From nobody Sat Nov 4 10:36:18 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81A6213FBB8 for ; Sat, 4 Nov 2017 10:36:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.02 X-Spam-Level: X-Spam-Status: No, score=-2.02 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cablelabs.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wlz5dhC-AVuf for ; Sat, 4 Nov 2017 10:36:13 -0700 (PDT) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0138.outbound.protection.outlook.com [104.47.37.138]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 89DFD13FB0F for ; Sat, 4 Nov 2017 10:36:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cablelabs.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=gjxlA11ImSGWWOgii8OYt/419JKgiflvxXROqLNye/I=; b=LaSxV5Xiq5/V2IX95zmb2osebXEPqGEBQwhYVbrHN+LbicjcJ4oRAF4BxQPL+U5UtfkcWum0Cnh2zrdF0zqFui39O2faKG1B4YkuKnRPg9W4lKdbuRHJZLOuhSv1aaUgHNgg5NOqoYAqzhLR5t6VqUzCQ5QmdHCtfcYzfRH9V+o= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=B.Briscoe-contractor@cablelabs.com; Received: from [192.168.0.2] (87.112.63.152) by SN4PR0601MB3629.namprd06.prod.outlook.com (2603:10b6:803:4b::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.178.6; Sat, 4 Nov 2017 17:36:11 +0000 References: <150940779800.28290.16909023366349102749@ietfa.amsl.com> To: tcpm IETF list From: Bob Briscoe Cc: Mirja Kuehlewind , "Scheffenegger, Richard" X-Forwarded-Message-Id: <150940779800.28290.16909023366349102749@ietfa.amsl.com> Message-ID: Date: Sat, 4 Nov 2017 17:36:02 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: <150940779800.28290.16909023366349102749@ietfa.amsl.com> Content-Type: multipart/alternative; boundary="------------E91924968F1AAE4A16153C8A" Content-Language: en-GB X-Originating-IP: [87.112.63.152] X-ClientProxiedBy: DB6P190CA0010.EURP190.PROD.OUTLOOK.COM (2603:10a6:6:2f::23) To SN4PR0601MB3629.namprd06.prod.outlook.com (2603:10b6:803:4b::11) X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 31b224be-bd84-4c0a-78db-08d523aa8aa3 X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(2017052603199); SRVR:SN4PR0601MB3629; X-Microsoft-Exchange-Diagnostics: 1; SN4PR0601MB3629; 3:QjE7BC6X7YPXCocUEZx4Dt/jmFqrOZdRlmNRuuHNlz4g03Cq2MqPvKNS8q7WhMtRIQom/rJZvDlXb1hMr29t2pGtXs8xtnVXrhVBkO22hpPhpvQUlINd8pTkyzi6at38oR2q1ccW3iUIaYGgYOg0n0dyJXJ6sIpVyS3HQ70KCMvGAuKNsAm2zNs591jZGKU0ygD1QyWwunNtMAldGYPRK5CbD7ErdVMPFQskUInYYfPV0W68m9sWUsZSufdqY8RO; 25:0EK5xFRu6Jd7wCFzy+wxGny51VUHQ4o7xy4Ms6X5+PnYdbGVZb1EUT/lFoLvIT5bzBoKwkJsxuJ5qVw0dor+SA/Gc34m1zqI0bI6RP1Ei1rmc2NKSxROJbyO63zYLKQSn+Qg35hPYLcqplpgoa254F0geafiSkLQZ/26y6PZ6nlenA2XCboNAV5Wv0dDXbAzK9t1+ESLRUf3cgWb2YT+YnZ+BqVZ4eOF6EjJtzl3xWim6/bJ97dkSuXTNJfINMclgHJMslO6eWT5aaTjJrEyGDOcU//zij31D1JN8maZYNzp/E056Av5G1mLpe2G6N1XK3VY6iBqxMo+t1W/ovEGhg==; 31:f2n3vkJKuh1B1mQMashWaaeOA9eiPM/JW4CBxWsvz+ITll85zSgNI0y5JhTA4kYZNSvGYfQp1oXzsUQMwvZUXzsFKBxinCnMmQIsqdw9PlJve2h9ivCKyEkkqMJljDE8wrssq+zaLSmxQpK1OFr2m3BHHbHaYvBs8qmGAk8JqV9Jc3F9Ubicie26QXFtN9e7igyn2PReMs4gHyUXbYk3sX+lkXbpAOojEIGbFxOJx9o= X-MS-TrafficTypeDiagnostic: SN4PR0601MB3629: X-Microsoft-Exchange-Diagnostics: 1; SN4PR0601MB3629; 20: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; 4:dd8mHmL/NDujnBcTagM1XDVFZ+vjR5tNOWoy3uOF7UgXQNwMyf94KKYAUfGrLdwI6sJo1xTaLV3ILAsQ9/ZZ1qBALCZypgaHxvXYJ+wPFApox9Po+01sBCZ6cx/azGNm4G7womXee1hO9j7YLN1sI9JCffe8rrPN6U4AvGF22dWCHVQcyf7NzYv4lRMZjhbQhC3CkJ8MYGpSMyo91HN6axEtVCfTqcsizRq6b7+0XRse5gKfVRTiOV+Vu+fyzB10gTRKP4RZ5mIS5pc9G66/Xp4MYfL9G50/Uw9ocKLOCTrlcCXv1MirAmLSc9AG9iZl X-Exchange-Antispam-Report-Test: UriScan:(120809045254105); X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(93006095)(93001095)(100000703101)(100105400095)(3002001)(10201501046)(3231021)(6041248)(20161123564025)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123555025)(20161123562025)(20161123558100)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:SN4PR0601MB3629; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:SN4PR0601MB3629; X-Forefront-PRVS: 048111149A X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(6049001)(346002)(376002)(189002)(377424004)(199003)(8936002)(81156014)(3846002)(6116002)(478600001)(966005)(33646002)(606006)(64126003)(4001150100001)(5660300001)(117156002)(83506002)(16526018)(65826007)(72206003)(25786009)(7736002)(77096006)(81166006)(68736007)(86362001)(31686004)(97736004)(84326002)(8676002)(6486002)(189998001)(101416001)(54356999)(2906002)(50986999)(76176999)(15650500001)(53936002)(6916009)(6666003)(106356001)(65806001)(54906003)(230783001)(65956001)(16586007)(105586002)(2950100002)(31696002)(66066001)(6306002)(37036004)(236005)(36756003)(58126008)(16576012)(4326008)(316002)(54896002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN4PR0601MB3629; H:[192.168.0.2]; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; Received-SPF: None (protection.outlook.com: cablelabs.com does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; SN4PR0601MB3629; 23:9bVCrSEQDRn4glMLEVNPI2Je7zjN2RMXTtSBD4J?= =?us-ascii?Q?igWcFwlINRynXM+4IIpJBsn8jueKrz6ixoUQ8Zxz/TKrqltY/bClFgdigO7K?= =?us-ascii?Q?0GmExRVVXsm24ZsR6xNSDDJp2l0zUzaUdUk3IUYW/WH4fmWGjgq0wmTCvxyt?= =?us-ascii?Q?T2+auidPYtndxOjFDC0/6OxiC7sQ+C2XrzRTHLZWcjtsg2YNi24HIWGk6F7e?= =?us-ascii?Q?EX2KxpkXxB6I7Su5gK37qYyaAtPRWiqEP4uYcalZPW1Gkk7SblfpoLl+BO8G?= =?us-ascii?Q?zQe19BMTx7ydO4T7PE8B2hSGQGZFYa6kvJNrMtU8NjUOaC4WHRcSQEwPerMt?= =?us-ascii?Q?XRgzUhoDeQ2TcWlYgqaIDlrZVio33XFoMvrPCjNFVMTazFmEV047CVkCwpCa?= =?us-ascii?Q?bX2k3kCsST/yr2JJ+exMw1l9ga116AplgORZXR4igdJgosR8K0Erj63YfpRT?= =?us-ascii?Q?opFfWcqaCjRGqQ56KHrhMcQoyOgW1O117v7XtM1XTdPFgAKpy6D0Fdu6C+1U?= =?us-ascii?Q?Z/TXHhUncjWk2vzAkItEtjucpV7YqPRY120e4ZsVxBV9hxofeA2g+6QtJDWW?= =?us-ascii?Q?UxdqkJtUkBK21XmjWc+7a4izZCNZ1e0cYasq52ipcQsIrKS1+XMDcF1Ju0EQ?= =?us-ascii?Q?VqhZvnUk4vnTbgpQnSmt0aaysjjpLUzN4Vp1nrwlh/z7zNz9iFM8XvaKxchg?= =?us-ascii?Q?i/rGglJlKr4uuxkTfQGYlVOEoIeAOHimQnbFfM0sCG9NKmnnG9vqHBUqcn+T?= =?us-ascii?Q?xcNV0Lqpc6MLK9LMkOtKs0dOLv4FgrcjqwhdkSzSjSWzcTXAhIcZ/8d0FwTM?= =?us-ascii?Q?V8UoJDwmBapGfs4uH4RKWx9N9GM+dUsammGamrvCi9Cq3WOlHvPsuwmJa+uI?= =?us-ascii?Q?Pw+5jA74CLWABOWbMaTMjPURs/JnbnxX2+PpSmd8fBM+8BPw2EBMtHUwyPaj?= =?us-ascii?Q?GToZf5SzbTUh17OdmZUPPe8Dnng79SMMp/S3/IdhZrm4CBV+uSOuWijTfsZp?= =?us-ascii?Q?A//5iVUU2OT7E7z3xeKvXD2eseV/QIdh9ilZJ8dBlJ6IbLMWzQJQLtQCEyOZ?= =?us-ascii?Q?/dMQzdFLIJuU87G9swM/XAD9MgPWpoECVEz80Zefm6Vqg3I/VUZtzCMZD0sO?= =?us-ascii?Q?5mg1qUNX+DBNHQKeT+R8M+NvmN1kkXfrnkp5kCL0Y7dy4xQDWUtDMGZvGdzQ?= =?us-ascii?Q?XK08mQpg5MRDQlMNmboR6g7hdTLrigfFfS2hjLLaL5v7eB5dnDc1GcRbtUIH?= =?us-ascii?Q?eaZavKKz5IwH4QwfzyDrnnSZ/1TeD46QHXXdgYs4lebH7Eu03R0A4HCzHA9Y?= =?us-ascii?Q?lGkCU3hmfNduQZc4TYBYp9MBkQwJInSho48SVPXlA5fVUeYvf7gDGxEZPQ9c?= =?us-ascii?Q?cKR7bNt4aodG56wyzUXUEgtEjJc9xzJIQThZPYzgrcWrHgpzdxUmzQWZj0bn?= =?us-ascii?Q?vG0R5PraCTQ=3D=3D?= X-Microsoft-Exchange-Diagnostics: 1; SN4PR0601MB3629; 6:J2N2AiI8+aCNiWZQCWbWqy6lgKAOjJjPGi4MFbylqXeTYJMbOZnFBGupDjXG8s/blrebdyi46FAmurrq5QNDRpvfl19gCeJOKtAeW25Ba1AdmwigcPGCw7cgt8PrX0Cj6gOLGSDF8hDpAbCKrRKijLnVvksBqMeO8a9665Fws39HDT4d/o6m5G/1fJn5kZYYXSj5Vq2MKJYmzgiAEMEvM4w0XLwS8bn1Yw4Wy9K/rlOY55Q13XebgnYhvv4tne4IO8GsJQYQsT3rZnYcOuIgZzxwTJx/FAlCvGABP4ljIGva0dVRLN1JQlNDmAMmvqg4tx/lJtZd9OqErxnaV3wlF2gFR6qMGwnbV+t9u2PWlPk=; 5:McWfCZM3WgkjyiLwvN9NUuZoNBbEs46q1onYnHHOjOc6itLUHCc1hI1s0Baj/z3hzjejCrUeyTEJMGXDt63gjQVl8lRmkkkDqaqBoQsgIzdiYnIA5ChNUdRJkmOM9x/fZWQboUwRytuSHydBZbvQodQ//gHJ8IpEJ1ubEV/H3+E=; 24:Hae3HvhFaPYXnBjUaCzpSusWUVftEou9IxxVIotSulgL3rdak+yaGe5JVD2+TGIRZ0MZG5ynlmaMXuM+kTJS5sj0s+UzqSDlaWKkBUnlKoo=; 7:HRMv4PDXt3y1MOecWONFo+djLuZbmb9K23v6UbVuaUNrZw//n//Yb2sHAd/nW+UbowidbAgYY6YGkO6MWwZ3xmKZosYePYR1DMsgDz7sFNVcz1Zt4hTTF5xm0uX14ECmi0QMb9+nP5Q2WllA0WQzLvEdTXSYEfuqLNn45DVG36ay6WJTBXrFBRvMcbEFdU92aTvKhjpnWn0fYMgULubfVpP/WXScUEQ9N7VQ9i0LVIyjbxitW/cLQESqJAfA8oTF SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: cablelabs.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Nov 2017 17:36:11.0330 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 31b224be-bd84-4c0a-78db-08d523aa8aa3 X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: ce4fbcd1-1d81-4af0-ad0b-2998c441e160 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN4PR0601MB3629 Archived-At: Subject: [tcpm] Accurate ECN update: draft-ietf-tcpm-accurate-ecn-04 X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Nov 2017 17:36:16 -0000 This is a multi-part message in MIME format. --------------E91924968F1AAE4A16153C8A Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit TCPM folks, We've updated this draft. * Added feedback and testing for mangling of IP/ECN on SYN & SYN/ACK   in draft-03 these had been potential options in an appendix, but we've promoted them to requirements as a result of a measurement study that finds ECN bleaching in mobile (details can be provided). * MUST use change-triggered ACKs with conditional exception for hardware offload (as promised in last tcpm meeting) * All open issues now closed. Deleted last 3 appendices that were "To be deleted before publication" * No change to IANA section, as agreed by hum in last tcpm * Ready for WGLC. See: https://tools.ietf.org/html/draft-ietf-tcpm-accurate-ecn-04 Bob -------- Forwarded Message -------- Subject: [tcpm] I-D Action: draft-ietf-tcpm-accurate-ecn-04.txt Date: Mon, 30 Oct 2017 16:56:38 -0700 From: internet-drafts@ietf.org To: i-d-announce@ietf.org CC: tcpm@ietf.org A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TCP Maintenance and Minor Extensions WG of the IETF. Title : More Accurate ECN Feedback in TCP Authors : Bob Briscoe Mirja Kühlewind Richard Scheffenegger Filename : draft-ietf-tcpm-accurate-ecn-04.txt Pages : 43 Date : 2017-10-30 Abstract: Explicit Congestion Notification (ECN) is a mechanism where network nodes can mark IP packets instead of dropping them to indicate incipient congestion to the end-points. Receivers with an ECN- capable transport protocol feed back this information to the sender. ECN is specified for TCP in such a way that only one feedback signal can be transmitted per Round-Trip Time (RTT). Recently, new TCP mechanisms like Congestion Exposure (ConEx) or Data Center TCP (DCTCP) need more accurate ECN feedback information whenever more than one marking is received in one RTT. This document specifies an experimental scheme to provide more than one feedback signal per RTT in the TCP header. Given TCP header space is scarce, it overloads the three existing ECN-related flags in the TCP header and provides additional information in a new TCP option. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tcpm-accurate-ecn/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-tcpm-accurate-ecn-04 https://datatracker.ietf.org/doc/html/draft-ietf-tcpm-accurate-ecn-04 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tcpm-accurate-ecn-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ tcpm mailing list tcpm@ietf.org https://www.ietf.org/mailman/listinfo/tcpm --------------E91924968F1AAE4A16153C8A Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit TCPM folks,

We've updated this draft.

* Added feedback and testing for mangling of IP/ECN on SYN & SYN/ACK
  in draft-03 these had been potential options in an appendix, but we've promoted them to requirements as a result of a measurement study that finds ECN bleaching in mobile (details can be provided).
* MUST use change-triggered ACKs with conditional exception for hardware offload (as promised in last tcpm meeting)
* All open issues now closed. Deleted last 3 appendices that were "To be deleted before publication"  
* No change to IANA section, as agreed by hum in last tcpm

* Ready for WGLC.

See: https://tools.ietf.org/html/draft-ietf-tcpm-accurate-ecn-04



Bob

-------- Forwarded Message --------
Subject: [tcpm] I-D Action: draft-ietf-tcpm-accurate-ecn-04.txt
Date: Mon, 30 Oct 2017 16:56:38 -0700
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
CC: tcpm@ietf.org 


A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the TCP Maintenance and Minor Extensions WG of the IETF.

        Title           : More Accurate ECN Feedback in TCP
        Authors         : Bob Briscoe
                          Mirja Kühlewind
                          Richard Scheffenegger
	Filename        : draft-ietf-tcpm-accurate-ecn-04.txt
	Pages           : 43
	Date            : 2017-10-30

Abstract:
   Explicit Congestion Notification (ECN) is a mechanism where network
   nodes can mark IP packets instead of dropping them to indicate
   incipient congestion to the end-points.  Receivers with an ECN-
   capable transport protocol feed back this information to the sender.
   ECN is specified for TCP in such a way that only one feedback signal
   can be transmitted per Round-Trip Time (RTT).  Recently, new TCP
   mechanisms like Congestion Exposure (ConEx) or Data Center TCP
   (DCTCP) need more accurate ECN feedback information whenever more
   than one marking is received in one RTT.  This document specifies an
   experimental scheme to provide more than one feedback signal per RTT
   in the TCP header.  Given TCP header space is scarce, it overloads
   the three existing ECN-related flags in the TCP header and provides
   additional information in a new TCP option.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-tcpm-accurate-ecn/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-tcpm-accurate-ecn-04
https://datatracker.ietf.org/doc/html/draft-ietf-tcpm-accurate-ecn-04

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-tcpm-accurate-ecn-04


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
tcpm mailing list
tcpm@ietf.org
https://www.ietf.org/mailman/listinfo/tcpm
--------------E91924968F1AAE4A16153C8A-- From nobody Sun Nov 5 12:12:22 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5D6A13FCEA; Sun, 5 Nov 2017 12:12:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g_eMz-O4VLaB; Sun, 5 Nov 2017 12:12:20 -0800 (PST) Received: from mail.sfc.wide.ad.jp (shonan.sfc.wide.ad.jp [203.178.142.130]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14E2D13FCE9; Sun, 5 Nov 2017 12:12:19 -0800 (PST) Received: from mail-wm0-f50.google.com (mail-wm0-f50.google.com [74.125.82.50]) by mail.sfc.wide.ad.jp (Postfix) with ESMTPSA id E769A278421; Mon, 6 Nov 2017 05:12:16 +0900 (JST) Received: by mail-wm0-f50.google.com with SMTP id y83so10359141wmc.4; Sun, 05 Nov 2017 12:12:16 -0800 (PST) X-Gm-Message-State: AJaThX6caJRicJVoMNrWxm0q7qom8r97T3gnJTbR//p5VhjxkVoxziAZ NQBHyPk3rR5JscdVZ7TurIOCixxc09LDwOjaR2Q= X-Google-Smtp-Source: ABhQp+RC2QA5l2kpabqrwQnpY5o4hul0oyAQ8svjwUZufCtvLb8AaHzJh8VfODP0UTtVl9oRwann0IqVwbV8ZUH7qMs= X-Received: by 10.28.199.75 with SMTP id x72mr3883490wmf.119.1509912734892; Sun, 05 Nov 2017 12:12:14 -0800 (PST) MIME-Version: 1.0 Received: by 10.223.141.148 with HTTP; Sun, 5 Nov 2017 12:12:14 -0800 (PST) From: Yoshifumi Nishida Date: Sun, 5 Nov 2017 12:12:14 -0800 X-Gmail-Original-Message-ID: Message-ID: To: "tcpm@ietf.org" Cc: "tcpm-chairs@ietf.org" Content-Type: multipart/alternative; boundary="94eb2c0d7e8a34886a055d41f41b" Archived-At: Subject: [tcpm] IETF 100 agenda X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Nov 2017 20:12:22 -0000 --94eb2c0d7e8a34886a055d41f41b Content-Type: text/plain; charset="UTF-8" Hi, I've uploaded the current agenda on the following url. https://datatracker.ietf.org/meeting/100/materials/agenda-100-tcpm/ Please feel free to let us know if you have questions or suggestions. Thanks, -- Yoshi --94eb2c0d7e8a34886a055d41f41b Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Hi, I've uploaded the current agenda on= the following url.

Pleas= e feel free to let us know if you have questions or suggestions.
=
Thanks,
--
Yoshi
--94eb2c0d7e8a34886a055d41f41b-- From nobody Wed Nov 8 00:39:38 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9FEA1317D5 for ; Wed, 8 Nov 2017 00:39:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.8 X-Spam-Level: X-Spam-Status: No, score=-4.8 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cablelabs.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lS3cSU6Zy9ca for ; Wed, 8 Nov 2017 00:39:35 -0800 (PST) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0117.outbound.protection.outlook.com [104.47.36.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A6DB1317C8 for ; Wed, 8 Nov 2017 00:39:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cablelabs.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=nuPYqM2vNL0KR+DHAXo4uHR2QsVfg2cWujmgnzpBsv0=; b=ANf3a0Oj2kIjt4ZperwfiRS2rGVCaKS24CssnT+cadxQSiWTiKzPjFYDlBCkjtjq5/4xnetA2ZdtZ/Ult+cu0L5xp4754GGa3ECdDsFH8L5/D6yw23Kc3Wl3/UM8np0XgwORt7QxQelR0tn7lMF9gFYl/WYrL16BaTOYfort3r0= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=B.Briscoe-contractor@cablelabs.com; Received: from [192.168.0.9] (87.112.63.152) by MWHPR0601MB3625.namprd06.prod.outlook.com (2603:10b6:301:7c::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.197.13; Wed, 8 Nov 2017 08:39:31 +0000 From: Bob Briscoe To: tcpm IETF list Message-ID: Date: Wed, 8 Nov 2017 08:39:21 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="------------9F91E8E371F0BC0DB1AE579B" Content-Language: en-GB X-Originating-IP: [87.112.63.152] X-ClientProxiedBy: DB6PR07CA0074.eurprd07.prod.outlook.com (2603:10a6:6:2b::12) To MWHPR0601MB3625.namprd06.prod.outlook.com (2603:10b6:301:7c::15) X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: d2efe7e5-6e1f-4c40-9877-08d526843bb1 X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(2017052603199); SRVR:MWHPR0601MB3625; X-Microsoft-Exchange-Diagnostics: 1; MWHPR0601MB3625; 3:3lEcpRzfrEP56G43a/77ylybyppedcYtXyvHNHngSN99advKNWuT/OMP5+R6it6+WoJ2PoaNKE3WH/hvBB8msM7PkNY0O0dhLTIf+d1FMw4Jb/QAs8+8EEVCqE14e8xwfDSwHFK9Z830SXsLeQr/schNbv99PFp0894twXXvE3DCbbOmL+47C1jQ2ZyXeTrPJpIr2jFMQJeNF8TO46f/FZZLthiDklFa3Om39YDsAZHktl1IaSQq20IAVOp5BLpf; 25:2v8jVGNjw787sGF/PJTl2Gxks7X9g8oKm9I23tcv3oqY9hvKExGq3zXyu/oeGvqgCj792kd/hw23Ih97RYBZgRfqB34PXpCRFexB6Ja2YgTpRHgd8QCeE4kH5YAOaiQ3b9dYFEn1199tgvSzVic2kUCFZjDba+n4UME2BO4Ggx+7vNxmANOKBUlqGv/Uv55Bztm4WEhaex/m/j6Jufwy2rBuplvi/3aTkilTlMjy4uD/4tkNsQk+C9GDawmTnEY++tLpV8ErUmKCeLS3recIPmLQ8XzQp0410GbdpDq5TisOsy8twBhvU8ui/kPoz/iRN33zOY5NBf5VITLWP7uQ5g==; 31:AJ0KRyuJSfGc1oIXlUZaxZ6C0QrWGDr7Pet/KqOPcnIKGnPA31setCK81ditQr5WwD9jtyqDE0wbyKuEe7d4irrfC+zQ9KZ+K0/fVUGqPxytcSAPchNAuOo4swJQY4OjD23fwXrHSCfwTdiuV4v+j1od6sbmJuAWmvyvUlgXB/saMd8mNueQLHMGH+fk87Em0CVSazh4QKk4xHTM0tuKRDh5cRDhHocJuo9rj3NH0FI= X-MS-TrafficTypeDiagnostic: MWHPR0601MB3625: X-Microsoft-Exchange-Diagnostics: 1; MWHPR0601MB3625; 20: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; 4:CHOzB66LHbe6Lho5pXyteCK+OYC1mreKm3NUfrYcF3KCHyfXLFQpdpuoP6wcMjpxfTjwqMISDYLwMUQ+OMKgj9Vb5k2Z/wyuqODYMBbPmlgG7FqzoIRobd2DaDX4rKytRuSSBro4zKHVC50fNypNBEPP++zfDLHF9CEA81GVWMjmgql08TbTpUIIwQx4XAtudk0mhSSAJ/3o7GcmPC4LKN5WolS5yFgCPdxHhVUzEDmpbyvTBF7vGuyQOOpoLs84s/GRJDHwW1AOMCjKCA6ZUnt3eCIXp9HLbD7nny0et2yvhfUIo/lk3BCXB+wHLIfD X-Exchange-Antispam-Report-Test: UriScan:(158342451672863); X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(3002001)(10201501046)(3231021)(100000703101)(100105400095)(93006095)(93001095)(6041248)(20161123564025)(20161123562025)(20161123555025)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:MWHPR0601MB3625; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:MWHPR0601MB3625; X-Forefront-PRVS: 0485417665 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(6049001)(376002)(346002)(199003)(189002)(606006)(33646002)(106356001)(105586002)(31686004)(64126003)(7736002)(5660300001)(16526018)(77096006)(6486002)(53936002)(236005)(54896002)(6306002)(65956001)(66066001)(25786009)(72206003)(117156002)(65806001)(478600001)(101416001)(6916009)(6666003)(81156014)(8936002)(8676002)(3846002)(6116002)(36756003)(81166006)(316002)(65826007)(83506002)(230783001)(68736007)(2906002)(84326002)(16576012)(50986999)(37036004)(16586007)(31696002)(86362001)(97736004)(54356999)(58126008)(189998001); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR0601MB3625; H:[192.168.0.9]; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; Received-SPF: None (protection.outlook.com: cablelabs.com does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; MWHPR0601MB3625; 23:SsfrKJVPcRLX2O/m1d1/UyMpEq4ZCqC93Yy5evo?= =?us-ascii?Q?tjY9hK7TgeFQyp4OgoadMw7XBWocev/RTtxlxJdLA3AtFsN1aqonl66+2PVG?= =?us-ascii?Q?FYvTEzJHgU8GhD42NoSVSQBXtLtYiyBVLHy5IRctD/KaZjd7VLK0EDhQtQW/?= =?us-ascii?Q?J1sNUj133SxAoWrHXv2/2IMU83XBUdalBlWDSsFQn8O70xpb12PnK/LKeLye?= =?us-ascii?Q?8C6lvHgn9KmCDhPsk/3g0nSW3eKgAFfGmZ42YWmPqH3lMgsdWxQlvJ0xJsES?= =?us-ascii?Q?XT+ac2Mo9YbP8v2FVE7H2PEZ/aqEdo9RQEp8bHnSTLDnlDlH0g+MVge9f3OJ?= =?us-ascii?Q?RovU2K+XVcjaG6vR/BEd5Lk3eNWGEVTC45EWzfb6LL7hRyjLeOVY/wrh27g/?= =?us-ascii?Q?dnVfMvjWk4nnkPc0VwrEGB/2oTlJIOAitClg8Le1Mbpa/nZpwrJ4BGvESPpX?= =?us-ascii?Q?eeNOHWkHn4prJXLMTxfFVObV2lJHuJeOJrIdGx7Rk2zntVxLLCvWvaPu2COw?= =?us-ascii?Q?iW8gQUcxn79XyPZq7qEtkPQ0zPgJ6c9514fR+wzUlPg0axXxT6Wfm/21H/D7?= =?us-ascii?Q?xe07dUADpj2OZLmKNfK/pnRoy9SgEa+K0+W6+wrX+kuYmdbgNHYtcq75nBdH?= =?us-ascii?Q?CqmP90GMB0uNVVVuxlRfd6hBJc1WVClgsivYnInjVLdSMhvobciUveL7KpwF?= =?us-ascii?Q?tcl0Orz2Uta7G0h+bF05mOvoD9W/TU6f11JfwJ+NlIwQMxgcDkbinCBovSUU?= =?us-ascii?Q?33EKW7P1VQbpkgY6E7W5g8mbZIPr8WwfJIupzs8VTpbKXlsKbC/LILOOJVdS?= =?us-ascii?Q?vzuthLo+8vft9GqUC1WGA0PrzfkEKr7TW9JQehQvdkwEOLDpKnu2/ZB7YeKa?= =?us-ascii?Q?KVljZx/3Z8L/PoYW4OhVnl7TG96oqcSrKPvVbTUcqdWmB+nOpsFCikraCkiy?= =?us-ascii?Q?Ov8o1xLYdhzpdqj/zWPvD+bmEa31VF35XRpzgZbXD5IODnv0XvO4ulqf9dKf?= =?us-ascii?Q?5Cgnh2OEdmdy8J9Ts3RaVdE/hoWUW2WURhoTUL7k9Vt4+1qeO7QyErV38oDH?= =?us-ascii?Q?lqTKKyW2Hh+k/n4C7nGcYjghjXYj8eviGfG86FCQ9dWnIoPrfgak0rs3jZZq?= =?us-ascii?Q?SLxcdLBXKsQjIbfT2VOFI+SdQyFfE5nSZK8NAOlb72a2oJao8rmGDT4vQuq6?= =?us-ascii?Q?L3SEMrSR6J3Uf6VsH7jsHv331iZ+yTjboXsqTV3hetHyIsNXO+LHkemWLbw?= =?us-ascii?Q?=3D=3D?= X-Microsoft-Exchange-Diagnostics: 1; MWHPR0601MB3625; 6:g1G37DRAdibaEu5KaoExGpLX87fIAmSlp5cZgZ+qB36q/Y5hA6cukv174cj/il/g8IhACO+LED9zTblQXaHOHh9GRsAP+7yr7qHcN/9lTbYLotrolIr5wCNW9Isjs12MLiAQKSiVDaQcat8CGEqQ3nf6hUhUkhEo2sYNFD4a5s9d8TLvr0vtDfgcRllxsVeAR5HLDkNFQ7HNULjWjAkNfbkFH2mJh4dRidcQoh2tvf2PaSvO0K1FLkIsIAttELq+018YG/wonrN9NKOFlYLe4UaxqC08ivUWVY7CPwceGGe5ZQpSRMxjY6lonUsri8wPYiZ9//zFJ1s/2KG0Nl7IjtDOWOYyJlpfcyUT756IhKI=; 5:mZWB0hbZEomnzZIdz6AMl8L8FR/CRz2Bsq+xQFM6lN/F0e1mL3FiMWiDt9p4IwAY+8bYhVA/FeDd25IF6rcyS4OdKQVsSE5xHakq0EV/4dcs7ZIuXk6nSY7auZ+chSFajlMmqhpUnKASu1G6+nSG03+sO8lptWMd2hPCzfK2aMU=; 24:8Ol4+SHQRvG/Rz2rqpTodchkCmZgsmnEZ9CGr8qFi21nylivh6m2tic3l3gnFEqFfRmjY8Jp9XHc+bBfcB+53jywbNs8/aslXgIbYMdVfhY=; 7:mqHVA8GVZNmEZ7/3fBAAz5txK9kj2FnkRLfkCD8sqK1Na+6cjSHlTF1XF/J82Z8amvryUsE4qCuhOxcdcNOXetxRTMmXvk5k09a6Nu5zTPEd1oEB54c72+A9sIcFRkn1NUPDAJf+wNuuXB7DJKDOo041L0CpPFAbaKAl1I6jR/tThQ4745V7TT/0Iq0eu5h999QgwL5Xwdi5NfYTkk3LRkpm9m1mD5pCsHG91RRfYSWQJVYAmEKu0xP0SIPv26Ri SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: cablelabs.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Nov 2017 08:39:31.5420 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: d2efe7e5-6e1f-4c40-9877-08d526843bb1 X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: ce4fbcd1-1d81-4af0-ad0b-2998c441e160 X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR0601MB3625 Archived-At: Subject: [tcpm] ECN and ECN++ traversal experiments: draft-ietf-tcpm-generalized-ecn-02 X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Nov 2017 08:39:38 -0000 This is a multi-part message in MIME format. --------------9F91E8E371F0BC0DB1AE579B Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit TCPM folks, We've updated this draft, mainly to add a ref to the paper below, which outlines a large measurement study on traversal of ECN++ and ECN. It is the first major study of ECN traversal over both mobile and fixed networks. It's "to appear" in IEEE Comms Mag, but here's a link to the accepted draft: "Measuring ECN++: Good News for ++, Bad News for ECN over Mobile " It's fairly short, but here's an even shorter summary, solely of the results. *Terminology: ** ** outgoing -> from client to server; otherwise incoming. * Classic TCP/ECN:     All TCP control packets and retransmissions are not ECN-capable * TCP/ECN+      TCP SYN/ACK is ECN-capable, but other TCP control packets and retransmissions are not * TCP/ECN++     all TCP packets are ECN-capable *Highlights:** *Bad news: 7.5 out of 11 mobile operators tested bleach ECN in outgoing packets at or before the first IP hop. {Note 1} Good news: ECN fields do not cause packet drop. Good news: ECN++ support is as good as ECN support. Good news: 61% of Alexa top 500k Web servers support ECN. Good news: All the ECN-capable top-500k Alexa servers we were able to test have the same response to ECE as to 3 DupACKs. Good news: At least, 51% of the Alexa top-500k servers support IW of 10 segments. Bad news: 0.4% of the Alexa top-500k servers (1,745 servers) use IW larger than 10.           Of these, 1,121 servers deliver the whole file in the IW (largest: 585 packets * 100 B = 58,500 B) Bad news: Apparent ECN+ servers respond oddly (IW + 1) to congestion marking on the SYN/ACK: 3.51% of Alexa 500k ____________________ {Note 1}: Supplementary details related to the first bullet: * Limited outgoing tests over 7 more mobile operators, find 3 more that bleach all ECN at or before the first IP hop. * The "0.5 of an operator" bleaches ECN only on port 80 (non-ECN Web proxy). * 2 operators use ECN-capable proxies. * Over the 3 mobile networks that do not bleach ECN,     0.53% of upstream paths to Alexa-500k suffer ECN bleaching >5 hops from the client * Over fixed access (PlanetLab)   - no upstream ECN bleaching close to client   - 0.23% of upstream paths to Alexa-500k suffer ECN bleaching >5 hops from the client * No downstream ECN bleaching measured over fixed or mobile,   - except the non-ECN proxy,   - however, limited paths tested (limited to servers we controlled) Bob and co-authors --------------9F91E8E371F0BC0DB1AE579B Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit TCPM folks,

We've updated this draft, mainly to add a ref to the paper below, which outlines a large measurement study on traversal of ECN++ and ECN.
It is the first major study of ECN traversal over both mobile and fixed networks.

It's "to appear" in IEEE Comms Mag, but here's a link to the accepted draft:
"Measuring ECN++: Good News for ++, Bad News for ECN over Mobile"

It's fairly short, but here's an even shorter summary, solely of the results.
 
Terminology:  
* outgoing -> from client to server; otherwise incoming.
* Classic TCP/ECN:     All TCP control packets and retransmissions are not ECN-capable
* TCP/ECN+      TCP SYN/ACK is ECN-capable, but other TCP control packets and retransmissions are not
* TCP/ECN++     all TCP packets are ECN-capable

Highlights:
Bad news: 7.5 out of 11 mobile operators tested bleach ECN in outgoing packets at or before the first IP hop. {Note 1}
Good news: ECN fields do not cause packet drop.
Good news: ECN++ support is as good as ECN support.
Good news: 61% of Alexa top 500k Web servers support ECN.
Good news: All the ECN-capable top-500k Alexa servers we were able to test have the same response to ECE as to 3 DupACKs.  
Good news: At least, 51% of the Alexa top-500k servers support IW of 10 segments.  
Bad news: 0.4% of the Alexa top-500k servers (1,745 servers) use IW larger than 10.  
          Of these, 1,121 servers deliver the whole file in the IW (largest: 585 packets * 100 B = 58,500 B)
Bad news: Apparent ECN+ servers respond oddly (IW + 1) to congestion marking on the SYN/ACK: 3.51% of Alexa 500k  
 

____________________
{Note 1}: Supplementary details related to the first bullet:
* Limited outgoing tests over 7 more mobile operators, find 3 more that bleach all ECN at or before the first IP hop.
* The "0.5 of an operator" bleaches ECN only on port 80 (non-ECN Web proxy).
* 2 operators use ECN-capable proxies.
* Over the 3 mobile networks that do not bleach ECN,  
    0.53% of upstream paths to Alexa-500k suffer ECN bleaching >5 hops from the client
* Over fixed access (PlanetLab)  
  - no upstream ECN bleaching close to client  
  - 0.23% of upstream paths to Alexa-500k suffer ECN bleaching >5 hops from the client
* No downstream ECN bleaching measured over fixed or mobile,  
  - except the non-ECN proxy,  
  - however, limited paths tested (limited to servers we controlled)


