcGx5IGluIGFsbCBjb250cm9sbGVkIGVudmlyb25t ZW50cy48YnI+DQpOT1RFOjxicj4NCiZuYnNwOyZuYnNwOyBUaGlzIG1pZ2h0IG5vdCByZWZsZWN0 IHRoZSB3YXkgeW91ciBpbXBsZW1lbnRhdGlvbiBpcyBjb2RlZCwgc28geW91IG1pZ2h0IHdhbnQg dG8gbWFrZSB0aGF0IGNsZWFyLjxicj4NCjxicj4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+Jmx0O1ByYXZlZW4mZ3Q7IEFkZGluZyBzb21lIHRleHQgYXJv dW5kIHNlY3VyaXR5IGNvbmNlcm5zLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGJyPg0KPGI+NC4gSW1wbGVtZW50YXRpb24gSXNzdWVzPGJyPg0KPC9iPjxicj4NCkNVUlJF TlQ6PG86cD48L286cD48L3A+DQo8cHJlPiZuYnNwOyZuYnNwOyB0aGUgaW1wbGVtZW50YXRpb24g TVVTVCBjaG9vc2UgYSBzdWl0YWJsZTxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNw OyBlc3RpbWF0aW9uIGdhaW4uJm5ic3A7IFs8YSBocmVmPSJodHRwczovL25hMDEuc2FmZWxpbmtz LnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzYSUyZiUyZnRvb2xzLmlldGYub3Jn JTJmaHRtbCUyZmRyYWZ0LWlldGYtdGNwbS1kY3RjcC0wMSUyM3JlZi1EQ1RDUDEwJmFtcDtkYXRh PTAxJTdjMDElN2NwcmF2YiU0MG1pY3Jvc29mdC5jb20lN2NhNTcyYjBiYThlMWI0N2QzZTQ0YTA4 ZDJlNmQ3ZTAzZiU3YzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdjMSZhbXA7c2Rh dGE9MzNkUlVVeHlOYTJ0Y1gweEp0TWwxMm5Xd3pJZEhaYTZqM2tnQUwxZHhJTSUzZCIgdGl0bGU9 IiZxdW90O0RhdGEgQ2VudGVyIFRDUCAoRENUQ1ApJnF1b3Q7Ij5EQ1RDUDEwPC9hPl0gcHJvdmlk ZXMgYSB0aGVvcmV0aWNhbCBiYXNpcyA8bzpwPjwvbzpwPjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+U1VHR0VTVDo8bzpwPjwvbzpwPjwvcD4NCjxwcmU+Jm5ic3A7Jm5ic3A7IHRoZSBpbXBs ZW1lbnRhdGlvbiB3aWxsIG5lZWQgdG8gY2hvb3NlIGEgc3VpdGFibGU8bzpwPjwvbzpwPjwvcHJl Pg0KPHByZT4mbmJzcDsmbmJzcDsgZXN0aW1hdGlvbiBnYWluLiZuYnNwOyBbPGEgaHJlZj0iaHR0 cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM2El MmYlMmZ0b29scy5pZXRmLm9yZyUyZmh0bWwlMmZkcmFmdC1pZXRmLXRjcG0tZGN0Y3AtMDElMjNy ZWYtRENUQ1AxMCZhbXA7ZGF0YT0wMSU3YzAxJTdjcHJhdmIlNDBtaWNyb3NvZnQuY29tJTdjYTU3 MmIwYmE4ZTFiNDdkM2U0NGEwOGQyZTZkN2UwM2YlN2M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2Nk MDExZGI0NyU3YzEmYW1wO3NkYXRhPTMzZFJVVXh5TmEydGNYMHhKdE1sMTJuV3d6SWRIWmE2ajNr Z0FMMWR4SU0lM2QiIHRpdGxlPSImcXVvdDtEYXRhIENlbnRlciBUQ1AgKERDVENQKSZxdW90OyI+ QURDVENQMTA8L2E+XSBwcm92aWRlcyBhIHRoZW9yZXRpY2FsIGJhc2lzIC4uLjxvOnA+PC9vOnA+ PC9wcmU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQi PlJBVElPTkFMRTo8YnI+DQombmJzcDsmbmJzcDsgYSkgQXMgYWJvdmUsIHRoaXMgaXMgb25seSBv bmUgd2F5IHRvIGltcGxlbWVudCB0aGUgY2MsIGFuZCBvdGhlcnMgY291bGQgd2VsbCBwcm92ZSB0 byBiZSBpbnRlcm9wZXJhYmxlIHdoZW4gdGVzdGVkLjxicj4NCiZuYnNwOyZuYnNwOyBiKSBNb3Jl IHBhcnRpY3VsYXJseSwgaXQgd291bGQgYmUgYmV0dGVyIGZvciBhbiBpbXBsZW1lbnRhdGlvbiB0 byBhZGFwdCB0aGUgZXN0aW1hdGlvbiBnYWluIHRvIHRoZSBSVFQsIHNvIHRoZSBzcGVjIG91Z2h0 IG5vdCB0byBpbXBseSB0aGF0IG9uZSB2YWx1ZSBoYXMgdG8gYmUgY2hvc2VuLjxicj4NCiZuYnNw OyZuYnNwOyBjKSBUaGUgbGF0ZXIgcGFwZXIgW0FEQ1RDUDEwXSBwcm92aWRlcyBhIGNvcnJlY3Rl ZCB3YXkgdG8gZGV0ZXJtaW5lIHRoZSBnYWluLiBGcm9tIG1lbW9yeSAoSSdtIG9mZmxpbmUgYXQg dGhlIG1vKSBpdCBhdCBsZWFzdCBtYWtlcyB0aHJvdWdocHV0IGludmVyc2VseSBwcm9wb3J0aW9u YWwgdG8gMS9SVFQsIHdoZXJlYXMgdGhlIGFwcHJvYWNoIGluIFtEQ1RDUDEwXSBtYWRlIGl0IGlu dmVyc2VseSBwcm9wb3J0aW9uYWwgdG8gMS8oUlRUXjIpLg0KIEkgYmVsaWV2ZSB0aGUgTGludXgg aW1wbGVtZW50YXRpb24gdXNlcyB0aGUgW0FEQ1RDUDEwXSBhcHByb2FjaC48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJv dHRvbToxMi4wcHQiPiZsdDtQcmF2ZWVuJmd0OyBGYWlyIGVub3VnaC4gVXBkYXRlZC48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBw dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cHJlPiZuYnNwOyZuYnNwOyBUaGUgaW1wbGVtZW50 YXRpb24gbXVzdCBhbHNvIGRlY2lkZSB3aGVuIHRvIHVzZSBEQ1RDUC48bzpwPjwvbzpwPjwvcHJl Pg0KPHByZT4uLi48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsgJm5ic3A7bGlrZWx5IGlu IHRoZSBzYW1lIGRhdGFjZW50ZXIgbmV0d29yay48bzpwPjwvbzpwPjwvcHJlPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+VGhlIDJuZCAmYW1wOyAzcmQgcGFyYXMgYXJlIGEgbWl4IG9mIGltcGxlbWVu dGF0aW9uIGFuZCBkZXBsb3ltZW50IGlzc3VlcywgYnV0IG1vc3RseSBkZXBsb3ltZW50LCBzbyB0 aGV5IG1pZ2h0IGJlIGJldHRlciBtb3ZlZCB0byB0aGUgZGVwbG95bWVudCBpc3N1ZXMgc2VjdGlv bi48YnI+DQo8YnI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbHQ7UHJhdmVlbiZndDsgSSB0aGluayB0aGV5 IGFyZSBtYWlubHkgaW1wbGVtZW50YXRpb24gaXNzdWVzIOKAkyB0aGUgZmFjdCB0aGF0IGEgbGFj ayBvZiBuZWdvdGlhdGlvbiBtZWNoYW5pc20gcGxhY2VzIGEgYnVyZGVuIG9uIHRoZSBpbXBsZW1l bnRhdGlvbiB0byBwcm92aWRlIGtub2JzDQogb3IgaGV1cmlzdGljcyB0byB1c2UgRENUQ1AuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQpDVVJSRU5UOjxvOnA+PC9v OnA+PC9wPg0KPHByZT4mbmJzcDsmbmJzcDsgSXQgaXMgUkVDT01NRU5ERUQgdGhhdCBhbiBpbXBs ZW1lbnRhdGlvbiBkZWFsIHdpdGggbG9zcyBlcGlzb2RlcyBpbjxvOnA+PC9vOnA+PC9wcmU+DQo8 cHJlPiZuYnNwOyZuYnNwOyB0aGUgc2FtZSB3YXkgYXMgY29udmVudGlvbmFsIFRDUC48bzpwPjwv bzpwPjwvcHJlPg0KPHByZT4uLi48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsgJm5ic3A7 RENUQ1AgaW1wbGVtZW50YXRpb24gTUFZIGFsc28gYWxsb3cgY29uZmlndXJhdGlvbiBvZiByZXNl dHRpbmcgdGhlPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IHZhbHVlIG9mIERD VENQLkFscGhhIGFzIHBhcnQgb2YgcHJvY2Vzc2luZyBhbnkgbG9zcyBlcGlzb2Rlcy48bzpwPjwv bzpwPjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U1VHR0VTVEVEOiBNb3ZlIHRoaXMgd2hv bGUgcGFyYSB0byAzLjMgU2VuZGVyIEJlaGF2aW91ciBzZWN0aW9uLCBhbmQ6PG86cD48L286cD48 L3A+DQo8cHJlPiZuYnNwOyZuYnNwOyBBbiBpbXBsZW1lbnRhdGlvbiBNVVNUIGRlYWwgd2l0aCBs b3NzIGVwaXNvZGVzIGluPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IHRoZSBz YW1lIHdheSBhcyBjb252ZW50aW9uYWwgVENQLjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPi4uLjxv OnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyAmbmJzcDtEQ1RDUCBpbXBsZW1lbnRhdGlvbiBT SE9VTEQgYWxzbyByZXNldCB0aGU8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsg dmFsdWUgb2YgRENUQ1AuQWxwaGEgYXMgcGFydCBvZiBwcm9jZXNzaW5nIGFueSBsb3NzIGVwaXNv ZGVzLiA8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDtUaGlzIGFzcGVj dCBvZiB0aGUgYmVoYXZpb3VyIE1BWSBiZSBjb25maWd1cmFibGUuPG86cD48L286cD48L3ByZT4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+UkFUSU9O QUxFOjxicj4NCiZuYnNwOyZuYnNwOyBhKSBUaGVyZSB3b3VsZCBuZXZlciBiZSBhIGNhc2UgZm9y IG5vdCBmYWxsaW5nIGJhY2sgdG8gY29udmVudGlvbmFsIFRDUCZuYnNwOyAob3IgZG8geW91IGhh dmUgb25lPyksIHNvICZxdW90O1JFQ09NTUVOREVEJnF1b3Q7IGlzIHRvbyB3ZWFrLjxicj4NCiZu YnNwOyZuYnNwOyBiKSBJIGhhdmUgdHJpZWQgdG8gaW50ZXJwcmV0IHdoYXQgeW91IG1pZ2h0IGhh dmUgbWVhbnQgYWJvdXQgcmVzZXR0aW5nIEFscGhhLiBJJ20gbm90IHN1cmUgd2h5IHlvdSB0aGlu ayBpdCBtaWdodCBuZWVkIHRvIGJlIGNvbmZpZ3VyYWJsZSB0aG91Z2g/PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPiZsdDtQ cmF2ZWVuJmd0OyBZZXMgdGhpcyBpcyBhIHVzZWZ1bCBzdWdnZXN0aW9uLiBNYWtpbmcgbG9zcyBo YW5kbGluZyBhIG11c3QgaW4gc2VuZGVyIHNlY3Rpb24uIFJlc2V0IG9mIGFscGhhIHdhcyBkaXNj dXNzZWQgaW4gdGNwbSBsaXN0LCBhbmQgTGludXggaW1wbGVtZW50YXRpb24gc3VwcG9ydHMgaXQu PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRv bToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwcmU+Jm5i c3A7Jm5ic3A7IC4uLml0IGlzIGFsc28gUkVDT01NRU5ERUQgdGhhdCBhbiBpbXBsZW1lbnRhdGlv biBhbGxvdzxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyBjb25maWd1cmF0aW9u IG9mIHJlc3RhcnRpbmcgdGhlIGNvbmdlc3Rpb24gd2luZG93IChjd25kKSBvZiBpZGxlPG86cD48 L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IERDVENQIGNvbm5lY3Rpb25zPG86cD48L286 cD48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPldoZXJlIHNwZWNpYWwgaW1wbGVtZW50YXRp b24gbWVhc3VyZXMgYXJlIG5lY2Vzc2FyeSBmb3IgbG93IFJUVCwgdGhlc2Ugc2hvdWxkIGJlIHJl bGF0ZWQgdG8gdGhlIG1lYXN1cmVkIFJUVCwgbm90IGhhcmQtY29kZWQuIFRoZXJlIGlzIGFuIGFz c3VtcHRpb24gaW4gYSBudW1iZXIgb2YgcGxhY2VzJm5ic3A7IHRoYXQgJnF1b3Q7ZGF0YSBjZW50 cmUmcXVvdDsgaW1wbGllcyBsb3cgUlRULiBPZiBjb3Vyc2UgdGhpcyBpcyB0cnVlIGluIGENCiBz aW5nbGUgREMsIGJ1dCBJIGJlbGlldmUgdGhlIHRoZSBzaW5nbGUgYWRtaW4gYXNwZWN0IG9mIGEg REMgaXMgd2hhdCBjaGFyYWN0ZXJpc2VzIERDVENQLCBub3QgdGhlIGxvdyBSVFQgYXNwZWN0LiBX aXRoIHRoZSBtb2RpZmljYXRpb25zIGluIFtBRENUQ1BdLCBEQ1RDUCBnZW5lcmFsaXNlcyB0byBh IG5ldHdvcmsgd2l0aCBsYXJnZXIgUlRUcyBhcyBsb25nIGFzIGl0IGlzIHN0aWxsJm5ic3A7IG9w ZXJhdGVkIGJ5IGEgc2luZ2xlIGFkbWluLg0KPGJyPg0KPGJyPg0KPHNwYW4gc3R5bGU9ImNvbG9y OiMxRjQ5N0QiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jmx0 O1ByYXZlZW4mZ3Q7IHRoaXMgcGFyYWdyYXBoIGhhcyBub3cgYmVlbiByZW1vdmVkIHBlciBNaWNo YWVsc+KAmSBmZWVkYmFjay48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KQ1VSUkVOVDo8YnI+DQo8dHQ+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOyZuYnNwOyBbUkZDMzE2OF0gZm9yYmlk cyB0aGUgRUNOLW1hcmtpbmcgb2YgcHVyZSBBQ0sgcGFja2V0cywgYmVjYXVzZSBvZiB0aGU8L3Nw YW4+PC90dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+PGJyPg0KPHR0PiZuYnNwOyZuYnNwOyBpbmFiaWxpdHkgb2YgVENQ IHRvIG1pdGlnYXRlIEFDSy1wYXRoIGNvbmdlc3Rpb24gYW5kIHByb3RvY29sLXdpc2U8L3R0Pjxi cj4NCjx0dD4mbmJzcDsmbmJzcDsgcHJlZmVyZW50aWFsIHRyZWF0bWVudCBieSByb3V0ZXJzLiZu YnNwOyBIb3dldmVyLCBkcm9wcGluZyBwdXJlIEFDS3MgLTwvdHQ+PGJyPg0KPHR0PiZuYnNwOyZu YnNwOyByYXRoZXIgdGhhbiBFQ04gbWFya2luZyB0aGVtIC0gaGFzIGRpc2FkdmFudGFnZXMgZm9y IHR5cGljYWw8L3R0Pjxicj4NCjx0dD4mbmJzcDsmbmJzcDsgZGF0YWNlbnRlciB0cmFmZmljIHBh dHRlcm5zLiZuYnNwOyBCZWNhdXNlIG9mIHRoZSBwcmV2YWxlbmNlIG9mIGJ1cnN0eTwvdHQ+PGJy Pg0KPHR0PiZuYnNwOyZuYnNwOyB0cmFmZmljIHBhdHRlcm5zIHRoYXQgZmVhdHVyZSB0cmFuc2ll bnQgY29uZ2VzdGlvbiwgZHJvcHBpbmcgb2YgQUNLczwvdHQ+PGJyPg0KPHR0PiZuYnNwOyZuYnNw OyBjYXVzZXMgc3Vic2VxdWVudCByZXRyYW5zbWlzc2lvbnMuIEl0IGlzIFJFQ09NTUVOREVEIHRo YXQgYW48L3R0Pjxicj4NCjx0dD4mbmJzcDsmbmJzcDsgaW1wbGVtZW50YXRpb24gcHJvdmlkZSBh IGNvbmZpZ3VyYXRpb24ga25vYiB0aGF0IHdpbGwgY2F1c2UgRUNUIHRvIGJlIHNldDwvdHQ+PGJy Pg0KPHR0PiZuYnNwOyZuYnNwOyBvbiBzdWNoIGNvbnRyb2wgcGFja2VzLCB3aGljaCBjYW4gYmUg dXNlZCBpbiBlbnZpcm9ubWVudHMgd2hlcmUgc3VjaCA8L3R0Pg0KPGJyPg0KPHR0PiZuYnNwOyZu YnNwOyBjb25jZXJucyBkbyBub3QgYXBwbHkuPC90dD48YnI+DQo8L3NwYW4+U1VHR0VTVEVEOjxi cj4NCjx0dD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7Jm5ic3A7IFtSRkMz MTY4XSBmb3JiaWRzIHRoZSBFQ04tbWFya2luZyBvZiBwdXJlIEFDSyBwYWNrZXRzLCBiZWNhdXNl IG9mIHRoZTwvc3Bhbj48L3R0PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48YnI+DQo8dHQ+Jm5ic3A7Jm5ic3A7IGluYWJp bGl0eSBvZiBUQ1AgdG8gbWl0aWdhdGUgQUNLLXBhdGggY29uZ2VzdGlvbiBhbmQgdGhlIGV4dHJh IDwvdHQ+PGJyPg0KPHR0PiZuYnNwOyZuYnNwOyBhZHZhbnRhZ2UgdG8gaW5qZWN0aW9uIGF0dGFj a2VycyB0aGF0IEVDTiBpcyBwZXJjZWl2ZWQgdG8gb2ZmZXIuIDwvdHQ+PGJyPg0KPHR0PiZuYnNw OyZuYnNwOyBGb3IgdGhlIGxhdHRlciByZWFzb24gUkZDIDMxNjggYWxzbyBmb3JiaWRzIEVDTi1t YXJraW5nIG9mIDwvdHQ+PGJyPg0KPHR0PiZuYnNwOyZuYnNwOyByZXRyYW5zbWlzc2lvbnMsIHdp bmRvdyBwcm9iZXMgYW5kIFJTVHMuIDwvdHQ+PGJyPg0KPGJyPg0KPHR0PiZuYnNwOyZuYnNwOyBI b3dldmVyLCBkcm9wcGluZyBhbGwgdGhlc2UgY29udHJvbCBwYWNrZXRzIC08L3R0Pjxicj4NCjx0 dD4mbmJzcDsmbmJzcDsgcmF0aGVyIHRoYW4gRUNOIG1hcmtpbmcgdGhlbSAtIGhhcyBjb25zaWRl cmFibGUgcGVyZm9ybWFuY2UgPC90dD48YnI+DQo8dHQ+Jm5ic3A7Jm5ic3A7IGRpc2FkdmFudGFn ZXMuJm5ic3A7IEl0IGlzIFJFQ09NTUVOREVEIHRoYXQgYW48L3R0Pjxicj4NCjx0dD4mbmJzcDsm bmJzcDsgaW1wbGVtZW50YXRpb24gcHJvdmlkZSBhIGNvbmZpZ3VyYXRpb24ga25vYiB0aGF0IHdp bGwgY2F1c2UgRUNUIHRvIGJlIHNldDwvdHQ+PGJyPg0KPHR0PiZuYnNwOyZuYnNwOyBvbiBzdWNo IGNvbnRyb2wgcGFja2VzLCB3aGljaCBjYW4gYmUgdXNlZCBpbiBlbnZpcm9ubWVudHMgd2hlcmUg c3VjaCA8L3R0Pg0KPGJyPg0KPHR0PiZuYnNwOyZuYnNwOyBjb25jZXJucyBkbyBub3QgYXBwbHku PC90dD48L3NwYW4+PGJyPg0KTk9URTo8YnI+DQombmJzcDsmbmJzcDsgVGhpcyBtaWdodCBub3Qg cmVmbGVjdCB0aGUgd2F5IHlvdXIgaW1wbGVtZW50YXRpb24gaXMgY29kZWQsIHNvIHlvdSBtaWdo dCB3YW50IHRvIG1ha2UgdGhhdCBjbGVhci48YnI+DQo8YnI+DQo8c3BhbiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+Jmx0O1ByYXZlZW4mZ3Q7IEZpeGVkPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPGI+NS4gRGVwbG95bWVu dCBJc3N1ZXM8L2I+PG86cD48L286cD48L3A+DQo8cHJlPiZuYnNwOyZuYnNwOyBJZjxvOnA+PC9v OnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyB0aGUgdHJhZmZpYyBpbiB0aGUgZGF0YWNlbnRl ciBpcyBhIG1peCBvZiBjb252ZW50aW9uYWwgVENQIGFuZCBEQ1RDUCw8bzpwPjwvbzpwPjwvcHJl Pg0KPHByZT4mbmJzcDsgJm5ic3A7aXQgaXMgUkVDT01NRU5ERUQgdGhhdCBEQ1RDUCB0cmFmZmlj IGJlIHNlZ3JlZ2F0ZWQgZnJvbSBjb252ZW50aW9uYWw8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4m bmJzcDsmbmJzcDsgVENQIHRyYWZmaWMuPG86cD48L286cD48L3ByZT4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+SW4gYSBkYXRhIGNlbnRyZSAob3Ig YW55d2hlcmUpLCBpcyB0aGVyZSBhbnkgY2FzZSB3aGVyZSBub3Qgc2VncmVnYXRpbmcgdGhlbSB3 b3VsZCBtYWtlIHNlbnNlPyBJZiBub3QsIHRoaXMgbmVlZHMgdG8gYmUgYSBNVVNULCBub3QganVz dCBhIFJFQ09NTUVOREVELiBJIGNhbiBpbWFnaW5lIGNhc2VzIHdoZXJlIHRoZXJlIGlzIG5vIGxv bmctcnVubmluZyBjb252ZW50aW9uYWwNCiBUQ1Agb3Igbm8gbG9uZy1ydW5uaW5nIERDVENQLCBi dXQgdGhhdCdzIGNvdmVyZWQgYnkgdGhlICZxdW90O2lmJnF1b3Q7IGF0IHRoZSBzdGFydCBvZiB0 aGUgc2VudGVuY2UuPGJyPg0KPGJyPg0KWW91IG1pZ2h0IHdhbnQgdG8gcmVmZXIgdG8gZHJhZnQt YnJpc2NvZS1hcW0tZHVhbHEtY291cGxlZCBhcyBhbm90aGVyIHNlZ3JlZ2F0aW9uIGFwcHJvYWNo IGhlcmUgdG9vLjxvOnA+PC9vOnA+PC9wPg0KPHByZT4mbmJzcDsmbmJzcDsgU2luY2UgRENUQ1Ag cmVsaWVzIG9uIGNvbmdlc3Rpb24gbWFya2luZyBieSB0aGUgc3dpdGNoZXMsIERDVENQIGNhbjxv OnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyBvbmx5IGJlIGRlcGxveWVkIGluIGRh