Bob and co-authors
--------------9F91E8E371F0BC0DB1AE579B-- From nobody Fri Nov 10 08:22:22 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5820F126DC2; Fri, 10 Nov 2017 08:21:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.7 X-Spam-Level: X-Spam-Status: No, score=-4.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hKvHVpeVimss; Fri, 10 Nov 2017 08:21:56 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0115.outbound.protection.outlook.com [104.47.1.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1AE8126BF6; Fri, 10 Nov 2017 08:21:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=L2pQwvL60GcFyj55A+aqGBkhBHlz5fgc6ICjPQ9fO5o=; b=izW+KfPlTudb7DeCIF79n4+7QQoFZaBT33yy9NlIuiBmfVHpkIyNJTE/HZaCzCPUUlzIynscACg88Nep/rKRurzlUQZd19NfRCa1rGKJgcEQgROkHSL+lOl3KSyIvRxzBSsnz8pibIgkG4fqGsjbrHbaykGQeyM8YljMn6JRflc= Received: from AM5PR0701MB2547.eurprd07.prod.outlook.com (10.173.92.15) by AM5PR0701MB2546.eurprd07.prod.outlook.com (10.173.92.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.218.6; Fri, 10 Nov 2017 16:21:53 +0000 Received: from AM5PR0701MB2547.eurprd07.prod.outlook.com ([fe80::14d8:6acd:f568:98f]) by AM5PR0701MB2547.eurprd07.prod.outlook.com ([fe80::14d8:6acd:f568:98f%17]) with mapi id 15.20.0218.005; Fri, 10 Nov 2017 16:21:53 +0000 From: "Scharf, Michael (Nokia - DE/Stuttgart)" To: Eric Rescorla , Stewart Bryant , "tcpm@ietf.org" CC: "mpls@ietf.org" , "pals-chairs@tools.ietf.org" , "" , "mpls-chairs@ietf.org" , "pals@ietf.org" , "" Thread-Topic: [mpls] LDP Security Thread-Index: AQHTWLboye/68uxiMkCt9OCmRHsgC6MKxUkAgAMG5/A= Date: Fri, 10 Nov 2017 16:21:52 +0000 Message-ID: References: <2da71163-cf29-cba6-df61-d75a2cfc9c43@gmail.com> <5994f353-5306-0fa8-2d2d-024ebdbb10df@gmail.com> <7ee4fd77-7d8d-0db2-527e-9cf91d87e634@gmail.com> <51b9e5b4-0a44-1449-a4df-91e4f9df5d6b@pi.nu> <02a50f02-779e-bc39-505c-5a51d066b3f0@pi.nu> <15335748-e900-280d-554f-24c55c0f3ba5@gmail.com> In-Reply-To: Accept-Language: en-US, de-DE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=michael.scharf@nokia.com; x-originating-ip: [103.5.19.85] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM5PR0701MB2546; 6:i+w4zy713X67zZdcuWu+PLJCbkUtejoaaN1YoPoYnzJjUlwfg0SY66aLYJgkLGUPHj+n4k3V+5iJ7UW6KP/KnuUrUhPv+2Ir1xhtF6+0td+uRD9MCCe7D0rb8U2wAdQ+UuMn7OGLw5bJG5mKD3ArOiKgkph3cFv4orvgbrBpHq3YMJTCYM9pq4SQfEqZtyM9AK+l5Da0nc9CpDMtnz+W2Fidmg09iQ+wXz/awGgYex+YCgB/2z+/pPyOaHiCzTNo61MWyVyFfWplXSAV3C1FuPht2ABGSh7Gd2zfZZugXvj+UV1aBUmPRKTi5P14LsaEnXIoFVsCNU2IdLJ/z7s9BAUtO9zTCfblBoEa3etQuCs=; 5:MzOgw4uVXZd/HaDnsQ2Pz75w6TL+d3f+zhUgyf6LTDlY8737U0jKGCl1Pw0QXCUZ+Pmp62wIY6ExqZIaGBj6sw6tJNKXA4EXzFFtjMq+ssMwgo+0HaTBVd5Ml5w3NiSZIANtrUDsWM4c+oISl8IMqt78ehpL0CC7CWszM8H7W70=; 24:mYxnvYbDtfvGWLCwEiF4pKp5J3HzWc62JsYZk6iMNlhBGpOBR3/Hjwo8WaqyTkGwo3/Ot81OVJGe+D+50MUY5agcCrjv1Kpe+D66olp1soI=; 7:rE7Ljr31pvROSaHL0EWCXOCCE9lWW0yn4qdAG4vI4vouBf+ju7Vzeupp7Lj2BMwYS6ox9dWzILjIvM4m9O4xej+UCt5+M3hwOo3w3bfU8tFj/wZ/AfuSj3JAkEhuCd/rmqXsNIW94Rgk3ECf67K5M/Q5NAd5WN6WcbV6UXTyA3uJg+3n3anj2Y28hucUudHLELKrmwSlWuN99MC1MAAtQWvU8Q9nTeiTW7s1XYslZJ5C4D1avROVlucy86HxiR+D x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: 20920c15-d52a-4ae0-2563-08d528572764 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(2017052603199); SRVR:AM5PR0701MB2546; x-ms-traffictypediagnostic: AM5PR0701MB2546: x-exchange-antispam-report-test: UriScan:(192374486261705)(21748063052155); x-microsoft-antispam-prvs: x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(100000703101)(100105400095)(3231021)(10201501046)(3002001)(93006095)(93001095)(6055026)(6041248)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123562025)(20161123564025)(20161123560025)(20161123555025)(20161123558100)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:AM5PR0701MB2546; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:AM5PR0701MB2546; x-forefront-prvs: 0487C0DB7E x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(346002)(376002)(24454002)(189002)(199003)(93886005)(5250100002)(10710500007)(14454004)(2900100001)(3660700001)(25786009)(3280700002)(4326008)(8936002)(110136005)(2420400007)(15650500001)(54906003)(790700001)(229853002)(3846002)(54356999)(6116002)(76176999)(2906002)(101416001)(6506006)(6436002)(2950100002)(33656002)(50986999)(478600001)(106356001)(97736004)(105586002)(102836003)(2501003)(68736007)(7736002)(53936002)(236005)(6246003)(7696004)(316002)(86362001)(55016002)(74316002)(5660300001)(54896002)(9686003)(6306002)(66066001)(53546010)(8676002)(81166006)(81156014)(99286004)(39060400002)(189998001)(7110500001); DIR:OUT; SFP:1102; SCL:1; SRVR:AM5PR0701MB2546; H:AM5PR0701MB2547.eurprd07.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: nokia.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM5PR0701MB25472EFBB94C1C98EA2606B393540AM5PR0701MB2547_" MIME-Version: 1.0 X-OriginatorOrg: nokia.com X-MS-Exchange-CrossTenant-Network-Message-Id: 20920c15-d52a-4ae0-2563-08d528572764 X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Nov 2017 16:21:52.9839 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0701MB2546 Archived-At: Subject: Re: [tcpm] [mpls] LDP Security X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Nov 2017 16:21:59 -0000 --_000_AM5PR0701MB25472EFBB94C1C98EA2606B393540AM5PR0701MB2547_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 K1RDUE0NCg0KDQoNClBsZWFzZSBmcmVlIHRvIGRpc2N1c3MgY2hhbmdlcyB0byBUQ1AtQU8gb24g dGhlIFRDUE0gbGlzdCwgb3Igc3BlYWsgdXAgYXQgdGhlIHVwY29taW5nIFRDUE0gbWVldGluZy4N Cg0KDQoNClRoZSBhZGRpdGlvbiBvZiBTSEEtMjU2IGhhcyBiZWVuIGRpc2N1c3NlZCBpbiBUQ1BN IGFscmVhZHkgKHNlZSBkcmFmdC1uYXlhay10Y3Atc2hhMi0wMiksIGJ1dCBzbyBmYXIgdGhlcmUg d2FzIG5vdCBtdWNoIGVuZXJneSBhbmQgbm8gaW50ZXJlc3QgZnJvbSBwb3RlbnRpYWwgVENQLUFP IGltcGxlbWVudGVycyBvciB1c2Vycy4NCg0KDQoNCk1pY2hhZWwNCg0KKFRDUE0gY28tY2hhaXIp DQoNCg0KDQpGcm9tOiBtcGxzIFttYWlsdG86bXBscy1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhh bGYgT2YgRXJpYyBSZXNjb3JsYQ0KU2VudDogV2VkbmVzZGF5LCBOb3ZlbWJlciAwOCwgMjAxNyA3 OjAwIFBNDQpUbzogU3Rld2FydCBCcnlhbnQgPHN0ZXdhcnQuYnJ5YW50QGdtYWlsLmNvbT4NCkNj OiBtcGxzQGlldGYub3JnOyBwYWxzLWNoYWlyc0B0b29scy5pZXRmLm9yZzsgPHJ0Zy1hZHNAaWV0 Zi5vcmc+IDxydGctYWRzQGlldGYub3JnPjsgbXBscy1jaGFpcnNAaWV0Zi5vcmc7IHBhbHNAaWV0 Zi5vcmc7IDxzZWMtYWRzQGlldGYub3JnPiA8c2VjLWFkc0BpZXRmLm9yZz4NClN1YmplY3Q6IFJl OiBbbXBsc10gTERQIFNlY3VyaXR5DQoNCkhpIFN0ZXdhcnQNCg0KVGhhbmtzIGZvciB5b3VyIG5v dGUuDQoNCk15IG92ZXJhbGwgc2Vuc2Ugb2YgdGhlIHN0YXRlIG9mIHBsYXkgaXMsIEkgdGhpbmsg bXVjaCBsaWtlIHlvdXJzLg0KDQpUQ1AtTUQ1IGlzIGluYWRlcXVhdGUgaW4gdHdvIG1ham9yIHJl c3BlY3RzOg0KLSBJdCB1c2VzIHdlYWsgYWxnb3JpdGhtcw0KLSBJdCBoYXMgYSBiYWQgbmVnb3Rp YXRpb24vc2V0dW9wIHN0b3J5IChtYW51YWwga2V5IG1hbmFnZW1lbnQpDQoNClRDUC1BTyBpcyBp bnRlbmRlZCB0byBiZSBhIGRyb3AtaW4gcmVwbGFjZW1lbnQgZm9yIFRDUC1NRDUgYW5kIHNvIHJl bWVkaWVzIHRoZSBhbGdvcml0aG0NCmlzc3VlIGJ1dCBub3QgdGhlIGtleSBtYW5hZ2VtZW50IGlz c3VlIFswXS4gV2UgaGF2ZW4ndCBtYWRlIG11Y2ggcHJvZ3Jlc3Mgb24gdGhlIGtleQ0KbWFuYWdl bWVudCBzdG9yeSwgYW5kIHRoYXQgc2VlbXMgdG8gYmUgYSBtYWpvciBpbXBlZGltZW50IHRvIGRl cGxveWluZyBlaXRoZXIgb2YgdGhlc2UNCnRlY2hub2xvZ2llcyAod2hpY2ggSSBhbSBnaXZlbiB0 byB1bmRlcnN0YW5kIGRvbid0IHNlZSBhIGxvdCBvZiB1c2UpLiBXZSBzaG91bGQgcHJvYmFibHkN CnRhbGsgaW4gU2luZ2Fwb3JlIGFib3V0IHRoYXQsIGJ1dCB0aGF0J3Mgbm90IGdvaW5nIHRvIGdl dCBiZXR0ZXIgYW55IHRpbWUgc29vbi4NCg0KSW4gdGhlIGludGVyaW0sIEkgdGhpbmsgdGhlIHRl eHQgeW91IGhhdmUgaXMgT0ssIGFuZCAiVEJEIiBzaG91bGQgcmVhZCAiU0hBLTI1NiIsIHdpdGgN CnRoZSBmYWxsYmFjayBiZWluZyBTSEEtMjU2IC0+IFNIQS0xIC0+IE1ENS4NCg0KLUVrcg0KDQoN ClswXSBUZWNobmljYWxseSBJdCBoYXMgYmV0dGVyIHN1cHBvcnQgZm9yIHJvbGxvdmVyLCBidXQg dGhpcyBpcyBub3QgYSBodWdlIGltcHJvdmVtZW50Lg0KWzFdIHRjcGNyeXB0IGlzIGtpbmQgb2Yg b3J0aG9nb25hbCBoZXJlIGFzIGl0J3MgdW5hdXRoZW50aWNhdGVkIGJ1dCBvcHBvcnR1bmlzdGlj LiAgVGhhdCBzYWlkLA0KaXQgd291bGQgcHJvdmlkZSBkZWZlbnNlIGFnYWluc3QgYXR0YWNrZXJz IHdobyBnYWluIGFjY2VzcyB0byB0aGUgbGluayBhZnRlciBjb25uZWN0aW9uDQpzZXR1cCBhbmQg ZG9lc24ndCByZXF1aXJlIGNvbmZpZ3VyYXRpb24uDQoNCk9uIFdlZCwgTm92IDgsIDIwMTcgYXQg OToyNyBBTSwgU3Rld2FydCBCcnlhbnQgPHN0ZXdhcnQuYnJ5YW50QGdtYWlsLmNvbTxtYWlsdG86 c3Rld2FydC5icnlhbnRAZ21haWwuY29tPj4gd3JvdGU6DQpUbyB0aGUgU0VDIGFuZCBSVEcgQURz LA0KDQpJIGFtIHNlbmRpbmcgdGhlIGZvbGxvd2luZyBtZXNzYWdlIG9uIGJlaGFsZiBvZiB0aGUg TVBMUyBhbmQgdGhlDQpQQUxTIFdHIENoYWlycy4NCg0KVGhlcmUgaXMgYSBjb25jZXJuIHNoYXJl ZCBhbW9uZyB0aGUgc2VjdXJpdHkgY29tbXVuaXR5IGFuZCB0aGUgd29ya2luZyBncm91cHMgdGhh dCBkZXZlbG9wIHRoZSBMRFAgcHJvdG9jb2wgdGhhdCBMRFAgaXMgbm8gbG9uZ2VyIGFkZXF1YXRl bHkgc2VjdXJlZC4gTERQIGN1cnJlbnRseSByZWxpZXMgb24gTUQ1IGZvciBjcnlwdG9ncmFwaGlj IHNlY3VyaXR5IG9mIGl0cyBtZXNzYWdlcywgYnV0IE1ENSBpcyBhIGhhc2ggZnVuY3Rpb24gdGhh dCBpcyBubyBsb25nZXIgY29uc2lkZXJlZCB0byBtZWV0IGN1cnJlbnQgc2VjdXJpdHkgcmVxdWly ZW1lbnRzLg0KDQpJbiBSRkM1MDM2IChwdWJsaXNoZWQgMjAwNykgU2VjdGlvbiA1LjEgKFNwb29m aW5nKSAsIExpc3QgZWxlbWVudCAyLiBTZXNzaW9uIGNvbW11bmljYXRpb24gY2FycmllZCBieSBU Q1AgdGhlIGZvbGxvd2luZyBzdGF0ZW1lbnRzIGlzIG1hZGU6DQoNCiJMRFAgc3BlY2lmaWVzIHVz ZSBvZiB0aGUgVENQIE1ENSBTaWduYXR1cmUgT3B0aW9uIHRvIHByb3ZpZGUgZm9yIHRoZSBhdXRo ZW50aWNpdHkgYW5kIGludGVncml0eSBvZiBzZXNzaW9uIG1lc3NhZ2VzLg0KDQoiW1JGQzIzODVd IGFzc2VydHMgdGhhdCBNRDUgYXV0aGVudGljYXRpb24gaXMgbm93IGNvbnNpZGVyZWQgYnkgc29t ZSB0byBiZSB0b28gd2VhayBmb3IgdGhpcyBhcHBsaWNhdGlvbi4gIEl0IGFsc28gcG9pbnRzIG91 dCB0aGF0IGEgc2ltaWxhciBUQ1Agb3B0aW9uIHdpdGggYSBzdHJvbmdlciBoYXNoaW5nIGFsZ29y aXRobSAoaXQgY2l0ZXMgU0hBLTEgYXMgYW4gZXhhbXBsZSkgY291bGQgYmUgZGVwbG95ZWQuICBU byBvdXIga25vd2xlZGdlLCBubyBzdWNoIFRDUCBvcHRpb24gaGFzIGJlZW4gZGVmaW5lZCBhbmQg ZGVwbG95ZWQuICBIb3dldmVyLCB3ZSBub3RlIHRoYXQgTERQIGNhbiB1c2Ugd2hhdGV2ZXIgVENQ IG1lc3NhZ2UgZGlnZXN0IHRlY2huaXF1ZXMgYXJlIGF2YWlsYWJsZSwgYW5kIHdoZW4gb25lIHN0 cm9uZ2VyIHRoYW4gTUQ1IGlzIHNwZWNpZmllZCBhbmQgaW1wbGVtZW50ZWQsIHVwZ3JhZGluZyBM RFAgdG8gdXNlIGl0IHdvdWxkIGJlIHJlbGF0aXZlbHkgc3RyYWlnaHRmb3J3YXJkLiINCg0KV2Ug bm90ZSB0aGF0IEJHUCBoYXMgYWxyZWFkeSBiZWVuIHRocm91Z2ggdGhpcyBwcm9jZXNzLCBhbmQg cmVwbGFjZWQgTUQ1IHdpdGggVENQLUFPIGluIFJGQyA3NDU0LiBJIHdvdWxkIGJlIGxvZ2ljYWwg dG8gZm9sbG93IHRoZSBzYW1lIGFwcHJvYWNoIHRvIHNlY3VyZSBMRFAuIEhvd2V2ZXIsIGFzIGZh ciBhcyB3ZSBhcmUgYWJsZSB0byBhc2NlcnRhaW4sIHRoZXJlIGlzIGN1cnJlbnRseSBubyByZWNv bW1lbmRlZCwgbWFuZGF0b3J5IHRvIGltcGxlbWVudCwgY3J5cHRvZ3JhcGhpYyBmdW5jdGlvbiBz cGVjaWZpZWQuIFdlIGFyZSBjb25jZXJuZWQgdGhhdCB3aXRob3V0IHN1Y2ggYSBtYW5kYXRvcnkg ZnVuY3Rpb24sIGltcGxlbWVudGF0aW9ucyB3aWxsIHNpbXBseSBmYWxsIGJhY2sgdG8gTUQ1IGFu ZCB3ZSB3aWxsIGJlIG5vIGZ1cnRoZXIgZm9yd2FyZA0KDQpXZSB0aGluayB0aGF0IHRoZSBiZXN0 IHdheSBmb3J3YXJkIGlzIHRvIHB1Ymxpc2ggYSBkcmFmdCBzaW1pbGFyIHRvIFJGQyA3NDU0IHRo YXQgY29udGFpbnMgdGhlIGZvbGxvd2luZyByZXF1aXJlbWVudDoNCg0KIkltcGxlbWVudGF0aW9u cyBjb25mb3JtaW5nIHRvIHRoaXMgUkZDIE1VU1QgaW1wbGVtZW50IFRDUC1BTyB0byBzZWN1cmUg dGhlIFRDUCBzZXNzaW9ucyBjYXJyeWluZyBMRFAgaW4gYWRkaXRpb24gdG8gdGhlIGN1cnJlbnRs eSByZXF1aXJlZCBUQ1AgTUQ1IFNpZ25hdHVyZSBPcHRpb24uIEZ1cnRoZXJtb3JlLCB0aGUgVEJE IGNyeXB0b2dyYXBoaWMgbWVjaGFuaXNtIG11c3QgYmUgaW1wbGVtZW50ZWQgYW5kIHByb3ZpZGVk IHRvIFRDUC1BTyB0byBzZWN1cmUgTERQIG1lc3NhZ2VzLiBUaGUgVEJEIG1lY2hhbmlzbSBpcyB0 aGUgcHJlZmVycmVkIG9wdGlvbiwgYW5kIE1ENSBpcyBvbmx5IHRvIGJlIHVzZWQgd2hlbiBUQkQg aXMgdW5hdmFpbGFibGUuIg0KDQpXZSBhcmUgbm90IGFuIGV4cGVydHMgb24gdGhpcyBwYXJ0IG9m IHRoZSBzdGFjaywgYnV0IGl0IHNlZW1zIHRoYXQgVENQIHNlY3VyaXR5IG5lZ290aWF0aW9uIGlz IHN0aWxsIHdvcmsgaW4gcHJvZ3Jlc3MuIElmIHdlIGFyZSB3cm9uZywgdGhlbiB3ZSBuZWVkIHRv IGluY2x1ZGUgYSByZXF1aXJlbWVudCB0aGF0IHN1Y2ggbmVnb3RpYXRpb24gaXMgYWxzbyByZXF1 aXJlZC4gSW4gdGhlIGFic2VuY2Ugb2YgYSBuZWdvdGlhdGlvbiBwcm90b2NvbCwgaG93ZXZlciwg d2UgbmVlZCB0byBsZWF2ZSB0aGlzIGFzIGEgY29uZmlndXJhdGlvbiBwcm9jZXNzIHVudGlsIHN1 Y2ggdGltZSBhcyB0aGUgbmVnb3RpYXRpb24gcHJvdG9jb2wgd29yayBpcyBjb21wbGV0ZS4gT24g Y29tcGxldGlvbiBvZiBhIHN1aXRhYmxlIG5lZ290aWF0aW9uIHByb3RvY29sIHdlIG5lZWQgdG8g aXNzdWUgYSBmdXJ0aGVyIHVwZGF0ZSByZXF1aXJpbmcgaXRzIHVzZS4NCg0KQWRkaXRpb25hbGx5 IHdlIHNob3VsZCBub3RlIHRoYXQgbm8gY3J5cHRvZ3JhcGhpYyBtZWNoYW5pc20gaGFzIGFuIGlu ZGVmaW5pdGUgbGlmZXRpbWUsIGFuZCB0aGF0IGltcGxlbWVudGF0aW9uIHNob3VsZCBub3RlIHRo ZSBJRVRGIGFudGljaXBhdGVzIHVwZGF0aW5nIHRoZSBkZWZhdWx0IGNyeXB0b2dyYXBoaWMgbWVj aGFuaXNtIG92ZXIgdGltZS4NCg0KVGhlIFRCRCBkZWZhdWx0IHNlY3VyaXR5IGZ1bmN0aW9uIHdp bGwgbmVlZCB0byBiZSBjaG9zZW4gc3VjaCB0aGF0IGl0IGNhbiByZWFzb25hYmx5IGJlIGltcGxl bWVudGVkIG9uIGEgdHlwaWNhbCByb3V0ZXIgcm91dGUgcHJvY2Vzc29yLCBhbmQgd2hpY2ggd2ls bCBwcm92aWRlIGFkZXF1YXRlIHNlY3VyaXR5IHdpdGhvdXQgc2lnbmlmaWNhbnRseSBkZWdyYWRp bmcgdGhlIGNvbnZlcmdlbmNlIHRpbWUgb2YgYW4gTFNSLiBXaXRob3V0IGEgZnVuY3Rpb24gdGhh dCBkb2VzIG5vdCBzaWduaWZpY2FudGx5IGltcGFjdCByb3V0ZXIgY29udmVyZ2VuY2Ugd2Ugc2lt cGx5IGNsb3NlIG9uZSB2dWxuZXJhYmlsaXR5IGFuZCBvcGVuIGFub3RoZXIuDQoNCkFzIGV4cGVy dHMgb24gdGhlIExEUCBwcm90b2NvbCwgYnV0IG5vdCBvbiBzZWN1cml0eSBtZWNoYW5pc21zLCB3 ZSAgbmVlZCB0byBhc2sgdGhlIHNlY3VyaXR5IGFyZWEgZm9yIGEgcmV2aWV3IG9mIG91ciBwcm9w b3NlZCBhcHByb2FjaCwgYW5kIGhlbHAgY29ycmVjdGluZyBhbnkgbWlzdW5kZXJzdGFuZGluZyBv ZiB0aGUgc2VjdXJpdHkgaXNzdWVzIG9yIG91ciBtaXN1bmRlcnN0YW5kaW5nIG9mIHRoZSBleGlz dGluZyBzZWN1cml0eSBtZWNoYW5pc21zLiBXZSBhbHNvIG5lZWQgdGhlIHJlY29tbWVuZGF0aW9u cyBvZiBhIHN1aXRhYmxlIHNlY3VyaXR5IGZ1bmN0aW9uIChUQkQgaW4gdGhlIGFib3ZlIHRleHQp Lg0KDQpCZXN0IHJlZ2FyZHMNCg0KVGhlIE1QTFMgV0cgQ2hhaXJzDQpUaGUgUEFMUyBXRyBDaGFp cnMNCg0KDQo= --_000_AM5PR0701MB25472EFBB94C1C98EA2606B393540AM5PR0701MB2547_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1z b0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJw bGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb1BsYWluVGV4dCwgbGkuTXNv UGxhaW5UZXh0LCBkaXYuTXNvUGxhaW5UZXh0DQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiUGxhaW4gVGV4dCBDaGFyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1h bDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRv Ow0KCW1hcmdpbi1yaWdodDowY207DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFy Z2luLWxlZnQ6MGNtOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29u YWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2lu ZG93dGV4dDt9DQpzcGFuLlBsYWluVGV4dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IlBsYWluIFRl eHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQbGFp biBUZXh0IjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQouTXNvQ2hwRGVm YXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsc2Fucy1zZXJpZjt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4w cHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDld Pjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0K PC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91 dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpz aGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVT IiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mIzQzO1RDUE0gPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPlBsZWFzZSBmcmVlIHRvIGRpc2N1c3MgY2hhbmdlcyB0byBUQ1AtQU8gb24gdGhl IFRDUE0gbGlzdCwgb3Igc3BlYWsgdXAgYXQgdGhlIHVwY29taW5nIFRDUE0gbWVldGluZy48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+VGhlIGFkZGl0aW9uIG9mIFNIQS0yNTYgaGFzIGJl ZW4gZGlzY3Vzc2VkIGluIFRDUE0gYWxyZWFkeSAoc2VlIGRyYWZ0LW5heWFrLXRjcC1zaGEyLTAy KSwgYnV0IHNvIGZhciB0aGVyZSB3YXMgbm90IG11Y2ggZW5lcmd5IGFuZCBubyBpbnRlcmVzdCBm cm9tIHBvdGVudGlhbCBUQ1AtQU8gaW1wbGVtZW50ZXJzIG9yIHVzZXJzLjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij5NaWNoYWVsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4oVENQTSBjby1jaGFpcik8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xp ZCBibHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMu MHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBtcGxz IFttYWlsdG86bXBscy1ib3VuY2VzQGlldGYub3JnXSA8Yj5PbiBCZWhhbGYgT2YNCjwvYj5Fcmlj IFJlc2NvcmxhPGJyPg0KPGI+U2VudDo8L2I+IFdlZG5lc2RheSwgTm92ZW1iZXIgMDgsIDIwMTcg NzowMCBQTTxicj4NCjxiPlRvOjwvYj4gU3Rld2FydCBCcnlhbnQgJmx0O3N0ZXdhcnQuYnJ5YW50 QGdtYWlsLmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IG1wbHNAaWV0Zi5vcmc7IHBhbHMtY2hhaXJz QHRvb2xzLmlldGYub3JnOyAmbHQ7cnRnLWFkc0BpZXRmLm9yZyZndDsgJmx0O3J0Zy1hZHNAaWV0 Zi5vcmcmZ3Q7OyBtcGxzLWNoYWlyc0BpZXRmLm9yZzsgcGFsc0BpZXRmLm9yZzsgJmx0O3NlYy1h ZHNAaWV0Zi5vcmcmZ3Q7ICZsdDtzZWMtYWRzQGlldGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6 PC9iPiBSZTogW21wbHNdIExEUCBTZWN1cml0eTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkhpIFN0ZXdhcnQ8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcyBmb3IgeW91ciBub3RlLjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5NeSBvdmVyYWxsIHNlbnNlIG9m IHRoZSBzdGF0ZSBvZiBwbGF5IGlzLCBJIHRoaW5rIG11Y2ggbGlrZSB5b3Vycy48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VENQLU1ENSBpcyBp bmFkZXF1YXRlIGluIHR3byBtYWpvciByZXNwZWN0czo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gSXQgdXNlcyB3ZWFrIGFsZ29yaXRobXM8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gSXQgaGFz IGEgYmFkIG5lZ290aWF0aW9uL3NldHVvcCBzdG9yeSAobWFudWFsIGtleSBtYW5hZ2VtZW50KTxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UQ1At QU8gaXMgaW50ZW5kZWQgdG8gYmUgYSBkcm9wLWluIHJlcGxhY2VtZW50IGZvciBUQ1AtTUQ1IGFu ZCBzbyByZW1lZGllcyB0aGUgYWxnb3JpdGhtPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5pc3N1ZSBidXQgbm90IHRoZSBrZXkgbWFuYWdlbWVudCBp c3N1ZSBbMF0uIFdlIGhhdmVuJ3QgbWFkZSBtdWNoIHByb2dyZXNzIG9uIHRoZSBrZXk8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPm1hbmFnZW1lbnQg c3RvcnksIGFuZCB0aGF0IHNlZW1zIHRvIGJlIGEgbWFqb3IgaW1wZWRpbWVudCB0byBkZXBsb3lp bmcgZWl0aGVyIG9mIHRoZXNlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj50ZWNobm9sb2dpZXMgKHdoaWNoIEkgYW0gZ2l2ZW4gdG8gdW5kZXJzdGFu ZCBkb24ndCBzZWUgYSBsb3Qgb2YgdXNlKS4gV2Ugc2hvdWxkIHByb2JhYmx5PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj50YWxrIGluIFNpbmdhcG9y ZSBhYm91dCB0aGF0LCBidXQgdGhhdCdzIG5vdCBnb2luZyB0byBnZXQgYmV0dGVyIGFueSB0aW1l IHNvb24uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPkluIHRoZSBpbnRlcmltLCBJIHRoaW5rIHRoZSB0ZXh0IHlvdSBoYXZlIGlzIE9LLCBhbmQg JnF1b3Q7VEJEJnF1b3Q7IHNob3VsZCByZWFkICZxdW90O1NIQS0yNTYmcXVvdDssIHdpdGg8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPnRoZSBmYWxs YmFjayBiZWluZyBTSEEtMjU2IC0mZ3Q7IFNIQS0xIC0mZ3Q7IE1ENS48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LUVrcjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlswXSBUZWNobmljYWxs eSBJdCBoYXMgYmV0dGVyIHN1cHBvcnQgZm9yIHJvbGxvdmVyLCBidXQgdGhpcyBpcyBub3QgYSBo dWdlIGltcHJvdmVtZW50LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+WzFdIHRjcGNyeXB0IGlzIGtpbmQgb2Ygb3J0aG9nb25hbCBoZXJlIGFzIGl0 J3MgdW5hdXRoZW50aWNhdGVkIGJ1dCBvcHBvcnR1bmlzdGljLiZuYnNwOyBUaGF0IHNhaWQsPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5pdCB3b3Vs ZCBwcm92aWRlIGRlZmVuc2UgYWdhaW5zdCBhdHRhY2tlcnMgd2hvIGdhaW4gYWNjZXNzIHRvIHRo ZSBsaW5rIGFmdGVyIGNvbm5lY3Rpb248bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPnNldHVwIGFuZCBkb2Vzbid0IHJlcXVpcmUgY29uZmlndXJhdGlv bi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ T24gV2VkLCBOb3YgOCwgMjAxNyBhdCA5OjI3IEFNLCBTdGV3YXJ0IEJyeWFudCAmbHQ7PGEgaHJl Zj0ibWFpbHRvOnN0ZXdhcnQuYnJ5YW50QGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPnN0ZXdh cnQuYnJ5YW50QGdtYWlsLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGJsb2Nr cXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7 cGFkZGluZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6 MGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+ VG8gdGhlIFNFQyBhbmQgUlRHIEFEcyw8YnI+DQo8YnI+DQpJIGFtIHNlbmRpbmcgdGhlIGZvbGxv d2luZyBtZXNzYWdlIG9uIGJlaGFsZiBvZiB0aGUgTVBMUyBhbmQgdGhlPGJyPg0KUEFMUyBXRyBD aGFpcnMuPGJyPg0KPGJyPg0KVGhlcmUgaXMgYSBjb25jZXJuIHNoYXJlZCBhbW9uZyB0aGUgc2Vj dXJpdHkgY29tbXVuaXR5IGFuZCB0aGUgd29ya2luZyBncm91cHMgdGhhdCBkZXZlbG9wIHRoZSBM RFAgcHJvdG9jb2wgdGhhdCBMRFAgaXMgbm8gbG9uZ2VyIGFkZXF1YXRlbHkgc2VjdXJlZC4gTERQ IGN1cnJlbnRseSByZWxpZXMgb24gTUQ1IGZvciBjcnlwdG9ncmFwaGljIHNlY3VyaXR5IG9mIGl0 cyBtZXNzYWdlcywgYnV0IE1ENSBpcyBhIGhhc2ggZnVuY3Rpb24gdGhhdCBpcw0KIG5vIGxvbmdl ciBjb25zaWRlcmVkIHRvIG1lZXQgY3VycmVudCBzZWN1cml0eSByZXF1aXJlbWVudHMuPGJyPg0K PGJyPg0KSW4gUkZDNTAzNiAocHVibGlzaGVkIDIwMDcpIFNlY3Rpb24gNS4xIChTcG9vZmluZykg LCBMaXN0IGVsZW1lbnQgMi4gU2Vzc2lvbiBjb21tdW5pY2F0aW9uIGNhcnJpZWQgYnkgVENQIHRo ZSBmb2xsb3dpbmcgc3RhdGVtZW50cyBpcyBtYWRlOjxicj4NCjxicj4NCiZxdW90O0xEUCBzcGVj aWZpZXMgdXNlIG9mIHRoZSBUQ1AgTUQ1IFNpZ25hdHVyZSBPcHRpb24gdG8gcHJvdmlkZSBmb3Ig dGhlIGF1dGhlbnRpY2l0eSBhbmQgaW50ZWdyaXR5IG9mIHNlc3Npb24gbWVzc2FnZXMuPGJyPg0K PGJyPg0KJnF1b3Q7W1JGQzIzODVdIGFzc2VydHMgdGhhdCBNRDUgYXV0aGVudGljYXRpb24gaXMg bm93IGNvbnNpZGVyZWQgYnkgc29tZSB0byBiZSB0b28gd2VhayBmb3IgdGhpcyBhcHBsaWNhdGlv bi4mbmJzcDsgSXQgYWxzbyBwb2ludHMgb3V0IHRoYXQgYSBzaW1pbGFyIFRDUCBvcHRpb24gd2l0 aCBhIHN0cm9uZ2VyIGhhc2hpbmcgYWxnb3JpdGhtIChpdCBjaXRlcyBTSEEtMSBhcyBhbiBleGFt cGxlKSBjb3VsZCBiZSBkZXBsb3llZC4mbmJzcDsgVG8gb3VyIGtub3dsZWRnZSwgbm8NCiBzdWNo IFRDUCBvcHRpb24gaGFzIGJlZW4gZGVmaW5lZCBhbmQgZGVwbG95ZWQuJm5ic3A7IEhvd2V2ZXIs IHdlIG5vdGUgdGhhdCBMRFAgY2FuIHVzZSB3aGF0ZXZlciBUQ1AgbWVzc2FnZSBkaWdlc3QgdGVj aG5pcXVlcyBhcmUgYXZhaWxhYmxlLCBhbmQgd2hlbiBvbmUgc3Ryb25nZXIgdGhhbiBNRDUgaXMg c3BlY2lmaWVkIGFuZCBpbXBsZW1lbnRlZCwgdXBncmFkaW5nIExEUCB0byB1c2UgaXQgd291bGQg YmUgcmVsYXRpdmVseSBzdHJhaWdodGZvcndhcmQuJnF1b3Q7PGJyPg0KPGJyPg0KV2Ugbm90ZSB0 aGF0IEJHUCBoYXMgYWxyZWFkeSBiZWVuIHRocm91Z2ggdGhpcyBwcm9jZXNzLCBhbmQgcmVwbGFj ZWQgTUQ1IHdpdGggVENQLUFPIGluIFJGQyA3NDU0LiBJIHdvdWxkIGJlIGxvZ2ljYWwgdG8gZm9s bG93IHRoZSBzYW1lIGFwcHJvYWNoIHRvIHNlY3VyZSBMRFAuIEhvd2V2ZXIsIGFzIGZhciBhcyB3 ZSBhcmUgYWJsZSB0byBhc2NlcnRhaW4sIHRoZXJlIGlzIGN1cnJlbnRseSBubyByZWNvbW1lbmRl ZCwgbWFuZGF0b3J5IHRvIGltcGxlbWVudCwNCiBjcnlwdG9ncmFwaGljIGZ1bmN0aW9uIHNwZWNp ZmllZC4gV2UgYXJlIGNvbmNlcm5lZCB0aGF0IHdpdGhvdXQgc3VjaCBhIG1hbmRhdG9yeSBmdW5j dGlvbiwgaW1wbGVtZW50YXRpb25zIHdpbGwgc2ltcGx5IGZhbGwgYmFjayB0byBNRDUgYW5kIHdl IHdpbGwgYmUgbm8gZnVydGhlciBmb3J3YXJkPGJyPg0KPGJyPg0KV2UgdGhpbmsgdGhhdCB0aGUg YmVzdCB3YXkgZm9yd2FyZCBpcyB0byBwdWJsaXNoIGEgZHJhZnQgc2ltaWxhciB0byBSRkMgNzQ1 NCB0aGF0IGNvbnRhaW5zIHRoZSBmb2xsb3dpbmcgcmVxdWlyZW1lbnQ6PGJyPg0KPGJyPg0KJnF1 b3Q7SW1wbGVtZW50YXRpb25zIGNvbmZvcm1pbmcgdG8gdGhpcyBSRkMgTVVTVCBpbXBsZW1lbnQg VENQLUFPIHRvIHNlY3VyZSB0aGUgVENQIHNlc3Npb25zIGNhcnJ5aW5nIExEUCBpbiBhZGRpdGlv biB0byB0aGUgY3VycmVudGx5IHJlcXVpcmVkIFRDUCBNRDUgU2lnbmF0dXJlIE9wdGlvbi4gRnVy dGhlcm1vcmUsIHRoZSBUQkQgY3J5cHRvZ3JhcGhpYyBtZWNoYW5pc20gbXVzdCBiZSBpbXBsZW1l bnRlZCBhbmQgcHJvdmlkZWQgdG8gVENQLUFPIHRvDQogc2VjdXJlIExEUCBtZXNzYWdlcy4gVGhl IFRCRCBtZWNoYW5pc20gaXMgdGhlIHByZWZlcnJlZCBvcHRpb24sIGFuZCBNRDUgaXMgb25seSB0 byBiZSB1c2VkIHdoZW4gVEJEIGlzIHVuYXZhaWxhYmxlLiZxdW90Ozxicj4NCjxicj4NCldlIGFy ZSBub3QgYW4gZXhwZXJ0cyBvbiB0aGlzIHBhcnQgb2YgdGhlIHN0YWNrLCBidXQgaXQgc2VlbXMg dGhhdCBUQ1Agc2VjdXJpdHkgbmVnb3RpYXRpb24gaXMgc3RpbGwgd29yayBpbiBwcm9ncmVzcy4g SWYgd2UgYXJlIHdyb25nLCB0aGVuIHdlIG5lZWQgdG8gaW5jbHVkZSBhIHJlcXVpcmVtZW50IHRo YXQgc3VjaCBuZWdvdGlhdGlvbiBpcyBhbHNvIHJlcXVpcmVkLiBJbiB0aGUgYWJzZW5jZSBvZiBh IG5lZ290aWF0aW9uIHByb3RvY29sLCBob3dldmVyLA0KIHdlIG5lZWQgdG8gbGVhdmUgdGhpcyBh cyBhIGNvbmZpZ3VyYXRpb24gcHJvY2VzcyB1bnRpbCBzdWNoIHRpbWUgYXMgdGhlIG5lZ290aWF0 aW9uIHByb3RvY29sIHdvcmsgaXMgY29tcGxldGUuIE9uIGNvbXBsZXRpb24gb2YgYSBzdWl0YWJs ZSBuZWdvdGlhdGlvbiBwcm90b2NvbCB3ZSBuZWVkIHRvIGlzc3VlIGEgZnVydGhlciB1cGRhdGUg cmVxdWlyaW5nIGl0cyB1c2UuPGJyPg0KPGJyPg0KQWRkaXRpb25hbGx5IHdlIHNob3VsZCBub3Rl IHRoYXQgbm8gY3J5cHRvZ3JhcGhpYyBtZWNoYW5pc20gaGFzIGFuIGluZGVmaW5pdGUgbGlmZXRp bWUsIGFuZCB0aGF0IGltcGxlbWVudGF0aW9uIHNob3VsZCBub3RlIHRoZSBJRVRGIGFudGljaXBh dGVzIHVwZGF0aW5nIHRoZSBkZWZhdWx0IGNyeXB0b2dyYXBoaWMgbWVjaGFuaXNtIG92ZXIgdGlt ZS48YnI+DQo8YnI+DQpUaGUgVEJEIGRlZmF1bHQgc2VjdXJpdHkgZnVuY3Rpb24gd2lsbCBuZWVk IHRvIGJlIGNob3NlbiBzdWNoIHRoYXQgaXQgY2FuIHJlYXNvbmFibHkgYmUgaW1wbGVtZW50ZWQg b24gYSB0eXBpY2FsIHJvdXRlciByb3V0ZSBwcm9jZXNzb3IsIGFuZCB3aGljaCB3aWxsIHByb3Zp ZGUgYWRlcXVhdGUgc2VjdXJpdHkgd2l0aG91dCBzaWduaWZpY2FudGx5IGRlZ3JhZGluZyB0aGUg Y29udmVyZ2VuY2UgdGltZSBvZiBhbiBMU1IuIFdpdGhvdXQgYSBmdW5jdGlvbg0KIHRoYXQgZG9l cyBub3Qgc2lnbmlmaWNhbnRseSBpbXBhY3Qgcm91dGVyIGNvbnZlcmdlbmNlIHdlIHNpbXBseSBj bG9zZSBvbmUgdnVsbmVyYWJpbGl0eSBhbmQgb3BlbiBhbm90aGVyLjxicj4NCjxicj4NCkFzIGV4 cGVydHMgb24gdGhlIExEUCBwcm90b2NvbCwgYnV0IG5vdCBvbiBzZWN1cml0eSBtZWNoYW5pc21z LCB3ZSZuYnNwOyBuZWVkIHRvIGFzayB0aGUgc2VjdXJpdHkgYXJlYSBmb3IgYSByZXZpZXcgb2Yg b3VyIHByb3Bvc2VkIGFwcHJvYWNoLCBhbmQgaGVscCBjb3JyZWN0aW5nIGFueSBtaXN1bmRlcnN0 YW5kaW5nIG9mIHRoZSBzZWN1cml0eSBpc3N1ZXMgb3Igb3VyIG1pc3VuZGVyc3RhbmRpbmcgb2Yg dGhlIGV4aXN0aW5nIHNlY3VyaXR5IG1lY2hhbmlzbXMuDQogV2UgYWxzbyBuZWVkIHRoZSByZWNv bW1lbmRhdGlvbnMgb2YgYSBzdWl0YWJsZSBzZWN1cml0eSBmdW5jdGlvbiAoVEJEIGluIHRoZSBh Ym92ZSB0ZXh0KS48YnI+DQo8YnI+DQpCZXN0IHJlZ2FyZHM8YnI+DQo8YnI+DQpUaGUgTVBMUyBX RyBDaGFpcnM8YnI+DQpUaGUgUEFMUyBXRyBDaGFpcnM8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwv cD4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_AM5PR0701MB25472EFBB94C1C98EA2606B393540AM5PR0701MB2547_-- From nobody Fri Nov 10 13:16:46 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B0FB512949A; Fri, 10 Nov 2017 13:16:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.91 X-Spam-Level: X-Spam-Status: No, score=-2.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cIH7G6ss1OA5; Fri, 10 Nov 2017 13:16:32 -0800 (PST) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20138.outbound.protection.outlook.com [40.107.2.138]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BD02512421A; Fri, 10 Nov 2017 13:16:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=L2pQwvL60GcFyj55A+aqGBkhBHlz5fgc6ICjPQ9fO5o=; b=izW+KfPlTudb7DeCIF79n4+7QQoFZaBT33yy9NlIuiBmfVHpkIyNJTE/HZaCzCPUUlzIynscACg88Nep/rKRurzlUQZd19NfRCa1rGKJgcEQgROkHSL+lOl3KSyIvRxzBSsnz8pibIgkG4fqGsjbrHbaykGQeyM8YljMn6JRflc= Received: from VI1PR0701MB2559.eurprd07.prod.outlook.com (2603:10a6:801:11::12) by VI1PR0701MB2559.eurprd07.prod.outlook.com (2603:10a6:801:11::12) with TransportReplication id Version 15.20 (Build 218.6); Fri, 10 Nov 2017 21:16:28 +0000 Received: from AM5PR0701MB2547.eurprd07.prod.outlook.com (10.173.92.15) by AM5PR0701MB2546.eurprd07.prod.outlook.com (10.173.92.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.218.6; Fri, 10 Nov 2017 16:21:53 +0000 Received: from AM5PR0701MB2547.eurprd07.prod.outlook.com ([fe80::14d8:6acd:f568:98f]) by AM5PR0701MB2547.eurprd07.prod.outlook.com ([fe80::14d8:6acd:f568:98f%17]) with mapi id 15.20.0218.005; Fri, 10 Nov 2017 16:21:53 +0000 From: "Scharf, Michael (Nokia - DE/Stuttgart)" To: Eric Rescorla , Stewart Bryant , "tcpm@ietf.org" CC: "mpls@ietf.org" , "pals-chairs@tools.ietf.org" , "" , "mpls-chairs@ietf.org" , "pals@ietf.org" , "" Thread-Topic: [mpls] LDP Security Thread-Index: AQHTWLboye/68uxiMkCt9OCmRHsgC6MKxUkAgAMG5/A= Date: Fri, 10 Nov 2017 16:21:52 +0000 Message-ID: References: <2da71163-cf29-cba6-df61-d75a2cfc9c43@gmail.com> <5994f353-5306-0fa8-2d2d-024ebdbb10df@gmail.com> <7ee4fd77-7d8d-0db2-527e-9cf91d87e634@gmail.com> <51b9e5b4-0a44-1449-a4df-91e4f9df5d6b@pi.nu> <02a50f02-779e-bc39-505c-5a51d066b3f0@pi.nu> <15335748-e900-280d-554f-24c55c0f3ba5@gmail.com> In-Reply-To: Accept-Language: en-US, de-DE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [103.5.19.85] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0701MB2559; 6:sAQlo/4uvQBgzyIfOMImNTH1KThAg+U7a6AVQSBE3OX869PhyJHygo16dbNS5g4DCGwTbbaRIA1bqtntDT5RWmtRQyzhZI16Gan9rR2wooobJ/hXyScLnJA2mteQ1fNtsJGmEkGHpURuzGnLJKoO0dx/gXhK6c/p27w8xsKepDwKPqDkCLDgHprP9/txoVMPbhqvOhvXHBtUnjBBIzCzA4zQh/gqgiupm1zP90gNCwe7b9upPrDwpv7lWts1nDpVblyjnX5ZQ99eE5TLduNLd7UZSXToMaoVuPFznkeWUpvvK8WTUGbUsCt33Dfv2olK0attl6iERWPxjxn4D94tKIMGODRZafy3KDvzLGPLPts=; 5:BXUwRSYqDdaVsgY2U6knPQk/ZV8kYqf3tILsIEyVAJkClaR1Ncba3kYKnQiicf0JDdBeISaXZnKCSbDh8yD1Bks5LP9aIsSjJKAYPPZVRwwPTVOzF6e0WKB/7VVs7qdVKuFgI/kw3sYsaPbsGJ6Fz5VQJgRyS8cx2P3XMIT58EE=; 24:UylHE8Q3Op2mGlmioIHBYi497IdarIg8kxYA7lXzH97q4BEC1bsiTpfEUZlPcBLK2jcjjdSaQ/Qc7HOVXX7pHt5Sd3U4eIkO0KztULcdkE8=; 7:Q4U3To9GdWFlg9hpi4cLEjjLNNQFo2bFnz0E7wGomaeI3IRLcHhYB6HMqVSgfAQEZWLURKCGWQI+OWmehtVBoHIfG47gAjOItoqljvZCy1iGCObOORaqbS21NUe21/Zuev9zLB6I2i0nCsjuR8zP2/C3bIK7lKNAKDSo545OEaLuGM93LXqPlTB9bUCWd2viEgcIYLh75Mtevb0QVFc02Y2Wg7hMkt1Tnq74EvVBpLT45yU34E41iIrLwpd1sJ9B x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: 20920c15-d52a-4ae0-2563-08d528572764 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(48565401081)(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(2017052603199); SRVR:AM5PR0701MB2546; x-ms-traffictypediagnostic: VI1PR0701MB2559: x-exchange-antispam-report-test: UriScan:(192374486261705)(21748063052155); x-microsoft-antispam-prvs: x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(10201501046)(3231022)(3002001)(100000703101)(100105400095)(93006095)(93001095)(6055026)(6041248)(20161123558100)(20161123562025)(20161123560025)(20161123555025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123564025)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:VI1PR0701MB2559; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:VI1PR0701MB2559; x-forefront-prvs: 0487C0DB7E x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(39860400002)(24454002)(199003)(189002)(229853002)(93886005)(10710500007)(105586002)(2906002)(3280700002)(6506006)(2950100002)(5660300001)(3660700001)(2501003)(102836003)(86362001)(4326008)(3846002)(66066001)(316002)(53546010)(7696004)(790700001)(6116002)(6436002)(39060400002)(110136005)(2420400007)(8676002)(2900100001)(6306002)(54896002)(9686003)(6246003)(7736002)(478600001)(101416001)(99286004)(189998001)(5250100002)(7110500001)(53936002)(15650500001)(8936002)(81166006)(54906003)(33656002)(236005)(81156014)(14454004)(74316002)(68736007)(55016002)(97736004)(106356001)(25786009)(50986999)(54356999)(76176999); DIR:OUT; SFP:1102; SCL:1; SRVR:VI1PR0701MB2559; H:AM5PR0701MB2547.eurprd07.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: nokia.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=michael.scharf@nokia.com; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM5PR0701MB25472EFBB94C1C98EA2606B393540AM5PR0701MB2547_" MIME-Version: 1.0 X-OriginatorOrg: nokia.com X-MS-Exchange-CrossTenant-Network-Message-Id: 20920c15-d52a-4ae0-2563-08d528572764 X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Nov 2017 16:21:52.9839 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0701MB2559 Archived-At: Subject: Re: [tcpm] [mpls] LDP Security X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Nov 2017 21:16:35 -0000 --_000_AM5PR0701MB25472EFBB94C1C98EA2606B393540AM5PR0701MB2547_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 K1RDUE0NCg0KDQoNClBsZWFzZSBmcmVlIHRvIGRpc2N1c3MgY2hhbmdlcyB0byBUQ1AtQU8gb24g dGhlIFRDUE0gbGlzdCwgb3Igc3BlYWsgdXAgYXQgdGhlIHVwY29taW5nIFRDUE0gbWVldGluZy4N Cg0KDQoNClRoZSBhZGRpdGlvbiBvZiBTSEEtMjU2IGhhcyBiZWVuIGRpc2N1c3NlZCBpbiBUQ1BN IGFscmVhZHkgKHNlZSBkcmFmdC1uYXlhay10Y3Atc2hhMi0wMiksIGJ1dCBzbyBmYXIgdGhlcmUg d2FzIG5vdCBtdWNoIGVuZXJneSBhbmQgbm8gaW50ZXJlc3QgZnJvbSBwb3RlbnRpYWwgVENQLUFP IGltcGxlbWVudGVycyBvciB1c2Vycy4NCg0KDQoNCk1pY2hhZWwNCg0KKFRDUE0gY28tY2hhaXIp DQoNCg0KDQpGcm9tOiBtcGxzIFttYWlsdG86bXBscy1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhh bGYgT2YgRXJpYyBSZXNjb3JsYQ0KU2VudDogV2VkbmVzZGF5LCBOb3ZlbWJlciAwOCwgMjAxNyA3 OjAwIFBNDQpUbzogU3Rld2FydCBCcnlhbnQgPHN0ZXdhcnQuYnJ5YW50QGdtYWlsLmNvbT4NCkNj OiBtcGxzQGlldGYub3JnOyBwYWxzLWNoYWlyc0B0b29scy5pZXRmLm9yZzsgPHJ0Zy1hZHNAaWV0 Zi5vcmc+IDxydGctYWRzQGlldGYub3JnPjsgbXBscy1jaGFpcnNAaWV0Zi5vcmc7IHBhbHNAaWV0 Zi5vcmc7IDxzZWMtYWRzQGlldGYub3JnPiA8c2VjLWFkc0BpZXRmLm9yZz4NClN1YmplY3Q6IFJl OiBbbXBsc10gTERQIFNlY3VyaXR5DQoNCkhpIFN0ZXdhcnQNCg0KVGhhbmtzIGZvciB5b3VyIG5v dGUuDQoNCk15IG92ZXJhbGwgc2Vuc2Ugb2YgdGhlIHN0YXRlIG9mIHBsYXkgaXMsIEkgdGhpbmsg bXVjaCBsaWtlIHlvdXJzLg0KDQpUQ1AtTUQ1IGlzIGluYWRlcXVhdGUgaW4gdHdvIG1ham9yIHJl c3BlY3RzOg0KLSBJdCB1c2VzIHdlYWsgYWxnb3JpdGhtcw0KLSBJdCBoYXMgYSBiYWQgbmVnb3Rp YXRpb24vc2V0dW9wIHN0b3J5IChtYW51YWwga2V5IG1hbmFnZW1lbnQpDQoNClRDUC1BTyBpcyBp bnRlbmRlZCB0byBiZSBhIGRyb3AtaW4gcmVwbGFjZW1lbnQgZm9yIFRDUC1NRDUgYW5kIHNvIHJl bWVkaWVzIHRoZSBhbGdvcml0aG0NCmlzc3VlIGJ1dCBub3QgdGhlIGtleSBtYW5hZ2VtZW50IGlz c3VlIFswXS4gV2UgaGF2ZW4ndCBtYWRlIG11Y2ggcHJvZ3Jlc3Mgb24gdGhlIGtleQ0KbWFuYWdl bWVudCBzdG9yeSwgYW5kIHRoYXQgc2VlbXMgdG8gYmUgYSBtYWpvciBpbXBlZGltZW50IHRvIGRl cGxveWluZyBlaXRoZXIgb2YgdGhlc2UNCnRlY2hub2xvZ2llcyAod2hpY2ggSSBhbSBnaXZlbiB0 byB1bmRlcnN0YW5kIGRvbid0IHNlZSBhIGxvdCBvZiB1c2UpLiBXZSBzaG91bGQgcHJvYmFibHkN CnRhbGsgaW4gU2luZ2Fwb3JlIGFib3V0IHRoYXQsIGJ1dCB0aGF0J3Mgbm90IGdvaW5nIHRvIGdl dCBiZXR0ZXIgYW55IHRpbWUgc29vbi4NCg0KSW4gdGhlIGludGVyaW0sIEkgdGhpbmsgdGhlIHRl eHQgeW91IGhhdmUgaXMgT0ssIGFuZCAiVEJEIiBzaG91bGQgcmVhZCAiU0hBLTI1NiIsIHdpdGgN CnRoZSBmYWxsYmFjayBiZWluZyBTSEEtMjU2IC0+IFNIQS0xIC0+IE1ENS4NCg0KLUVrcg0KDQoN ClswXSBUZWNobmljYWxseSBJdCBoYXMgYmV0dGVyIHN1cHBvcnQgZm9yIHJvbGxvdmVyLCBidXQg dGhpcyBpcyBub3QgYSBodWdlIGltcHJvdmVtZW50Lg0KWzFdIHRjcGNyeXB0IGlzIGtpbmQgb2Yg b3J0aG9nb25hbCBoZXJlIGFzIGl0J3MgdW5hdXRoZW50aWNhdGVkIGJ1dCBvcHBvcnR1bmlzdGlj LiAgVGhhdCBzYWlkLA0KaXQgd291bGQgcHJvdmlkZSBkZWZlbnNlIGFnYWluc3QgYXR0YWNrZXJz IHdobyBnYWluIGFjY2VzcyB0byB0aGUgbGluayBhZnRlciBjb25uZWN0aW9uDQpzZXR1cCBhbmQg ZG9lc24ndCByZXF1aXJlIGNvbmZpZ3VyYXRpb24uDQoNCk9uIFdlZCwgTm92IDgsIDIwMTcgYXQg OToyNyBBTSwgU3Rld2FydCBCcnlhbnQgPHN0ZXdhcnQuYnJ5YW50QGdtYWlsLmNvbTxtYWlsdG86 c3Rld2FydC5icnlhbnRAZ21haWwuY29tPj4gd3JvdGU6DQpUbyB0aGUgU0VDIGFuZCBSVEcgQURz LA0KDQpJIGFtIHNlbmRpbmcgdGhlIGZvbGxvd2luZyBtZXNzYWdlIG9uIGJlaGFsZiBvZiB0aGUg TVBMUyBhbmQgdGhlDQpQQUxTIFdHIENoYWlycy4NCg0KVGhlcmUgaXMgYSBjb25jZXJuIHNoYXJl ZCBhbW9uZyB0aGUgc2VjdXJpdHkgY29tbXVuaXR5IGFuZCB0aGUgd29ya2luZyBncm91cHMgdGhh dCBkZXZlbG9wIHRoZSBMRFAgcHJvdG9jb2wgdGhhdCBMRFAgaXMgbm8gbG9uZ2VyIGFkZXF1YXRl bHkgc2VjdXJlZC4gTERQIGN1cnJlbnRseSByZWxpZXMgb24gTUQ1IGZvciBjcnlwdG9ncmFwaGlj IHNlY3VyaXR5IG9mIGl0cyBtZXNzYWdlcywgYnV0IE1ENSBpcyBhIGhhc2ggZnVuY3Rpb24gdGhh dCBpcyBubyBsb25nZXIgY29uc2lkZXJlZCB0byBtZWV0IGN1cnJlbnQgc2VjdXJpdHkgcmVxdWly ZW1lbnRzLg0KDQpJbiBSRkM1MDM2IChwdWJsaXNoZWQgMjAwNykgU2VjdGlvbiA1LjEgKFNwb29m aW5nKSAsIExpc3QgZWxlbWVudCAyLiBTZXNzaW9uIGNvbW11bmljYXRpb24gY2FycmllZCBieSBU Q1AgdGhlIGZvbGxvd2luZyBzdGF0ZW1lbnRzIGlzIG1hZGU6DQoNCiJMRFAgc3BlY2lmaWVzIHVz ZSBvZiB0aGUgVENQIE1ENSBTaWduYXR1cmUgT3B0aW9uIHRvIHByb3ZpZGUgZm9yIHRoZSBhdXRo ZW50aWNpdHkgYW5kIGludGVncml0eSBvZiBzZXNzaW9uIG1lc3NhZ2VzLg0KDQoiW1JGQzIzODVd IGFzc2VydHMgdGhhdCBNRDUgYXV0aGVudGljYXRpb24gaXMgbm93IGNvbnNpZGVyZWQgYnkgc29t ZSB0byBiZSB0b28gd2VhayBmb3IgdGhpcyBhcHBsaWNhdGlvbi4gIEl0IGFsc28gcG9pbnRzIG91 dCB0aGF0IGEgc2ltaWxhciBUQ1Agb3B0aW9uIHdpdGggYSBzdHJvbmdlciBoYXNoaW5nIGFsZ29y aXRobSAoaXQgY2l0ZXMgU0hBLTEgYXMgYW4gZXhhbXBsZSkgY291bGQgYmUgZGVwbG95ZWQuICBU byBvdXIga25vd2xlZGdlLCBubyBzdWNoIFRDUCBvcHRpb24gaGFzIGJlZW4gZGVmaW5lZCBhbmQg ZGVwbG95ZWQuICBIb3dldmVyLCB3ZSBub3RlIHRoYXQgTERQIGNhbiB1c2Ugd2hhdGV2ZXIgVENQ IG1lc3NhZ2UgZGlnZXN0IHRlY2huaXF1ZXMgYXJlIGF2YWlsYWJsZSwgYW5kIHdoZW4gb25lIHN0 cm9uZ2VyIHRoYW4gTUQ1IGlzIHNwZWNpZmllZCBhbmQgaW1wbGVtZW50ZWQsIHVwZ3JhZGluZyBM RFAgdG8gdXNlIGl0IHdvdWxkIGJlIHJlbGF0aXZlbHkgc3RyYWlnaHRmb3J3YXJkLiINCg0KV2Ug bm90ZSB0aGF0IEJHUCBoYXMgYWxyZWFkeSBiZWVuIHRocm91Z2ggdGhpcyBwcm9jZXNzLCBhbmQg cmVwbGFjZWQgTUQ1IHdpdGggVENQLUFPIGluIFJGQyA3NDU0LiBJIHdvdWxkIGJlIGxvZ2ljYWwg dG8gZm9sbG93IHRoZSBzYW1lIGFwcHJvYWNoIHRvIHNlY3VyZSBMRFAuIEhvd2V2ZXIsIGFzIGZh ciBhcyB3ZSBhcmUgYWJsZSB0byBhc2NlcnRhaW4sIHRoZXJlIGlzIGN1cnJlbnRseSBubyByZWNv bW1lbmRlZCwgbWFuZGF0b3J5IHRvIGltcGxlbWVudCwgY3J5cHRvZ3JhcGhpYyBmdW5jdGlvbiBz cGVjaWZpZWQuIFdlIGFyZSBjb25jZXJuZWQgdGhhdCB3aXRob3V0IHN1Y2ggYSBtYW5kYXRvcnkg ZnVuY3Rpb24sIGltcGxlbWVudGF0aW9ucyB3aWxsIHNpbXBseSBmYWxsIGJhY2sgdG8gTUQ1IGFu ZCB3ZSB3aWxsIGJlIG5vIGZ1cnRoZXIgZm9yd2FyZA0KDQpXZSB0aGluayB0aGF0IHRoZSBiZXN0 IHdheSBmb3J3YXJkIGlzIHRvIHB1Ymxpc2ggYSBkcmFmdCBzaW1pbGFyIHRvIFJGQyA3NDU0IHRo YXQgY29udGFpbnMgdGhlIGZvbGxvd2luZyByZXF1aXJlbWVudDoNCg0KIkltcGxlbWVudGF0aW9u cyBjb25mb3JtaW5nIHRvIHRoaXMgUkZDIE1VU1QgaW1wbGVtZW50IFRDUC1BTyB0byBzZWN1cmUg dGhlIFRDUCBzZXNzaW9ucyBjYXJyeWluZyBMRFAgaW4gYWRkaXRpb24gdG8gdGhlIGN1cnJlbnRs eSByZXF1aXJlZCBUQ1AgTUQ1IFNpZ25hdHVyZSBPcHRpb24uIEZ1cnRoZXJtb3JlLCB0aGUgVEJE IGNyeXB0b2dyYXBoaWMgbWVjaGFuaXNtIG11c3QgYmUgaW1wbGVtZW50ZWQgYW5kIHByb3ZpZGVk IHRvIFRDUC1BTyB0byBzZWN1cmUgTERQIG1lc3NhZ2VzLiBUaGUgVEJEIG1lY2hhbmlzbSBpcyB0 aGUgcHJlZmVycmVkIG9wdGlvbiwgYW5kIE1ENSBpcyBvbmx5IHRvIGJlIHVzZWQgd2hlbiBUQkQg aXMgdW5hdmFpbGFibGUuIg0KDQpXZSBhcmUgbm90IGFuIGV4cGVydHMgb24gdGhpcyBwYXJ0IG9m IHRoZSBzdGFjaywgYnV0IGl0IHNlZW1zIHRoYXQgVENQIHNlY3VyaXR5IG5lZ290aWF0aW9uIGlz IHN0aWxsIHdvcmsgaW4gcHJvZ3Jlc3MuIElmIHdlIGFyZSB3cm9uZywgdGhlbiB3ZSBuZWVkIHRv IGluY2x1ZGUgYSByZXF1aXJlbWVudCB0aGF0IHN1Y2ggbmVnb3RpYXRpb24gaXMgYWxzbyByZXF1 aXJlZC4gSW4gdGhlIGFic2VuY2Ugb2YgYSBuZWdvdGlhdGlvbiBwcm90b2NvbCwgaG93ZXZlciwg d2UgbmVlZCB0byBsZWF2ZSB0aGlzIGFzIGEgY29uZmlndXJhdGlvbiBwcm9jZXNzIHVudGlsIHN1 Y2ggdGltZSBhcyB0aGUgbmVnb3RpYXRpb24gcHJvdG9jb2wgd29yayBpcyBjb21wbGV0ZS4gT24g Y29tcGxldGlvbiBvZiBhIHN1aXRhYmxlIG5lZ290aWF0aW9uIHByb3RvY29sIHdlIG5lZWQgdG8g aXNzdWUgYSBmdXJ0aGVyIHVwZGF0ZSByZXF1aXJpbmcgaXRzIHVzZS4NCg0KQWRkaXRpb25hbGx5 IHdlIHNob3VsZCBub3RlIHRoYXQgbm8gY3J5cHRvZ3JhcGhpYyBtZWNoYW5pc20gaGFzIGFuIGlu ZGVmaW5pdGUgbGlmZXRpbWUsIGFuZCB0aGF0IGltcGxlbWVudGF0aW9uIHNob3VsZCBub3RlIHRo ZSBJRVRGIGFudGljaXBhdGVzIHVwZGF0aW5nIHRoZSBkZWZhdWx0IGNyeXB0b2dyYXBoaWMgbWVj aGFuaXNtIG92ZXIgdGltZS4NCg0KVGhlIFRCRCBkZWZhdWx0IHNlY3VyaXR5IGZ1bmN0aW9uIHdp bGwgbmVlZCB0byBiZSBjaG9zZW4gc3VjaCB0aGF0IGl0IGNhbiByZWFzb25hYmx5IGJlIGltcGxl bWVudGVkIG9uIGEgdHlwaWNhbCByb3V0ZXIgcm91dGUgcHJvY2Vzc29yLCBhbmQgd2hpY2ggd2ls bCBwcm92aWRlIGFkZXF1YXRlIHNlY3VyaXR5IHdpdGhvdXQgc2lnbmlmaWNhbnRseSBkZWdyYWRp bmcgdGhlIGNvbnZlcmdlbmNlIHRpbWUgb2YgYW4gTFNSLiBXaXRob3V0IGEgZnVuY3Rpb24gdGhh dCBkb2VzIG5vdCBzaWduaWZpY2FudGx5IGltcGFjdCByb3V0ZXIgY29udmVyZ2VuY2Ugd2Ugc2lt cGx5IGNsb3NlIG9uZSB2dWxuZXJhYmlsaXR5IGFuZCBvcGVuIGFub3RoZXIuDQoNCkFzIGV4cGVy dHMgb24gdGhlIExEUCBwcm90b2NvbCwgYnV0IG5vdCBvbiBzZWN1cml0eSBtZWNoYW5pc21zLCB3 ZSAgbmVlZCB0byBhc2sgdGhlIHNlY3VyaXR5IGFyZWEgZm9yIGEgcmV2aWV3IG9mIG91ciBwcm9w b3NlZCBhcHByb2FjaCwgYW5kIGhlbHAgY29ycmVjdGluZyBhbnkgbWlzdW5kZXJzdGFuZGluZyBv ZiB0aGUgc2VjdXJpdHkgaXNzdWVzIG9yIG91ciBtaXN1bmRlcnN0YW5kaW5nIG9mIHRoZSBleGlz dGluZyBzZWN1cml0eSBtZWNoYW5pc21zLiBXZSBhbHNvIG5lZWQgdGhlIHJlY29tbWVuZGF0aW9u cyBvZiBhIHN1aXRhYmxlIHNlY3VyaXR5IGZ1bmN0aW9uIChUQkQgaW4gdGhlIGFib3ZlIHRleHQp Lg0KDQpCZXN0IHJlZ2FyZHMNCg0KVGhlIE1QTFMgV0cgQ2hhaXJzDQpUaGUgUEFMUyBXRyBDaGFp cnMNCg0KDQo= --_000_AM5PR0701MB25472EFBB94C1C98EA2606B393540AM5PR0701MB2547_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1z b0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJw bGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb1BsYWluVGV4dCwgbGkuTXNv UGxhaW5UZXh0LCBkaXYuTXNvUGxhaW5UZXh0DQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiUGxhaW4gVGV4dCBDaGFyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1h bDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRv Ow0KCW1hcmdpbi1yaWdodDowY207DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFy Z2luLWxlZnQ6MGNtOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29u YWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2lu ZG93dGV4dDt9DQpzcGFuLlBsYWluVGV4dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IlBsYWluIFRl eHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQbGFp biBUZXh0IjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQouTXNvQ2hwRGVm YXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsc2Fucy1zZXJpZjt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4w cHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDld Pjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0K PC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91 dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpz aGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVT IiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mIzQzO1RDUE0gPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPlBsZWFzZSBmcmVlIHRvIGRpc2N1c3MgY2hhbmdlcyB0byBUQ1AtQU8gb24gdGhl IFRDUE0gbGlzdCwgb3Igc3BlYWsgdXAgYXQgdGhlIHVwY29taW5nIFRDUE0gbWVldGluZy48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+VGhlIGFkZGl0aW9uIG9mIFNIQS0yNTYgaGFzIGJl ZW4gZGlzY3Vzc2VkIGluIFRDUE0gYWxyZWFkeSAoc2VlIGRyYWZ0LW5heWFrLXRjcC1zaGEyLTAy KSwgYnV0IHNvIGZhciB0aGVyZSB3YXMgbm90IG11Y2ggZW5lcmd5IGFuZCBubyBpbnRlcmVzdCBm cm9tIHBvdGVudGlhbCBUQ1AtQU8gaW1wbGVtZW50ZXJzIG9yIHVzZXJzLjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij5NaWNoYWVsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4oVENQTSBjby1jaGFpcik8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xp ZCBibHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMu MHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBtcGxz IFttYWlsdG86bXBscy1ib3VuY2VzQGlldGYub3JnXSA8Yj5PbiBCZWhhbGYgT2YNCjwvYj5Fcmlj IFJlc2NvcmxhPGJyPg0KPGI+U2VudDo8L2I+IFdlZG5lc2RheSwgTm92ZW1iZXIgMDgsIDIwMTcg NzowMCBQTTxicj4NCjxiPlRvOjwvYj4gU3Rld2FydCBCcnlhbnQgJmx0O3N0ZXdhcnQuYnJ5YW50 QGdtYWlsLmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IG1wbHNAaWV0Zi5vcmc7IHBhbHMtY2hhaXJz QHRvb2xzLmlldGYub3JnOyAmbHQ7cnRnLWFkc0BpZXRmLm9yZyZndDsgJmx0O3J0Zy1hZHNAaWV0 Zi5vcmcmZ3Q7OyBtcGxzLWNoYWlyc0BpZXRmLm9yZzsgcGFsc0BpZXRmLm9yZzsgJmx0O3NlYy1h ZHNAaWV0Zi5vcmcmZ3Q7ICZsdDtzZWMtYWRzQGlldGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6 PC9iPiBSZTogW21wbHNdIExEUCBTZWN1cml0eTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkhpIFN0ZXdhcnQ8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcyBmb3IgeW91ciBub3RlLjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5NeSBvdmVyYWxsIHNlbnNlIG9m IHRoZSBzdGF0ZSBvZiBwbGF5IGlzLCBJIHRoaW5rIG11Y2ggbGlrZSB5b3Vycy48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VENQLU1ENSBpcyBp bmFkZXF1YXRlIGluIHR3byBtYWpvciByZXNwZWN0czo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gSXQgdXNlcyB3ZWFrIGFsZ29yaXRobXM8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gSXQgaGFz IGEgYmFkIG5lZ290aWF0aW9uL3NldHVvcCBzdG9yeSAobWFudWFsIGtleSBtYW5hZ2VtZW50KTxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UQ1At QU8gaXMgaW50ZW5kZWQgdG8gYmUgYSBkcm9wLWluIHJlcGxhY2VtZW50IGZvciBUQ1AtTUQ1IGFu ZCBzbyByZW1lZGllcyB0aGUgYWxnb3JpdGhtPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5pc3N1ZSBidXQgbm90IHRoZSBrZXkgbWFuYWdlbWVudCBp c3N1ZSBbMF0uIFdlIGhhdmVuJ3QgbWFkZSBtdWNoIHByb2dyZXNzIG9uIHRoZSBrZXk8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPm1hbmFnZW1lbnQg c3RvcnksIGFuZCB0aGF0IHNlZW1zIHRvIGJlIGEgbWFqb3IgaW1wZWRpbWVudCB0byBkZXBsb3lp bmcgZWl0aGVyIG9mIHRoZXNlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj50ZWNobm9sb2dpZXMgKHdoaWNoIEkgYW0gZ2l2ZW4gdG8gdW5kZXJzdGFu ZCBkb24ndCBzZWUgYSBsb3Qgb2YgdXNlKS4gV2Ugc2hvdWxkIHByb2JhYmx5PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj50YWxrIGluIFNpbmdhcG9y ZSBhYm91dCB0aGF0LCBidXQgdGhhdCdzIG5vdCBnb2luZyB0byBnZXQgYmV0dGVyIGFueSB0aW1l IHNvb24uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPkluIHRoZSBpbnRlcmltLCBJIHRoaW5rIHRoZSB0ZXh0IHlvdSBoYXZlIGlzIE9LLCBhbmQg JnF1b3Q7VEJEJnF1b3Q7IHNob3VsZCByZWFkICZxdW90O1NIQS0yNTYmcXVvdDssIHdpdGg8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPnRoZSBmYWxs YmFjayBiZWluZyBTSEEtMjU2IC0mZ3Q7IFNIQS0xIC0mZ3Q7IE1ENS48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LUVrcjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlswXSBUZWNobmljYWxs eSBJdCBoYXMgYmV0dGVyIHN1cHBvcnQgZm9yIHJvbGxvdmVyLCBidXQgdGhpcyBpcyBub3QgYSBo dWdlIGltcHJvdmVtZW50LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+WzFdIHRjcGNyeXB0IGlzIGtpbmQgb2Ygb3J0aG9nb25hbCBoZXJlIGFzIGl0 J3MgdW5hdXRoZW50aWNhdGVkIGJ1dCBvcHBvcnR1bmlzdGljLiZuYnNwOyBUaGF0IHNhaWQsPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5pdCB3b3Vs ZCBwcm92aWRlIGRlZmVuc2UgYWdhaW5zdCBhdHRhY2tlcnMgd2hvIGdhaW4gYWNjZXNzIHRvIHRo ZSBsaW5rIGFmdGVyIGNvbm5lY3Rpb248bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPnNldHVwIGFuZCBkb2Vzbid0IHJlcXVpcmUgY29uZmlndXJhdGlv bi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ T24gV2VkLCBOb3YgOCwgMjAxNyBhdCA5OjI3IEFNLCBTdGV3YXJ0IEJyeWFudCAmbHQ7PGEgaHJl Zj0ibWFpbHRvOnN0ZXdhcnQuYnJ5YW50QGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPnN0ZXdh cnQuYnJ5YW50QGdtYWlsLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGJsb2Nr cXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7 cGFkZGluZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6 MGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+ VG8gdGhlIFNFQyBhbmQgUlRHIEFEcyw8YnI+DQo8YnI+DQpJIGFtIHNlbmRpbmcgdGhlIGZvbGxv d2luZyBtZXNzYWdlIG9uIGJlaGFsZiBvZiB0aGUgTVBMUyBhbmQgdGhlPGJyPg0KUEFMUyBXRyBD aGFpcnMuPGJyPg0KPGJyPg0KVGhlcmUgaXMgYSBjb25jZXJuIHNoYXJlZCBhbW9uZyB0aGUgc2Vj dXJpdHkgY29tbXVuaXR5IGFuZCB0aGUgd29ya2luZyBncm91cHMgdGhhdCBkZXZlbG9wIHRoZSBM RFAgcHJvdG9jb2wgdGhhdCBMRFAgaXMgbm8gbG9uZ2VyIGFkZXF1YXRlbHkgc2VjdXJlZC4gTERQ IGN1cnJlbnRseSByZWxpZXMgb24gTUQ1IGZvciBjcnlwdG9ncmFwaGljIHNlY3VyaXR5IG9mIGl0 cyBtZXNzYWdlcywgYnV0IE1ENSBpcyBhIGhhc2ggZnVuY3Rpb24gdGhhdCBpcw0KIG5vIGxvbmdl ciBjb25zaWRlcmVkIHRvIG1lZXQgY3VycmVudCBzZWN1cml0eSByZXF1aXJlbWVudHMuPGJyPg0K PGJyPg0KSW4gUkZDNTAzNiAocHVibGlzaGVkIDIwMDcpIFNlY3Rpb24gNS4xIChTcG9vZmluZykg LCBMaXN0IGVsZW1lbnQgMi4gU2Vzc2lvbiBjb21tdW5pY2F0aW9uIGNhcnJpZWQgYnkgVENQIHRo ZSBmb2xsb3dpbmcgc3RhdGVtZW50cyBpcyBtYWRlOjxicj4NCjxicj4NCiZxdW90O0xEUCBzcGVj aWZpZXMgdXNlIG9mIHRoZSBUQ1AgTUQ1IFNpZ25hdHVyZSBPcHRpb24gdG8gcHJvdmlkZSBmb3Ig dGhlIGF1dGhlbnRpY2l0eSBhbmQgaW50ZWdyaXR5IG9mIHNlc3Npb24gbWVzc2FnZXMuPGJyPg0K PGJyPg0KJnF1b3Q7W1JGQzIzODVdIGFzc2VydHMgdGhhdCBNRDUgYXV0aGVudGljYXRpb24gaXMg bm93IGNvbnNpZGVyZWQgYnkgc29tZSB0byBiZSB0b28gd2VhayBmb3IgdGhpcyBhcHBsaWNhdGlv bi4mbmJzcDsgSXQgYWxzbyBwb2ludHMgb3V0IHRoYXQgYSBzaW1pbGFyIFRDUCBvcHRpb24gd2l0 aCBhIHN0cm9uZ2VyIGhhc2hpbmcgYWxnb3JpdGhtIChpdCBjaXRlcyBTSEEtMSBhcyBhbiBleGFt cGxlKSBjb3VsZCBiZSBkZXBsb3llZC4mbmJzcDsgVG8gb3VyIGtub3dsZWRnZSwgbm8NCiBzdWNo IFRDUCBvcHRpb24gaGFzIGJlZW4gZGVmaW5lZCBhbmQgZGVwbG95ZWQuJm5ic3A7IEhvd2V2ZXIs IHdlIG5vdGUgdGhhdCBMRFAgY2FuIHVzZSB3aGF0ZXZlciBUQ1AgbWVzc2FnZSBkaWdlc3QgdGVj aG5pcXVlcyBhcmUgYXZhaWxhYmxlLCBhbmQgd2hlbiBvbmUgc3Ryb25nZXIgdGhhbiBNRDUgaXMg c3BlY2lmaWVkIGFuZCBpbXBsZW1lbnRlZCwgdXBncmFkaW5nIExEUCB0byB1c2UgaXQgd291bGQg YmUgcmVsYXRpdmVseSBzdHJhaWdodGZvcndhcmQuJnF1b3Q7PGJyPg0KPGJyPg0KV2Ugbm90ZSB0 aGF0IEJHUCBoYXMgYWxyZWFkeSBiZWVuIHRocm91Z2ggdGhpcyBwcm9jZXNzLCBhbmQgcmVwbGFj ZWQgTUQ1IHdpdGggVENQLUFPIGluIFJGQyA3NDU0LiBJIHdvdWxkIGJlIGxvZ2ljYWwgdG8gZm9s bG93IHRoZSBzYW1lIGFwcHJvYWNoIHRvIHNlY3VyZSBMRFAuIEhvd2V2ZXIsIGFzIGZhciBhcyB3 ZSBhcmUgYWJsZSB0byBhc2NlcnRhaW4sIHRoZXJlIGlzIGN1cnJlbnRseSBubyByZWNvbW1lbmRl ZCwgbWFuZGF0b3J5IHRvIGltcGxlbWVudCwNCiBjcnlwdG9ncmFwaGljIGZ1bmN0aW9uIHNwZWNp ZmllZC4gV2UgYXJlIGNvbmNlcm5lZCB0aGF0IHdpdGhvdXQgc3VjaCBhIG1hbmRhdG9yeSBmdW5j dGlvbiwgaW1wbGVtZW50YXRpb25zIHdpbGwgc2ltcGx5IGZhbGwgYmFjayB0byBNRDUgYW5kIHdl IHdpbGwgYmUgbm8gZnVydGhlciBmb3J3YXJkPGJyPg0KPGJyPg0KV2UgdGhpbmsgdGhhdCB0aGUg YmVzdCB3YXkgZm9yd2FyZCBpcyB0byBwdWJsaXNoIGEgZHJhZnQgc2ltaWxhciB0byBSRkMgNzQ1 NCB0aGF0IGNvbnRhaW5zIHRoZSBmb2xsb3dpbmcgcmVxdWlyZW1lbnQ6PGJyPg0KPGJyPg0KJnF1 b3Q7SW1wbGVtZW50YXRpb25zIGNvbmZvcm1pbmcgdG8gdGhpcyBSRkMgTVVTVCBpbXBsZW1lbnQg VENQLUFPIHRvIHNlY3VyZSB0aGUgVENQIHNlc3Npb25zIGNhcnJ5aW5nIExEUCBpbiBhZGRpdGlv biB0byB0aGUgY3VycmVudGx5IHJlcXVpcmVkIFRDUCBNRDUgU2lnbmF0dXJlIE9wdGlvbi4gRnVy dGhlcm1vcmUsIHRoZSBUQkQgY3J5cHRvZ3JhcGhpYyBtZWNoYW5pc20gbXVzdCBiZSBpbXBsZW1l bnRlZCBhbmQgcHJvdmlkZWQgdG8gVENQLUFPIHRvDQogc2VjdXJlIExEUCBtZXNzYWdlcy4gVGhl IFRCRCBtZWNoYW5pc20gaXMgdGhlIHByZWZlcnJlZCBvcHRpb24sIGFuZCBNRDUgaXMgb25seSB0 byBiZSB1c2VkIHdoZW4gVEJEIGlzIHVuYXZhaWxhYmxlLiZxdW90Ozxicj4NCjxicj4NCldlIGFy ZSBub3QgYW4gZXhwZXJ0cyBvbiB0aGlzIHBhcnQgb2YgdGhlIHN0YWNrLCBidXQgaXQgc2VlbXMg dGhhdCBUQ1Agc2VjdXJpdHkgbmVnb3RpYXRpb24gaXMgc3RpbGwgd29yayBpbiBwcm9ncmVzcy4g SWYgd2UgYXJlIHdyb25nLCB0aGVuIHdlIG5lZWQgdG8gaW5jbHVkZSBhIHJlcXVpcmVtZW50IHRo YXQgc3VjaCBuZWdvdGlhdGlvbiBpcyBhbHNvIHJlcXVpcmVkLiBJbiB0aGUgYWJzZW5jZSBvZiBh IG5lZ290aWF0aW9uIHByb3RvY29sLCBob3dldmVyLA0KIHdlIG5lZWQgdG8gbGVhdmUgdGhpcyBh cyBhIGNvbmZpZ3VyYXRpb24gcHJvY2VzcyB1bnRpbCBzdWNoIHRpbWUgYXMgdGhlIG5lZ290aWF0 aW9uIHByb3RvY29sIHdvcmsgaXMgY29tcGxldGUuIE9uIGNvbXBsZXRpb24gb2YgYSBzdWl0YWJs ZSBuZWdvdGlhdGlvbiBwcm90b2NvbCB3ZSBuZWVkIHRvIGlzc3VlIGEgZnVydGhlciB1cGRhdGUg cmVxdWlyaW5nIGl0cyB1c2UuPGJyPg0KPGJyPg0KQWRkaXRpb25hbGx5IHdlIHNob3VsZCBub3Rl IHRoYXQgbm8gY3J5cHRvZ3JhcGhpYyBtZWNoYW5pc20gaGFzIGFuIGluZGVmaW5pdGUgbGlmZXRp bWUsIGFuZCB0aGF0IGltcGxlbWVudGF0aW9uIHNob3VsZCBub3RlIHRoZSBJRVRGIGFudGljaXBh dGVzIHVwZGF0aW5nIHRoZSBkZWZhdWx0IGNyeXB0b2dyYXBoaWMgbWVjaGFuaXNtIG92ZXIgdGlt ZS48YnI+DQo8YnI+DQpUaGUgVEJEIGRlZmF1bHQgc2VjdXJpdHkgZnVuY3Rpb24gd2lsbCBuZWVk IHRvIGJlIGNob3NlbiBzdWNoIHRoYXQgaXQgY2FuIHJlYXNvbmFibHkgYmUgaW1wbGVtZW50ZWQg b24gYSB0eXBpY2FsIHJvdXRlciByb3V0ZSBwcm9jZXNzb3IsIGFuZCB3aGljaCB3aWxsIHByb3Zp ZGUgYWRlcXVhdGUgc2VjdXJpdHkgd2l0aG91dCBzaWduaWZpY2FudGx5IGRlZ3JhZGluZyB0aGUg Y29udmVyZ2VuY2UgdGltZSBvZiBhbiBMU1IuIFdpdGhvdXQgYSBmdW5jdGlvbg0KIHRoYXQgZG9l cyBub3Qgc2lnbmlmaWNhbnRseSBpbXBhY3Qgcm91dGVyIGNvbnZlcmdlbmNlIHdlIHNpbXBseSBj bG9zZSBvbmUgdnVsbmVyYWJpbGl0eSBhbmQgb3BlbiBhbm90aGVyLjxicj4NCjxicj4NCkFzIGV4 cGVydHMgb24gdGhlIExEUCBwcm90b2NvbCwgYnV0IG5vdCBvbiBzZWN1cml0eSBtZWNoYW5pc21z LCB3ZSZuYnNwOyBuZWVkIHRvIGFzayB0aGUgc2VjdXJpdHkgYXJlYSBmb3IgYSByZXZpZXcgb2Yg b3VyIHByb3Bvc2VkIGFwcHJvYWNoLCBhbmQgaGVscCBjb3JyZWN0aW5nIGFueSBtaXN1bmRlcnN0 YW5kaW5nIG9mIHRoZSBzZWN1cml0eSBpc3N1ZXMgb3Igb3VyIG1pc3VuZGVyc3RhbmRpbmcgb2Yg dGhlIGV4aXN0aW5nIHNlY3VyaXR5IG1lY2hhbmlzbXMuDQogV2UgYWxzbyBuZWVkIHRoZSByZWNv bW1lbmRhdGlvbnMgb2YgYSBzdWl0YWJsZSBzZWN1cml0eSBmdW5jdGlvbiAoVEJEIGluIHRoZSBh Ym92ZSB0ZXh0KS48YnI+DQo8YnI+DQpCZXN0IHJlZ2FyZHM8YnI+DQo8YnI+DQpUaGUgTVBMUyBX RyBDaGFpcnM8YnI+DQpUaGUgUEFMUyBXRyBDaGFpcnM8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwv cD4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_AM5PR0701MB25472EFBB94C1C98EA2606B393540AM5PR0701MB2547_-- From nobody Sat Nov 11 08:04:14 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34806126C83; Fri, 10 Nov 2017 16:48:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.988 X-Spam-Level: X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=strayalpha.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xbXk1VYdGbqL; Fri, 10 Nov 2017 16:48:22 -0800 (PST) Received: from server217-3.web-hosting.com (server217-3.web-hosting.com [198.54.115.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A35CE124B09; Fri, 10 Nov 2017 16:48:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=strayalpha.com; s=default; h=Content-Type:In-Reply-To:MIME-Version:Date: Message-ID:From:References:Cc:To:Subject:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=8nebyL0TxwZadcJqwHBxGZu3gqk0LJfowsjNXILeJAQ=; b=rE/VEwg3wztEZfvpvXIZqK1uo ZzPp3jHxZCttPFcJhQW8NyC5iXjGw3vlm3r8zt+AMR0Mh5lnEZBIXR7q54VXXf1UzgOs6W0ug5NeR osC3poGV3LzMZQBwRdcednwwGQP4+BgVFyR81bc9UwgYjSNL8GBhw/+YCyN4WTuYGMrFKt3vuSJWe EAKGW0e59yfMVDRV+l0aWZxsL5jUVPz6CNBt8PfRwTQVsflhlaW3jOUYdCi1QT/jzNZEt5+Bf+eMn o4bkLAHZV4Sp/ta/bcKHIgGIqnxFxyU4avgxxokVysyqc1+ZYkblwLb+ENbZGUKD6KTPGaujGZJvD OEJe6/UbQ==; Received: from cpe-172-250-240-132.socal.res.rr.com ([172.250.240.132]:63103 helo=[192.168.1.189]) by server217.web-hosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89) (envelope-from ) id 1eDJy6-003UBx-18; Fri, 10 Nov 2017 19:48:21 -0500 To: "Scharf, Michael (Nokia - DE/Stuttgart)" , Eric Rescorla , Stewart Bryant , "tcpm@ietf.org" Cc: "mpls@ietf.org" , "pals-chairs@tools.ietf.org" , "" , "mpls-chairs@ietf.org" , "pals@ietf.org" , "" References: <2da71163-cf29-cba6-df61-d75a2cfc9c43@gmail.com> <5994f353-5306-0fa8-2d2d-024ebdbb10df@gmail.com> <7ee4fd77-7d8d-0db2-527e-9cf91d87e634@gmail.com> <51b9e5b4-0a44-1449-a4df-91e4f9df5d6b@pi.nu> <02a50f02-779e-bc39-505c-5a51d066b3f0@pi.nu> <15335748-e900-280d-554f-24c55c0f3ba5@gmail.com> From: Joe Touch Message-ID: <4f634e7c-f3b9-f0ab-abc7-80ec1062b52a@strayalpha.com> Date: Fri, 10 Nov 2017 16:48:12 -0800 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------1F1BD7BBF23EC48FC92A7AEF" Content-Language: en-US X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server217.web-hosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - strayalpha.com X-Get-Message-Sender-Via: server217.web-hosting.com: authenticated_id: touch@strayalpha.com X-Authenticated-Sender: server217.web-hosting.com: touch@strayalpha.com X-Source: X-Source-Args: X-Source-Dir: X-From-Rewrite: unmodified, already matched Archived-At: X-Mailman-Approved-At: Sat, 11 Nov 2017 08:04:13 -0800 Subject: Re: [tcpm] [mpls] LDP Security X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Nov 2017 00:48:25 -0000 This is a multi-part message in MIME format. --------------1F1BD7BBF23EC48FC92A7AEF Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Hi, all, I don't see a problem if there's a need for updating TCP-AO to include/require other algorithms. It was intended to be extensible. I agree with the issue of key management. There was some work on extensions to IKE to enable its use to manage TCP-AO parameters and keys, but it stalled twice: M. Jethanandani, B. Weis, K. Patel, D. Zhang, S. Hartman, U. Chunduri, A. Tian, J. Touch, “Negotiation for Keying Pairwise Routing Protocols in IKEv2 ,” (RFC in progress), Nov. 2013. U. Chunduri, A. Tian, J. Touch, “Using IKEv2 with TCP-AO ,” (RFC in progress), Feb. 2014. AFAICT, that would go a long way towards addressing the issues with its use outside routing environments where keys are already considered sufficiently managed. However, the larger problem with TCP-AO is that there are no implementations available in end system OSes (AFAICT). Designing a new solution simply to avoid implementing an existing one would be a significant waste of time. Joe On 11/10/2017 8:21 AM, Scharf, Michael (Nokia - DE/Stuttgart) wrote: > > +TCPM > >   > > Please free to discuss changes to TCP-AO on the TCPM list, or speak up > at the upcoming TCPM meeting. > >   > > The addition of SHA-256 has been discussed in TCPM already (see > draft-nayak-tcp-sha2-02), but so far there was not much energy and no > interest from potential TCP-AO implementers or users. > >   > > Michael > > (TCPM co-chair) > >   > >   > > *From:* mpls [mailto:mpls-bounces@ietf.org] *On Behalf Of *Eric Rescorla > *Sent:* Wednesday, November 08, 2017 7:00 PM > *To:* Stewart Bryant > *Cc:* mpls@ietf.org; pals-chairs@tools.ietf.org; > ; mpls-chairs@ietf.org; pals@ietf.org; > > *Subject:* Re: [mpls] LDP Security > >   > > Hi Stewart > >   > > Thanks for your note. > >   > > My overall sense of the state of play is, I think much like yours. > >   > > TCP-MD5 is inadequate in two major respects: > > - It uses weak algorithms > > - It has a bad negotiation/setuop story (manual key management) > >   > > TCP-AO is intended to be a drop-in replacement for TCP-MD5 and so > remedies the algorithm > > issue but not the key management issue [0]. We haven't made much > progress on the key > > management story, and that seems to be a major impediment to deploying > either of these > > technologies (which I am given to understand don't see a lot of use). > We should probably > > talk in Singapore about that, but that's not going to get better any > time soon. > >   > > In the interim, I think the text you have is OK, and "TBD" should read > "SHA-256", with > > the fallback being SHA-256 -> SHA-1 -> MD5. > >   > > -Ekr > >   > >   > > [0] Technically It has better support for rollover, but this is not a > huge improvement. > > [1] tcpcrypt is kind of orthogonal here as it's unauthenticated but > opportunistic.  That said, > > it would provide defense against attackers who gain access to the link > after connection > > setup and doesn't require configuration. > >   > > On Wed, Nov 8, 2017 at 9:27 AM, Stewart Bryant > > wrote: > > To the SEC and RTG ADs, > > I am sending the following message on behalf of the MPLS and the > PALS WG Chairs. > > There is a concern shared among the security community and the > working groups that develop the LDP protocol that LDP is no longer > adequately secured. LDP currently relies on MD5 for cryptographic > security of its messages, but MD5 is a hash function that is no > longer considered to meet current security requirements. > > In RFC5036 (published 2007) Section 5.1 (Spoofing) , List element > 2. Session communication carried by TCP the following statements > is made: > > "LDP specifies use of the TCP MD5 Signature Option to provide for > the authenticity and integrity of session messages. > > "[RFC2385] asserts that MD5 authentication is now considered by > some to be too weak for this application.  It also points out that > a similar TCP option with a stronger hashing algorithm (it cites > SHA-1 as an example) could be deployed.  To our knowledge, no such > TCP option has been defined and deployed.  However, we note that > LDP can use whatever TCP message digest techniques are available, > and when one stronger than MD5 is specified and implemented, > upgrading LDP to use it would be relatively straightforward." > > We note that BGP has already been through this process, and > replaced MD5 with TCP-AO in RFC 7454. I would be logical to follow > the same approach to secure LDP. However, as far as we are able to > ascertain, there is currently no recommended, mandatory to > implement, cryptographic function specified. We are concerned that > without such a mandatory function, implementations will simply > fall back to MD5 and we will be no further forward > > We think that the best way forward is to publish a draft similar > to RFC 7454 that contains the following requirement: > > "Implementations conforming to this RFC MUST implement TCP-AO to > secure the TCP sessions carrying LDP in addition to the currently > required TCP MD5 Signature Option. Furthermore, the TBD > cryptographic mechanism must be implemented and provided to TCP-AO > to secure LDP messages. The TBD mechanism is the preferred option, > and MD5 is only to be used when TBD is unavailable." > > We are not an experts on this part of the stack, but it seems that > TCP security negotiation is still work in progress. If we are > wrong, then we need to include a requirement that such negotiation > is also required. In the absence of a negotiation protocol, > however, we need to leave this as a configuration process until > such time as the negotiation protocol work is complete. On > completion of a suitable negotiation protocol we need to issue a > further update requiring its use. > > Additionally we should note that no cryptographic mechanism has an > indefinite lifetime, and that implementation should note the IETF > anticipates updating the default cryptographic mechanism over time. > > The TBD default security function will need to be chosen such that > it can reasonably be implemented on a typical router route > processor, and which will provide adequate security without > significantly degrading the convergence time of an LSR. Without a > function that does not significantly impact router convergence we > simply close one vulnerability and open another. > > As experts on the LDP protocol, but not on security mechanisms, > we  need to ask the security area for a review of our proposed > approach, and help correcting any misunderstanding of the security > issues or our misunderstanding of the existing security > mechanisms. We also need the recommendations of a suitable > security function (TBD in the above text). > > Best regards > > The MPLS WG Chairs > The PALS WG Chairs > >   > > > > _______________________________________________ > tcpm mailing list > tcpm@ietf.org > https://www.ietf.org/mailman/listinfo/tcpm --------------1F1BD7BBF23EC48FC92A7AEF Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

Hi, all,

I don't see a problem if there's a need for updating TCP-AO to include/require other algorithms. It was intended to be extensible.

I agree with the issue of key management. There was some work on extensions to IKE to enable its use to manage TCP-AO parameters and keys, but it stalled twice:

M. Jethanandani, B. Weis, K. Patel, D. Zhang, S. Hartman, U. Chunduri, A. Tian, J. Touch, “Negotiation for Keying Pairwise Routing Protocols in IKEv2,” (RFC in progress), Nov. 2013.

U. Chunduri, A. Tian, J. Touch, “Using IKEv2 with TCP-AO,” (RFC in progress), Feb. 2014.

AFAICT, that would go a long way towards addressing the issues with its use outside routing environments where keys are already considered sufficiently managed.

However, the larger problem with TCP-AO is that there are no implementations available in end system OSes (AFAICT). Designing a new solution simply to avoid implementing an existing one would be a significant waste of time.

Joe


On 11/10/2017 8:21 AM, Scharf, Michael (Nokia - DE/Stuttgart) wrote:

+TCPM

 

Please free to discuss changes to TCP-AO on the TCPM list, or speak up at the upcoming TCPM meeting.

 

The addition of SHA-256 has been discussed in TCPM already (see draft-nayak-tcp-sha2-02), but so far there was not much energy and no interest from potential TCP-AO implementers or users.

 

Michael

(TCPM co-chair)

 

 

From: mpls [mailto:mpls-bounces@ietf.org] On Behalf Of Eric Rescorla
Sent: Wednesday, November 08, 2017 7:00 PM
To: Stewart Bryant <stewart.bryant@gmail.com>
Cc: mpls@ietf.org; pals-chairs@tools.ietf.org; <rtg-ads@ietf.org> <rtg-ads@ietf.org>; mpls-chairs@ietf.org; pals@ietf.org; <sec-ads@ietf.org> <sec-ads@ietf.org>
Subject: Re: [mpls] LDP Security

 

Hi Stewart

 

Thanks for your note.

 

My overall sense of the state of play is, I think much like yours.

 

TCP-MD5 is inadequate in two major respects:

- It uses weak algorithms

- It has a bad negotiation/setuop story (manual key management)

 

TCP-AO is intended to be a drop-in replacement for TCP-MD5 and so remedies the algorithm

issue but not the key management issue [0]. We haven't made much progress on the key

management story, and that seems to be a major impediment to deploying either of these

technologies (which I am given to understand don't see a lot of use). We should probably

talk in Singapore about that, but that's not going to get better any time soon.

 

In the interim, I think the text you have is OK, and "TBD" should read "SHA-256", with

the fallback being SHA-256 -> SHA-1 -> MD5.

 

-Ekr

 

 

[0] Technically It has better support for rollover, but this is not a huge improvement.

[1] tcpcrypt is kind of orthogonal here as it's unauthenticated but opportunistic.  That said,

it would provide defense against attackers who gain access to the link after connection

setup and doesn't require configuration.

 

On Wed, Nov 8, 2017 at 9:27 AM, Stewart Bryant <stewart.bryant@gmail.com> wrote:

To the SEC and RTG ADs,

I am sending the following message on behalf of the MPLS and the
PALS WG Chairs.

There is a concern shared among the security community and the working groups that develop the LDP protocol that LDP is no longer adequately secured. LDP currently relies on MD5 for cryptographic security of its messages, but MD5 is a hash function that is no longer considered to meet current security requirements.

In RFC5036 (published 2007) Section 5.1 (Spoofing) , List element 2. Session communication carried by TCP the following statements is made:

"LDP specifies use of the TCP MD5 Signature Option to provide for the authenticity and integrity of session messages.

"[RFC2385] asserts that MD5 authentication is now considered by some to be too weak for this application.  It also points out that a similar TCP option with a stronger hashing algorithm (it cites SHA-1 as an example) could be deployed.  To our knowledge, no such TCP option has been defined and deployed.  However, we note that LDP can use whatever TCP message digest techniques are available, and when one stronger than MD5 is specified and implemented, upgrading LDP to use it would be relatively straightforward."

We note that BGP has already been through this process, and replaced MD5 with TCP-AO in RFC 7454. I would be logical to follow the same approach to secure LDP. However, as far as we are able to ascertain, there is currently no recommended, mandatory to implement, cryptographic function specified. We are concerned that without such a mandatory function, implementations will simply fall back to MD5 and we will be no further forward

We think that the best way forward is to publish a draft similar to RFC 7454 that contains the following requirement:

"Implementations conforming to this RFC MUST implement TCP-AO to secure the TCP sessions carrying LDP in addition to the currently required TCP MD5 Signature Option. Furthermore, the TBD cryptographic mechanism must be implemented and provided to TCP-AO to secure LDP messages. The TBD mechanism is the preferred option, and MD5 is only to be used when TBD is unavailable."

We are not an experts on this part of the stack, but it seems that TCP security negotiation is still work in progress. If we are wrong, then we need to include a requirement that such negotiation is also required. In the absence of a negotiation protocol, however, we need to leave this as a configuration process until such time as the negotiation protocol work is complete. On completion of a suitable negotiation protocol we need to issue a further update requiring its use.

Additionally we should note that no cryptographic mechanism has an indefinite lifetime, and that implementation should note the IETF anticipates updating the default cryptographic mechanism over time.

The TBD default security function will need to be chosen such that it can reasonably be implemented on a typical router route processor, and which will provide adequate security without significantly degrading the convergence time of an LSR. Without a function that does not significantly impact router convergence we simply close one vulnerability and open another.

As experts on the LDP protocol, but not on security mechanisms, we  need to ask the security area for a review of our proposed approach, and help correcting any misunderstanding of the security issues or our misunderstanding of the existing security mechanisms. We also need the recommendations of a suitable security function (TBD in the above text).

Best regards

The MPLS WG Chairs
The PALS WG Chairs

 



_______________________________________________
tcpm mailing list
tcpm@ietf.org
https://www.ietf.org/mailman/listinfo/tcpm

--------------1F1BD7BBF23EC48FC92A7AEF-- From nobody Sat Nov 11 08:04:19 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1F08129408; Fri, 10 Nov 2017 19:12:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id thX2hvXQ8o4B; Fri, 10 Nov 2017 19:12:06 -0800 (PST) Received: from mail-pg0-x236.google.com (mail-pg0-x236.google.com [IPv6:2607:f8b0:400e:c05::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B82C21200C1; Fri, 10 Nov 2017 19:12:06 -0800 (PST) Received: by mail-pg0-x236.google.com with SMTP id l19so6195164pgo.2; Fri, 10 Nov 2017 19:12:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=zeZ75tWzpVvem0+C/MRWXQ47EzxfApCKHS2ZCdNWwCU=; b=odCN5jbcl6P5YDIcNe/ge1V9tf6yF/uLGjCAJx4qwv3DxLYQaSaIIhDlLHDjb+CmWf Lqb64EdE16zFuytPjJHvhjDxUUEF5TE5LCuYdOZy8Nmux29E4QaKlKdXM6I1vDHdvm0X uo76DFVAx7LqVUOxnm9MKKSSUDgZ7qiKLIPWn1Au3RyVP5D6Lez2AqioyrSqY92STA2w ly98gk/uzDjfZGek9B4vjuoz3hVHpjbaUjhhFZOL4CT/59oQBQhNrUHTh1UmDD5rmE2d V+YkzRNPcyjj4T3KYnvAo5kaPUjZA/apnztmjARpP0uHsgDilK4yNIrBSEjCBP8Lk/84 BRZQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=zeZ75tWzpVvem0+C/MRWXQ47EzxfApCKHS2ZCdNWwCU=; b=PA/2lB/BQYO1hZWF87ige6jeKIsy02f/05qAI1BekyXJO96xr2peY2Zl7+l4tbF8v2 6kdhFL3KeiynbSPUEUU0jG8WdYhVrUFsEp9fp4oPRBo7gbV1j9wxSSauImU949ceIg6y XRnwK9QJQpYH+DitPnjj7SZ4o6bU0kG6F8NYm1Jt+WDsyYPQTJCImEVQbGVTWgGsHzv2 AWpjwQOGrSTvyhxbbmyZLzHZ6DLxKiCZDB2lWAaItCAgq8CtcfV+J2W8y3uNe68Gadkp 2brm0CUhm3LZ92KqIEZr2x2RI4PSnS5BTZZffuMXydvwZWcLbgln1OL1/Dh01MeyFNVy +F7w== X-Gm-Message-State: AJaThX5r4YdnuR1HXTjxLE2mTHuqRp2eLni9wZYBFTxdenIkG98L8dZE R5Eb6kgxaWd2JMWtxByD9Hd8/4nS X-Google-Smtp-Source: AGs4zMYxPkolZPjIywUbUf2DIuhV7bt/Q8lGrgna87LIrO9U1ILVl3FcyY4E4MMyc+ovC60j84SeCg== X-Received: by 10.98.196.143 with SMTP id h15mr2532599pfk.126.1510369926015; Fri, 10 Nov 2017 19:12:06 -0800 (PST) Received: from [31.133.148.178] (dhcp-94b2.meeting.ietf.org. [31.133.148.178]) by smtp.gmail.com with ESMTPSA id q70sm24612425pfj.39.2017.11.10.19.12.05 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 10 Nov 2017 19:12:05 -0800 (PST) Content-Type: multipart/alternative; boundary=Apple-Mail-FDE8250F-18F6-4B4B-B7B0-459161C5CC0F Mime-Version: 1.0 (1.0) From: Jeff Tantsura X-Mailer: iPhone Mail (15A432) In-Reply-To: <4f634e7c-f3b9-f0ab-abc7-80ec1062b52a@strayalpha.com> Date: Sat, 11 Nov 2017 11:11:57 +0800 Cc: "Scharf, Michael (Nokia - DE/Stuttgart)" , Eric Rescorla , Stewart Bryant , "tcpm@ietf.org" , "mpls@ietf.org" , "pals-chairs@tools.ietf.org" , "" , "mpls-chairs@ietf.org" , "pals@ietf.org" , "" Content-Transfer-Encoding: 7bit Message-Id: <697AC959-60C2-401D-9E64-D88E16F35EBB@gmail.com> References: <2da71163-cf29-cba6-df61-d75a2cfc9c43@gmail.com> <5994f353-5306-0fa8-2d2d-024ebdbb10df@gmail.com> <7ee4fd77-7d8d-0db2-527e-9cf91d87e634@gmail.com> <51b9e5b4-0a44-1449-a4df-91e4f9df5d6b@pi.nu> <02a50f02-779e-bc39-505c-5a51d066b3f0@pi.nu> <15335748-e900-280d-554f-24c55c0f3ba5@gmail.com> <4f634e7c-f3b9-f0ab-abc7-80ec1062b52a@strayalpha.com> To: Joe Touch Archived-At: X-Mailman-Approved-At: Sat, 11 Nov 2017 08:04:13 -0800 Subject: Re: [tcpm] [mpls] LDP Security X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Nov 2017 03:12:10 -0000 --Apple-Mail-FDE8250F-18F6-4B4B-B7B0-459161C5CC0F Content-Type: text/plain; charset=windows-1251 Content-Transfer-Encoding: quoted-printable Joe, There=92s no problem with updating, the problem is with adoption... Regards, Jeff > On Nov 11, 2017, at 08:48, Joe Touch wrote: >=20 > Hi, all, >=20 > I don't see a problem if there's a need for updating TCP-AO to include/req= uire other algorithms. It was intended to be extensible. >=20 > I agree with the issue of key management. There was some work on extension= s to IKE to enable its use to manage TCP-AO parameters and keys, but it stal= led twice: >=20 > M. Jethanandani, B. Weis, K. Patel, D. Zhang, S. Hartman, U. Chunduri, A. T= ian, J. Touch, =93Negotiation for Keying Pairwise Routing Protocols in IKEv2= ,=94 (RFC in progress), Nov. 2013. >=20 > U. Chunduri, A. Tian, J. Touch, =93Using IKEv2 with TCP-AO,=94 (RFC in pro= gress), Feb. 2014. >=20 > AFAICT, that would go a long way towards addressing the issues with its us= e outside routing environments where keys are already considered sufficientl= y managed. >=20 > However, the larger problem with TCP-AO is that there are no implementatio= ns available in end system OSes (AFAICT). Designing a new solution simply to= avoid implementing an existing one would be a significant waste of time. > Joe >=20 >> On 11/10/2017 8:21 AM, Scharf, Michael (Nokia - DE/Stuttgart) wrote: >> +TCPM >> =20 >> Please free to discuss changes to TCP-AO on the TCPM list, or speak up at= the upcoming TCPM meeting. >> =20 >> The addition of SHA-256 has been discussed in TCPM already (see draft-nay= ak-tcp-sha2-02), but so far there was not much energy and no interest from p= otential TCP-AO implementers or users. >> =20 >> Michael >> (TCPM co-chair) >> =20 >> =20 >> From: mpls [mailto:mpls-bounces@ietf.org] On Behalf Of Eric Rescorla >> Sent: Wednesday, November 08, 2017 7:00 PM >> To: Stewart Bryant >> Cc: mpls@ietf.org; pals-chairs@tools.ietf.org; ; mpls-chairs@ietf.org; pals@ietf.org; >> Subject: Re: [mpls] LDP Security >> =20 >> Hi Stewart >> =20 >> Thanks for your note. >> =20 >> My overall sense of the state of play is, I think much like yours. >> =20 >> TCP-MD5 is inadequate in two major respects: >> - It uses weak algorithms >> - It has a bad negotiation/setuop story (manual key management) >> =20 >> TCP-AO is intended to be a drop-in replacement for TCP-MD5 and so remedie= s the algorithm >> issue but not the key management issue [0]. We haven't made much progress= on the key >> management story, and that seems to be a major impediment to deploying ei= ther of these >> technologies (which I am given to understand don't see a lot of use). We s= hould probably >> talk in Singapore about that, but that's not going to get better any time= soon. >> =20 >> In the interim, I think the text you have is OK, and "TBD" should read "S= HA-256", with >> the fallback being SHA-256 -> SHA-1 -> MD5. >> =20 >> -Ekr >> =20 >> =20 >> [0] Technically It has better support for rollover, but this is not a hug= e improvement. >> [1] tcpcrypt is kind of orthogonal here as it's unauthenticated but oppor= tunistic. That said, >> it would provide defense against attackers who gain access to the link af= ter connection >> setup and doesn't require configuration. >> =20 >> On Wed, Nov 8, 2017 at 9:27 AM, Stewart Bryant = wrote: >> To the SEC and RTG ADs, >>=20 >> I am sending the following message on behalf of the MPLS and the >> PALS WG Chairs. >>=20 >> There is a concern shared among the security community and the working gr= oups that develop the LDP protocol that LDP is no longer adequately secured.= LDP currently relies on MD5 for cryptographic security of its messages, but= MD5 is a hash function that is no longer considered to meet current securit= y requirements. >>=20 >> In RFC5036 (published 2007) Section 5.1 (Spoofing) , List element 2. Sess= ion communication carried by TCP the following statements is made: >>=20 >> "LDP specifies use of the TCP MD5 Signature Option to provide for the aut= henticity and integrity of session messages. >>=20 >> "[RFC2385] asserts that MD5 authentication is now considered by some to b= e too weak for this application. It also points out that a= similar TCP option with a stronger hashing algorithm (it c= ites SHA-1 as an example) could be deployed. To our knowl= edge, no such TCP option has been defined and deployed. However, we note th= at LDP can use whatever TCP message digest techniques are available, and whe= n one stronger than MD5 is specified and implemented, upgrading LDP to use i= t would be relatively straightforward." >>=20 >> We note that BGP has already been through this process, and replaced MD5 w= ith TCP-AO in RFC 7454. I would be logical to follow the same approach to se= cure LDP. However, as far as we are able to ascertain, there is currently no= recommended, mandatory to implement, cryptographic function specified. We a= re concerned that without such a mandatory function, implementations will si= mply fall back to MD5 and we will be no further forward >>=20 >> We think that the best way forward is to publish a draft similar to RFC 7= 454 that contains the following requirement: >>=20 >> "Implementations conforming to this RFC MUST implement TCP-AO to secure t= he TCP sessions carrying LDP in addition to the currently required TCP MD5 S= ignature Option. Furthermore, the TBD cryptographic mechanism must be implem= ented and provided to TCP-AO to secure LDP messages. The TBD mechanism is th= e preferred option, and MD5 is only to be used when TBD is unavailable." >>=20 >> We are not an experts on this part of the stack, but it seems that TCP se= curity negotiation is still work in progress. If we are wrong, then we need t= o include a requirement that such negotiation is also required. In the absen= ce of a negotiation protocol, however, we need to leave this as a configurat= ion process until such time as the negotiation protocol work is complete. On= completion of a suitable negotiation protocol we need to issue a further up= date requiring its use. >>=20 >> Additionally we should note that no cryptographic mechanism has an indefi= nite lifetime, and that implementation should note the IETF anticipates upda= ting the default cryptographic mechanism over time. >>=20 >> The TBD default security function will need to be chosen such that it can= reasonably be implemented on a typical router route processor, and which wi= ll provide adequate security without significantly degrading the convergence= time of an LSR. Without a function that does not significantly impact route= r convergence we simply close one vulnerability and open another. >>=20 >> As experts on the LDP protocol, but not on security mechanisms, we need t= o ask the security area for a review of our proposed approach, and help corr= ecting any misunderstanding of the security issues or our misunderstanding o= f the existing security mechanisms. We also need the recommendations of a su= itable security function (TBD in the above text). >>=20 >> Best regards >>=20 >> The MPLS WG Chairs >> The PALS WG Chairs >>=20 >>=20 >> =20 >>=20 >>=20 >> _______________________________________________ >> tcpm mailing list >> tcpm@ietf.org >> https://www.ietf.org/mailman/listinfo/tcpm >=20 > _______________________________________________ > mpls mailing list > mpls@ietf.org > https://www.ietf.org/mailman/listinfo/mpls --Apple-Mail-FDE8250F-18F6-4B4B-B7B0-459161C5CC0F Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Joe,

There=E2=80=99s no p= roblem with updating, the problem is with adoption...

Regards,
Jeff

On Nov 11, 2017, at 08= :48, Joe Touch <touch@strayalpha.= com> wrote:

=20 =20 =20

Hi, all,

I don't see a problem if there's a need for updating TCP-AO to include/require other algorithms. It was intended to be extensible.

I agree with the issue of key management. There was some work on extensions to IKE to enable its use to manage TCP-AO parameters and keys, but it stalled twice:

M. Jethanandani, B. Weis, K. Patel, D. Zhang, S. Hartman, U. Chunduri, A. Tian, J. Touch, =E2=80=9CNegotiation for Keying Pairwise Routing Protocols in IKEv2,=E2=80=9D (RFC in= progress), Nov. 2013.

U. Chunduri, A. Tian, J. Touch, =E2=80=9CUsing IKEv2 with TCP-AO,=E2=80=9D (RFC in progress), Feb. 2014.

AFAICT, that would go a long way towards addressing the issues with its use outside routing environments where keys are already considered sufficiently managed.

However, the larger problem with TCP-AO is that there are no implementations available in end system OSes (AFAICT). Designing a new solution simply to avoid implementing an existing one would be a significant waste of time.

Joe


On 11/10/2017 8:21 AM, Scharf, Michael (Nokia - DE/Stuttgart) wrote:

+TCPM

 

Please free to discuss changes to TCP-AO on the TCPM list, or speak up at the upcoming TCPM meeting.

 

The addition of SHA-256 has been discussed in TCPM already (see draft-nayak-tcp-sha2-02), but so far there was not much energy and no interest from potential TCP-AO implementers or users.

 

Michael

(TCPM co-chair)

 

 

From: mpls [mailto:mpls-bounces@ietf.org] On Behalf Of Eric Rescorla
Sent: Wednesday, November 08, 2017 7:00 PM
To: Stewart Bryant <stewart.bryant@gmail.com>
Cc: mpls@ietf.org; pals-chairs@tools.ietf.org; <rtg-ads@ietf.org> <rtg-ads@ietf.org>; mpls-chairs@ietf.org; pals@ietf.org; <sec-ads@ietf.org> <sec-ads@ietf.org>
Subject: Re: [mpls] LDP Security

 

Hi Stewart

 

Thanks for your note.

 

My overall sense of the state of play is, I think much like yours.

 

TCP-MD5 is inadequate in two major respects:

- It uses weak algorithms

- It has a bad negotiation/setuop story (manual key management)

 

TCP-AO is intended to be a drop-in replacement for TCP-MD5 and so remedies the algorithm

issue but not the key management issue [0]. We haven't made much progress on the key

management story, and that seems to be a major impediment to deploying either of these

technologies (which I am given to understand don't see a lot of use). We should probably<= /o:p>

talk in Singapore about that, but that's not going to get better any time soon.

=

 

In the interim, I think the text you have is OK, and "TBD" should read "SHA-256", with=

the fallback being SHA-256 -> SHA-1 -> MD5.

 

-Ekr

 

 

[0] Technically It has better support for rollover, but this is not a huge improvement.=

[1] tcpcrypt is kind of orthogonal here as it's unauthenticated but opportunistic.  That said,

it would provide defense against attackers who gain access to the link after connection<= /o:p>

setup and doesn't require configuration.

 

On Wed, Nov 8, 2017 at 9:27 AM, Stewart Bryant <stewart.bryant@gmail.com&g= t; wrote:

To the= SEC and RTG ADs,

I am sending the following message on behalf of the MPLS and the
PALS WG Chairs.

There is a concern shared among the security community and the working groups that develop the LDP protocol that LDP is no longer adequately secured. LDP currently relies on MD5 for cryptographic security of its messages, but MD5 is a hash function that is no longer considered to meet current security requirements.

In RFC5036 (published 2007) Section 5.1 (Spoofing) , List element 2. Session communication carried by TCP the following statements is made:

"LDP specifies use of the TCP MD5 Signature Option to provide for the authenticity and integrity of session messages.

"[RFC2385] asserts that MD5 authentication is now considered by some to be too weak for this application.  It also points out that a similar TCP option with a stronger hashing algorithm (it cites SHA-1 as an example) could be deployed.  To our knowledge, no such TCP option has been defined and deployed.  However, we note that LDP can use whatever= TCP message digest techniques are available, and when one stronger than MD5 is specified and implemented, upgrading LDP to use it would be relatively straightforward."

We note that BGP has already been through this process, and replaced MD5 with TCP-AO in RFC 7454. I would be logical to follow the same approach to secure LDP. However, as far as we are able to ascertain, there is currently no recommended, mandatory to implement, cryptographic function specified. We are concerned that without such a mandatory function, implementations will simply fall back to MD5 and we will be no further forward

We think that the best way forward is to publish a draft similar to RFC 7454 that contains the following requirement:

"Implementations conforming to this RFC MUST implement TCP-AO to secure the TCP sessions carrying LDP in addition to the currently required TCP MD5 Signature Option. Furthermore, the TBD cryptographic mechanism must be implemented and provided to TCP-AO to secure LDP messages. The TBD mechanism is the preferred option, and MD5 is only to be used when TBD is unavailable."

We are not an experts on this part of the stack, but it seems that TCP security negotiation is still work in progress. If we are wrong, then we need to include a requirement that such negotiation is also required. In the absence of a negotiation protocol, however, we need to leave this as a configuration process until such time as the negotiation protocol work is complete. On completion of a suitable negotiation protocol we need to issue a further update requiring its use.

Additionally we should note that no cryptographic mechanism has an indefinite lifetime, and that implementation should note the IETF anticipates updating the default cryptographic mechanism over time.

The TBD default security function will need to be chosen such that it can reasonably be implemented on a typical router route processor, and which will provide adequate security without significantly degrading the convergence time of an LSR. Without a function that does not significantly impact router convergence we simply close one vulnerability and open another.

As experts on the LDP protocol, but not on security mechanisms, we  need to ask the security area for a review of our proposed approach, and help correcting any misunderstanding of the security issues or our misunderstanding of the existing security mechanisms. We also need the recommendations of a suitable security function (TBD in the above text).

Best regards

The MPLS WG Chairs
The PALS WG Chairs

 



_______________________________________________
tcpm mailing list
tcpm@iet=
f.org
https://www.ietf.org/mailman/listinfo/tcpm

=20
____________________= ___________________________
mpls mailing list
mpls@ietf.org
https://www.ietf.org/mailman= /listinfo/mpls
= --Apple-Mail-FDE8250F-18F6-4B4B-B7B0-459161C5CC0F-- From nobody Sat Nov 11 10:57:40 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8FAB4129AE0; Sat, 11 Nov 2017 08:06:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.99 X-Spam-Level: X-Spam-Status: No, score=-1.99 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=strayalpha.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gm13uByixGD0; Sat, 11 Nov 2017 08:06:33 -0800 (PST) Received: from server217-3.web-hosting.com (server217-3.web-hosting.com [198.54.115.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51C58129AD3; Sat, 11 Nov 2017 08:06:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=strayalpha.com; s=default; h=Content-Transfer-Encoding:Content-Type: In-Reply-To:MIME-Version:Date:Message-ID:From:References:Cc:To:Subject:Sender :Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=THq4yJ1i1UPAJTmetmY3JgurTeQBAAJ+K1GJ9W5g++Q=; b=0aonypU5cNajRm8ckHw3HLvV3Q 909eDHlsCjTduo1GTSzIKFZfoOxG9aXPrWhojbkKOgqgBeCtFwCN3XjDaJgPT33VW3soI6p3UhLsP OjquC1Xh5FiNH3WfuVRzwqzF8nF42jDA21qjX1neHoJlhBLNDM7q4XHc/Y0K8SREfRKEg8Y+TUHnj H8qQMi8EawO3NPq33DLY/TvQM0c00Az6v8ATL+SF6PooQgfsYSb/08CrKe8aBvSQe+JovG7IpnWSl puUzyC0TB7AG1x5ipxedYbOaVjApEEQ+d7rW/cWYdk+kwqKabdZfeDkLhH66OQd5S3RSL009fWz1g jEo+U24A==; Received: from cpe-172-250-240-132.socal.res.rr.com ([172.250.240.132]:63379 helo=[192.168.1.189]) by server217.web-hosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89) (envelope-from ) id 1eDYIg-000PaV-V1; Sat, 11 Nov 2017 11:06:31 -0500 To: Jeff Tantsura Cc: "mpls@ietf.org" , Eric Rescorla , "tcpm@ietf.org" , "pals-chairs@tools.ietf.org" , "" , "mpls-chairs@ietf.org" , "pals@ietf.org" , Stewart Bryant , "" References: <2da71163-cf29-cba6-df61-d75a2cfc9c43@gmail.com> <7ee4fd77-7d8d-0db2-527e-9cf91d87e634@gmail.com> <51b9e5b4-0a44-1449-a4df-91e4f9df5d6b@pi.nu> <02a50f02-779e-bc39-505c-5a51d066b3f0@pi.nu> <15335748-e900-280d-554f-24c55c0f3ba5@gmail.com> <4f634e7c-f3b9-f0ab-abc7-80ec1062b52a@strayalpha.com> <697AC959-60C2-401D-9E64-D88E16F35EBB@gmail.com> From: Joe Touch Message-ID: <798b8e6a-5964-a364-9e43-4520f4430793@strayalpha.com> Date: Sat, 11 Nov 2017 08:06:25 -0800 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: <697AC959-60C2-401D-9E64-D88E16F35EBB@gmail.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server217.web-hosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - strayalpha.com X-Get-Message-Sender-Via: server217.web-hosting.com: authenticated_id: touch@strayalpha.com X-Authenticated-Sender: server217.web-hosting.com: touch@strayalpha.com X-Source: X-Source-Args: X-Source-Dir: X-From-Rewrite: unmodified, already matched Archived-At: X-Mailman-Approved-At: Sat, 11 Nov 2017 10:57:38 -0800 Subject: Re: [tcpm] [mpls] LDP Security X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Nov 2017 16:06:34 -0000 On 11/10/2017 7:11 PM, Jeff Tantsura wrote: > Joe, > > There’s no problem with updating, the problem is with adoption... Sure, but I hope designing a new solution isn't assumed to be the best way to achieve that. tcpinc showed that it's easy to get it wrong (it may provide help to TCP content, but "TCP security" it isn't). Joe From nobody Sat Nov 11 18:28:13 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3954124239; Sat, 11 Nov 2017 12:46:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.946 X-Spam-Level: X-Spam-Status: No, score=0.946 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX=2.845, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1SPWSXI2t750; Sat, 11 Nov 2017 12:46:11 -0800 (PST) Received: from hickoryhill-consulting.com (50-245-122-97-static.hfc.comcastbusiness.net [50.245.122.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E56E1200B9; Sat, 11 Nov 2017 12:46:11 -0800 (PST) X-Default-Received-SPF: pass (skip=forwardok (res=PASS)) x-ip-name=31.133.157.12; From: "Susan Hares" To: "'Joe Touch'" , "'Jeff Tantsura'" Cc: , "'Eric Rescorla'" , , , , , , References: <2da71163-cf29-cba6-df61-d75a2cfc9c43@gmail.com> <7ee4fd77-7d8d-0db2-527e-9cf91d87e634@gmail.com> <51b9e5b4-0a44-1449-a4df-91e4f9df5d6b@pi.nu> <02a50f02-779e-bc39-505c-5a51d066b3f0@pi.nu> <15335748-e900-280d-554f-24c55c0f3ba5@gmail.com> <4f634e7c-f3b9-f0ab-abc7-80ec1062b52a@strayalpha.com> <697AC959-60C2-401D-9E64-D88E16F35EBB@gmail.com> <798b8e6 a-5964-a364-9e 43-4520f4430793@strayalpha.com> In-Reply-To: <798b8e6a-5964-a364-9e43-4520f4430793@strayalpha.com> Date: Sat, 11 Nov 2017 15:45:56 -0500 Message-ID: <001401d35b2e$1559db70$400d9250$@ndzh.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQHQ4LkDJ6Z/J5TaTb+XshLIa/JnkwGkQiT3AY0bhdsBndke1AMFAIO+ARBf2LkCdM8cTgI5zEjPANLg1FoCskmr1QJotocDAdpri4gCKx0VhQNlnZqeAl3ROVgCo0BnMAGzT1xmAe6o4WOh+B8gYA== Content-Language: en-us X-Authenticated-User: skh@ndzh.com Archived-At: X-Mailman-Approved-At: Sat, 11 Nov 2017 18:28:09 -0800 Subject: Re: [tcpm] [mpls] LDP Security X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Nov 2017 20:46:13 -0000 Joe:=20 No - the mentioning of deployment issues was just background on = discussion and an expression of my personal angst on this topic.=20 Sue Hares=20 -----Original Message----- From: mpls [mailto:mpls-bounces@ietf.org] On Behalf Of Joe Touch Sent: Saturday, November 11, 2017 11:06 AM To: Jeff Tantsura Cc: mpls@ietf.org; Eric Rescorla; tcpm@ietf.org; = pals-chairs@tools.ietf.org; ; mpls-chairs@ietf.org; = pals@ietf.org; Subject: Re: [mpls] [tcpm] LDP Security On 11/10/2017 7:11 PM, Jeff Tantsura wrote: > Joe, > > There=E2=80=99s no problem with updating, the problem is with = adoption... Sure, but I hope designing a new solution isn't assumed to be the best = way to achieve that. tcpinc showed that it's easy to get it wrong (it = may provide help to TCP content, but "TCP security" it isn't). Joe _______________________________________________ mpls mailing list mpls@ietf.org https://www.ietf.org/mailman/listinfo/mpls From nobody Sun Nov 12 05:24:04 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 714DB129431; Sun, 12 Nov 2017 05:24:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XpCWJkLDcq1Q; Sun, 12 Nov 2017 05:24:01 -0800 (PST) Received: from mail.sfc.wide.ad.jp (shonan.sfc.wide.ad.jp [203.178.142.130]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E524F1200F1; Sun, 12 Nov 2017 05:24:00 -0800 (PST) Received: from mail-wr0-f173.google.com (mail-wr0-f173.google.com [209.85.128.173]) by mail.sfc.wide.ad.jp (Postfix) with ESMTPSA id 172952785D9; Sun, 12 Nov 2017 22:23:58 +0900 (JST) Received: by mail-wr0-f173.google.com with SMTP id j15so12185041wre.8; Sun, 12 Nov 2017 05:23:57 -0800 (PST) X-Gm-Message-State: AJaThX7LLlvUv3vv0Tml3YiaYsyV5dBtmOBBy967bhIrWAg7idZkNT+w tovgdPUHJXFTZwaYY18O7TFyrt3PBa9baW/mUCc= X-Google-Smtp-Source: AGs4zMbTgeUXQ7CqtSbQRSq4zAVZnCy+v1e2kW9PP5PtJXDAcN5PH4QijmUfxcLIVUH+l9sBsOnSY/l22RXyDwIyu8g= X-Received: by 10.223.134.25 with SMTP id 25mr5082283wrv.186.1510493035978; Sun, 12 Nov 2017 05:23:55 -0800 (PST) MIME-Version: 1.0 Received: by 10.223.199.138 with HTTP; Sun, 12 Nov 2017 05:23:55 -0800 (PST) From: Yoshifumi Nishida Date: Sun, 12 Nov 2017 05:23:55 -0800 X-Gmail-Original-Message-ID: Message-ID: To: "tcpm@ietf.org" Cc: "tcpm-chairs@ietf.org" Content-Type: multipart/alternative; boundary="001a1146b4a2d86c6f055dc91062" Archived-At: Subject: [tcpm] slides for Thursday meeting X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Nov 2017 13:24:02 -0000 --001a1146b4a2d86c6f055dc91062 Content-Type: text/plain; charset="UTF-8" Hello, If you are going to give a presentation on this Thursday, please send your slide by Wednesday (11/15) morning. Thanks! -- tcpm co-chairs --001a1146b4a2d86c6f055dc91062 Content-Type: text/html; charset="UTF-8"
Hello,
If you are going to give a presentation on this Thursday, please send your slide by Wednesday (11/15) morning.

Thanks!
--
tcpm co-chairs
--001a1146b4a2d86c6f055dc91062-- From nobody Sun Nov 12 19:13:09 2017 Return-Path: X-Original-To: tcpm@ietf.org Delivered-To: tcpm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C376012700F; Sun, 12 Nov 2017 19:13:02 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: tcpm@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.65.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151054278274.21454.688101595838338318@ietfa.amsl.com> Date: Sun, 12 Nov 2017 19:13:02 -0800 Archived-At: Subject: [tcpm] I-D Action: draft-ietf-tcpm-rfc793bis-07.txt X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 03:13:03 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TCP Maintenance and Minor Extensions WG of the IETF. Title : Transmission Control Protocol Specification Author : Wesley M. Eddy Filename : draft-ietf-tcpm-rfc793bis-07.txt Pages : 101 Date : 2017-11-12 Abstract: This document specifies the Internet's Transmission Control Protocol (TCP). TCP is an important transport layer protocol in the Internet stack, and has continuously evolved over decades of use and growth of the Internet. Over this time, a number of changes have been made to TCP as it was specified in RFC 793, though these have only been documented in a piecemeal fashion. This document collects and brings those changes together with the protocol specification from RFC 793. This document obsoletes RFC 793, as well as 879, 6093, 6429, 6528, and 6691. It updates RFC 1122, and should be considered as a replacement for the portions of that document dealing with TCP requirements. It updates RFC 5961 due to a small clarification in reset handling while in the SYN-RECEIVED state. (TODO: double-check this list for all actual RFCs when finished) RFC EDITOR NOTE: If approved for publication as an RFC, this should be marked additionally as "STD: 7" and replace RFC 793 in that role. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tcpm-rfc793bis/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-tcpm-rfc793bis-07 https://datatracker.ietf.org/doc/html/draft-ietf-tcpm-rfc793bis-07 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tcpm-rfc793bis-07 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Nov 12 20:47:04 2017 Return-Path: X-Original-To: tcpm@ietf.org Delivered-To: tcpm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 73EB2124B0A; Sun, 12 Nov 2017 20:47:02 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: tcpm@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.65.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151054842243.21374.10861820221498032061@ietfa.amsl.com> Date: Sun, 12 Nov 2017 20:47:02 -0800 Archived-At: Subject: [tcpm] I-D Action: draft-ietf-tcpm-accurate-ecn-05.txt X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 04:47:02 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TCP Maintenance and Minor Extensions WG of the IETF. Title : More Accurate ECN Feedback in TCP Authors : Bob Briscoe Mirja Kühlewind Richard Scheffenegger Filename : draft-ietf-tcpm-accurate-ecn-05.txt Pages : 43 Date : 2017-11-12 Abstract: Explicit Congestion Notification (ECN) is a mechanism where network nodes can mark IP packets instead of dropping them to indicate incipient congestion to the end-points. Receivers with an ECN- capable transport protocol feed back this information to the sender. ECN is specified for TCP in such a way that only one feedback signal can be transmitted per Round-Trip Time (RTT). Recently, new TCP mechanisms like Congestion Exposure (ConEx) or Data Center TCP (DCTCP) need more accurate ECN feedback information whenever more than one marking is received in one RTT. This document specifies an experimental scheme to provide more than one feedback signal per RTT in the TCP header. Given TCP header space is scarce, it overloads the three existing ECN-related flags in the TCP header and provides additional information in a new TCP option. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tcpm-accurate-ecn/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-tcpm-accurate-ecn-05 https://datatracker.ietf.org/doc/html/draft-ietf-tcpm-accurate-ecn-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tcpm-accurate-ecn-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Nov 12 21:01:24 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 65806124B0A for ; Sun, 12 Nov 2017 21:00:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=bobbriscoe.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MJPKbW_9UE6s for ; Sun, 12 Nov 2017 21:00:56 -0800 (PST) Received: from server.dnsblock1.com (server.dnsblock1.com [85.13.236.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19EE6126DD9 for ; Sun, 12 Nov 2017 21:00:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=bobbriscoe.net; s=default; h=Content-Type:In-Reply-To:MIME-Version:Date: Message-ID:From:Cc:References:To:Subject:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=zGCUClhIN+CNmJkHrL+FcYXoNTWuf/7VtbqUHsNhtmg=; b=MjXKcN4TMyDOkCFNEeCks6SQt qh6h5RBYnsgm0OjNcDet67Wq7BZk86zi2QNKgPZFtIrtgO+NSEUK2ruJGR8zN4PmVHVPc1EXOkLBz HgyPb8ldRLfOdlt6B7U/E33G1Lw/sQC8ONC7N5iK8bg/0CPJmlJRnM6o2BonHXlEQz9nAujU2GVY/ aRc874bDj+Z/BWP5Mv4bI4QsZTQrdjmWx4+szMYI5BPxBXkN7BejCP0dCcrRQjpNOyJigaBefy1XN 3eKcFFbqtLpnkJwc3No6fRI5kD0JAva8p2+qp1qFdQoJxymrrQt6eVi0iFdG0jtpEi343/p1vPiEP 8XgQ/3l0A==; Received: from [101.127.176.77] (port=52654 helo=[192.168.0.106]) by server.dnsblock1.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89) (envelope-from ) id 1eE6re-0006xd-1S; Mon, 13 Nov 2017 05:00:54 +0000 To: IETF tcpm mailing list References: <151054842265.21374.8946387844025665185.idtracker@ietfa.amsl.com> Cc: Mirja Kuehlewind , Richard Scheffenegger From: Bob Briscoe Message-ID: <2034c9f6-36e8-4287-680c-bef69065701c@bobbriscoe.net> Date: Mon, 13 Nov 2017 13:00:45 +0800 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: <151054842265.21374.8946387844025665185.idtracker@ietfa.amsl.com> Content-Type: multipart/alternative; boundary="------------CCA4146D3EBB70940E6FE1D3" Content-Language: en-GB X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server.dnsblock1.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - bobbriscoe.net X-Get-Message-Sender-Via: server.dnsblock1.com: authenticated_id: in@bobbriscoe.net X-Authenticated-Sender: server.dnsblock1.com: in@bobbriscoe.net Archived-At: Subject: [tcpm] Minor rev to draft-ietf-tcpm-accurate-ecn-05 X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 05:00:58 -0000 This is a multi-part message in MIME format. --------------CCA4146D3EBB70940E6FE1D3 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Folks, We've just posted a minor rev to the AccECN draft, URLs below. Summary of diffs: * AccECN applicability is irrespective of whether ECN (of whatever flavour) is in the network. * Details missed in the previous rev wrt testing for IP/ECN mangling of SYN/ACK: o Defines what exactly the 3rd ACK of the 3WHS is  (by ACKNO), which includes ACK of retransmission of SYN/ACK o Implications if 3rd ACK of 3WHS doesn't arrive. * Also, ironically, added some acknowledgements (of human effort). Now we reckon it's really ready for WGLC. Cheers Bob On 13/11/2017 12:47, internet-drafts@ietf.org wrote: > A new version of I-D, draft-ietf-tcpm-accurate-ecn-05.txt > has been successfully submitted by Bob Briscoe and posted to the > IETF repository. > > Name: draft-ietf-tcpm-accurate-ecn > Revision: 05 > Title: More Accurate ECN Feedback in TCP > Document date: 2017-11-11 > Group: tcpm > Pages: 43 > URL: https://www.ietf.org/internet-drafts/draft-ietf-tcpm-accurate-ecn-05.txt > Status: https://datatracker.ietf.org/doc/draft-ietf-tcpm-accurate-ecn/ > Htmlized: https://tools.ietf.org/html/draft-ietf-tcpm-accurate-ecn-05 > Htmlized: https://datatracker.ietf.org/doc/html/draft-ietf-tcpm-accurate-ecn-05 > Diff: https://www.ietf.org/rfcdiff?url2=draft-ietf-tcpm-accurate-ecn-05 > > Abstract: > Explicit Congestion Notification (ECN) is a mechanism where network > nodes can mark IP packets instead of dropping them to indicate > incipient congestion to the end-points. Receivers with an ECN- > capable transport protocol feed back this information to the sender. > ECN is specified for TCP in such a way that only one feedback signal > can be transmitted per Round-Trip Time (RTT). Recently, new TCP > mechanisms like Congestion Exposure (ConEx) or Data Center TCP > (DCTCP) need more accurate ECN feedback information whenever more > than one marking is received in one RTT. This document specifies an > experimental scheme to provide more than one feedback signal per RTT > in the TCP header. Given TCP header space is scarce, it overloads > the three existing ECN-related flags in the TCP header and provides > additional information in a new TCP option. > > > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > --------------CCA4146D3EBB70940E6FE1D3 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

Folks,

We've just posted a minor rev to the AccECN draft, URLs below. Summary of diffs:

  • AccECN applicability is irrespective of whether ECN (of whatever flavour) is in the network.
  • Details missed in the previous rev wrt testing for IP/ECN mangling of SYN/ACK:
    • Defines what exactly the 3rd ACK of the 3WHS is  (by ACKNO), which includes ACK of retransmission of SYN/ACK
    • Implications if 3rd ACK of 3WHS doesn't arrive.
  • Also, ironically, added some acknowledgements (of human effort).

Now we reckon it's really ready for WGLC.

Cheers


Bob


On 13/11/2017 12:47, internet-drafts@ietf.org wrote:
A new version of I-D, draft-ietf-tcpm-accurate-ecn-05.txt
has been successfully submitted by Bob Briscoe and posted to the
IETF repository.

Name:		draft-ietf-tcpm-accurate-ecn
Revision:	05
Title:		More Accurate ECN Feedback in TCP
Document date:	2017-11-11
Group:		tcpm
Pages:		43
URL:            https://www.ietf.org/internet-drafts/draft-ietf-tcpm-accurate-ecn-05.txt
Status:         https://datatracker.ietf.org/doc/draft-ietf-tcpm-accurate-ecn/
Htmlized:       https://tools.ietf.org/html/draft-ietf-tcpm-accurate-ecn-05
Htmlized:       https://datatracker.ietf.org/doc/html/draft-ietf-tcpm-accurate-ecn-05
Diff:           https://www.ietf.org/rfcdiff?url2=draft-ietf-tcpm-accurate-ecn-05

Abstract:
   Explicit Congestion Notification (ECN) is a mechanism where network
   nodes can mark IP packets instead of dropping them to indicate
   incipient congestion to the end-points.  Receivers with an ECN-
   capable transport protocol feed back this information to the sender.
   ECN is specified for TCP in such a way that only one feedback signal
   can be transmitted per Round-Trip Time (RTT).  Recently, new TCP
   mechanisms like Congestion Exposure (ConEx) or Data Center TCP
   (DCTCP) need more accurate ECN feedback information whenever more
   than one marking is received in one RTT.  This document specifies an
   experimental scheme to provide more than one feedback signal per RTT
   in the TCP header.  Given TCP header space is scarce, it overloads
   the three existing ECN-related flags in the TCP header and provides
   additional information in a new TCP option.

                                                                                  


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

--------------CCA4146D3EBB70940E6FE1D3-- From nobody Mon Nov 13 05:45:37 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 509A5129584; Mon, 13 Nov 2017 05:45:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.32 X-Spam-Level: X-Spam-Status: No, score=-4.32 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=uclouvain.be Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cW4PKwK2XpgZ; Mon, 13 Nov 2017 05:45:30 -0800 (PST) Received: from smtp2.sgsi.ucl.ac.be (smtp.sgsi.ucl.ac.be [130.104.5.67]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 013C5127843; Mon, 13 Nov 2017 05:45:29 -0800 (PST) Received: from mbpobo.lan (host-78-129-6-94.dynamic.voo.be [78.129.6.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: obonaventure@smtp2.sgsi.ucl.ac.be) by smtp2.sgsi.ucl.ac.be (Postfix) with ESMTPSA id 84F7C67DE08; Mon, 13 Nov 2017 14:45:21 +0100 (CET) DKIM-Filter: OpenDKIM Filter v2.9.2 smtp2.sgsi.ucl.ac.be 84F7C67DE08 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=uclouvain.be; s=selucl; t=1510580721; bh=URt3eYfTrf46AOuPyqHgfFpDhhAOR3nr9vQJ/LDdyYc=; h=Reply-To:Subject:To:References:From:Date:In-Reply-To; b=xIfygsvu2gCp/fCuqd6F5M204wFMVt31r6qg1eUQHXt3Ncvfhkr+ffYtCrFv2DC7l MCL2sKXxmrT9xx2i0IJwsu/nr+OXXE2XrTYrlBOps86SIDscU3ub/8baw0wVxPngdR QnG9ctpGM7wq2XfjJAV3zVyMotQDSt+CTGnlsCU0= X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.99.2 at smtp-2 Reply-To: Olivier.Bonaventure@uclouvain.be To: multipathtcp@ietf.org, tcpm@ietf.org References: From: Olivier Bonaventure Message-ID: <35e7bbeb-b32a-7f6d-82cf-1cc6fec09f3b@uclouvain.be> Date: Mon, 13 Nov 2017 14:45:21 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: fr-classic Content-Transfer-Encoding: 8bit X-Sgsi-Spamcheck: SASL authenticated, X-SGSI-Information: X-SGSI-MailScanner-ID: 84F7C67DE08.A328F X-SGSI-MailScanner: Found to be clean X-SGSI-From: olivier.bonaventure@uclouvain.be X-SGSI-Spam-Status: No Archived-At: Subject: Re: [tcpm] [multipathtcp] Fwd: New Version Notification for draft-bonaventure-mptcp-converters-02.txt X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 13:45:34 -0000 Hello, Here is some context information about the latest revision of the converter draft. > Name:           draft-bonaventure-mptcp-converters > Revision:       02 > URL: https://www.ietf.org/internet-drafts/draft-bonaventure-mptcp-converters-02.txt > Title:          0-RTT TCP Converter You can find the full diff at : https://www.ietf.org/rfcdiff?url2=draft-bonaventure-mptcp-converters-02 The new version of the draft has benefited from discussions with two implementors and other IETFers that have lead to many editorial changes. We have mainly tried to improve the readability of the document and make it easier for implementors to support the converter protocol. The main modifications are the following : 1. Introduction We have update the motivation for the utilisation of converters 2. Applicability The document is now written with the assumption of the Multipath TCP to TCP conversion because there is a clear demand for this feature. 3. Architecture We have improved the explanation and added a description of the Bootstrap process. We have also clarified a point that was raised by implementors. In the "graphical" description of the protocol at IETF99, we showed figures like : Transport Client Converter Server --------------------> SYN, MPC [->Server:port] --------------------> SYN, MPC <-------------------- SYN+ACK, MPC <-------------------- SYN+ACK, MPC [ MPC supported ] (*) --------------------> ACK, MPC --------------------> ACK, MPC The packet with a (*) indicates that the converter confirms the establishment of the connection with the client (the SYN+ACK) and provides a converter TLV in the payload to indicate that the Server supports Multipath TCP. In practice, an implementation will likely send this information in two packets : the SYN+ACK and a packet containing the data. We have clarified in the text that this is a perfectly valid behaviour, although the figures only show a single arrow for graphical reasons. 4. The converter protocol We have clarified the format of some messages and updated some error codes. We have also removed some examples to make the text more compact. 5. Interactions with middleboxes Editorial changes only 6. Security considerations We have expanded this section Best regards, Olivier Bonaventure From nobody Mon Nov 13 11:23:01 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4CE41124C27 for ; Mon, 13 Nov 2017 11:23:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mti-systems-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fw1dOueD7uMt for ; Mon, 13 Nov 2017 11:22:58 -0800 (PST) Received: from mail-io0-x229.google.com (mail-io0-x229.google.com [IPv6:2607:f8b0:4001:c06::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D253120721 for ; Mon, 13 Nov 2017 11:22:58 -0800 (PST) Received: by mail-io0-x229.google.com with SMTP id 189so21800144iow.10 for ; Mon, 13 Nov 2017 11:22:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mti-systems-com.20150623.gappssmtp.com; s=20150623; h=to:from:subject:message-id:date:user-agent:mime-version :content-transfer-encoding:content-language; bh=/UIQogl9e9Cj5rZ4MklCVrmiRlDCpPOMtVgxJSO4amQ=; b=f0HCdhocRxtD4eTG3nHwva1Y5D0fzFKqy7deN1/r4QXgdmeEIdXlAGot2Ns/b8PZNp vlslveSu6gbEadHvezuP6mze9uIIFuI5jPiEHTgssis0c4CIBPPdVkKSw4DNstnMHhkX 13Ugq2uemrMq1fNzbDwZZyWEk7H6xWm2RVeaCoqDX5VzziYbhfWWDjJXy8izfhQbZ0EK 9U71jJ3VhwLZcugUBrXSMkb7Mc2zWwD2yvK20XqJKmVqf+9sr/Edl4itGmPOz4csHoVd 43m8DcDaZF56RrqPiaUOMgkh/8YOx6MgTrneCQrE8yTNurRzroW3SqkK8xwjMyTMGgy0 Pd4Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-transfer-encoding:content-language; bh=/UIQogl9e9Cj5rZ4MklCVrmiRlDCpPOMtVgxJSO4amQ=; b=EAf0Do/nRnnW6gglXcgLs4IzBezKt7c+ligNfmIe21awW3MbZHiQ+dTbnalvhBSG6H xesFTzqql8Ix+vszaKlOBE8yqtlNuAQxG+swdsTRw9tCW4a6Sqil/+an368gMwYTYkKi KQpfTrrvVOmIRAZfVU3UH9AMZ5S5n9TaPyIOZ7m0vJzw0N5reOcIPBfegjIz4wtmG7h/ Noqav/jAbjXS6IMjxp92AzlWBOXaVszfoUk4W6X2W/QLALSjp+thUb9WLBQYx+mcM9Iq W+mk1UJW5sEyV0HVp4cWObraJ/sgFL3pFQ6ODuBvgb7fogz0r4mLa6rDz4En0bcEE7Zy FGew== X-Gm-Message-State: AJaThX7EwwNdmYX22VqkY0yzzAV2/iG1QMWcekoTMKgR0RSB7oZ8D9VJ JkkaRjS5c4O+5E2jPvsTN2elQ3GZQZg= X-Google-Smtp-Source: AGs4zMalzvwd23KrQHtU9BPEQ8FlKi5oDQ5QxvPYosodEJ4mZ4UWU/dPAzoxGGUMq1MslhV7upvuxw== X-Received: by 10.107.16.86 with SMTP id y83mr767220ioi.107.1510600976478; Mon, 13 Nov 2017 11:22:56 -0800 (PST) Received: from [192.168.1.105] (cpe-76-188-215-129.neo.res.rr.com. [76.188.215.129]) by smtp.gmail.com with ESMTPSA id e203sm4633841itb.32.2017.11.13.11.22.55 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 13 Nov 2017 11:22:56 -0800 (PST) To: tcpm@ietf.org From: Wesley Eddy Message-ID: <5043d1eb-c98b-647d-af66-8fb47def432f@mti-systems.com> Date: Mon, 13 Nov 2017 14:22:55 -0500 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: [tcpm] 793bis: New security considerations section X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 19:23:00 -0000 Hi, one thing that I want to make the WG aware of in the latest RFC 793bis draft is the new security and privacy considerations section. https://tools.ietf.org/html/draft-ietf-tcpm-rfc793bis-07#section-6 The original RFC 793 predates security considerations sections, so I didn't have much to start from.  My goal was to point to relevant references without creating dozens of pages of meandering text on every little possible security issue (most of which are well-known by now). This is a first crack at it, and it could likely be improved in big ways.  Your feedback, suggestions, corrections, etc. is appreciated. From nobody Mon Nov 13 11:43:52 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59D79129B65 for ; Mon, 13 Nov 2017 11:43:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mti-systems-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FAKSJ7pkSdsV for ; Mon, 13 Nov 2017 11:43:42 -0800 (PST) Received: from mail-it0-x22c.google.com (mail-it0-x22c.google.com [IPv6:2607:f8b0:4001:c0b::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E9BAF129B61 for ; Mon, 13 Nov 2017 11:43:41 -0800 (PST) Received: by mail-it0-x22c.google.com with SMTP id n134so7163153itg.1 for ; Mon, 13 Nov 2017 11:43:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mti-systems-com.20150623.gappssmtp.com; s=20150623; h=to:from:subject:message-id:date:user-agent:mime-version :content-transfer-encoding:content-language; bh=C+9Rj9KineFiRhnLDkJSRrPPgXzBfr+OKFqUKXtsoCA=; b=dWLvYGyekzd7ZfCfzFr3rbY+MdmRthhi1MAXlw45fO3QVmASMrOcuNp3Z2Y2WnhrhF 2i9NaXLOeUBvMPzuUcVmVGmlgo2sYlg7t5gf10XxQC1m0oJijyRemj8u0mzrN7//rHS8 ATaa0xDr8kRPXw+wyRL33G9qNyxL0dKbH+4ng9R1n9XDBUWDqqajUKq0v+wUvn1i30IQ GUlJrcYzhTJMlGWti+AsbiXBIGzssXtmtL899zihWPiNO5VIEClVWqLDafs8agyo4/ji lqaiZCpxWtp20yGFjZdasjozfNHDcEd6fIU9D8uVWO3VggNQGWFehVCAR4rWersBOsPJ 70eQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-transfer-encoding:content-language; bh=C+9Rj9KineFiRhnLDkJSRrPPgXzBfr+OKFqUKXtsoCA=; b=NJ6WMeyjtfJp1KMsJSP7wgcKKCv/tkvzarnklwrYpPAM+/GAHUHxcTx1bAhsz7s3JZ mfeunUhY4Ew3U1Tvd7FDU4xW5zqPEHonfUCoCmkG+2pcb6zmCvjuJVNolEHQGBC0W27u EMrjQ76FhNF1XTceEbZH7mL5SXjYiuNB99vgs786G42Vn/z9irEHHK6B53R9Lz1kWkUL Y/k4YTUdf8TCa2dqfqrSy1qCSPefylcw8BJJkOwASrUChwzlZ9+plkUYnBSNDC90d6ZE tyZhnQS5OlqKPpKfAZkSBMOX6jkja3RY1I/MCffvL1xODtNyRJT14NzLIZ8Nu1M1qMpT aMLQ== X-Gm-Message-State: AJaThX7HSgb68oA0v7I0gtyDyAEfN5dAaiyF9ZQk7++jQ/ceQK0vXlXn 3HbAUo82+ib/lV2d3fYTzNdeYvl5zJM= X-Google-Smtp-Source: AGs4zMYpaC5Am5xjBNCGHgnR4gYgo/J5GvTD6o/KRWRfX+2zoNnBJX/0xzxe2F6EK+XafbU/QGr8iQ== X-Received: by 10.36.20.18 with SMTP id 18mr12426711itg.44.1510602221173; Mon, 13 Nov 2017 11:43:41 -0800 (PST) Received: from [192.168.1.105] (cpe-76-188-215-129.neo.res.rr.com. [76.188.215.129]) by smtp.gmail.com with ESMTPSA id o137sm7710079iod.51.2017.11.13.11.43.40 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 13 Nov 2017 11:43:40 -0800 (PST) To: tcpm@ietf.org From: Wesley Eddy Message-ID: Date: Mon, 13 Nov 2017 14:43:40 -0500 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: [tcpm] 793bis: Reducing TIME-WAIT (RFC 6191) X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 19:43:43 -0000 In the latest RFC 796bis update, I added references in a few places to mention RFC 6191 (it is reference "[26]" to aid your grepping).  Since 6191 uses Timestamp options, that are not part of the base specification, I think it's proper to have references encouraging it, but not requiring it or including it directly in 793bis. The mentions I've added are: (1) On page 31, when TIME-WAIT is described, and the reduction algorithm from 1122 is included now.  I put "SHOULD be implemented" for this, since it's definitely helpful, but one could live without it. (2) On page 71, with relation to handing sequence number validation for incoming segments in the synchronized states. (since the TIME-WAIT reduction from 1122 uses the sequence number comparison here) (3) On page 74, in the description specific to the SYN bit being set when already in the synchronized states. Please shout if you think this should be handled differently. From nobody Mon Nov 13 11:45:50 2017 Return-Path: X-Original-To: tcpm@ietf.org Delivered-To: tcpm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 88B37129B50; Mon, 13 Nov 2017 11:45:49 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: tcpm@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.65.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151060234951.554.7128704173306744721@ietfa.amsl.com> Date: Mon, 13 Nov 2017 11:45:49 -0800 Archived-At: Subject: [tcpm] I-D Action: draft-ietf-tcpm-cubic-07.txt X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 19:45:49 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TCP Maintenance and Minor Extensions WG of the IETF. Title : CUBIC for Fast Long-Distance Networks Authors : Injong Rhee Lisong Xu Sangtae Ha Alexander Zimmermann Lars Eggert Richard Scheffenegger Filename : draft-ietf-tcpm-cubic-07.txt Pages : 17 Date : 2017-11-13 Abstract: CUBIC is an extension to the current TCP standards. It differs from the current TCP standards only in the congestion control algorithm in the sender side. In particular, it uses a cubic function instead of a linear window increase function of the current TCP standards to improve scalability and stability under fast and long distance networks. CUBIC and its predecessor algorithm have been adopted as default by Linux and have been used for many years. This document provides a specification of CUBIC to enable third party implementations and to solicit the community feedback through experimentation on the performance of CUBIC. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tcpm-cubic/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-tcpm-cubic-07 https://datatracker.ietf.org/doc/html/draft-ietf-tcpm-cubic-07 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tcpm-cubic-07 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Nov 13 11:51:26 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 825171241F3; Mon, 13 Nov 2017 11:51:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.699 X-Spam-Level: X-Spam-Status: No, score=-4.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=uofnelincoln.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9DPs3WxnCmmq; Mon, 13 Nov 2017 11:51:22 -0800 (PST) Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01lp0112.outbound.protection.outlook.com [207.46.163.112]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC51F129601; Mon, 13 Nov 2017 11:51:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=uofnelincoln.onmicrosoft.com; s=selector1-unl-edu; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=yDdWNy2JkVh33ilVWsmsv/5xJJGq64q7iX68GxfhiX8=; b=fZgq3ajtf5cw/I61WOBtEv0D56uzViJq+lx+qhnror7CzBGkwLvXxPGbFxzj/vp0iBrfFLUgjQ+rWNkumz/Zn7P/nE1UZ1SmHYPLgs/z2Za10Z5T6xMnEnmd2V9Abg0FbS9uZL4HNE2YxJW6ucsQjYiMwHROM1xkH4ZISDwUvKU= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=xu@unl.edu; Received: from [10.211.139.54] (129.93.4.25) by CY4PR08MB2759.namprd08.prod.outlook.com (10.173.59.9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.218.12; Mon, 13 Nov 2017 19:51:20 +0000 From: Lisong Xu To: draft-ietf-tcpm-cubic@ietf.org, mirja.kuehlewind@tik.ee.ethz.ch, nishida@sfc.wide.ad.jp, tcpm@ietf.org, tcpm-chairs@ietf.org References: <578f0f4c-141e-7e81-71fc-cc8247972e89@unl.edu> Message-ID: <7cc4681a-4b22-2ddf-e303-c154843b329f@unl.edu> Date: Mon, 13 Nov 2017 13:51:17 -0600 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: <578f0f4c-141e-7e81-71fc-cc8247972e89@unl.edu> Content-Type: multipart/alternative; boundary="------------4E6CD7E2925A6CA5C3076953" Content-Language: en-US X-Originating-IP: [129.93.4.25] X-ClientProxiedBy: DM5PR05CA0032.namprd05.prod.outlook.com (10.174.188.149) To CY4PR08MB2759.namprd08.prod.outlook.com (10.173.59.9) X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 5f8e45c5-4ed7-4028-54d9-08d52acfe961 X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(2017052603258); SRVR:CY4PR08MB2759; X-Microsoft-Exchange-Diagnostics: 1; CY4PR08MB2759; 3:gPxNpHSVHNiS7FB8it0URsRB3EgVVsX3fFRv6gDG4b/WlBKcmdsdVny+axZ48LO3QWvYkn3efWr8XYv5wJor2aY9akHxSoClNZduxeodZYFs8tq53ow7zQ0pmbZmW7GbkwgtGQybp8vBz/v7IDPTM8zI/6mpQ0n6qu5CZooYW/3WmVwrlKk/JoerkamKUHByhbejhJ94hmiZOOfc8zpKHI+aEWxNiddXKFhiF+Him5ehasJoec1Jo+su0cp6rVVL; 25:D0Uo22L9nWb/Dc4KTeGdiqf/e/pL2Fy95NyK3llLu64+IHlqLUp65aAnMGtl8xPj8DrkOy2Xc0SOMzfSQiLfUIMV12OPjGdVIX7EfWFXL+TIE6VL4TGXMfov614yNizrMFn/ls/BPXd9JG6uAVMI4CFzyvhdUVzseCIQJvfd3h8tx0SJUBjD2XqAw9aLfLwPUnASuyg4G0Qq9k4bchaMqQGfdyj55IPrRrEivwefNUXOfuC8zy1ctTihkL2M8D66/MdSyqw/VKBIYHFDwFcJ8DKI3eji6QBBaHvTNCGtbTPGQxyzfhz0fy7E/HYg08eg4GtlDXnbJxooUPw3pgfPSg==; 31:DAul6fExw0tfHxjjFAMuFMnsrUt3m0qwKjQnpSFkv4HsE0kCtE7OoGBj3NR5VL5IIWdsPyvZPHzdvKPjQr53OvjUJ3B2JZro2MWjjGWJ3RZSf2ShfuTxENjyiTh381LFreRfu2S6ZgQb28ZXIjzZkyYNhV8xaxWOdxQ5/+/h1KaCbLiQHm5Vl+OTqWGhnr3zUFfKKFGnrUbDLPVEBW2QGc12sGcVxEIuxXdbXuHb6/Q= X-MS-TrafficTypeDiagnostic: CY4PR08MB2759: X-Microsoft-Exchange-Diagnostics: 1; CY4PR08MB2759; 20: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; 4:vqbgfKxCnLp4xbggCahjQ8kM6USjBZqHdJr/OnG1GNe6CbOFW8HVJ0Po1HB5pb2nVxPKZQmieMOEhE8OBoKp1wLGbbjPZRWlgwxCheqmgNuTXDARQV2bn351Xhch//QiSRyM1/jwyvSb8/eoCGKPN+a9rVUgH3us1ByoqhY4rjT7uNKBJfZmggoeXzrEXp27cdp+/Z+ekq+v/Us7wWJaPHxd7pUv3xYRGC7ynAlj4LIP31gYnXm95m0GvHibP6bqnwvzhagJWX0wkX+7aKuZb30CSyXoLGU0kHeYJvIswfDZ15nz5gW/ohPOgrk97fbl2P7m6QEkJI/L54ohP5GYCaazbrtpaiBRox132UBxhBs= X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(120809045254105)(192374486261705); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(3002001)(10201501046)(3231022)(100000703101)(100105400095)(93006095)(93001095)(6041248)(20161123555025)(20161123562025)(20161123560025)(20161123564025)(201703131423075)(201702281529075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:CY4PR08MB2759; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:CY4PR08MB2759; X-Forefront-PRVS: 0490BBA1F0 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(6049001)(346002)(376002)(189002)(199003)(101416001)(84326002)(31686004)(3260700006)(65806001)(65956001)(966005)(66066001)(478600001)(53936002)(68736007)(236005)(606006)(64126003)(16586007)(33646002)(16576012)(316002)(58126008)(54356999)(76176999)(25786009)(37036004)(786003)(16526018)(97736004)(6306002)(54896002)(106356001)(105586002)(83506002)(77096006)(6486002)(2950100002)(6666003)(90366009)(86362001)(31696002)(75432002)(88552002)(2906002)(7736002)(189998001)(8936002)(6116002)(3846002)(81156014)(81166006)(36756003)(8676002)(50986999)(65826007)(5660300001); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR08MB2759; H:[10.211.139.54]; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; Received-SPF: None (protection.outlook.com: unl.edu does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; CY4PR08MB2759; 23:xMqXnHNdbPQBmM1Ru6c+JaN4vtkDu1me6tmZcoCX4?= =?us-ascii?Q?OnivcoebfkY34UZp1cFL/LkOMRa9Ze2PiRTwREvlaMt2+P+S29pDL4wfVpqL?= =?us-ascii?Q?c3Rk1HuQ4JYA/NyUd2a5wbZc7KLaLMge4woDeqXDAXjXkBRlKViQXkjX45of?= =?us-ascii?Q?rYtgnTc/2EoiGUwno/SAnWameLZ2Xf55t0iZfsKeWdesSlaiv6sjFzp+ZdFU?= =?us-ascii?Q?OGWkUh/Bemk8Lt3zXOcIUSiWlXqZoE/IvdTWkwX/DYZ1TN43/zCXYpp2UxAs?= =?us-ascii?Q?81S8QWLFxeHbhbOE5VZz9Q2Ds8X2gF/EorFPrKyYfVVmZTcGDJMSPUqTHzFY?= =?us-ascii?Q?nJEtbLAP69cMPuQSMzxznGu/dW6B1xv2lHln6KOvhsud7Lzi3jy9rywD1TDM?= =?us-ascii?Q?ceb+fi3LoGjpI/T3XVGWV6Tc0W/dZS4KvyokdLsYiXU5KHbXpKfX16YwrJoI?= =?us-ascii?Q?uAp2y7Cv+Tx9TUOZhA2GtG9p/Gl3mjYCc/zsXqcmGgPxnjsRaa++nxqadbwz?= =?us-ascii?Q?KwvaTDg1JWqijBmeKQpX6MytTGphuNhSMUpefpC5tKf/ia4e99gZi9AmfU7k?= =?us-ascii?Q?s+lC3te7k8bU2uR5OMjSj7PWG2gKvdTDhIVr8UBeJXbpPKtL3v1Q/zW6lc/m?= =?us-ascii?Q?0RJvGp2P5PZKsnKdaeRlWfjLmfIhDAWU+pDQCl6xmuMDFgNiCQr3pV34/3Aq?= =?us-ascii?Q?Gf2IaCdAEUIPcJ0cKymF4cICkzi8mAgRWMpkfGku1UJ3M9I0Lfm2GX8bL12f?= =?us-ascii?Q?wRyIgQVXK6awa0KtYM/xJ/3kUP7XYzf/VhMtDKWvnt4jDNOFlU0Kt9D9B+LT?= =?us-ascii?Q?MCny1WxCE66R5qZNpRvyFe0hRYJcOckrbDaftvwJ3u+HQgwcw09ChXp9W/ZW?= =?us-ascii?Q?NaQPSIuOEi9X7PEwgSoZ6yweFhwQFP8WDwMsRMLeenQY3SgnwpUOzzcbjZbi?= =?us-ascii?Q?7VZu9XVFBHpmydcqc1k4EAm/MHZZXEEhnbfLw9j5NXoJMTcFmQVHVgVjLxL+?= =?us-ascii?Q?/n5n6/mEzQdaKGPNl9ZWEiGGzH4bYkJfxM7BB2cbNi7/MmHIrvrbX516bPZK?= =?us-ascii?Q?0mJ5FOLl14W7bD+3RY5GYRGU/vVqRS2GITBPK6XA3fF7sOMxLKcOXcnBeJ/N?= =?us-ascii?Q?2nhlbJM48BYaUpX9DAm0BiMmZH3DrR6pgb1beGzgeYVr371rTZrXG8T/kUX5?= =?us-ascii?Q?4cYcGQNHTZO+sBE6/iOjR7lkmJREdF56BK7DKKJOcarBAmwuWci0K3Bsgv6Z?= =?us-ascii?Q?5OQ/11AeqfWpo3BmOfWxHpKuM0xMn9nYt3Xu5sGrSC29v5x1JnKF0RRVYc8l?= =?us-ascii?Q?lgVgNgKQ/yTIdA0xD4Jeqg=3D?= X-Microsoft-Exchange-Diagnostics: 1; CY4PR08MB2759; 6:+fUnz3qzbDfpxiRNLNI0XkHAA6jOjx7xmfIwC/HQuNaKHdaq+lMLYvTcLhpmyQO3doDbqKQPXlCQQEhApGQxyIGSInUjK51y6zRbQ2Mxjm9duR8miTE0RjUWDjtyw8DMB0SFlPi0qU7UwcbEM8YXyUuWQ6C0D4Ese/wHg2C1yrrBt5oc1hRHKfPOnRhARKRm67uvtIUeZksKvYoaENprhSivhUfvhuX8dhVaTFjMns9BcH1pWM9Txtwu6mll9jt7xGcqP6RgT6N7vN71PW7Fdg6VDRdJ6CvnHXDgexYoxpmv7mQ/CMtMejmYiWyM50ixQyAHvLpRn0fRKE3WYtSYyATZfHqm1IvXbDGTrvJ2iE4=; 5:MCGrpd7sDwdtfG9gBpbMOi+endDwqfgD8US10QD9mKn9x7mbXjjHAYOBm14yXALr1KCo4N4WDKY9d9PxcUifKCZOOW8uMLP8SaP38NLjq0KUy3iIzu2aOjS38RCCMuy7dCiSntC3h948VOnPewkmhO2g7h/c6flBn4MVivnF22o=; 24:ZncMmOjgaRAHQvx2Ie6J+5j3T0FU//rYxppE4GhKqtoF09HhUhu2cadW+qdLi/08vGl1PhHp6VVlYou2zDyuRdNn8lNHVm6/T5Gge3iZpHI=; 7:7yqJUIIXCI1dxuD/nQUWV3aF5iE21oRsXtIFY8MBJl3byFPki9ELEzkanWznNOwYQR29lG7AZTg+TRsJuf3PgmXyK05WVJWfGzDhcOb3M0cIsoiQMZRwSziJ4mA45fZ0bTTfDDPwzqb3X1WEiymt4FMskhJijXok2hjRsYQ8r4xeKZ0LbVg/3N9vmXtf+R4b/TP+iq1/3sM+G2Yrb09JiO+658DCSZ9gIYdnO6tpU7RMmc7hltQ6IRv6xRApmxS3 SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: unl.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Nov 2017 19:51:20.1110 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 5f8e45c5-4ed7-4028-54d9-08d52acfe961 X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: fddb01ad-4983-436e-ab35-1af043b818c9 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR08MB2759 Archived-At: Subject: [tcpm] CUBIC Internet Draft - version 7 X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 19:51:25 -0000 This is a multi-part message in MIME format. --------------4E6CD7E2925A6CA5C3076953 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Greetings, We just submitted a new Internet draft for TCP CUBIC available at the following link https://datatracker.ietf.org/doc/draft-ietf-tcpm-cubic/ In this version, we made the following changes based on the comments received on tcpm-cubic@ietf.org after September 2017. * fixed some typo and grammatical errors * reworded some sentences and paragraphs * changed Section 4.5 to ensure that slow start threshold is at least 2 MSS * replaced all ``loss event'' with ``congestion event'' to be consistent and more accurate for ECN * replaced all ``bandwidth share'' with ``throughput ratios'' to be clearer * Mirja's comments on 9/18/2017    + called CUBIC a congestion control algorithm, instead of a protocol    + some other editorial changes: like adding more references to ECN, fast recovery, timeout. * Qin's comments on 9/23/2017    + Revised Section 5.10 "Incremental Deployment" to specific that CUBIC does not make any change to TCP receivers.    + (major revision) Revised Section 3 to better explain the convex increase functions, to summarize the design principles, to more clearly describe the RTT fairness.    + Revised Tables 1 and 2 to be consistent * Sean's comments on 9/26/2017    + Revised Section 6 to add RFC5681 for TCP security discussion * Mirja's comments on 9/26/2017    + Revised Section 4.7 to more clearly describe the timeout behaviors * Hiren's comments on 10/3/2017    + Revised Section 4.8 to more clearly describe the slow start behaviors * Spencer's comments on 10/10/2017    + (major revision) revised Section 3 to more clearly describe the TCP friendliness    + fixed typo and many other editorial changes * Benoit's comments on 10/11/2017    + addressed Qin's comments * Ben's comments on 10/11/2017    + clarified the relation between the draft and original CUBIC paper * Qin's comments on 10/31/2017    + replaced all "window growth rate" with "window increase rate" to avoid confusion Thanks Lisong --------------4E6CD7E2925A6CA5C3076953 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit Greetings,

We just submitted a new Internet draft for TCP CUBIC available at the following link

https://datatracker.ietf.org/doc/draft-ietf-tcpm-cubic/

In this version, we made the following changes based on the comments received on tcpm-cubic@ietf.org after September 2017.

* fixed some typo and grammatical errors
* reworded some sentences and paragraphs
* changed Section 4.5 to ensure that slow start threshold is at least 2 MSS
* replaced all ``loss event'' with ``congestion event'' to be consistent and more accurate for ECN
* replaced all ``bandwidth share'' with ``throughput ratios'' to be clearer

* Mirja's comments on 9/18/2017
   + called CUBIC a congestion control algorithm, instead of a protocol
   + some other editorial changes: like adding more references to ECN, fast recovery, timeout.