dGFjZW50ZXJzIHdoZXJlIHRoZSBlbnRpcmUgbmV0d29yazxvOnA+PC9vOnA+PC9wcmU+DQo8cHJl PiZuYnNwOyZuYnNwOyBpbmZyYXN0cnVjdHVyZSBzdXBwb3J0cyBFQ04uPG86cD48L286cD48L3By ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+U3Vy ZWx5LCB0aGUgJnF1b3Q7ZmFsbC1iYWNrIHRvIGNvbnZlbnRpb25hbCBUQ1Agb24gbG9zcyZxdW90 OyBydWxlIG1lYW5zIHlvdSBjYW4gZGVsZXRlIHRoaXMgY29uc3RyYWludC4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+Jmx0O1ByYXZlZW4mZ3Q7 IFJld29yZGVkIHRvIGltcGx5IHRoYXQgRENUQ1Agd2lsbCBvbmx5IHdvcmsgYXMgZXhwZWN0ZWQg aW4gc3VjaCBjYXNlcy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cHJlPiZuYnNw OyZuYnNwOyBBPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IHZhcmlhbnQgb2Yg RENUQ1AgdGhhdCBjYW4gYmUgZGVwbG95ZWQgdW5pbGF0ZXJhbGx5IGFuZCBvbmx5IHJlcXVpcmVz PG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IHN0YW5kYXJkIEVDTiBiZWhhdmlv ciBoYXMgYmVlbiBkZXNjcmliZWQgaW4gWzxhIGhyZWY9Imh0dHBzOi8vbmEwMS5zYWZlbGlua3Mu cHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNhJTJmJTJmdG9vbHMuaWV0Zi5vcmcl MmZodG1sJTJmZHJhZnQtaWV0Zi10Y3BtLWRjdGNwLTAxJTIzcmVmLU9EQ1RDUCZhbXA7ZGF0YT0w MSU3YzAxJTdjcHJhdmIlNDBtaWNyb3NvZnQuY29tJTdjYTU3MmIwYmE4ZTFiNDdkM2U0NGEwOGQy ZTZkN2UwM2YlN2M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3YzEmYW1wO3NkYXRh PVp3ZkowTGdIUTN2ayUyYk1EMHdpaWE1eUxyY01NU1VCY0dnUFlYbWVSdThoRSUzZCIgdGl0bGU9 IiZxdW90O0ltcHJvdmluZyBUcmFuc21pc3Npb24gUGVyZm9ybWFuY2Ugd2l0aCBPbmUtIFNpZGVk IERhdGFjZW50ZXIgVENQJnF1b3Q7Ij5PRENUQ1A8L2E+XVtCU0RDQU5dLDxvOnA+PC9vOnA+PC9w cmU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQpXaGljaCBwYXJ0IG9mICZxdW90O3N0YW5k YXJkIEVDTiBiZWhhdmlvdXImcXVvdDsgZG8geW91IG1lYW4/IFRoZSBob3N0IHBhcnQ/IFRoZSBu ZXR3b3JrIHBhcnQ/IFRoZSByZWNlaXZlciBwYXJ0PyBBbmQgJnF1b3Q7Y2FuIGJlIGRlcGxveWVk IHVuaWxhdGVyYWxseSZxdW90OyBvdWdodCB0byBiZSBpbiB0aGUgYWN0aXZlIHZvaWNlIG5vdCB0 aGUgcGFzc2l2ZSwgd2hpY2ggd291bGQgaGVscCByZXNvbHZlIHRoZSBhbWJpZ3VpdHkgdG9vLjxi cj4NCjxicj4NCkkgaGF2ZW4ndCByZWFkIFtPRENUQ1BdIGFuZCBbQlNEQ0FOXSAoSSdtIG9mZmxp bmUgb24gYSBwbGFuZSBhdCB0aGUgbW8pLiBBcmUgdGhleSBzaW1pbGFyIHRvICZxdW90O0luc3Rh bnQgRUNOJnF1b3Q7IGluIFtXdTEyXSBsaXN0ZWQgYmVsb3c/IElmIG5vdCwgdGhhdCBjb3VsZCBi ZSByZWZlcnJlZCB0byBhcyB3ZWxsIGZvciBhIHRlY2huaXF1ZSB0aGF0IHVzZXMgdGhlIHJlZ3Vs YXIgRUNOIGhvc3QgYmVoYXZpb3VyLjxicj4NCjxicj4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZsdDtQcmF2 ZWVuJmd0OyBUaGlzIGVkaXQgcHJlZGF0ZXMgbWUgYW5kJm5ic3A7IEkgZG9u4oCZdCBoYXZlIHRo ZSBmdWxsIGNvbnRleHQsIEkgYW0gbGVhdmluZyB0aGlzIGFzIGlzLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdE Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGI+Ni4gS25vd24gSXNzdWVzPGJyPg0KPC9iPjxi cj4NCkZpcnN0IHBhcmEgY291bGQgcmVmZXIgdG8gYXBwZW5kaXggQSBvZiBSRkM3NTYwLCB3aGlj aCBkZXNjcmliZXMgdGhlIHByb2JsZW0gcHJlY2lzZWx5LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHByZT5BIG1ldGhvZCBmb3IgaW1wcm92aW5nIHRoZSBmYWlybmVzcyBvZiBE Q1RDUCBoYXMgYmVlbiBwcm9wb3NlZDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNw OyBpbiBbPGEgaHJlZj0iaHR0cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2su Y29tLz91cmw9aHR0cHMlM2ElMmYlMmZ0b29scy5pZXRmLm9yZyUyZmh0bWwlMmZkcmFmdC1pZXRm LXRjcG0tZGN0Y3AtMDElMjNyZWYtQURDVENQJmFtcDtkYXRhPTAxJTdjMDElN2NwcmF2YiU0MG1p Y3Jvc29mdC5jb20lN2NhNTcyYjBiYThlMWI0N2QzZTQ0YTA4ZDJlNmQ3ZTAzZiU3YzcyZjk4OGJm ODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdjMSZhbXA7c2RhdGE9ZWRVMlRQR3BMdnlGR3Znb2NE UkppWVJReWpDVCUyZldFT2dTMk13bXd6WXVVJTNkIiB0aXRsZT0iJnF1b3Q7QW5hbHlzaXMgb2Yg RENUQ1A6IFN0YWJpbGl0eSwgQ29udmVyZ2VuY2UsIGFuZCBGYWlybmVzcyZxdW90OyI+QURDVENQ PC9hPl0sIGJ1dCByZXF1aXJlcyBhZGRpdGlvbmFsIGV4cGVyaW1lbnRhbCBldmFsdWF0aW9uLjxv OnA+PC9vOnA+PC9wcmU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5zL2ZhaXJuZXNzL1JUVCBmYWly bmVzcy88YnI+DQo8YnI+DQooSW4gb3VyIGV4cGVyaW1lbnRzLCBpdCdzIG11Y2ggYmV0dGVyIHRo YW4gd2l0aG91dC4pPGJyPg0KPGJyPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jmx0O1ByYXZlZW4mZ3Q7IEdv YWwgaXMgdG8gY2l0ZSBvdGhlciB3b3JrIHRoYXQgY2FuIGFkZHJlc3MgcG90ZW50aWFsIGlzc3Vl cy4gSXQgaXMgbm90IGEgcmVjb21tZW5kYXRpb24uIHMvZmFpcm5lc3MvUlRUIGZhaXJuZXNzLyBG aXhlZCBpbiBuZXh0IHJldmlzaW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8Yj4xMS4gUmVmZXJlbmNl czxicj4NCjwvYj48YnI+DQpJIHRoaW5rIHRoZSBmb2xsb3dpbmcgYXJlIGNpdGVkIG5vcm1hdGl2 ZWx5LCBub3QganVzdCBpbmZvcm1hdGl2ZWx5Ojxicj4NClJGQzU2ODEsIFJGQzU1NjIuPGJyPg0K PGJyPg0KQWRkaXRpb25hbCBpbmZvcm1hdGlvbmFsIFJlZmVyZW5jZTo8YnI+DQo8YnI+DQpbV3Ux Ml0gV3UsIEguLCBKdSwgSi4sIEx1LCBHLiwgR3VvLCBDLiwgWGlvbmcsIFkuICZhbXA7IFpoYW5n LCBZLiwgJnF1b3Q7VHVuaW5nIEVDTiBmb3IgRGF0YSBDZW50ZXIgTmV0d29ya3MsJnF1b3Q7IElu OiBQcm9jZWVkaW5ncyBvZiB0aGUgOHRoIEludGVybmF0aW9uYWwgQ29uZmVyZW5jZSBvbiBFbWVy Z2luZyBOZXR3b3JraW5nIEV4cGVyaW1lbnRzIGFuZCBUZWNobm9sb2dpZXMgQ29ORVhUICcxMiBw cC4yNS0zNiBBQ00gKDIwMTIpPGJyPg0KPGJyPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jmx0O1ByYXZlZW4m Z3Q7IENpdGF0aW9uIHRvIFJGQ3MgdXBkYXRlZCBhcyBub3JtYXRpdmUuIE5vdCBpbmNsdWRpbmcg dGhlIG5ldyByZWZlcmVuY2Ugc2luY2UgZXZlbiB0aG91Z2ggaXQgbWF5IGJlIHJlbGV2YW50IOKA kyBpdCB3YXMgbm90IHVzZWQgYXMgYSByZWZlcmVuY2UgaW4gd3JpdGluZw0KIHRoZSBkcmFmdC48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGJyPg0KVGhhdCdzIGl0LiBIVEguPGJyPg0KPGJyPg0KPGJyPg0KQm9iPGJy Pg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8cHJlPi0tIDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJl Pl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX188bzpwPjwvbzpwPjwvcHJlPg0KPHByZT5Cb2IgQnJpc2NvZSZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8YSBo cmVmPSJodHRwczovL25hMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1o dHRwJTNhJTJmJTJmYm9iYnJpc2NvZS5uZXQlMmYmYW1wO2RhdGE9MDElN2MwMSU3Y3ByYXZiJTQw bWljcm9zb2Z0LmNvbSU3Y2E1NzJiMGJhOGUxYjQ3ZDNlNDRhMDhkMmU2ZDdlMDNmJTdjNzJmOTg4 YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN2MxJmFtcDtzZGF0YT1pRXZoV2o5RkNQb3pXQXA4 cm54azVWWmRORiUyZnY3VzdhRDFDcDRNeE9pU3MlM2QiPmh0dHA6Ly9ib2JicmlzY29lLm5ldC88 L2E+PG86cD48L286cD48L3ByZT4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_BN1PR03MB008D16E15DCBE49E7C21A4AB6350BN1PR03MB008namprd_-- From nobody Sun Jul 17 13:27:17 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F161012D113 for ; Sun, 17 Jul 2016 13:27:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.022 X-Spam-Level: X-Spam-Status: No, score=-2.022 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q_XLp9Yf96lT for ; Sun, 17 Jul 2016 13:27:04 -0700 (PDT) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0118.outbound.protection.outlook.com [104.47.36.118]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BD7112D0FE for ; Sun, 17 Jul 2016 13:27:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=16Rc0Uxu0QqYD05RVZNFnEAvszy7/kbRoDYxaGmsFk0=; b=cfyvp15nte/OCMedZyAPK9gDhQ7mPoOkhjf3RHGty1QyqPDrCVqgwJSdGSifqLjeYcXczA2EkLk68tLNP+mLmRpJkr3nUzb0OvTS4DNW4Hao/uM3dwigMIVojlWxxhwC78ua0DId3urt7VX1BiQFFX1FOO4gQtsqIQFvJ9zBO5k= Received: from BN1PR03MB008.namprd03.prod.outlook.com (10.255.224.38) by BN1PR03MB005.namprd03.prod.outlook.com (10.255.224.35) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.523.12; Sun, 17 Jul 2016 20:27:02 +0000 Received: from BN1PR03MB008.namprd03.prod.outlook.com ([169.254.5.66]) by BN1PR03MB008.namprd03.prod.outlook.com ([169.254.5.66]) with mapi id 15.01.0523.029; Sun, 17 Jul 2016 20:27:03 +0000 From: Praveen Balasubramanian To: "Scharf, Michael (Nokia - DE)" , "draft-ietf-tcpm-dctcp@tools.ietf.org" Thread-Topic: [tcpm] Some comments on draft-ietf-tcpm-dctcp Thread-Index: AdGqICCR7wWRxmfCSkO9/HVPCvvFdA2NfCxA Date: Sun, 17 Jul 2016 20:27:03 +0000 Message-ID: References: <655C07320163294895BBADA28372AF5D4883C106@FR712WXCHMBA15.zeu.alcatel-lucent.com> In-Reply-To: <655C07320163294895BBADA28372AF5D4883C106@FR712WXCHMBA15.zeu.alcatel-lucent.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=pravb@microsoft.com; x-originating-ip: [46.189.28.231] x-ms-office365-filtering-correlation-id: 8acd505d-5786-41cc-b3a2-08d3ae80b6bb x-microsoft-exchange-diagnostics: 1; BN1PR03MB005; 6:NQHZ7s2dL/mTqj+7K+JM+YRBqqiQ+EAcX7VYPgr4oR5hm0939XiZ6nbqkOuUFTHKGjjTd9hY1/XuEQk/83kxyJ9VNs8LLmADpjMVlvnBMX7SYatEdkf9UY37bXl3VWtRY2pFHfscRVSSKosX48beKc/d7Qp9t6Fl2TjtH00KEhFVYtSaMz6m9C/9dkLOwARCBDfGrXsHmlH5OBpgxFy31F4PT8sqWtCgUUhLAsuJTxwr1IUJO09xL0hxOqJ8O7GKB0mWrjsERQANCaHrTmIY2xJsvFWFBUi2RVDUzGc/K0vopyPRDAvFadJVIH6e0IC9qoXYtntyALM2cQp2SFEKSw==; 5:EA6EAyAIEDqmikNUj9C1XirA8+/SrbfQfrjbV+RnyVpPzE/cP6nmelMlKWN2yShWVVZqYRioJcr6P33GFOnVzampMqu5Ttz2RLpYWedgk3d4GXnUrdJzlBnYNP8L5QRysh7+Wrm7XtXDbb2m0m3lTQ==; 24:KTPFZNnmt1p0kIN8JOEMIr7FntyS1V8EJ+Ulc4MgRGvFeTmfEmT7wNDsKg45j92bdwwTYvDqurNE4uCc71kBCg7AOl4G/rlcPjRBwuzEoAI=; 7:VcsNfiIMUF9WetgxNQFo2J8qHuWOyIkMQbdFVtMd3bh6JVOsoNMzNYOV1CdDOlv2bxic2uelU7/Vuo83iXwYDkOasTJrVJj5cMETWF5qCRFmFUxeWeKkMhDWzWTJ+nuAITj5NJ53TCeOaUbo5vcG8uQ/LdjpOoCQpmSwfPXulxmfXlfiMaUGIffrv1+qyR5XNm0LKRmwNKf8KRa1eqWd+CIf6jrDiwnDgJ6wLsh7A3ouR8t7UTgvFoeqw5IOspTK x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN1PR03MB005; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026)(61426038)(61427038); SRVR:BN1PR03MB005; BCL:0; PCL:0; RULEID:; SRVR:BN1PR03MB005; x-forefront-prvs: 00064751B6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(199003)(51444003)(13464003)(189002)(377454003)(5002640100001)(76576001)(92566002)(7846002)(97736004)(9686002)(305945005)(5003600100003)(7696003)(7736002)(5001770100001)(2501003)(2900100001)(3660700001)(68736007)(2950100001)(74316002)(19580405001)(8990500004)(99286002)(8676002)(3280700002)(15975445007)(19580395003)(81166006)(81156014)(189998001)(8936002)(86612001)(76176999)(230783001)(86362001)(54356999)(6116002)(102836003)(3846002)(586003)(50986999)(105586002)(106356001)(87936001)(10290500002)(10400500002)(5005710100001)(66066001)(122556002)(2906002)(101416001)(33656002)(4326007)(10090500001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR03MB005; H:BN1PR03MB008.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jul 2016 20:27:03.2083 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR03MB005 Archived-At: Cc: "tcpm@ietf.org Extensions" Subject: Re: [tcpm] Some comments on draft-ietf-tcpm-dctcp X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jul 2016 20:27:15 -0000 Sorry for the late response. Inline prefixed with . The next updat= e to the draft will include these changes. -----Original Message----- From: tcpm [mailto:tcpm-bounces@ietf.org] On Behalf Of Scharf, Michael (Nok= ia - DE) Sent: Monday, May 9, 2016 8:25 PM To: draft-ietf-tcpm-dctcp@tools.ietf.org Cc: tcpm@ietf.org Extensions Subject: [tcpm] Some comments on draft-ietf-tcpm-dctcp Dear authors, As individual contributor to TCPM, I have read -01 of the DCTCP draft and I= 've run into some minor issues: * Section 1: I think the following wording was discussed already in the pas= t: It is recommended that DCTCP be deployed in a datacenter environment where the endpoints and the switching fabric are under a single administrative domain. This protocol is not meant for uncontrolled deployment in the global Internet. Reading the document again, I'd prefer a wording that would not generally= recommend DCTCP to all single domain datacenter environments. The smallest= change I could think of would be to add the word "only": =20 It is recommended that DCTCP be only deployed in a datacenter environmen= t where the endpoints and the switching fabric are under a single administrative domain. This protocol is not meant for uncontrolled deployment in the global Internet. fixed * Section 2+3: This is an informative document so RFC 2119 should be used w= ith care, if at all. My impression is that at least some use of RFC 2119 la= nguage could be avoided. Examples: Section 3.1: "Therefore, sender and receiver MUST NOT assume that a par= ticular marking algorithm is implemented by the switching fabric." =3D> I think an implementation of DCTCP inherently follows this and thi= s does not require RFC 2119 statements. Fair enough. I will rephrase this to say lowercase should not. Section 3.3: "The congestion estimator on the sender MUST process accep= table ACKs as follows:" =3D> This is a sender-side algorithm that relies on internal TCP state = variables. I am not sure if an implementation really has to implement the a= lgorithm exactly in this way or if slight variations could yield the same r= esult. A "MUST" on the exact algorithm seems a bit restrictive in that case= . =20 As Lars pointed out this is already violated in the Linux impleme= ntation. I am changing this to SHOULD. (... possibly more ...) * Section 4: This section discusses both discusses implementation issues fo= r DCTCP as well as further TCP tuning that may be used in combination with = DCTCP (lower MinRTO, cwnd idle, ...) but that is not tightly related to the= actual DCTCP protocol mechanisms. Also, partly related to this, Section 4 = is a relatively long text without subsections. I think that Section 4 could= be better structured, e.g., by adding two or three subsection distinguishi= ng DCTCP implementation from other (related) implementation guidance. The a= ctual content may not require rewording, except possibly some reordering of= paragraphs. Yes the discussion of minrto, delack timeout and cwnd restart is = confusing and not strictly needed in a RFC focused on DCTCP. I am removing = these 2 paragraphs and after this the section is shorter and I think does n= ot need sub-sections.