* Qin's comments on 9/23/2017
   + Revised Section 5.10 "Incremental Deployment" to specific that CUBIC does not make any change to TCP receivers.
   + (major revision) Revised Section 3 to better explain the convex increase functions, to summarize the design principles, to more clearly describe the RTT fairness.
   + Revised Tables 1 and 2 to be consistent

* Sean's comments on 9/26/2017
   + Revised Section 6 to add RFC5681 for TCP security discussion

* Mirja's comments on 9/26/2017
   + Revised Section 4.7 to more clearly describe the timeout behaviors

* Hiren's comments on 10/3/2017
   + Revised Section 4.8 to more clearly describe the slow start behaviors

* Spencer's comments on 10/10/2017
   + (major revision) revised Section 3 to more clearly describe the TCP friendliness
   + fixed typo and many other editorial changes

* Benoit's comments on 10/11/2017
   + addressed Qin's comments

* Ben's comments on 10/11/2017
   + clarified the relation between the draft and original CUBIC paper

* Qin's comments on 10/31/2017
   + replaced all "window growth rate" with "window increase rate" to avoid confusion

Thanks
Lisong

--------------4E6CD7E2925A6CA5C3076953-- From lstewart@freebsd.org Sun Nov 12 19:20:10 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA6A31293F2 for ; Sun, 12 Nov 2017 19:20:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.234 X-Spam-Level: X-Spam-Status: No, score=-1.234 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VMzz1NvgKO40 for ; Sun, 12 Nov 2017 19:20:08 -0800 (PST) Received: from lauren.room52.net (lauren.room52.net [45.63.28.37]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D61CC128AFE for ; Sun, 12 Nov 2017 19:20:07 -0800 (PST) Received: by lauren.room52.net (Postfix) with ESMTPSA id 53BD2430AA; Mon, 13 Nov 2017 14:20:05 +1100 (AEDT) To: "tcpm@ietf.org Extensions" Cc: "Bless, Roland (TM)" , Michael Welzl , Naeem Khademi References: From: Lawrence Stewart Message-ID: Date: Mon, 13 Nov 2017 11:20:03 +0800 User-Agent: Not your concern MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/mixed; boundary="------------99D66E5233C9C54E89BA714C" Content-Language: en-AU Archived-At: X-Mailman-Approved-At: Mon, 13 Nov 2017 13:47:54 -0800 Subject: Re: [tcpm] Review of draft-ietf-tcpm-alternativebackoff-ecn-02 X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 05:52:48 -0000 This is a multi-part message in MIME format. --------------99D66E5233C9C54E89BA714C Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit On 23/10/2017 18:12, Bless, Roland (TM) wrote: > Hi, > > as promised at the last IETF meeting, here is my (lengthy) > review of draft-ietf-tcpm-alternativebackoff-ecn-02. I made use of the plane trip to Singapore to scribble some comments into the -02 draft, which you'll find in the attached .txt in between ==LAS== <...> ======= I'm in Singapore until Friday morning if the authors want to discuss/clarify anything in person. The patch to implement ABE for FreeBSD's NewReno CC algo module is ready to land and just waiting on me to pull the trigger. Should be real soon now... Cheers, Lawrence --------------99D66E5233C9C54E89BA714C Content-Type: text/plain; charset=UTF-8; name="draft-ietf-tcpm-alternativebackoff-ecn-02-lstewartnotes.txt" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename*0="draft-ietf-tcpm-alternativebackoff-ecn-02-lstewartnotes.txt" CgoKCk5ldHdvcmsgV29ya2luZyBHcm91cCAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgTi4gS2hhZGVtaQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTS4gV2VsemwKSW50ZW5kZWQgc3Rh dHVzOiBFeHBlcmltZW50YWwgICAgICAgICAgICAgICAgICAgICAgICAgVW5pdmVyc2l0eSBv ZiBPc2xvCkV4cGlyZXM6IEFwcmlsIDIzLCAyMDE4ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBHLiBBcm1pdGFnZQogICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFN3aW5idXJuZSBVbml2ZXJzaXR5IG9mIFRlY2hub2xvZ3kKICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRy4g RmFpcmh1cnN0CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgVW5pdmVyc2l0eSBvZiBBYmVyZGVlbgogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE9jdG9iZXIgMjAsIDIwMTcKCgogICAg ICAgICAgICAgICAgIFRDUCBBbHRlcm5hdGl2ZSBCYWNrb2ZmIHdpdGggRUNOIChBQkUpCiAg ICAgICAgICAgICAgIGRyYWZ0LWlldGYtdGNwbS1hbHRlcm5hdGl2ZWJhY2tvZmYtZWNuLTAy Cj09PUxBUz09PQotIERyb3AgIlRDUCIgZnJvbSB0aXRsZSBnaXZlbiB0aGF0IHlvdSBhc3Nl cnQgQUJFIGlzIGFwcGxpY2FibGUgdG8gYWxsCiAgRUNOLWNhcGFibGUgY29uZ2VzdGlvbiBj b250cm9sbGVkIHRyYW5zcG9ydHM/Cj09PT09PT09PQoKQWJzdHJhY3QKCiAgIFJlY2VudCBB Y3RpdmUgUXVldWUgTWFuYWdlbWVudCAoQVFNKSBtZWNoYW5pc21zIGluc3RhbnRpYXRlIHNo YWxsb3cKICAgYnVmZmVycyB3aXRoIGJ1cnN0IHRvbGVyYW5jZSB0byBtaW5pbWlzZSB0aGUg dGltZSB0aGF0IHBhY2tldHMgc3BlbmQKICAgZW5xdWV1ZWQgYXQgYSBib3R0bGVuZWNrLiAg SG93ZXZlciwgc2hhbGxvdyBidWZmZXJpbmcgY2FuIGNhdXNlCiAgIG5vdGljZWFibGUgcGVy Zm9ybWFuY2UgZGVncmFkYXRpb24gd2hlbiBUQ1AgaXMgdXNlZCBvdmVyIGEgbmV0d29yawog ICBwYXRoIHdpdGggYSBsYXJnZSBiYW5kd2lkdGgtZGVsYXktcHJvZHVjdC4gIFRyYWRpdGlv bmFsIG1ldGhvZHMgcmVseQo9PUxBUz09IFRyYWRpdGlvbmFsIG1ldGhvZHMgb2Ygd2hhdD8g PT09PT09PQogICBvbiBkZXRlY3RpbmcgbmV0d29yayBjb25nZXN0aW9uIHRocm91Z2ggcmVw b3J0ZWQgbG9zcyBvZiB0cmFuc3BvcnQKPT1MQVM9PQotIHMvZGV0ZWN0aW5nL2luZmVycmlu Zy8KLSAidGhyb3VnaCByZXBvcnRlZC4uLiIgLT4gImJ5IHdheSBvZiBpbmZlcnJlZCBwYWNr ZXQgbG9zcyIuCj09PT09PT0KICAgcGFja2V0cy4gIEV4cGxpY2l0IENvbmdlc3Rpb24gTm90 aWZpY2F0aW9uIChFQ04pIGluc3RlYWQgYWxsb3dzIGEKICAgcm91dGVyIHRvIGRpcmVjdGx5 IHNpZ25hbCBpbmNpcGllbnQgY29uZ2VzdGlvbi4gIEEgc2VuZGluZyBlbmRwb2ludAogICBj YW4gZGlzdGluZ3Vpc2ggd2hlbiBjb25nZXN0aW9uIGlzIHNpZ25hbGxlZCB2aWEgRUNOLCBy YXRoZXIgdGhhbiBieQogICBwYWNrZXQgbG9zcy4gIEFuIEVDTiBzaWduYWwgaW5kaWNhdGVz IHRoYXQgYW4gQVFNIG1lY2hhbmlzbSBoYXMgZG9uZQogICBpdHMgam9iLCBhbmQgdGhlcmVm b3JlIHRoZSBib3R0bGVuZWNrIG5ldHdvcmsgcXVldWUgaXMgbGlrZWx5IHRvIGJlCiAgIHNo YWxsb3cuICBUaGlzIGRvY3VtZW50IHRoZXJlZm9yZSBwcm9wb3NlcyBhbiB1cGRhdGUgdG8g dGhlIFRDUAogICBzZW5kZXItc2lkZSBFQ04gcmVhY3Rpb24gaW4gY29uZ2VzdGlvbiBhdm9p ZGFuY2UgdG8gcmVkdWNlIHRoZQogICBDb25nZXN0aW9uIFdpbmRvdyAoY3duZCkgYnkgYSBz bWFsbGVyIGFtb3VudCB0aGFuIHRoZSBjb25nZXN0aW9uCiAgIGNvbnRyb2wgYWxnb3JpdGht J3MgcmVhY3Rpb24gdG8gbG9zcy4gIFRoaXMgZG9jdW1lbnQgYWxzbyByZWNvbW1lbmRzCiAg IHRoaXMgYXBwcm9hY2ggdG8gYmUgYWRvcHRlZCBieSBhbnkgb3RoZXIgdHJhbnNwb3J0IHBy b3RvY29sIHRoYXQKICAgaW1wbGVtZW50cyBhIGNvbmdlc3Rpb24gY29udHJvbCByZWR1Y3Rp b24gdG8gYW4gRUNOIGNvbmdlc3Rpb24KICAgc2lnbmFsLgo9PUxBUz09Ci0gUGVyaGFwcyBy ZXBsYWNlIGZyb20gIlRoaXMgZG9jdW1lbnQgdGhlcmVmb3JlLi4iIHRvIGVuZCBvZiBwYXJh IHdpdGg6CiAgICAgICJUaGlzIGRvY3VtZW50IHRoZXJlZm9yZSBwcm9wb3NlcyB0aGF0IHRo ZSBzZW5kZXItc2lkZSBjb25nZXN0aW9uCiAgICAgIHdpbmRvdyAoY3duZCkgcmVkdWN0aW9u IGFwcGxpZWQgYnkgRUNOLWNhcGFibGUsIGNvbmdlc3Rpb24KICAgICAgY29udHJvbGxlZCB0 cmFuc3BvcnQgcHJvdG9jb2xzIGluIHJlc3BvbnNlIHRvIEVDTi1zaWduYWxsZWQKICAgICAg Y29uZ2VzdGlvbiBiZSBsZXNzIHRoYW4gdGhlIHJlZHVjdGlvbiBhcHBsaWVkIGluIHJlc3Bv bnNlIHRvCiAgICAgIGluZmVycmVkIHBhY2tldCBsb3NzLiIKPT09PT09PQoKU3RhdHVzIG9m IFRoaXMgTWVtbwoKICAgVGhpcyBJbnRlcm5ldC1EcmFmdCBpcyBzdWJtaXR0ZWQgaW4gZnVs bCBjb25mb3JtYW5jZSB3aXRoIHRoZQogICBwcm92aXNpb25zIG9mIEJDUCA3OCBhbmQgQkNQ IDc5LgoKICAgSW50ZXJuZXQtRHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUg SW50ZXJuZXQgRW5naW5lZXJpbmcKICAgVGFzayBGb3JjZSAoSUVURikuICBOb3RlIHRoYXQg b3RoZXIgZ3JvdXBzIG1heSBhbHNvIGRpc3RyaWJ1dGUKICAgd29ya2luZyBkb2N1bWVudHMg YXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC0KICAg RHJhZnRzIGlzIGF0IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZHJhZnRzL2N1cnJl bnQvLgoKICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9y IGEgbWF4aW11bSBvZiBzaXggbW9udGhzCiAgIGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFj ZWQsIG9yIG9ic29sZXRlZCBieSBvdGhlciBkb2N1bWVudHMgYXQgYW55CiAgIHRpbWUuICBJ dCBpcyBpbmFwcHJvcHJpYXRlIHRvIHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNl CiAgIG1hdGVyaWFsIG9yIHRvIGNpdGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGluIHBy b2dyZXNzLiIKCgoKS2hhZGVtaSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgQXByaWwgMjMs IDIwMTggICAgICAgICAgICAgICAgIFtQYWdlIDFdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAg ICAgICAgICAgICAgICBBQkUgICAgICAgICAgICAgICAgICAgICAgT2N0b2JlciAyMDE3CgoK ICAgVGhpcyBJbnRlcm5ldC1EcmFmdCB3aWxsIGV4cGlyZSBvbiBBcHJpbCAyMywgMjAxOC4K CkNvcHlyaWdodCBOb3RpY2UKCiAgIENvcHlyaWdodCAoYykgMjAxNyBJRVRGIFRydXN0IGFu ZCB0aGUgcGVyc29ucyBpZGVudGlmaWVkIGFzIHRoZQogICBkb2N1bWVudCBhdXRob3JzLiAg QWxsIHJpZ2h0cyByZXNlcnZlZC4KCiAgIFRoaXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBC Q1AgNzggYW5kIHRoZSBJRVRGIFRydXN0J3MgTGVnYWwKICAgUHJvdmlzaW9ucyBSZWxhdGlu ZyB0byBJRVRGIERvY3VtZW50cwogICAoaHR0cHM6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vu c2UtaW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mCiAgIHB1YmxpY2F0aW9uIG9mIHRo aXMgZG9jdW1lbnQuICBQbGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50cwogICBjYXJlZnVs bHksIGFzIHRoZXkgZGVzY3JpYmUgeW91ciByaWdodHMgYW5kIHJlc3RyaWN0aW9ucyB3aXRo IHJlc3BlY3QKICAgdG8gdGhpcyBkb2N1bWVudC4gIENvZGUgQ29tcG9uZW50cyBleHRyYWN0 ZWQgZnJvbSB0aGlzIGRvY3VtZW50IG11c3QKICAgaW5jbHVkZSBTaW1wbGlmaWVkIEJTRCBM aWNlbnNlIHRleHQgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gNC5lIG9mCiAgIHRoZSBUcnVz dCBMZWdhbCBQcm92aXNpb25zIGFuZCBhcmUgcHJvdmlkZWQgd2l0aG91dCB3YXJyYW50eSBh cwogICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2UuCgpUYWJsZSBv ZiBDb250ZW50cwoKICAgMS4gIERlZmluaXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAyCiAgIDIuICBJbnRyb2R1Y3Rpb24gIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMgogICAz LiAgU3BlY2lmaWNhdGlvbiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgIDQKICAgNC4gIERpc2N1c3Npb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA0CiAgICAgNC4xLiAgV2h5IFVzZSBF Q04gdG8gVmFyeSB0aGUgRGVncmVlIG9mIEJhY2tvZmY/ICAuIC4gLiAuIC4gLiAuICAgNAog ICAgIDQuMi4gIEZvY3VzIG9uIEVDTiBhcyBEZWZpbmVkIGluIFJGQzMxNjggIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgIDUKICAgICA0LjMuICBEaXNjdXNzaW9uOiBDaG9pY2Ugb2YgQUJF IE11bHRpcGxpZXIgIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA1CiAgIDUuICBTdGF0dXMgb2Yg dGhlIFVwZGF0ZSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAg NwogICA2LiAgQWNrbm93bGVkZ2VtZW50cyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgIDcKICAgNy4gIElBTkEgQ29uc2lkZXJhdGlvbnMgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA4CiAgIDguICBJbXBsZW1l bnRhdGlvbiBTdGF0dXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICAgOAogICA5LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgIDgKICAgMTAuIFJldmlzaW9uIEluZm9ybWF0aW9uICAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA4CiAgIDExLiBSZWZl cmVuY2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICAgOQogICAgIDExLjEuICBOb3JtYXRpdmUgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDkKICAgICAxMS4yLiAgSW5mb3JtYXRpdmUgUmVm ZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEwCiAgIEF1dGhv cnMnIEFkZHJlc3NlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICAxMQoKMS4gIERlZmluaXRpb25zCgogICBUaGUga2V5IHdvcmRzICJNVVNUIiwg Ik1VU1QgTk9UIiwgIlJFUVVJUkVEIiwgIlNIQUxMIiwgIlNIQUxMIE5PVCIsCiAgICJTSE9V TEQiLCAiU0hPVUxEIE5PVCIsICJSRUNPTU1FTkRFRCIsICJNQVkiLCBhbmQgIk9QVElPTkFM IiBpbiB0aGlzCiAgIGRvY3VtZW50IGFyZSB0byBiZSBpbnRlcnByZXRlZCBhcyBkZXNjcmli ZWQgaW4gUkZDIDIxMTkgW1JGQzIxMTldLgoKMi4gIEludHJvZHVjdGlvbgoKICAgRXhwbGlj aXQgQ29uZ2VzdGlvbiBOb3RpZmljYXRpb24gKEVDTikgW1JGQzMxNjhdIG1ha2VzIGl0IHBv c3NpYmxlCiAgIGZvciBhbiBBY3RpdmUgUXVldWUgTWFuYWdlbWVudCAoQVFNKSBtZWNoYW5p c20gdG8gc2lnbmFsIHRoZSBwcmVzZW5jZQogICBvZiBpbmNpcGllbnQgY29uZ2VzdGlvbiB3 aXRob3V0IGluY3VycmluZyBwYWNrZXQgbG9zcy4gIFRoaXMgbGV0cyB0aGUKPT1MQVM9PQot IHMvd2l0aG91dCBpbmN1cnJpbmcvcHJpb3IgdG8gdGhlIG9uc2V0IG9mLwo9PT09PT09CgoK CktoYWRlbWksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEFwcmlsIDIzLCAyMDE4ICAgICAg ICAgICAgICAgICBbUGFnZSAyXQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAg ICAgQUJFICAgICAgICAgICAgICAgICAgICAgIE9jdG9iZXIgMjAxNwoKCiAgIG5ldHdvcmsg ZGVsaXZlciBzb21lIHBhY2tldHMgdG8gYW4gYXBwbGljYXRpb24gdGhhdCB3b3VsZCBoYXZl IGJlZW4KICAgZHJvcHBlZCBpZiB0aGUgYXBwbGljYXRpb24gb3IgdHJhbnNwb3J0IGRpZCBu b3Qgc3VwcG9ydCBFQ04uICBUaGlzCiAgIHBhY2tldCBsb3NzIHJlZHVjdGlvbiBpcyB0aGUg bW9zdCBvYnZpb3VzIGJlbmVmaXQgb2YgRUNOLCBidXQgaXQgaXMKICAgb2Z0ZW4gcmVsYXRp dmVseSBtb2Rlc3QuICBUaGVyZSBhcmUgYWxzbyBzaWduaWZpY2FudCBvdGhlciBiZW5lZml0 cwogICBmcm9tIGRlcGxveWluZyBFQ04gW1JGQzgwODddLCBpbmNsdWRpbmcgcmVkdWNlZCBl bmQtdG8tZW5kIG5ldHdvcmsKICAgbGF0ZW5jeS4KCiAgIFRoZSBydWxlcyBmb3IgRUNOIHdl cmUgb3JpZ2luYWxseSB3cml0dGVuIHRvIGJlIHZlcnkgY29uc2VydmF0aXZlLAogICBhbmQg cmVxdWlyZWQgdGhlIGNvbmdlc3Rpb24gY29udHJvbCBhbGdvcml0aG1zIG9mIEVDTi1jYXBh YmxlCiAgIHRyYW5zcG9ydCBwcm90b2NvbHMgdG8gdHJlYXQgRUNOIGNvbmdlc3Rpb24gc2ln bmFscyBleGFjdGx5IHRoZSBzYW1lCiAgIGFzIHRoZXkgd291bGQgdHJlYXQgYSBwYWNrZXQg bG9zcyBbUkZDMzE2OF0uCgogICBSZXNlYXJjaCBoYXMgZGVtb25zdHJhdGVkIHRoZSBiZW5l Zml0cyBvZiByZWR1Y2luZyBuZXR3b3JrIGRlbGF5cyBkdWUKICAgdG8gZXhjZXNzaXZlIGJ1 ZmZlcmluZyBbQlVGRkVSQkxPQVRdOyB0aGlzIGhhcyBsZWQgdG8gdGhlIGNyZWF0aW9uIG9m Cj09TEFTPT0gQ2FuIHdlIGRvIGJldHRlciB0aGFuIHRoZSBjdXJyZW50IFtCVUZGRVJCTE9B VF0gcmVmZXJlbmNlIHdoaWNoIHBvaW50cyB0byBhIHdpa2k/ID09PT09PT0KICAgbmV3IEFR TSBtZWNoYW5pc21zIGxpa2UgUElFIFtSRkM4MDMzXSBhbmQgQ29EZWwgW0NPREVMMjAxMl0K PT1MQVM9PSBQZXJoYXBzIFtDT0RFTDIwMTIsSS1ELkNPREVMXSA9PT09PT09CiAgIFtJLUQu Q29EZWxdLCB3aGljaCBhdm9pZCBjYXVzaW5nIGJsb2F0ZWQgcXVldWVzIHRoYXQgYXJlIGNv bW1vbiB3aXRoCiAgIGEgc2ltcGxlIHRhaWwtZHJvcCBiZWhhdmlvdXIgKGFsc28ga25vd24g YXMgYSBGaXJzdC1JbiBGaXJzdC1PdXQsCiAgIEZJRk8sIHF1ZXVlKS4KPT1MQVM9PQotIEFR TXMvUGFzc2l2ZSBxdWV1ZSBzY2hlbWVzIGRvbid0ICJjYXVzZSIgcXVldWUgYmxvYXQuLi4g bmV0d29yayBob3N0cyBkby4KLSBBYm92ZSBjb25mbGF0ZXMgcXVldWUgY2FwYWNpdHkgKGku ZS4gbnVtIHNsb3RzL2J5dGVzKSwgc2NoZWR1bGluZy9zZXJ2aWNlCiAgcGFyYWRpZ20gKGku ZS4gaG93IHBhY2tldHMgYXJlIGRyYXduIGZyb20gdGhlIHF1ZXVlKSBhbmQgZHJvcCBjcml0 ZXJpYQogIChpLmUuIGJhc2lzIGZvciBkcm9wcGluZyBwYWNrZXRzKSBlLmcuIHlvdSBjYW4g aGF2ZSBzbWFsbCBjYXBhY2l0eQogIG5vbi1ibG9hdHkgRklGTyBxdWV1ZXMsIGFuZCB0YWls IGRyb3Agd2l0aCBub24tRklGTyBzY2hlZHVsZWQgcXVldWVzLgotIE1heWJlIG5lZWQgdG8g cmVoYXNoIChvciBhdCBsZWFzdCBtZW50aW9uICsgY2l0ZSkgY29uY2VwdCBvZiAiZ29vZCIg dnMgImJhZCIgcXVldWU/Cj09PT09PT0KCiAgIFRoZXNlIEFRTSBtZWNoYW5pc21zIGluc3Rh bnRpYXRlIHNob3J0IHF1ZXVlcyB0aGF0IGFyZSBkZXNpZ25lZCB0bwogICB0b2xlcmF0ZSBw YWNrZXQgYnVyc3RzLiAgSG93ZXZlciwgY29uZ2VzdGlvbiBjb250cm9sIG1lY2hhbmlzbXMK ICAgY2Fubm90IGFsd2F5cyB1dGlsaXNlIGEgYm90dGxlbmVjayBsaW5rIHdlbGwgd2hlcmUg dGhlcmUgYXJlIHNob3J0CiAgIHF1ZXVlcy4gIEZvciBleGFtcGxlLCB0byBhbGxvdyBhIHNp bmdsZSBUQ1AgY29ubmVjdGlvbiB0byBmdWxseQogICB1dGlsaXNlIGEgbmV0d29yayBwYXRo LCB0aGUgcXVldWUgYXQgdGhlIGJvdHRsZW5lY2sgbGluayBtdXN0IGJlIGFibGUKICAgdG8g Y29tcGVuc2F0ZSBmb3IgVENQIGhhbHZpbmcgdGhlICJjd25kIiBhbmQgInNzdGhyZXNoIiB2 YXJpYWJsZXMgaW4KPT1MQVM9PQotICJDb21wZW5zYXRlIiBpcyBub3QgcXVpdGUgcmlnaHQs IGFuZCBzc3RocmVzaCBkb2Vzbid0IHJlYWxseSBoYXZlIGFueQogIHJlbGV2YW5jZSBoZXJl Li4uIHBlcmhhcHMgdGhpcyBhbmQgbmV4dCBzZW50ZW5jZSBjb3VsZCBiZSByZXBsYWNlZCB3 aXRoOgogICAgRm9yIGV4YW1wbGUsIGEgVENQIHNlbmRlciBtdXN0IGJlIGFibGUgdG8gYnVm ZmVyIGF0IGxlYXN0IGFuCiAgICBlbmQtdG8tZW5kIGJhbmR3aWR0aC1kZWxheSBwcm9kdWN0 IChCRFApIHdvcnRoIG9mIGRhdGEgYXQgdGhlIGJvdHRsZW5lY2sKICAgIHF1ZXVlIGlmIGl0 IGlzIHRvIG1haW50YWluIGZ1bGwgcGF0aCB1dGlsaXNhdGlvbiBpbiB0aGUgZmFjZSBvZgog ICAgbG9zcy1pbmR1Y2VkIGhhbHZpbmcgb2YgY3duZC4KPT09PT09PQogICByZXNwb25zZSB0 byBhIGxvc3QgcGFja2V0IFtSRkM1NjgxXS4gIFRoaXMgcmVxdWlyZXMgdGhlIGJvdHRsZW5l Y2sKICAgcXVldWUgdG8gYmUgYWJsZSB0byBzdG9yZSBhdCBsZWFzdCBhbiBlbmQtdG8tZW5k IGJhbmR3aWR0aC1kZWxheQogICBwcm9kdWN0IChCRFApIG9mIGRhdGEsIHdoaWNoIGVmZmVj dGl2ZWx5IGRvdWJsZXMgYm90aCB0aGUgYW1vdW50IG9mCiAgIGRhdGEgdGhhdCBjYW4gYmUg aW4gZmxpZ2h0IGFuZCB0aGUgcm91bmQtdHJpcCB0aW1lIChSVFQpIGV4cGVyaWVuY2UKPT1M QVM9PSAtPiAiLi4uIGFuZCB0aGUgcGF0aCdzIGVmZmVjdGl2ZSBSVFQiPyA9PT09PT09IAog ICB1c2luZyB0aGUgbmV0d29yayBwYXRoLgoKICAgTW9kZXJuIEFRTSBtZWNoYW5pc21zIGNh biB1c2UgRUNOIHRvIHNpZ25hbCB0aGUgZWFybHkgc2lnbnMgb2YKICAgaW1wZW5kaW5nIHF1 ZXVlIGJ1aWxkdXAgbG9uZyBiZWZvcmUgYSB0YWlsLWRyb3AgcXVldWUgd291bGQgYmUgZm9y Y2VkCiAgIHRvIHJlc29ydCB0byBkcm9wcGluZyBwYWNrZXRzLiAgSXQgaXMgdGhlcmVmb3Jl IGFwcHJvcHJpYXRlIGZvciB0aGUKICAgdHJhbnNwb3J0IHByb3RvY29sIGNvbmdlc3Rpb24g Y29udHJvbCBhbGdvcml0aG0gdG8gaGF2ZSBhIG1vcmUKICAgbWVhc3VyZWQgcmVzcG9uc2Ug d2hlbiBhbiBlYXJseS13YXJuaW5nIHNpZ25hbCBvZiBjb25nZXN0aW9uIGlzCiAgIHJlY2Vp dmVkIGluIHRoZSBmb3JtIG9mIGFuIEVDTiBDRS1tYXJrZWQgcGFja2V0LiAgUmVjb2duaXpp bmcgdGhlc2UKICAgY2hhbmdlcyBpbiBtb2Rlcm4gQVFNIHByYWN0aWNlcywgbW9yZSByZWNl bnQgcnVsZXMgaGF2ZSByZWxheGVkIHRoZQogICBzdHJpY3QgcmVxdWlyZW1lbnQgdGhhdCBF Q04gc2lnbmFscyBiZSB0cmVhdGVkIGlkZW50aWNhbGx5IHRvIHBhY2tldAogICBsb3NzIFtJ LUQuRUNOLWV4cF0uICBGb2xsb3dpbmcgdGhlc2UgbmV3ZXIsIG1vcmUgZmxleGlibGUgcnVs ZXMsIHRoaXMKICAgZG9jdW1lbnQgZGVmaW5lcyBhIG5ldyBzZW5kZXItc2lkZS1vbmx5IGNv bmdlc3Rpb24gY29udHJvbCByZXNwb25zZSwKICAgY2FsbGVkICJBQkUiIChBbHRlcm5hdGl2 ZSBCYWNrb2ZmIHdpdGggRUNOKS4gIEFCRSBpbXByb3ZlcyB0aGUKICAgcGVyZm9ybWFuY2Ug d2hlbiByb3V0ZXJzIHVzZSBzaGFsbG93IGJ1ZmZlcmVkIEFRTSBtZWNoYW5pc21zLgo9PUxB Uz09Ci0gInRoZSBwZXJmb3JtYW5jZSIgLT4gIlRDUCdzIGF2ZXJhZ2UgdGhyb3VnaHB1dCIK PT09PT09PQoKCgoKCgoKS2hhZGVtaSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgQXByaWwg MjMsIDIwMTggICAgICAgICAgICAgICAgIFtQYWdlIDNdCgwKSW50ZXJuZXQtRHJhZnQgICAg ICAgICAgICAgICAgICAgICBBQkUgICAgICAgICAgICAgICAgICAgICAgT2N0b2JlciAyMDE3 CgoKMy4gIFNwZWNpZmljYXRpb24KCiAgIFRoaXMgc3BlY2lmaWNhdGlvbiBkZXNjcmliZXMg YW4gdXBkYXRlIHRvIHRoZSBjb25nZXN0aW9uIGNvbnRyb2wKICAgYWxnb3JpdGhtIG9mIGFu IEVDTi1jYXBhYmxlIFRDUCB0cmFuc3BvcnQgcHJvdG9jb2wuICBJdCBhbGxvd3MgYSBUQ1AK ICAgc3RhY2sgdG8gdXBkYXRlIHRoZSBUQ1Agc2VuZGVyIHJlc3BvbnNlIHdoZW4gaXQgcmVj ZWl2ZXMgZmVlZGJhY2sKICAgaW5kaWNhdGluZyByZWNlcHRpb24gb2YgYSBDRS1tYXJrZWQg cGFja2V0LiAgSXQgUkVDT01NRU5EUyB0aGF0IGEgVENQCiAgIHNlbmRlciBtdWx0aXBsaWVz IHRoZSBjd25kIGJ5IDAuOCBhbmQgcmVkdWNlcyB0aGUgc2xvdyBzdGFydAogICB0aHJlc2hv bGQgKHNzdGhyZXNoKSBpbiBjb25nZXN0aW9uIGF2b2lkYW5jZSBmb2xsb3dpbmcgcmVjZXB0 aW9uIG9mIGEKICAgVENQIHNlZ21lbnQgdGhhdCBzZXRzIHRoZSBFQ04tRWNobyBmbGFnIChk ZWZpbmVkIGluIFtSRkMzMTY4XSkuCiAgIFdoaWxlIHRoaXMgc3BlY2lmaWNhdGlvbiBjb25j ZXJucyBUQ1AsIG90aGVyIHRyYW5zcG9ydHMgYWxzbyBzdXBwb3J0CiAgIGEgcGVyLVJUVCBy ZXNwb25zZSB0byBFQ04uICBUaGUgbWV0aG9kIGRlZmluZWQgaW4gdGhpcyBkb2N1bWVudCBp cwogICBhbHNvIGFwcGxpY2FibGUgZm9yIHN1Y2ggdHJhbnNwb3J0cy4KCj09TEFTPT0KLSBR dWl0ZSBmbHVmZnkuLi4gcGVyaGFwcyBzb21ldGhpbmcgYWxvbmcgdGhlIGxpbmVzIG9mOgog ICAgVGhlIEFCRSBzcGVjaWZpY2F0aW9uIHByb3Bvc2VzIGluY3JlYXNpbmcgdGhlIEVDTi1j YXBhYmxlIHRyYW5zcG9ydCBwcm90b2NvbAogICAgY29uZ2VzdGlvbiBjb250cm9sIGFsZ29y aXRobSdzIGN3bmQgbXVsdGlwbGljYXRpdmUgZGVjcmVhc2UgZmFjdG9yLCBiZXRhLAogICAg YXBwbGllZCBpbiByZXNwb25zZSB0byBFQ04tc2lnbmFsbGVkIGNvbmdlc3Rpb24gcGVyIGVx dWF0aW9uIFggW1JGQzU2ODFdLgogICAgSXQgUkVDT01NRU5EUyBpbmNyZWFzaW5nIGJldGEg ZnJvbSAwLjUgcGVyIFJGQzMxNjgvUkZDNTY4MSB0byAwLjggZm9yIGFueQogICAgRUNOLWNh cGFibGUgdHJhbnNwb3J0IHByb3RvY29sIHRoYXQgc3VwcG9ydHMgYSBwZXItUlRUIHJlc3Bv bnNlIHRvIEVDTi4KCiAgICBFcW4gWDogT24gY29uZ2VzdGlvbjoJc3N0aHJlc2ggPSBjd25k X25vdyAqIGJldGEKICAgIAkJCQljd25kX25leHQgPSBzc3RocmVzaAo9PT09PT09Cgo0LiAg RGlzY3Vzc2lvbgoKICAgTXVjaCBvZiB0aGUgdGVjaG5pY2FsIGJhY2tncm91bmQgdG8gdGhp cyBjb25nZXN0aW9uIGNvbnRyb2wgcmVzcG9uc2UKICAgY2FuIGJlIGZvdW5kIGluIGEgcmVz ZWFyY2ggcGFwZXIgW0FCRTIwMTddLiAgVGhpcyBwYXBlciB1c2VkIGEgbWl4IG9mCiAgIGV4 cGVyaW1lbnRzLCB0aGVvcnkgYW5kIHNpbXVsYXRpb25zIHdpdGggc3RhbmRhcmQgTmV3UmVu byBhbmQgQ1VCSUMKICAgdG8gZXZhbHVhdGUgdGhlIHRlY2huaXF1ZS4gIEl0IGV4YW1pbmVk IHRoZSBpbXBhY3Qgb2YgZW5hYmxpbmcgRUNOCiAgIGFuZCBsZXR0aW5nIGluZGl2aWR1YWwg VENQIHNlbmRlcnMgYmFjayBvZmYgYnkgYSByZWR1Y2VkIGFtb3VudCBpbgogICByZWFjdGlv biB0byB0aGUgcmVjZWl2ZXIgdGhhdCByZXBvcnRzIEVDTiBDRS1tYXJrcyBmcm9tIEFRTS1l bmFibGVkCiAgIGJvdHRsZW5lY2tzLiAgVGhlIHRlY2huaXF1ZSB3YXMgc2hvd24gdG8gcHJl c2VudCAiLi4uc2lnbmlmaWNhbnQKICAgcGVyZm9ybWFuY2UgZ2FpbnMgaW4gbGlnaHRseS1t dWx0aXBsZXhlZCBzY2VuYXJpb3MsIHdpdGhvdXQgbG9zaW5nCiAgIHRoZSBkZWxheS1yZWR1 Y3Rpb24gYmVuZWZpdHMgb2YgZGVwbG95aW5nIENvRGVsIG9yIFBJRSIuICBUaGUKICAgcGVy Zm9ybWFuY2UgaW1wcm92ZW1lbnQgaXMgYWNoaWV2ZWQgd2hlbiByZWFjdGluZyB0byBFQ04t RWNobyBpbgogICBjb25nZXN0aW9uIGF2b2lkYW5jZSBieSBtdWx0aXBseWluZyBjd25kIGFu ZCBzc3RocmVzaCB3aXRoIGEgdmFsdWUgaW4KICAgdGhlIHJhbmdlIFswLjcuLjAuODVdLgo9 PUxBUz09Ci0gQSBjb21tYSBpbnN0ZWFkIG9mIC4uIGluIHJhbmdlIG5vdGF0aW9uIHNlZW1z IGNsZWFyZXIgaS5lIFswLjcsMC44NV0KLSBWZXJ5IGxvbmcgd2luZGVkLi4uIHdlJ3ZlIGFs cmVhZHkgZGVzY3JpYmVkIHNjaGVtZSBpbiAoMykuIEtleSBtZXNzYWdlIGZvcgogIGRpc2N1 c3Npb24gaW50cm8gaXMgdGhhdCBBQkUgd2l0aCBiZXRhIHJhbmdlIFtYLFldIGFuZCBDQyBh bGdvcyBbTmV3UmVubyxDVUJJQ10KICB3YXMgZXZhbHVhdGVkIGluIHBhcGVyIGFuZCB3YXMg Zm91bmQgdG8gIjxxdW90ZSBmcm9tIHBhcGVyPiIuCj09PT09PT0KCgo0LjEuICBXaHkgVXNl IEVDTiB0byBWYXJ5IHRoZSBEZWdyZWUgb2YgQmFja29mZj8KCiAgIFRoZSBjbGFzc2ljIHJ1 bGUtb2YtdGh1bWIgZGljdGF0ZXMgdGhhdCBhIG5ldHdvcmsgcGF0aCBuZWVkcyB0bwogICBw cm92aWRlIGEgQkRQIG9mIGJvdHRsZW5lY2sgYnVmZmVyaW5nIGlmIGEgVENQIGNvbm5lY3Rp b24gd2lzaGVzIHRvCiAgIG9wdGltaXNlIHBhdGggdXRpbGlzYXRpb24uICBBIHNpbmdsZSBU Q1AgYnVsayB0cmFuc2ZlciBydW5uaW5nCiAgIHRocm91Z2ggc3VjaCBhIGJvdHRsZW5lY2sg d2lsbCBoYXZlIGluY3JlYXNlZCBpdHMgY29uZ2VzdGlvbiB3aW5kb3cKICAgKGN3bmQpIHVw IHRvIDIqQkRQIGJ5IHRoZSB0aW1lIHRoYXQgcGFja2V0IGxvc3Mgb2NjdXJzLiAgV2hlbiBw YWNrZXQKICAgbG9zcyBpcyBkZXRlY3RlZCAocmVnYXJkZWQgYXMgYSBub3RpZmljYXRpb24g b2YgY29uZ2VzdGlvbiksIFN0YW5kYXJkCiAgIFRDUCBoYWx2ZXMgdGhlIGN3bmQgYW5kIHNz dGhyZXNoIFtSRkM1NjgxXSwgd2hpY2ggY2F1c2VzIHRoZSBUQ1AKICAgY29uZ2VzdGlvbiBj b250cm9sIHRvIGdvIGJhY2sgdG8gYWxsb3dpbmcgb25seSBhIEJEUCBvZiBwYWNrZXRzIGlu CiAgIGZsaWdodCAtLSBqdXN0IHN1ZmZpY2llbnQgdG8gbWFpbnRhaW4gMTAwJSB1dGlsaXNh dGlvbiBvZiB0aGUKICAgYm90dGxlbmVjayBvbiB0aGUgbmV0d29yayBwYXRoLgo9PUxBUz09 Ci0gUGVyaGFwcyBzL3N0YW5kYXJkIFRDUCBoYWx2ZXMvUkZDNTY4MSBzdGlwdWxhdGVzIGhh bHZpbmcvCi0gSSBwZXJzb25hbGx5IHRoaW5rICJTdGFuZGFyZCBUQ1AiIGlzIGEgbWlzbm9t ZXIgYW5kIGJlc3QgYXZvaWRlZC4KPT09PT09PQoKICAgQVFNIG1lY2hhbmlzbXMgc3VjaCBh cyBDb0RlbCBbSS1ELkNvRGVsXSBhbmQgUElFIFtSRkM4MDMzXSBzZXQgYQogICBkZWxheSB0 YXJnZXQgaW4gcm91dGVycyBhbmQgdXNlIGNvbmdlc3Rpb24gbm90aWZpY2F0aW9ucyB0byBj b25zdHJhaW4KICAgdGhlIHF1ZXVpbmcgZGVsYXlzIGV4cGVyaWVuY2VkIGJ5IHBhY2tldHMs IHJhdGhlciB0aGFuIGluIHJlc3BvbnNlIHRvCiAgIGltcGVuZGluZyBvciBhY3R1YWwgYm90 dGxlbmVjayBidWZmZXIgZXhoYXVzdGlvbi4gIFdpdGggY3VycmVudAogICBkZWZhdWx0IGRl bGF5IHRhcmdldHMsIENvRGVsIGFuZCBQSUUgYm90aCBlZmZlY3RpdmVseSBlbXVsYXRlIGEK ICAgc2hhbGxvdyBidWZmZXJlZCBib3R0bGVuZWNrIChzZWN0aW9uIElJLCBbQUJFMjAxN10p IHdoaWxlIGFsc28KICAgYWxsb3dpbmcgc2hvcnQgdHJhZmZpYyBidXJzdHMgaW50byB0aGUg cXVldWUuICBUaGlzIHByb3ZpZGVzCj09TEFTPT0KLSBJJ20gbm8gQVFNIGV4cGVydCwgYnV0 IEkgdGhpbmsgd2hhdCB0aGVzZSBBUU0gc2NoZW1lcyBlbXVsYXRlIGlzIGEKICBmdW5jdGlv biBvZiB0aGUgdGFyZ2V0IGRlbGF5IGFzIGEgcHJvcG9ydGlvbiBvZiB0aGUgUlRULi4uIHRo b3VnaCBwZXJoYXBzCiAgdGhlIGRpc3RpbmN0aW9uIGRvZXNuJ3QgcmVhbGx5IG1hdHRlciBm b3IgSW50ZXJuZXQgZmxvd3MuLi4KPT09PT09PQoKCktoYWRlbWksIGV0IGFsLiAgICAgICAg ICBFeHBpcmVzIEFwcmlsIDIzLCAyMDE4ICAgICAgICAgICAgICAgICBbUGFnZSA0XQoMCklu dGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICAgQUJFICAgICAgICAgICAgICAgICAg ICAgIE9jdG9iZXIgMjAxNwoKCiAgIGFjY2VwdGFibGUgcGVyZm9ybWFuY2UgZm9yIFRDUCBj b25uZWN0aW9ucyBvdmVyIGEgcGF0aCB3aXRoIGEgbG93CiAgIEJEUCwgb3IgaW4gaGlnaGx5 IG11bHRpcGxleGVkIHNjZW5hcmlvcyAobWFueSBjb25jdXJyZW50IHRyYW5zcG9ydAo9PUxB Uz09IHMvdHJhbnNwb3J0IGNvbm5lY3Rpb25zL2Zsb3dzLyA9PT09PT09CiAgIGNvbm5lY3Rp b25zKS4gIEhvd2V2ZXIsIGl0IGludGVyYWN0cyBiYWRseSBmb3IgYSBsaWdodGx5LW11bHRp cGxleGVkCiAgIGNhc2UgKGZldyBjb25jdXJyZW50IGNvbm5lY3Rpb25zKSBvdmVyIGEgcGF0 aCB3aXRoIGEgbGFyZ2UgQkRQLgogICBDb252ZW50aW9uYWwgVENQIGJhY2tvZmYgaW4gc3Vj aCBjYXNlcyBsZWFkcyB0byBnYXBzIGluIHBhY2tldAogICB0cmFuc21pc3Npb24gYW5kIHVu ZGVyLXV0aWxpc2F0aW9uIG9mIHRoZSBwYXRoLgoKICAgSW5zdGVhZCBvZiBkaXNjYXJkaW5n IHBhY2tldHMsIGFuIEFRTSBtZWNoYW5pc20gaXMgYWxsb3dlZCB0byBtYXJrCiAgIEVDTi1j YXBhYmxlIHBhY2tldHMgd2l0aCBhbiBFQ04gQ0UtbWFyay4gIFRoZSByZWNlcHRpb24gb2Yg YSBDRS1tYXJrCiAgIG5vdCBvbmx5IGluZGljYXRlcyBjb25nZXN0aW9uIG9uIHRoZSBuZXR3 b3JrIHBhdGgsIGl0IGFsc28gaW5kaWNhdGVzCiAgIHRoYXQgYW4gQVFNIG1lY2hhbmlzbSBl eGlzdHMgYXQgdGhlIGJvdHRsZW5lY2sgYWxvbmcgdGhlIHBhdGgsIGFuZAogICBoZW5jZSB0 aGUgQ0UtbWFyayBsaWtlbHkgY2FtZSBmcm9tIGEgYm90dGxlbmVjayB3aXRoIGEgc2hhbGxv dyBxdWV1ZS4KICAgUmVhY3RpbmcgZGlmZmVyZW50bHkgdG8gYW4gRUNOIENFLW1hcmsgdGhh biB0byBwYWNrZXQgbG9zcyBjYW4gdGhlbgogICB5aWVsZCB0aGUgYmVuZWZpdCBvZiBhIHJl ZHVjZWQgYmFjay1vZmYsIGFzIHdpdGggQ1VCSUMgW0ktRC5DVUJJQ10sCiAgIHdoZW4gcXVl dWVzIGFyZSBzaG9ydCwgeWV0IGl0IGNhbiBhdm9pZCBnZW5lcmF0aW5nIGV4Y2Vzc2l2ZSBk ZWxheQogICB3aGVuIHF1ZXVlcyBhcmUgbG9uZy4gIFVzaW5nIEVDTiBjYW4gYWxzbyBiZSBh ZHZhbnRhZ2VvdXMgZm9yIHNldmVyYWwKICAgb3RoZXIgcmVhc29ucyBbUkZDODA4N10uCj09 TEFTPT0KLSBUaGVyZSBhcmUgYSBsb3Qgb2YgYXNzdW1wdGlvbnMgaW4gdGhpcyBwYXJhZ3Jh cGggOikKLSBDb21wYXJpc29uIHdpdGggQ1VCSUMgaXMgbXVkZHkuIE1vcmUgY2xhcml0eSB3 b3VsZCBiZSBnb29kLgo9PT09PT09CgogICBUaGUgaWRlYSBvZiByZWFjdGluZyBkaWZmZXJl bnRseSB0byBsb3NzIGFuZCBkZXRlY3Rpb24gb2YgYW4gRUNOIENFLQogICBtYXJrIHByZS1k YXRlcyB0aGlzIGRvY3VtZW50LiAgRm9yIGV4YW1wbGUsIHByZXZpb3VzIHJlc2VhcmNoCiAg IHByb3Bvc2VkIHVzaW5nIEVDTiBDRS1tYXJrcyB0byBtb2RpZnkgVENQIGNvbmdlc3Rpb24g Y29udHJvbAogICBiZWhhdmlvdXIgdmlhIGEgbGFyZ2VyIG11bHRpcGxpY2F0aXZlIGRlY3Jl YXNlIGZhY3RvciBpbiBjb25qdW5jdGlvbgogICB3aXRoIGEgc21hbGxlciBhZGRpdGl2ZSBp bmNyZWFzZSBmYWN0b3IgW0lDQzIwMDJdLiAgVGhlIGdvYWwgb2YgdGhpcwogICBmb3JtZXIg d29yayB3YXMgdG8gb3BlcmF0ZSBhY3Jvc3MgQVFNIGJvdHRsZW5lY2tzIHVzaW5nIFJhbmRv bSBFYXJseQogICBEZXRlY3Rpb24gKFJFRCkgdGhhdCB3ZXJlIG5vdCBuZWNlc3NhcmlseSBj b25maWd1cmVkIHRvIGVtdWxhdGUgYQogICBzaGFsbG93IHF1ZXVlIChbUkZDNzU2N10gbm90 ZXMgdGhlIGN1cnJlbnQgc3RhdHVzIG9mIFJFRCBhcyBhbiBBUU0KICAgbWV0aG9kLikKCjQu Mi4gIEZvY3VzIG9uIEVDTiBhcyBEZWZpbmVkIGluIFJGQzMxNjgKCiAgIFNvbWUgdHJhbnNw b3J0IHByb3RvY29sIG1lY2hhbmlzbXMgcmVseSBvbiBFQ04gc2VtYW50aWNzIHRoYXQgZGlm ZmVyCiAgIGZyb20gdGhlIG9yaWdpbmFsIEVDTiBkZWZpbml0aW9uIFtSRkMzMTY4XSAtLSBm b3IgZXhhbXBsZSwgQ29uZ2VzdGlvbgogICBFeHBvc3VyZSAoQ29uRXgpIFtSRkM3NzEzXSBh bmQgRGF0YWNlbnRlciBUQ1AgKERDVENQKQogICBbSS1ELmlldGYtdGNwbS1kY3RjcF0gbmVl ZCBtb3JlIGFjY3VyYXRlIEVDTiBpbmZvcm1hdGlvbiB0aGFuIHRoYXQKICAgb2ZmZXJlZCBi eSB0aGUgb3JpZ2luYWwgZmVlZGJhY2sgbWV0aG9kLiAgT3RoZXIgbWVjaGFuaXNtcyAoZS5n LiwKICAgW0ktRC5pZXRmLXRjcG0tYWNjdXJhdGUtZWNuXSkgYWxsb3cgdGhlIHNlbmRlciB0 byBhZGp1c3QgdGhlIHJhdGUKICAgbW9yZSBmcmVxdWVudGx5IHRoYW4gb25jZSBlYWNoIHBh dGggUlRULiAgVXNlIG9mIHRoZXNlIG1lY2hhbmlzbXMgaXMKICAgb3V0IG9mIHRoZSBzY29w ZSBvZiB0aGUgY3VycmVudCBkb2N1bWVudC4KPT1MQVM9PSAtPiAiLi4uIGlzIG91dCBvZiBz Y29wZSBmb3IgdGhpcyBkb2N1bWVudCIgPT09PT09PQoKNC4zLiAgRGlzY3Vzc2lvbjogQ2hv aWNlIG9mIEFCRSBNdWx0aXBsaWVyCgogICBBQkUgZGVjb3VwbGVzIHRoZSByZWFjdGlvbiBv ZiBhIFRDUCBzZW5kZXIgdG8gbG9zcyBhbmQgRUNOIENFLW1hcmtzCiAgIHdoZW4gaW4gdGhl IGNvbmdlc3Rpb24gYXZvaWRhbmNlIHBoYXNlIGJ5IGRpZmZlcmVudGlhdGluZyB0aGUgc2Nh bGluZwogICBmYWN0b3IgdXNlZCBpbiBFcXVhdGlvbiA0IGluIFNlY3Rpb24gMy4xIG9mIFtS RkM1NjgxXS4gIFRoZQogICBkZXNjcmlwdGlvbiByZXNwZWN0aXZlbHkgdXNlcyBiZXRhX3ts b3NzfSBhbmQgYmV0YV97ZWNufSB0byByZWZlciB0bwogICB0aGUgbXVsdGlwbGljYXRpdmUg ZGVjcmVhc2UgZmFjdG9ycyBhcHBsaWVkIGluIHJlc3BvbnNlIHRvIHBhY2tldAogICBsb3Nz LCBhbmQgaW4gcmVzcG9uc2UgdG8gYSByZWNlaXZlciBpbmRpY2F0aW5nIHRoYXQgYW4gRUNO IENFLW1hcmsKICAgd2FzIHJlY2VpdmVkIG9uIGFuIEVDTi1lbmFibGVkIFRDUCBjb25uZWN0 aW9uLiAgRm9yIG5vbi1FQ04tZW5hYmxlZAo9PUxBUz09Ci0gIi4uLnJlY2VpdmVyIGluZGlj YXRpbmcgdGhhdCBhbiBFQ04gQ0UtbWFyayB3YXMgcmVjZWl2ZWQgb24gYW4gRUNOLWVuYWJs ZWQgVENQIGNvbm5lY3Rpb24uLi4iIC0+CiAgIkVDTi1zaWduYWxsZWQgY29uZ2VzdGlvbiIg KHNpbWlsYXIgY2hhbmdlcyBwb3NzaWJsZSBlbHNld2hlcmUgdG9vKQo9PT09PT09PQoKCkto YWRlbWksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEFwcmlsIDIzLCAyMDE4ICAgICAgICAg ICAgICAgICBbUGFnZSA1XQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICAg QUJFICAgICAgICAgICAgICAgICAgICAgIE9jdG9iZXIgMjAxNwoKCiAgIFRDUCBjb25uZWN0 aW9ucywgbm8gRUNOIENFLW1hcmtzIGFyZSByZWNlaXZlZCBhbmQgb25seSBiZXRhX3tsb3Nz fQogICBhcHBsaWVzLgo9PUxBUz09Ci0gUmVtb3ZlICJubyBFQ04gQ0UtbWFya3MgYXJlIHJl Y2VpdmVkIGFuZCIuLi4gcm9ndWUgbWFya3Mgc2hvdWxkIGFsc28gYmUgaWdub3JlZAo9PT09 PT09CgogICBJbiBvdGhlciB3b3JkcywgaW4gcmVzcG9uc2UgdG8gZGV0ZWN0ZWQgbG9zczoK CiAgICAgIHNzdGhyZXNoXyh0KzEpID0gbWF4IChGbGlnaHRTaXplX3QgKiBiZXRhX3tsb3Nz fSwgMiAqIFNNU1MpCgogICBhbmQgaW4gcmVzcG9uc2UgdG8gYW4gaW5kaWNhdGlvbiBvZiBh IHJlY2VpdmVkIEVDTiBDRS1tYXJrOgoKPT1MQVM9PQotIC0+ICJFQ04tc2lnbmFsbGVkIGNv bmdlc3Rpb24iCj09PT09PT0KCiAgICAgIHNzdGhyZXNoXyh0KzEpID0gbWF4IChGbGlnaHRT aXplX3QgKiBiZXRhX3tlY259LCAyICogU01TUykKCiAgIGFuZAoKICAgICAgY3duZF8odCsx KSA9IHNzdGhyZXNoXyh0KzEpCgogICB3aGVyZSBGbGlnaHRTaXplIGlzIHRoZSBhbW91bnQg b2Ygb3V0c3RhbmRpbmcgZGF0YSBpbiB0aGUgbmV0d29yaywKICAgdXBwZXItYm91bmRlZCBi eSB0aGUgc2VuZGVyJ3MgY3duZCBhbmQgdGhlIHJlY2VpdmVyJ3MgYWR2ZXJ0aXNlZAo9PUxB Uz09IFVwcGVyLWJvdW5kZWQgYnkgdGhlIHNtYWxsZXIgb2YgdGhlLi4uID09PT09PT0KICAg d2luZG93IChyd25kKSBbUkZDNTY4MV0uICBUaGUgaGlnaGVyIHRoZSB2YWx1ZXMgb2YgYmV0 YV97bG9zc30gYW5kCiAgIGJldGFfe2Vjbn0sIHRoZSBsZXNzIGFnZ3Jlc3NpdmUgdGhlIHJl c3BvbnNlIG9mIGFueSBpbmRpdmlkdWFsCiAgIGJhY2tvZmYgZXZlbnQuCj09TEFTPT0KLSBB Z2dyZXNzaXZlIGlzIGEgcG9vciB3b3JkIGNob2ljZS4uLiBjb3VsZCBiZSBjb25zdHJ1ZWQg dG8gYmUgcmVmZXJyaW5nIHRvCiAgdGhlIGVmZmVjdCBhdCB0aGUgYm90dGxlbmVjaywgd2hp Y2ggaXMgbW9yZSAiYWdncmVzc2l2ZSIgd2l0aCBBQkUgdGhhbiB3aXRob3V0Lgo9PT09PT09 CgogICBUaGUgYXBwcm9wcmlhdGUgY2hvaWNlIGZvciBiZXRhX3tsb3NzfSBhbmQgYmV0YV97 ZWNufSB2YWx1ZXMgaXMgYQogICBiYWxhbmNpbmcgYWN0IGJldHdlZW4gcGF0aCB1dGlsaXNh dGlvbiBhbmQgZHJhaW5pbmcgdGhlIGJvdHRsZW5lY2sKICAgcXVldWUuICBNb3JlIGFnZ3Jl c3NpdmUgYmFja29mZiAoc21hbGxlciBiZXRhXyopIHJpc2tzIHVuZGVydXRpbGlzaW5nCiAg IHRoZSBwYXRoLCB3aGlsZSBsZXNzIGFnZ3Jlc3NpdmUgYmFja29mZiAobGFyZ2VyIGJldGFf KikgY2FuIHJlc3VsdCBpbgogICBzbG93ZXIgZHJhaW5pbmcgb2YgdGhlIGJvdHRsZW5lY2sg cXVldWUuCgogICBUaGUgSW50ZXJuZXQgaGFzIGFscmVhZHkgYmVlbiBydW5uaW5nIHdpdGgg YXQgbGVhc3QgdHdvIGRpZmZlcmVudAogICBiZXRhX3tsb3NzfSB2YWx1ZXMgZm9yIHNldmVy YWwgeWVhcnM6IHRoZSBzdGFuZGFyZCB2YWx1ZSBpcyAwLjUKICAgW1JGQzU2ODFdLCBhbmQg dGhlIExpbnV4IGltcGxlbWVudGF0aW9uIG9mIENVQklDIFtJLUQuQ1VCSUNdIGhhcyB1c2Vk CiAgIGEgbXVsdGlwbGllciBvZiAwLjcgc2luY2Uga2VybmVsIHZlcnNpb24gMi42LjI1IHJl bGVhc2VkIGluIDIwMDguCiAgIEFCRSBwcm9wb3NlcyBubyBjaGFuZ2UgdG8gYmV0YV97bG9z c30gdXNlZCBieSBjdXJyZW50IFRDUAogICBpbXBsZW1lbnRhdGlvbnMuCgogICBiZXRhX3tl Y259IGRlcGVuZHMgb24gaG93IHRoZSByZXNwb25zZSBvZiBhIFRDUCBjb25uZWN0aW9uIHRv IHNoYWxsb3cKICAgQVFNIG1hcmtpbmcgdGhyZXNob2xkcyBpcyBvcHRpbWlzZWQuIGJldGFf e2xvc3N9IHJlZmxlY3RzIHRoZQogICBwcmVmZXJyZWQgcmVzcG9uc2Ugb2YgZWFjaCBjb25n ZXN0aW9uIGNvbnRyb2wgYWxnb3JpdGhtIHdoZW4gZmFjZWQKICAgd2l0aCBleGhhdXN0aW9u IG9mIGJ1ZmZlcnMgKG9mIHVua25vd24gZGVwdGgpIHNpZ25hbGxlZCBieSBwYWNrZXQKICAg bG9zcy4gIENvbnNlcXVlbnRseSwgZm9yIGFueSBnaXZlbiBUQ1AgY29uZ2VzdGlvbiBjb250 cm9sIGFsZ29yaXRobQogICB0aGUgY2hvaWNlIG9mIGJldGFfe2Vjbn0gaXMgbGlrZWx5IHRv IGJlIGFsZ29yaXRobS1zcGVjaWZpYywgcmF0aGVyCiAgIHRoYW4gYSBjb25zdGFudCBtdWx0 aXBsZSBvZiB0aGUgYWxnb3JpdGhtJ3MgZXhpc3RpbmcgYmV0YV97bG9zc30uCgogICBBIHJh bmdlIG9mIHRlc3RzIChzZWN0aW9uIElWLCBbQUJFMjAxN10pIHdpdGggTmV3UmVubyBhbmQg Q1VCSUMgb3ZlcgogICBDb0RlbCBhbmQgUElFIGluIGxpZ2h0bHktbXVsdGlwbGV4ZWQgc2Nl bmFyaW9zIGhhdmUgZXhwbG9yZWQgdGhpcwogICBjaG9pY2Ugb2YgcGFyYW1ldGVyLiAgVGhl IHJlc3VsdHMgb2YgdGhlc2UgdGVzdHMgaW5kaWNhdGUgdGhhdCBDVUJJQwogICBjb25uZWN0 aW9ucyBiZW5lZml0IGZyb20gYmV0YV97ZWNufSBvZiAwLjg1IChjZi4gIGJldGFfe2xvc3N9 ID0gMC43KSwKICAgYW5kIE5ld1Jlbm8gY29ubmVjdGlvbnMgc2VlIGltcHJvdmVtZW50cyB3 aXRoIGJldGFfe2Vjbn0gaW4gdGhlIHJhbmdlCiAgIDAuNyB0byAwLjg1IChjZi4gYmV0YV97 bG9zc30gPSAwLjUpLgoKCgpLaGFkZW1pLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBBcHJp bCAyMywgMjAxOCAgICAgICAgICAgICAgICAgW1BhZ2UgNl0KDApJbnRlcm5ldC1EcmFmdCAg ICAgICAgICAgICAgICAgICAgIEFCRSAgICAgICAgICAgICAgICAgICAgICBPY3RvYmVyIDIw MTcKCgo1LiAgU3RhdHVzIG9mIHRoZSBVcGRhdGUKCiAgIFRoaXMgdXBkYXRlIGlzIGEgc2Vu ZGVyLXNpZGUgb25seSBjaGFuZ2UuICBMaWtlIG90aGVyIGNoYW5nZXMgdG8KICAgY29uZ2Vz dGlvbi1jb250cm9sIGFsZ29yaXRobXMsIGl0IGRvZXMgbm90IHJlcXVpcmUgYW55IGNoYW5n ZSB0byB0aGUKICAgVENQIHJlY2VpdmVyIG9yIHRvIG5ldHdvcmsgZGV2aWNlcy4gIEl0IGRv ZXMgbm90IHJlcXVpcmUgYW55IEFCRS0KICAgc3BlY2lmaWMgY2hhbmdlcyBpbiByb3V0ZXJz IG9yIHRoZSB1c2Ugb2YgQWNjdXJhdGUgRUNOIGZlZWRiYWNrCiAgIFtJLUQuaWV0Zi10Y3Bt LWFjY3VyYXRlLWVjbl0gYnkgYSByZWNlaXZlci4KCiAgIFRoZSBjdXJyZW50bHkgcHVibGlz aGVkIEVDTiBzcGVjaWZpY2F0aW9uIHJlcXVpcmVzIHRoYXQgdGhlCiAgIGNvbmdlc3Rpb24g Y29udHJvbCByZXNwb25zZSB0byBhIENFLW1hcmtlZCBwYWNrZXQgaXMgdGhlIHNhbWUgYXMg dGhlCiAgIHJlc3BvbnNlIHRvIGEgZHJvcHBlZCBwYWNrZXQgW1JGQzMxNjhdLiAgVGhlIHNw ZWNpZmljYXRpb24gaXMKICAgY3VycmVudGx5IGJlaW5nIHVwZGF0ZWQgdG8gYWxsb3cgZm9y IHNwZWNpZmljYXRpb25zIHRoYXQgZG8gbm90CiAgIGZvbGxvdyB0aGlzIHJ1bGUgW0ktRC5F Q04tZXhwXS4gIFRoZSBwcmVzZW50IHNwZWNpZmljYXRpb24gZGVmaW5lcwogICBzdWNoIGFu IGV4cGVyaW1lbnQgYW5kIGhhcyB0aHVzIGJlZW4gYXNzaWduZWQgYW4gRXhwZXJpbWVudGFs IHN0YXR1cwogICBiZWZvcmUgYmVpbmcgcHJvcG9zZWQgYXMgYSBTdGFuZGFyZHMtVHJhY2sg dXBkYXRlLgoKICAgVGhlIHB1cnBvc2Ugb2YgdGhlIEludGVybmV0IGV4cGVyaW1lbnQgaXMg dG8gY29sbGVjdCBleHBlcmllbmNlIHdpdGgKICAgZGVwbG95bWVudCBvZiBBQkUsIGFuZCBj b25maXJtIHRoZSBzYWZldHkgaW4gZGVwbG95ZWQgbmV0d29ya3MgdXNpbmcKICAgdGhpcyB1 cGRhdGUgdG8gVENQIGNvbmdlc3Rpb24gY29udHJvbC4KCiAgIFdoZW4gdXNlZCB3aXRoIGJv dHRsZW5lY2tzIHRoYXQgZG8gbm90IHN1cHBvcnQgRUNOLW1hcmtpbmcgdGhlCiAgIHNwZWNp ZmljYXRpb24gZG9lcyBub3QgbW9kaWZ5IHRoZSB0cmFuc3BvcnQgcHJvdG9jb2wuCgogICBU byBldmFsdWF0ZSB0aGUgYmVuZWZpdCwgdGhpcyBleHBlcmltZW50IHRoZXJlZm9yZSByZXF1 aXJlcyBzdXBwb3J0CiAgIGluIEFRTSByb3V0ZXJzIChleGNlcHQgdG8gZW5hYmxlIGFuIEVD Ti1tYXJraW5nIG1lY2hhbmlzbSBbUkZDMzE2OF0KICAgW1JGQzc1NjddKSBmb3IgRUNOLW1h cmtpbmcgb2YgcGFja2V0cyBjYXJyeWluZyB0aGUgRUNOIENhcGFibGUKICAgVHJhbnNwb3J0 LCBFQ1QoMCksIGNvZGVwb2ludCBbUkZDMzE2OF0uCgogICBJZiB0aGUgbWV0aG9kIGlzIG9u bHkgZGVwbG95ZWQgYnkgc29tZSBzZW5kZXJzLCBhbmQgbm90IGJ5IG90aGVycywKICAgdGhl IHNlbmRlcnMgdGhhdCB1c2UgdGhpcyBtZXRob2QgY2FuIGdhaW4gc29tZSBhZHZhbnRhZ2Us IHBvc3NpYmx5IGF0CiAgIHRoZSBleHBlbnNlIG9mIG90aGVyIGZsb3dzIHRoYXQgZG8gbm90 IHVzZSB0aGlzIHVwZGF0ZWQgbWV0aG9kLgogICBCZWNhdXNlIHRoaXMgYWR2YW50YWdlIGFw cGxpZXMgb25seSB0byBFQ04tbWFya2VkIHBhY2tldHMgYW5kIG5vdCB0bwogICBsb3NzIGlu ZGljYXRpb25zLCB0aGUgbmV3IG1ldGhvZCBjYW5ub3QgbGVhZCB0byBjb25nZXN0aW9uIGNv bGxhcHNlLgoKICAgVGhlIHJlc3VsdCBvZiB0aGlzIEludGVybmV0IGV4cGVyaW1lbnQgd2ls bCBiZSByZXBvcnRlZCBieQogICBwcmVzZW50YXRpb24gdG8gdGhlIFRDUE0gV0cgKG9yIElF U0cpIG9yIGFuIGltcGxlbWVudGF0aW9uIHJlcG9ydCBhdAogICB0aGUgZW5kIG9mIHRoZSBl eHBlcmltZW50LgoKNi4gIEFja25vd2xlZGdlbWVudHMKCiAgIEF1dGhvcnMgTi4gIEtoYWRl bWksIE0uICBXZWx6bCBhbmQgRy4gIEZhaXJodXJzdCB3ZXJlIHBhcnQtZnVuZGVkIGJ5CiAg IHRoZSBFdXJvcGVhbiBDb21tdW5pdHkgdW5kZXIgaXRzIFNldmVudGggRnJhbWV3b3JrIFBy b2dyYW1tZSB0aHJvdWdoCiAgIHRoZSBSZWR1Y2luZyBJbnRlcm5ldCBUcmFuc3BvcnQgTGF0 ZW5jeSAoUklURSkgcHJvamVjdCAoSUNULTMxNzcwMCkuCiAgIFRoZSB2aWV3cyBleHByZXNz ZWQgYXJlIHNvbGVseSB0aG9zZSBvZiB0aGUgYXV0aG9ycy4KCiAgIFRoZSBhdXRob3JzIHdv dWxkIGxpa2UgdG8gdGhhbmsgU3R1YXJ0IENoZXNoaXJlIGZvciBtYW55IHN1Z2dlc3Rpb25z CiAgIHdoZW4gcmV2aXNpbmcgdGhlIGRyYWZ0LCBhbmQgdGhlIGZvbGxvd2luZyBwZW9wbGUg Zm9yIHRoZWlyCiAgIGNvbnRyaWJ1dGlvbnMgdG8gW0FCRTIwMTddOiBDaGFtaWwgS3VsYXR1 bmdhLCBEYXZpZCBSb3MsIFN0ZWluCgoKCktoYWRlbWksIGV0IGFsLiAgICAgICAgICBFeHBp cmVzIEFwcmlsIDIzLCAyMDE4ICAgICAgICAgICAgICAgICBbUGFnZSA3XQoMCkludGVybmV0 LURyYWZ0ICAgICAgICAgICAgICAgICAgICAgQUJFICAgICAgICAgICAgICAgICAgICAgIE9j dG9iZXIgMjAxNwoKCiAgIEdqZXNzaW5nLCBTZWJhc3RpYW4gWmFuZGVyLiAgVGhhbmtzIGFs c28gdG8gKGluIGFscGhhYmV0aWNhbCBvcmRlcikKICAgQm9iIEJyaXNjb2UsIE1hcmtrdSBL b2pvLCBKb2huIExlc2xpZSwgRGF2ZSBUYWh0IGFuZCB0aGUgVENQTSB3b3JraW5nCiAgIGdy b3VwIGZvciBwcm92aWRpbmcgdmFsdWFibGUgZmVlZGJhY2sgb24gdGhpcyBkb2N1bWVudC4K CiAgIFRoZSBhdXRob3JzIHdvdWxkIGZpbmFsbHkgbGlrZSB0byB0aGFuayBldmVyeW9uZSB3 aG8gcHJvdmlkZWQKICAgZmVlZGJhY2sgb24gdGhlIGNvbmdlc3Rpb24gY29udHJvbCBiZWhh dmlvdXIgc3BlY2lmaWVkIGluIHRoaXMgdXBkYXRlCiAgIHJlY2VpdmVkIGZyb20gdGhlIElS VEYgSW50ZXJuZXQgQ29uZ2VzdGlvbiBDb250cm9sIFJlc2VhcmNoIEdyb3VwCiAgIChJQ0NS RykuCgo3LiAgSUFOQSBDb25zaWRlcmF0aW9ucwoKICAgWFggUkZDIEVEIC0gUExFQVNFIFJF TU9WRSBUSElTIFNFQ1RJT04gWFhYCgogICBUaGlzIGRvY3VtZW50IGluY2x1ZGVzIG5vIHJl cXVlc3QgdG8gSUFOQS4KCjguICBJbXBsZW1lbnRhdGlvbiBTdGF0dXMKCiAgIEFCRSBpcyBp bXBsZW1lbnRlZCBhcyBhIHBhdGNoIGZvciBMaW51eCBhbmQgRnJlZUJTRC4gIEl0IGlzIG1l YW50IGZvcgogICByZXNlYXJjaCBhbmQgYXZhaWxhYmxlIGZvciBkb3dubG9hZCBmcm9tCiAg IGh0dHA6Ly9oZWltLmlmaS51aW8ubm8vbmFlZW1rL3Jlc2VhcmNoL0FCRS8gVGhpcyBjb2Rl IHdhcyB1c2VkIHRvCiAgIHByb2R1Y2UgdGhlIHRlc3QgcmVzdWx0cyB0aGF0IGFyZSByZXBv cnRlZCBpbiBbQUJFMjAxN10uICBBbiBldm9sdmVkCiAgIHZlcnNpb24gb2YgdGhlIHBhdGNo IGZvciBGcmVlQlNEIGlzIGN1cnJlbnRseSB1bmRlciByZXZpZXcgZm9yCiAgIHBvdGVudGlh bCBpbmNsdXNpb24gaW4gdGhlIG1haW5saW5lIGtlcm5lbCBbQUJFLUZyZWVCU0RdLgoKOS4g IFNlY3VyaXR5IENvbnNpZGVyYXRpb25zCgogICBUaGUgZGVzY3JpYmVkIG1ldGhvZCBpcyBh IHNlbmRlci1zaWRlIG9ubHkgdHJhbnNwb3J0IGNoYW5nZSwgYW5kIGRvZXMKICAgbm90IGNo YW5nZSB0aGUgcHJvdG9jb2wgbWVzc2FnZXMgZXhjaGFuZ2VkLiAgVGhlIHNlY3VyaXR5CiAg IGNvbnNpZGVyYXRpb25zIGZvciBFQ04gW1JGQzMxNjhdIHRoZXJlZm9yZSBzdGlsbCBhcHBs eS4KCiAgIFRoaXMgaXMgYSBjaGFuZ2UgdG8gVENQIGNvbmdlc3Rpb24gY29udHJvbCB3aXRo IEVDTiB0aGF0IHdpbGwKICAgdHlwaWNhbGx5IGxlYWQgdG8gYSBjaGFuZ2UgaW4gdGhlIGNh cGFjaXR5IGFjaGlldmVkIHdoZW4gZmxvd3Mgc2hhcmUKICAgYSBuZXR3b3JrIGJvdHRsZW5l Y2suICBUaGlzIGNvdWxkIHJlc3VsdCBpbiBzb21lIGZsb3dzIHJlY2VpdmluZyBtb3JlCiAg IHRoYW4gdGhlaXIgZmFpciBzaGFyZSBvZiBjYXBhY2l0eS4gIFNpbWlsYXIgdW5mYWlybmVz cyBpbiB0aGUgd2F5CiAgIHRoYXQgY2FwYWNpdHkgaXMgc2hhcmVkIGlzIGFsc28gZXhoaWJp dGVkIGJ5IG90aGVyIGNvbmdlc3Rpb24gY29udHJvbAogICBtZWNoYW5pc21zIHRoYXQgaGF2 ZSBiZWVuIGluIHVzZSBpbiB0aGUgSW50ZXJuZXQgZm9yIG1hbnkgeWVhcnMKICAgKGUuZy4s IENVQklDIFtJLUQuQ1VCSUNdKS4gIFVuZmFpcm5lc3MgbWF5IGFsc28gYmUgYSByZXN1bHQg b2Ygb3RoZXIKICAgZmFjdG9ycywgaW5jbHVkaW5nIHRoZSByb3VuZCB0cmlwIHRpbWUgZXhw ZXJpZW5jZWQgYnkgYSBmbG93LiAgQUJFCiAgIGFwcGxpZXMgb25seSB3aGVuIEVDTi1tYXJr ZWQgcGFja2V0cyBhcmUgcmVjZWl2ZWQsIG5vdCB3aGVuIHBhY2tldHMKICAgYXJlIGxvc3Qs IGhlbmNlIHVzZSBvZiBBQkUgY2Fubm90IGxlYWQgdG8gY29uZ2VzdGlvbiBjb2xsYXBzZS4K CjEwLiAgUmV2aXNpb24gSW5mb3JtYXRpb24KCiAgIFhYIFJGQyBFRCAtIFBMRUFTRSBSRU1P VkUgVEhJUyBTRUNUSU9OIFhYWAoKICAgLTAyLiAgQ29ycmVjdGVkIHRoZSBlcXVhdGlvbnMg aW4gU2VjdGlvbiA0LjMuICBVcGRhdGVkIHRoZQogICBhZmZpbGlhdGlvbnMuICBMb3dlciBi b3VuZCBmb3IgY3duZCBpcyBkZWZpbmVkLiAgQSByZWNvbW1lbmRhdGlvbiBmb3IKICAgd2lu ZG93LWJhc2VkIHRyYW5zcG9ydCBwcm90b2NvbHMgaXMgY2hhbmdlZCB0byBjb3ZlciBhbGwg dHJhbnNwb3J0CgoKCktoYWRlbWksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEFwcmlsIDIz LCAyMDE4ICAgICAgICAgICAgICAgICBbUGFnZSA4XQoMCkludGVybmV0LURyYWZ0ICAgICAg ICAgICAgICAgICAgICAgQUJFICAgICAgICAgICAgICAgICAgICAgIE9jdG9iZXIgMjAxNwoK CiAgIHByb3RvY29scyB0aGF0IGltcGxlbWVudHMgYSBjb25nZXN0aW9uIGNvbnRyb2wgcmVk dWN0aW9uIHRvIGFuIEVDTgogICBjb25nZXN0aW9uIHNpZ25hbC4gIEFkZGVkIHRleHQgYWJv dXQgQUJFJ3MgRnJlZUJTRCBtYWlubGluZSBrZXJuZWwKICAgc3RhdHVzIGluY2x1ZGluZyBh IHJlZmVyZW5jZSB0byB0aGUgRnJlZUJTRCBjb2RlIHJldmlldyBwYWdlLgogICBSZWZlcmVu Y2VzIGFyZSB1cGRhdGVkLgoKICAgLTAxLiAgVGV4dCBpbXByb3ZlZCwgbWFpbmx5IGluY29y cG9yYXRpbmcgY29tbWVudHMgZnJvbSBTdHVhcnQKICAgQ2hlc2hpcmUuICBUaGUgcmVmZXJl bmNlIHRvIGEgdGVjaG5pY2FsIHJlcG9ydCBoYXMgYmVlbiB1cGRhdGVkIHRvIGEKICAgcHVi bGlzaGVkIHZlcnNpb24gb2YgdGhlIHRlc3RzIFtBQkUyMDE3XS4gIFVzZWQgIkFRTSBNZWNo YW5pc20iCiAgIHRocm91Z2hvdXQgaW4gcGxhY2Ugb2Ygb3RoZXIgYWx0ZXJuYXRpdmVzLCBh bmQgbW9yZSBjb25zaXN0ZW50IHVzZSBvZgogICB0ZWNobmljYWwgbGFuZ3VhZ2UgYW5kIGNs YXJpZmljYXRpb24gb24gdGhlIGludGVuZGVkIHB1cnBvc2Ugb2YgdGhlCiAgIGV4cGVyaW1l bnRzIHJlcXVpcmVkIGJ5IEVYUCBzdGF0dXMuICBUaGVyZSB3YXMgbm8gY2hhbmdlIHRvIHRo ZQogICB0ZWNobmljYWwgY29udGVudC4KCiAgIC0wMC4gZHJhZnQtaWV0Zi10Y3BtLWFsdGVy bmF0aXZlYmFja29mZi1lY24tMDAgcmVwbGFjZXMgZHJhZnQtCiAgIGtoYWRlbWktdGNwbS1h bHRlcm5hdGl2ZWJhY2tvZmYtZWNuLTAxLiAgVGV4dCBkZXNjcmliaW5nIHRoZSBuYXR1cmUK ICAgb2YgdGhlIGV4cGVyaW1lbnQgd2FzIGFkZGVkLgoKICAgSW5kaXZpZHVhbCBkcmFmdCAt MDEuICBUaGlzIEktRCBub3cgcmVmZXJzIHRvIGRyYWZ0LWJsYWNrLXRzdndnLWVjbi0KICAg ZXhwZXJpbWVudGF0aW9uLTAyLCB3aGljaCByZXBsYWNlcyBkcmFmdC1raGFkZW1pLXRzdndn LWVjbi0KICAgcmVzcG9uc2UtMDAgdG8gbWFrZSBhIGJyb2FkZXIgdXBkYXRlIHRvIFJGQzMx NjggZm9yIHRoZSBzYWtlIG9mCiAgIGFsbG93aW5nIGV4cGVyaW1lbnRzLiAgQXMgYSByZXN1 bHQsIHNvbWUgb2YgdGhlIG1vdGl2YXRpbmcgYW5kCiAgIGRpc2N1c3NpbmcgdGV4dCB0aGF0 IHdhcyBtb3ZlZCBmcm9tIGRyYWZ0LWtoYWRlbWktYWx0ZXJuYXRpdmViYWNrb2ZmLQogICBl Y24tMDMgdG8gZHJhZnQta2hhZGVtaS10c3Z3Zy1lY24tcmVzcG9uc2UtMDAgaGFzIG5vdyBi ZWVuIHJlLQogICBpbnNlcnRlZCBoZXJlLgoKICAgSW5kaXZpZHVhbCBkcmFmdCAtMDAuIGRy YWZ0LWtoYWRlbWktdHN2d2ctZWNuLXJlc3BvbnNlLTAwIGFuZCBkcmFmdC0KICAga2hhZGVt aS10Y3BtLWFsdGVybmF0aXZlYmFja29mZi1lY24tMDAgcmVwbGFjZSBkcmFmdC1raGFkZW1p LQogICBhbHRlcm5hdGl2ZWJhY2tvZmYtZWNuLTAzLCBmb2xsb3dpbmcgZGlzY3Vzc2lvbiBp biB0aGUgVFNWV0cgYW5kIFRDUE0KICAgd29ya2luZyBncm91cHMuCgoxMS4gIFJlZmVyZW5j ZXMKCjExLjEuICBOb3JtYXRpdmUgUmVmZXJlbmNlcwoKICAgW0ktRC5FQ04tZXhwXQogICAg ICAgICAgICAgIEJsYWNrLCBELiwgIkV4cGxpY2l0IENvbmdlc3Rpb24gTm90aWZpY2F0aW9u IChFQ04pCiAgICAgICAgICAgICAgRXhwZXJpbWVudGF0aW9uIiwgSW50ZXJuZXQtZHJhZnQs IElFVEYgd29yay1pbi1wcm9ncmVzcwogICAgICAgICAgICAgIGRyYWZ0LWlldGYtdHN2d2ct ZWNuLWV4cGVyaW1lbnRhdGlvbi0wNiwgU2VwdGVtYmVyIDIwMTcuCgogICBbUkZDMjExOV0g IEJyYWRuZXIsIFMuLCAiS2V5IHdvcmRzIGZvciB1c2UgaW4gUkZDcyB0byBJbmRpY2F0ZQog ICAgICAgICAgICAgIFJlcXVpcmVtZW50IExldmVscyIsIEJDUCAxNCwgUkZDIDIxMTksCiAg ICAgICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzIxMTksIE1hcmNoIDE5OTcsCiAgICAgICAg ICAgICAgPGh0dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjMjExOT4uCgogICBb UkZDMzE2OF0gIFJhbWFrcmlzaG5hbiwgSy4sIEZsb3lkLCBTLiwgYW5kIEQuIEJsYWNrLCAi VGhlIEFkZGl0aW9uCiAgICAgICAgICAgICAgb2YgRXhwbGljaXQgQ29uZ2VzdGlvbiBOb3Rp ZmljYXRpb24gKEVDTikgdG8gSVAiLAogICAgICAgICAgICAgIFJGQyAzMTY4LCBET0kgMTAu MTc0ODcvUkZDMzE2OCwgU2VwdGVtYmVyIDIwMDEsCiAgICAgICAgICAgICAgPGh0dHBzOi8v d3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjMzE2OD4uCgoKCktoYWRlbWksIGV0IGFsLiAg ICAgICAgICBFeHBpcmVzIEFwcmlsIDIzLCAyMDE4ICAgICAgICAgICAgICAgICBbUGFnZSA5 XQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICAgQUJFICAgICAgICAgICAg ICAgICAgICAgIE9jdG9iZXIgMjAxNwoKCiAgIFtSRkM1NjgxXSAgQWxsbWFuLCBNLiwgUGF4 c29uLCBWLiwgYW5kIEUuIEJsYW50b24sICJUQ1AgQ29uZ2VzdGlvbgogICAgICAgICAgICAg IENvbnRyb2wiLCBSRkMgNTY4MSwgRE9JIDEwLjE3NDg3L1JGQzU2ODEsIFNlcHRlbWJlciAy MDA5LAogICAgICAgICAgICAgIDxodHRwczovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3Jm YzU2ODE+LgoKICAgW1JGQzc1NjddICBCYWtlciwgRi4sIEVkLiBhbmQgRy4gRmFpcmh1cnN0 LCBFZC4sICJJRVRGCiAgICAgICAgICAgICAgUmVjb21tZW5kYXRpb25zIFJlZ2FyZGluZyBB Y3RpdmUgUXVldWUgTWFuYWdlbWVudCIsCiAgICAgICAgICAgICAgQkNQIDE5NywgUkZDIDc1 NjcsIERPSSAxMC4xNzQ4Ny9SRkM3NTY3LCBKdWx5IDIwMTUsCiAgICAgICAgICAgICAgPGh0 dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNzU2Nz4uCgoxMS4yLiAgSW5mb3Jt YXRpdmUgUmVmZXJlbmNlcwoKICAgW0FCRS1GcmVlQlNEXQogICAgICAgICAgICAgICJBQkUg cGF0Y2ggcmV2aWV3IGluIEZyZWVCU0QiLAogICAgICAgICAgICAgIDxodHRwczovL3Jldmll d3MuZnJlZWJzZC5vcmcvRDExNjE2Pi4KCiAgIFtBQkUyMDE3XSAgS2hhZGVtaSwgTi4sIEFy bWl0YWdlLCBHLiwgV2VsemwsIE0uLCBGYWlyaHVyc3QsIEcuLAogICAgICAgICAgICAgIFph bmRlciwgUy4sIGFuZCBELiBSb3MsICJBbHRlcm5hdGl2ZSBCYWNrb2ZmOiBBY2hpZXZpbmcK ICAgICAgICAgICAgICBMb3cgTGF0ZW5jeSBhbmQgSGlnaCBUaHJvdWdocHV0IHdpdGggRUNO IGFuZCBBUU0iLCBJRklQCiAgICAgICAgICAgICAgTkVUV09SS0lORyAyMDE3LCBTdG9ja2hv bG0sIFN3ZWRlbiwgSnVuZSAyMDE3LgoKICAgW0JVRkZFUkJMT0FUXQogICAgICAgICAgICAg ICJCdWZmZXJibG9hdCBwcm9qZWN0IiwKICAgICAgICAgICAgICA8aHR0cHM6Ly93d3cuYnVm ZmVyYmxvYXQubmV0L3Byb2plY3RzL2Jsb2F0L3dpa2kvCiAgICAgICAgICAgICAgSW50cm9k dWN0aW9uLz4uCgogICBbQ09ERUwyMDEyXQogICAgICAgICAgICAgIE5pY2hvbHMsIEsuIGFu ZCBWLiBKYWNvYnNvbiwgIkNvbnRyb2xsaW5nIFF1ZXVlIERlbGF5IiwKICAgICAgICAgICAg ICBKdWx5IDIwMTIsIDxodHRwOi8vcXVldWUuYWNtLm9yZy9kZXRhaWwuY2ZtP2lkPTIyMDkz MzY+LgoKICAgW0ktRC5Db0RlbF0KICAgICAgICAgICAgICBOaWNob2xzLCBLLiwgSmFjb2Jz b24sIFYuLCBNY0dyZWdvciwgVi4sIGFuZCBKLiBJeWVuZ2FyLAogICAgICAgICAgICAgICJD b250cm9sbGVkIERlbGF5IEFjdGl2ZSBRdWV1ZSBNYW5hZ2VtZW50IiwgSW50ZXJuZXQtCiAg ICAgICAgICAgICAgZHJhZnQsIElFVEYgd29yay1pbi1wcm9ncmVzcyBkcmFmdC1pZXRmLWFx bS1jb2RlbC0wOSwKICAgICAgICAgICAgICBTZXB0ZW1iZXIgMjAxNy4KCiAgIFtJLUQuQ1VC SUNdCiAgICAgICAgICAgICAgUmhlZSwgSS4sIFh1LCBMLiwgSGEsIFMuLCBaaW1tZXJtYW5u LCBBLiwgRWdnZXJ0LCBMLiwgYW5kCiAgICAgICAgICAgICAgUi4gU2NoZWZmZW5lZ2dlciwg IkNVQklDIGZvciBGYXN0IExvbmctRGlzdGFuY2UgTmV0d29ya3MiLAogICAgICAgICAgICAg IEludGVybmV0LWRyYWZ0LCBJRVRGIHdvcmstaW4tcHJvZ3Jlc3MgZHJhZnQtaWV0Zi10Y3Bt LQogICAgICAgICAgICAgIGN1YmljLTA2LCBTZXB0ZW1iZXIgMjAxNy4KCiAgIFtJLUQuaWV0 Zi10Y3BtLWFjY3VyYXRlLWVjbl0KICAgICAgICAgICAgICBCcmlzY29lLCBCLiwgS3VlaGxl d2luZCwgTS4sIGFuZCBSLiBTY2hlZmZlbmVnZ2VyLCAiTW9yZQogICAgICAgICAgICAgIEFj Y3VyYXRlIEVDTiBGZWVkYmFjayBpbiBUQ1AiLCBkcmFmdC1pZXRmLXRjcG0tYWNjdXJhdGUt CiAgICAgICAgICAgICAgZWNuLTAzICh3b3JrIGluIHByb2dyZXNzKSwgTWF5IDIwMTcuCgoK CgoKCktoYWRlbWksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEFwcmlsIDIzLCAyMDE4ICAg ICAgICAgICAgICAgIFtQYWdlIDEwXQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAg ICAgICAgQUJFICAgICAgICAgICAgICAgICAgICAgIE9jdG9iZXIgMjAxNwoKCiAgIFtJLUQu aWV0Zi10Y3BtLWRjdGNwXQogICAgICAgICAgICAgIEJlbnNsZXksIFMuLCBUaGFsZXIsIEQu LCBCYWxhc3VicmFtYW5pYW4sIFAuLCBFZ2dlcnQsIEwuLAogICAgICAgICAgICAgIGFuZCBH LiBKdWRkLCAiRGF0YWNlbnRlciBUQ1AgKERDVENQKTogVENQIENvbmdlc3Rpb24KICAgICAg ICAgICAgICBDb250cm9sIGZvciBEYXRhY2VudGVycyIsIGRyYWZ0LWlldGYtdGNwbS1kY3Rj cC0xMCAod29yawogICAgICAgICAgICAgIGluIHByb2dyZXNzKSwgQXVndXN0IDIwMTcuCgog ICBbSUNDMjAwMl0gIEt3b24sIE0uIGFuZCBTLiBGYWhteSwgIlRDUCBJbmNyZWFzZS9EZWNy ZWFzZSBCZWhhdmlvcgogICAgICAgICAgICAgIHdpdGggRXhwbGljaXQgQ29uZ2VzdGlvbiBO b3RpZmljYXRpb24gKEVDTikiLCBJRUVFCiAgICAgICAgICAgICAgSUNDIDIwMDIsIE5ldyBZ b3JrLCBOZXcgWW9yaywgVVNBLCBNYXkgMjAwMiwKICAgICAgICAgICAgICA8aHR0cDovL2R4 LmRvaS5vcmcvMTAuMTEwOS9JQ0MuMjAwMi45OTcyNjI+LgoKICAgW1JGQzc3MTNdICBNYXRo aXMsIE0uIGFuZCBCLiBCcmlzY29lLCAiQ29uZ2VzdGlvbiBFeHBvc3VyZSAoQ29uRXgpCiAg ICAgICAgICAgICAgQ29uY2VwdHMsIEFic3RyYWN0IE1lY2hhbmlzbSwgYW5kIFJlcXVpcmVt ZW50cyIsIFJGQyA3NzEzLAogICAgICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkM3NzEzLCBE ZWNlbWJlciAyMDE1LAogICAgICAgICAgICAgIDxodHRwczovL3d3dy5yZmMtZWRpdG9yLm9y Zy9pbmZvL3JmYzc3MTM+LgoKICAgW1JGQzgwMzNdICBQYW4sIFIuLCBOYXRhcmFqYW4sIFAu LCBCYWtlciwgRi4sIGFuZCBHLiBXaGl0ZSwKICAgICAgICAgICAgICAiUHJvcG9ydGlvbmFs IEludGVncmFsIENvbnRyb2xsZXIgRW5oYW5jZWQgKFBJRSk6IEEKICAgICAgICAgICAgICBM aWdodHdlaWdodCBDb250cm9sIFNjaGVtZSB0byBBZGRyZXNzIHRoZSBCdWZmZXJibG9hdAog ICAgICAgICAgICAgIFByb2JsZW0iLCBSRkMgODAzMywgRE9JIDEwLjE3NDg3L1JGQzgwMzMs IEZlYnJ1YXJ5IDIwMTcsCiAgICAgICAgICAgICAgPGh0dHBzOi8vd3d3LnJmYy1lZGl0b3Iu b3JnL2luZm8vcmZjODAzMz4uCgogICBbUkZDODA4N10gIEZhaXJodXJzdCwgRy4gYW5kIE0u IFdlbHpsLCAiVGhlIEJlbmVmaXRzIG9mIFVzaW5nCiAgICAgICAgICAgICAgRXhwbGljaXQg Q29uZ2VzdGlvbiBOb3RpZmljYXRpb24gKEVDTikiLCBSRkMgODA4NywKICAgICAgICAgICAg ICBET0kgMTAuMTc0ODcvUkZDODA4NywgTWFyY2ggMjAxNywKICAgICAgICAgICAgICA8aHR0 cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM4MDg3Pi4KCkF1dGhvcnMnIEFkZHJl c3NlcwoKICAgTmFlZW0gS2hhZGVtaQogICBVbml2ZXJzaXR5IG9mIE9zbG8KICAgUE8gQm94 IDEwODAgQmxpbmRlcm4KICAgT3NsbyAgTi0wMzE2CiAgIE5vcndheQoKICAgRW1haWw6IG5h ZWVta0BpZmkudWlvLm5vCgoKICAgTWljaGFlbCBXZWx6bAogICBVbml2ZXJzaXR5IG9mIE9z bG8KICAgUE8gQm94IDEwODAgQmxpbmRlcm4KICAgT3NsbyAgTi0wMzE2CiAgIE5vcndheQoK ICAgRW1haWw6IG1pY2hhd2VAaWZpLnVpby5ubwoKCgoKCgpLaGFkZW1pLCBldCBhbC4gICAg ICAgICAgRXhwaXJlcyBBcHJpbCAyMywgMjAxOCAgICAgICAgICAgICAgICBbUGFnZSAxMV0K DApJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgIEFCRSAgICAgICAgICAgICAg ICAgICAgICBPY3RvYmVyIDIwMTcKCgogICBHcmVudmlsbGUgQXJtaXRhZ2UKICAgSW50ZXJu ZXQgRm9yIFRoaW5ncyAoSTRUKSBSZXNlYXJjaCBHcm91cAogICBTd2luYnVybmUgVW5pdmVy c2l0eSBvZiBUZWNobm9sb2d5CiAgIFBPIEJveCAyMTgKICAgSm9obiBTdHJlZXQsIEhhd3Ro b3JuCiAgIFZpY3RvcmlhICAzMTIyCiAgIEF1c3RyYWxpYQoKICAgRW1haWw6IGdhcm1pdGFn ZUBzd2luLmVkdS5hdQoKCiAgIEdvZHJlZCBGYWlyaHVyc3QKICAgVW5pdmVyc2l0eSBvZiBB YmVyZGVlbgogICBTY2hvb2wgb2YgRW5naW5lZXJpbmcsIEZyYXNlciBOb2JsZSBCdWlsZGlu ZwogICBBYmVyZGVlbiAgQUIyNCAzVUUKICAgVUsKCiAgIEVtYWlsOiBnb3JyeUBlcmcuYWJk bi5hYy51awoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgpLaGFkZW1pLCBldCBh bC4gICAgICAgICAgRXhwaXJlcyBBcHJpbCAyMywgMjAxOCAgICAgICAgICAgICAgICBbUGFn ZSAxMl0K --------------99D66E5233C9C54E89BA714C-- From nobody Mon Nov 13 13:48:02 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5D45128BB6; Mon, 13 Nov 2017 01:24:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7GWxoJq02oIU; Mon, 13 Nov 2017 01:24:07 -0800 (PST) Received: from mail-it0-x22d.google.com (mail-it0-x22d.google.com [IPv6:2607:f8b0:4001:c0b::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50B42128BC8; Mon, 13 Nov 2017 01:24:07 -0800 (PST) Received: by mail-it0-x22d.google.com with SMTP id f187so8629413itb.1; Mon, 13 Nov 2017 01:24:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language; bh=fNbF7Z2oGcr8zNiOqSZpmqBhXn63XYriDAfPpMzmC8o=; b=sXCzdB3IoQx9kQpxfsbY2bupzFsjtRCgA3H1Lf11JMe/fGRak3BfLn5IfFYc+ap9Sj vN6F13ufnYrEVCoYAXk7s4hDIzogeH6WkiwK7ORFc9r6InbAP2rmsWqkFmALB6DTwHUI mwjl6+HeVUToroyqRieGQ0ZTtR+yxW0nOHgbcKZX+rIPblaYQb+zY+79e7yS/adUNgIx QlTc80bdFRrSRoOPaxCgWCqORM0uQYAdD4kCjX3TEwJa5e3N6omqwRo2ILbUyWQcilIL FolX2CHmGbjBnNW58CiNjElBOe3QaXhzkpfg4aPr0wCebTNtMOWTYhxt9nUxSdVggUsW FEVw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=fNbF7Z2oGcr8zNiOqSZpmqBhXn63XYriDAfPpMzmC8o=; b=p7+WPVTtj76Uddlb29QjLksdNRQAgCZJ6CVoK9+zDvCB10vOEvX8HkV/ZsSK6Up1LW WX1g/TtCg+0QR2hi+IdWHtwC3gRcVjrjWXt0tpkzcSEVPehwXmrbwvSI4DhQiW92kh4u ndxL7810caiFszWtNMcW1ByK2E3gV3WPBbS6pn4S+OdhAJ4fvawj+jfbxS15Djf+1VtT rqJ6LB0NH6KKEbqaZgiWx/dSuy5ufrHoahzNut60MM63BzK+VMnjcDCPYcJlfE8VCyV3 9z+AkcvFeDIsDYqe7Zkh4UCGn7hKC77DC1i3bxS70JC8SaCtY3Cawe4+J6lYK2BF24Be Wsfg== X-Gm-Message-State: AJaThX7ZXAKcJAKoD5DEttOj6R7YRdDJWfRnu5E8qfjQ3YbmhlF8GHFW emyB85qawC6CsRfwXKleBO+n4uC1Gpo= X-Google-Smtp-Source: AGs4zMZfdPEKl+/9AtNDzk8QzYQK6mZ8TnNxKDKIBnAz7Njy0vfjk1DSf1MJAZ+SDbopt2hlZZDcYw== X-Received: by 10.36.182.2 with SMTP id g2mr9920817itf.34.1510565046236; Mon, 13 Nov 2017 01:24:06 -0800 (PST) Received: from [172.16.182.160] ([101.100.166.67]) by smtp.gmail.com with ESMTPSA id i63sm7457754ioi.68.2017.11.13.01.24.01 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 13 Nov 2017 01:24:05 -0800 (PST) To: Jeff Tantsura , Joe Touch Cc: "mpls@ietf.org" , Eric Rescorla , "tcpm@ietf.org" , "pals-chairs@tools.ietf.org" , "" , "Scharf, Michael (Nokia - DE/Stuttgart)" , "mpls-chairs@ietf.org" , "pals@ietf.org" , "" References: <2da71163-cf29-cba6-df61-d75a2cfc9c43@gmail.com> <7ee4fd77-7d8d-0db2-527e-9cf91d87e634@gmail.com> <51b9e5b4-0a44-1449-a4df-91e4f9df5d6b@pi.nu> <02a50f02-779e-bc39-505c-5a51d066b3f0@pi.nu> <15335748-e900-280d-554f-24c55c0f3ba5@gmail.com> <4f634e7c-f3b9-f0ab-abc7-80ec1062b52a@strayalpha.com> <697AC959-60C2-401D-9E64-D88E16F35EBB@gmail.com> From: Ignas Bagdonas Message-ID: <1817bcab-e088-b822-bf6d-07e52b9fb998@gmail.com> Date: Mon, 13 Nov 2017 09:24:00 +0000 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: <697AC959-60C2-401D-9E64-D88E16F35EBB@gmail.com> Content-Type: multipart/alternative; boundary="------------12525C3C2481F53811CFBDBA" Content-Language: en-GB Archived-At: X-Mailman-Approved-At: Mon, 13 Nov 2017 13:47:55 -0800 Subject: Re: [tcpm] [mpls] LDP Security X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 09:24:11 -0000 This is a multi-part message in MIME format. --------------12525C3C2481F53811CFBDBA Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit An operator’s view here. Addressing multiple points in a single message here. Yes, the issue is with adoption. It is not being adopted because the problem solution does not necessary address the actual problem. Taking BGP as an example (and most of this applies to LDP as well) – we need to differentiate what security means in BGP context. Is it BGP transport security – the confidentiality of BGP messages exchanged between the peers (which MD5 or AO can address), or BGP information security – whether the peer is authorized to advertise a prefix and with what attributes (to which the presence or absence of MD5 and AO is orthogonal). Any cryptographically strong security mechanism is not a substitute for practical operational hygiene. If you have right confidentiality mechanism for BGP transport but do not implement proper edge filtering – you will run into problems. Not because there will be a compromise of BGP session transport, but because there will be a variety of DoS forms on the BGP component itself and the platform on which it is running. Proper edge filtering plus TTL validation is good enough and simple enough to be universally deployed, and MD5 option is used to validate that you are indeed speaking to the same peer to which you were speaking before the maintenance window, it is a form of a strong checksum. AO or BGP over TLS (dare I to say that :-) ) does nothing to address the BGP information security aspects of who is or is not allowed to advertise certain types of BGP routing information – which is the source of virtually all of practical (and successful) attacks happening in BGP context. This is the reason why AO or some other strong cryptographic mechanism for BGP transport session is not on the top of the list of operational worries, if at that list at all. RPKI family of solutions tries to address the BGP information security part. It tries, not necessary addresses it in a practical way. But that is above the session level security problems. Any cryptographically strong security mechanism is not a substitute for proper network design. Taking the DC example, if the attack vector is based on the tenant’s ability to interfere with BGP sessions used for controlling the topology that does not belong to the tenant – that is a broken network design, and it should be fixed first before trying to fix BGP itself. BGP is not at fault here, the design of the network that does not allow for sufficient isolation between entities is. No protocol is able to fix the design problems by itself. This does not mean that AO or some other transport security mechanism is not relevant or not needed. At least the solution for key rollover that is better than manual synchronization over phone is definitely of value. Ignas On 11/11/2017 03:11, Jeff Tantsura wrote: > Joe, > > There’s no problem with updating, the problem is with adoption... > > Regards, > Jeff > > On Nov 11, 2017, at 08:48, Joe Touch > wrote: > >> Hi, all, >> >> I don't see a problem if there's a need for updating TCP-AO to >> include/require other algorithms. It was intended to be extensible. >> >> I agree with the issue of key management. There was some work on >> extensions to IKE to enable its use to manage TCP-AO parameters and >> keys, but it stalled twice: >> >> M. Jethanandani, B. Weis, K. Patel, D. Zhang, S. Hartman, U. >> Chunduri, A. Tian, J. Touch, “Negotiation for Keying Pairwise Routing >> Protocols in IKEv2 >> ,” (RFC >> in progress), Nov. 2013. >> >> U. Chunduri, A. Tian, J. Touch, “Using IKEv2 with TCP-AO >> ,” >> (RFC in progress), Feb. 2014. >> >> AFAICT, that would go a long way towards addressing the issues with >> its use outside routing environments where keys are already >> considered sufficiently managed. >> >> However, the larger problem with TCP-AO is that there are no >> implementations available in end system OSes (AFAICT). Designing a >> new solution simply to avoid implementing an existing one would be a >> significant waste of time. >> >> Joe >> >> >> On 11/10/2017 8:21 AM, Scharf, Michael (Nokia - DE/Stuttgart) wrote: >>> >>> +TCPM >>> >>> Please free to discuss changes to TCP-AO on the TCPM list, or speak >>> up at the upcoming TCPM meeting. >>> >>> The addition of SHA-256 has been discussed in TCPM already (see >>> draft-nayak-tcp-sha2-02), but so far there was not much energy and >>> no interest from potential TCP-AO implementers or users. >>> >>> Michael >>> >>> (TCPM co-chair) >>> >>> *From:* mpls [mailto:mpls-bounces@ietf.org] *On Behalf Of *Eric Rescorla >>> *Sent:* Wednesday, November 08, 2017 7:00 PM >>> *To:* Stewart Bryant >>> *Cc:* mpls@ietf.org; pals-chairs@tools.ietf.org; >>> ; mpls-chairs@ietf.org; pals@ietf.org; >>> >>> *Subject:* Re: [mpls] LDP Security >>> >>> Hi Stewart >>> >>> Thanks for your note. >>> >>> My overall sense of the state of play is, I think much like yours. >>> >>> TCP-MD5 is inadequate in two major respects: >>> >>> - It uses weak algorithms >>> >>> - It has a bad negotiation/setuop story (manual key management) >>> >>> TCP-AO is intended to be a drop-in replacement for TCP-MD5 and so >>> remedies the algorithm >>> >>> issue but not the key management issue [0]. We haven't made much >>> progress on the key >>> >>> management story, and that seems to be a major impediment to >>> deploying either of these >>> >>> technologies (which I am given to understand don't see a lot of >>> use). We should probably >>> >>> talk in Singapore about that, but that's not going to get better any >>> time soon. >>> >>> In the interim, I think the text you have is OK, and "TBD" should >>> read "SHA-256", with >>> >>> the fallback being SHA-256 -> SHA-1 -> MD5. >>> >>> -Ekr >>> >>> [0] Technically It has better support for rollover, but this is not >>> a huge improvement. >>> >>> [1] tcpcrypt is kind of orthogonal here as it's unauthenticated but >>> opportunistic.  That said, >>> >>> it would provide defense against attackers who gain access to the >>> link after connection >>> >>> setup and doesn't require configuration. >>> >>> On Wed, Nov 8, 2017 at 9:27 AM, Stewart Bryant >>> > wrote: >>> >>> To the SEC and RTG ADs, >>> >>> I am sending the following message on behalf of the MPLS and the >>> PALS WG Chairs. >>> >>> There is a concern shared among the security community and the >>> working groups that develop the LDP protocol that LDP is no >>> longer adequately secured. LDP currently relies on MD5 for >>> cryptographic security of its messages, but MD5 is a hash >>> function that is no longer considered to meet current security >>> requirements. >>> >>> In RFC5036 (published 2007) Section 5.1 (Spoofing) , List >>> element 2. Session communication carried by TCP the following >>> statements is made: >>> >>> "LDP specifies use of the TCP MD5 Signature Option to provide >>> for the authenticity and integrity of session messages. >>> >>> "[RFC2385] asserts that MD5 authentication is now considered by >>> some to be too weak for this application.  It also points out >>> that a similar TCP option with a stronger hashing algorithm (it >>> cites SHA-1 as an example) could be deployed.  To our knowledge, >>> no such TCP option has been defined and deployed. However, we >>> note that LDP can use whatever TCP message digest techniques are >>> available, and when one stronger than MD5 is specified and >>> implemented, upgrading LDP to use it would be relatively >>> straightforward." >>> >>> We note that BGP has already been through this process, and >>> replaced MD5 with TCP-AO in RFC 7454. I would be logical to >>> follow the same approach to secure LDP. However, as far as we >>> are able to ascertain, there is currently no recommended, >>> mandatory to implement, cryptographic function specified. We are >>> concerned that without such a mandatory function, >>> implementations will simply fall back to MD5 and we will be no >>> further forward >>> >>> We think that the best way forward is to publish a draft similar >>> to RFC 7454 that contains the following requirement: >>> >>> "Implementations conforming to this RFC MUST implement TCP-AO to >>> secure the TCP sessions carrying LDP in addition to the >>> currently required TCP MD5 Signature Option. Furthermore, the >>> TBD cryptographic mechanism must be implemented and provided to >>> TCP-AO to secure LDP messages. The TBD mechanism is the >>> preferred option, and MD5 is only to be used when TBD is >>> unavailable." >>> >>> We are not an experts on this part of the stack, but it seems >>> that TCP security negotiation is still work in progress. If we >>> are wrong, then we need to include a requirement that such >>> negotiation is also required. In the absence of a negotiation >>> protocol, however, we need to leave this as a configuration >>> process until such time as the negotiation protocol work is >>> complete. On completion of a suitable negotiation protocol we >>> need to issue a further update requiring its use. >>> >>> Additionally we should note that no cryptographic mechanism has >>> an indefinite lifetime, and that implementation should note the >>> IETF anticipates updating the default cryptographic mechanism >>> over time. >>> >>> The TBD default security function will need to be chosen such >>> that it can reasonably be implemented on a typical router route >>> processor, and which will provide adequate security without >>> significantly degrading the convergence time of an LSR. Without >>> a function that does not significantly impact router convergence >>> we simply close one vulnerability and open another. >>> >>> As experts on the LDP protocol, but not on security mechanisms, >>> we  need to ask the security area for a review of our proposed >>> approach, and help correcting any misunderstanding of the >>> security issues or our misunderstanding of the existing security >>> mechanisms. We also need the recommendations of a suitable >>> security function (TBD in the above text). >>> >>> Best regards >>> >>> The MPLS WG Chairs >>> The PALS WG Chairs >>> >>> >>> >>> _______________________________________________ >>> tcpm mailing list >>> tcpm@ietf.org >>> https://www.ietf.org/mailman/listinfo/tcpm >> >> _______________________________________________ >> mpls mailing list >> mpls@ietf.org >> https://www.ietf.org/mailman/listinfo/mpls > > > _______________________________________________ > mpls mailing list > mpls@ietf.org > https://www.ietf.org/mailman/listinfo/mpls --------------12525C3C2481F53811CFBDBA Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

An operator’s view here. Addressing multiple points in a single message here.

Yes, the issue is with adoption. It is not being adopted because the problem solution does not necessary address the actual problem.

Taking BGP as an example (and most of this applies to LDP as well) – we need to differentiate what security means in BGP context. Is it BGP transport security – the confidentiality of BGP messages exchanged between the peers (which MD5 or AO can address), or BGP information security – whether the peer is authorized to advertise a prefix and with what attributes (to which the presence or absence of MD5 and AO is orthogonal).

Any cryptographically strong security mechanism is not a substitute for practical operational hygiene. If you have right confidentiality mechanism for BGP transport but do not implement proper edge filtering – you will run into problems. Not because there will be a compromise of BGP session transport, but because there will be a variety of DoS forms on the BGP component itself and the platform on which it is running. Proper edge filtering plus TTL validation is good enough and simple enough to be universally deployed, and MD5 option is used to validate that you are indeed speaking to the same peer to which you were speaking before the maintenance window, it is a form of a strong checksum. AO or BGP over TLS (dare I to say that :-) ) does nothing to address the BGP information security aspects of who is or is not allowed to advertise certain types of BGP routing information – which is the source of virtually all of practical (and successful) attacks happening in BGP context. This is the reason why AO or some other strong cryptographic mechanism for BGP transport session is not on the top of the list of operational worries, if at that list at all. RPKI family of solutions tries to address the BGP information security part. It tries, not necessary addresses it in a practical way. But that is above the session level security problems.

Any cryptographically strong security mechanism is not a substitute for proper network design. Taking the DC example, if the attack vector is based on the tenant’s ability to interfere with BGP sessions used for controlling the topology that does not belong to the tenant – that is a broken network design, and it should be fixed first before trying to fix BGP itself. BGP is not at fault here, the design of the network that does not allow for sufficient isolation between entities is. No protocol is able to fix the design problems by itself.

This does not mean that AO or some other transport security mechanism is not relevant or not needed. At least the solution for key rollover that is better than manual synchronization over phone is definitely of value.

Ignas


On 11/11/2017 03:11, Jeff Tantsura wrote:
Joe,

There’s no problem with updating, the problem is with adoption...

Regards,
Jeff

On Nov 11, 2017, at 08:48, Joe Touch <touch@strayalpha.com> wrote:

Hi, all,

I don't see a problem if there's a need for updating TCP-AO to include/require other algorithms. It was intended to be extensible.

I agree with the issue of key management. There was some work on extensions to IKE to enable its use to manage TCP-AO parameters and keys, but it stalled twice:

M. Jethanandani, B. Weis, K. Patel, D. Zhang, S. Hartman, U. Chunduri, A. Tian, J. Touch, “Negotiation for Keying Pairwise Routing Protocols in IKEv2,” (RFC in progress), Nov. 2013.

U. Chunduri, A. Tian, J. Touch, “Using IKEv2 with TCP-AO,” (RFC in progress), Feb. 2014.

AFAICT, that would go a long way towards addressing the issues with its use outside routing environments where keys are already considered sufficiently managed.

However, the larger problem with TCP-AO is that there are no implementations available in end system OSes (AFAICT). Designing a new solution simply to avoid implementing an existing one would be a significant waste of time.

Joe


On 11/10/2017 8:21 AM, Scharf, Michael (Nokia - DE/Stuttgart) wrote:

+TCPM

 

Please free to discuss changes to TCP-AO on the TCPM list, or speak up at the upcoming TCPM meeting.

 

The addition of SHA-256 has been discussed in TCPM already (see draft-nayak-tcp-sha2-02), but so far there was not much energy and no interest from potential TCP-AO implementers or users.

 

Michael

(TCPM co-chair)

 

 

From: mpls [mailto:mpls-bounces@ietf.org] On Behalf Of Eric Rescorla
Sent: Wednesday, November 08, 2017 7:00 PM
To: Stewart Bryant <stewart.bryant@gmail.com>
Cc: mpls@ietf.org; pals-chairs@tools.ietf.org; <rtg-ads@ietf.org> <rtg-ads@ietf.org>; mpls-chairs@ietf.org; pals@ietf.org; <sec-ads@ietf.org> <sec-ads@ietf.org>
Subject: Re: [mpls] LDP Security

 

Hi Stewart

 

Thanks for your note.

 

My overall sense of the state of play is, I think much like yours.

 

TCP-MD5 is inadequate in two major respects:

- It uses weak algorithms

- It has a bad negotiation/setuop story (manual key management)

 

TCP-AO is intended to be a drop-in replacement for TCP-MD5 and so remedies the algorithm

issue but not the key management issue [0]. We haven't made much progress on the key

management story, and that seems to be a major impediment to deploying either of these

technologies (which I am given to understand don't see a lot of use). We should probably

talk in Singapore about that, but that's not going to get better any time soon.

 

In the interim, I think the text you have is OK, and "TBD" should read "SHA-256", with

the fallback being SHA-256 -> SHA-1 -> MD5.

 

-Ekr

 

 

[0] Technically It has better support for rollover, but this is not a huge improvement.

[1] tcpcrypt is kind of orthogonal here as it's unauthenticated but opportunistic.  That said,

it would provide defense against attackers who gain access to the link after connection

setup and doesn't require configuration.

 

On Wed, Nov 8, 2017 at 9:27 AM, Stewart Bryant <stewart.bryant@gmail.com> wrote:

To the SEC and RTG ADs,

I am sending the following message on behalf of the MPLS and the
PALS WG Chairs.

There is a concern shared among the security community and the working groups that develop the LDP protocol that LDP is no longer adequately secured. LDP currently relies on MD5 for cryptographic security of its messages, but MD5 is a hash function that is no longer considered to meet current security requirements.

In RFC5036 (published 2007) Section 5.1 (Spoofing) , List element 2. Session communication carried by TCP the following statements is made:

"LDP specifies use of the TCP MD5 Signature Option to provide for the authenticity and integrity of session messages.

"[RFC2385] asserts that MD5 authentication is now considered by some to be too weak for this application.  It also points out that a similar TCP option with a stronger hashing algorithm (it cites SHA-1 as an example) could be deployed.  To our knowledge, no such TCP option has been defined and deployed.  However, we note that LDP can use whatever TCP message digest techniques are available, and when one stronger than MD5 is specified and implemented, upgrading LDP to use it would be relatively straightforward."

We note that BGP has already been through this process, and replaced MD5 with TCP-AO in RFC 7454. I would be logical to follow the same approach to secure LDP. However, as far as we are able to ascertain, there is currently no recommended, mandatory to implement, cryptographic function specified. We are concerned that without such a mandatory function, implementations will simply fall back to MD5 and we will be no further forward

We think that the best way forward is to publish a draft similar to RFC 7454 that contains the following requirement:

"Implementations conforming to this RFC MUST implement TCP-AO to secure the TCP sessions carrying LDP in addition to the currently required TCP MD5 Signature Option. Furthermore, the TBD cryptographic mechanism must be implemented and provided to TCP-AO to secure LDP messages. The TBD mechanism is the preferred option, and MD5 is only to be used when TBD is unavailable."

We are not an experts on this part of the stack, but it seems that TCP security negotiation is still work in progress. If we are wrong, then we need to include a requirement that such negotiation is also required. In the absence of a negotiation protocol, however, we need to leave this as a configuration process until such time as the negotiation protocol work is complete. On completion of a suitable negotiation protocol we need to issue a further update requiring its use.

Additionally we should note that no cryptographic mechanism has an indefinite lifetime, and that implementation should note the IETF anticipates updating the default cryptographic mechanism over time.

The TBD default security function will need to be chosen such that it can reasonably be implemented on a typical router route processor, and which will provide adequate security without significantly degrading the convergence time of an LSR. Without a function that does not significantly impact router convergence we simply close one vulnerability and open another.

As experts on the LDP protocol, but not on security mechanisms, we  need to ask the security area for a review of our proposed approach, and help correcting any misunderstanding of the security issues or our misunderstanding of the existing security mechanisms. We also need the recommendations of a suitable security function (TBD in the above text).

Best regards

The MPLS WG Chairs
The PALS WG Chairs

 



_______________________________________________
tcpm mailing list
tcpm@ietf.org
https://www.ietf.org/mailman/listinfo/tcpm

_______________________________________________
mpls mailing list
mpls@ietf.org
https://www.ietf.org/mailman/listinfo/mpls


_______________________________________________
mpls mailing list
mpls@ietf.org
https://www.ietf.org/mailman/listinfo/mpls

--------------12525C3C2481F53811CFBDBA-- From nobody Mon Nov 13 13:48:07 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A99C512957A; Mon, 13 Nov 2017 06:10:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.99 X-Spam-Level: X-Spam-Status: No, score=-1.99 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=strayalpha.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zQ4xDlrwZULZ; Mon, 13 Nov 2017 06:10:37 -0800 (PST) Received: from server217-3.web-hosting.com (server217-3.web-hosting.com [198.54.115.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01D29129A84; Mon, 13 Nov 2017 06:10:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=strayalpha.com; s=default; h=Content-Transfer-Encoding:Content-Type: In-Reply-To:MIME-Version:Date:Message-ID:From:References:Cc:To:Subject:Sender :Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=6OARAuLshl8pGUwz+FH8u3DR3LqRzV0lHKIdRO+gK+Q=; b=XG66sqivw8fapK0IvREdP7ESgS T/v1+2rVNzBxsi8mqnLfJbEGobuAZvv7xzjaPCcgRVhmFnOhqPcMB9/Zh7SDSfDbWn0vGYoB/rlQF qSCRctQG+5S04SG6V2y6jagDrdnW0zl/0/zBNKqNULS39nX0eb3DNpsel/f4nKvMGv5Jbkvo+3Ets eJpXMQLDgIMi/cX3i/LGmQDkCgrHnpC/XObbDNXjTc+W8Xz2Cj1wubWJ4w+P5q7y6guHNyCeWHccB OB/VHiIRc34D+COCaRP8+eg75gYTSEXOS9JtVDrJGP/lEDcoXkGHcjnjwXcn0kTecEmab6o6XSOFA 7Kw96zYQ==; Received: from cpe-172-250-240-132.socal.res.rr.com ([172.250.240.132]:64372 helo=[192.168.1.189]) by server217.web-hosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89) (envelope-from ) id 1eEFRS-0003gV-CP; Mon, 13 Nov 2017 09:10:27 -0500 To: Ignas Bagdonas , Jeff Tantsura Cc: "mpls@ietf.org" , Eric Rescorla , "tcpm@ietf.org" , "pals-chairs@tools.ietf.org" , "" , "Scharf, Michael (Nokia - DE/Stuttgart)" , "mpls-chairs@ietf.org" , "pals@ietf.org" , "" References: <2da71163-cf29-cba6-df61-d75a2cfc9c43@gmail.com> <7ee4fd77-7d8d-0db2-527e-9cf91d87e634@gmail.com> <51b9e5b4-0a44-1449-a4df-91e4f9df5d6b@pi.nu> <02a50f02-779e-bc39-505c-5a51d066b3f0@pi.nu> <15335748-e900-280d-554f-24c55c0f3ba5@gmail.com> <4f634e7c-f3b9-f0ab-abc7-80ec1062b52a@strayalpha.com> <697AC959-60C2-401D-9E64-D88E16F35EBB@gmail.com> <1817bcab-e088-b822-bf6d-07e52b9fb998@gmail.com> From: Joe Touch Message-ID: Date: Mon, 13 Nov 2017 06:10:21 -0800 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: <1817bcab-e088-b822-bf6d-07e52b9fb998@gmail.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server217.web-hosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - strayalpha.com X-Get-Message-Sender-Via: server217.web-hosting.com: authenticated_id: touch@strayalpha.com X-Authenticated-Sender: server217.web-hosting.com: touch@strayalpha.com X-Source: X-Source-Args: X-Source-Dir: X-From-Rewrite: unmodified, already matched Archived-At: X-Mailman-Approved-At: Mon, 13 Nov 2017 13:47:54 -0800 Subject: Re: [tcpm] [mpls] LDP Security X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 14:10:39 -0000 On 11/13/2017 1:24 AM, Ignas Bagdonas wrote: > > An operator’s view here. Addressing multiple points in a single > message here. > > Yes, the issue is with adoption. It is not being adopted because the > problem solution does not necessary address the actual problem. > > Taking BGP as an example (and most of this applies to LDP as well) – > we need to differentiate what security means in BGP context. Is it BGP > transport security – the confidentiality of BGP messages exchanged > between the peers (which MD5 or AO can address), or BGP information > security – whether the peer is authorized to advertise a prefix and > with what attributes (to which the presence or absence of MD5 and AO > is orthogonal). > I had thought it was widely understood that there are two components to protecting BGP:         - TCP-AO - to protect the TCP connections from attack and authenticate the endpoint pairs         - BGPsec - to validate the authenticity of relayed prefix advertisements and ensure its legitimacy Is there a third aspect that isn't included here that you feel is missing? Or do you feel one of these inadequate in performing *the function it is designed for*? Joe From nobody Tue Nov 14 14:23:39 2017 Return-Path: X-Original-To: tcpm@ietf.org Delivered-To: tcpm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D621D127419; Tue, 14 Nov 2017 14:23:26 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.65.1 Auto-Submitted: auto-generated Precedence: bulk Cc: The IESG , tcpm@ietf.org, nishida@sfc.wide.ad.jp, ietf@kuehlewind.net, Yoshifumi Nishida , rfc-editor@rfc-editor.org, draft-ietf-tcpm-cubic@ietf.org, tcpm-chairs@ietf.org MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit Message-ID: <151069820687.26057.14432527726262126504.idtracker@ietfa.amsl.com> Date: Tue, 14 Nov 2017 14:23:26 -0800 Archived-At: Subject: [tcpm] Document Action: 'CUBIC for Fast Long-Distance Networks' to Informational RFC (draft-ietf-tcpm-cubic-07.txt) X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Nov 2017 22:23:27 -0000 The IESG has approved the following document: - 'CUBIC for Fast Long-Distance Networks' (draft-ietf-tcpm-cubic-07.txt) as Informational RFC This document is the product of the TCP Maintenance and Minor Extensions Working Group. The IESG contact persons are Mirja Kühlewind and Spencer Dawkins. A URL of this Internet Draft is: https://datatracker.ietf.org/doc/draft-ietf-tcpm-cubic/ Technical Summary This document describes CUBIC which is a congestion control algorithm used in TCP. CUBIC modifies the standard congestion control mechanism in TCP in order to address low utilization issues for networks with large BDP. CUBIC is well deployed in the current Internet since it has been used as the default congestion control scheme in Linux. The objective of the draft is to document the mechanism of CUBIC in Linux code as an informational RFC. Working Group Summary The TCPM working group has discussed how to document CUBIC mechanism and reached the consensus to describe what is currently implemented as an informational RFC. While the WG spent two year to discuss the draft, no major controversial point has been raised during this process. Document Quality The draft has been reviewed and discussed by various participants in the WG including experts from Linux kernel development community which have been useful to adjust the description of detailed logics. Personnel The document shepherd is Yoshifumi Nishida . The responsible Area Director is Mirja Kuehlewind . From nobody Wed Nov 15 00:50:15 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85567129447; Wed, 15 Nov 2017 00:50:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.219 X-Spam-Level: X-Spam-Status: No, score=-4.219 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0nUeMzush9LT; Wed, 15 Nov 2017 00:50:07 -0800 (PST) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C3611294A4; Wed, 15 Nov 2017 00:50:06 -0800 (PST) X-AuditID: c1b4fb25-d91ff700000020f7-5b-5a0bffbc7cee Received: from ESESSHC023.ericsson.se (Unknown_Domain [153.88.183.87]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id 65.33.08439.CBFFB0A5; Wed, 15 Nov 2017 09:50:04 +0100 (CET) Received: from ESESSMB107.ericsson.se ([169.254.7.134]) by ESESSHC023.ericsson.se ([153.88.183.87]) with mapi id 14.03.0352.000; Wed, 15 Nov 2017 09:50:04 +0100 From: =?utf-8?B?SmFpbWUgSmltw6luZXo=?= To: "core@ietf.org WG (core@ietf.org)" CC: "iccrg@irtf.org" , "tcpm@ietf.org" , "ietf@kuehlewind.net" , "carlesgo@entel.upc.edu" , Carsten Bormann Thread-Topic: =?utf-8?B?W2NvcmVdIPCflJQgV0dMQyBvbiBkcmFmdC1pZXRmLWNvcmUtY29jb2E=?= Thread-Index: AQHTXe66Qfaot2+MTkyzw8OJMhwnkQ== Date: Wed, 15 Nov 2017 08:50:04 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [153.88.183.150] Content-Type: multipart/signed; boundary="Apple-Mail=_9B8947BA-EC34-438D-8627-87A9ED8A20CD"; protocol="application/pkcs7-signature"; micalg=sha1 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrDIsWRmVeSWpSXmKPExsUyM2J7uO6e/9xRBuc/W1ocmXKX1eLgtu+s Fvverme2OLBgJ7vFi+sfmS22nZzP5MDmcf/gA2aPJUt+MnlM3niYzaPl40JWj2mLMgNYo7hs UlJzMstSi/TtErgyFsz4y1qw277iztld7A2ME2y6GDk5JARMJHreXmPvYuTiEBI4zChxZ8Mq KGcJo8SCthfsIFVsAs4Sn541gtkiAmYSW3Z9ZQUpYhY4xSixZ/JMRpCEsICvxK3zy1khioIk Jiy5yQZh60m03D/MAmKzCKhKzJg5DayGV8BeYtfVz0wgNqOAmMT3U2vAbGYBcYlbT+YzQZwn IvHw4mk2CFtU4uXjf6wQtpLEiu2XGCHqpzBKLJxYDTFTUOLkzCcsExiFZiEZNQtJ2SwkZRDx JImNs0+wQtjaEssWvmaGsDUl9ncvZ8EU15Do/DYRqt5U4vXRj4wQtrXEjF8H2SBsRYkp3Q/Z FzByr2IULU4tTspNNzLWSy3KTC4uzs/Ty0st2cQIjOeDW36r7mC8/MbxEKMAB6MSD6/BK+4o IdbEsuLK3EOMKkBzHm1YfYFRiiUvPy9VSYQ3uR8ozZuSWFmVWpQfX1Sak1p8iFGag0VJnNdD BCglkJ5YkpqdmlqQWgSTZeLglGpgzP36W/+eiMnB2V1ZRi9ilD9bafq4O5RLC6nscVXyLmBt u3Hx/GvzWUKr0kPDpsjp9W3pTZ5/9e0Jnm/Nbv21qtdquD7ybPvaEsf97PYCfoff0ku17tTd KH7hnnSEdf3328+uN+5L79d4xBsbuENlwxdv9l8cyZ+u7Dm4uW+x7m391gOaKnlTlViKMxIN tZiLihMBTFp3ye8CAAA= Archived-At: Subject: [tcpm] =?utf-8?q?=5Bcore=5D_=F0=9F=94=94_WGLC_on_draft-ietf-core-?= =?utf-8?q?cocoa?= X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Nov 2017 08:50:09 -0000 --Apple-Mail=_9B8947BA-EC34-438D-8627-87A9ED8A20CD Content-Type: multipart/alternative; boundary="Apple-Mail=_85B434A2-DD04-4448-81C0-38F27F350742" --Apple-Mail=_85B434A2-DD04-4448-81C0-38F27F350742 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Dear CoRE WG, As we discussed during Monday=E2=80=99s CoRE session, the cocoa draft is = in good shape for WGLC.=20 We will do a 4 week WGLC to give time to the folks at ICCRG and TCPM = (cced) to provide feedback.=20 https://tools.ietf.org/html/draft-ietf-core-cocoa-02 = =20 Best Regards, - - Jaime Jim=C3=A9nez= --Apple-Mail=_85B434A2-DD04-4448-81C0-38F27F350742 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Dear CoRE WG,

As we = discussed during Monday=E2=80=99s CoRE session, the cocoa draft is in = good shape for WGLC. 
We will do a 4 week WGLC to give = time to the folks at ICCRG and TCPM (cced) to provide = feedback. 