=20 * Section 5: I am not sure if the following comment on UDP is compatible wi= th draft-ietf-tsvwg-rfc5405bis-12: If the datacenter traffic consists of such traffic (including UDP), one possible mitigation would be to mark IP packets as ECT even when there is no transport that is reacting to the marking. Also, I don't fully understand the contect, e.g., what marking/drop profi= les are here referred to. Maybe some additional explanation could help. As = far as I know, this can be quite device-specific, e.g., many routers would = allow separate queues for non-TCP/non-IP traffic. In any case, the handling= of UDP seems to me rather unrelated to DCTCP, right? If this is considered= useful information for potential implementers, Section 5 should also be be= tter structured into DCTCP deployment issues and other related deployment e= xperiences in environments running DCTCP. I am changing this text to suggest that deployments must take int= o account segregation of non-TCP traffic and use schemes to ensure such tra= ffic does not suffer by being on the same queue as DCTCP traffic. Thanks Michael _______________________________________________ tcpm mailing list tcpm@ietf.org https://www.ietf.org/mailman/listinfo/tcpm From nobody Sun Jul 17 23:54:27 2016 Return-Path: X-Original-To: tcpm@ietf.org Delivered-To: tcpm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2010512B02D; Sun, 17 Jul 2016 23:54:25 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.28.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160718065425.30588.41857.idtracker@ietfa.amsl.com> Date: Sun, 17 Jul 2016 23:54:25 -0700 Archived-At: Cc: tcpm@ietf.org Subject: [tcpm] I-D Action: draft-ietf-tcpm-dctcp-02.txt X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jul 2016 06:54:25 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TCP Maintenance and Minor Extensions of the IETF. Title : Datacenter TCP (DCTCP): TCP Congestion Control for Datacenters Authors : Stephen Bensley Lars Eggert Dave Thaler Praveen Balasubramanian Glenn Judd Filename : draft-ietf-tcpm-dctcp-02.txt Pages : 14 Date : 2016-07-17 Abstract: This informational memo describes Datacenter TCP (DCTCP), an improvement to TCP congestion control for datacenter traffic. DCTCP uses improved Explicit Congestion Notification (ECN) processing to estimate the fraction of bytes that encounter congestion, rather than simply detecting that some congestion has occurred. DCTCP then scales the TCP congestion window based on this estimate. This method achieves high burst tolerance, low latency, and high throughput with shallow-buffered switches. This memo also discusses deployment issues related to the coexistence of DCTCP and conventional TCP, the lack of a negotiating mechanism between sender and receiver, and presents some possible mitigations. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tcpm-dctcp/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-tcpm-dctcp-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tcpm-dctcp-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jul 18 09:00:16 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE47612DA29 for ; Mon, 18 Jul 2016 09:00:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.187 X-Spam-Level: X-Spam-Status: No, score=-3.187 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.287] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sXXL5BgjTr4V for ; Mon, 18 Jul 2016 09:00:11 -0700 (PDT) Received: from nitro.isi.edu (nitro.isi.edu [128.9.208.207]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8DF812DA2F for ; Mon, 18 Jul 2016 09:00:10 -0700 (PDT) Received: from [192.168.1.189] (cpe-172-250-251-17.socal.res.rr.com [172.250.251.17]) (authenticated bits=0) by nitro.isi.edu (8.13.8/8.13.8) with ESMTP id u6IFxVlA015252 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Mon, 18 Jul 2016 08:59:33 -0700 (PDT) To: Praveen Balasubramanian , "Scharf, Michael (Nokia - DE)" , "draft-ietf-tcpm-dctcp@tools.ietf.org" References: <655C07320163294895BBADA28372AF5D4883C106@FR712WXCHMBA15.zeu.alcatel-lucent.com> From: Joe Touch Message-ID: <578CFCE2.8050504@isi.edu> Date: Mon, 18 Jul 2016 08:59:30 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.7.2 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-MailScanner-ID: u6IFxVlA015252 X-ISI-4-69-MailScanner: Found to be clean X-MailScanner-From: touch@isi.edu Archived-At: Cc: "tcpm@ietf.org Extensions" Subject: Re: [tcpm] Some comments on draft-ietf-tcpm-dctcp X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jul 2016 16:00:13 -0000 On 7/17/2016 1:27 PM, Praveen Balasubramanian wrote: > Reading the document again, I'd prefer a wording that would not generally recommend DCTCP to all single domain datacenter environments. The smallest change I could think of would be to add the word "only": > > It is recommended that DCTCP be only deployed in a datacenter environment > where the endpoints and the switching fabric are under a single > administrative domain. This protocol is not meant for uncontrolled > deployment in the global Internet. FWIW, the word "only should be relocated. In its location above, it implies that DCTCP should be only deployed, not something else (e.g., not operated, talked about, etc.). If you intend to use "only" to constrain location, it has to precede the location clause as follows: It is recommended that DCTCP be deployed only in a ... Joe From nobody Mon Jul 18 23:37:33 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C24812D6A7 for ; Mon, 18 Jul 2016 23:37:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.902 X-Spam-Level: X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GlwI_ImCvksS for ; Mon, 18 Jul 2016 23:37:30 -0700 (PDT) Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 761AA12D0DE for ; Mon, 18 Jul 2016 23:37:30 -0700 (PDT) Received: from fr712umx3.dmz.alcatel-lucent.com (unknown [135.245.210.42]) by Websense Email Security Gateway with ESMTPS id 95D3F2217C0E7 for ; Tue, 19 Jul 2016 06:37:26 +0000 (GMT) Received: from fr711usmtp1.zeu.alcatel-lucent.com (fr711usmtp1.zeu.alcatel-lucent.com [135.239.2.122]) by fr712umx3.dmz.alcatel-lucent.com (GMO-o) with ESMTP id u6J6bSan016121 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Tue, 19 Jul 2016 06:37:28 GMT Received: from FR711WXCHHUB01.zeu.alcatel-lucent.com (fr711wxchhub01.zeu.alcatel-lucent.com [135.239.2.111]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id u6J6bJtR013727 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Tue, 19 Jul 2016 08:37:28 +0200 Received: from FR712WXCHMBA15.zeu.alcatel-lucent.com ([169.254.7.34]) by FR711WXCHHUB01.zeu.alcatel-lucent.com ([135.239.2.111]) with mapi id 14.03.0195.001; Tue, 19 Jul 2016 08:37:24 +0200 From: "Scharf, Michael (Nokia - DE)" To: "tcpm@ietf.org" Thread-Topic: WG acceptance of draft-cheng-tcpm-rack-01 Thread-Index: AdHhiAFlT51H/JVWTKmYQaN+WFmZZw== Date: Tue, 19 Jul 2016 06:37:23 +0000 Message-ID: <655C07320163294895BBADA28372AF5D4892769C@FR712WXCHMBA15.zeu.alcatel-lucent.com> Accept-Language: de-DE, en-US Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.239.27.38] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [tcpm] WG acceptance of draft-cheng-tcpm-rack-01 X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jul 2016 06:37:32 -0000 Hi all, Yesterday we had uniform consensus in the room to adopt draft-cheng-tcpm-ra= ck-01 as a new TCPM working group item. As a remark, the support was the st= rongest I have recently seen in TCPM.=20 Therefore I'd like to confirm on the list that it is working group consensu= s to add a new milestone to the TCPM charter Submit document on a time-based fast loss detection algorithm for TCP (RA= CK) to the IESG for publication as an Experimental RFC and to use draft-cheng-tcpm-rack-01 as a starting point. Two additional notes: - It has been mentioned that further experimentation is needed e.g. regardi= ng the parameters and therefore the suggested status is Experimental - It has been proposed to also document TLP in this document as it is timer= -based mechanism as well If you have any feedback or suggestions, please let us know in the next two= weeks. Thanks Michael From nobody Tue Jul 19 02:20:01 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 769D012DB93 for ; Tue, 19 Jul 2016 02:20:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.987 X-Spam-Level: X-Spam-Status: No, score=-3.987 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GpTZBc0O562v for ; Tue, 19 Jul 2016 02:19:55 -0700 (PDT) Received: from mail-it0-x234.google.com (mail-it0-x234.google.com [IPv6:2607:f8b0:4001:c0b::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7559812DDD4 for ; Tue, 19 Jul 2016 02:09:39 -0700 (PDT) Received: by mail-it0-x234.google.com with SMTP id j124so14241313ith.1 for ; Tue, 19 Jul 2016 02:09:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:from:date:message-id:subject:to:cc; bh=ofpAiWbqjWIeIP2vtTAlRJnwOWyOhd2BmSYYJ2EovBY=; b=ojE5Z/FYfBM05o5hZ9i3SNXmKqaxGMKf88DWppf7qW7IyQCU8WMxW1zLeJJ6U+S0vJ yWK1IFqpTomLZETh6W8sdcm6w84SJtxhMJ+Q28zKL3lEpK3aRmHVNFLLeZ5RBM2MxxXg 2IKmIkPkcD5sNStsi+dtAuUATiLZHwbD5It92S28fv3Wm/e0XWqF2sLDgRL4PpT7xhAO bk00OFRY26lH1EN68i9AIL+Qttw6cYLGybsuBr4e8PjXnfJsZdm5uoIbMVRO2+mTbh+q WZpvcndnoy5vwCWVjj4KJBI4qWKDD9tJUBfdGL8SgzCrrMN6zvdecQBLlv/RAP7wumqN R+9g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=ofpAiWbqjWIeIP2vtTAlRJnwOWyOhd2BmSYYJ2EovBY=; b=EJ3HH5aOchfQ5fATRF198QGzEpvmqgqLUmaJN+J2z6gvPxXp2Sf1m/ZVA4BnI7htyx /6pN8bFNCHlJ3ciogPjapVSvrWzq/YLHL18NLblJu98K/Jw9bzJwB1OXFHOt6UfrXlrG 9wNju+6ZaUfBJ1QqCCZoRP8ajMxBoHCA5446+kL+XY3JS7ISPTq52e5Pav/Y9vTYTVvx B+WiKU/83hISYizBei+x4m0MkYNHJ4Rle3y4BRdUbNyfv+A2S0v4HIqC7uXha99qJ0UU iT74GQY+x5LFkDFnACtUjZtprZ5vGgEC1qLkh02cHrWEmE38/cBHNFp7lCysdwNnT9CK oUkg== X-Gm-Message-State: ALyK8tKhTH4Bf4BQb/GMzYRO1FxjAgqmWRiFYKK/AiYW3ix2ZblYgghvbjx4+se9NKg3JDtwpLYXkTb69PxIQlBC X-Received: by 10.36.13.197 with SMTP id 188mr7081631itx.76.1468919378703; Tue, 19 Jul 2016 02:09:38 -0700 (PDT) MIME-Version: 1.0 Received: by 10.64.10.106 with HTTP; Tue, 19 Jul 2016 02:08:58 -0700 (PDT) From: Yuchung Cheng Date: Tue, 19 Jul 2016 11:08:58 +0200 Message-ID: To: Praveen Balasubramanian Content-Type: multipart/alternative; boundary=001a1144535cc5ce490537f97132 Archived-At: Cc: "tcpm@ietf.org Extensions" Subject: [tcpm] Eifel on Windows stack X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jul 2016 09:20:00 -0000 --001a1144535cc5ce490537f97132 Content-Type: text/plain; charset=UTF-8 First thanks for the presentation on W stack. For years it has remained mysterious for many of us (at least myself). We had to use inference technique to find Windows settings if they are not clearly publicly documented. (e.g., delayed-ACK timeout) Does Windows support RFC4015 and RFC3522, ie. cwnd undo, aka Eifel? I am curiously its support in Windows (as well FreeBSD). TCP undo is one of the most complicated esoteric code in Linux. It is somewhat helpful using the TS-opt approach. The DSACK approach is not that useful but is more complicated. Also does Windows use the standard RTO formula (RFC6298)? --001a1144535cc5ce490537f97132 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
First thanks for the presentation on W stack. For years it= has remained mysterious for many of us (at least myself). We had to use in= ference technique to find Windows settings if they are not clearly publicly= documented. (e.g., delayed-ACK timeout)