https://tools.ietf.org/html/draft-ietf-core-cocoa-02 

Best = Regards,
- - Jaime Jim=C3=A9nez
= --Apple-Mail=_85B434A2-DD04-4448-81C0-38F27F350742-- --Apple-Mail=_9B8947BA-EC34-438D-8627-87A9ED8A20CD Content-Disposition: attachment; filename="smime.p7s" Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMrTCCBe8w ggPXoAMCAQICEGjDnK4TEsyfW0+Qr43kvSowDQYJKoZIhvcNAQEFBQAwOjERMA8GA1UECgwIRXJp Y3Nzb24xJTAjBgNVBAMMHEVyaWNzc29uIE5MIEluZGl2aWR1YWwgQ0EgdjIwHhcNMTQxMjA5MTMy MzExWhcNMTcxMjA5MTMyMzEwWjBpMREwDwYDVQQKDAhFcmljc3NvbjEXMBUGA1UEAwwOSmFpbWUg Smltw6luZXoxKTAnBgkqhkiG9w0BCQEWGmphaW1lLmppbWVuZXpAZXJpY3Nzb24uY29tMRAwDgYD VQQFEwdlamFqaW1uMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9DiTCOChb1bYXyr VSnjxfVxZ+NGqajFezGGSWAWycgkTkiVdHu7Ek89luoUCU9D8KukeSlzeIFu+TdcANzelWOUqm53 Dh64KfoutxkI1g1FOk8+o45tjBFqw7xknXyEUhZ9/XLqaXuRdw7sCvO91Z05R37hwGhscO7M0fgv lRtWBxaqbC/Ikvjo+PPqt5zpx+GFaqsJ0+4ZQWjrb6I+8e8EAxCpLqB9HmCAztI+zog/tzaSDQdd gQVjLDAndvnKRziQvOrYc5kvJHkXzLcWITDYmi5pZrgNRBJL2poiwSopQPlF5bGjaRYu2WBytXe2 SDEj1viuqpae1vxy7+AdUwIDAQABo4IBwDCCAbwwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2Ny bC50cnVzdC50ZWxpYS5jb20vZXJpY3Nzb25ubGluZGl2aWR1YWxjYXYyLmNybDCBggYIKwYBBQUH AQEEdjB0MCgGCCsGAQUFBzABhhxodHRwOi8vb2NzcDIudHJ1c3QudGVsaWEuY29tMEgGCCsGAQUF BzAChjxodHRwOi8vY2EudHJ1c3QudGVsaWFzb25lcmEuY29tL2VyaWNzc29ubmxpbmRpdmlkdWFs Y2F2Mi5jZXIwJQYDVR0RBB4wHIEaamFpbWUuamltZW5lekBlcmljc3Nvbi5jb20wVQYDVR0gBE4w TDBKBgwrBgEEAYIPAgMBARIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly9yZXBvc2l0b3J5LnRydXN0 LnRlbGlhc29uZXJhLmNvbS9DUFMwHQYDVR0lBBYwFAYIKwYBBQUHAwQGCCsGAQUFBwMCMB0GA1Ud DgQWBBQ58oLpEh/5VlA3MqHd3ggGy2cPpzAfBgNVHSMEGDAWgBSxDcrURrevhgLDL28Gyg52cX9L NzAOBgNVHQ8BAf8EBAMCBaAwDQYJKoZIhvcNAQEFBQADggIBABcJc9IVKYtDtvxGDcoFbAFvNeiH +bRaEu1d9BWRhjtb8ZAU586LmsSwblH+2rbFRtisroKUwq7tZyjQtCrL7Rma0yM74p5PNZ7sGfmz yNZT33hfTZEDo7bjKdaUg0ELBzQvttjIIr7tBVf9cpdOAyOkGn3oqGEomPizRDiKrXBD3V8oMibX nQDb90hg8TJmLb9mqyaRnu1ztxV2585qJUXXPAt1v6qUy23V+tmOE7JzMxrQwa5UupoS/muaQSsR 7Evde7pXBg8jERM7o4VZJIA7LI55ogyb37O7W2zhITXzbHgjQzLoS6MonjIPegCv3pLgdLx0zXhp SUT19qg2LmX1sXTxLJBSJp5eev+x8B7H14taM8FpsAVGLccstjPuxOabdmNNaEvfSBL7GPtQ5Sil DTMdbxhtuFPlP+1p4tPC6A/85YQozqTKCgk28emo8UupTt28DZgfP5b7xpBbnrsA/2aRYpmV2Ay8 BOd8g4O+ZP0WZD9/vPddUDBYPpJiSulKe6uj15vsiiBY4D272VS0dMpwXOvmkKKS/ZAmarywk0hy bl2mb+GW456+N8CESWD4JIHABoXxVAaa0GdGEyL1lSEmw7jOU2h5UAhlhHqPudpSoaLJgqateP2C hWYGv/DwkR9bVpuO8k1ohfjJA4n0qgxfOkWU23sZgo6495KjMIIGtjCCBJ6gAwIBAgIRAKAMy8yb mZjs4jpw9HzBwFkwDQYJKoZIhvcNAQEFBQAwNzEUMBIGA1UECgwLVGVsaWFTb25lcmExHzAdBgNV BAMMFlRlbGlhU29uZXJhIFJvb3QgQ0EgdjEwHhcNMTQwNTI3MDc0NjIxWhcNMjQwNTI3MDc0NjIx WjA6MREwDwYDVQQKDAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBD QSB2MjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANq6U+tfSJZTn4k46qN13HgaeXXs MmGSWShc6A5IEyFboXMZW3lFHso+/6uO3ZilvB2ipZJhrhU+RL/va+5Chay/PZq9ZZeE9N03OsHf Ozlwk7uwojJ34tHLiX/yQoriI+b5DXxfIYXTFO5zlZLdaIxJwlLEQp0g4/zF6EGtodlpusaH07FA cLiIEeTMPRgXcn+8GoFOvtuVHNh/WHePlrupUgcI9/P54ITXvmZF6xcNBEjsu8yJm1VqqK0GXSgA mInJ4Ga8S6ME2wgSBRDolxAUbmfLQRrMvLC/tyXBvuLO8uChdzpIWt3QPtMYm2R2V1Um0zANhenI UwYCKNPq5/yHaS48jCsOBAU0TIhBnirnZmlEbC6ALqwzGAcQMaMD8LFf1oLlWLUQxEmI4YXqBXdP 5XnIcMdIEF5BtUBebzBJMMF9dDB2uj8BeoRPSYbpGl7irYUYFpq4TyocQ7qpHdYASC+NV8VTaTrF nHWqa/CGRdp3GHpkgxfOBvpamOK8udHQYQo2uA3YNd2+j7p4C3jkGG+Z6RrZOskPEwtaIHLxBiA1 41dhCy5EScOyNajrAXQupsDnvr2ib2ef+4nObPFvedPWIe57lyj0n3e1rTqTGIBIe9wjNnAA6Mqe aTS9HchPtBvOrah/cTWzXzGjwMz0P3UJqTQ2r5EAu12/W5kpAgMBAAGjggG4MIIBtDCBigYIKwYB BQUHAQEEfjB8MC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC50cnVzdC50ZWxpYXNvbmVyYS5jb20w SwYIKwYBBQUHMAKGP2h0dHA6Ly9yZXBvc2l0b3J5LnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxp YXNvbmVyYXJvb3RjYXYxLmNlcjASBgNVHRMBAf8ECDAGAQH/AgEAMFUGA1UdIAROMEwwSgYMKwYB BAGCDwIDAQECMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vcmVwb3NpdG9yeS50cnVzdC50ZWxpYXNv bmVyYS5jb20vQ1BTMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9jcmwtMy50cnVzdC50ZWxpYXNv bmVyYS5jb20vdGVsaWFzb25lcmFyb290Y2F2MS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsG AQUFBwMEMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUsQ3K1Ea3r4YCwy9vBsoOdnF/SzcwHwYD VR0jBBgwFoAU8I9ZOACz9Y+algzV6/p7qhfoExIwDQYJKoZIhvcNAQEFBQADggIBAG4HIGyvrHc9 kEKyYZtxJn9cv7S2dUxuUiegmAvUGHc+JGJyB2jyX7py9an8CsHAxg3BI3Ku9j0h7DJpXyfrlzmg 36XYkNS7Ot0A1UqdjGFrtnIISI+Zj3ywHZudmDF8ktdBihHAjuk47B/Kg/Z8JhUJ37GGx/KxiIiX g5HMTdOl6mlDbJaTIEGagdRcmH3u57r5snZ+qdVSg5UxWdhgS2+zPru/vDbPd+91zLTj9GejKXFJ 6fEAOLW1j2IjJ0cyDI67d1/OzFTwCK8wYbhopK2wJ9QTKDQuWRuGoyt2d6yzd7WoAS55JE0BIt+k XDJGbOaK42H2ifO6ERHbJiEr/oh4KzgdAes+GRjwlSaG2Z0va4Ss5lY6zfwVCEZYdZcjSDpKB0M5 tTQYQeO7QyQPOI6Gb4FXA9ko3sHvAPs4+Pq+UtWjp3y8sYr1vLCER9ePEsgLdCG27mUk9OAijkG6 n5oEGOIn+70F+qvKpmm52dZ8b7DELfbuuk0CrY4p0WxH3bBt6FJkPeZJIB6YNXAYHZi7RcdBjLJh +lawbIYTJFIcoWFHAl0g0/NYsjz3DLhZz4+CrJ6SQSYmp7qDhdJAWPiaq3C+qE/h2DZAJwoz9uHr ZHB8zsZ5JL8sUZ7zgqYmNMN+9PxzasrycTJn96Y63AIZdDq1kIHIw0vF4PBTVMZtMYICljCCApIC AQEwTjA6MREwDwYDVQQKDAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVh bCBDQSB2MgIQaMOcrhMSzJ9bT5CvjeS9KjAJBgUrDgMCGgUAoIIBHTAYBgkqhkiG9w0BCQMxCwYJ KoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNzExMTUwODUwMTNaMCMGCSqGSIb3DQEJBDEWBBSU zDAI/gbsRRq7un5JG1+/ceV3tzBdBgkrBgEEAYI3EAQxUDBOMDoxETAPBgNVBAoMCEVyaWNzc29u MSUwIwYDVQQDDBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYyAhBow5yuExLMn1tPkK+N5L0q MF8GCyqGSIb3DQEJEAILMVCgTjA6MREwDwYDVQQKDAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nz b24gTkwgSW5kaXZpZHVhbCBDQSB2MgIQaMOcrhMSzJ9bT5CvjeS9KjANBgkqhkiG9w0BAQEFAASC AQBtjpfDkdvEIDXvPLs7Ge5ibijPpxvWAEfJMNQHgkiSKmGHySve6IWwFjMrsD8RmbyPFMknJ39I IFCUjzDa+1OTF3ou27H0utyzW0JFubrA2zd3ZompIe+hxIoStGRUgoUyYuSiDYge9jo79gSRsvS3 FzuzW4UZL5suDmnvusB0dZ1e2HaQJ7LYbeIpuPitF7tokt5//qs8DI/bQCzrGd2PxSMcgHSAGUcZ UpAHnnM7/XLrtnKjJDYClmreV6gVkM+xa/rsFEx/ERf8MoNjcYrikA7LGlc/JBpaMTJ2VKHaXHNg 15ZOkwLFJveeywSXkoghjISa0/aMh30qsOCtwdXAAAAAAAAA --Apple-Mail=_9B8947BA-EC34-438D-8627-87A9ED8A20CD-- From nobody Wed Nov 15 03:14:15 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D84012711E for ; Wed, 15 Nov 2017 03:14:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9EMIyPAAYYdW for ; Wed, 15 Nov 2017 03:14:08 -0800 (PST) Received: from mail-out02.uio.no (mail-out02.uio.no [IPv6:2001:700:100:8210::71]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E0F231200FC for ; Wed, 15 Nov 2017 03:14:07 -0800 (PST) Received: from mail-mx04.uio.no ([129.240.10.25]) by mail-out02.uio.no with esmtp (Exim 4.82_1-5b7a7c0-XX) (envelope-from ) id 1eEvdu-000APd-AE; Wed, 15 Nov 2017 12:14:06 +0100 Received: from mail-ex03.exprod.uio.no ([129.240.52.6]) by mail-mx04.uio.no with esmtps (TLSv1.2:AES256-SHA:256) (Exim 4.82_1-5b7a7c0-XX) (envelope-from ) id 1eEvdr-000DMG-Cg; Wed, 15 Nov 2017 12:14:06 +0100 Received: from mail-ex02.exprod.uio.no (2001:700:100:52::5) by mail-ex03.exprod.uio.no (2001:700:100:52::6) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 15 Nov 2017 12:14:02 +0100 Received: from mail-ex02.exprod.uio.no ([fe80::114e:f446:7d7d:a2f]) by mail-ex02.exprod.uio.no ([fe80::114e:f446:7d7d:a2f%19]) with mapi id 15.00.1347.000; Wed, 15 Nov 2017 12:14:02 +0100 From: Naeem Khademi To: Lawrence Stewart CC: "tcpm@ietf.org Extensions" , "Bless, Roland (TM)" , Michael Welzl Thread-Topic: [tcpm] Review of draft-ietf-tcpm-alternativebackoff-ecn-02 Thread-Index: AQHTS+d0BLEXnPhOQ0SyTgbWWxRRQqMRtASAgAOpEoA= Date: Wed, 15 Nov 2017 11:14:02 +0000 Message-ID: <195D08F4-1311-4A91-B558-40D4370F8F00@ifi.uio.no> References: In-Reply-To: Accept-Language: en-GB, nb-NO, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3273) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [129.240.169.59] Content-Type: multipart/mixed; boundary="_004_195D08F413114A91B55840D4370F8F00ifiuiono_" MIME-Version: 1.0 X-UiO-SPF-Received: Received-SPF: neutral (mail-mx04.uio.no: 129.240.52.6 is neither permitted nor denied by domain of ifi.uio.no) client-ip=129.240.52.6; envelope-from=naeemk@ifi.uio.no; helo=mail-ex03.exprod.uio.no; X-UiO-Spam-info: not spam, SpamAssassin (score=-0.2, required=5.0, autolearn=disabled, AWL=-0.836, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.001, SPF_NEUTRAL=0.652, uiobl=NO, uiouri=NO) X-UiO-Scanned: CEF21019BC95613579A4A3FF71919D91E29AEA18 X-UiOonly: 0D2A3BEEBF7AC579EF5A4A84E58BD2C4A39306A6 Archived-At: Subject: Re: [tcpm] Review of draft-ietf-tcpm-alternativebackoff-ecn-02 X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Nov 2017 11:14:14 -0000 --_004_195D08F413114A91B55840D4370F8F00ifiuiono_ Content-Type: text/plain; charset="utf-8" Content-ID: <8DE18D8969629C4FB9ED6D68331674CC@mail.uio.no> Content-Transfer-Encoding: base64 SGkgTGF3cmVuY2UgDQoNClRoYW5rcyBmb3IgdGhlIGNvbW1lbnRzLiBJIGhhdmUgaW5jb3Jwb3Jh dGVkIHRoZW0gaW50byB0aGUgbmV3IGRyYWZ0ICgtMDQsIHVuLXN1Ym1pdHRlZCB5ZXQpIGF0dGFj aGVkIHRvIHRoaXMgZW1haWwgZm9yIHlvdXIgcmVmZXJlbmNlLiANCg0KUC5TLiBub3RlIHRoYXQg c29tZSBvZiBSb2xhbmTigJlzIGNvbW1lbnRzIHRoYXQgd2VyZW7igJl0IGZ1bGx5IGFkZHJlc3Nl ZCBpbiAtMDMgYXJlIGFsc28gYWRkcmVzc2VkIGhlcmUuDQoNCg0K --_004_195D08F413114A91B55840D4370F8F00ifiuiono_ Content-Type: text/plain; name="draft-ietf-tcpm-alternativebackoff-ecn-02-lstewart-naeem-replies.txt" Content-Description: draft-ietf-tcpm-alternativebackoff-ecn-02-lstewart-naeem-replies.txt Content-Disposition: attachment; filename="draft-ietf-tcpm-alternativebackoff-ecn-02-lstewart-naeem-replies.txt"; size=38172; creation-date="Wed, 15 Nov 2017 11:14:02 GMT"; modification-date="Wed, 15 Nov 2017 11:14:02 GMT" Content-ID: <99F935ED67304C4DAD6BF98F03263A76@mail.uio.no> Content-Transfer-Encoding: base64 DQoNCg0KDQpOZXR3b3JrIFdvcmtpbmcgR3JvdXAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIE4uIEtoYWRlbWkNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBXZWx6bA0KSW50ZW5kZWQgc3RhdHVz OiBFeHBlcmltZW50YWwgICAgICAgICAgICAgICAgICAgICAgICAgVW5pdmVyc2l0eSBvZiBPc2xv DQpFeHBpcmVzOiBBcHJpbCAyMywgMjAxOCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgRy4gQXJtaXRhZ2UNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg U3dpbmJ1cm5lIFVuaXZlcnNpdHkgb2YgVGVjaG5vbG9neQ0KICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRy4gRmFpcmh1cnN0DQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFVuaXZlcnNpdHkg b2YgQWJlcmRlZW4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgT2N0b2JlciAyMCwgMjAxNw0KDQoNCiAgICAgICAgICAgICAgICAgVENQIEFs dGVybmF0aXZlIEJhY2tvZmYgd2l0aCBFQ04gKEFCRSkNCiAgICAgICAgICAgICAgIGRyYWZ0LWll dGYtdGNwbS1hbHRlcm5hdGl2ZWJhY2tvZmYtZWNuLTAyDQo9PT1MQVM9PT0NCi0gRHJvcCAiVENQ IiBmcm9tIHRpdGxlIGdpdmVuIHRoYXQgeW91IGFzc2VydCBBQkUgaXMgYXBwbGljYWJsZSB0byBh bGwNCiAgRUNOLWNhcGFibGUgY29uZ2VzdGlvbiBjb250cm9sbGVkIHRyYW5zcG9ydHM/DQo9PT09 PT09PT0NCg0KPT09TktIPT09DQotIFRoaXMgZHJhZnQgb25seSB0YXJnZXRzIFRDUC4gSXQgaG93 ZXZlciBzYXlzIHRoYXQgaXQgaXMgcG9zc2libGUgdG8gdXNlIHRoaXMgc2NoZW1lIA0KICBmb3Ig b3RoZXIgdHJhbnNwb3J0IHByb3RvY29scyBidXQgdGhpcyBpc27igJl0IGluIHRoZSBzY29wZSBv ZiB0aGlzIGRyYWZ0IG5vciBpdCByZWNvbW1lbmRzIA0KICBhbnkgYmV0YSB2YWx1ZSBmb3IgdGhl bS4gVGhpcyBpcyBsZWZ0IHRvIGFueSBmdXR1cmUgZHJhZnQvUkZDIHRoYXQgc3BlY2lmaWVzIHRo ZSBjb25nZXN0aW9uIA0KICBjb250cm9sIHJlYWN0aW9uIG9mIHN1Y2ggcHJvdG9jb2xzIChlLmcu LCBTQ1RQKS4gaXQgaXMgaG93ZXZlciBuYXR1cmFsIHRvIGFzc3VtZSB0aGF0IHNvbWUgDQogIChl LmcuLCBTQ1RQKSB3aWxsIGxpa2VseSB0byBmb2xsb3cgdGhlIGNvbmdlc3Rpb24gY29udHJvbCBp biBUQ1AuICANCj09PT09PT09PQ0KDQoNCkFic3RyYWN0DQoNCiAgIFJlY2VudCBBY3RpdmUgUXVl dWUgTWFuYWdlbWVudCAoQVFNKSBtZWNoYW5pc21zIGluc3RhbnRpYXRlIHNoYWxsb3cNCiAgIGJ1 ZmZlcnMgd2l0aCBidXJzdCB0b2xlcmFuY2UgdG8gbWluaW1pc2UgdGhlIHRpbWUgdGhhdCBwYWNr ZXRzIHNwZW5kDQogICBlbnF1ZXVlZCBhdCBhIGJvdHRsZW5lY2suICBIb3dldmVyLCBzaGFsbG93 IGJ1ZmZlcmluZyBjYW4gY2F1c2UNCiAgIG5vdGljZWFibGUgcGVyZm9ybWFuY2UgZGVncmFkYXRp b24gd2hlbiBUQ1AgaXMgdXNlZCBvdmVyIGEgbmV0d29yaw0KICAgcGF0aCB3aXRoIGEgbGFyZ2Ug YmFuZHdpZHRoLWRlbGF5LXByb2R1Y3QuICBUcmFkaXRpb25hbCBtZXRob2RzIHJlbHkNCj09TEFT PT0gVHJhZGl0aW9uYWwgbWV0aG9kcyBvZiB3aGF0PyA9PT09PT09DQo9PT1OS0g9PT0NClRoaXMg aXMgZml4ZWQgaW4gLTAzIGJhc2VkIG9uIHN1Z2dlc3RlZCB0ZXh0IGZyb20gUm9sYW5kLiAgDQo9 PT09PT09PT0NCiAgIG9uIGRldGVjdGluZyBuZXR3b3JrIGNvbmdlc3Rpb24gdGhyb3VnaCByZXBv cnRlZCBsb3NzIG9mIHRyYW5zcG9ydA0KPT1MQVM9PQ0KLSBzL2RldGVjdGluZy9pbmZlcnJpbmcv DQotICJ0aHJvdWdoIHJlcG9ydGVkLi4uIiAtPiAiYnkgd2F5IG9mIGluZmVycmVkIHBhY2tldCBs b3NzIi4NCj09PT09PT0NCj09PU5LSD09PQ0KLSBmaXhlZC4gY2hhbmdlZCBhbGwgZGV0ZWN0aW9u cyB0byBpbmZlciBhbmQgYWxzbyBjaGFuZ2VkIGFsbCDigJxsb3Nz4oCdIG9yIOKAnHBhY2tldCBs b3Nz4oCdIHRvIA0KICDigJxpbmZlcnJlZCBwYWNrZXQgbG9zc+KAnSB3aGVyZSBhcHBsaWNhYmxl LiANCi0gYWxzbyBmaXhlZCBiYXNlZCBvbiB0aGUgc3VnZ2VzdGVkIHRleHQgZnJvbSBSb2xhbmQg aW4gLTAzLiAgDQo9PT09PT09PT0NCiAgIHBhY2tldHMuICBFeHBsaWNpdCBDb25nZXN0aW9uIE5v dGlmaWNhdGlvbiAoRUNOKSBpbnN0ZWFkIGFsbG93cyBhDQogICByb3V0ZXIgdG8gZGlyZWN0bHkg c2lnbmFsIGluY2lwaWVudCBjb25nZXN0aW9uLiAgQSBzZW5kaW5nIGVuZHBvaW50DQogICBjYW4g ZGlzdGluZ3Vpc2ggd2hlbiBjb25nZXN0aW9uIGlzIHNpZ25hbGxlZCB2aWEgRUNOLCByYXRoZXIg dGhhbiBieQ0KICAgcGFja2V0IGxvc3MuICBBbiBFQ04gc2lnbmFsIGluZGljYXRlcyB0aGF0IGFu IEFRTSBtZWNoYW5pc20gaGFzIGRvbmUNCiAgIGl0cyBqb2IsIGFuZCB0aGVyZWZvcmUgdGhlIGJv dHRsZW5lY2sgbmV0d29yayBxdWV1ZSBpcyBsaWtlbHkgdG8gYmUNCiAgIHNoYWxsb3cuICBUaGlz IGRvY3VtZW50IHRoZXJlZm9yZSBwcm9wb3NlcyBhbiB1cGRhdGUgdG8gdGhlIFRDUA0KICAgc2Vu ZGVyLXNpZGUgRUNOIHJlYWN0aW9uIGluIGNvbmdlc3Rpb24gYXZvaWRhbmNlIHRvIHJlZHVjZSB0 aGUNCiAgIENvbmdlc3Rpb24gV2luZG93IChjd25kKSBieSBhIHNtYWxsZXIgYW1vdW50IHRoYW4g dGhlIGNvbmdlc3Rpb24NCiAgIGNvbnRyb2wgYWxnb3JpdGhtJ3MgcmVhY3Rpb24gdG8gbG9zcy4g IFRoaXMgZG9jdW1lbnQgYWxzbyByZWNvbW1lbmRzDQogICB0aGlzIGFwcHJvYWNoIHRvIGJlIGFk b3B0ZWQgYnkgYW55IG90aGVyIHRyYW5zcG9ydCBwcm90b2NvbCB0aGF0DQogICBpbXBsZW1lbnRz IGEgY29uZ2VzdGlvbiBjb250cm9sIHJlZHVjdGlvbiB0byBhbiBFQ04gY29uZ2VzdGlvbg0KICAg c2lnbmFsLg0KPT1MQVM9PQ0KLSBQZXJoYXBzIHJlcGxhY2UgZnJvbSAiVGhpcyBkb2N1bWVudCB0 aGVyZWZvcmUuLiIgdG8gZW5kIG9mIHBhcmEgd2l0aDoNCiAgICAgICJUaGlzIGRvY3VtZW50IHRo ZXJlZm9yZSBwcm9wb3NlcyB0aGF0IHRoZSBzZW5kZXItc2lkZSBjb25nZXN0aW9uDQogICAgICB3 aW5kb3cgKGN3bmQpIHJlZHVjdGlvbiBhcHBsaWVkIGJ5IEVDTi1jYXBhYmxlLCBjb25nZXN0aW9u DQogICAgICBjb250cm9sbGVkIHRyYW5zcG9ydCBwcm90b2NvbHMgaW4gcmVzcG9uc2UgdG8gRUNO LXNpZ25hbGxlZA0KICAgICAgY29uZ2VzdGlvbiBiZSBsZXNzIHRoYW4gdGhlIHJlZHVjdGlvbiBh cHBsaWVkIGluIHJlc3BvbnNlIHRvDQogICAgICBpbmZlcnJlZCBwYWNrZXQgbG9zcy4iDQo9PT09 PT09DQoNCj09PU5LSD09PQ0KLSBhZ2FpbiwgdGhlIHNjb3BlIG9mIHRoaXMgZG9jdW1lbnQgaXMg bGltaXRlZCB0byBUQ1Agb25seSBhbmQgbm90IG90aGVyIHRyYW5zcG9ydCBwcm90b2NvbHMuIGhv d2V2ZXIsIGFkZGVkIOKAnGluZmVycmVkIHBhY2tldCBsb3Nz4oCdLiANCj09PT09PT09PQ0KDQpT dGF0dXMgb2YgVGhpcyBNZW1vDQoNCiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgaXMgc3VibWl0dGVk IGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0aGUNCiAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4IGFu ZCBCQ1AgNzkuDQoNCiAgIEludGVybmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1bWVudHMgb2Yg dGhlIEludGVybmV0IEVuZ2luZWVyaW5nDQogICBUYXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhh dCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJpYnV0ZQ0KICAgd29ya2luZyBkb2N1bWVudHMg YXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC0NCiAgIERy YWZ0cyBpcyBhdCBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJyZW50Ly4N Cg0KICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4 aW11bSBvZiBzaXggbW9udGhzDQogICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBv YnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueQ0KICAgdGltZS4gIEl0IGlzIGluYXBw cm9wcmlhdGUgdG8gdXNlIEludGVybmV0LURyYWZ0cyBhcyByZWZlcmVuY2UNCiAgIG1hdGVyaWFs IG9yIHRvIGNpdGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGluIHByb2dyZXNzLiINCg0KDQoN CktoYWRlbWksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEFwcmlsIDIzLCAyMDE4ICAgICAgICAg ICAgICAgICBbUGFnZSAxXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICBB QkUgICAgICAgICAgICAgICAgICAgICAgT2N0b2JlciAyMDE3DQoNCg0KICAgVGhpcyBJbnRlcm5l dC1EcmFmdCB3aWxsIGV4cGlyZSBvbiBBcHJpbCAyMywgMjAxOC4NCg0KQ29weXJpZ2h0IE5vdGlj ZQ0KDQogICBDb3B5cmlnaHQgKGMpIDIwMTcgSUVURiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRl bnRpZmllZCBhcyB0aGUNCiAgIGRvY3VtZW50IGF1dGhvcnMuICBBbGwgcmlnaHRzIHJlc2VydmVk Lg0KDQogICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3QgdG8gQkNQIDc4IGFuZCB0aGUgSUVURiBU cnVzdCdzIExlZ2FsDQogICBQcm92aXNpb25zIFJlbGF0aW5nIHRvIElFVEYgRG9jdW1lbnRzDQog ICAoaHR0cHM6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRo ZSBkYXRlIG9mDQogICBwdWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50LiAgUGxlYXNlIHJldmll dyB0aGVzZSBkb2N1bWVudHMNCiAgIGNhcmVmdWxseSwgYXMgdGhleSBkZXNjcmliZSB5b3VyIHJp Z2h0cyBhbmQgcmVzdHJpY3Rpb25zIHdpdGggcmVzcGVjdA0KICAgdG8gdGhpcyBkb2N1bWVudC4g IENvZGUgQ29tcG9uZW50cyBleHRyYWN0ZWQgZnJvbSB0aGlzIGRvY3VtZW50IG11c3QNCiAgIGlu Y2x1ZGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZSB0ZXh0IGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9u IDQuZSBvZg0KICAgdGhlIFRydXN0IExlZ2FsIFByb3Zpc2lvbnMgYW5kIGFyZSBwcm92aWRlZCB3 aXRob3V0IHdhcnJhbnR5IGFzDQogICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExp Y2Vuc2UuDQoNClRhYmxlIG9mIENvbnRlbnRzDQoNCiAgIDEuICBEZWZpbml0aW9ucyAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMg0KICAgMi4gIElu dHJvZHVjdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gICAyDQogICAzLiAgU3BlY2lmaWNhdGlvbiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgIDQNCiAgIDQuICBEaXNjdXNzaW9uICAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNA0KICAgICA0LjEuICBXaHkg VXNlIEVDTiB0byBWYXJ5IHRoZSBEZWdyZWUgb2YgQmFja29mZj8gIC4gLiAuIC4gLiAuIC4gICA0 DQogICAgIDQuMi4gIEZvY3VzIG9uIEVDTiBhcyBEZWZpbmVkIGluIFJGQzMxNjggIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgIDUNCiAgICAgNC4zLiAgRGlzY3Vzc2lvbjogQ2hvaWNlIG9mIEFCRSBN dWx0aXBsaWVyICAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNQ0KICAgNS4gIFN0YXR1cyBvZiB0aGUg VXBkYXRlICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA3DQogICA2 LiAgQWNrbm93bGVkZ2VtZW50cyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgIDcNCiAgIDcuICBJQU5BIENvbnNpZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgOA0KICAgOC4gIEltcGxlbWVudGF0aW9uIFN0YXR1 cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA4DQogICA5LiAgU2Vj dXJpdHkgQ29uc2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgIDgNCiAgIDEwLiBSZXZpc2lvbiBJbmZvcm1hdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICAgOA0KICAgMTEuIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA5DQogICAgIDExLjEuICBOb3Jt YXRpdmUgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDkN CiAgICAgMTEuMi4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICAxMA0KICAgQXV0aG9ycycgQWRkcmVzc2VzICAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDExDQoNCjEuICBEZWZpbml0aW9ucw0KDQog ICBUaGUga2V5IHdvcmRzICJNVVNUIiwgIk1VU1QgTk9UIiwgIlJFUVVJUkVEIiwgIlNIQUxMIiwg IlNIQUxMIE5PVCIsDQogICAiU0hPVUxEIiwgIlNIT1VMRCBOT1QiLCAiUkVDT01NRU5ERUQiLCAi TUFZIiwgYW5kICJPUFRJT05BTCIgaW4gdGhpcw0KICAgZG9jdW1lbnQgYXJlIHRvIGJlIGludGVy cHJldGVkIGFzIGRlc2NyaWJlZCBpbiBSRkMgMjExOSBbUkZDMjExOV0uDQoNCjIuICBJbnRyb2R1 Y3Rpb24NCg0KICAgRXhwbGljaXQgQ29uZ2VzdGlvbiBOb3RpZmljYXRpb24gKEVDTikgW1JGQzMx NjhdIG1ha2VzIGl0IHBvc3NpYmxlDQogICBmb3IgYW4gQWN0aXZlIFF1ZXVlIE1hbmFnZW1lbnQg KEFRTSkgbWVjaGFuaXNtIHRvIHNpZ25hbCB0aGUgcHJlc2VuY2UNCiAgIG9mIGluY2lwaWVudCBj b25nZXN0aW9uIHdpdGhvdXQgaW5jdXJyaW5nIHBhY2tldCBsb3NzLiAgVGhpcyBsZXRzIHRoZQ0K PT1MQVM9PQ0KLSBzL3dpdGhvdXQgaW5jdXJyaW5nL3ByaW9yIHRvIHRoZSBvbnNldCBvZi8NCj09 PT09PT0NCj09PU5LSD09PQ0KLSBTYXlpbmcg4oCccHJpb3IgdG8gdGhlIG9uc2V0IG9m4oCdIG1p Z2h0IGltcGx5IA0KICB0aGF0IHRoZSBFQ04gbWFya2luZyBpcyBkb25lIGF0IGEgZGlmZmVyZW50 IHRocmVzaG9sZCANCiAgdGhhbiBwYWNrZXQgbG9zcyB0aHJlc2hvbGQsIHdoaWNoIG1heSBvciBt YXkgbm90IGJlIHRydWUuIA0KICBieSBkZWZhdWx0IG1vc3QgQVFNcyB3b3VsZCBDRS1tYXJrIHdo ZXJlIHRoZXkgd291bGQgb3RoZXJ3aXNlIGRyb3AsIHNvIA0KICDigJxwcmlvciB0byB0aGUgb25z ZXQgb2bigJ0gZG9lcyBub3QgcmVhbGx5IGFwcGx5IGhlcmUgSSB0aGluay4gICANCj09PT09PT09 PQ0KDQoNCg0KDQpLaGFkZW1pLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBBcHJpbCAyMywgMjAx OCAgICAgICAgICAgICAgICAgW1BhZ2UgMl0NCgwNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAg ICAgICAgICAgQUJFICAgICAgICAgICAgICAgICAgICAgIE9jdG9iZXIgMjAxNw0KDQoNCiAgIG5l dHdvcmsgZGVsaXZlciBzb21lIHBhY2tldHMgdG8gYW4gYXBwbGljYXRpb24gdGhhdCB3b3VsZCBo YXZlIGJlZW4NCiAgIGRyb3BwZWQgaWYgdGhlIGFwcGxpY2F0aW9uIG9yIHRyYW5zcG9ydCBkaWQg bm90IHN1cHBvcnQgRUNOLiAgVGhpcw0KICAgcGFja2V0IGxvc3MgcmVkdWN0aW9uIGlzIHRoZSBt b3N0IG9idmlvdXMgYmVuZWZpdCBvZiBFQ04sIGJ1dCBpdCBpcw0KICAgb2Z0ZW4gcmVsYXRpdmVs eSBtb2Rlc3QuICBUaGVyZSBhcmUgYWxzbyBzaWduaWZpY2FudCBvdGhlciBiZW5lZml0cw0KICAg ZnJvbSBkZXBsb3lpbmcgRUNOIFtSRkM4MDg3XSwgaW5jbHVkaW5nIHJlZHVjZWQgZW5kLXRvLWVu ZCBuZXR3b3JrDQogICBsYXRlbmN5Lg0KDQogICBUaGUgcnVsZXMgZm9yIEVDTiB3ZXJlIG9yaWdp bmFsbHkgd3JpdHRlbiB0byBiZSB2ZXJ5IGNvbnNlcnZhdGl2ZSwNCiAgIGFuZCByZXF1aXJlZCB0 aGUgY29uZ2VzdGlvbiBjb250cm9sIGFsZ29yaXRobXMgb2YgRUNOLWNhcGFibGUNCiAgIHRyYW5z cG9ydCBwcm90b2NvbHMgdG8gdHJlYXQgRUNOIGNvbmdlc3Rpb24gc2lnbmFscyBleGFjdGx5IHRo ZSBzYW1lDQogICBhcyB0aGV5IHdvdWxkIHRyZWF0IGEgcGFja2V0IGxvc3MgW1JGQzMxNjhdLg0K DQogICBSZXNlYXJjaCBoYXMgZGVtb25zdHJhdGVkIHRoZSBiZW5lZml0cyBvZiByZWR1Y2luZyBu ZXR3b3JrIGRlbGF5cyBkdWUNCiAgIHRvIGV4Y2Vzc2l2ZSBidWZmZXJpbmcgW0JVRkZFUkJMT0FU XTsgdGhpcyBoYXMgbGVkIHRvIHRoZSBjcmVhdGlvbiBvZg0KPT1MQVM9PSBDYW4gd2UgZG8gYmV0 dGVyIHRoYW4gdGhlIGN1cnJlbnQgW0JVRkZFUkJMT0FUXSByZWZlcmVuY2Ugd2hpY2ggcG9pbnRz IHRvIGEgd2lraT8gPT09PT09PQ0KPT09TktIPT09DQotIGNoYW5nZWQgdGhlIGNpdGF0aW9uIHRv IHRoZSBBUU0gUXVldWUgcGFwZXIgb24gYnVmZmVyYmxvYXQuIA0KPT09PT09PT09DQogICBuZXcg QVFNIG1lY2hhbmlzbXMgbGlrZSBQSUUgW1JGQzgwMzNdIGFuZCBDb0RlbCBbQ09ERUwyMDEyXQ0K PT1MQVM9PSBQZXJoYXBzIFtDT0RFTDIwMTIsSS1ELkNPREVMXSA9PT09PT09DQo9PT1OS0g9PT0N Ci0gTm90IHN1cmUgaG93IHRvIGRvIHRoaXMgaW4gdGhlIEktRCBYTUwgZm9ybWF0IGJ1dCBzaG91 bGQgYmUgT0sgdG8gaGF2ZSB0aGVtIHNlcGFyYXRlIHRvIGZvciBwYXJzaW5nLiANCj09PT09PT09 PQ0KICAgW0ktRC5Db0RlbF0sIHdoaWNoIGF2b2lkIGNhdXNpbmcgYmxvYXRlZCBxdWV1ZXMgdGhh dCBhcmUgY29tbW9uIHdpdGgNCiAgIGEgc2ltcGxlIHRhaWwtZHJvcCBiZWhhdmlvdXIgKGFsc28g a25vd24gYXMgYSBGaXJzdC1JbiBGaXJzdC1PdXQsDQogICBGSUZPLCBxdWV1ZSkuDQo9PUxBUz09 DQotIEFRTXMvUGFzc2l2ZSBxdWV1ZSBzY2hlbWVzIGRvbid0ICJjYXVzZSIgcXVldWUgYmxvYXQu Li4gbmV0d29yayBob3N0cyBkby4NCi0gQWJvdmUgY29uZmxhdGVzIHF1ZXVlIGNhcGFjaXR5IChp LmUuIG51bSBzbG90cy9ieXRlcyksIHNjaGVkdWxpbmcvc2VydmljZQ0KICBwYXJhZGlnbSAoaS5l LiBob3cgcGFja2V0cyBhcmUgZHJhd24gZnJvbSB0aGUgcXVldWUpIGFuZCBkcm9wIGNyaXRlcmlh DQogIChpLmUuIGJhc2lzIGZvciBkcm9wcGluZyBwYWNrZXRzKSBlLmcuIHlvdSBjYW4gaGF2ZSBz bWFsbCBjYXBhY2l0eQ0KICBub24tYmxvYXR5IEZJRk8gcXVldWVzLCBhbmQgdGFpbCBkcm9wIHdp dGggbm9uLUZJRk8gc2NoZWR1bGVkIHF1ZXVlcy4NCi0gTWF5YmUgbmVlZCB0byByZWhhc2ggKG9y IGF0IGxlYXN0IG1lbnRpb24gKyBjaXRlKSBjb25jZXB0IG9mICJnb29kIiB2cyAiYmFkIiBxdWV1 ZT8NCj09PT09PT0NCj09PU5LSD09PQ0KLSBUaGlzIGhhcyBub3cgY2hhbmdlZCB0bzogDQogICB0 aGlzIGhhcyBsZWQgdG8gdGhlIGNyZWF0aW9uIG9mIG5ldyBBUU0gbWVjaGFuaXNtcyBsaWtlIFBJ RSBbUkZDODAzM10gYW5kIENvRGVsDQogICBbQ09ERUwyMDEyXVtJLUQuQ29EZWxdLCB3aGljaCBw cmV2ZW50IGJsb2F0ZWQgcXVldWVzIHRoYXQgYXJlIGNvbW1vbg0KICAgd2l0aCB1bm1hbmFnZWQg YW5kIGV4Y2Vzc2l2ZWx5IGxhcmdlIGJ1ZmZlcnMgZGVwbG95ZWQgYWNyb3NzIHRoZQ0KICAgSW50 ZXJuZXQgW0JVRkZFUkJMT0FUXS4NCj09PT09PT09PQ0KDQogICBUaGVzZSBBUU0gbWVjaGFuaXNt cyBpbnN0YW50aWF0ZSBzaG9ydCBxdWV1ZXMgdGhhdCBhcmUgZGVzaWduZWQgdG8NCiAgIHRvbGVy YXRlIHBhY2tldCBidXJzdHMuICBIb3dldmVyLCBjb25nZXN0aW9uIGNvbnRyb2wgbWVjaGFuaXNt cw0KICAgY2Fubm90IGFsd2F5cyB1dGlsaXNlIGEgYm90dGxlbmVjayBsaW5rIHdlbGwgd2hlcmUg dGhlcmUgYXJlIHNob3J0DQogICBxdWV1ZXMuICBGb3IgZXhhbXBsZSwgdG8gYWxsb3cgYSBzaW5n bGUgVENQIGNvbm5lY3Rpb24gdG8gZnVsbHkNCiAgIHV0aWxpc2UgYSBuZXR3b3JrIHBhdGgsIHRo ZSBxdWV1ZSBhdCB0aGUgYm90dGxlbmVjayBsaW5rIG11c3QgYmUgYWJsZQ0KICAgdG8gY29tcGVu c2F0ZSBmb3IgVENQIGhhbHZpbmcgdGhlICJjd25kIiBhbmQgInNzdGhyZXNoIiB2YXJpYWJsZXMg aW4NCj09TEFTPT0NCi0gIkNvbXBlbnNhdGUiIGlzIG5vdCBxdWl0ZSByaWdodCwgYW5kIHNzdGhy ZXNoIGRvZXNuJ3QgcmVhbGx5IGhhdmUgYW55DQogIHJlbGV2YW5jZSBoZXJlLi4uIHBlcmhhcHMg dGhpcyBhbmQgbmV4dCBzZW50ZW5jZSBjb3VsZCBiZSByZXBsYWNlZCB3aXRoOg0KICAgIEZvciBl eGFtcGxlLCBhIFRDUCBzZW5kZXIgbXVzdCBiZSBhYmxlIHRvIGJ1ZmZlciBhdCBsZWFzdCBhbg0K ICAgIGVuZC10by1lbmQgYmFuZHdpZHRoLWRlbGF5IHByb2R1Y3QgKEJEUCkgd29ydGggb2YgZGF0 YSBhdCB0aGUgYm90dGxlbmVjaw0KICAgIHF1ZXVlIGlmIGl0IGlzIHRvIG1haW50YWluIGZ1bGwg cGF0aCB1dGlsaXNhdGlvbiBpbiB0aGUgZmFjZSBvZg0KICAgIGxvc3MtaW5kdWNlZCBoYWx2aW5n IG9mIGN3bmQuDQo9PT09PT09DQoNCj09PU5LSD09PQ0KTm93IGNoYW5nZWQgdG86IA0KICAgRm9y IGV4YW1wbGUsIGEgVENQIHNlbmRlciBtdXN0IGJlIGFibGUgdG8gc3RvcmUgYXQgbGVhc3QgYW4N CiAgIGVuZC10by1lbmQgYmFuZHdpZHRoLWRlbGF5IHByb2R1Y3QgKEJEUCkgd29ydGggb2YgZGF0 YSBhdCB0aGUNCiAgIGJvdHRsZW5lY2sgYnVmZmVyIGlmIGl0IGlzIHRvIG1haW50YWluIGZ1bGwg cGF0aCB1dGlsaXNhdGlvbiBpbiB0aGUNCiAgIGZhY2Ugb2YgbG9zcy1pbmR1Y2VkIGhhbHZpbmcg b2YgY3duZCBbUkZDNTY4MV0s4oCmDQo9PT09PT09PT0NCiAgIHJlc3BvbnNlIHRvIGEgbG9zdCBw YWNrZXQgW1JGQzU2ODFdLiAgVGhpcyByZXF1aXJlcyB0aGUgYm90dGxlbmVjaw0KICAgcXVldWUg dG8gYmUgYWJsZSB0byBzdG9yZSBhdCBsZWFzdCBhbiBlbmQtdG8tZW5kIGJhbmR3aWR0aC1kZWxh eQ0KICAgcHJvZHVjdCAoQkRQKSBvZiBkYXRhLCB3aGljaCBlZmZlY3RpdmVseSBkb3VibGVzIGJv dGggdGhlIGFtb3VudCBvZg0KICAgZGF0YSB0aGF0IGNhbiBiZSBpbiBmbGlnaHQgYW5kIHRoZSBy b3VuZC10cmlwIHRpbWUgKFJUVCkgZXhwZXJpZW5jZQ0KPT1MQVM9PSAtPiAiLi4uIGFuZCB0aGUg cGF0aCdzIGVmZmVjdGl2ZSBSVFQiPyA9PT09PT09IA0KDQo9PT1OS0g9PT0NCk5vdyBjaGFuZ2Vk IHRvOiANCiAgIHdoaWNoIGVmZmVjdGl2ZWx5IGRvdWJsZXMgdGhlIGFtb3VudCBvZiBkYXRhIHRo YXQgY2FuIGJlIGluIGZsaWdodCwgdGhlIG1heGltdW0gcm91bmQtDQogICB0cmlwIHRpbWUgKFJU VCkgZXhwZXJpZW5jZSwgYW5kIHRoZSBwYXRoJ3MgZWZmZWN0aXZlIFJUVCB1c2luZyB0aGUNCiAg IG5ldHdvcmsgcGF0aC4NCj09PT09PT09PQ0KDQogICB1c2luZyB0aGUgbmV0d29yayBwYXRoLg0K DQogICBNb2Rlcm4gQVFNIG1lY2hhbmlzbXMgY2FuIHVzZSBFQ04gdG8gc2lnbmFsIHRoZSBlYXJs eSBzaWducyBvZg0KICAgaW1wZW5kaW5nIHF1ZXVlIGJ1aWxkdXAgbG9uZyBiZWZvcmUgYSB0YWls LWRyb3AgcXVldWUgd291bGQgYmUgZm9yY2VkDQogICB0byByZXNvcnQgdG8gZHJvcHBpbmcgcGFj a2V0cy4gIEl0IGlzIHRoZXJlZm9yZSBhcHByb3ByaWF0ZSBmb3IgdGhlDQogICB0cmFuc3BvcnQg cHJvdG9jb2wgY29uZ2VzdGlvbiBjb250cm9sIGFsZ29yaXRobSB0byBoYXZlIGEgbW9yZQ0KICAg bWVhc3VyZWQgcmVzcG9uc2Ugd2hlbiBhbiBlYXJseS13YXJuaW5nIHNpZ25hbCBvZiBjb25nZXN0 aW9uIGlzDQogICByZWNlaXZlZCBpbiB0aGUgZm9ybSBvZiBhbiBFQ04gQ0UtbWFya2VkIHBhY2tl dC4gIFJlY29nbml6aW5nIHRoZXNlDQogICBjaGFuZ2VzIGluIG1vZGVybiBBUU0gcHJhY3RpY2Vz LCBtb3JlIHJlY2VudCBydWxlcyBoYXZlIHJlbGF4ZWQgdGhlDQogICBzdHJpY3QgcmVxdWlyZW1l bnQgdGhhdCBFQ04gc2lnbmFscyBiZSB0cmVhdGVkIGlkZW50aWNhbGx5IHRvIHBhY2tldA0KICAg bG9zcyBbSS1ELkVDTi1leHBdLiAgRm9sbG93aW5nIHRoZXNlIG5ld2VyLCBtb3JlIGZsZXhpYmxl IHJ1bGVzLCB0aGlzDQogICBkb2N1bWVudCBkZWZpbmVzIGEgbmV3IHNlbmRlci1zaWRlLW9ubHkg Y29uZ2VzdGlvbiBjb250cm9sIHJlc3BvbnNlLA0KICAgY2FsbGVkICJBQkUiIChBbHRlcm5hdGl2 ZSBCYWNrb2ZmIHdpdGggRUNOKS4gIEFCRSBpbXByb3ZlcyB0aGUNCiAgIHBlcmZvcm1hbmNlIHdo ZW4gcm91dGVycyB1c2Ugc2hhbGxvdyBidWZmZXJlZCBBUU0gbWVjaGFuaXNtcy4NCj09TEFTPT0N Ci0gInRoZSBwZXJmb3JtYW5jZSIgLT4gIlRDUCdzIGF2ZXJhZ2UgdGhyb3VnaHB1dCINCj09PT09 PT0NCg0KPT09TktIPT09DQpGaXhlZC4gDQo9PT09PT09PT0NCg0KDQoNCg0KDQpLaGFkZW1pLCBl dCBhbC4gICAgICAgICAgRXhwaXJlcyBBcHJpbCAyMywgMjAxOCAgICAgICAgICAgICAgICAgW1Bh Z2UgM10NCgwNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICAgQUJFICAgICAgICAg ICAgICAgICAgICAgIE9jdG9iZXIgMjAxNw0KDQoNCjMuICBTcGVjaWZpY2F0aW9uDQoNCiAgIFRo aXMgc3BlY2lmaWNhdGlvbiBkZXNjcmliZXMgYW4gdXBkYXRlIHRvIHRoZSBjb25nZXN0aW9uIGNv bnRyb2wNCiAgIGFsZ29yaXRobSBvZiBhbiBFQ04tY2FwYWJsZSBUQ1AgdHJhbnNwb3J0IHByb3Rv Y29sLiAgSXQgYWxsb3dzIGEgVENQDQogICBzdGFjayB0byB1cGRhdGUgdGhlIFRDUCBzZW5kZXIg cmVzcG9uc2Ugd2hlbiBpdCByZWNlaXZlcyBmZWVkYmFjaw0KICAgaW5kaWNhdGluZyByZWNlcHRp b24gb2YgYSBDRS1tYXJrZWQgcGFja2V0LiAgSXQgUkVDT01NRU5EUyB0aGF0IGEgVENQDQogICBz ZW5kZXIgbXVsdGlwbGllcyB0aGUgY3duZCBieSAwLjggYW5kIHJlZHVjZXMgdGhlIHNsb3cgc3Rh cnQNCiAgIHRocmVzaG9sZCAoc3N0aHJlc2gpIGluIGNvbmdlc3Rpb24gYXZvaWRhbmNlIGZvbGxv d2luZyByZWNlcHRpb24gb2YgYQ0KICAgVENQIHNlZ21lbnQgdGhhdCBzZXRzIHRoZSBFQ04tRWNo byBmbGFnIChkZWZpbmVkIGluIFtSRkMzMTY4XSkuDQogICBXaGlsZSB0aGlzIHNwZWNpZmljYXRp b24gY29uY2VybnMgVENQLCBvdGhlciB0cmFuc3BvcnRzIGFsc28gc3VwcG9ydA0KICAgYSBwZXIt UlRUIHJlc3BvbnNlIHRvIEVDTi4gIFRoZSBtZXRob2QgZGVmaW5lZCBpbiB0aGlzIGRvY3VtZW50 IGlzDQogICBhbHNvIGFwcGxpY2FibGUgZm9yIHN1Y2ggdHJhbnNwb3J0cy4NCg0KPT1MQVM9PQ0K LSBRdWl0ZSBmbHVmZnkuLi4gcGVyaGFwcyBzb21ldGhpbmcgYWxvbmcgdGhlIGxpbmVzIG9mOg0K ICAgIFRoZSBBQkUgc3BlY2lmaWNhdGlvbiBwcm9wb3NlcyBpbmNyZWFzaW5nIHRoZSBFQ04tY2Fw YWJsZSB0cmFuc3BvcnQgcHJvdG9jb2wNCiAgICBjb25nZXN0aW9uIGNvbnRyb2wgYWxnb3JpdGht J3MgY3duZCBtdWx0aXBsaWNhdGl2ZSBkZWNyZWFzZSBmYWN0b3IsIGJldGEsDQogICAgYXBwbGll ZCBpbiByZXNwb25zZSB0byBFQ04tc2lnbmFsbGVkIGNvbmdlc3Rpb24gcGVyIGVxdWF0aW9uIFgg W1JGQzU2ODFdLg0KICAgIEl0IFJFQ09NTUVORFMgaW5jcmVhc2luZyBiZXRhIGZyb20gMC41IHBl ciBSRkMzMTY4L1JGQzU2ODEgdG8gMC44IGZvciBhbnkNCiAgICBFQ04tY2FwYWJsZSB0cmFuc3Bv cnQgcHJvdG9jb2wgdGhhdCBzdXBwb3J0cyBhIHBlci1SVFQgcmVzcG9uc2UgdG8gRUNOLg0KDQog ICAgRXFuIFg6IE9uIGNvbmdlc3Rpb246CXNzdGhyZXNoID0gY3duZF9ub3cgKiBiZXRhDQogICAg CQkJCWN3bmRfbmV4dCA9IHNzdGhyZXNoDQo9PT09PT09DQoNCj09PU5LSD09PQ0KLSBOb3Qgc3Vy ZSB3aHkgaXMgaXQg4oCcZmx1ZmZ54oCdIGJ1dCB3ZSBoYXZlIGJlZW4gdHJ5aW5nIHRvIHN0cmlj dGx5IGZvbGxvdyB0aGUgbGFuZ3VhZ2UgDQogIG9mIFJGQzU2ODEgYW5kIFJGQyAzMTY4LiBOb25l IG9mIHRoZSBSRkNzIGRlZmluZSDigJxiZXRh4oCdLiBSRkM1NjgxIG1lcmVseSB0YWxrcyBhYm91 dCB0aGUgcmVhY3Rpb24gDQogIHRvIHBhY2tldCBsb3NzIChFcS4gNCksIHdoaWxlIFJGQzMxNjgg Z2l2ZXMgYSBNVVNUIHRoYXQgdGhlIEVDTiByZWFjdGlvbiBzaG91bGQgYmUgdGhlIHNhbWUgYXMg d2l0aCBsb3NzLCB3aXRoICAgIG5vIG1lbnRpb24gb2YgdGhlIHRlcm0g4oCcYmV0YeKAnS4gV2Ug dHJpZWQgdG8gdXNlIHRoZSBzYW1lIGRlc2NyaXB0aXZlL3ByZWNpc2UgbGFuZ3VhZ2UgdXNlZCBi eSB0aG9zZSBSRkNzLiBIb3dldmVyDQpJIGhhdmUgcmVmZXJlbmNlZCB0aGUgRXEuIDQgb2YgUkZD NTY4MSBpbiB0aGlzIHNwZWMgc2VjdGlvbi4gQWxzbyBhZGRlZCB0aGUgdGVybSDigJxFQ04tc2ln bmFsbGVkIGNvbmdlc3Rpb27igJ0gYW5kIGRlZmluZWQgaXQgaGVyZS4gICAgIA0KPT09PT09PT09 DQoNCjQuICBEaXNjdXNzaW9uDQoNCiAgIE11Y2ggb2YgdGhlIHRlY2huaWNhbCBiYWNrZ3JvdW5k IHRvIHRoaXMgY29uZ2VzdGlvbiBjb250cm9sIHJlc3BvbnNlDQogICBjYW4gYmUgZm91bmQgaW4g YSByZXNlYXJjaCBwYXBlciBbQUJFMjAxN10uICBUaGlzIHBhcGVyIHVzZWQgYSBtaXggb2YNCiAg IGV4cGVyaW1lbnRzLCB0aGVvcnkgYW5kIHNpbXVsYXRpb25zIHdpdGggc3RhbmRhcmQgTmV3UmVu byBhbmQgQ1VCSUMNCiAgIHRvIGV2YWx1YXRlIHRoZSB0ZWNobmlxdWUuICBJdCBleGFtaW5lZCB0 aGUgaW1wYWN0IG9mIGVuYWJsaW5nIEVDTg0KICAgYW5kIGxldHRpbmcgaW5kaXZpZHVhbCBUQ1Ag c2VuZGVycyBiYWNrIG9mZiBieSBhIHJlZHVjZWQgYW1vdW50IGluDQogICByZWFjdGlvbiB0byB0 aGUgcmVjZWl2ZXIgdGhhdCByZXBvcnRzIEVDTiBDRS1tYXJrcyBmcm9tIEFRTS1lbmFibGVkDQog ICBib3R0bGVuZWNrcy4gIFRoZSB0ZWNobmlxdWUgd2FzIHNob3duIHRvIHByZXNlbnQgIi4uLnNp Z25pZmljYW50DQogICBwZXJmb3JtYW5jZSBnYWlucyBpbiBsaWdodGx5LW11bHRpcGxleGVkIHNj ZW5hcmlvcywgd2l0aG91dCBsb3NpbmcNCiAgIHRoZSBkZWxheS1yZWR1Y3Rpb24gYmVuZWZpdHMg b2YgZGVwbG95aW5nIENvRGVsIG9yIFBJRSIuICBUaGUNCiAgIHBlcmZvcm1hbmNlIGltcHJvdmVt ZW50IGlzIGFjaGlldmVkIHdoZW4gcmVhY3RpbmcgdG8gRUNOLUVjaG8gaW4NCiAgIGNvbmdlc3Rp b24gYXZvaWRhbmNlIGJ5IG11bHRpcGx5aW5nIGN3bmQgYW5kIHNzdGhyZXNoIHdpdGggYSB2YWx1 ZSBpbg0KICAgdGhlIHJhbmdlIFswLjcuLjAuODVdLg0KPT1MQVM9PQ0KLSBBIGNvbW1hIGluc3Rl YWQgb2YgLi4gaW4gcmFuZ2Ugbm90YXRpb24gc2VlbXMgY2xlYXJlciBpLmUgWzAuNywwLjg1XQ0K LSBWZXJ5IGxvbmcgd2luZGVkLi4uIHdlJ3ZlIGFscmVhZHkgZGVzY3JpYmVkIHNjaGVtZSBpbiAo MykuIEtleSBtZXNzYWdlIGZvcg0KICBkaXNjdXNzaW9uIGludHJvIGlzIHRoYXQgQUJFIHdpdGgg YmV0YSByYW5nZSBbWCxZXSBhbmQgQ0MgYWxnb3MgW05ld1Jlbm8sQ1VCSUNdDQogIHdhcyBldmFs dWF0ZWQgaW4gcGFwZXIgYW5kIHdhcyBmb3VuZCB0byAiPHF1b3RlIGZyb20gcGFwZXI+Ii4NCj09 PT09PT0NCg0KPT09TktIPT09DQotIERvbmUuIA0KLSBSZW1vdmVkIHRoaXM6IA0KICAg4oCcSXQg ZXhhbWluZWQgdGhlIGltcGFjdCBvZiBlbmFibGluZyBFQ04NCiAgIGFuZCBsZXR0aW5nIGluZGl2 aWR1YWwgVENQIHNlbmRlcnMgYmFjayBvZmYgYnkgYSByZWR1Y2VkIGFtb3VudCBpbg0KICAgcmVh Y3Rpb24gdG8gdGhlIHJlY2VpdmVyIHRoYXQgcmVwb3J0cyBFQ04gQ0UtbWFya3MgZnJvbSBBUU0t ZW5hYmxlZA0KICAgYm90dGxlbmVja3Mu4oCdICAgICANCj09PT09PT09PQ0KDQoNCjQuMS4gIFdo eSBVc2UgRUNOIHRvIFZhcnkgdGhlIERlZ3JlZSBvZiBCYWNrb2ZmPw0KDQogICBUaGUgY2xhc3Np YyBydWxlLW9mLXRodW1iIGRpY3RhdGVzIHRoYXQgYSBuZXR3b3JrIHBhdGggbmVlZHMgdG8NCiAg IHByb3ZpZGUgYSBCRFAgb2YgYm90dGxlbmVjayBidWZmZXJpbmcgaWYgYSBUQ1AgY29ubmVjdGlv biB3aXNoZXMgdG8NCiAgIG9wdGltaXNlIHBhdGggdXRpbGlzYXRpb24uICBBIHNpbmdsZSBUQ1Ag YnVsayB0cmFuc2ZlciBydW5uaW5nDQogICB0aHJvdWdoIHN1Y2ggYSBib3R0bGVuZWNrIHdpbGwg aGF2ZSBpbmNyZWFzZWQgaXRzIGNvbmdlc3Rpb24gd2luZG93DQogICAoY3duZCkgdXAgdG8gMipC RFAgYnkgdGhlIHRpbWUgdGhhdCBwYWNrZXQgbG9zcyBvY2N1cnMuICBXaGVuIHBhY2tldA0KICAg bG9zcyBpcyBkZXRlY3RlZCAocmVnYXJkZWQgYXMgYSBub3RpZmljYXRpb24gb2YgY29uZ2VzdGlv biksIFN0YW5kYXJkDQogICBUQ1AgaGFsdmVzIHRoZSBjd25kIGFuZCBzc3RocmVzaCBbUkZDNTY4 MV0sIHdoaWNoIGNhdXNlcyB0aGUgVENQDQogICBjb25nZXN0aW9uIGNvbnRyb2wgdG8gZ28gYmFj ayB0byBhbGxvd2luZyBvbmx5IGEgQkRQIG9mIHBhY2tldHMgaW4NCiAgIGZsaWdodCAtLSBqdXN0 IHN1ZmZpY2llbnQgdG8gbWFpbnRhaW4gMTAwJSB1dGlsaXNhdGlvbiBvZiB0aGUNCiAgIGJvdHRs ZW5lY2sgb24gdGhlIG5ldHdvcmsgcGF0aC4NCj09TEFTPT0NCi0gUGVyaGFwcyBzL3N0YW5kYXJk IFRDUCBoYWx2ZXMvUkZDNTY4MSBzdGlwdWxhdGVzIGhhbHZpbmcvDQotIEkgcGVyc29uYWxseSB0 aGluayAiU3RhbmRhcmQgVENQIiBpcyBhIG1pc25vbWVyIGFuZCBiZXN0IGF2b2lkZWQuDQo9PT09 PT09DQoNCj09PU5LSD09PQ0KLSBUaGlzIHdhcyBjaGFuZ2VkIHRvIHRoaXMgaW4gLTAzOiBTdGFu ZGFyZCBUQ1Agc2V0cyB0aGUgc3N0aHJlc2ggdG8NCiAgIHRoZSBtYXhpbXVtIG9mIGhhbGYgb2Yg dGhlIEZsaWdodFNpemUgYW5kIDIqU01TUyBbUkZDNTY4MV0sIHdoaWNoDQogICBjYXVzZXMgdGhl IFRDUCBjb25nZXN0aW9uIGNvbnRyb2wgdG8gZ28gYmFjayB0byBhbGxvd2luZyBvbmx5IGEgQkRQ DQogICBvZiBwYWNrZXRzIGluIGZsaWdodCAtLSBqdXN0IHN1ZmZpY2llbnQgdG8gbWFpbnRhaW4g MTAwJSB1dGlsaXNhdGlvbg0KICAgb2YgdGhlIGJvdHRsZW5lY2sgb24gdGhlIG5ldHdvcmsgcGF0 aC4NCi0gIEkgdW5kZXJzdGFuZCB0aGUgZnJ1c3RyYXRpb24gd2l0aCB0aGF0IHRlcm0uIEkgY291 bGRu4oCZdCBmaW5kIGFueSBiZXR0ZXIgdGVybSBpbnN0ZWFkIG9mIOKAnFN0YW5kYXJk4oCdOyBw bGVhc2Ugc3VnZ2VzdCBvbmUuIFRvIG1lLCDigJxTdGFuZGFyZCBUQ1DigJ0gaXMgdGhlIFRDUCB0 aGF0IGlzIGRlZmluZWQgYnkgc3RhbmRhcmQgdHJhY2sgUkZDcyAoZS5nLiwgUkZDMzE2OCwgUkZD NTY4MSwgZXRjKS4gRm9yIGluc3RhbmNlIENVQklDIGlzbuKAmXQg4oCcc3RhbmRhcmQgVENQ4oCd IHNpbmNlIGl0cyBjb25nZXN0aW9uIGF2b2lkYW5jZSBhbGdvcml0aG0gaXMgbm90IGNvbmZvcm1p bmcgdG8gUkZDMzE2OCAoc3RhbmRhcmQgdHJhY2spIGFuZCB0aGVyZWZvcmUgaXTigJlzIG1hcmtl ZCBhcyDigJxpbmZvcm1hdGlvbmFs4oCdIChhbmQgdXNlcyBiZXRhPTAuNykuICAgICANCj09PT09 PT09PQ0KDQogICBBUU0gbWVjaGFuaXNtcyBzdWNoIGFzIENvRGVsIFtJLUQuQ29EZWxdIGFuZCBQ SUUgW1JGQzgwMzNdIHNldCBhDQogICBkZWxheSB0YXJnZXQgaW4gcm91dGVycyBhbmQgdXNlIGNv bmdlc3Rpb24gbm90aWZpY2F0aW9ucyB0byBjb25zdHJhaW4NCiAgIHRoZSBxdWV1aW5nIGRlbGF5 cyBleHBlcmllbmNlZCBieSBwYWNrZXRzLCByYXRoZXIgdGhhbiBpbiByZXNwb25zZSB0bw0KICAg aW1wZW5kaW5nIG9yIGFjdHVhbCBib3R0bGVuZWNrIGJ1ZmZlciBleGhhdXN0aW9uLiAgV2l0aCBj dXJyZW50DQogICBkZWZhdWx0IGRlbGF5IHRhcmdldHMsIENvRGVsIGFuZCBQSUUgYm90aCBlZmZl Y3RpdmVseSBlbXVsYXRlIGENCiAgIHNoYWxsb3cgYnVmZmVyZWQgYm90dGxlbmVjayAoc2VjdGlv biBJSSwgW0FCRTIwMTddKSB3aGlsZSBhbHNvDQogICBhbGxvd2luZyBzaG9ydCB0cmFmZmljIGJ1 cnN0cyBpbnRvIHRoZSBxdWV1ZS4gIFRoaXMgcHJvdmlkZXMNCj09TEFTPT0NCi0gSSdtIG5vIEFR TSBleHBlcnQsIGJ1dCBJIHRoaW5rIHdoYXQgdGhlc2UgQVFNIHNjaGVtZXMgZW11bGF0ZSBpcyBh DQogIGZ1bmN0aW9uIG9mIHRoZSB0YXJnZXQgZGVsYXkgYXMgYSBwcm9wb3J0aW9uIG9mIHRoZSBS VFQuLi4gdGhvdWdoIHBlcmhhcHMNCiAgdGhlIGRpc3RpbmN0aW9uIGRvZXNuJ3QgcmVhbGx5IG1h dHRlciBmb3IgSW50ZXJuZXQgZmxvd3MuLi4NCj09PT09PT0NCg0KPT09TktIPT09DQotIHdlbGws IHNvbWV3aGF0IHRydWUuIEluIHRoZSBBUU0gZGVzaWduIHRoZXJlIGlzIGFuIGFzc3VtcHRpb24g Zm9yIHBhdGggUlRUcz0xMDBtcyBiZWluZyB0eXBpY2FsIFJUVHMNCmFjcm9zcyB0aGUgSW50ZXJu ZXQgYW5kIHRoZW4gZS5nLiwgY2hvb3NpbmcgYSA1JSBmcmFjdGlvbiBvZiB0aGF0IGZvciBDb0Rl bCBmb3IgdGhlIGRlZmF1bHQgdmFsdWU7IHRoYXQgYXNzdW1wdGlvbiBpcyBub3QgYWx3YXlzIHRo ZSBjYXNlIGFuZCB0aGUgKnR5cGljYWwqIFJUVCBpc27igJl0IGFsd2F5cyBrbm93biBpbiBhZHZh bmNlLCBzcGVjaWFsbHkgb24gdGhlIHB1YmxpYyBJbnRlcm5ldC4gQWxzbyB0aGUgZGVmaW5pdGlv biBvZiDigJxzaGFsbG93IGJ1ZmZlcuKAnSB2YXJpZXMgZnJvbSBvbmUgbmV0d29yayB0byBhbm90 aGVyLiA1bXMgaXMgc2hhbGxvdyBmb3IgUlRUPTEwMG1zIGJ1dCBub3Qgc2hhbGxvdyBmb3IgZGF0 YWNlbnRlciBzY2VuYXJpb3M7IHRoZSBDb0RlbCBJLUQgKGRyYWZ0LWlldGYtYXFtLWNvZGVsLTEw KSBzYXlzIOKAnFRBUkdFVCBTSE9VTEQgYmUgc2V0IHRvIDVtcyBmb3Igbm9ybWFsIEludGVybmV0 IHRyYWZmaWPigJ0uICAgICAgICANCj09PT09PT09PQ0KDQoNCg0KS2hhZGVtaSwgZXQgYWwuICAg ICAgICAgIEV4cGlyZXMgQXByaWwgMjMsIDIwMTggICAgICAgICAgICAgICAgIFtQYWdlIDRdDQoM DQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgIEFCRSAgICAgICAgICAgICAgICAg ICAgICBPY3RvYmVyIDIwMTcNCg0KDQogICBhY2NlcHRhYmxlIHBlcmZvcm1hbmNlIGZvciBUQ1Ag Y29ubmVjdGlvbnMgb3ZlciBhIHBhdGggd2l0aCBhIGxvdw0KICAgQkRQLCBvciBpbiBoaWdobHkg bXVsdGlwbGV4ZWQgc2NlbmFyaW9zIChtYW55IGNvbmN1cnJlbnQgdHJhbnNwb3J0DQo9PUxBUz09 IHMvdHJhbnNwb3J0IGNvbm5lY3Rpb25zL2Zsb3dzLyA9PT09PT09DQo9PT1OS0g9PT0NCi0gZml4 ZWQuICAgICANCj09PT09PT09PQ0KICAgY29ubmVjdGlvbnMpLiAgSG93ZXZlciwgaXQgaW50ZXJh Y3RzIGJhZGx5IGZvciBhIGxpZ2h0bHktbXVsdGlwbGV4ZWQNCiAgIGNhc2UgKGZldyBjb25jdXJy ZW50IGNvbm5lY3Rpb25zKSBvdmVyIGEgcGF0aCB3aXRoIGEgbGFyZ2UgQkRQLg0KICAgQ29udmVu dGlvbmFsIFRDUCBiYWNrb2ZmIGluIHN1Y2ggY2FzZXMgbGVhZHMgdG8gZ2FwcyBpbiBwYWNrZXQN CiAgIHRyYW5zbWlzc2lvbiBhbmQgdW5kZXItdXRpbGlzYXRpb24gb2YgdGhlIHBhdGguDQoNCiAg IEluc3RlYWQgb2YgZGlzY2FyZGluZyBwYWNrZXRzLCBhbiBBUU0gbWVjaGFuaXNtIGlzIGFsbG93 ZWQgdG8gbWFyaw0KICAgRUNOLWNhcGFibGUgcGFja2V0cyB3aXRoIGFuIEVDTiBDRS1tYXJrLiAg VGhlIHJlY2VwdGlvbiBvZiBhIENFLW1hcmsNCiAgIG5vdCBvbmx5IGluZGljYXRlcyBjb25nZXN0 aW9uIG9uIHRoZSBuZXR3b3JrIHBhdGgsIGl0IGFsc28gaW5kaWNhdGVzDQogICB0aGF0IGFuIEFR TSBtZWNoYW5pc20gZXhpc3RzIGF0IHRoZSBib3R0bGVuZWNrIGFsb25nIHRoZSBwYXRoLCBhbmQN CiAgIGhlbmNlIHRoZSBDRS1tYXJrIGxpa2VseSBjYW1lIGZyb20gYSBib3R0bGVuZWNrIHdpdGgg YSBzaGFsbG93IHF1ZXVlLg0KICAgUmVhY3RpbmcgZGlmZmVyZW50bHkgdG8gYW4gRUNOIENFLW1h cmsgdGhhbiB0byBwYWNrZXQgbG9zcyBjYW4gdGhlbg0KICAgeWllbGQgdGhlIGJlbmVmaXQgb2Yg YSByZWR1Y2VkIGJhY2stb2ZmLCBhcyB3aXRoIENVQklDIFtJLUQuQ1VCSUNdLA0KICAgd2hlbiBx dWV1ZXMgYXJlIHNob3J0LCB5ZXQgaXQgY2FuIGF2b2lkIGdlbmVyYXRpbmcgZXhjZXNzaXZlIGRl bGF5DQogICB3aGVuIHF1ZXVlcyBhcmUgbG9uZy4gIFVzaW5nIEVDTiBjYW4gYWxzbyBiZSBhZHZh bnRhZ2VvdXMgZm9yIHNldmVyYWwNCiAgIG90aGVyIHJlYXNvbnMgW1JGQzgwODddLg0KPT1MQVM9 PQ0KLSBUaGVyZSBhcmUgYSBsb3Qgb2YgYXNzdW1wdGlvbnMgaW4gdGhpcyBwYXJhZ3JhcGggOikN Ci0gQ29tcGFyaXNvbiB3aXRoIENVQklDIGlzIG11ZGR5LiBNb3JlIGNsYXJpdHkgd291bGQgYmUg Z29vZC4NCj09PT09PT0NCg0KPT09TktIPT09DQotIFRoaXMgcGFydCBub3cgcmVhZHMgYXMgKHJl bW92ZWQgdGhlIENVQklDIHN0b3J5KTogSW5zdGVhZCBvZiBkaXNjYXJkaW5nIHBhY2tldHMsIGFu IEFRTSBtZWNoYW5pc20gaXMgYWxsb3dlZCB0byBtYXJrDQogICBFQ04tY2FwYWJsZSBwYWNrZXRz