Does Windows su= pport RFC4015 and RFC3522, ie. cwnd undo, aka Eifel?

I am curiously its support in Windows (as well FreeBSD).=C2=A0TCP undo i= s one of the most complicated esoteric code in Linux. It is somewhat helpfu= l using the TS-opt approach. The DSACK approach is not that useful but is m= ore complicated.

Also does Windows use the standar= d RTO formula (RFC6298)?
--001a1144535cc5ce490537f97132-- From nobody Tue Jul 19 09:23:23 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E6BC12D747 for ; Tue, 19 Jul 2016 09:23:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.187 X-Spam-Level: X-Spam-Status: No, score=-3.187 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.287] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XlKjBYTCngHa for ; Tue, 19 Jul 2016 09:23:16 -0700 (PDT) Received: from mail.strugglingcoder.info (strugglingcoder.info [104.236.146.68]) by ietfa.amsl.com (Postfix) with ESMTP id CE70912D0CA for ; Tue, 19 Jul 2016 09:22:46 -0700 (PDT) Received: from localhost (unknown [10.1.1.3]) (Authenticated sender: hiren@strugglingcoder.info) by mail.strugglingcoder.info (Postfix) with ESMTPA id 6B61217343; Tue, 19 Jul 2016 09:22:46 -0700 (PDT) Date: Tue, 19 Jul 2016 09:22:46 -0700 From: hiren panchasara To: Yuchung Cheng Message-ID: <20160719162246.GI75265@strugglingcoder.info> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="tSiBuZsJmMXpnp7T" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.23 (2014-03-12) Archived-At: Cc: "tcpm@ietf.org Extensions" Subject: Re: [tcpm] Eifel on Windows stack X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jul 2016 16:23:19 -0000 --tSiBuZsJmMXpnp7T Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable (Quoting relevant message) On 07/19/16 at 11:08P, Yuchung Cheng wrote: > Does Windows support RFC4015 and RFC3522, ie. cwnd undo, aka Eifel? >=20 > I am curiously its support in Windows (as well FreeBSD). AFAIK, FreeBSD doesn't support Eifel detection/response. Cheers, Hiren --tSiBuZsJmMXpnp7T Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQF8BAABCgBmBQJXjlPSXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRBNEUyMEZBMUQ4Nzg4RjNGMTdFNjZGMDI4 QjkyNTBFMTU2M0VERkU1AAoJEIuSUOFWPt/lOqYIAIKb3hGEW9YiXSxILYNa9G6o 8uTOOhKvaMgcucWV0ygt1vp48U6SWzKD1AS0mmRA4MOKYcnf85R+f8CZGyuRIKmS 7+1XRwK4m1KTz3M18mFC5TPZRcGiCfG7v6AjKPMDM37yRP6/sd1fnKtTorr3FDQb lX0+gfa9URkGAJXbwTTVsddM7Znhh4xIlsQ3yC2fhe0utcE23Lxvog1yyQYVKsWX hZnJ+mwNdlJeo4ggzB6huQFJAtkzGeBxmvuaIYMcoEu+oAvZZOOQvqsqVLP2UIBG zxakG+pCnDIrIlc9ZKxQ/qaIaYYMfDEr3dbh0RJ7zsYSY3LFiuBWb7ozdrUJRk0= =vBXg -----END PGP SIGNATURE----- --tSiBuZsJmMXpnp7T-- From nobody Tue Jul 19 12:26:15 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A61CF12D1C1 for ; Tue, 19 Jul 2016 12:26:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.902 X-Spam-Level: X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id neD1Z2xe_RYv for ; Tue, 19 Jul 2016 12:26:11 -0700 (PDT) Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E692F12D0F4 for ; Tue, 19 Jul 2016 12:26:10 -0700 (PDT) Received: from fr712umx4.dmz.alcatel-lucent.com (unknown [135.245.210.45]) by Websense Email Security Gateway with ESMTPS id E02484E359605; Tue, 19 Jul 2016 19:26:04 +0000 (GMT) Received: from fr712usmtp2.zeu.alcatel-lucent.com (fr712usmtp2.zeu.alcatel-lucent.com [135.239.2.42]) by fr712umx4.dmz.alcatel-lucent.com (GMO-o) with ESMTP id u6JJQ7o6018428 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 19 Jul 2016 19:26:08 GMT Received: from FR711WXCHHUB02.zeu.alcatel-lucent.com (fr711wxchhub02.zeu.alcatel-lucent.com [135.239.2.112]) by fr712usmtp2.zeu.alcatel-lucent.com (GMO) with ESMTP id u6JJQ7m8006180 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 19 Jul 2016 21:26:07 +0200 Received: from FR712WXCHMBA15.zeu.alcatel-lucent.com ([169.254.7.34]) by FR711WXCHHUB02.zeu.alcatel-lucent.com ([135.239.2.112]) with mapi id 14.03.0195.001; Tue, 19 Jul 2016 21:26:07 +0200 From: "Scharf, Michael (Nokia - DE)" To: Praveen Balasubramanian , "draft-ietf-tcpm-dctcp@tools.ietf.org" Thread-Topic: [tcpm] Some comments on draft-ietf-tcpm-dctcp Thread-Index: AQHR4GmXunKUH7v9ykKpr1on6ox1RKAgI+uw Date: Tue, 19 Jul 2016 19:26:06 +0000 Message-ID: <655C07320163294895BBADA28372AF5D48928F61@FR712WXCHMBA15.zeu.alcatel-lucent.com> References: <655C07320163294895BBADA28372AF5D4883C106@FR712WXCHMBA15.zeu.alcatel-lucent.com> In-Reply-To: Accept-Language: de-DE, en-US Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.239.27.39] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "tcpm@ietf.org Extensions" Subject: Re: [tcpm] Some comments on draft-ietf-tcpm-dctcp X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jul 2016 19:26:14 -0000 Thanks for addressing my review. In general, I believe my concerns are suff= iciently sorted out. I am not a native speaker and thus I cannot really comment on Joe's remark = regarding the location of the word "only". >From a procedural perspective, I want to note that the new Terminology sect= ion contains new some wording: The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [RFC2119]. Normative language is used to describe how necessary the various aspects of the Microsoft implementation are for interoperability, but even compliant implementations without the measures in sections 4-6 would still only be safe to deploy in controlled environments. I have no particular suggestion how to change that wording but I want to en= sure the WG is aware of this use of RFC 2199. Michael > -----Original Message----- > From: Praveen Balasubramanian [mailto:pravb@microsoft.com] > Sent: Sunday, July 17, 2016 10:27 PM > To: Scharf, Michael (Nokia - DE); draft-ietf-tcpm-dctcp@tools.ietf.org > Cc: tcpm@ietf.org Extensions; lars@netapp.com > Subject: RE: [tcpm] Some comments on draft-ietf-tcpm-dctcp >=20 > Sorry for the late response. Inline prefixed with . The next > update to the draft will include these changes. >=20 > -----Original Message----- > From: tcpm [mailto:tcpm-bounces@ietf.org] On Behalf Of Scharf, Michael > (Nokia - DE) > Sent: Monday, May 9, 2016 8:25 PM > To: draft-ietf-tcpm-dctcp@tools.ietf.org > Cc: tcpm@ietf.org Extensions > Subject: [tcpm] Some comments on draft-ietf-tcpm-dctcp >=20 > Dear authors, >=20 > As individual contributor to TCPM, I have read -01 of the DCTCP draft > and I've run into some minor issues: >=20 > * Section 1: I think the following wording was discussed already in the > past: >=20 > It is recommended that DCTCP be deployed in a datacenter environment > where the endpoints and the switching fabric are under a single > administrative domain. This protocol is not meant for uncontrolled > deployment in the global Internet. >=20 > Reading the document again, I'd prefer a wording that would not > generally recommend DCTCP to all single domain datacenter environments. > The smallest change I could think of would be to add the word "only": >=20 > It is recommended that DCTCP be only deployed in a datacenter > environment > where the endpoints and the switching fabric are under a single > administrative domain. This protocol is not meant for uncontrolled > deployment in the global Internet. >=20 > fixed >=20 >=20 > * Section 2+3: This is an informative document so RFC 2119 should be > used with care, if at all. My impression is that at least some use of > RFC 2119 language could be avoided. Examples: >=20 > Section 3.1: "Therefore, sender and receiver MUST NOT assume that a > particular marking algorithm is implemented by the switching fabric." >=20 > =3D> I think an implementation of DCTCP inherently follows this and > this does not require RFC 2119 statements. >=20 > Fair enough. I will rephrase this to say lowercase should > not. >=20 > Section 3.3: "The congestion estimator on the sender MUST process > acceptable ACKs as follows:" >=20 > =3D> This is a sender-side algorithm that relies on internal TCP > state variables. I am not sure if an implementation really has to > implement the algorithm exactly in this way or if slight variations > could yield the same result. A "MUST" on the exact algorithm seems a > bit restrictive in that case. >=20 > As Lars pointed out this is already violated in the Linux > implementation. I am changing this to SHOULD. >=20 >=20 > (... possibly more ...) >=20 > * Section 4: This section discusses both discusses implementation > issues for DCTCP as well as further TCP tuning that may be used in > combination with DCTCP (lower MinRTO, cwnd idle, ...) but that is not > tightly related to the actual DCTCP protocol mechanisms. Also, partly > related to this, Section 4 is a relatively long text without > subsections. I think that Section 4 could be better structured, e.g., > by adding two or three subsection distinguishing DCTCP implementation > from other (related) implementation guidance. The actual content may > not require rewording, except possibly some reordering of paragraphs. >=20 > Yes the discussion of minrto, delack timeout and cwnd restart > is confusing and not strictly needed in a RFC focused on DCTCP. I am > removing these 2 paragraphs and after this the section is shorter and I > think does not need sub-sections. >=20 >=20 > * Section 5: I am not sure if the following comment on UDP is > compatible with draft-ietf-tsvwg-rfc5405bis-12: >=20 > If the datacenter traffic consists > of such traffic (including UDP), one possible mitigation would be to > mark IP packets as ECT even when there is no transport that is > reacting to the marking. >=20 > Also, I don't fully understand the contect, e.g., what marking/drop > profiles are here referred to. Maybe some additional explanation could > help. As far as I know, this can be quite device-specific, e.g., many > routers would allow separate queues for non-TCP/non-IP traffic. In any > case, the handling of UDP seems to me rather unrelated to DCTCP, right? > If this is considered useful information for potential implementers, > Section 5 should also be better structured into DCTCP deployment issues > and other related deployment experiences in environments running DCTCP. >=20 > I am changing this text to suggest that deployments must take > into account segregation of non-TCP traffic and use schemes to ensure > such traffic does not suffer by being on the same queue as DCTCP > traffic. >=20 > Thanks >=20 > Michael >=20 > _______________________________________________ > tcpm mailing list > tcpm@ietf.org > https://www.ietf.org/mailman/listinfo/tcpm From nobody Wed Jul 20 14:03:23 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A6FF12D7CC for ; Wed, 20 Jul 2016 14:03:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.22 X-Spam-Level: X-Spam-Status: No, score=-4.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CVzDZnTNAKZJ for ; Wed, 20 Jul 2016 14:03:19 -0700 (PDT) Received: from dash.upc.es (dash.upc.es [147.83.2.50]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE54912D60C for ; Wed, 20 Jul 2016 14:03:18 -0700 (PDT) Received: from entelserver.upc.edu (entelserver.upc.es [147.83.39.4]) by dash.upc.es (8.14.1/8.13.1) with ESMTP id u6KL3GvP021565 for ; Wed, 20 Jul 2016 23:03:16 +0200 Received: from webmail.entel.upc.edu (webmail.entel.upc.edu [147.83.39.6]) by entelserver.upc.edu (Postfix) with ESMTP id 8E8671D53C1; Wed, 20 Jul 2016 23:03:15 +0200 (CEST) Received: from 213.61.227.39 by webmail.entel.upc.edu with HTTP; Wed, 20 Jul 2016 23:03:57 +0200 Message-ID: <7052c63cae95d6ef0024f5c9b2c052a8.squirrel@webmail.entel.upc.edu> In-Reply-To: References: Date: Wed, 20 Jul 2016 23:03:57 +0200 From: "Carles Gomez Montenegro" To: tcpm@ietf.org User-Agent: SquirrelMail/1.4.21-1.fc14 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-Mail-Scanned: Criba 2.0 + Clamd X-Greylist: ACL matched, not delayed by milter-greylist-4.4.3 (dash.upc.es [147.83.2.50]); Wed, 20 Jul 2016 23:03:16 +0200 (CEST) Archived-At: Subject: [tcpm] About long TCP connections for energy-constrained devices X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jul 2016 21:03:21 -0000 Hello, (First of all, and once again, thanks a lot for the great feedback received about draft-gomez-core-tcp-constrained-node-networks-00.) I would like to clarify one aspect with regard to a comment that was made during the tcpm session on Monday. The comment was that "it is not a good idea to keep long TCP connections for energy-constrained devices". If an energy-constrained device does not use any energy saving mechanism, the above statement is indeed correct. However, it is expected that such devices will use techniques such as radio duty-cycling (often related with MAC layer behavior) [1], which allow e.g. multiyear lifetime for devices powered by a coin cell battery (of course, assuming the relatively infrequent communication pattern typical of constrained node networks, and with appropriate configuration). Best regards, Carles [1] https://tools.ietf.org/html/draft-ietf-lwig-energy-efficient-04 From nobody Wed Jul 20 14:40:26 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13B4212D84B for ; Wed, 20 Jul 2016 14:40:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.187 X-Spam-Level: X-Spam-Status: No, score=-8.187 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.287] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fWFWnUDLT2SD for ; Wed, 20 Jul 2016 14:40:23 -0700 (PDT) Received: from boreas.isi.edu (boreas.isi.edu [128.9.160.161]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 02CFD12D866 for ; Wed, 20 Jul 2016 14:40:07 -0700 (PDT) Received: from [128.9.184.116] ([128.9.184.116]) (authenticated bits=0) by boreas.isi.edu (8.13.8/8.13.8) with ESMTP id u6KLdUpm009692 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Wed, 20 Jul 2016 14:39:30 -0700 (PDT) To: Carles Gomez Montenegro , tcpm@ietf.org References: <7052c63cae95d6ef0024f5c9b2c052a8.squirrel@webmail.entel.upc.edu> From: Joe Touch Message-ID: <578FEF92.9070501@isi.edu> Date: Wed, 20 Jul 2016 14:39:30 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.7.2 MIME-Version: 1.0 In-Reply-To: <7052c63cae95d6ef0024f5c9b2c052a8.squirrel@webmail.entel.upc.edu> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-ISI-4-43-8-MailScanner: Found to be clean X-MailScanner-From: touch@isi.edu Archived-At: Subject: Re: [tcpm] About long TCP connections for energy-constrained devices X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jul 2016 21:40:25 -0000 On 7/20/2016 2:03 PM, Carles Gomez Montenegro wrote: > Hello, > > (First of all, and once again, thanks a lot for the great feedback > received about draft-gomez-core-tcp-constrained-node-networks-00.) > > I would like to clarify one aspect with regard to a comment that was made > during the tcpm session on Monday. The comment was that "it is not a good > idea to keep long TCP connections for energy-constrained devices". > > If an energy-constrained device does not use any energy saving mechanism, > the above statement is indeed correct. However, it is expected that such > devices will use techniques such as radio duty-cycling (often related with > MAC layer behavior) [1], which allow e.g. multiyear lifetime for devices > powered by a coin cell battery (of course, assuming the relatively > infrequent communication pattern typical of constrained node networks, and > with appropriate configuration). Idle TCP, without keepalives activated, is just state. Keeping it "alive" doesn't "require" anything on such a device except low (or no)-energy memory (e.g., flash). The only issue is whether the device wants to continue interacting - it is that desire, not anything about TCP, which would require leaving the receive radio active. Joe From nobody Fri Jul 22 02:20:48 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CF5E12DBDB; Fri, 22 Jul 2016 02:20:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 75hpyLrROttW; Fri, 22 Jul 2016 02:20:41 -0700 (PDT) Received: from server.dnsblock1.com (server.dnsblock1.com [85.13.236.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 502A512DBCD; Fri, 22 Jul 2016 02:20:41 -0700 (PDT) Received: from dhcp-b315.meeting.ietf.org ([31.133.179.21]:42556) by server.dnsblock1.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.87) (envelope-from ) id 1bQWdL-00085E-HG; Fri, 22 Jul 2016 10:20:39 +0100 To: marcelo bagnulo braun From: Bob Briscoe Message-ID: <5791E566.7010201@bobbriscoe.net> Date: Fri, 22 Jul 2016 10:20:38 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.8.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server.dnsblock1.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - bobbriscoe.net X-Get-Message-Sender-Via: server.dnsblock1.com: authenticated_id: in@bobbriscoe.net X-Authenticated-Sender: server.dnsblock1.com: in@bobbriscoe.net Archived-At: Cc: tcpm IETF list , TCP Prague List Subject: [tcpm] Another requirement that L4S/TCPPrague depends on X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jul 2016 09:20:43 -0000 Marcelo, We need to add this I-D to the list of requirements that TCP Prague will have to depend on - in the L4S Problem Statement (assuming it could turn into an L4S architecture draft). A Mechanism for ECN Path Probing and Fallback https://tools.ietf.org/html/draft-kuehlewind-tcpm-ecn-fallback-01 Just asked one of the authors (Mirja). She says it has some wrong stuff in it, so it will need updating quite a bit anyway. And it will need to be updated wrt L4S changes. The probing and fall-back logic relevant to AccECN is already in draft-ietf-tcpm-accurate-ecn, which will have to be a prerequisite for L4S in TCP. Nonetheless, this draft is broader than AccECN, and broader than L4S: * It ought to cover any transport, not just TCP. * And even in the case of TCP, it covers Classic ECN * and even in the case of TCP Prague, it would cover the fall-back behaviour of the sending handler (at either end of a TCP connection), because that was ruled out of scope for AccECN. Bob -- ________________________________________________________________ Bob Briscoe http://bobbriscoe.net/ From nobody Sat Jul 23 12:37:23 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00C6B12D0EC for ; Sat, 23 Jul 2016 12:37:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.821 X-Spam-Level: X-Spam-Status: No, score=-1.821 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_NEUTRAL=0.779] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RDT6qprXuJks for ; Sat, 23 Jul 2016 12:37:20 -0700 (PDT) Received: from julia1.inet.fi (mta-out1.inet.fi [62.71.2.230]) by ietfa.amsl.com (Postfix) with ESMTP id ABC2D12D0E1 for ; Sat, 23 Jul 2016 12:37:19 -0700 (PDT) Received: from [172.20.10.3] (188.238.3.178) by julia1.inet.fi (9.0.002.03-2-gbe5d057) (authenticated as saropa-1) id 5782991C0057AD3E for tcpm@ietf.org; Sat, 23 Jul 2016 22:36:38 +0300 From: Pasi Sarolahti Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-Id: <1269F803-2ED5-40AB-A8C7-EDC100660D0E@iki.fi> Date: Sat, 23 Jul 2016 22:37:23 +0300 To: "tcpm@ietf.org Extensions" Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) Archived-At: Subject: [tcpm] Draft TCPM minutes from IETF-96 X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Jul 2016 19:37:22 -0000 Hi, The meeting notes from Berlin are at = https://www.ietf.org/proceedings/96/minutes/minutes-96-tcpm . Please = tell tcpm-chairs if there are errors or if we missed something. Thanks to Gorry and Brian for excellent note taking! - Pasi From nobody Tue Jul 26 09:25:39 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 52D4012D125 for ; Tue, 26 Jul 2016 09:25:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PvOLBmbzGILT for ; Tue, 26 Jul 2016 09:25:36 -0700 (PDT) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0090.outbound.protection.outlook.com [104.47.38.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4706C12B054 for ; Tue, 26 Jul 2016 09:25:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=AlmauQqKAbHFD4D+IrgS+HuIev3q3IiV8iAEdnD90fQ=; b=Xm7MS9Gu/gwWN+rcnGOM1s6q9r/scjcrr4cWmpAHXy3T8syPsHI7eVEWISGBsHADIcPjNShOomw0lR0p9lWBO4YAGp1I7Kx3cqgLKMYxM2KveVW/4Sx+EKNo/e7tDhv0O6olGbnLwBvoW5p0qJqQpzLrl3Tb47kN/xMXkrryXL4= Received: from BN1PR03MB008.namprd03.prod.outlook.com (10.255.224.38) by BN1PR03MB007.namprd03.prod.outlook.com (10.255.224.37) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.539.14; Tue, 26 Jul 2016 16:25:32 +0000 Received: from BN1PR03MB008.namprd03.prod.outlook.com ([169.254.5.63]) by BN1PR03MB008.namprd03.prod.outlook.com ([169.254.5.63]) with mapi id 15.01.0523.031; Tue, 26 Jul 2016 16:25:32 +0000 From: Praveen Balasubramanian To: Yuchung Cheng Thread-Topic: Eifel on Windows stack Thread-Index: AQHR4Z1JKsdNkjXzoU2y++fX9Smjg6Aq73UA Date: Tue, 26 Jul 2016 16:25:32 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=pravb@microsoft.com; x-originating-ip: [2001:4898:80e8:9::584] x-ms-office365-filtering-correlation-id: f654d682-0b98-484d-e635-08d3b5717735 x-microsoft-exchange-diagnostics: 1; BN1PR03MB007; 6:TmqIN6BPBPNWKRp4wMOJVvbpPsiY0E0EYJgl3KAI2aiK2allfB1xyjOaQ6KSHKLRDUwi777TpPRTwuabOHuOPV4/L1ReKRNGcurWpqcqTRD7hLDsdige5sRl3LMvrE+ojKR99GbIVhQNv22K8dB/kUaAHBTKPjMUEfq3RxqhoOwrfTYrJ+s1d8r14Wj7KncBwS77f8mFMuwWvueTflU2XWM3kJtW2BZ+GP7D/bemqdCPhIeGum7Vo8c0XHEXWybmlBIK1sTKtvpkXoqb3QBXVNOaC5laeN0k4sokPWpIVX5eCMXu+YGgN4BTTvjZckw9Wj9cNTdeCg2P/YqtDx25Nw==; 5:zSEEFTUS2HAhQYugi0eRZIUEEMRN47dqjjjTIB+RGrOkLCV3pggiMY5h48qsIombsR48Azd5EK3XYTyQ+cynkA3rZ+/fYIkyUZQiouvQX1PJlZlEVoK0ZYDlLnJmo1Ha+FzUvU29C9ZGnD9C3Jjqeg==; 24:vABbLOCTL6i+mlHvyAvsR7Vntt+ghM5xH0xRptx9ylBU3t97nIrUsnQ7jKXRyUYXI7rZfTMvoq2wCtjSRd0Rc431yKDOe3i0e8Alu8qvexg=; 7:OGW8eoPh+jTpWaBvxOzvj+HiFlU7Gm04QVMcv5IE+M5z2V9grDLzwkG8i1HPvfZDCriqRTn4Cs6tz22hjRO4L+/WcAa/RnJX4HgZ2/CyeMfNZIKxr3YgztYIMzDCb/ClOtAPkWdxMmPdGrkMydzSveKJUS/eGwKIY5qR3A1dGt7c2/2MT7N33zx5T0CF3mkiMnl9WlaqmBVatzwBiFUKL0iCcnxyfIsrGQcullQZthx8FA7zd3DHjz/KUQIgPQ2Q x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN1PR03MB007; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(211936372134217)(21748063052155)(21532816269658); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026)(61426038)(61427038); SRVR:BN1PR03MB007; BCL:0; PCL:0; RULEID:; SRVR:BN1PR03MB007; x-forefront-prvs: 00159D1518 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(189002)(199003)(51914003)(377454003)(15975445007)(86362001)(3280700002)(92566002)(33656002)(19300405004)(99286002)(10090500001)(2900100001)(2950100001)(19580405001)(19580395003)(8990500004)(586003)(5002640100001)(19625215002)(10400500002)(5005710100001)(10290500002)(189998001)(81166006)(68736007)(3480700004)(110136002)(105586002)(87936001)(8936002)(74316002)(86612001)(76576001)(790700001)(6116002)(7736002)(101416001)(106356001)(76176999)(8676002)(81156014)(50986999)(3660700001)(97736004)(11100500001)(54356999)(4326007)(9686002)(2906002)(16236675004)(7846002)(5003600100003)(7696003)(106116001)(122556002)(102836003)(3826002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR03MB007; H:BN1PR03MB008.