IHdpdGggYW4gRUNOIENFLW1hcmsuICBUaGUgcmVjZXB0aW9uIG9mIGEgQ0UtbWFyaw0KICAgbm90 IG9ubHkgaW5kaWNhdGVzIGNvbmdlc3Rpb24gb24gdGhlIG5ldHdvcmsgcGF0aCwgaXQgYWxzbyBp bmRpY2F0ZXMNCiAgIHRoYXQgYW4gQVFNIG1lY2hhbmlzbSBleGlzdHMgYXQgdGhlIGJvdHRsZW5l Y2sgYWxvbmcgdGhlIHBhdGgsIGFuZA0KICAgaGVuY2UgdGhlIENFLW1hcmsgbGlrZWx5IGNhbWUg ZnJvbSBhIGJvdHRsZW5lY2sgd2l0aCBhIGNvbnRyb2xsZWQNCiAgIHNob3J0IHF1ZXVlLiAgUmVh Y3RpbmcgZGlmZmVyZW50bHkgdG8gYW4gRUNOIENFLW1hcmsgdGhhbiB0byBhbg0KICAgaW5mZXJy ZWQgcGFja2V0IGxvc3MgY2FuIHRoZW4geWllbGQgdGhlIGJlbmVmaXQgb2YgYSByZWR1Y2VkIGJh Y2stb2ZmDQogICB3aGVuIHF1ZXVlcyBhcmUgc2hvcnQuICBVc2luZyBFQ04gY2FuIGFsc28gYmUg YWR2YW50YWdlb3VzIGZvcg0KICAgc2V2ZXJhbCBvdGhlciByZWFzb25zIFtSRkM4MDg3XS4gICAN Cj09PT09PT09PQ0KDQogICBUaGUgaWRlYSBvZiByZWFjdGluZyBkaWZmZXJlbnRseSB0byBsb3Nz IGFuZCBkZXRlY3Rpb24gb2YgYW4gRUNOIENFLQ0KICAgbWFyayBwcmUtZGF0ZXMgdGhpcyBkb2N1 bWVudC4gIEZvciBleGFtcGxlLCBwcmV2aW91cyByZXNlYXJjaA0KICAgcHJvcG9zZWQgdXNpbmcg RUNOIENFLW1hcmtzIHRvIG1vZGlmeSBUQ1AgY29uZ2VzdGlvbiBjb250cm9sDQogICBiZWhhdmlv dXIgdmlhIGEgbGFyZ2VyIG11bHRpcGxpY2F0aXZlIGRlY3JlYXNlIGZhY3RvciBpbiBjb25qdW5j dGlvbg0KICAgd2l0aCBhIHNtYWxsZXIgYWRkaXRpdmUgaW5jcmVhc2UgZmFjdG9yIFtJQ0MyMDAy XS4gIFRoZSBnb2FsIG9mIHRoaXMNCiAgIGZvcm1lciB3b3JrIHdhcyB0byBvcGVyYXRlIGFjcm9z cyBBUU0gYm90dGxlbmVja3MgdXNpbmcgUmFuZG9tIEVhcmx5DQogICBEZXRlY3Rpb24gKFJFRCkg dGhhdCB3ZXJlIG5vdCBuZWNlc3NhcmlseSBjb25maWd1cmVkIHRvIGVtdWxhdGUgYQ0KICAgc2hh bGxvdyBxdWV1ZSAoW1JGQzc1NjddIG5vdGVzIHRoZSBjdXJyZW50IHN0YXR1cyBvZiBSRUQgYXMg YW4gQVFNDQogICBtZXRob2QuKQ0KDQo0LjIuICBGb2N1cyBvbiBFQ04gYXMgRGVmaW5lZCBpbiBS RkMzMTY4DQoNCiAgIFNvbWUgdHJhbnNwb3J0IHByb3RvY29sIG1lY2hhbmlzbXMgcmVseSBvbiBF Q04gc2VtYW50aWNzIHRoYXQgZGlmZmVyDQogICBmcm9tIHRoZSBvcmlnaW5hbCBFQ04gZGVmaW5p dGlvbiBbUkZDMzE2OF0gLS0gZm9yIGV4YW1wbGUsIENvbmdlc3Rpb24NCiAgIEV4cG9zdXJlIChD b25FeCkgW1JGQzc3MTNdIGFuZCBEYXRhY2VudGVyIFRDUCAoRENUQ1ApDQogICBbSS1ELmlldGYt dGNwbS1kY3RjcF0gbmVlZCBtb3JlIGFjY3VyYXRlIEVDTiBpbmZvcm1hdGlvbiB0aGFuIHRoYXQN CiAgIG9mZmVyZWQgYnkgdGhlIG9yaWdpbmFsIGZlZWRiYWNrIG1ldGhvZC4gIE90aGVyIG1lY2hh bmlzbXMgKGUuZy4sDQogICBbSS1ELmlldGYtdGNwbS1hY2N1cmF0ZS1lY25dKSBhbGxvdyB0aGUg c2VuZGVyIHRvIGFkanVzdCB0aGUgcmF0ZQ0KICAgbW9yZSBmcmVxdWVudGx5IHRoYW4gb25jZSBl YWNoIHBhdGggUlRULiAgVXNlIG9mIHRoZXNlIG1lY2hhbmlzbXMgaXMNCiAgIG91dCBvZiB0aGUg c2NvcGUgb2YgdGhlIGN1cnJlbnQgZG9jdW1lbnQuDQo9PUxBUz09IC0+ICIuLi4gaXMgb3V0IG9m IHNjb3BlIGZvciB0aGlzIGRvY3VtZW50IiA9PT09PT09DQoNCj09PU5LSD09PQ0KLSBGaXhlZC4g ICANCj09PT09PT09PQ0KDQoNCjQuMy4gIERpc2N1c3Npb246IENob2ljZSBvZiBBQkUgTXVsdGlw bGllcg0KDQogICBBQkUgZGVjb3VwbGVzIHRoZSByZWFjdGlvbiBvZiBhIFRDUCBzZW5kZXIgdG8g bG9zcyBhbmQgRUNOIENFLW1hcmtzDQogICB3aGVuIGluIHRoZSBjb25nZXN0aW9uIGF2b2lkYW5j ZSBwaGFzZSBieSBkaWZmZXJlbnRpYXRpbmcgdGhlIHNjYWxpbmcNCiAgIGZhY3RvciB1c2VkIGlu IEVxdWF0aW9uIDQgaW4gU2VjdGlvbiAzLjEgb2YgW1JGQzU2ODFdLiAgVGhlDQogICBkZXNjcmlw dGlvbiByZXNwZWN0aXZlbHkgdXNlcyBiZXRhX3tsb3NzfSBhbmQgYmV0YV97ZWNufSB0byByZWZl ciB0bw0KICAgdGhlIG11bHRpcGxpY2F0aXZlIGRlY3JlYXNlIGZhY3RvcnMgYXBwbGllZCBpbiBy ZXNwb25zZSB0byBwYWNrZXQNCiAgIGxvc3MsIGFuZCBpbiByZXNwb25zZSB0byBhIHJlY2VpdmVy IGluZGljYXRpbmcgdGhhdCBhbiBFQ04gQ0UtbWFyaw0KICAgd2FzIHJlY2VpdmVkIG9uIGFuIEVD Ti1lbmFibGVkIFRDUCBjb25uZWN0aW9uLiAgRm9yIG5vbi1FQ04tZW5hYmxlZA0KPT1MQVM9PQ0K LSAiLi4ucmVjZWl2ZXIgaW5kaWNhdGluZyB0aGF0IGFuIEVDTiBDRS1tYXJrIHdhcyByZWNlaXZl ZCBvbiBhbiBFQ04tZW5hYmxlZCBUQ1AgY29ubmVjdGlvbi4uLiIgLT4NCiAgIkVDTi1zaWduYWxs ZWQgY29uZ2VzdGlvbiIgKHNpbWlsYXIgY2hhbmdlcyBwb3NzaWJsZSBlbHNld2hlcmUgdG9vKQ0K PT09PT09PT0NCg0KPT1OS0g9PT0NCi0gRG9uZS4NCj09PT09PT09DQoNCg0KS2hhZGVtaSwgZXQg YWwuICAgICAgICAgIEV4cGlyZXMgQXByaWwgMjMsIDIwMTggICAgICAgICAgICAgICAgIFtQYWdl IDVdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgIEFCRSAgICAgICAgICAg ICAgICAgICAgICBPY3RvYmVyIDIwMTcNCg0KDQogICBUQ1AgY29ubmVjdGlvbnMsIG5vIEVDTiBD RS1tYXJrcyBhcmUgcmVjZWl2ZWQgYW5kIG9ubHkgYmV0YV97bG9zc30NCiAgIGFwcGxpZXMuDQo9 PUxBUz09DQotIFJlbW92ZSAibm8gRUNOIENFLW1hcmtzIGFyZSByZWNlaXZlZCBhbmQiLi4uIHJv Z3VlIG1hcmtzIHNob3VsZCBhbHNvIGJlIGlnbm9yZWQNCj09PT09PT0NCg0KPT1OS0g9PT0NCi0g Rml4ZWQuDQo9PT09PT09PQ0KDQogICBJbiBvdGhlciB3b3JkcywgaW4gcmVzcG9uc2UgdG8gZGV0 ZWN0ZWQgbG9zczoNCg0KICAgICAgc3N0aHJlc2hfKHQrMSkgPSBtYXggKEZsaWdodFNpemVfdCAq IGJldGFfe2xvc3N9LCAyICogU01TUykNCg0KICAgYW5kIGluIHJlc3BvbnNlIHRvIGFuIGluZGlj YXRpb24gb2YgYSByZWNlaXZlZCBFQ04gQ0UtbWFyazoNCg0KPT1MQVM9PQ0KLSAtPiAiRUNOLXNp Z25hbGxlZCBjb25nZXN0aW9uIg0KPT09PT09PQ0KDQo9PU5LSD09PQ0KLSBEb25lLg0KPT09PT09 PT0NCg0KICAgICAgc3N0aHJlc2hfKHQrMSkgPSBtYXggKEZsaWdodFNpemVfdCAqIGJldGFfe2Vj bn0sIDIgKiBTTVNTKQ0KDQogICBhbmQNCg0KICAgICAgY3duZF8odCsxKSA9IHNzdGhyZXNoXyh0 KzEpDQoNCiAgIHdoZXJlIEZsaWdodFNpemUgaXMgdGhlIGFtb3VudCBvZiBvdXRzdGFuZGluZyBk YXRhIGluIHRoZSBuZXR3b3JrLA0KICAgdXBwZXItYm91bmRlZCBieSB0aGUgc2VuZGVyJ3MgY3du ZCBhbmQgdGhlIHJlY2VpdmVyJ3MgYWR2ZXJ0aXNlZA0KPT1MQVM9PSBVcHBlci1ib3VuZGVkIGJ5 IHRoZSBzbWFsbGVyIG9mIHRoZS4uLiA9PT09PT09DQoNCj09TktIPT09DQotIEZpeGVkLg0KPT09 PT09PT0NCg0KICAgd2luZG93IChyd25kKSBbUkZDNTY4MV0uICBUaGUgaGlnaGVyIHRoZSB2YWx1 ZXMgb2YgYmV0YV97bG9zc30gYW5kDQogICBiZXRhX3tlY259LCB0aGUgbGVzcyBhZ2dyZXNzaXZl IHRoZSByZXNwb25zZSBvZiBhbnkgaW5kaXZpZHVhbA0KICAgYmFja29mZiBldmVudC4NCj09TEFT PT0NCi0gQWdncmVzc2l2ZSBpcyBhIHBvb3Igd29yZCBjaG9pY2UuLi4gY291bGQgYmUgY29uc3Ry dWVkIHRvIGJlIHJlZmVycmluZyB0bw0KICB0aGUgZWZmZWN0IGF0IHRoZSBib3R0bGVuZWNrLCB3 aGljaCBpcyBtb3JlICJhZ2dyZXNzaXZlIiB3aXRoIEFCRSB0aGFuIHdpdGhvdXQuDQo9PT09PT09 DQoNCj09TktIPT09DQotIFRoaXMgd2FzIGNoYW5nZWQgZm9ydGggYW5kIGJhY2sgaW4gZWFybGll ciByZXZpc2lvbnMsIGFuZCB3ZSBjYW1lIHVwIHdpdGgg4oCcYWdncmVzc2l2ZSByZXNwb25zZeKA nSwgDQp3aGljaCBpcyBjbGVhcmx5IHBvaW50aW5nIGF0IHRoZSDigJxyZXNwb25zZeKAnSBiZWhh dmlvciAoaS5lLiByZWR1Y3Rpb24sIG11bHRpcGxpY2F0aXZlIGRlY3JlYXNlKS4gICANCj09PT09 PT09DQoNCiAgIFRoZSBhcHByb3ByaWF0ZSBjaG9pY2UgZm9yIGJldGFfe2xvc3N9IGFuZCBiZXRh X3tlY259IHZhbHVlcyBpcyBhDQogICBiYWxhbmNpbmcgYWN0IGJldHdlZW4gcGF0aCB1dGlsaXNh dGlvbiBhbmQgZHJhaW5pbmcgdGhlIGJvdHRsZW5lY2sNCiAgIHF1ZXVlLiAgTW9yZSBhZ2dyZXNz aXZlIGJhY2tvZmYgKHNtYWxsZXIgYmV0YV8qKSByaXNrcyB1bmRlcnV0aWxpc2luZw0KICAgdGhl IHBhdGgsIHdoaWxlIGxlc3MgYWdncmVzc2l2ZSBiYWNrb2ZmIChsYXJnZXIgYmV0YV8qKSBjYW4g cmVzdWx0IGluDQogICBzbG93ZXIgZHJhaW5pbmcgb2YgdGhlIGJvdHRsZW5lY2sgcXVldWUuDQoN CiAgIFRoZSBJbnRlcm5ldCBoYXMgYWxyZWFkeSBiZWVuIHJ1bm5pbmcgd2l0aCBhdCBsZWFzdCB0 d28gZGlmZmVyZW50DQogICBiZXRhX3tsb3NzfSB2YWx1ZXMgZm9yIHNldmVyYWwgeWVhcnM6IHRo ZSBzdGFuZGFyZCB2YWx1ZSBpcyAwLjUNCiAgIFtSRkM1NjgxXSwgYW5kIHRoZSBMaW51eCBpbXBs ZW1lbnRhdGlvbiBvZiBDVUJJQyBbSS1ELkNVQklDXSBoYXMgdXNlZA0KICAgYSBtdWx0aXBsaWVy IG9mIDAuNyBzaW5jZSBrZXJuZWwgdmVyc2lvbiAyLjYuMjUgcmVsZWFzZWQgaW4gMjAwOC4NCiAg IEFCRSBwcm9wb3NlcyBubyBjaGFuZ2UgdG8gYmV0YV97bG9zc30gdXNlZCBieSBjdXJyZW50IFRD UA0KICAgaW1wbGVtZW50YXRpb25zLg0KDQogICBiZXRhX3tlY259IGRlcGVuZHMgb24gaG93IHRo ZSByZXNwb25zZSBvZiBhIFRDUCBjb25uZWN0aW9uIHRvIHNoYWxsb3cNCiAgIEFRTSBtYXJraW5n IHRocmVzaG9sZHMgaXMgb3B0aW1pc2VkLiBiZXRhX3tsb3NzfSByZWZsZWN0cyB0aGUNCiAgIHBy ZWZlcnJlZCByZXNwb25zZSBvZiBlYWNoIGNvbmdlc3Rpb24gY29udHJvbCBhbGdvcml0aG0gd2hl biBmYWNlZA0KICAgd2l0aCBleGhhdXN0aW9uIG9mIGJ1ZmZlcnMgKG9mIHVua25vd24gZGVwdGgp IHNpZ25hbGxlZCBieSBwYWNrZXQNCiAgIGxvc3MuICBDb25zZXF1ZW50bHksIGZvciBhbnkgZ2l2 ZW4gVENQIGNvbmdlc3Rpb24gY29udHJvbCBhbGdvcml0aG0NCiAgIHRoZSBjaG9pY2Ugb2YgYmV0 YV97ZWNufSBpcyBsaWtlbHkgdG8gYmUgYWxnb3JpdGhtLXNwZWNpZmljLCByYXRoZXINCiAgIHRo YW4gYSBjb25zdGFudCBtdWx0aXBsZSBvZiB0aGUgYWxnb3JpdGhtJ3MgZXhpc3RpbmcgYmV0YV97 bG9zc30uDQoNCiAgIEEgcmFuZ2Ugb2YgdGVzdHMgKHNlY3Rpb24gSVYsIFtBQkUyMDE3XSkgd2l0 aCBOZXdSZW5vIGFuZCBDVUJJQyBvdmVyDQogICBDb0RlbCBhbmQgUElFIGluIGxpZ2h0bHktbXVs dGlwbGV4ZWQgc2NlbmFyaW9zIGhhdmUgZXhwbG9yZWQgdGhpcw0KICAgY2hvaWNlIG9mIHBhcmFt ZXRlci4gIFRoZSByZXN1bHRzIG9mIHRoZXNlIHRlc3RzIGluZGljYXRlIHRoYXQgQ1VCSUMNCiAg IGNvbm5lY3Rpb25zIGJlbmVmaXQgZnJvbSBiZXRhX3tlY259IG9mIDAuODUgKGNmLiAgYmV0YV97 bG9zc30gPSAwLjcpLA0KICAgYW5kIE5ld1Jlbm8gY29ubmVjdGlvbnMgc2VlIGltcHJvdmVtZW50 cyB3aXRoIGJldGFfe2Vjbn0gaW4gdGhlIHJhbmdlDQogICAwLjcgdG8gMC44NSAoY2YuIGJldGFf e2xvc3N9ID0gMC41KS4NCg0KDQoNCktoYWRlbWksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEFw cmlsIDIzLCAyMDE4ICAgICAgICAgICAgICAgICBbUGFnZSA2XQ0KDA0KSW50ZXJuZXQtRHJhZnQg ICAgICAgICAgICAgICAgICAgICBBQkUgICAgICAgICAgICAgICAgICAgICAgT2N0b2JlciAyMDE3 DQoNCg0KNS4gIFN0YXR1cyBvZiB0aGUgVXBkYXRlDQoNCiAgIFRoaXMgdXBkYXRlIGlzIGEgc2Vu ZGVyLXNpZGUgb25seSBjaGFuZ2UuICBMaWtlIG90aGVyIGNoYW5nZXMgdG8NCiAgIGNvbmdlc3Rp b24tY29udHJvbCBhbGdvcml0aG1zLCBpdCBkb2VzIG5vdCByZXF1aXJlIGFueSBjaGFuZ2UgdG8g dGhlDQogICBUQ1AgcmVjZWl2ZXIgb3IgdG8gbmV0d29yayBkZXZpY2VzLiAgSXQgZG9lcyBub3Qg cmVxdWlyZSBhbnkgQUJFLQ0KICAgc3BlY2lmaWMgY2hhbmdlcyBpbiByb3V0ZXJzIG9yIHRoZSB1 c2Ugb2YgQWNjdXJhdGUgRUNOIGZlZWRiYWNrDQogICBbSS1ELmlldGYtdGNwbS1hY2N1cmF0ZS1l Y25dIGJ5IGEgcmVjZWl2ZXIuDQoNCiAgIFRoZSBjdXJyZW50bHkgcHVibGlzaGVkIEVDTiBzcGVj aWZpY2F0aW9uIHJlcXVpcmVzIHRoYXQgdGhlDQogICBjb25nZXN0aW9uIGNvbnRyb2wgcmVzcG9u c2UgdG8gYSBDRS1tYXJrZWQgcGFja2V0IGlzIHRoZSBzYW1lIGFzIHRoZQ0KICAgcmVzcG9uc2Ug dG8gYSBkcm9wcGVkIHBhY2tldCBbUkZDMzE2OF0uICBUaGUgc3BlY2lmaWNhdGlvbiBpcw0KICAg Y3VycmVudGx5IGJlaW5nIHVwZGF0ZWQgdG8gYWxsb3cgZm9yIHNwZWNpZmljYXRpb25zIHRoYXQg ZG8gbm90DQogICBmb2xsb3cgdGhpcyBydWxlIFtJLUQuRUNOLWV4cF0uICBUaGUgcHJlc2VudCBz cGVjaWZpY2F0aW9uIGRlZmluZXMNCiAgIHN1Y2ggYW4gZXhwZXJpbWVudCBhbmQgaGFzIHRodXMg YmVlbiBhc3NpZ25lZCBhbiBFeHBlcmltZW50YWwgc3RhdHVzDQogICBiZWZvcmUgYmVpbmcgcHJv cG9zZWQgYXMgYSBTdGFuZGFyZHMtVHJhY2sgdXBkYXRlLg0KDQogICBUaGUgcHVycG9zZSBvZiB0 aGUgSW50ZXJuZXQgZXhwZXJpbWVudCBpcyB0byBjb2xsZWN0IGV4cGVyaWVuY2Ugd2l0aA0KICAg ZGVwbG95bWVudCBvZiBBQkUsIGFuZCBjb25maXJtIHRoZSBzYWZldHkgaW4gZGVwbG95ZWQgbmV0 d29ya3MgdXNpbmcNCiAgIHRoaXMgdXBkYXRlIHRvIFRDUCBjb25nZXN0aW9uIGNvbnRyb2wuDQoN CiAgIFdoZW4gdXNlZCB3aXRoIGJvdHRsZW5lY2tzIHRoYXQgZG8gbm90IHN1cHBvcnQgRUNOLW1h cmtpbmcgdGhlDQogICBzcGVjaWZpY2F0aW9uIGRvZXMgbm90IG1vZGlmeSB0aGUgdHJhbnNwb3J0 IHByb3RvY29sLg0KDQogICBUbyBldmFsdWF0ZSB0aGUgYmVuZWZpdCwgdGhpcyBleHBlcmltZW50 IHRoZXJlZm9yZSByZXF1aXJlcyBzdXBwb3J0DQogICBpbiBBUU0gcm91dGVycyAoZXhjZXB0IHRv IGVuYWJsZSBhbiBFQ04tbWFya2luZyBtZWNoYW5pc20gW1JGQzMxNjhdDQogICBbUkZDNzU2N10p IGZvciBFQ04tbWFya2luZyBvZiBwYWNrZXRzIGNhcnJ5aW5nIHRoZSBFQ04gQ2FwYWJsZQ0KICAg VHJhbnNwb3J0LCBFQ1QoMCksIGNvZGVwb2ludCBbUkZDMzE2OF0uDQoNCiAgIElmIHRoZSBtZXRo b2QgaXMgb25seSBkZXBsb3llZCBieSBzb21lIHNlbmRlcnMsIGFuZCBub3QgYnkgb3RoZXJzLA0K ICAgdGhlIHNlbmRlcnMgdGhhdCB1c2UgdGhpcyBtZXRob2QgY2FuIGdhaW4gc29tZSBhZHZhbnRh Z2UsIHBvc3NpYmx5IGF0DQogICB0aGUgZXhwZW5zZSBvZiBvdGhlciBmbG93cyB0aGF0IGRvIG5v dCB1c2UgdGhpcyB1cGRhdGVkIG1ldGhvZC4NCiAgIEJlY2F1c2UgdGhpcyBhZHZhbnRhZ2UgYXBw bGllcyBvbmx5IHRvIEVDTi1tYXJrZWQgcGFja2V0cyBhbmQgbm90IHRvDQogICBsb3NzIGluZGlj YXRpb25zLCB0aGUgbmV3IG1ldGhvZCBjYW5ub3QgbGVhZCB0byBjb25nZXN0aW9uIGNvbGxhcHNl Lg0KDQogICBUaGUgcmVzdWx0IG9mIHRoaXMgSW50ZXJuZXQgZXhwZXJpbWVudCB3aWxsIGJlIHJl cG9ydGVkIGJ5DQogICBwcmVzZW50YXRpb24gdG8gdGhlIFRDUE0gV0cgKG9yIElFU0cpIG9yIGFu IGltcGxlbWVudGF0aW9uIHJlcG9ydCBhdA0KICAgdGhlIGVuZCBvZiB0aGUgZXhwZXJpbWVudC4N Cg0KNi4gIEFja25vd2xlZGdlbWVudHMNCg0KICAgQXV0aG9ycyBOLiAgS2hhZGVtaSwgTS4gIFdl bHpsIGFuZCBHLiAgRmFpcmh1cnN0IHdlcmUgcGFydC1mdW5kZWQgYnkNCiAgIHRoZSBFdXJvcGVh biBDb21tdW5pdHkgdW5kZXIgaXRzIFNldmVudGggRnJhbWV3b3JrIFByb2dyYW1tZSB0aHJvdWdo DQogICB0aGUgUmVkdWNpbmcgSW50ZXJuZXQgVHJhbnNwb3J0IExhdGVuY3kgKFJJVEUpIHByb2pl Y3QgKElDVC0zMTc3MDApLg0KICAgVGhlIHZpZXdzIGV4cHJlc3NlZCBhcmUgc29sZWx5IHRob3Nl IG9mIHRoZSBhdXRob3JzLg0KDQogICBUaGUgYXV0aG9ycyB3b3VsZCBsaWtlIHRvIHRoYW5rIFN0 dWFydCBDaGVzaGlyZSBmb3IgbWFueSBzdWdnZXN0aW9ucw0KICAgd2hlbiByZXZpc2luZyB0aGUg ZHJhZnQsIGFuZCB0aGUgZm9sbG93aW5nIHBlb3BsZSBmb3IgdGhlaXINCiAgIGNvbnRyaWJ1dGlv bnMgdG8gW0FCRTIwMTddOiBDaGFtaWwgS3VsYXR1bmdhLCBEYXZpZCBSb3MsIFN0ZWluDQoNCg0K DQpLaGFkZW1pLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBBcHJpbCAyMywgMjAxOCAgICAgICAg ICAgICAgICAgW1BhZ2UgN10NCgwNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICAg QUJFICAgICAgICAgICAgICAgICAgICAgIE9jdG9iZXIgMjAxNw0KDQoNCiAgIEdqZXNzaW5nLCBT ZWJhc3RpYW4gWmFuZGVyLiAgVGhhbmtzIGFsc28gdG8gKGluIGFscGhhYmV0aWNhbCBvcmRlcikN CiAgIEJvYiBCcmlzY29lLCBNYXJra3UgS29qbywgSm9obiBMZXNsaWUsIERhdmUgVGFodCBhbmQg dGhlIFRDUE0gd29ya2luZw0KICAgZ3JvdXAgZm9yIHByb3ZpZGluZyB2YWx1YWJsZSBmZWVkYmFj ayBvbiB0aGlzIGRvY3VtZW50Lg0KDQogICBUaGUgYXV0aG9ycyB3b3VsZCBmaW5hbGx5IGxpa2Ug dG8gdGhhbmsgZXZlcnlvbmUgd2hvIHByb3ZpZGVkDQogICBmZWVkYmFjayBvbiB0aGUgY29uZ2Vz dGlvbiBjb250cm9sIGJlaGF2aW91ciBzcGVjaWZpZWQgaW4gdGhpcyB1cGRhdGUNCiAgIHJlY2Vp dmVkIGZyb20gdGhlIElSVEYgSW50ZXJuZXQgQ29uZ2VzdGlvbiBDb250cm9sIFJlc2VhcmNoIEdy b3VwDQogICAoSUNDUkcpLg0KDQo3LiAgSUFOQSBDb25zaWRlcmF0aW9ucw0KDQogICBYWCBSRkMg RUQgLSBQTEVBU0UgUkVNT1ZFIFRISVMgU0VDVElPTiBYWFgNCg0KICAgVGhpcyBkb2N1bWVudCBp bmNsdWRlcyBubyByZXF1ZXN0IHRvIElBTkEuDQoNCjguICBJbXBsZW1lbnRhdGlvbiBTdGF0dXMN Cg0KICAgQUJFIGlzIGltcGxlbWVudGVkIGFzIGEgcGF0Y2ggZm9yIExpbnV4IGFuZCBGcmVlQlNE LiAgSXQgaXMgbWVhbnQgZm9yDQogICByZXNlYXJjaCBhbmQgYXZhaWxhYmxlIGZvciBkb3dubG9h ZCBmcm9tDQogICBodHRwOi8vaGVpbS5pZmkudWlvLm5vL25hZWVtay9yZXNlYXJjaC9BQkUvIFRo aXMgY29kZSB3YXMgdXNlZCB0bw0KICAgcHJvZHVjZSB0aGUgdGVzdCByZXN1bHRzIHRoYXQgYXJl IHJlcG9ydGVkIGluIFtBQkUyMDE3XS4gIEFuIGV2b2x2ZWQNCiAgIHZlcnNpb24gb2YgdGhlIHBh dGNoIGZvciBGcmVlQlNEIGlzIGN1cnJlbnRseSB1bmRlciByZXZpZXcgZm9yDQogICBwb3RlbnRp YWwgaW5jbHVzaW9uIGluIHRoZSBtYWlubGluZSBrZXJuZWwgW0FCRS1GcmVlQlNEXS4NCg0KOS4g IFNlY3VyaXR5IENvbnNpZGVyYXRpb25zDQoNCiAgIFRoZSBkZXNjcmliZWQgbWV0aG9kIGlzIGEg c2VuZGVyLXNpZGUgb25seSB0cmFuc3BvcnQgY2hhbmdlLCBhbmQgZG9lcw0KICAgbm90IGNoYW5n ZSB0aGUgcHJvdG9jb2wgbWVzc2FnZXMgZXhjaGFuZ2VkLiAgVGhlIHNlY3VyaXR5DQogICBjb25z aWRlcmF0aW9ucyBmb3IgRUNOIFtSRkMzMTY4XSB0aGVyZWZvcmUgc3RpbGwgYXBwbHkuDQoNCiAg IFRoaXMgaXMgYSBjaGFuZ2UgdG8gVENQIGNvbmdlc3Rpb24gY29udHJvbCB3aXRoIEVDTiB0aGF0 IHdpbGwNCiAgIHR5cGljYWxseSBsZWFkIHRvIGEgY2hhbmdlIGluIHRoZSBjYXBhY2l0eSBhY2hp ZXZlZCB3aGVuIGZsb3dzIHNoYXJlDQogICBhIG5ldHdvcmsgYm90dGxlbmVjay4gIFRoaXMgY291 bGQgcmVzdWx0IGluIHNvbWUgZmxvd3MgcmVjZWl2aW5nIG1vcmUNCiAgIHRoYW4gdGhlaXIgZmFp ciBzaGFyZSBvZiBjYXBhY2l0eS4gIFNpbWlsYXIgdW5mYWlybmVzcyBpbiB0aGUgd2F5DQogICB0 aGF0IGNhcGFjaXR5IGlzIHNoYXJlZCBpcyBhbHNvIGV4aGliaXRlZCBieSBvdGhlciBjb25nZXN0 aW9uIGNvbnRyb2wNCiAgIG1lY2hhbmlzbXMgdGhhdCBoYXZlIGJlZW4gaW4gdXNlIGluIHRoZSBJ bnRlcm5ldCBmb3IgbWFueSB5ZWFycw0KICAgKGUuZy4sIENVQklDIFtJLUQuQ1VCSUNdKS4gIFVu ZmFpcm5lc3MgbWF5IGFsc28gYmUgYSByZXN1bHQgb2Ygb3RoZXINCiAgIGZhY3RvcnMsIGluY2x1 ZGluZyB0aGUgcm91bmQgdHJpcCB0aW1lIGV4cGVyaWVuY2VkIGJ5IGEgZmxvdy4gIEFCRQ0KICAg YXBwbGllcyBvbmx5IHdoZW4gRUNOLW1hcmtlZCBwYWNrZXRzIGFyZSByZWNlaXZlZCwgbm90IHdo ZW4gcGFja2V0cw0KICAgYXJlIGxvc3QsIGhlbmNlIHVzZSBvZiBBQkUgY2Fubm90IGxlYWQgdG8g Y29uZ2VzdGlvbiBjb2xsYXBzZS4NCg0KMTAuICBSZXZpc2lvbiBJbmZvcm1hdGlvbg0KDQogICBY WCBSRkMgRUQgLSBQTEVBU0UgUkVNT1ZFIFRISVMgU0VDVElPTiBYWFgNCg0KICAgLTAyLiAgQ29y cmVjdGVkIHRoZSBlcXVhdGlvbnMgaW4gU2VjdGlvbiA0LjMuICBVcGRhdGVkIHRoZQ0KICAgYWZm aWxpYXRpb25zLiAgTG93ZXIgYm91bmQgZm9yIGN3bmQgaXMgZGVmaW5lZC4gIEEgcmVjb21tZW5k YXRpb24gZm9yDQogICB3aW5kb3ctYmFzZWQgdHJhbnNwb3J0IHByb3RvY29scyBpcyBjaGFuZ2Vk IHRvIGNvdmVyIGFsbCB0cmFuc3BvcnQNCg0KDQoNCktoYWRlbWksIGV0IGFsLiAgICAgICAgICBF eHBpcmVzIEFwcmlsIDIzLCAyMDE4ICAgICAgICAgICAgICAgICBbUGFnZSA4XQ0KDA0KSW50ZXJu ZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICBBQkUgICAgICAgICAgICAgICAgICAgICAgT2N0 b2JlciAyMDE3DQoNCg0KICAgcHJvdG9jb2xzIHRoYXQgaW1wbGVtZW50cyBhIGNvbmdlc3Rpb24g Y29udHJvbCByZWR1Y3Rpb24gdG8gYW4gRUNODQogICBjb25nZXN0aW9uIHNpZ25hbC4gIEFkZGVk IHRleHQgYWJvdXQgQUJFJ3MgRnJlZUJTRCBtYWlubGluZSBrZXJuZWwNCiAgIHN0YXR1cyBpbmNs dWRpbmcgYSByZWZlcmVuY2UgdG8gdGhlIEZyZWVCU0QgY29kZSByZXZpZXcgcGFnZS4NCiAgIFJl ZmVyZW5jZXMgYXJlIHVwZGF0ZWQuDQoNCiAgIC0wMS4gIFRleHQgaW1wcm92ZWQsIG1haW5seSBp bmNvcnBvcmF0aW5nIGNvbW1lbnRzIGZyb20gU3R1YXJ0DQogICBDaGVzaGlyZS4gIFRoZSByZWZl cmVuY2UgdG8gYSB0ZWNobmljYWwgcmVwb3J0IGhhcyBiZWVuIHVwZGF0ZWQgdG8gYQ0KICAgcHVi bGlzaGVkIHZlcnNpb24gb2YgdGhlIHRlc3RzIFtBQkUyMDE3XS4gIFVzZWQgIkFRTSBNZWNoYW5p c20iDQogICB0aHJvdWdob3V0IGluIHBsYWNlIG9mIG90aGVyIGFsdGVybmF0aXZlcywgYW5kIG1v cmUgY29uc2lzdGVudCB1c2Ugb2YNCiAgIHRlY2huaWNhbCBsYW5ndWFnZSBhbmQgY2xhcmlmaWNh dGlvbiBvbiB0aGUgaW50ZW5kZWQgcHVycG9zZSBvZiB0aGUNCiAgIGV4cGVyaW1lbnRzIHJlcXVp cmVkIGJ5IEVYUCBzdGF0dXMuICBUaGVyZSB3YXMgbm8gY2hhbmdlIHRvIHRoZQ0KICAgdGVjaG5p Y2FsIGNvbnRlbnQuDQoNCiAgIC0wMC4gZHJhZnQtaWV0Zi10Y3BtLWFsdGVybmF0aXZlYmFja29m Zi1lY24tMDAgcmVwbGFjZXMgZHJhZnQtDQogICBraGFkZW1pLXRjcG0tYWx0ZXJuYXRpdmViYWNr b2ZmLWVjbi0wMS4gIFRleHQgZGVzY3JpYmluZyB0aGUgbmF0dXJlDQogICBvZiB0aGUgZXhwZXJp bWVudCB3YXMgYWRkZWQuDQoNCiAgIEluZGl2aWR1YWwgZHJhZnQgLTAxLiAgVGhpcyBJLUQgbm93 IHJlZmVycyB0byBkcmFmdC1ibGFjay10c3Z3Zy1lY24tDQogICBleHBlcmltZW50YXRpb24tMDIs IHdoaWNoIHJlcGxhY2VzIGRyYWZ0LWtoYWRlbWktdHN2d2ctZWNuLQ0KICAgcmVzcG9uc2UtMDAg dG8gbWFrZSBhIGJyb2FkZXIgdXBkYXRlIHRvIFJGQzMxNjggZm9yIHRoZSBzYWtlIG9mDQogICBh bGxvd2luZyBleHBlcmltZW50cy4gIEFzIGEgcmVzdWx0LCBzb21lIG9mIHRoZSBtb3RpdmF0aW5n IGFuZA0KICAgZGlzY3Vzc2luZyB0ZXh0IHRoYXQgd2FzIG1vdmVkIGZyb20gZHJhZnQta2hhZGVt aS1hbHRlcm5hdGl2ZWJhY2tvZmYtDQogICBlY24tMDMgdG8gZHJhZnQta2hhZGVtaS10c3Z3Zy1l Y24tcmVzcG9uc2UtMDAgaGFzIG5vdyBiZWVuIHJlLQ0KICAgaW5zZXJ0ZWQgaGVyZS4NCg0KICAg SW5kaXZpZHVhbCBkcmFmdCAtMDAuIGRyYWZ0LWtoYWRlbWktdHN2d2ctZWNuLXJlc3BvbnNlLTAw IGFuZCBkcmFmdC0NCiAgIGtoYWRlbWktdGNwbS1hbHRlcm5hdGl2ZWJhY2tvZmYtZWNuLTAwIHJl cGxhY2UgZHJhZnQta2hhZGVtaS0NCiAgIGFsdGVybmF0aXZlYmFja29mZi1lY24tMDMsIGZvbGxv d2luZyBkaXNjdXNzaW9uIGluIHRoZSBUU1ZXRyBhbmQgVENQTQ0KICAgd29ya2luZyBncm91cHMu DQoNCjExLiAgUmVmZXJlbmNlcw0KDQoxMS4xLiAgTm9ybWF0aXZlIFJlZmVyZW5jZXMNCg0KICAg W0ktRC5FQ04tZXhwXQ0KICAgICAgICAgICAgICBCbGFjaywgRC4sICJFeHBsaWNpdCBDb25nZXN0 aW9uIE5vdGlmaWNhdGlvbiAoRUNOKQ0KICAgICAgICAgICAgICBFeHBlcmltZW50YXRpb24iLCBJ bnRlcm5ldC1kcmFmdCwgSUVURiB3b3JrLWluLXByb2dyZXNzDQogICAgICAgICAgICAgIGRyYWZ0 LWlldGYtdHN2d2ctZWNuLWV4cGVyaW1lbnRhdGlvbi0wNiwgU2VwdGVtYmVyIDIwMTcuDQoNCiAg IFtSRkMyMTE5XSAgQnJhZG5lciwgUy4sICJLZXkgd29yZHMgZm9yIHVzZSBpbiBSRkNzIHRvIElu ZGljYXRlDQogICAgICAgICAgICAgIFJlcXVpcmVtZW50IExldmVscyIsIEJDUCAxNCwgUkZDIDIx MTksDQogICAgICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkMyMTE5LCBNYXJjaCAxOTk3LA0KICAg ICAgICAgICAgICA8aHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmMyMTE5Pi4NCg0K ICAgW1JGQzMxNjhdICBSYW1ha3Jpc2huYW4sIEsuLCBGbG95ZCwgUy4sIGFuZCBELiBCbGFjaywg IlRoZSBBZGRpdGlvbg0KICAgICAgICAgICAgICBvZiBFeHBsaWNpdCBDb25nZXN0aW9uIE5vdGlm aWNhdGlvbiAoRUNOKSB0byBJUCIsDQogICAgICAgICAgICAgIFJGQyAzMTY4LCBET0kgMTAuMTc0 ODcvUkZDMzE2OCwgU2VwdGVtYmVyIDIwMDEsDQogICAgICAgICAgICAgIDxodHRwczovL3d3dy5y ZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzMxNjg+Lg0KDQoNCg0KS2hhZGVtaSwgZXQgYWwuICAgICAg ICAgIEV4cGlyZXMgQXByaWwgMjMsIDIwMTggICAgICAgICAgICAgICAgIFtQYWdlIDldDQoMDQpJ bnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgIEFCRSAgICAgICAgICAgICAgICAgICAg ICBPY3RvYmVyIDIwMTcNCg0KDQogICBbUkZDNTY4MV0gIEFsbG1hbiwgTS4sIFBheHNvbiwgVi4s IGFuZCBFLiBCbGFudG9uLCAiVENQIENvbmdlc3Rpb24NCiAgICAgICAgICAgICAgQ29udHJvbCIs IFJGQyA1NjgxLCBET0kgMTAuMTc0ODcvUkZDNTY4MSwgU2VwdGVtYmVyIDIwMDksDQogICAgICAg ICAgICAgIDxodHRwczovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzU2ODE+Lg0KDQogICBb UkZDNzU2N10gIEJha2VyLCBGLiwgRWQuIGFuZCBHLiBGYWlyaHVyc3QsIEVkLiwgIklFVEYNCiAg ICAgICAgICAgICAgUmVjb21tZW5kYXRpb25zIFJlZ2FyZGluZyBBY3RpdmUgUXVldWUgTWFuYWdl bWVudCIsDQogICAgICAgICAgICAgIEJDUCAxOTcsIFJGQyA3NTY3LCBET0kgMTAuMTc0ODcvUkZD NzU2NywgSnVseSAyMDE1LA0KICAgICAgICAgICAgICA8aHR0cHM6Ly93d3cucmZjLWVkaXRvci5v cmcvaW5mby9yZmM3NTY3Pi4NCg0KMTEuMi4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMNCg0KICAg W0FCRS1GcmVlQlNEXQ0KICAgICAgICAgICAgICAiQUJFIHBhdGNoIHJldmlldyBpbiBGcmVlQlNE IiwNCiAgICAgICAgICAgICAgPGh0dHBzOi8vcmV2aWV3cy5mcmVlYnNkLm9yZy9EMTE2MTY+Lg0K DQogICBbQUJFMjAxN10gIEtoYWRlbWksIE4uLCBBcm1pdGFnZSwgRy4sIFdlbHpsLCBNLiwgRmFp cmh1cnN0LCBHLiwNCiAgICAgICAgICAgICAgWmFuZGVyLCBTLiwgYW5kIEQuIFJvcywgIkFsdGVy bmF0aXZlIEJhY2tvZmY6IEFjaGlldmluZw0KICAgICAgICAgICAgICBMb3cgTGF0ZW5jeSBhbmQg SGlnaCBUaHJvdWdocHV0IHdpdGggRUNOIGFuZCBBUU0iLCBJRklQDQogICAgICAgICAgICAgIE5F VFdPUktJTkcgMjAxNywgU3RvY2tob2xtLCBTd2VkZW4sIEp1bmUgMjAxNy4NCg0KICAgW0JVRkZF UkJMT0FUXQ0KICAgICAgICAgICAgICAiQnVmZmVyYmxvYXQgcHJvamVjdCIsDQogICAgICAgICAg ICAgIDxodHRwczovL3d3dy5idWZmZXJibG9hdC5uZXQvcHJvamVjdHMvYmxvYXQvd2lraS8NCiAg ICAgICAgICAgICAgSW50cm9kdWN0aW9uLz4uDQoNCiAgIFtDT0RFTDIwMTJdDQogICAgICAgICAg ICAgIE5pY2hvbHMsIEsuIGFuZCBWLiBKYWNvYnNvbiwgIkNvbnRyb2xsaW5nIFF1ZXVlIERlbGF5 IiwNCiAgICAgICAgICAgICAgSnVseSAyMDEyLCA8aHR0cDovL3F1ZXVlLmFjbS5vcmcvZGV0YWls LmNmbT9pZD0yMjA5MzM2Pi4NCg0KICAgW0ktRC5Db0RlbF0NCiAgICAgICAgICAgICAgTmljaG9s cywgSy4sIEphY29ic29uLCBWLiwgTWNHcmVnb3IsIFYuLCBhbmQgSi4gSXllbmdhciwNCiAgICAg ICAgICAgICAgIkNvbnRyb2xsZWQgRGVsYXkgQWN0aXZlIFF1ZXVlIE1hbmFnZW1lbnQiLCBJbnRl cm5ldC0NCiAgICAgICAgICAgICAgZHJhZnQsIElFVEYgd29yay1pbi1wcm9ncmVzcyBkcmFmdC1p ZXRmLWFxbS1jb2RlbC0wOSwNCiAgICAgICAgICAgICAgU2VwdGVtYmVyIDIwMTcuDQoNCiAgIFtJ LUQuQ1VCSUNdDQogICAgICAgICAgICAgIFJoZWUsIEkuLCBYdSwgTC4sIEhhLCBTLiwgWmltbWVy bWFubiwgQS4sIEVnZ2VydCwgTC4sIGFuZA0KICAgICAgICAgICAgICBSLiBTY2hlZmZlbmVnZ2Vy LCAiQ1VCSUMgZm9yIEZhc3QgTG9uZy1EaXN0YW5jZSBOZXR3b3JrcyIsDQogICAgICAgICAgICAg IEludGVybmV0LWRyYWZ0LCBJRVRGIHdvcmstaW4tcHJvZ3Jlc3MgZHJhZnQtaWV0Zi10Y3BtLQ0K ICAgICAgICAgICAgICBjdWJpYy0wNiwgU2VwdGVtYmVyIDIwMTcuDQoNCiAgIFtJLUQuaWV0Zi10 Y3BtLWFjY3VyYXRlLWVjbl0NCiAgICAgICAgICAgICAgQnJpc2NvZSwgQi4sIEt1ZWhsZXdpbmQs IE0uLCBhbmQgUi4gU2NoZWZmZW5lZ2dlciwgIk1vcmUNCiAgICAgICAgICAgICAgQWNjdXJhdGUg RUNOIEZlZWRiYWNrIGluIFRDUCIsIGRyYWZ0LWlldGYtdGNwbS1hY2N1cmF0ZS0NCiAgICAgICAg ICAgICAgZWNuLTAzICh3b3JrIGluIHByb2dyZXNzKSwgTWF5IDIwMTcuDQoNCg0KDQoNCg0KDQpL aGFkZW1pLCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBBcHJpbCAyMywgMjAxOCAgICAgICAgICAg ICAgICBbUGFnZSAxMF0NCgwNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICAgQUJF ICAgICAgICAgICAgICAgICAgICAgIE9jdG9iZXIgMjAxNw0KDQoNCiAgIFtJLUQuaWV0Zi10Y3Bt LWRjdGNwXQ0KICAgICAgICAgICAgICBCZW5zbGV5LCBTLiwgVGhhbGVyLCBELiwgQmFsYXN1YnJh bWFuaWFuLCBQLiwgRWdnZXJ0LCBMLiwNCiAgICAgICAgICAgICAgYW5kIEcuIEp1ZGQsICJEYXRh Y2VudGVyIFRDUCAoRENUQ1ApOiBUQ1AgQ29uZ2VzdGlvbg0KICAgICAgICAgICAgICBDb250cm9s IGZvciBEYXRhY2VudGVycyIsIGRyYWZ0LWlldGYtdGNwbS1kY3RjcC0xMCAod29yaw0KICAgICAg ICAgICAgICBpbiBwcm9ncmVzcyksIEF1Z3VzdCAyMDE3Lg0KDQogICBbSUNDMjAwMl0gIEt3b24s IE0uIGFuZCBTLiBGYWhteSwgIlRDUCBJbmNyZWFzZS9EZWNyZWFzZSBCZWhhdmlvcg0KICAgICAg ICAgICAgICB3aXRoIEV4cGxpY2l0IENvbmdlc3Rpb24gTm90aWZpY2F0aW9uIChFQ04pIiwgSUVF RQ0KICAgICAgICAgICAgICBJQ0MgMjAwMiwgTmV3IFlvcmssIE5ldyBZb3JrLCBVU0EsIE1heSAy MDAyLA0KICAgICAgICAgICAgICA8aHR0cDovL2R4LmRvaS5vcmcvMTAuMTEwOS9JQ0MuMjAwMi45 OTcyNjI+Lg0KDQogICBbUkZDNzcxM10gIE1hdGhpcywgTS4gYW5kIEIuIEJyaXNjb2UsICJDb25n ZXN0aW9uIEV4cG9zdXJlIChDb25FeCkNCiAgICAgICAgICAgICAgQ29uY2VwdHMsIEFic3RyYWN0 IE1lY2hhbmlzbSwgYW5kIFJlcXVpcmVtZW50cyIsIFJGQyA3NzEzLA0KICAgICAgICAgICAgICBE T0kgMTAuMTc0ODcvUkZDNzcxMywgRGVjZW1iZXIgMjAxNSwNCiAgICAgICAgICAgICAgPGh0dHBz Oi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNzcxMz4uDQoNCiAgIFtSRkM4MDMzXSAgUGFu LCBSLiwgTmF0YXJhamFuLCBQLiwgQmFrZXIsIEYuLCBhbmQgRy4gV2hpdGUsDQogICAgICAgICAg ICAgICJQcm9wb3J0aW9uYWwgSW50ZWdyYWwgQ29udHJvbGxlciBFbmhhbmNlZCAoUElFKTogQQ0K ICAgICAgICAgICAgICBMaWdodHdlaWdodCBDb250cm9sIFNjaGVtZSB0byBBZGRyZXNzIHRoZSBC dWZmZXJibG9hdA0KICAgICAgICAgICAgICBQcm9ibGVtIiwgUkZDIDgwMzMsIERPSSAxMC4xNzQ4 Ny9SRkM4MDMzLCBGZWJydWFyeSAyMDE3LA0KICAgICAgICAgICAgICA8aHR0cHM6Ly93d3cucmZj LWVkaXRvci5vcmcvaW5mby9yZmM4MDMzPi4NCg0KICAgW1JGQzgwODddICBGYWlyaHVyc3QsIEcu IGFuZCBNLiBXZWx6bCwgIlRoZSBCZW5lZml0cyBvZiBVc2luZw0KICAgICAgICAgICAgICBFeHBs aWNpdCBDb25nZXN0aW9uIE5vdGlmaWNhdGlvbiAoRUNOKSIsIFJGQyA4MDg3LA0KICAgICAgICAg ICAgICBET0kgMTAuMTc0ODcvUkZDODA4NywgTWFyY2ggMjAxNywNCiAgICAgICAgICAgICAgPGh0 dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjODA4Nz4uDQoNCkF1dGhvcnMnIEFkZHJl c3Nlcw0KDQogICBOYWVlbSBLaGFkZW1pDQogICBVbml2ZXJzaXR5IG9mIE9zbG8NCiAgIFBPIEJv eCAxMDgwIEJsaW5kZXJuDQogICBPc2xvICBOLTAzMTYNCiAgIE5vcndheQ0KDQogICBFbWFpbDog bmFlZW1rQGlmaS51aW8ubm8NCg0KDQogICBNaWNoYWVsIFdlbHpsDQogICBVbml2ZXJzaXR5IG9m IE9zbG8NCiAgIFBPIEJveCAxMDgwIEJsaW5kZXJuDQogICBPc2xvICBOLTAzMTYNCiAgIE5vcndh eQ0KDQogICBFbWFpbDogbWljaGF3ZUBpZmkudWlvLm5vDQoNCg0KDQoNCg0KDQpLaGFkZW1pLCBl dCBhbC4gICAgICAgICAgRXhwaXJlcyBBcHJpbCAyMywgMjAxOCAgICAgICAgICAgICAgICBbUGFn ZSAxMV0NCgwNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICAgQUJFICAgICAgICAg ICAgICAgICAgICAgIE9jdG9iZXIgMjAxNw0KDQoNCiAgIEdyZW52aWxsZSBBcm1pdGFnZQ0KICAg SW50ZXJuZXQgRm9yIFRoaW5ncyAoSTRUKSBSZXNlYXJjaCBHcm91cA0KICAgU3dpbmJ1cm5lIFVu aXZlcnNpdHkgb2YgVGVjaG5vbG9neQ0KICAgUE8gQm94IDIxOA0KICAgSm9obiBTdHJlZXQsIEhh d3Rob3JuDQogICBWaWN0b3JpYSAgMzEyMg0KICAgQXVzdHJhbGlhDQoNCiAgIEVtYWlsOiBnYXJt aXRhZ2VAc3dpbi5lZHUuYXUNCg0KDQogICBHb2RyZWQgRmFpcmh1cnN0DQogICBVbml2ZXJzaXR5 IG9mIEFiZXJkZWVuDQogICBTY2hvb2wgb2YgRW5naW5lZXJpbmcsIEZyYXNlciBOb2JsZSBCdWls ZGluZw0KICAgQWJlcmRlZW4gIEFCMjQgM1VFDQogICBVSw0KDQogICBFbWFpbDogZ29ycnlAZXJn LmFiZG4uYWMudWsNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCktoYWRlbWksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEFw cmlsIDIzLCAyMDE4ICAgICAgICAgICAgICAgIFtQYWdlIDEyXQ0K --_004_195D08F413114A91B55840D4370F8F00ifiuiono_ Content-Type: text/plain; name="draft-ietf-tcpm-alternativebackoff-ecn-04.txt" Content-Description: draft-ietf-tcpm-alternativebackoff-ecn-04.txt Content-Disposition: attachment; filename="draft-ietf-tcpm-alternativebackoff-ecn-04.txt"; size=28568; creation-date="Wed, 15 Nov 2017 11:14:02 GMT"; modification-date="Wed, 15 Nov 2017 11:14:02 GMT" Content-ID: <32395A83C0A2464FA6127B369CA3D637@mail.uio.no> Content-Transfer-Encoding: base64 DQoNCg0KDQpOZXR3b3JrIFdvcmtpbmcgR3JvdXAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIE4uIEtoYWRlbWkNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBXZWx6bA0KSW50ZW5kZWQgc3RhdHVz OiBFeHBlcmltZW50YWwgICAgICAgICAgICAgICAgICAgICAgICAgVW5pdmVyc2l0eSBvZiBPc2xv DQpFeHBpcmVzOiBNYXkgMTksIDIwMTggICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgRy4gQXJtaXRhZ2UNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg U3dpbmJ1cm5lIFVuaXZlcnNpdHkgb2YgVGVjaG5vbG9neQ0KICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRy4gRmFpcmh1cnN0DQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFVuaXZlcnNpdHkg b2YgQWJlcmRlZW4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBOb3ZlbWJlciAxNSwgMjAxNw0KDQoNCiAgICAgICAgICAgICAgICAgVENQIEFs dGVybmF0aXZlIEJhY2tvZmYgd2l0aCBFQ04gKEFCRSkNCiAgICAgICAgICAgICAgIGRyYWZ0LWll dGYtdGNwbS1hbHRlcm5hdGl2ZWJhY2tvZmYtZWNuLTA0DQoNCkFic3RyYWN0DQoNCiAgIFJlY2Vu dCBBY3RpdmUgUXVldWUgTWFuYWdlbWVudCAoQVFNKSBtZWNoYW5pc21zIGFsbG93IGZvciBidXJz dA0KICAgdG9sZXJhbmNlIHdoaWxlIGVuZm9yY2luZyBzaG9ydCBxdWV1ZXMgdG8gbWluaW1pc2Ug dGhlIHRpbWUgdGhhdA0KICAgcGFja2V0cyBzcGVuZCBlbnF1ZXVlZCBhdCBhIGJvdHRsZW5lY2su ICBUaGlzIGNhbiBjYXVzZSBub3RpY2VhYmxlDQogICBwZXJmb3JtYW5jZSBkZWdyYWRhdGlvbiBm b3IgVENQIGNvbm5lY3Rpb25zIHRyYXZlcnNpbmcgc3VjaCBhDQogICBib3R0bGVuZWNrLCBlc3Bl Y2lhbGx5IGlmIHRoZXkgYXJlIG9ubHkgYSBmZXcgb3IgdGhlaXIgYmFuZHdpZHRoLQ0KICAgZGVs YXktcHJvZHVjdCBpcyBsYXJnZS4gIEFuIEV4cGxpY2l0IENvbmdlc3Rpb24gTm90aWZpY2F0aW9u IChFQ04pDQogICBzaWduYWwgaW5kaWNhdGVzIHRoYXQgYW4gQVFNIG1lY2hhbmlzbSBpcyB1c2Vk IGF0IHRoZSBib3R0bGVuZWNrLCBhbmQNCiAgIHRoZXJlZm9yZSB0aGUgYm90dGxlbmVjayBuZXR3 b3JrIHF1ZXVlIGlzIGxpa2VseSB0byBiZSBzaG9ydC4gIFRoaXMNCiAgIGRvY3VtZW50IHRoZXJl Zm9yZSBwcm9wb3NlcyBhbiB1cGRhdGUgdG8gdGhlIFRDUCBzZW5kZXItc2lkZSBFQ04NCiAgIHJl YWN0aW9uIGluIGNvbmdlc3Rpb24gYXZvaWRhbmNlIHRvIHJlZHVjZSB0aGUgQ29uZ2VzdGlvbiBX aW5kb3cNCiAgIChjd25kKSBieSBhIHNtYWxsZXIgYW1vdW50IHRoYW4gdGhlIGNvbmdlc3Rpb24g Y29udHJvbCBhbGdvcml0aG0ncw0KICAgcmVhY3Rpb24gdG8gaW5mZXJyZWQgcGFja2V0IGxvc3Mu DQoNClN0YXR1cyBvZiBUaGlzIE1lbW8NCg0KICAgVGhpcyBJbnRlcm5ldC1EcmFmdCBpcyBzdWJt aXR0ZWQgaW4gZnVsbCBjb25mb3JtYW5jZSB3aXRoIHRoZQ0KICAgcHJvdmlzaW9ucyBvZiBCQ1Ag NzggYW5kIEJDUCA3OS4NCg0KICAgSW50ZXJuZXQtRHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50 cyBvZiB0aGUgSW50ZXJuZXQgRW5naW5lZXJpbmcNCiAgIFRhc2sgRm9yY2UgKElFVEYpLiAgTm90 ZSB0aGF0IG90aGVyIGdyb3VwcyBtYXkgYWxzbyBkaXN0cmlidXRlDQogICB3b3JraW5nIGRvY3Vt ZW50cyBhcyBJbnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJyZW50IEludGVybmV0LQ0K ICAgRHJhZnRzIGlzIGF0IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZHJhZnRzL2N1cnJl bnQvLg0KDQogICBJbnRlcm5ldC1EcmFmdHMgYXJlIGRyYWZ0IGRvY3VtZW50cyB2YWxpZCBmb3Ig YSBtYXhpbXVtIG9mIHNpeCBtb250aHMNCiAgIGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQs IG9yIG9ic29sZXRlZCBieSBvdGhlciBkb2N1bWVudHMgYXQgYW55DQogICB0aW1lLiAgSXQgaXMg aW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5jZQ0KICAgbWF0 ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3MuIg0K DQogICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJlIG9uIE1heSAxOSwgMjAxOC4NCg0K DQoNCg0KDQoNCg0KS2hhZGVtaSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE1heSAxOSwgMjAx OCAgICAgICAgICAgICAgICAgIFtQYWdlIDFdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAg ICAgICAgICAgIEFCRSAgICAgICAgICAgICAgICAgICAgIE5vdmVtYmVyIDIwMTcNCg0KDQpDb3B5 cmlnaHQgTm90aWNlDQoNCiAgIENvcHlyaWdodCAoYykgMjAxNyBJRVRGIFRydXN0IGFuZCB0aGUg cGVyc29ucyBpZGVudGlmaWVkIGFzIHRoZQ0KICAgZG9jdW1lbnQgYXV0aG9ycy4gIEFsbCByaWdo dHMgcmVzZXJ2ZWQuDQoNCiAgIFRoaXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBCQ1AgNzggYW5k IHRoZSBJRVRGIFRydXN0J3MgTGVnYWwNCiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBE b2N1bWVudHMNCiAgIChodHRwczovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBpbiBl ZmZlY3Qgb24gdGhlIGRhdGUgb2YNCiAgIHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQuICBQ bGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50cw0KICAgY2FyZWZ1bGx5LCBhcyB0aGV5IGRlc2Ny aWJlIHlvdXIgcmlnaHRzIGFuZCByZXN0cmljdGlvbnMgd2l0aCByZXNwZWN0DQogICB0byB0aGlz IGRvY3VtZW50LiAgQ29kZSBDb21wb25lbnRzIGV4dHJhY3RlZCBmcm9tIHRoaXMgZG9jdW1lbnQg bXVzdA0KICAgaW5jbHVkZSBTaW1wbGlmaWVkIEJTRCBMaWNlbnNlIHRleHQgYXMgZGVzY3JpYmVk IGluIFNlY3Rpb24gNC5lIG9mDQogICB0aGUgVHJ1c3QgTGVnYWwgUHJvdmlzaW9ucyBhbmQgYXJl IHByb3ZpZGVkIHdpdGhvdXQgd2FycmFudHkgYXMNCiAgIGRlc2NyaWJlZCBpbiB0aGUgU2ltcGxp ZmllZCBCU0QgTGljZW5zZS4NCg0KVGFibGUgb2YgQ29udGVudHMNCg0KICAgMS4gIERlZmluaXRp b25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAy DQogICAyLiAgSW50cm9kdWN0aW9uICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgIDINCiAgIDMuICBTcGVjaWZpY2F0aW9uIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNA0KICAgNC4gIERpc2N1c3Npb24gIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA0DQogICAg IDQuMS4gIFdoeSBVc2UgRUNOIHRvIFZhcnkgdGhlIERlZ3JlZSBvZiBCYWNrb2ZmPyAgLiAuIC4g LiAuIC4gLiAgIDQNCiAgICAgNC4yLiAgRm9jdXMgb24gRUNOIGFzIERlZmluZWQgaW4gUkZDMzE2 OCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNQ0KICAgICA0LjMuICBDaG9pY2Ugb2YgQUJFIE11 bHRpcGxpZXIgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA1DQogICA1LiAgQUJF IFJlcXVpcmVtZW50cyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgIDcNCiAgIDYuICBBY2tub3dsZWRnZW1lbnRzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICAgNw0KICAgNy4gIElBTkEgQ29uc2lkZXJhdGlvbnMgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA4DQogICA4LiAgSW1wbGVtZW50 YXRpb24gU3RhdHVzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDgN CiAgIDkuICBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICAgOA0KICAgMTAuIFJldmlzaW9uIEluZm9ybWF0aW9uICAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA5DQogICAxMS4gUmVmZXJlbmNlcyAgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDkNCiAgICAg MTEuMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICAgOQ0KICAgICAxMS4yLiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcyAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEwDQogICBBdXRob3JzJyBBZGRyZXNzZXMgIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTENCg0KMS4gIERlZmlu aXRpb25zDQoNCiAgIFRoZSBrZXkgd29yZHMgIk1VU1QiLCAiTVVTVCBOT1QiLCAiUkVRVUlSRUQi LCAiU0hBTEwiLCAiU0hBTEwgTk9UIiwNCiAgICJTSE9VTEQiLCAiU0hPVUxEIE5PVCIsICJSRUNP TU1FTkRFRCIsICJNQVkiLCBhbmQgIk9QVElPTkFMIiBpbiB0aGlzDQogICBkb2N1bWVudCBhcmUg dG8gYmUgaW50ZXJwcmV0ZWQgYXMgZGVzY3JpYmVkIGluIFJGQyAyMTE5IFtSRkMyMTE5XS4NCg0K Mi4gIEludHJvZHVjdGlvbg0KDQogICBFeHBsaWNpdCBDb25nZXN0aW9uIE5vdGlmaWNhdGlvbiAo RUNOKSBbUkZDMzE2OF0gbWFrZXMgaXQgcG9zc2libGUNCiAgIGZvciBhbiBBY3RpdmUgUXVldWUg TWFuYWdlbWVudCAoQVFNKSBtZWNoYW5pc20gdG8gc2lnbmFsIHRoZSBwcmVzZW5jZQ0KICAgb2Yg aW5jaXBpZW50IGNvbmdlc3Rpb24gd2l0aG91dCBpbmN1cnJpbmcgcGFja2V0IGxvc3MuICBUaGlz IGxldHMgdGhlDQogICBuZXR3b3JrIGRlbGl2ZXIgc29tZSBwYWNrZXRzIHRvIGFuIGFwcGxpY2F0 aW9uIHRoYXQgd291bGQgaGF2ZSBiZWVuDQogICBkcm9wcGVkIGlmIHRoZSBhcHBsaWNhdGlvbiBv ciB0cmFuc3BvcnQgZGlkIG5vdCBzdXBwb3J0IEVDTi4gIFRoaXMNCg0KDQoNCktoYWRlbWksIGV0 IGFsLiAgICAgICAgICAgRXhwaXJlcyBNYXkgMTksIDIwMTggICAgICAgICAgICAgICAgICBbUGFn ZSAyXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICBBQkUgICAgICAgICAg ICAgICAgICAgICBOb3ZlbWJlciAyMDE3DQoNCg0KICAgcGFja2V0IGxvc3MgcmVkdWN0aW9uIGlz IHRoZSBtb3N0IG9idmlvdXMgYmVuZWZpdCBvZiBFQ04sIGJ1dCBpdCBpcw0KICAgb2Z0ZW4gcmVs YXRpdmVseSBtb2Rlc3QuICBUaGVyZSBhcmUgYWxzbyBzaWduaWZpY2FudCBvdGhlciBiZW5lZml0 cw0KICAgZnJvbSBkZXBsb3lpbmcgRUNOIFtSRkM4MDg3XSwgaW5jbHVkaW5nIHJlZHVjZWQgZW5k LXRvLWVuZCBuZXR3b3JrDQogICBsYXRlbmN5Lg0KDQogICBUaGUgcnVsZXMgZm9yIEVDTiB3ZXJl IG9yaWdpbmFsbHkgd3JpdHRlbiB0byBiZSB2ZXJ5IGNvbnNlcnZhdGl2ZSwNCiAgIGFuZCByZXF1 aXJlZCB0aGUgY29uZ2VzdGlvbiBjb250cm9sIGFsZ29yaXRobXMgb2YgRUNOLWNhcGFibGUNCiAg IHRyYW5zcG9ydCBwcm90b2NvbHMgdG8gdHJlYXQgRUNOIGNvbmdlc3Rpb24gc2lnbmFscyBleGFj dGx5IHRoZSBzYW1lDQogICBhcyB0aGV5IHdvdWxkIHRyZWF0IGFuIGluZmVycmVkIHBhY2tldCBs b3NzIFtSRkMzMTY4XS4NCg0KICAgUmVzZWFyY2ggaGFzIGRlbW9uc3RyYXRlZCB0aGUgYmVuZWZp dHMgb2YgcmVkdWNpbmcgbmV0d29yayBkZWxheXMNCiAgIHRoYXQgYXJlIGNhdXNlZCBieSBpbnRl cmFjdGlvbiBvZiBsb3NzLWJhc2VkIFRDUCBjb25nZXN0aW9uIGNvbnRyb2wNCiAgIGFuZCBleGNl c3NpdmUgYnVmZmVyaW5nIFtCVUZGRVJCTE9BVF0uICBUaGlzIGhhcyBsZWQgdG8gdGhlIGNyZWF0 aW9uDQogICBvZiBuZXcgQVFNIG1lY2hhbmlzbXMgbGlrZSBQSUUgW1JGQzgwMzNdIGFuZCBDb0Rl bA0KICAgW0NPREVMMjAxMl1bSS1ELkNvRGVsXSwgd2hpY2ggcHJldmVudCBibG9hdGVkIHF1ZXVl cyB0aGF0IGFyZSBjb21tb24NCiAgIHdpdGggdW5tYW5hZ2VkIGFuZCBleGNlc3NpdmVseSBsYXJn ZSBidWZmZXJzIGRlcGxveWVkIGFjcm9zcyB0aGUNCiAgIEludGVybmV0IFtCVUZGRVJCTE9BVF0u DQoNCiAgIFRoZSBBUU0gbWVjaGFuaXNtcyBtZW50aW9uZWQgYWJvdmUgYWltIHRvIGtlZXAgYSBz dXN0YWluZWQgcXVldWUNCiAgIHNob3J0IHdoaWxlIHRvbGVyYXRpbmcgdHJhbnNpZW50IChzaG9y dC10ZXJtKSBwYWNrZXQgYnVyc3RzLg0KICAgSG93ZXZlciwgY3VycmVudGx5IHVzZWQgbG9zcy1i YXNlZCBjb25nZXN0aW9uIGNvbnRyb2wgbWVjaGFuaXNtcw0KICAgY2Fubm90IGFsd2F5cyB1dGls aXNlIGEgYm90dGxlbmVjayBsaW5rIHdlbGwgd2hlcmUgdGhlcmUgYXJlIHNob3J0DQogICBxdWV1 ZXMuICBGb3IgZXhhbXBsZSwgYSBUQ1Agc2VuZGVyIG11c3QgYmUgYWJsZSB0byBzdG9yZSBhdCBs ZWFzdCBhbg0KICAgZW5kLXRvLWVuZCBiYW5kd2lkdGgtZGVsYXkgcHJvZHVjdCAoQkRQKSB3b3J0 aCBvZiBkYXRhIGF0IHRoZQ0KICAgYm90dGxlbmVjayBidWZmZXIgaWYgaXQgaXMgdG8gbWFpbnRh aW4gZnVsbCBwYXRoIHV0aWxpc2F0aW9uIGluIHRoZQ0KICAgZmFjZSBvZiBsb3NzLWluZHVjZWQg aGFsdmluZyBvZiBjd25kIFtSRkM1NjgxXSwgd2hpY2ggZWZmZWN0aXZlbHkNCiAgIGRvdWJsZXMg dGhlIGFtb3VudCBvZiBkYXRhIHRoYXQgY2FuIGJlIGluIGZsaWdodCwgdGhlIG1heGltdW0gcm91 bmQtDQogICB0cmlwIHRpbWUgKFJUVCkgZXhwZXJpZW5jZSwgYW5kIHRoZSBwYXRoJ3MgZWZmZWN0 aXZlIFJUVCB1c2luZyB0aGUNCiAgIG5ldHdvcmsgcGF0aC4NCg0KICAgTW9kZXJuIEFRTSBtZWNo YW5pc21zIGNhbiB1c2UgRUNOIHRvIHNpZ25hbCB0aGUgZWFybHkgc2lnbnMgb2YNCiAgIGltcGVu ZGluZyBxdWV1ZSBidWlsZHVwIGxvbmcgYmVmb3JlIGEgdGFpbC1kcm9wIHF1ZXVlIHdvdWxkIGJl IGZvcmNlZA0KICAgdG8gcmVzb3J0IHRvIGRyb3BwaW5nIHBhY2tldHMuICBJdCBpcyB0aGVyZWZv cmUgYXBwcm9wcmlhdGUgZm9yIHRoZQ0KICAgdHJhbnNwb3J0IHByb3RvY29sIGNvbmdlc3Rpb24g Y29udHJvbCBhbGdvcml0aG0gdG8gaGF2ZSBhIG1vcmUNCiAgIG1lYXN1cmVkIHJlc3BvbnNlIHdo ZW4gYW4gZWFybHktd2FybmluZyBzaWduYWwgb2YgY29uZ2VzdGlvbiBpcw0KICAgcmVjZWl2ZWQg aW4gdGhlIGZvcm0gb2YgYW4gRUNOIENFLW1hcmtlZCBwYWNrZXQuICBSZWNvZ25pemluZyB0aGVz ZQ0KICAgY2hhbmdlcyBpbiBtb2Rlcm4gQVFNIHByYWN0aWNlcywgbW9yZSByZWNlbnQgcnVsZXMg aGF2ZSByZWxheGVkIHRoZQ0KICAgc3RyaWN0IHJlcXVpcmVtZW50IHRoYXQgRUNOIHNpZ25hbHMg YmUgdHJlYXRlZCBpZGVudGljYWxseSB0bw0KICAgaW5mZXJyZWQgcGFja2V0IGxvc3MgW0ktRC5F Q04tZXhwXS4gIEZvbGxvd2luZyB0aGVzZSBuZXdlciwgbW9yZQ0KICAgZmxleGlibGUgcnVsZXMs IHRoaXMgZG9jdW1lbnQgZGVmaW5lcyBhIG5ldyBzZW5kZXItc2lkZS1vbmx5DQogICBjb25nZXN0 aW9uIGNvbnRyb2wgcmVzcG9uc2UsIGNhbGxlZCAiQUJFIiAoQWx0ZXJuYXRpdmUgQmFja29mZiB3 aXRoDQogICBFQ04pLiAgQUJFIGltcHJvdmVzIFRDUCdzIGF2ZXJhZ2UgdGhyb3VnaHB1dCB3aGVu IHJvdXRlcnMgdXNlIEFRTQ0KICAgY29udHJvbGxlZCBidWZmZXJzIHRoYXQgYWxsb3cgZm9yIHNo b3J0IHF1ZXVlcyBvbmx5Lg0KDQoNCg0KDQoNCg0KDQoNCktoYWRlbWksIGV0IGFsLiAgICAgICAg ICAgRXhwaXJlcyBNYXkgMTksIDIwMTggICAgICAgICAgICAgICAgICBbUGFnZSAzXQ0KDA0KSW50 ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICBBQkUgICAgICAgICAgICAgICAgICAgICBO b3ZlbWJlciAyMDE3DQoNCg0KMy4gIFNwZWNpZmljYXRpb24NCg0KICAgVGhpcyBzcGVjaWZpY2F0 aW9uIGRlc2NyaWJlcyBhbiB1cGRhdGUgdG8gdGhlIGNvbmdlc3Rpb24gY29udHJvbA0KICAgYWxn b3JpdGhtIG9mIGFuIEVDTi1jYXBhYmxlIFRDUCB0cmFuc3BvcnQgcHJvdG9jb2wuICBJdCBhbGxv d3MgYSBUQ1ANCiAgIHN0YWNrIHRvIHVwZGF0ZSB0aGUgVENQIHNlbmRlciByZXNwb25zZSB3aGVu IGl0IHJlY2VpdmVzIGZlZWRiYWNrDQogICBpbmRpY2F0aW5nIHJlY2VwdGlvbiBvZiBhIENFLW1h cmtlZCBwYWNrZXQgKEVDTi1zaWduYWxsZWQgY29uZ2VzdGlvbg0KICAgaGVyZWFmdGVyKSBwZXIg RXF1YXRpb24gNCBvZiBbUkZDNTY4MV0uICBJdCBSRUNPTU1FTkRTIHRoYXQgYSBUQ1ANCiAgIHNl bmRlciBtdWx0aXBsaWVzIHRoZSBzbG93IHN0YXJ0IHRocmVzaG9sZCAoc3N0aHJlc2gpIGJ5IDAu OCB0aW1lcyBvZg0KICAgdGhlIEZsaWdodFNpemUgKHdpdGggaXRzIG1pbmltdW0gdmFsdWUgc2V0 IHRvIDIgKiBTTVNTKSBhbmQgcmVkdWNlcw0KICAgdGhlIGN3bmQgaW4gY29uZ2VzdGlvbiBhdm9p ZGFuY2UgZm9sbG93aW5nIHJlY2VwdGlvbiBvZiBhIFRDUCBzZWdtZW50DQogICB0aGF0IHNldHMg dGhlIEVDTi1FY2hvIGZsYWcgKGRlZmluZWQgaW4gW1JGQzMxNjhdKS4gIFdoaWxlIHRoaXMNCiAg IHNwZWNpZmljYXRpb24gY29uY2VybnMgVENQLCBvdGhlciB0cmFuc3BvcnRzIGFsc28gc3VwcG9y dCBhIHBlci1SVFQNCiAgIHJlc3BvbnNlIHRvIEVDTi4gIFRoZSBtZXRob2QgZGVmaW5lZCBpbiB0 aGlzIGRvY3VtZW50IGlzIGFsc28NCiAgIGFwcGxpY2FibGUgZm9yIHN1Y2ggdHJhbnNwb3J0cy4N Cg0KNC4gIERpc2N1c3Npb24NCg0KICAgTXVjaCBvZiB0aGUgdGVjaG5pY2FsIGJhY2tncm91bmQg dG8gQUJFIGNhbiBiZSBmb3VuZCBpbiBhIHJlc2VhcmNoDQogICBwYXBlciBbQUJFMjAxN10uICBU aGlzIHBhcGVyIHVzZWQgYSBtaXggb2YgZXhwZXJpbWVudHMsIHRoZW9yeSBhbmQNCiAgIHNpbXVs YXRpb25zIHdpdGggc3RhbmRhcmQgTmV3UmVubyBhbmQgQ1VCSUMgdG8gZXZhbHVhdGUgdGhlDQog ICB0ZWNobmlxdWUuICBUaGUgdGVjaG5pcXVlIHdhcyBzaG93biB0byBwcmVzZW50ICIuLi5zaWdu aWZpY2FudA0KICAgcGVyZm9ybWFuY2UgZ2FpbnMgaW4gbGlnaHRseS1tdWx0aXBsZXhlZCBbZmV3 IGNvbmN1cnJlbnQgZmxvd3NdDQogICBzY2VuYXJpb3MsIHdpdGhvdXQgbG9zaW5nIHRoZSBkZWxh eS1yZWR1Y3Rpb24gYmVuZWZpdHMgb2YgZGVwbG95aW5nDQogICBDb0RlbCBvciBQSUUiLiAgVGhl