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BN1PR03MB008E49EE7FB7EF644F0B1CBB60E0BN1PR03MB008namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Jul 2016 16:25:32.3574 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR03MB007 Archived-At: Cc: "tcpm@ietf.org Extensions" Subject: Re: [tcpm] Eifel on Windows stack X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jul 2016 16:25:38 -0000 --_000_BN1PR03MB008E49EE7FB7EF644F0B1CBB60E0BN1PR03MB008namprd_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Q3duZCB1bmRvIGlzIG9ubHkgc3VwcG9ydGVkIHZpYSB0aGUgRi1SVE8gc2NoZW1lLiBFaWZmZWwg aXMgbm90IHN1cHBvcnRlZC4gVENQIFRpbWVzdGFtcHMgYXJlIGRpc2FibGVkIGJ5IGRlZmF1bHQg aW4gV2luZG93cy4NCg0KUkZDIDYyOTggaXMgc3VwcG9ydGVkIGV4Y2VwdCBmb3IgdGhlIGNoYW5n ZSB0byB0aGUgaW5pdGlhbCBSVE8gZnJvbSAzIHNlY29uZHMgdG8gMSBzZWNvbmQuIEhvd2V2ZXIg dGhlcmUgaXMgYSBzb2NrZXQgb3B0aW9uIFNJT19UQ1BfSU5JVElBTF9SVE8gYXMgd2VsbCBhcyBh IGdsb2JhbCBzZXR0aW5nIHdoaWNoIGNhbiBiZSB1c2VkIHRvIHNldCB0aGUgaW5pdGlhbCBSVE8g dG8gMSBzZWNvbmQuIFNpbmNlIFdpbmRvd3MgOCwgV2luaW5ldCB1c2VzIHRoaXMgc29ja2V0IG9w dGlvbiB0byBzZXQgaW5pdGlhbCBSVE8gYXMgMSBzZWNvbmQgYW5kIGhlbmNlIGNvbm5lY3Rpb25z IHVzZWQgYnkgYnJvd3NlcnMgYW5kIEhUVFAgY2xpZW50cyBoYXZlIGxvd2VyIFNZTiAoYW5kIGhl bmNlIGNvbm5lY3QgQVBJKSB0aW1lb3V0cy4gQWxzbywgV2luZG93cyBkb2VzIG5vdCByZXZlcnQg dG8gdGhlIDMgc2Vjb25kIGluaXRpYWwgUlRPIGlmIHRoZSBTWU4gaGFzIHRvIGJlIHJldHJhbnNt aXR0ZWQuDQoNCkZyb206IFl1Y2h1bmcgQ2hlbmcgW21haWx0bzp5Y2hlbmdAZ29vZ2xlLmNvbV0N ClNlbnQ6IFR1ZXNkYXksIEp1bHkgMTksIDIwMTYgMjowOSBBTQ0KVG86IFByYXZlZW4gQmFsYXN1 YnJhbWFuaWFuIDxwcmF2YkBtaWNyb3NvZnQuY29tPg0KQ2M6IHRjcG1AaWV0Zi5vcmcgRXh0ZW5z aW9ucyA8dGNwbUBpZXRmLm9yZz4NClN1YmplY3Q6IEVpZmVsIG9uIFdpbmRvd3Mgc3RhY2sNCg0K Rmlyc3QgdGhhbmtzIGZvciB0aGUgcHJlc2VudGF0aW9uIG9uIFcgc3RhY2suIEZvciB5ZWFycyBp dCBoYXMgcmVtYWluZWQgbXlzdGVyaW91cyBmb3IgbWFueSBvZiB1cyAoYXQgbGVhc3QgbXlzZWxm KS4gV2UgaGFkIHRvIHVzZSBpbmZlcmVuY2UgdGVjaG5pcXVlIHRvIGZpbmQgV2luZG93cyBzZXR0 aW5ncyBpZiB0aGV5IGFyZSBub3QgY2xlYXJseSBwdWJsaWNseSBkb2N1bWVudGVkLiAoZS5nLiwg ZGVsYXllZC1BQ0sgdGltZW91dCkNCg0KRG9lcyBXaW5kb3dzIHN1cHBvcnQgUkZDNDAxNSBhbmQg UkZDMzUyMiwgaWUuIGN3bmQgdW5kbywgYWthIEVpZmVsPw0KDQpJIGFtIGN1cmlvdXNseSBpdHMg c3VwcG9ydCBpbiBXaW5kb3dzIChhcyB3ZWxsIEZyZWVCU0QpLiBUQ1AgdW5kbyBpcyBvbmUgb2Yg dGhlIG1vc3QgY29tcGxpY2F0ZWQgZXNvdGVyaWMgY29kZSBpbiBMaW51eC4gSXQgaXMgc29tZXdo YXQgaGVscGZ1bCB1c2luZyB0aGUgVFMtb3B0IGFwcHJvYWNoLiBUaGUgRFNBQ0sgYXBwcm9hY2gg aXMgbm90IHRoYXQgdXNlZnVsIGJ1dCBpcyBtb3JlIGNvbXBsaWNhdGVkLg0KDQpBbHNvIGRvZXMg V2luZG93cyB1c2UgdGhlIHN0YW5kYXJkIFJUTyBmb3JtdWxhIChSRkM2Mjk4KT8NCg== --_000_BN1PR03MB008E49EE7FB7EF644F0B1CBB60E0BN1PR03MB008namprd_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBz cGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjojOTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5tc29ub3JtYWwwLCBs aS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7 DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjEyLjBw dDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9DQpzcGFuLkVtYWlsU3R5 bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21z by1zdHlsZS10eXBlOnBlcnNvbmFsLWNvbXBvc2U7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5 bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9 DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGlu IDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlv bjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVs dHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0t W2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlk bWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2Vu ZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5r PSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkN3bmQgdW5kbyBpcyBvbmx5IHN1cHBvcnRlZCB2aWEgdGhl IEYtUlRPIHNjaGVtZS4gRWlmZmVsIGlzIG5vdCBzdXBwb3J0ZWQuIFRDUCBUaW1lc3RhbXBzIGFy ZSBkaXNhYmxlZCBieSBkZWZhdWx0IGluIFdpbmRvd3MuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+UkZDIDYy OTggaXMgc3VwcG9ydGVkIGV4Y2VwdCBmb3IgdGhlIGNoYW5nZSB0byB0aGUgaW5pdGlhbCBSVE8g ZnJvbSAzIHNlY29uZHMgdG8gMSBzZWNvbmQuIEhvd2V2ZXIgdGhlcmUgaXMgYSBzb2NrZXQgb3B0 aW9uIFNJT19UQ1BfSU5JVElBTF9SVE8gYXMgd2VsbCBhcyBhIGdsb2JhbCBzZXR0aW5nDQogd2hp Y2ggY2FuIGJlIHVzZWQgdG8gc2V0IHRoZSBpbml0aWFsIFJUTyB0byAxIHNlY29uZC4gU2luY2Ug V2luZG93cyA4LCBXaW5pbmV0IHVzZXMgdGhpcyBzb2NrZXQgb3B0aW9uIHRvIHNldCBpbml0aWFs IFJUTyBhcyAxIHNlY29uZCBhbmQgaGVuY2UgY29ubmVjdGlvbnMgdXNlZCBieSBicm93c2VycyBh bmQgSFRUUCBjbGllbnRzIGhhdmUgbG93ZXIgU1lOIChhbmQgaGVuY2UgY29ubmVjdCBBUEkpIHRp bWVvdXRzLiBBbHNvLCBXaW5kb3dzIGRvZXMNCiBub3QgcmV2ZXJ0IHRvIHRoZSAzIHNlY29uZCBp bml0aWFsIFJUTyBpZiB0aGUgU1lOIGhhcyB0byBiZSByZXRyYW5zbWl0dGVkLiA8bzpwPg0KPC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4gWXVjaHVuZyBDaGVu ZyBbbWFpbHRvOnljaGVuZ0Bnb29nbGUuY29tXQ0KPGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXks IEp1bHkgMTksIDIwMTYgMjowOSBBTTxicj4NCjxiPlRvOjwvYj4gUHJhdmVlbiBCYWxhc3VicmFt YW5pYW4gJmx0O3ByYXZiQG1pY3Jvc29mdC5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiB0Y3BtQGll dGYub3JnIEV4dGVuc2lvbnMgJmx0O3RjcG1AaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDo8 L2I+IEVpZmVsIG9uIFdpbmRvd3Mgc3RhY2s8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5GaXJzdCB0aGFua3MgZm9yIHRoZSBwcmVzZW50YXRpb24gb24gVyBzdGFjay4gRm9y IHllYXJzIGl0IGhhcyByZW1haW5lZCBteXN0ZXJpb3VzIGZvciBtYW55IG9mIHVzIChhdCBsZWFz dCBteXNlbGYpLiBXZSBoYWQgdG8gdXNlIGluZmVyZW5jZSB0ZWNobmlxdWUgdG8gZmluZCBXaW5k b3dzIHNldHRpbmdzIGlmIHRoZXkgYXJlIG5vdCBjbGVhcmx5IHB1YmxpY2x5IGRvY3VtZW50ZWQu IChlLmcuLCBkZWxheWVkLUFDSw0KIHRpbWVvdXQpPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5Eb2VzIFdpbmRvd3Mgc3VwcG9ydCBSRkM0MDE1IGFuZCBSRkMz NTIyLCBpZS4gY3duZCB1bmRvLCBha2EgRWlmZWw/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgYW0gY3VyaW91c2x5IGl0cyBzdXBwb3J0IGlu IFdpbmRvd3MgKGFzIHdlbGwgRnJlZUJTRCkuJm5ic3A7VENQIHVuZG8gaXMgb25lIG9mIHRoZSBt b3N0IGNvbXBsaWNhdGVkIGVzb3RlcmljIGNvZGUgaW4gTGludXguIEl0IGlzIHNvbWV3aGF0IGhl bHBmdWwgdXNpbmcgdGhlIFRTLW9wdCBhcHByb2FjaC4gVGhlIERTQUNLIGFwcHJvYWNoIGlzIG5v dCB0aGF0IHVzZWZ1bCBidXQgaXMgbW9yZSBjb21wbGljYXRlZC48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QWxzbyBkb2VzIFdpbmRvd3MgdXNl IHRoZSBzdGFuZGFyZCBSVE8gZm9ybXVsYSAoUkZDNjI5OCk/PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_BN1PR03MB008E49EE7FB7EF644F0B1CBB60E0BN1PR03MB008namprd_-- From nobody Tue Jul 26 10:18:54 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B6A012D1CB for ; Tue, 26 Jul 2016 10:18:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.988 X-Spam-Level: X-Spam-Status: No, score=-3.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bkCZhe_YdhNz for ; Tue, 26 Jul 2016 10:18:48 -0700 (PDT) Received: from mail-io0-x22b.google.com (mail-io0-x22b.google.com [IPv6:2607:f8b0:4001:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CB8FB12D83B for ; Tue, 26 Jul 2016 10:18:41 -0700 (PDT) Received: by mail-io0-x22b.google.com with SMTP id m101so31549585ioi.2 for ; Tue, 26 Jul 2016 10:18:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=P7orV8w2sme7JJ2rhxIy2aDtp5pT3S0V5nDaEvMid8U=; b=mR3DjeidOSRcatZj0tCMItE6cK4cwNKyQAPyp+auqbeW/fGGgmNQzmKEcKOV7Wcepm cg3WpjbzZ4kwMfkmuBLGM1rPIYuAHjARYCu6/ML82hW/Me70McfB1vm61/Eik4Ioqxr4 XYmLnXpWDsi9tMnl0F2GXuGWF74eVTPUgohENuGKY/CZdzNUaSfwLWMIQXwHdacyWeo4 dVOfNhDhrN7Pu/nqTWUWm/ZvSJ3sjBxLouPNXs9yHuFQcNL+1j6vE9PVw39BX2BNXiSq LOl2sePvjzYa26QAOHGjPDZ5LhGaIVt0WnE8z0ZzztT7TMj1fTM5G2BllM6w0RDnelPV ckfQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=P7orV8w2sme7JJ2rhxIy2aDtp5pT3S0V5nDaEvMid8U=; b=hZe89Ll7y5oCNnqENkRTiW5tneH+swDwhhuc11HmJ6NZKf+i3inToQkbZV5eGvhfGD neMn73f0+lYSrmxjy6zI9khtk1rMQhVlkPXASWakf5Sub3jWSlaXaKmO5eMKiYi9bamu fnZfXD3/fx1utQDWvv3WERaNrf+m2GcWgphujH/vQC0FQq5KMuJsI1DsqBHZ6jTU03HV v5DR4y0tIto+jzE1fdBBp+z1ieLH5ZnZRDH43bqeV9XwYb/YZ1WjTX5JsJNp8x2JfC1k vqfAhYF87rB/tJ6U6zGmbPdSp0j1iNNAriRtmX8EzzrNWUoNOD1BqUtR9W4kodxlNv45 0WRA== X-Gm-Message-State: AEkoouvF+HbCG+4kKsP0GC4m5EoxB37/geKCWfCKhQWkGBlDLcz2nEbOcs+GRYyOIVJ+jbzTwCY/w98/7TsskXEv X-Received: by 10.107.59.7 with SMTP id i7mr28581027ioa.190.1469553520854; Tue, 26 Jul 2016 10:18:40 -0700 (PDT) MIME-Version: 1.0 Received: by 10.64.244.103 with HTTP; Tue, 26 Jul 2016 10:18:00 -0700 (PDT) In-Reply-To: References: From: Yuchung Cheng Date: Tue, 26 Jul 2016 10:18:00 -0700 Message-ID: To: Kyle Rose Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: tcpinc , "tcpm@ietf.org Extensions" , "Mirja Kuehlewind \(IETF\)" Subject: Re: [tcpm] [tcpinc] TCP's treatment of data in SYN packets X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jul 2016 17:18:50 -0000 On Sun, Jul 24, 2016 at 4:45 PM, Kyle Rose wrote: > > In the absence of a TFO cookie, what is the behavior of TCP in the presen= ce of data in the SYN packet? The ability of ENO to send early data on sess= ion resumption to servers that potentially don't understand ENO depends on = the servers throwing this data away so it can be replaced in the following = ACK. > > RFC 4987 section 3.5 (https://tools.ietf.org/html/rfc4987#section-3.5) st= ates that: > > q( If data accompanies the SYN segment, then this data is not > acknowledged or stored by the receiver, and will require > retransmission. ) > > But I have read elsewhere that the server might queue it up and wait for = the 3WHS to complete (though if it is conformant, it will ACK only a single= byte for the SYN and have the blob retransmitted by the client anyway). We did some tests with this when during TFO development. AFAIK Linux, *BSD/iOS, Windows all return a SYN that acks only the ISN but not the data. None of them queues the data hence the active side needs to retransmit the data. But my knowledge is 5 years old. FWIW I and other TFO developers in other stacks (cc'd) have all found that some middle-boxes will crash or hang on receiving SYN-data (regardless of TFO cookie option or not). For instance, I found a bug in Linux netfliter that the conntrack module assumes SYN never carries data, so the internal sequence was only incremented by one on SYN-data packe, and led to rejecting every packet afterward. Others have found FW blocking the IP completely (see last meetings material by Praveen). We were talking about putting a TFO-bis on these issues. > > I guess I'm interested in both normative and observed behavior. I'm happy= to inquire elsewhere if someone has a suggestion. (tcpm?) > > Kyle > > > _______________________________________________ > Tcpinc mailing list > Tcpinc@ietf.org > https://www.ietf.org/mailman/listinfo/tcpinc From nobody Tue Jul 26 15:11:06 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4CB0E12DAD5 for ; Tue, 26 Jul 2016 15:11:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=krose.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hMqR5ApBamF4 for ; Tue, 26 Jul 2016 15:11:02 -0700 (PDT) Received: from mail-qt0-x232.google.com (mail-qt0-x232.google.com [IPv6:2607:f8b0:400d:c0d::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4459412DADF for ; Tue, 26 Jul 2016 15:10:45 -0700 (PDT) Received: by mail-qt0-x232.google.com with SMTP id w38so19976744qtb.0 for ; Tue, 26 Jul 2016 15:10:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=krose.org; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=DFDpxYjoIf8Uh4aycO8vlGHi9uHEKErJ0OiLyZdmzkw=; b=C+yzW1oGLv4mo1OPOVTs2EBTd8dRjMF5eY1ZEcteFEKzzm7zGnkUFK/Ln64dlRVizr Gaa4y/Y8Vx8G7xQu2X9pbMU7/Y+0qcHPEnH1HOgAfIeS0xR7LUscEjk2SZlxzQb5+JVQ YykgkdWx8YhvbvZ/quawsK7Jot5wOC92vtHyU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=DFDpxYjoIf8Uh4aycO8vlGHi9uHEKErJ0OiLyZdmzkw=; b=CHgitys1I08xKJ8Gms95gNt/loyTOJtnW4rqh05FGdN/4YXb272QiXhcQghyzxm0YX 6W1sjesAwMrhrb+q/rEDgCMCmjWOLvJZQoW1dgHMA4r7k1tiDOme4N4sDbHTrOdXXtja Nmo8clxPHIisIRLOcrRkgBrxWr6QQYl0+6loCGVbCnk5R/fVOKitMyEsTUP6Uo+ko3JE IU98e+t8eWXCZ9D8CNd+ayHfgzvUlOZhMPwypiAd+PUZ02A8jJKOiK4+AOnUcn5Q0sMU pgB0vg60N4fti1rl46O3v+W4m2sEYaJUnK1eKzWVRpxdUNiyUkmIejLxKd24fQdVYOsD tW1w== X-Gm-Message-State: AEkoousv0PkG7F/JcSyahKFTWwnFhaX43beau+xHshLoitHdthIHYebDXC1Me3bKQvf9giTYnWWjezdH/bD9Xg== X-Received: by 10.237.46.166 with SMTP id k35mr43768947qtd.93.1469571044503; Tue, 26 Jul 2016 15:10:44 -0700 (PDT) MIME-Version: 1.0 Received: by 10.55.94.70 with HTTP; Tue, 26 Jul 2016 15:10:43 -0700 (PDT) X-Originating-IP: [72.246.0.14] In-Reply-To: References: From: Kyle Rose Date: Tue, 26 Jul 2016 18:10:43 -0400 Message-ID: To: Yuchung Cheng Content-Type: multipart/alternative; boundary=94eb2c08ca7c148b8c0538912ca5 Archived-At: Cc: tcpinc , "tcpm@ietf.org Extensions" , "Mirja Kuehlewind \(IETF\)" Subject: Re: [tcpm] [tcpinc] TCP's treatment of data in SYN packets X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jul 2016 22:11:04 -0000 --94eb2c08ca7c148b8c0538912ca5 Content-Type: text/plain; charset=UTF-8 > > But I have read elsewhere that the server might queue it up and wait for > the 3WHS to complete (though if it is conformant, it will ACK only a single > byte for the SYN and have the blob retransmitted by the client anyway). > > We did some tests with this when during TFO development. AFAIK Linux, > *BSD/iOS, Windows all return a SYN that acks only the ISN but not the > data. None of them queues the data hence the active side needs to > retransmit the data. But my knowledge is 5 years old. > Which naturally makes me curious if this behavior has changed since TFO was implemented. What sort of tools do/did you have to do this kind of probing? > FWIW I and other TFO developers in other stacks (cc'd) have all found > that some middle-boxes will crash or hang on receiving SYN-data > (regardless of TFO cookie option or not). For instance, I found a bug > in Linux netfliter that the conntrack module assumes SYN never carries > data, so the internal sequence was only incremented by one on SYN-data > packe, and led to rejecting every packet afterward. Others have found > FW blocking the IP completely (see last meetings material by Praveen). > We were talking about putting a TFO-bis on these issues. > This is really good information: thanks! I think if tcpinc decides to pursue early data, we'll want to learn as much as possible from your experience. Kyle --94eb2c08ca7c148b8c0538912ca5 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

> But I have read elsewhere that the server might queue it up and wait f= or the 3WHS to complete (though if it is conformant, it will ACK only a sin= gle byte for the SYN and have the blob retransmitted by the client anyway).=

We did some tests with this when during TFO development. AFAIK Linux= ,
*BSD/iOS, Windows all return a SYN that acks only the ISN but not the
data. None of them queues the data hence the active side needs to
retransmit the data. But my knowledge is 5 years old.

Which naturally makes me curious if this behavior has = changed since TFO was implemented. What sort of tools do/did you have to do= this kind of probing?
=C2=A0
FWIW I and other TFO developers in other stacks (cc'd) have all found that some middle-boxes will crash or hang on receiving SYN-data
(regardless of TFO cookie option or not). For instance, I found a bug
in Linux netfliter that the conntrack module assumes SYN never carries
data, so the internal sequence was only incremented by one on SYN-data
packe, and led to rejecting every packet afterward. Others have found
FW blocking the IP completely (see last meetings material by Praveen).
We were talking about putting a TFO-bis on these issues.

This is really good information: tha= nks! I think if tcpinc decides to pursue early data, we'll want to lear= n as much as possible from your experience.

Kyle

--94eb2c08ca7c148b8c0538912ca5-- From nobody Wed Jul 27 10:35:14 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 118BF12D0FD for ; Wed, 27 Jul 2016 10:35:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.188 X-Spam-Level: X-Spam-Status: No, score=-2.188 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.999, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rkiDlDGBVsZI for ; Wed, 27 Jul 2016 10:35:11 -0700 (PDT) Received: from market.scs.stanford.edu (www.scs.stanford.edu [IPv6:2001:470:806d:1::9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5FD6C12D740 for ; Wed, 27 Jul 2016 10:35:11 -0700 (PDT) Received: from market.scs.stanford.edu (localhost.scs.stanford.edu [127.0.0.1]) by market.scs.stanford.edu (8.14.7/8.14.7) with ESMTP id u6RHZAOu002643; Wed, 27 Jul 2016 10:35:10 -0700 (PDT) Received: (from dm@localhost) by market.scs.stanford.edu (8.14.7/8.14.7/Submit) id u6RHZ9R5030841; Wed, 27 Jul 2016 10:35:09 -0700 (PDT) X-Authentication-Warning: market.scs.stanford.edu: dm set sender to dm-list-tcpcrypt@scs.stanford.edu using -f From: David Mazieres To: Kyle Rose , Yuchung Cheng In-Reply-To: References: Date: Wed, 27 Jul 2016 10:35:09 -0700 Message-ID: <87wpk7x9v6.fsf@ta.scs.stanford.edu> MIME-Version: 1.0 Content-Type: text/plain Archived-At: Cc: tcpinc , "tcpm@ietf.org Extensions" , "Mirja Kuehlewind \(IETF\)" Subject: Re: [tcpm] [tcpinc] TCP's treatment of data in SYN packets X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: David Mazieres expires 2016-10-25 PDT List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jul 2016 17:35:12 -0000 Kyle Rose writes: > This is really good information: thanks! I think if tcpinc decides to > pursue early data, we'll want to learn as much as possible from your > experience. So just to scope what we had in mind, "pursue early data" sounds a bit aggressive. What I think we had in mind is just saying something about what receivers MUST do when receiving a SYN segment with data, not encouraging people to do that. Since TFO will eventually cause people to address these middlebox issues, it would be nice to avoid creating a second round of problems where TCP-ENO implementations also crash or do weird stuff. And it would also be nice if TCP-ENO didn't disable this possible optimization. What I had in mind was something along the lines of saying that the last TEP suboption in host A's SYN segment is the SYN TEP, and that host B MUST ignore and MUST NOT ACK any data in SYN segments unless the negotiated TEP is the SYN TEP and that TEP explicitly defines the use of data in SYN segments. Furthermore, SYN data MUST be discarded in the event that TCP-ENO is disabled, even when such data has already been ACKed. TEPs MAY define the use of data in SYN segments for when they are the SYN TEP, but SHOULD limit such usage to cases in which it is known that the passive opener and network path both support ENO. David From nobody Wed Jul 27 11:11:36 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61DAD12D821 for ; Wed, 27 Jul 2016 11:11:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=krose.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WsmuutO2y67K for ; Wed, 27 Jul 2016 11:11:30 -0700 (PDT) Received: from mail-qk0-x22e.google.com (mail-qk0-x22e.google.com [IPv6:2607:f8b0:400d:c09::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2A1612D830 for ; Wed, 27 Jul 2016 11:11:29 -0700 (PDT) Received: by mail-qk0-x22e.google.com with SMTP id x1so41608320qkb.3 for ; Wed, 27 Jul 2016 11:11:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=krose.org; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=xQNMhJB+XpUyEWF8SYJFQCt2eje1hPjzuUxyPYpmkqU=; b=KP6CTtN6ZQzitjx5IpkM8Ffj2imFPjv3BrGO6meX35vSmIYhG/fvhGBdyw8/qWIC47 b1Lj3I2xHqVBHVFI5EuFfUPOcw6e9l37f4Vk/twB3wJGmjpMZlrWF0kmjgUP1Bqs9bGo ifzsfe27JoHHFBguq2Bqz+1J6PY+qMMflA3dM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=xQNMhJB+XpUyEWF8SYJFQCt2eje1hPjzuUxyPYpmkqU=; b=kV9wtsyLuBAlXJQfsDHjLj2WBZQM+OdJVJ674vYq+bqkGMXzxmEIjlLiyqpjMfvvK1 Y6F1ErL7HGvM07cx6KZKHHByUkF00bSJQzZ+GcomNfTNg4GovdAivGLmQ+CAxz31nK0j tlux5IupLZW9fBI80/NfOhmWPs7XHmzbDS20d4RP+ijHZHLmtr1ZDCLEaa5IPD9E6BGK Y34iXqR8rF+wPluc1jkwF7TVFXcB4C4vaKUESkjVhKnfpcWPoHXLrgda3hrz1rKsWlku k2VkbUfWITuJLzYRv9WTJq+YpdriX/kVsDHSful2FcV98L5OBd0XGfWIUfdKryeWuM25 Rmzw== X-Gm-Message-State: AEkoout33eMOhHu+VZmqScx4uoWtMk3WLULyaBVNzTHt5UI6gv4sgLFkWl/0PTd7JA7z/JdLDGJe37VHZtcCyA== X-Received: by 10.55.41.167 with SMTP id p39mr36715225qkp.119.1469643089079; Wed, 27 Jul 2016 11:11:29 -0700 (PDT) MIME-Version: 1.0 Received: by 10.55.94.70 with HTTP; Wed, 27 Jul 2016 11:11:28 -0700 (PDT) X-Originating-IP: [72.246.0.14] In-Reply-To: <87wpk7x9v6.fsf@ta.scs.stanford.edu> References: <87wpk7x9v6.fsf@ta.scs.stanford.edu> From: Kyle Rose Date: Wed, 27 Jul 2016 14:11:28 -0400 Message-ID: To: David Mazieres expires 2016-10-25 PDT Content-Type: multipart/alternative; boundary=001a11493a044599260538a1f2b8 Archived-At: Cc: tcpinc , "tcpm@ietf.org Extensions" , "Mirja Kuehlewind \(IETF\)" Subject: Re: [tcpm] [tcpinc] TCP's treatment of data in SYN packets X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jul 2016 18:11:33 -0000 --001a11493a044599260538a1f2b8 Content-Type: text/plain; charset=UTF-8 On Wed, Jul 27, 2016 at 1:35 PM, David Mazieres < dm-list-tcpcrypt@scs.stanford.edu> wrote: > What I had in mind was something along the lines of saying that the last > TEP suboption in host A's SYN segment is the SYN TEP, and that host B > MUST ignore and MUST NOT ACK any data in SYN segments unless the > negotiated TEP is the SYN TEP and that TEP explicitly defines the use of > data in SYN segments. Furthermore, SYN data MUST be discarded in the > event that TCP-ENO is disabled, even when such data has already been > ACKed. TEPs MAY define the use of data in SYN segments for when they > are the SYN TEP, but SHOULD limit such usage to cases in which it is > known that the passive opener and network path both support ENO. > It's interoperability with older stacks that drove my question: if there are multiple machines behind an IP, some of which support ENO and some of which don't, do we break the charter by sending *any* data in the SYN (outside of TFO, which as we've established is unusable for tcpinc)? The charter says: q( The protocol must gracefully fall-back to TCP if the remote peer does not support the proposed extensions. ) If TCP's behavior in the absence of a TFO cookie is to discard data in the SYN, normatively and (especially) observationally, then your second sentence ("Furthermore, SYN data MUST be dscarded...") is true when a host doesn't support ENO, and so we can safely put whatever we like in the SYN. If not, then unexpected data in the SYN *might* be forwarded to the application as garbage by some TCP stacks, resulting in mostly-undefined behavior but almost certainly connection breakage; in that case, do we need some explicit signaling from the server on a prior connection for when SYN data on resumption attempts is okay, or is "...but SHOULD limit such usage..." good enough? Kyle --001a11493a044599260538a1f2b8 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
On Wed, Jul 27, 2016 at 1:35 PM, David Mazieres <dm-list-tcpcrypt@scs.stanford.edu> wrote:
What I had in mind was something along the lines of s= aying that the last
TEP suboption in host A's SYN segment is the SYN TEP, and that host B MUST ignore and MUST NOT ACK any data in SYN segments unless the
negotiated TEP is the SYN TEP and that TEP explicitly defines the use of data in SYN segments.=C2=A0 Furthermore, SYN data MUST be discarded in the<= br> event that TCP-ENO is disabled, even when such data has already been
ACKed.=C2=A0 TEPs MAY define the use of data in SYN segments for when they<= br> are the SYN TEP, but SHOULD limit such usage to cases in which it is
known that the passive opener and network path both support ENO.

It's interoperability with older stacks that drove my= question: if there are multiple machines behind an IP, some of which suppo= rt ENO and some of which don't, do we break the charter by sending *any= * data in the SYN (outside of TFO, which as we've established is unusab= le for tcpinc)?

The charter says: q( The protocol must gracefully fa= ll-back to TCP if the remote peer does not support the proposed extensions.= )

If TCP's behavior in the absence of a TFO cookie is to discar= d data in the SYN, normatively and (especially) observationally, then your = second sentence ("Furthermore, SYN data MUST be dscarded...") is = true when a host doesn't support ENO, and so we can safely put whatever= we like in the SYN.

If not, then unexpected data in the SYN *might*= be forwarded to the application as garbage by some TCP stacks, resulting i= n mostly-undefined behavior but almost certainly connection breakage; in th= at case, do we need some explicit signaling from the server on a prior conn= ection for when SYN data on resumption attempts is okay, or is "...but= SHOULD limit such usage..." good enough?

Kyle

--001a11493a044599260538a1f2b8-- From nobody Wed Jul 27 11:18:40 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BFD1912D1BB for ; Wed, 27 Jul 2016 11:18:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.187 X-Spam-Level: X-Spam-Status: No, score=-3.187 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.287] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hIYvNLfBXCyr for ; Wed, 27 Jul 2016 11:18:37 -0700 (PDT) Received: from wizmail.org (wizmail.org [IPv6:2a00:1940:107::2:0:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4150D12D098 for ; Wed, 27 Jul 2016 11:18:37 -0700 (PDT) Received: from [2a00:b900:109e:0:3e97:eff:feb2:e128] (helo=lap.dom.ain) by wizmail.org with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.87_RC110) id 1bSTPf-0004Eg-BJ for tcpm@ietf.org (return-path ); Wed, 27 Jul 2016 18:18:35 +0000 To: tcpm@ietf.org References: <87wpk7x9v6.fsf@ta.scs.stanford.edu> From: Jeremy Harris Message-ID: <2197dd4f-b130-4550-8fe8-e536e394cdd3@wizmail.org> Date: Wed, 27 Jul 2016 19:18:34 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: <87wpk7x9v6.fsf@ta.scs.stanford.edu> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-Pcms-Received-Sender: [2a00:b900:109e:0:3e97:eff:feb2:e128] (helo=lap.dom.ain) with esmtpsa Archived-At: Subject: Re: [tcpm] [tcpinc] TCP's treatment of data in SYN packets X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jul 2016 18:18:39 -0000 On 27/07/16 18:35, David Mazieres wrote: > Furthermore, SYN data MUST be discarded in the > event that TCP-ENO is disabled, even when such data has already been > ACKed. ^^^^^^^^^ This sounds like a recipe for implementation errors and confusion. -- Cheers, Jeremy From nobody Wed Jul 27 11:44:50 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CD0412D552 for ; Wed, 27 Jul 2016 11:44:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.187 X-Spam-Level: X-Spam-Status: No, score=-3.187 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.287] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u1m6pffLMGJ1 for ; Wed, 27 Jul 2016 11:44:47 -0700 (PDT) Received: from nitro.isi.edu (nitro.isi.edu [128.9.208.207]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5CA3A12B01A for ; Wed, 27 Jul 2016 11:44:47 -0700 (PDT) Received: from [128.9.160.211] (mul.isi.edu [128.9.160.211]) (authenticated bits=0) by nitro.isi.edu (8.13.8/8.13.8) with ESMTP id u6RIhvdK014158 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Wed, 27 Jul 2016 11:43:57 -0700 (PDT) To: Jeremy Harris , tcpm@ietf.org References: <87wpk7x9v6.fsf@ta.scs.stanford.edu> <2197dd4f-b130-4550-8fe8-e536e394cdd3@wizmail.org> From: Joe Touch Message-ID: <2b64fbcf-d31b-ae04-e903-cb8b234857d8@isi.edu> Date: Wed, 27 Jul 2016 11:43:57 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <2197dd4f-b130-4550-8fe8-e536e394cdd3@wizmail.org> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-MailScanner-ID: u6RIhvdK014158 X-ISI-4-69-MailScanner: Found to be clean X-MailScanner-From: touch@isi.edu Archived-At: Subject: Re: [tcpm] [tcpinc] TCP's treatment of data in SYN packets X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jul 2016 18:44:48 -0000 On 7/27/2016 11:18 AM, Jeremy Harris wrote: > On 27/07/16 18:35, David Mazieres wrote: >> Furthermore, SYN data MUST be discarded in the >> event that TCP-ENO is disabled, even when such data has already been >> ACKed. > ^^^^^^^^^ > This sounds like a recipe for implementation errors and confusion. Sounds like a semantics error. TCP should never ACK data it discards. It is possible to ACK the segment without ACKing the data -- I presume that's what is intended here. Joe From nobody Wed Jul 27 14:45:16 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B95F12D96E for ; Wed, 27 Jul 2016 14:45:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.188 X-Spam-Level: X-Spam-Status: No, score=-2.188 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.999, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1U17xif9CQDr for ; Wed, 27 Jul 2016 14:45:13 -0700 (PDT) Received: from market.scs.stanford.edu (www.scs.stanford.edu [IPv6:2001:470:806d:1::9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8949D12D95D for ; Wed, 27 Jul 2016 14:45:13 -0700 (PDT) Received: from market.scs.stanford.edu (localhost.scs.stanford.edu [127.0.0.1]) by market.scs.stanford.edu (8.14.7/8.14.7) with ESMTP id u6RLjCV8013259; Wed, 27 Jul 2016 14:45:12 -0700 (PDT) Received: (from dm@localhost) by market.scs.stanford.edu (8.14.7/8.14.7/Submit) id u6RLjBDg004281; Wed, 27 Jul 2016 14:45:11 -0700 (PDT) X-Authentication-Warning: market.scs.stanford.edu: dm set sender to dm-list-tcpcrypt@scs.stanford.edu using -f From: David Mazieres To: Kyle Rose In-Reply-To: References: <87wpk7x9v6.fsf@ta.scs.stanford.edu> Date: Wed, 27 Jul 2016 14:45:11 -0700 Message-ID: <877fc6ycuw.fsf@ta.scs.stanford.edu> MIME-Version: 1.0 Content-Type: text/plain Archived-At: Cc: tcpinc , "tcpm@ietf.org Extensions" , "Mirja Kuehlewind \(IETF\)" Subject: Re: [tcpm] [tcpinc] TCP's treatment of data in SYN packets X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: David Mazieres expires 2016-10-25 PDT List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jul 2016 21:45:14 -0000 Kyle Rose writes: > do we need some explicit signaling from the server on a prior > connection for when SYN data on resumption attempts is okay, or is > "...but SHOULD limit such usage..." good enough? This is precisely the question on which some input from more experienced members of the working group could be helpful. Basically I'd like to ensure that ENO conflicts as little as possible with future use of data in SYN segments. So rather than just flat-out prohibiting it (and having people not even test the corner case), I think it would be good to specify that receivers explicitly ignore the data in places where it couldn't possibly be useful. And then once you are there, why not say that TEPs MAY define data but probably shouldn't send it for the time being in the remaining cases. David From nobody Wed Jul 27 16:24:26 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9FD9512B074; Wed, 27 Jul 2016 16:24:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.336 X-Spam-Level: X-Spam-Status: No, score=-1.336 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_PASS=-0.001, SPF_SOFTFAIL=0.665] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=employees.org; domainkeys=pass (1024-bit key) header.from=dfawcus+lists-tcpcrypt@employees.org header.d=employees.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KG6HfYXNLAN2; Wed, 27 Jul 2016 16:24:22 -0700 (PDT) Received: from incoming.kjsl.com (inbound02.kjsl.com [IPv6:2001:1868:2002::144]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D973012DA19; Wed, 27 Jul 2016 16:24:21 -0700 (PDT) Received: from cowbell.employees.org ([IPv6:2001:1868:a000:17::142]) by ironport02.kjsl.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 27 Jul 2016 23:24:20 +0000 Received: from cowbell.employees.org (localhost [127.0.0.1]) by cowbell.employees.org (Postfix) with ESMTP id 288559CC81; Wed, 27 Jul 2016 16:24:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=employees.org; h=date:from :to:cc:subject:message-id:references:mime-version:content-type :in-reply-to; s=selector1; bh=tIOBVpxFuik9RBDyKmQgV5Xg9Js=; b=nO BPLCIewotNji51zTA56P8BYtvgovSMjdvmdw0Mz4/Y8m0h6mJBYXp4aPhN8Bi48R N58ldVDOItzamnvJVQitcF7XyBv/P8gDhZuY2YrhXJY8icFzX8lDw22haqpJuIM+ tn4/UXmcw9cYGaMdibYJ/3jzet60y+rYcXiEn4ybw= DomainKey-Signature: a=rsa-sha1; c=nofws; d=employees.org; h=date:from :to:cc:subject:message-id:references:mime-version:content-type :in-reply-to; q=dns; s=selector1; b=DJ1DtckH/dHISBimBJgXf7Wxiq4o e89yaeJy9rlZQGsqrK52nlFt0zFHd5K9TmXqE0f52fkOubtceRbCQ906xcmi7KTI bUuVT5hd/Gh4TTdhLlYKyn/wmHrDVBHyneYFSTXBdo7O2TGCjNgyKXCKtIjhLQPk HOCgBDjDptg4kXs= Received: by cowbell.employees.org (Postfix, from userid 1736) id 15D3D9CC7C; Wed, 27 Jul 2016 16:24:19 -0700 (PDT) Date: Thu, 28 Jul 2016 00:24:19 +0100 From: Derek Fawcus To: tcpinc Message-ID: <20160727232419.GA45841@cowbell.employees.org> References: <87wpk7x9v6.fsf@ta.scs.stanford.edu> <877fc6ycuw.fsf@ta.scs.stanford.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <877fc6ycuw.fsf@ta.scs.stanford.edu> User-Agent: Mutt/1.6.1 (2016-04-27) Archived-At: Cc: "tcpm@ietf.org Extensions" , Kyle Rose , "Mirja Kuehlewind \(IETF\)" , David Mazieres expires 2016-10-25 PDT Subject: Re: [tcpm] [tcpinc] TCP's treatment of data in SYN packets X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jul 2016 23:24:24 -0000 On Wed, Jul 27, 2016 at 02:45:11PM -0700, David Mazieres wrote: > > Basically I'd like to ensure that ENO conflicts as little as possible > with future use of data in SYN segments. My understanding of what TCP _allows_ (absent FO) is that one can send data in the SYN, it can be ACK'ed in the SYN-ACK, but there may be some text indicating it is not to be delivered to the receiving application unless and until the 3whs completes. Implying that a passive opener which chose to ack such data bytes would have to buffer such data until the handshake completes; but I'm not aware of any stack which actually works that way. (Due to DOS attack). So I'd expect it would probably be safe to start defining some new expectations / constraints for use of such data in SYN segments. However, one could envisage say a user space TCP stack (for a SERVER) which supported the following sequence: CLIENT SERVER 1) SYN-SENT --> --> SYN-RECEIVED 2) ESTABLISHED <-- <-- ESTABLISHED 3) FIN-WAIT-1 --> --> CLOSE-WAIT followed by the rest of the normal close sequence. i.e. something slightly similar to T/TCP but without trying to optimise the close sequence, while still allowing a request-response exchange to be done in 1-RTT if all goes well. DF From nobody Wed Jul 27 23:38:03 2016 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 601E012D0A1; Wed, 27 Jul 2016 23:37:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.336 X-Spam-Level: X-Spam-Status: No, score=-1.336 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_PASS=-0.001, SPF_SOFTFAIL=0.665] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=employees.org; domainkeys=pass (1024-bit key) header.from=dfawcus+lists-tcpcrypt@employees.org header.d=employees.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mCgZhjnnQwPu; Wed, 27 Jul 2016 23:37:58 -0700 (PDT) Received: from incoming.kjsl.com (inbound02.kjsl.com [IPv6:2001:1868:2002::144]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A273A12D616; Wed, 27 Jul 2016 23:37:57 -0700 (PDT) Received: from cowbell.employees.org ([IPv6:2001:1868:a000:17::142]) by ironport02.kjsl.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 28 Jul 2016 06:37:56 +0000 Received: from cowbell.employees.org (localhost [127.0.0.1]) by cowbell.employees.org (Postfix) with ESMTP id E134F9CC81; Wed, 27 Jul 2016 23:37:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=employees.org; h=date:from :to:cc:subject:message-id:references:mime-version:content-type :in-reply-to; s=selector1; bh=UIXpADeMEICvPc04cV340HiOwN8=; b=f0 KLhHinpijUqnAEsRNJdn5wfbWHUDwMY1/2bPKc9Gsc4dvei11WoYCH8z4e6gLIUr Tu4CsOB+Vn90oNDTUFQB5MazaeNHQ1YcWnEt73gPYMZznhCKhcRtXHzt2ux3WM2t t3dexi/UF12/1u1qbNYasXK1PbTcIbpEsYc6RomCE= DomainKey-Signature: a=rsa-sha1; c=nofws; d=employees.org; h=date:from :to:cc:subject:message-id:references:mime-version:content-type :in-reply-to; q=dns; s=selector1; b=K4VjCYx8to3c0Iu+U1CzvTQQmpnF rOQgZbnlpZ/wOA9sO89tbu7+3KXsKtn6+8KBf7Uej49aRWcSkVn05dU32atdCFMZ k7TnfGsfOJtx0PHzMz26Rq4yJ+VVV4vsNqa7aHHBQKFURVy+DHc9fP+0y7bHoclz S9nIFNNeJD8wX3Q= Received: by cowbell.employees.org (Postfix, from userid 1736) id CD83A9CC4F; Wed, 27 Jul 2016 23:37:54 -0700 (PDT) Date: Thu, 28 Jul 2016 07:37:54 +0100 From: Derek Fawcus To: Derek Fawcus Message-ID: <20160728063754.GA24657@cowbell.employees.org> References: <87wpk7x9v6.fsf@ta.scs.stanford.edu> <877fc6ycuw.fsf@ta.scs.stanford.edu> <20160727232419.GA45841@cowbell.employees.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20160727232419.GA45841@cowbell.employees.org> User-Agent: Mutt/1.6.1 (2016-04-27) Archived-At: Cc: tcpinc , "tcpm@ietf.org Extensions" , Kyle Rose , "Mirja Kuehlewind \(IETF\)" , David Mazieres expires 2016-10-25 PDT Subject: Re: [tcpm] [tcpinc] TCP's treatment of data in SYN packets X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Jul 2016 06:37:59 -0000 On Thu, Jul 28, 2016 at 12:24:19am +0100, Derek Fawcus wrote: > > Implying that a passive opener which chose to ack such data bytes would > have to buffer such data until the handshake completes; but I'm not > aware of any stack which actually works that way. Except the old KA9Q NOS, which was tickling my memory... It did have the ability to send such SYN data. DF