IHBlcmZvcm1hbmNlIGltcHJvdmVtZW50IGlzIGFjaGlldmVkIHdoZW4gcmVhY3RpbmcNCiAgIHRv IEVDTi1FY2hvIGluIGNvbmdlc3Rpb24gYXZvaWRhbmNlIGJ5IG11bHRpcGx5aW5nIGN3bmQgYW5k IHNzdGhyZXNoDQogICB3aXRoIGEgdmFsdWUgaW4gdGhlIHJhbmdlIFswLjcsMC44NV0uDQoNCjQu MS4gIFdoeSBVc2UgRUNOIHRvIFZhcnkgdGhlIERlZ3JlZSBvZiBCYWNrb2ZmPw0KDQogICBUaGUg Y2xhc3NpYyBydWxlLW9mLXRodW1iIGRpY3RhdGVzIHRoYXQgYSBuZXR3b3JrIHBhdGggbmVlZHMg dG8NCiAgIHByb3ZpZGUgYSBCRFAgb2YgYm90dGxlbmVjayBidWZmZXJpbmcgaWYgYSBUQ1AgY29u bmVjdGlvbiB3aXNoZXMgdG8NCiAgIG9wdGltaXNlIHBhdGggdXRpbGlzYXRpb24uICBBIHNpbmds ZSBUQ1AgYnVsayB0cmFuc2ZlciBydW5uaW5nDQogICB0aHJvdWdoIHN1Y2ggYSBib3R0bGVuZWNr IHdpbGwgaGF2ZSBpbmNyZWFzZWQgaXRzIGNvbmdlc3Rpb24gd2luZG93DQogICAoY3duZCkgdXAg dG8gMipCRFAgYnkgdGhlIHRpbWUgdGhhdCBwYWNrZXQgbG9zcyBvY2N1cnMuICBXaGVuIHBhY2tl dA0KICAgbG9zcyBpcyBpbmZlcnJlZCB1c2luZyB0aGUgcmV0cmFuc21pc3Npb24gdGltZXIgYW5k IHRoZSBnaXZlbiBwYWNrZXQNCiAgIGhhcyBub3QgeWV0IGJlZW4gcmVzZW50IGJ5IHdheSBvZiB0 aGUgcmV0cmFuc21pc3Npb24gdGltZXIgKHJlZ2FyZGVkDQogICBhcyBhIG5vdGlmaWNhdGlvbiBv ZiBjb25nZXN0aW9uKSwgU3RhbmRhcmQgVENQIHNldHMgdGhlIHNzdGhyZXNoIHRvDQogICB0aGUg bWF4aW11bSBvZiBoYWxmIG9mIHRoZSBGbGlnaHRTaXplIGFuZCAyKlNNU1MgW1JGQzU2ODFdLCB3 aGljaA0KICAgY2F1c2VzIHRoZSBUQ1AgY29uZ2VzdGlvbiBjb250cm9sIHRvIGdvIGJhY2sgdG8g YWxsb3dpbmcgb25seSBhIEJEUA0KICAgb2YgcGFja2V0cyBpbiBmbGlnaHQgLS0ganVzdCBzdWZm aWNpZW50IHRvIG1haW50YWluIDEwMCUgdXRpbGlzYXRpb24NCiAgIG9mIHRoZSBib3R0bGVuZWNr IG9uIHRoZSBuZXR3b3JrIHBhdGguDQoNCiAgIEFRTSBtZWNoYW5pc21zIHN1Y2ggYXMgQ29EZWwg W0ktRC5Db0RlbF0gYW5kIFBJRSBbUkZDODAzM10gc2V0IGENCiAgIGRlbGF5IHRhcmdldCBpbiBy b3V0ZXJzIGFuZCB1c2UgY29uZ2VzdGlvbiBub3RpZmljYXRpb25zIHRvIGNvbnN0cmFpbg0KICAg dGhlIHF1ZXVpbmcgZGVsYXlzIGV4cGVyaWVuY2VkIGJ5IHBhY2tldHMsIHJhdGhlciB0aGFuIGlu IHJlc3BvbnNlIHRvDQogICBpbXBlbmRpbmcgb3IgYWN0dWFsIGJvdHRsZW5lY2sgYnVmZmVyIGV4 aGF1c3Rpb24uICBXaXRoIGN1cnJlbnQNCiAgIGRlZmF1bHQgZGVsYXkgdGFyZ2V0cywgQ29EZWwg YW5kIFBJRSBib3RoIGVmZmVjdGl2ZWx5IGVtdWxhdGUgYQ0KICAgYm90dGxlbmVjayB3aXRoIGEg c2hvcnQgcXVldWUgKHNlY3Rpb24gSUksIFtBQkUyMDE3XSkgd2hpbGUgYWxzbw0KDQoNCg0KS2hh ZGVtaSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE1heSAxOSwgMjAxOCAgICAgICAgICAgICAg ICAgIFtQYWdlIDRdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgIEFCRSAg ICAgICAgICAgICAgICAgICAgIE5vdmVtYmVyIDIwMTcNCg0KDQogICBhbGxvd2luZyBzaG9ydCB0 cmFmZmljIGJ1cnN0cyBpbnRvIHRoZSBxdWV1ZS4gIFRoaXMgcHJvdmlkZXMNCiAgIGFjY2VwdGFi bGUgcGVyZm9ybWFuY2UgZm9yIFRDUCBjb25uZWN0aW9ucyBvdmVyIGEgcGF0aCB3aXRoIGEgbG93 DQogICBCRFAsIG9yIGluIGhpZ2hseSBtdWx0aXBsZXhlZCBzY2VuYXJpb3MgKG1hbnkgY29uY3Vy cmVudCB0cmFuc3BvcnQNCiAgIGZsb3dzKS4gIEhvd2V2ZXIsIGluIGEgbGlnaHRseS1tdWx0aXBs ZXhlZCBjYXNlIG92ZXIgYSBwYXRoIHdpdGggYQ0KICAgbGFyZ2UgQkRQLCBjb252ZW50aW9uYWwg VENQIGJhY2tvZmYgbGVhZHMgdG8gZ2FwcyBpbiBwYWNrZXQNCiAgIHRyYW5zbWlzc2lvbiBhbmQg dW5kZXItdXRpbGlzYXRpb24gb2YgdGhlIHBhdGguDQoNCiAgIEluc3RlYWQgb2YgZGlzY2FyZGlu ZyBwYWNrZXRzLCBhbiBBUU0gbWVjaGFuaXNtIGlzIGFsbG93ZWQgdG8gbWFyaw0KICAgRUNOLWNh cGFibGUgcGFja2V0cyB3aXRoIGFuIEVDTiBDRS1tYXJrLiAgVGhlIHJlY2VwdGlvbiBvZiBhIENF LW1hcmsNCiAgIGZlZWRiYWNrIG5vdCBvbmx5IGluZGljYXRlcyBjb25nZXN0aW9uIG9uIHRoZSBu ZXR3b3JrIHBhdGgsIGl0IGFsc28NCiAgIGluZGljYXRlcyB0aGF0IGFuIEFRTSBtZWNoYW5pc20g ZXhpc3RzIGF0IHRoZSBib3R0bGVuZWNrIGFsb25nIHRoZQ0KICAgcGF0aCwgYW5kIGhlbmNlIHRo ZSBDRS1tYXJrIGxpa2VseSBjYW1lIGZyb20gYSBib3R0bGVuZWNrIHdpdGggYQ0KICAgY29udHJv bGxlZCBzaG9ydCBxdWV1ZS4gIFJlYWN0aW5nIGRpZmZlcmVudGx5IHRvIGFuIEVDTi1zaWduYWxs ZWQNCiAgIGNvbmdlc3Rpb24gdGhhbiB0byBhbiBpbmZlcnJlZCBwYWNrZXQgbG9zcyBjYW4gdGhl biB5aWVsZCB0aGUgYmVuZWZpdA0KICAgb2YgYSByZWR1Y2VkIGJhY2stb2ZmIHdoZW4gcXVldWVz IGFyZSBzaG9ydC4gIFVzaW5nIEVDTiBjYW4gYWxzbyBiZQ0KICAgYWR2YW50YWdlb3VzIGZvciBz ZXZlcmFsIG90aGVyIHJlYXNvbnMgW1JGQzgwODddLg0KDQogICBUaGUgaWRlYSBvZiByZWFjdGlu ZyBkaWZmZXJlbnRseSB0byBpbmZlcnJlZCBwYWNrZXQgbG9zcyBhbmQNCiAgIGRldGVjdGlvbiBv ZiBhbiBFQ04tc2lnbmFsbGVkIGNvbmdlc3Rpb24gcHJlLWRhdGVzIHRoaXMgZG9jdW1lbnQuDQog ICBGb3IgZXhhbXBsZSwgcHJldmlvdXMgcmVzZWFyY2ggcHJvcG9zZWQgdXNpbmcgRUNOIENFLW1h cmtlZCBmZWVkYmFjaw0KICAgdG8gbW9kaWZ5IFRDUCBjb25nZXN0aW9uIGNvbnRyb2wgYmVoYXZp b3VyIHZpYSBhIGxhcmdlcg0KICAgbXVsdGlwbGljYXRpdmUgZGVjcmVhc2UgZmFjdG9yIGluIGNv bmp1bmN0aW9uIHdpdGggYSBzbWFsbGVyIGFkZGl0aXZlDQogICBpbmNyZWFzZSBmYWN0b3IgW0lD QzIwMDJdLiAgVGhlIGdvYWwgb2YgdGhpcyBmb3JtZXIgd29yayB3YXMgdG8NCiAgIG9wZXJhdGUg YWNyb3NzIEFRTSBib3R0bGVuZWNrcyB1c2luZyBSYW5kb20gRWFybHkgRGV0ZWN0aW9uIChSRUQp DQogICB0aGF0IHdlcmUgbm90IG5lY2Vzc2FyaWx5IGNvbmZpZ3VyZWQgdG8gZW11bGF0ZSBhIHNo b3J0IHF1ZXVlDQogICAoW1JGQzc1NjddIG5vdGVzIHRoZSBjdXJyZW50IHN0YXR1cyBvZiBSRUQg YXMgYW4gQVFNIG1ldGhvZC4pDQoNCjQuMi4gIEZvY3VzIG9uIEVDTiBhcyBEZWZpbmVkIGluIFJG QzMxNjgNCg0KICAgU29tZSB0cmFuc3BvcnQgcHJvdG9jb2wgbWVjaGFuaXNtcyByZWx5IG9uIEVD TiBzZW1hbnRpY3MgdGhhdCBkaWZmZXINCiAgIGZyb20gdGhlIG9yaWdpbmFsIEVDTiBkZWZpbml0 aW9uIFtSRkMzMTY4XSAtLSBmb3IgZXhhbXBsZSwgQ29uZ2VzdGlvbg0KICAgRXhwb3N1cmUgKENv bkV4KSBbUkZDNzcxM10gYW5kIERhdGFjZW50ZXIgVENQIChEQ1RDUCkNCiAgIFtJLUQuaWV0Zi10 Y3BtLWRjdGNwXSBuZWVkIG1vcmUgYWNjdXJhdGUgRUNOIGluZm9ybWF0aW9uIHRoYW4gdGhhdA0K ICAgb2ZmZXJlZCBieSB0aGUgb3JpZ2luYWwgZmVlZGJhY2sgbWV0aG9kLiAgT3RoZXIgbWVjaGFu aXNtcyAoZS5nLiwNCiAgIFtJLUQuaWV0Zi10Y3BtLWFjY3VyYXRlLWVjbl0pIGFsbG93IHRoZSBz ZW5kZXIgdG8gYWRqdXN0IHRoZSByYXRlDQogICBtb3JlIGZyZXF1ZW50bHkgdGhhbiBvbmNlIGVh Y2ggcGF0aCBSVFQuICBVc2Ugb2YgdGhlc2UgbWVjaGFuaXNtcyBpcw0KICAgb3V0IG9mIHNjb3Bl IGZvciB0aGlzIGRvY3VtZW50Lg0KDQo0LjMuICBDaG9pY2Ugb2YgQUJFIE11bHRpcGxpZXINCg0K ICAgQUJFIGRlY291cGxlcyB0aGUgcmVhY3Rpb24gb2YgYSBUQ1Agc2VuZGVyIHRvIGluZmVycmVk IHBhY2tldCBsb3NzDQogICBhbmQgRUNOLXNpZ25hbGxlZCBjb25nZXN0aW9uIHdoZW4gaW4gdGhl IGNvbmdlc3Rpb24gYXZvaWRhbmNlIHBoYXNlDQogICBieSBkaWZmZXJlbnRpYXRpbmcgdGhlIHNj YWxpbmcgZmFjdG9yIHVzZWQgaW4gRXF1YXRpb24gNCBpbg0KICAgU2VjdGlvbiAzLjEgb2YgW1JG QzU2ODFdLiAgVGhlIGRlc2NyaXB0aW9uIHJlc3BlY3RpdmVseSB1c2VzDQogICBiZXRhX3tsb3Nz fSBhbmQgYmV0YV97ZWNufSB0byByZWZlciB0byB0aGUgbXVsdGlwbGljYXRpdmUgZGVjcmVhc2UN CiAgIGZhY3RvcnMgYXBwbGllZCBpbiByZXNwb25zZSB0byBpbmZlcnJlZCBwYWNrZXQgbG9zcywg YW5kIGluIHJlc3BvbnNlDQogICB0byBhIHJlY2VpdmVyIGluZGljYXRpbmcgRUNOLXNpZ25hbGxl ZCBjb25nZXN0aW9uLiAgRm9yIG5vbi1FQ04tDQogICBlbmFibGVkIFRDUCBjb25uZWN0aW9ucywg b25seSBiZXRhX3tsb3NzfSBhcHBsaWVzLg0KDQoNCg0KS2hhZGVtaSwgZXQgYWwuICAgICAgICAg ICBFeHBpcmVzIE1heSAxOSwgMjAxOCAgICAgICAgICAgICAgICAgIFtQYWdlIDVdDQoMDQpJbnRl cm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgIEFCRSAgICAgICAgICAgICAgICAgICAgIE5v dmVtYmVyIDIwMTcNCg0KDQogICBJbiBvdGhlciB3b3JkcywgaW4gcmVzcG9uc2UgdG8gaW5mZXJy ZWQgcGFja2V0IGxvc3M6DQoNCiAgICAgIHNzdGhyZXNoID0gbWF4IChGbGlnaHRTaXplICogYmV0 YV97bG9zc30sIDIgKiBTTVNTKQ0KDQogICBhbmQgaW4gcmVzcG9uc2UgdG8gYW4gaW5kaWNhdGlv biBvZiBhbiBFQ04tc2lnbmFsbGVkIGNvbmdlc3Rpb246DQoNCiAgICAgIHNzdGhyZXNoID0gbWF4 IChGbGlnaHRTaXplICogYmV0YV97ZWNufSwgMiAqIFNNU1MpDQoNCiAgIGFuZA0KDQogICAgICBj d25kID0gc3N0aHJlc2gNCg0KICAgd2hlcmUgRmxpZ2h0U2l6ZSBpcyB0aGUgYW1vdW50IG9mIG91 dHN0YW5kaW5nIGRhdGEgaW4gdGhlIG5ldHdvcmssDQogICB1cHBlci1ib3VuZGVkIGJ5IHRoZSBz bWFsbGVyIG9mIHRoZSBzZW5kZXIncyBjd25kIGFuZCB0aGUgcmVjZWl2ZXIncw0KICAgYWR2ZXJ0 aXNlZCB3aW5kb3cgKHJ3bmQpIFtSRkM1NjgxXS4gIFRoZSBoaWdoZXIgdGhlIHZhbHVlcyBvZg0K ICAgYmV0YV97bG9zc30gYW5kIGJldGFfe2Vjbn0sIHRoZSBsZXNzIGFnZ3Jlc3NpdmUgdGhlIHJl c3BvbnNlIG9mIGFueQ0KICAgaW5kaXZpZHVhbCBiYWNrb2ZmIGV2ZW50Lg0KDQogICBUaGUgYXBw cm9wcmlhdGUgY2hvaWNlIGZvciBiZXRhX3tsb3NzfSBhbmQgYmV0YV97ZWNufSB2YWx1ZXMgaXMg YQ0KICAgYmFsYW5jaW5nIGFjdCBiZXR3ZWVuIHBhdGggdXRpbGlzYXRpb24gYW5kIGRyYWluaW5n IHRoZSBib3R0bGVuZWNrDQogICBxdWV1ZS4gIE1vcmUgYWdncmVzc2l2ZSBiYWNrb2ZmIChzbWFs bGVyIGJldGFfKikgcmlza3MgdW5kZXJ1dGlsaXNpbmcNCiAgIHRoZSBwYXRoLCB3aGlsZSBsZXNz IGFnZ3Jlc3NpdmUgYmFja29mZiAobGFyZ2VyIGJldGFfKikgY2FuIHJlc3VsdCBpbg0KICAgc2xv d2VyIGRyYWluaW5nIG9mIHRoZSBib3R0bGVuZWNrIHF1ZXVlLg0KDQogICBUaGUgSW50ZXJuZXQg aGFzIGFscmVhZHkgYmVlbiBydW5uaW5nIHdpdGggYXQgbGVhc3QgdHdvIGRpZmZlcmVudA0KICAg YmV0YV97bG9zc30gdmFsdWVzIGZvciBzZXZlcmFsIHllYXJzOiB0aGUgc3RhbmRhcmQgdmFsdWUg aXMgMC41DQogICBbUkZDNTY4MV0sIGFuZCB0aGUgTGludXggaW1wbGVtZW50YXRpb24gb2YgQ1VC SUMgW0ktRC5DVUJJQ10gaGFzIHVzZWQNCiAgIGEgbXVsdGlwbGllciBvZiAwLjcgc2luY2Uga2Vy bmVsIHZlcnNpb24gMi42LjI1IHJlbGVhc2VkIGluIDIwMDguDQogICBBQkUgcHJvcG9zZXMgbm8g Y2hhbmdlIHRvIGJldGFfe2xvc3N9IHVzZWQgYnkgY3VycmVudCBUQ1ANCiAgIGltcGxlbWVudGF0 aW9ucy4NCg0KICAgYmV0YV97ZWNufSBkZXBlbmRzIG9uIGhvdyB0aGUgcmVzcG9uc2Ugb2YgYSBU Q1AgY29ubmVjdGlvbiB0byBzaGFsbG93DQogICBBUU0gbWFya2luZyB0aHJlc2hvbGRzIGlzIG9w dGltaXNlZC4gYmV0YV97bG9zc30gcmVmbGVjdHMgdGhlDQogICBwcmVmZXJyZWQgcmVzcG9uc2Ug b2YgZWFjaCBjb25nZXN0aW9uIGNvbnRyb2wgYWxnb3JpdGhtIHdoZW4gZmFjZWQNCiAgIHdpdGgg ZXhoYXVzdGlvbiBvZiBidWZmZXJzIChvZiB1bmtub3duIGRlcHRoKSBzaWduYWxsZWQgYnkgcGFj a2V0DQogICBsb3NzLiAgQ29uc2VxdWVudGx5LCBmb3IgYW55IGdpdmVuIFRDUCBjb25nZXN0aW9u IGNvbnRyb2wgYWxnb3JpdGhtDQogICB0aGUgY2hvaWNlIG9mIGJldGFfe2Vjbn0gaXMgbGlrZWx5 IHRvIGJlIGFsZ29yaXRobS1zcGVjaWZpYywgcmF0aGVyDQogICB0aGFuIGEgY29uc3RhbnQgbXVs dGlwbGUgb2YgdGhlIGFsZ29yaXRobSdzIGV4aXN0aW5nIGJldGFfe2xvc3N9Lg0KICAgVGhlIHJl Y29tbWVuZGVkIGJldGFfe2Vjbn0gdmFsdWUgaW4gdGhpcyBkb2N1bWVudCBpcyBvbmx5IGFwcGxp Y2FibGUNCiAgIGZvciBTdGFuZGFyZCBUQ1AgY29uZ2VzdGlvbiBjb250cm9sLg0KDQogICBBIHJh bmdlIG9mIHRlc3RzIChzZWN0aW9uIElWLCBbQUJFMjAxN10pIHdpdGggTmV3UmVubyBhbmQgQ1VC SUMgb3Zlcg0KICAgQ29EZWwgYW5kIFBJRSBpbiBsaWdodGx5LW11bHRpcGxleGVkIHNjZW5hcmlv cyBoYXZlIGV4cGxvcmVkIHRoaXMNCiAgIGNob2ljZSBvZiBwYXJhbWV0ZXIuICBUaGUgcmVzdWx0 cyBvZiB0aGVzZSB0ZXN0cyBpbmRpY2F0ZSB0aGF0IENVQklDDQogICBjb25uZWN0aW9ucyBiZW5l Zml0IGZyb20gYmV0YV97ZWNufSBvZiAwLjg1IChjZi4gIGJldGFfe2xvc3N9ID0gMC43KSwNCiAg IGFuZCBOZXdSZW5vIGNvbm5lY3Rpb25zIHNlZSBpbXByb3ZlbWVudHMgd2l0aCBiZXRhX3tlY259 IGluIHRoZSByYW5nZQ0KICAgMC43IHRvIDAuODUgKGNmLiBiZXRhX3tsb3NzfSA9IDAuNSkuDQoN Cg0KDQoNCktoYWRlbWksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBNYXkgMTksIDIwMTggICAg ICAgICAgICAgICAgICBbUGFnZSA2XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAg ICAgICBBQkUgICAgICAgICAgICAgICAgICAgICBOb3ZlbWJlciAyMDE3DQoNCg0KNS4gIEFCRSBS ZXF1aXJlbWVudHMNCg0KICAgVGhpcyB1cGRhdGUgaXMgYSBzZW5kZXItc2lkZSBvbmx5IGNoYW5n ZS4gIExpa2Ugb3RoZXIgY2hhbmdlcyB0bw0KICAgY29uZ2VzdGlvbiBjb250cm9sIGFsZ29yaXRo bXMsIGl0IGRvZXMgbm90IHJlcXVpcmUgYW55IGNoYW5nZSB0byB0aGUNCiAgIFRDUCByZWNlaXZl ciBvciB0byBuZXR3b3JrIGRldmljZXMuICBJdCBkb2VzIG5vdCByZXF1aXJlIGFueSBBQkUtDQog ICBzcGVjaWZpYyBjaGFuZ2VzIGluIHJvdXRlcnMgb3IgdGhlIHVzZSBvZiBBY2N1cmF0ZSBFQ04g ZmVlZGJhY2sNCiAgIFtJLUQuaWV0Zi10Y3BtLWFjY3VyYXRlLWVjbl0gYnkgYSByZWNlaXZlci4N Cg0KICAgUkZDIDMxNjggc3RhdGVzIHRoYXQgdGhlIGNvbmdlc3Rpb24gY29udHJvbCByZXNwb25z ZSB0byBhbiBFQ04tDQogICBzaWduYWxsZWQgY29uZ2VzdGlvbiBpcyB0aGUgc2FtZSBhcyB0aGUg cmVzcG9uc2UgdG8gYSBkcm9wcGVkIHBhY2tldA0KICAgW1JGQzMxNjhdLiAgW0ktRC5FQ04tZXhw XSB1cGRhdGVzIHRoaXMgc3BlY2lmaWNhdGlvbiB0byBhbGxvdyBzeXN0ZW1zDQogICB0byBwcm92 aWRlIGEgZGlmZmVyZW50IGJlaGF2aW91ciB3aGVuIHRoZXkgZXhwZXJpZW5jZSBFQ04tc2lnbmFs bGVkDQogICBjb25nZXN0aW9uIHJhdGhlciB0aGFuIHBhY2tldCBsb3NzLiAgVGhlIHByZXNlbnQg c3BlY2lmaWNhdGlvbg0KICAgZGVmaW5lcyBzdWNoIGFuIGV4cGVyaW1lbnQgYW5kIGhhcyB0aHVz IGJlZW4gYXNzaWduZWQgYW4gRXhwZXJpbWVudGFsDQogICBzdGF0dXMgYmVmb3JlIGJlaW5nIHBy b3Bvc2VkIGFzIGEgU3RhbmRhcmRzLVRyYWNrIHVwZGF0ZS4NCg0KICAgVGhlIHB1cnBvc2Ugb2Yg dGhlIEludGVybmV0IGV4cGVyaW1lbnQgaXMgdG8gY29sbGVjdCBleHBlcmllbmNlIHdpdGgNCiAg IGRlcGxveW1lbnQgb2YgQUJFLCBhbmQgY29uZmlybSB0aGUgc2FmZXR5IGluIGRlcGxveWVkIG5l dHdvcmtzIHVzaW5nDQogICB0aGlzIHVwZGF0ZSB0byBUQ1AgY29uZ2VzdGlvbiBjb250cm9sLg0K DQogICBXaGVuIHVzZWQgd2l0aCBib3R0bGVuZWNrcyB0aGF0IGRvIG5vdCBzdXBwb3J0IEVDTi1t YXJraW5nIHRoZQ0KICAgc3BlY2lmaWNhdGlvbiBkb2VzIG5vdCBtb2RpZnkgdGhlIHRyYW5zcG9y dCBwcm90b2NvbC4NCg0KICAgVG8gZXZhbHVhdGUgdGhlIGJlbmVmaXQsIHRoaXMgZXhwZXJpbWVu dCB0aGVyZWZvcmUgcmVxdWlyZXMgc3VwcG9ydA0KICAgaW4gQVFNIHJvdXRlcnMgKGV4Y2VwdCB0 byBlbmFibGUgYW4gRUNOLW1hcmtpbmcgbWVjaGFuaXNtIFtSRkMzMTY4XQ0KICAgW1JGQzc1Njdd KSBmb3IgRUNOLW1hcmtpbmcgb2YgcGFja2V0cyBjYXJyeWluZyB0aGUgRUNOIENhcGFibGUNCiAg IFRyYW5zcG9ydCwgRUNUKDApLCBjb2RlcG9pbnQgW1JGQzMxNjhdLg0KDQogICBJZiB0aGUgbWV0 aG9kIGlzIG9ubHkgZGVwbG95ZWQgYnkgc29tZSBzZW5kZXJzLCBhbmQgbm90IGJ5IG90aGVycywN CiAgIHRoZSBzZW5kZXJzIHRoYXQgdXNlIHRoaXMgbWV0aG9kIGNhbiBnYWluIHNvbWUgYWR2YW50 YWdlLCBwb3NzaWJseSBhdA0KICAgdGhlIGV4cGVuc2Ugb2Ygb3RoZXIgZmxvd3MgdGhhdCBkbyBu b3QgdXNlIHRoaXMgdXBkYXRlZCBtZXRob2QuDQogICBCZWNhdXNlIHRoaXMgYWR2YW50YWdlIGFw cGxpZXMgb25seSB0byBFQ04tbWFya2VkIHBhY2tldHMgYW5kIG5vdCB0bw0KICAgcGFja2V0IGxv c3MgaW5kaWNhdGlvbnMsIGluIHRoZSB3b3JzdC1jYXNlIChlLmcuLCBhbiBBQkUtY29tcGxpYW50 DQogICBUQ1Agc2VuZGVyIHVzaW5nIGJldGFfe2Vjbn0gPSAxLjApIHRoZSBFQ04tY2FwYWJsZSBi b3R0bGVuZWNrIHdpbGwNCiAgIHN0aWxsIGZhbGwgYmFjayB0byBkcm9wcGluZyBwYWNrZXRzLCBh bmQgdGhlIHJlc3VsdCBpcyBubyBkaWZmZXJlbnQNCiAgIHRoYW4gaWYgdGhlIFRDUCBzZW5kZXIg d2FzIHVzaW5nIHRyYWRpdGlvbmFsIGxvc3MtYmFzZWQgY29uZ2VzdGlvbg0KICAgY29udHJvbC4N Cg0KICAgVGhlIHJlc3VsdCBvZiB0aGlzIEludGVybmV0IGV4cGVyaW1lbnQgd2lsbCBiZSByZXBv cnRlZCBieQ0KICAgcHJlc2VudGF0aW9uIHRvIHRoZSBUQ1BNIFdHIChvciBJRVNHKSBvciBhbiBp bXBsZW1lbnRhdGlvbiByZXBvcnQgYXQNCiAgIHRoZSBlbmQgb2YgdGhlIGV4cGVyaW1lbnQuDQoN CjYuICBBY2tub3dsZWRnZW1lbnRzDQoNCiAgIEF1dGhvcnMgTi4gIEtoYWRlbWksIE0uICBXZWx6 bCBhbmQgRy4gIEZhaXJodXJzdCB3ZXJlIHBhcnQtZnVuZGVkIGJ5DQogICB0aGUgRXVyb3BlYW4g Q29tbXVuaXR5IHVuZGVyIGl0cyBTZXZlbnRoIEZyYW1ld29yayBQcm9ncmFtbWUgdGhyb3VnaA0K ICAgdGhlIFJlZHVjaW5nIEludGVybmV0IFRyYW5zcG9ydCBMYXRlbmN5IChSSVRFKSBwcm9qZWN0 IChJQ1QtMzE3NzAwKS4NCiAgIFRoZSB2aWV3cyBleHByZXNzZWQgYXJlIHNvbGVseSB0aG9zZSBv ZiB0aGUgYXV0aG9ycy4NCg0KDQoNCktoYWRlbWksIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBN YXkgMTksIDIwMTggICAgICAgICAgICAgICAgICBbUGFnZSA3XQ0KDA0KSW50ZXJuZXQtRHJhZnQg ICAgICAgICAgICAgICAgICAgICBBQkUgICAgICAgICAgICAgICAgICAgICBOb3ZlbWJlciAyMDE3 DQoNCg0KICAgVGhlIGF1dGhvcnMgd291bGQgbGlrZSB0byB0aGFuayBTdHVhcnQgQ2hlc2hpcmUg Zm9yIG1hbnkgc3VnZ2VzdGlvbnMNCiAgIHdoZW4gcmV2aXNpbmcgdGhlIGRyYWZ0LCBhbmQgdGhl IGZvbGxvd2luZyBwZW9wbGUgZm9yIHRoZWlyDQogICBjb250cmlidXRpb25zIHRvIFtBQkUyMDE3 XTogQ2hhbWlsIEt1bGF0dW5nYSwgRGF2aWQgUm9zLCBTdGVpbg0KICAgR2plc3NpbmcsIFNlYmFz dGlhbiBaYW5kZXIuICBUaGFua3MgYWxzbyB0byAoaW4gYWxwaGFiZXRpY2FsIG9yZGVyKQ0KICAg Qm9iIEJyaXNjb2UsIE1hcmtrdSBLb2pvLCBKb2huIExlc2xpZSwgRGF2ZSBUYWh0IGFuZCB0aGUg VENQTSB3b3JraW5nDQogICBncm91cCBmb3IgcHJvdmlkaW5nIHZhbHVhYmxlIGZlZWRiYWNrIG9u IHRoaXMgZG9jdW1lbnQuDQoNCiAgIFRoZSBhdXRob3JzIHdvdWxkIGZpbmFsbHkgbGlrZSB0byB0 aGFuayBldmVyeW9uZSB3aG8gcHJvdmlkZWQNCiAgIGZlZWRiYWNrIG9uIHRoZSBjb25nZXN0aW9u IGNvbnRyb2wgYmVoYXZpb3VyIHNwZWNpZmllZCBpbiB0aGlzIHVwZGF0ZQ0KICAgcmVjZWl2ZWQg ZnJvbSB0aGUgSVJURiBJbnRlcm5ldCBDb25nZXN0aW9uIENvbnRyb2wgUmVzZWFyY2ggR3JvdXAN CiAgIChJQ0NSRykuDQoNCjcuICBJQU5BIENvbnNpZGVyYXRpb25zDQoNCiAgIFhYIFJGQyBFRCAt IFBMRUFTRSBSRU1PVkUgVEhJUyBTRUNUSU9OIFhYWA0KDQogICBUaGlzIGRvY3VtZW50IGluY2x1 ZGVzIG5vIHJlcXVlc3QgdG8gSUFOQS4NCg0KOC4gIEltcGxlbWVudGF0aW9uIFN0YXR1cw0KDQog ICBBQkUgaXMgaW1wbGVtZW50ZWQgYXMgYSBwYXRjaCBmb3IgTGludXggYW5kIEZyZWVCU0QuICBJ dCBpcyBtZWFudCBmb3INCiAgIHJlc2VhcmNoIGFuZCBhdmFpbGFibGUgZm9yIGRvd25sb2FkIGZy b20NCiAgIGh0dHA6Ly9oZWltLmlmaS51aW8ubm8vbmFlZW1rL3Jlc2VhcmNoL0FCRS8uIFRoaXMg Y29kZSB3YXMgdXNlZCB0bw0KICAgcHJvZHVjZSB0aGUgdGVzdCByZXN1bHRzIHRoYXQgYXJlIHJl cG9ydGVkIGluIFtBQkUyMDE3XS4gIEFuIGV2b2x2ZWQNCiAgIHZlcnNpb24gb2YgdGhlIHBhdGNo IGZvciBGcmVlQlNEIGlzIGN1cnJlbnRseSB1bmRlciByZXZpZXcgZm9yDQogICBwb3RlbnRpYWwg aW5jbHVzaW9uIGluIHRoZSBtYWlubGluZSBrZXJuZWwgW0FCRS1GcmVlQlNEXS4NCg0KOS4gIFNl Y3VyaXR5IENvbnNpZGVyYXRpb25zDQoNCiAgIFRoZSBkZXNjcmliZWQgbWV0aG9kIGlzIGEgc2Vu ZGVyLXNpZGUgb25seSB0cmFuc3BvcnQgY2hhbmdlLCBhbmQgZG9lcw0KICAgbm90IGNoYW5nZSB0 aGUgcHJvdG9jb2wgbWVzc2FnZXMgZXhjaGFuZ2VkLiAgVGhlIHNlY3VyaXR5DQogICBjb25zaWRl cmF0aW9ucyBmb3IgRUNOIFtSRkMzMTY4XSB0aGVyZWZvcmUgc3RpbGwgYXBwbHkuDQoNCiAgIFRo aXMgaXMgYSBjaGFuZ2UgdG8gVENQIGNvbmdlc3Rpb24gY29udHJvbCB3aXRoIEVDTiB0aGF0IHdp bGwNCiAgIHR5cGljYWxseSBsZWFkIHRvIGEgY2hhbmdlIGluIHRoZSBjYXBhY2l0eSBhY2hpZXZl ZCB3aGVuIGZsb3dzIHNoYXJlDQogICBhIG5ldHdvcmsgYm90dGxlbmVjay4gIFRoaXMgY291bGQg cmVzdWx0IGluIHNvbWUgZmxvd3MgcmVjZWl2aW5nIG1vcmUNCiAgIHRoYW4gdGhlaXIgZmFpciBz aGFyZSBvZiBjYXBhY2l0eS4gIFNpbWlsYXIgdW5mYWlybmVzcyBpbiB0aGUgd2F5DQogICB0aGF0 IGNhcGFjaXR5IGlzIHNoYXJlZCBpcyBhbHNvIGV4aGliaXRlZCBieSBvdGhlciBjb25nZXN0aW9u IGNvbnRyb2wNCiAgIG1lY2hhbmlzbXMgdGhhdCBoYXZlIGJlZW4gaW4gdXNlIGluIHRoZSBJbnRl cm5ldCBmb3IgbWFueSB5ZWFycw0KICAgKGUuZy4sIENVQklDIFtJLUQuQ1VCSUNdKS4gIFVuZmFp cm5lc3MgbWF5IGFsc28gYmUgYSByZXN1bHQgb2Ygb3RoZXINCiAgIGZhY3RvcnMsIGluY2x1ZGlu ZyB0aGUgcm91bmQgdHJpcCB0aW1lIGV4cGVyaWVuY2VkIGJ5IGEgZmxvdy4gIEFCRQ0KICAgYXBw bGllcyBvbmx5IHdoZW4gRUNOLW1hcmtlZCBwYWNrZXRzIGFyZSByZWNlaXZlZCwgbm90IHdoZW4g cGFja2V0cw0KICAgYXJlIGxvc3QsIGhlbmNlIHVzZSBvZiBBQkUgY2Fubm90IGxlYWQgdG8gY29u Z2VzdGlvbiBjb2xsYXBzZS4NCg0KDQoNCg0KDQoNCg0KDQpLaGFkZW1pLCBldCBhbC4gICAgICAg ICAgIEV4cGlyZXMgTWF5IDE5LCAyMDE4ICAgICAgICAgICAgICAgICAgW1BhZ2UgOF0NCgwNCklu dGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICAgQUJFICAgICAgICAgICAgICAgICAgICAg Tm92ZW1iZXIgMjAxNw0KDQoNCjEwLiAgUmV2aXNpb24gSW5mb3JtYXRpb24NCg0KICAgWFggUkZD IEVEIC0gUExFQVNFIFJFTU9WRSBUSElTIFNFQ1RJT04gWFhYDQoNCiAgIC0wMy4gIFNldmVyYWwg cmV2aWV3IGNvbW1lbnRzIGZyb20gUm9sYW5kIEJsZXNzIGFyZSBhZGRyZXNzZWQuDQogICBDb25z aXN0ZW50IHRlcm1pbm9sb2d5IGFuZCBlcXVhdGlvbnMuICBDbGFyaWZpY2F0aW9uIG9uIHRoZSBz Y29wZSBvZg0KICAgcmVjb21tZW5kZWQgYmV0YV97ZWNufSB2YWx1ZS4NCg0KICAgLTAyLiAgQ29y cmVjdGVkIHRoZSBlcXVhdGlvbnMgaW4gU2VjdGlvbiA0LjMuICBVcGRhdGVkIHRoZQ0KICAgYWZm aWxpYXRpb25zLiAgTG93ZXIgYm91bmQgZm9yIGN3bmQgaXMgZGVmaW5lZC4gIEEgcmVjb21tZW5k YXRpb24gZm9yDQogICB3aW5kb3ctYmFzZWQgdHJhbnNwb3J0IHByb3RvY29scyBpcyBjaGFuZ2Vk IHRvIGNvdmVyIGFsbCB0cmFuc3BvcnQNCiAgIHByb3RvY29scyB0aGF0IGltcGxlbWVudCBhIGNv bmdlc3Rpb24gY29udHJvbCByZWR1Y3Rpb24gdG8gYW4gRUNODQogICBjb25nZXN0aW9uIHNpZ25h bC4gIEFkZGVkIHRleHQgYWJvdXQgQUJFJ3MgRnJlZUJTRCBtYWlubGluZSBrZXJuZWwNCiAgIHN0 YXR1cyBpbmNsdWRpbmcgYSByZWZlcmVuY2UgdG8gdGhlIEZyZWVCU0QgY29kZSByZXZpZXcgcGFn ZS4NCiAgIFJlZmVyZW5jZXMgYXJlIHVwZGF0ZWQuDQoNCiAgIC0wMS4gIFRleHQgaW1wcm92ZWQs IG1haW5seSBpbmNvcnBvcmF0aW5nIGNvbW1lbnRzIGZyb20gU3R1YXJ0DQogICBDaGVzaGlyZS4g IFRoZSByZWZlcmVuY2UgdG8gYSB0ZWNobmljYWwgcmVwb3J0IGhhcyBiZWVuIHVwZGF0ZWQgdG8g YQ0KICAgcHVibGlzaGVkIHZlcnNpb24gb2YgdGhlIHRlc3RzIFtBQkUyMDE3XS4gIFVzZWQgIkFR TSBNZWNoYW5pc20iDQogICB0aHJvdWdob3V0IGluIHBsYWNlIG9mIG90aGVyIGFsdGVybmF0aXZl cywgYW5kIG1vcmUgY29uc2lzdGVudCB1c2Ugb2YNCiAgIHRlY2huaWNhbCBsYW5ndWFnZSBhbmQg Y2xhcmlmaWNhdGlvbiBvbiB0aGUgaW50ZW5kZWQgcHVycG9zZSBvZiB0aGUNCiAgIGV4cGVyaW1l bnRzIHJlcXVpcmVkIGJ5IEVYUCBzdGF0dXMuICBUaGVyZSB3YXMgbm8gY2hhbmdlIHRvIHRoZQ0K ICAgdGVjaG5pY2FsIGNvbnRlbnQuDQoNCiAgIC0wMC4gZHJhZnQtaWV0Zi10Y3BtLWFsdGVybmF0 aXZlYmFja29mZi1lY24tMDAgcmVwbGFjZXMgZHJhZnQtDQogICBraGFkZW1pLXRjcG0tYWx0ZXJu YXRpdmViYWNrb2ZmLWVjbi0wMS4gIFRleHQgZGVzY3JpYmluZyB0aGUgbmF0dXJlDQogICBvZiB0 aGUgZXhwZXJpbWVudCB3YXMgYWRkZWQuDQoNCiAgIEluZGl2aWR1YWwgZHJhZnQgLTAxLiAgVGhp cyBJLUQgbm93IHJlZmVycyB0byBkcmFmdC1ibGFjay10c3Z3Zy1lY24tDQogICBleHBlcmltZW50 YXRpb24tMDIsIHdoaWNoIHJlcGxhY2VzIGRyYWZ0LWtoYWRlbWktdHN2d2ctZWNuLQ0KICAgcmVz cG9uc2UtMDAgdG8gbWFrZSBhIGJyb2FkZXIgdXBkYXRlIHRvIFJGQzMxNjggZm9yIHRoZSBzYWtl IG9mDQogICBhbGxvd2luZyBleHBlcmltZW50cy4gIEFzIGEgcmVzdWx0LCBzb21lIG9mIHRoZSBt b3RpdmF0aW5nIGFuZA0KICAgZGlzY3Vzc2luZyB0ZXh0IHRoYXQgd2FzIG1vdmVkIGZyb20gZHJh ZnQta2hhZGVtaS1hbHRlcm5hdGl2ZWJhY2tvZmYtDQogICBlY24tMDMgdG8gZHJhZnQta2hhZGVt aS10c3Z3Zy1lY24tcmVzcG9uc2UtMDAgaGFzIG5vdyBiZWVuIHJlLQ0KICAgaW5zZXJ0ZWQgaGVy ZS4NCg0KICAgSW5kaXZpZHVhbCBkcmFmdCAtMDAuIGRyYWZ0LWtoYWRlbWktdHN2d2ctZWNuLXJl c3BvbnNlLTAwIGFuZCBkcmFmdC0NCiAgIGtoYWRlbWktdGNwbS1hbHRlcm5hdGl2ZWJhY2tvZmYt ZWNuLTAwIHJlcGxhY2UgZHJhZnQta2hhZGVtaS0NCiAgIGFsdGVybmF0aXZlYmFja29mZi1lY24t MDMsIGZvbGxvd2luZyBkaXNjdXNzaW9uIGluIHRoZSBUU1ZXRyBhbmQgVENQTQ0KICAgd29ya2lu ZyBncm91cHMuDQoNCjExLiAgUmVmZXJlbmNlcw0KDQoxMS4xLiAgTm9ybWF0aXZlIFJlZmVyZW5j ZXMNCg0KDQoNCg0KDQoNCg0KS2hhZGVtaSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE1heSAx OSwgMjAxOCAgICAgICAgICAgICAgICAgIFtQYWdlIDldDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAg ICAgICAgICAgICAgICAgIEFCRSAgICAgICAgICAgICAgICAgICAgIE5vdmVtYmVyIDIwMTcNCg0K DQogICBbSS1ELkVDTi1leHBdDQogICAgICAgICAgICAgIEJsYWNrLCBELiwgIkV4cGxpY2l0IENv bmdlc3Rpb24gTm90aWZpY2F0aW9uIChFQ04pDQogICAgICAgICAgICAgIEV4cGVyaW1lbnRhdGlv biIsIEludGVybmV0LWRyYWZ0LCBJRVRGIHdvcmstaW4tcHJvZ3Jlc3MNCiAgICAgICAgICAgICAg ZHJhZnQtaWV0Zi10c3Z3Zy1lY24tZXhwZXJpbWVudGF0aW9uLTA2LCBTZXB0ZW1iZXIgMjAxNy4N Cg0KICAgW1JGQzIxMTldICBCcmFkbmVyLCBTLiwgIktleSB3b3JkcyBmb3IgdXNlIGluIFJGQ3Mg dG8gSW5kaWNhdGUNCiAgICAgICAgICAgICAgUmVxdWlyZW1lbnQgTGV2ZWxzIiwgQkNQIDE0LCBS RkMgMjExOSwNCiAgICAgICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzIxMTksIE1hcmNoIDE5OTcs DQogICAgICAgICAgICAgIDxodHRwczovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzIxMTk+ Lg0KDQogICBbUkZDMzE2OF0gIFJhbWFrcmlzaG5hbiwgSy4sIEZsb3lkLCBTLiwgYW5kIEQuIEJs YWNrLCAiVGhlIEFkZGl0aW9uDQogICAgICAgICAgICAgIG9mIEV4cGxpY2l0IENvbmdlc3Rpb24g Tm90aWZpY2F0aW9uIChFQ04pIHRvIElQIiwNCiAgICAgICAgICAgICAgUkZDIDMxNjgsIERPSSAx MC4xNzQ4Ny9SRkMzMTY4LCBTZXB0ZW1iZXIgMjAwMSwNCiAgICAgICAgICAgICAgPGh0dHBzOi8v d3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjMzE2OD4uDQoNCiAgIFtSRkM1NjgxXSAgQWxsbWFu LCBNLiwgUGF4c29uLCBWLiwgYW5kIEUuIEJsYW50b24sICJUQ1AgQ29uZ2VzdGlvbg0KICAgICAg ICAgICAgICBDb250cm9sIiwgUkZDIDU2ODEsIERPSSAxMC4xNzQ4Ny9SRkM1NjgxLCBTZXB0ZW1i ZXIgMjAwOSwNCiAgICAgICAgICAgICAgPGh0dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8v cmZjNTY4MT4uDQoNCiAgIFtSRkM3NTY3XSAgQmFrZXIsIEYuLCBFZC4gYW5kIEcuIEZhaXJodXJz dCwgRWQuLCAiSUVURg0KICAgICAgICAgICAgICBSZWNvbW1lbmRhdGlvbnMgUmVnYXJkaW5nIEFj dGl2ZSBRdWV1ZSBNYW5hZ2VtZW50IiwNCiAgICAgICAgICAgICAgQkNQIDE5NywgUkZDIDc1Njcs IERPSSAxMC4xNzQ4Ny9SRkM3NTY3LCBKdWx5IDIwMTUsDQogICAgICAgICAgICAgIDxodHRwczov L3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzc1Njc+Lg0KDQoxMS4yLiAgSW5mb3JtYXRpdmUg UmVmZXJlbmNlcw0KDQogICBbQUJFLUZyZWVCU0RdDQogICAgICAgICAgICAgICJBQkUgcGF0Y2gg cmV2aWV3IGluIEZyZWVCU0QiLA0KICAgICAgICAgICAgICA8aHR0cHM6Ly9yZXZpZXdzLmZyZWVi c2Qub3JnL0QxMTYxNj4uDQoNCiAgIFtBQkUyMDE3XSAgS2hhZGVtaSwgTi4sIEFybWl0YWdlLCBH LiwgV2VsemwsIE0uLCBGYWlyaHVyc3QsIEcuLA0KICAgICAgICAgICAgICBaYW5kZXIsIFMuLCBh bmQgRC4gUm9zLCAiQWx0ZXJuYXRpdmUgQmFja29mZjogQWNoaWV2aW5nDQogICAgICAgICAgICAg IExvdyBMYXRlbmN5IGFuZCBIaWdoIFRocm91Z2hwdXQgd2l0aCBFQ04gYW5kIEFRTSIsIElGSVAN CiAgICAgICAgICAgICAgTkVUV09SS0lORyAyMDE3LCBTdG9ja2hvbG0sIFN3ZWRlbiwgSnVuZSAy MDE3Lg0KDQogICBbQlVGRkVSQkxPQVRdDQogICAgICAgICAgICAgIEdldHR5cywgSi4gYW5kIEsu IE5pY2hvbHMsICJCdWZmZXJibG9hdDogRGFyayBCdWZmZXJzIGluDQogICAgICAgICAgICAgIHRo ZSBJbnRlcm5ldCIsIE5vdmVtYmVyIDIwMTEuDQoNCiAgIFtDT0RFTDIwMTJdDQogICAgICAgICAg ICAgIE5pY2hvbHMsIEsuIGFuZCBWLiBKYWNvYnNvbiwgIkNvbnRyb2xsaW5nIFF1ZXVlIERlbGF5 IiwNCiAgICAgICAgICAgICAgSnVseSAyMDEyLCA8aHR0cDovL3F1ZXVlLmFjbS5vcmcvZGV0YWls LmNmbT9pZD0yMjA5MzM2Pi4NCg0KICAgW0ktRC5Db0RlbF0NCiAgICAgICAgICAgICAgTmljaG9s cywgSy4sIEphY29ic29uLCBWLiwgTWNHcmVnb3IsIFYuLCBhbmQgSi4gSXllbmdhciwNCiAgICAg ICAgICAgICAgIkNvbnRyb2xsZWQgRGVsYXkgQWN0aXZlIFF1ZXVlIE1hbmFnZW1lbnQiLCBJbnRl cm5ldC0NCiAgICAgICAgICAgICAgZHJhZnQsIElFVEYgd29yay1pbi1wcm9ncmVzcyBkcmFmdC1p ZXRmLWFxbS1jb2RlbC0wOSwNCiAgICAgICAgICAgICAgU2VwdGVtYmVyIDIwMTcuDQoNCg0KDQpL aGFkZW1pLCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgTWF5IDE5LCAyMDE4ICAgICAgICAgICAg ICAgICBbUGFnZSAxMF0NCgwNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICAgQUJF ICAgICAgICAgICAgICAgICAgICAgTm92ZW1iZXIgMjAxNw0KDQoNCiAgIFtJLUQuQ1VCSUNdDQog ICAgICAgICAgICAgIFJoZWUsIEkuLCBYdSwgTC4sIEhhLCBTLiwgWmltbWVybWFubiwgQS4sIEVn Z2VydCwgTC4sIGFuZA0KICAgICAgICAgICAgICBSLiBTY2hlZmZlbmVnZ2VyLCAiQ1VCSUMgZm9y IEZhc3QgTG9uZy1EaXN0YW5jZSBOZXR3b3JrcyIsDQogICAgICAgICAgICAgIEludGVybmV0LWRy YWZ0LCBJRVRGIHdvcmstaW4tcHJvZ3Jlc3MgZHJhZnQtaWV0Zi10Y3BtLQ0KICAgICAgICAgICAg ICBjdWJpYy0wNiwgU2VwdGVtYmVyIDIwMTcuDQoNCiAgIFtJLUQuaWV0Zi10Y3BtLWFjY3VyYXRl LWVjbl0NCiAgICAgICAgICAgICAgQnJpc2NvZSwgQi4sIEt1ZWhsZXdpbmQsIE0uLCBhbmQgUi4g U2NoZWZmZW5lZ2dlciwgIk1vcmUNCiAgICAgICAgICAgICAgQWNjdXJhdGUgRUNOIEZlZWRiYWNr IGluIFRDUCIsIGRyYWZ0LWlldGYtdGNwbS1hY2N1cmF0ZS0NCiAgICAgICAgICAgICAgZWNuLTAz ICh3b3JrIGluIHByb2dyZXNzKSwgTWF5IDIwMTcuDQoNCiAgIFtJLUQuaWV0Zi10Y3BtLWRjdGNw XQ0KICAgICAgICAgICAgICBCZW5zbGV5LCBTLiwgVGhhbGVyLCBELiwgQmFsYXN1YnJhbWFuaWFu LCBQLiwgRWdnZXJ0LCBMLiwNCiAgICAgICAgICAgICAgYW5kIEcuIEp1ZGQsICJEYXRhY2VudGVy IFRDUCAoRENUQ1ApOiBUQ1AgQ29uZ2VzdGlvbg0KICAgICAgICAgICAgICBDb250cm9sIGZvciBE YXRhY2VudGVycyIsIGRyYWZ0LWlldGYtdGNwbS1kY3RjcC0xMCAod29yaw0KICAgICAgICAgICAg ICBpbiBwcm9ncmVzcyksIEF1Z3VzdCAyMDE3Lg0KDQogICBbSUNDMjAwMl0gIEt3b24sIE0uIGFu ZCBTLiBGYWhteSwgIlRDUCBJbmNyZWFzZS9EZWNyZWFzZSBCZWhhdmlvcg0KICAgICAgICAgICAg ICB3aXRoIEV4cGxpY2l0IENvbmdlc3Rpb24gTm90aWZpY2F0aW9uIChFQ04pIiwgSUVFRQ0KICAg ICAgICAgICAgICBJQ0MgMjAwMiwgTmV3IFlvcmssIE5ldyBZb3JrLCBVU0EsIE1heSAyMDAyLA0K ICAgICAgICAgICAgICA8aHR0cDovL2R4LmRvaS5vcmcvMTAuMTEwOS9JQ0MuMjAwMi45OTcyNjI+ Lg0KDQogICBbUkZDNzcxM10gIE1hdGhpcywgTS4gYW5kIEIuIEJyaXNjb2UsICJDb25nZXN0aW9u IEV4cG9zdXJlIChDb25FeCkNCiAgICAgICAgICAgICAgQ29uY2VwdHMsIEFic3RyYWN0IE1lY2hh bmlzbSwgYW5kIFJlcXVpcmVtZW50cyIsIFJGQyA3NzEzLA0KICAgICAgICAgICAgICBET0kgMTAu MTc0ODcvUkZDNzcxMywgRGVjZW1iZXIgMjAxNSwNCiAgICAgICAgICAgICAgPGh0dHBzOi8vd3d3 LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNzcxMz4uDQoNCiAgIFtSRkM4MDMzXSAgUGFuLCBSLiwg TmF0YXJhamFuLCBQLiwgQmFrZXIsIEYuLCBhbmQgRy4gV2hpdGUsDQogICAgICAgICAgICAgICJQ cm9wb3J0aW9uYWwgSW50ZWdyYWwgQ29udHJvbGxlciBFbmhhbmNlZCAoUElFKTogQQ0KICAgICAg ICAgICAgICBMaWdodHdlaWdodCBDb250cm9sIFNjaGVtZSB0byBBZGRyZXNzIHRoZSBCdWZmZXJi bG9hdA0KICAgICAgICAgICAgICBQcm9ibGVtIiwgUkZDIDgwMzMsIERPSSAxMC4xNzQ4Ny9SRkM4 MDMzLCBGZWJydWFyeSAyMDE3LA0KICAgICAgICAgICAgICA8aHR0cHM6Ly93d3cucmZjLWVkaXRv ci5vcmcvaW5mby9yZmM4MDMzPi4NCg0KICAgW1JGQzgwODddICBGYWlyaHVyc3QsIEcuIGFuZCBN LiBXZWx6bCwgIlRoZSBCZW5lZml0cyBvZiBVc2luZw0KICAgICAgICAgICAgICBFeHBsaWNpdCBD b25nZXN0aW9uIE5vdGlmaWNhdGlvbiAoRUNOKSIsIFJGQyA4MDg3LA0KICAgICAgICAgICAgICBE T0kgMTAuMTc0ODcvUkZDODA4NywgTWFyY2ggMjAxNywNCiAgICAgICAgICAgICAgPGh0dHBzOi8v d3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjODA4Nz4uDQoNCkF1dGhvcnMnIEFkZHJlc3Nlcw0K DQogICBOYWVlbSBLaGFkZW1pDQogICBVbml2ZXJzaXR5IG9mIE9zbG8NCiAgIFBPIEJveCAxMDgw IEJsaW5kZXJuDQogICBPc2xvICBOLTAzMTYNCiAgIE5vcndheQ0KDQogICBFbWFpbDogbmFlZW1r QGlmaS51aW8ubm8NCg0KDQoNCg0KS2hhZGVtaSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE1h eSAxOSwgMjAxOCAgICAgICAgICAgICAgICAgW1BhZ2UgMTFdDQoMDQpJbnRlcm5ldC1EcmFmdCAg ICAgICAgICAgICAgICAgICAgIEFCRSAgICAgICAgICAgICAgICAgICAgIE5vdmVtYmVyIDIwMTcN Cg0KDQogICBNaWNoYWVsIFdlbHpsDQogICBVbml2ZXJzaXR5IG9mIE9zbG8NCiAgIFBPIEJveCAx MDgwIEJsaW5kZXJuDQogICBPc2xvICBOLTAzMTYNCiAgIE5vcndheQ0KDQogICBFbWFpbDogbWlj aGF3ZUBpZmkudWlvLm5vDQoNCg0KICAgR3JlbnZpbGxlIEFybWl0YWdlDQogICBJbnRlcm5ldCBG b3IgVGhpbmdzIChJNFQpIFJlc2VhcmNoIEdyb3VwDQogICBTd2luYnVybmUgVW5pdmVyc2l0eSBv ZiBUZWNobm9sb2d5DQogICBQTyBCb3ggMjE4DQogICBKb2huIFN0cmVldCwgSGF3dGhvcm4NCiAg IFZpY3RvcmlhICAzMTIyDQogICBBdXN0cmFsaWENCg0KICAgRW1haWw6IGdhcm1pdGFnZUBzd2lu LmVkdS5hdQ0KDQoNCiAgIEdvZHJlZCBGYWlyaHVyc3QNCiAgIFVuaXZlcnNpdHkgb2YgQWJlcmRl ZW4NCiAgIFNjaG9vbCBvZiBFbmdpbmVlcmluZywgRnJhc2VyIE5vYmxlIEJ1aWxkaW5nDQogICBB YmVyZGVlbiAgQUIyNCAzVUUNCiAgIFVLDQoNCiAgIEVtYWlsOiBnb3JyeUBlcmcuYWJkbi5hYy51 aw0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KS2hhZGVt aSwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIE1heSAxOSwgMjAxOCAgICAgICAgICAgICAgICAg W1BhZ2UgMTJdDQo= --_004_195D08F413114A91B55840D4370F8F00ifiuiono_ Content-Type: text/plain; name="ATT00001.txt" Content-Description: ATT00001.txt Content-Disposition: attachment; filename="ATT00001.txt"; size=848; creation-date="Wed, 15 Nov 2017 11:14:02 GMT"; modification-date="Wed, 15 Nov 2017 11:14:02 GMT" Content-ID: Content-Transfer-Encoding: base64 DQoNCkNoZWVycywNCk5hZWVtDQoNCiAgIA0KDQogDQo+IE9uIE5vdiAxMywgMjAxNywgYXQgMTE6 MjAgQU0sIExhd3JlbmNlIFN0ZXdhcnQgPGxzdGV3YXJ0QGZyZWVic2Qub3JnPiB3cm90ZToNCj4g DQo+IE9uIDIzLzEwLzIwMTcgMTg6MTIsIEJsZXNzLCBSb2xhbmQgKFRNKSB3cm90ZToNCj4+IEhp LA0KPj4gDQo+PiBhcyBwcm9taXNlZCBhdCB0aGUgbGFzdCBJRVRGIG1lZXRpbmcsIGhlcmUgaXMg bXkgKGxlbmd0aHkpDQo+PiByZXZpZXcgb2YgZHJhZnQtaWV0Zi10Y3BtLWFsdGVybmF0aXZlYmFj a29mZi1lY24tMDIuDQo+IA0KPiBJIG1hZGUgdXNlIG9mIHRoZSBwbGFuZSB0cmlwIHRvIFNpbmdh cG9yZSB0byBzY3JpYmJsZSBzb21lIGNvbW1lbnRzIGludG8NCj4gdGhlIC0wMiBkcmFmdCwgd2hp Y2ggeW91J2xsIGZpbmQgaW4gdGhlIGF0dGFjaGVkIC50eHQgaW4gYmV0d2Vlbg0KPiANCj4gPT1M QVM9PQ0KPiA8Li4uPg0KPiA9PT09PT09DQo+IA0KPiBJJ20gaW4gU2luZ2Fwb3JlIHVudGlsIEZy aWRheSBtb3JuaW5nIGlmIHRoZSBhdXRob3JzIHdhbnQgdG8NCj4gZGlzY3Vzcy9jbGFyaWZ5IGFu eXRoaW5nIGluIHBlcnNvbi4NCj4gDQo+IFRoZSBwYXRjaCB0byBpbXBsZW1lbnQgQUJFIGZvciBG cmVlQlNEJ3MgTmV3UmVubyBDQyBhbGdvIG1vZHVsZSBpcyByZWFkeQ0KPiB0byBsYW5kIGFuZCBq dXN0IHdhaXRpbmcgb24gbWUgdG8gcHVsbCB0aGUgdHJpZ2dlci4gU2hvdWxkIGJlIHJlYWwgc29v bg0KPiBub3cuLi4NCj4gDQo+IENoZWVycywNCj4gTGF3cmVuY2UNCj4gPGRyYWZ0LWlldGYtdGNw bS1hbHRlcm5hdGl2ZWJhY2tvZmYtZWNuLTAyLWxzdGV3YXJ0bm90ZXMudHh0Pg0KDQo= --_004_195D08F413114A91B55840D4370F8F00ifiuiono_-- From nobody Wed Nov 15 03:54:09 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13082126C0F for ; Wed, 15 Nov 2017 03:54:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mHa9mbgE0zTP for ; Wed, 15 Nov 2017 03:54:04 -0800 (PST) Received: from mail-out02.uio.no (mail-out02.uio.no [IPv6:2001:700:100:8210::71]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D163312945F for ; Wed, 15 Nov 2017 03:54:02 -0800 (PST) Received: from mail-mx02.uio.no ([129.240.10.43]) by mail-out02.uio.no with esmtp (Exim 4.82_1-5b7a7c0-XX) (envelope-from ) id 1eEwGX-000FMW-8n; Wed, 15 Nov 2017 12:54:01 +0100 Received: from mail-ex12.exprod.uio.no ([129.240.120.74]) by mail-mx02.uio.no with esmtps (TLSv1.2:AES256-SHA:256) (Exim 4.82_1-5b7a7c0-XX) (envelope-from ) id 1eEwGU-0007KC-VF; Wed, 15 Nov 2017 12:54:01 +0100 Received: from mail-ex02.exprod.uio.no (2001:700:100:52::5) by mail-ex12.exprod.uio.no (2001:700:100:120::74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 15 Nov 2017 12:53:58 +0100 Received: from mail-ex02.exprod.uio.no ([fe80::114e:f446:7d7d:a2f]) by mail-ex02.exprod.uio.no ([fe80::114e:f446:7d7d:a2f%19]) with mapi id 15.00.1347.000; Wed, 15 Nov 2017 12:53:58 +0100 From: Naeem Khademi To: "Bless, Roland (TM)" CC: "tcpm@ietf.org Extensions" , Michael Welzl , Gorry Fairhurst , "grenville armitage" Thread-Topic: Review of draft-ietf-tcpm-alternativebackoff-ecn-02 Thread-Index: AQHTS+d0BLEXnPhOQ0SyTgbWWxRRQqMVaD0A Date: Wed, 15 Nov 2017 11:53:57 +0000 Message-ID: <7447FBC9-6B81-4A97-AB45-C57555B30559@ifi.uio.no> References: In-Reply-To: Accept-Language: en-GB, nb-NO, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3273) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [129.240.169.59] Content-Type: multipart/alternative; boundary="_000_7447FBC96B814A97AB45C57555B30559ifiuiono_" MIME-Version: 1.0 X-UiO-SPF-Received: Received-SPF: neutral (mail-mx02.uio.no: 129.240.120.74 is neither permitted nor denied by domain of ifi.uio.no) client-ip=129.240.120.74; envelope-from=naeemk@ifi.uio.no; helo=mail-ex12.exprod.uio.no; X-UiO-Spam-info: not spam, SpamAssassin (score=-0.5, required=5.0, autolearn=disabled, AWL=-1.150, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.001, SPF_NEUTRAL=0.652, uiobl=NO, uiouri=NO) X-UiO-Scanned: 98B1B5FF2F928A9B00414DA428A885DCC1F1FD0B X-UiOonly: DF74DDEE15B4A5D8FFF0C30B73224B48B925EB27 Archived-At: Subject: Re: [tcpm] Review of draft-ietf-tcpm-alternativebackoff-ecn-02 X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Nov 2017 11:54:08 -0000 --_000_7447FBC96B814A97AB45C57555B30559ifiuiono_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgUm9sYW5kDQoNClRoYW5rcyBhIGxvdCBmb3IgdGhlIGNvbW1lbnRzLiBBbG1vc3QgYWxsIG9m IHlvdXIgY29tbWVudHMgYXJlIG5vdyBhZGRyZXNzZWQgaW4gLTAzIChzdWJtaXR0ZWQpIGFuZCAt MDQgKHVuLXN1Ym1pdHRlZCBidXQgYXR0YWNoZWQgdG8gdGhlIGVtYWlsIEkgc2VudCBpbiByZXNw b25zZSB0byBMLiBTdGV3YXJ04oCZcyBjb21tZW50cykuIEhvd2V2ZXIsIGhlcmUgYXJlIHBlci1p dGVtIHJlc3BvbnNlcy4gUGxlYXNlIHNlZSBpbmxpbmU6DQoNCg0KT24gT2N0IDIzLCAyMDE3LCBh dCA2OjEyIFBNLCBCbGVzcywgUm9sYW5kIChUTSkgPHJvbGFuZC5ibGVzc0BraXQuZWR1PG1haWx0 bzpyb2xhbmQuYmxlc3NAa2l0LmVkdT4+IHdyb3RlOg0KDQpIaSwNCg0KYXMgcHJvbWlzZWQgYXQg dGhlIGxhc3QgSUVURiBtZWV0aW5nLCBoZXJlIGlzIG15IChsZW5ndGh5KQ0KcmV2aWV3IG9mIGRy YWZ0LWlldGYtdGNwbS1hbHRlcm5hdGl2ZWJhY2tvZmYtZWNuLTAyLg0KDQpJbiBzdW1tYXJ5Og0K MSkgbW9yZSBwcmVjaXNlIHRlcm1pbm9sb2d5LCBlLmcuLCBiZXR0ZXIgZGlzdGluY3Rpb24gYmV0 d2VlbiBidWZmZXIgYW5kDQpxdWV1ZSwNCiAgYWxzbyB1c2Ugc2FtZSB0ZXJtaW5vbG9neSBhcyBp biBSRkMgNTY4MSAobGFyZ2VseSBkb25lIGluIC0wMiBhbHJlYWR5KS4NCg0KMikgc3RhdGUgbW9y ZSBjbGVhcmx5IHRoYXQgdGhlIGNvbmNyZXRlIHJlY29tbWVuZGF0aW9ucyBhcmUgdGFpbG9yZWQg dG8NCiAgc3BlY2lmaWMgY29uZ2VzdGlvbiBjb250cm9scyBhbmQgYmUgbW9yZSBvcGVuIHRvIG90 aGVyIGNvbmdlc3Rpb24NCmNvbnRyb2wgdmFyaWFudHMNCg0KMykgdGhlIGFic3RyYWN0IGlzIHRv byBsb25nDQoNCmFuZCBzZWN0aW9uIDQgY29udGFpbnMgYSBiaXQgcmVkdW5kYW5jeSB3LnIudC4g c2VjdGlvbnMgMiBhbmQgMy4NCg0KSSBoYXZlIHByb3ZpZGVkIGFuc3dlcnMgdG8gdGhlIGFib3Zl IGl0ZW1zIGluIHRoZSDigJxpbiBtb3JlIGRldGFpbOKAnSBwYXJ0IGJlbG93Og0KDQoNCmluIG1v cmUgZGV0YWlsDQoxKSBJIHdvdWxkIHByZWZlciB0byB1c2UgX2J1ZmZlcl8gZm9yIHRoZSBtYXhp bXVtIG1lbW9yeSBzcGFjZSB0aGF0IGlzDQogIGFsbG9jYXRlZCBmb3IgcG90ZW50aWFsbHkgZW5x dWV1ZWQgcGFja2V0cyBhbmQgX3F1ZXVlXyBmb3IgdGhlDQogIGFtb3VudCBvZiBhY3R1YWxseSBx dWV1ZWQgcGFja2V0cywgaS5lLiwgY3VycmVudCBidWZmZXINCiAgb2NjdXBhbmN5LiBUaGVyZWZv cmUsIElNSE8gaXQgbWFrZXMgc2Vuc2UgdG8gc3BlYWsgb2Ygc2hhbGxvdw0KICBidWZmZXJzIGFu ZCBzaG9ydCBxdWV1ZXMsIGJ1dCBub3Qgb2YgInNoYWxsb3cgcXVldWVzIi4gSW4NCiAgcGFydGlj dWxhciwgYW4gQVFNIHRyaWVzIHRvIGtlZXAgdGhlIChsb25nZXItdGVybSkgcXVldWUgc2hvcnQg aW4gYQ0KICBidWZmZXIgd2hpbGUgYWNjZXB0aW5nIHRyYW5zaWVudCBidXJzdHMgLS0gdGhlIGJl aGF2aW9yIHRoZXJlZm9yZQ0KICBhbHNvIGRpZmZlcnMgZnJvbSBhICJzaGFsbG93IGJ1ZmZlcuKA nS4NCg0KQWdyZWVkIGluIGdlbmVyYWw7IGNoYW5nZWQgYWxsIGluc3RhbmNlcyBvZiDigJxzaGFs bG93IGJ1ZmZlcuKAnSB0byDigJxzaG9ydCBxdWV1ZeKAnSBib3RoIGluIHRoZSBhYnN0cmFjdCBh bmQgdGhlIG1haW4gYm9keSwNCmV4Y2VwdCBmb3Ig4oCcc2hhbGxvdyBBUU0gbWFya2luZyB0aHJl c2hvbGTigJ0gd2hpY2ggcmVtYWlucyB0aGUgc2FtZSBhcyBpdCByZWZlcnMgdG8gdGhlIOKAnHNo YWxsb3cgdGhyZXNob2xk4oCdLg0KDQoNCjIpIHRoZSBtYWluIHBvaW50IG9mIHRoaXMgZHJhZnQg aXM6IGl0IG1ha2VzIHNlbnNlIHRvIGJlaGF2ZSBkaWZmZXJlbnQgdG8NCiAgQ0UtRUNOIG1hcmtl ZCBwYWNrZXRzIHRoYW4gdG8gcGFja2V0IGxvc3MuIE9uZSBiZW5lZml0IGlzIHRvDQogIGFjaGll dmUgaGlnaGVyIHV0aWxpemF0aW9uIGJ5IGFkanVzdGluZyB0aGUgYmFja29mZiB0byBiZSBsZXNz LiBUaGUNCiAgcmVjb21tZW5kYXRpb24gZm9yIHR3byBiYWNrb2ZmIGZhY3RvcnMgaXMgc3BlY2lm aWMgZm9yIHR3bw0KICBjb25nZXN0aW9uIGNvbnRyb2xzLCBDVUJJQyBhbmQgTmV3IFJlbm8uIEZv ciBvdGhlciBjb25nZXN0aW9uDQogIGNvbnRyb2xzIGl0IG1heSBhbHNvIG1ha2Ugc2Vuc2UgdG8g YWRhcHQgZGlmZmVyZW50bHksIGJ1dCB0aGUgZHJhZnQNCiAgZG9lc24ndCBwcm92aWRlIGFueSBy ZWNvbW1lbmRhdGlvbnMgZm9yIHRoZW0uIEluIGdlbmVyYWwsIHRoZXJlIGNhbg0KICBiZSBsb3Rz IG9mIGRpZmZlcmVudCBjb25nZXN0aW9uIGNvbnRyb2xzIHRoYXQgZG8gbm90IG5lZWQgdGhpcyBr aW5kDQogIG9mIG1vZGlmaWNhdGlvbiB0byBrZWVwIHRoZSB1dGlsaXphdGlvbiBoaWdoLg0KDQpU aGlzIHNlZW1zIHRvIGhhdmUgYmVlbiBhbHJlYWR5IGNhcHR1cmVkIGluIFNlY3Rpb24gNC4zIChi ZWxvdyk6DQoNCiAgIGJldGFfe2Vjbn0gZGVwZW5kcyBvbiBob3cgdGhlIHJlc3BvbnNlIG9mIGEg VENQIGNvbm5lY3Rpb24gdG8gc2hhbGxvdw0KICAgQVFNIG1hcmtpbmcgdGhyZXNob2xkcyBpcyBv cHRpbWlzZWQuIGJldGFfe2xvc3N9IHJlZmxlY3RzIHRoZQ0KICAgcHJlZmVycmVkIHJlc3BvbnNl IG9mIGVhY2ggY29uZ2VzdGlvbiBjb250cm9sIGFsZ29yaXRobSB3aGVuIGZhY2VkDQogICB3aXRo IGV4aGF1c3Rpb24gb2YgYnVmZmVycyAob2YgdW5rbm93biBkZXB0aCkgc2lnbmFsbGVkIGJ5IHBh Y2tldA0KICAgbG9zcy4gIENvbnNlcXVlbnRseSwgZm9yIGFueSBnaXZlbiBUQ1AgY29uZ2VzdGlv biBjb250cm9sIGFsZ29yaXRobQ0KICAgdGhlIGNob2ljZSBvZiBiZXRhX3tlY259IGlzIGxpa2Vs eSB0byBiZSBhbGdvcml0aG0tc3BlY2lmaWMsIHJhdGhlcg0KICAgdGhhbiBhIGNvbnN0YW50IG11 bHRpcGxlIG9mIHRoZSBhbGdvcml0aG0ncyBleGlzdGluZyBiZXRhX3tsb3NzfS4NCg0KU28gSeKA mW0gbm90IHN1cmUgaWYgd2UgbmVlZCB0byBhZGQgYW55dGhpbmcgbW9yZSBiZXlvbmQgd2hhdOKA mXMgZGlzY3Vzc2VkIGluIGhlcmUgd2l0aG91dCByaXNraW5nIGJlaW5nIHJlZHVuZGFudC4gSWYg eW91IHRoaW5rIG90aGVyd2lzZSwgcGxlYXNlDQpzdWdnZXN0IHRleHQgKHRoYXQgZGlmZmVycyBm cm9tIGFib3ZlKSBhbmQgYSBzdWl0YWJsZSAoc3ViLSlzZWN0aW9uLg0KDQpJIGhhdmUgYWxzbyBh ZGRlZCB0aGlzIHRleHQgdG8gU2VjdGlvbiA0LjM6DQoNClRoZSByZWNvbW1lbmRlZCBiZXRhX3tl Y259IHZhbHVlIGluIHRoaXMgZG9jdW1lbnQgaXMgb25seSBhcHBsaWNhYmxlIGZvciBTdGFuZGFy ZCBUQ1AgY29uZ2VzdGlvbiBjb250cm9sLg0KDQoNCjMpIFRoZSBhYnN0cmFjdCBzaG91bGQgYmUg Y29ycmVjdGVkIGFjY29yZGluZyB0byAxIGFuZCBzaG9ydGVuZWQsDQogIHN1Y2ggYXM6IFJlY2Vu dCBBY3RpdmUgUXVldWUgTWFuYWdlbWVudCAoQVFNKSBtZWNoYW5pc21zIGFsbG93IGZvcg0KICBi dXJzdCB0b2xlcmFuY2Ugd2hpbGUgZW5mb3JjaW5nIHNob3J0IHF1ZXVlcyB0byBtaW5pbWlzZSB0 aGUgdGltZQ0KICB0aGF0IHBhY2tldHMgc3BlbmQgZW5xdWV1ZWQgYXQgYSBib3R0bGVuZWNrLiBU aGlzIGNhbiBjYXVzZQ0KICBub3RpY2VhYmxlIHBlcmZvcm1hbmNlIGRlZ3JhZGF0aW9uIGZvciBU Q1AgY29ubmVjdGlvbnMgdHJhdmVyc2luZw0KICBzdWNoIGEgYm90dGxlbmVjaywgZXNwZWNpYWxs eSBpZiB0aGV5IGFyZSBvbmx5IGEgZmV3IG9yIHRoZWlyDQogIGJhbmR3aWR0aC1kZWxheS1wcm9k dWN0IGlzIGxhcmdlLiAgQW4gRXhwbGljaXQgQ29uZ2VzdGlvbg0KICBOb3RpZmljYXRpb24gKEVD Tikgc2lnbmFsIGluZGljYXRlcyB0aGF0IGFuIEFRTSBtZWNoYW5pc20gaXMgdXNlZA0KICBhdCB0 aGUgYm90dGxlbmVjaywgYW5kIHRoZXJlZm9yZSB0aGUgYm90dGxlbmVjayBuZXR3b3JrIHF1ZXVl IGlzDQogIGxpa2VseSB0byBiZSBzaG9ydC4gIFRoaXMgZG9jdW1lbnQgdGhlcmVmb3JlIHByb3Bv c2VzIGFuIHVwZGF0ZSB0bw0KICB0aGUgVENQIHNlbmRlci1zaWRlIEVDTiByZWFjdGlvbiBpbiBj b25nZXN0aW9uIGF2b2lkYW5jZSB0byByZWR1Y2UNCiAgdGhlIGNvbmdlc3Rpb24gd2luZG93IGJ5 IGEgc21hbGxlciBhbW91bnQgdGhhbiB0aGUgY29uZ2VzdGlvbg0KICBjb250cm9sIGFsZ29yaXRo bSdzIHJlYWN0aW9uIHRvIGxvc3MuDQoNClNpbXBseSB1c2VkIHRoZSBhYm92ZSB0ZXh0IHN1Z2dl c3Rpb24sIHdoaWxlIGtlZXBpbmcgdGhlIGFiYnJldmlhdGlvbiBkZWZpbml0aW9uIG9mIGN3bmQu DQoNCg0KLS0tLS0tLS0tLS0tLS0tLS0tDQpXYWxrIHRocm91Z2g6DQoNClNlY3Rpb24gMi4NCj09 PT09PT09PT0NCg0KIFJlc2VhcmNoIGhhcyBkZW1vbnN0cmF0ZWQgdGhlIGJlbmVmaXRzIG9mIHJl ZHVjaW5nIG5ldHdvcmsgZGVsYXlzIGR1ZQ0KIHRvIGV4Y2Vzc2l2ZSBidWZmZXJpbmcgW0JVRkZF UkJMT0FUXTsgdGhpcyBoYXMgbGVkIHRvIHRoZSBjcmVhdGlvbiBvZg0KIG5ldyBBUU0gbWVjaGFu aXNtcyBsaWtlIFBJRSBbUkZDODAzM10gYW5kIENvRGVsIFtDT0RFTDIwMTJdDQogW0ktRC5Db0Rl bF0sIHdoaWNoIGF2b2lkIGNhdXNpbmcgdGhlIGJsb2F0ZWQgcXVldWVzIHRoYXQgYXJlIGNvbW1v bg0KIHdpdGggYSBzaW1wbGUgdGFpbC1kcm9wIGJlaGF2aW91ciAoYWxzbyBrbm93biBhcyBhIEZp cnN0LUluIEZpcnN0LQ0KIE91dCwgRklGTywgcXVldWUpLg0KDQpUaGUgZmlyc3Qgc2VudGVuY2Ug aXMgY29uZnVzaW5nbHkgcHV0OiAicmVkdWNpbmcgbmV0d29yayBkZWxheXMgZHVlIHRvDQpleGNl c3NpdmUgYnVmZmVyaW5nIiwgYmV0dGVyIHJlcGhyYXNlLg0KDQpiZWxvdw0KDQpNb3Jlb3Zlciwg SSdkIGxpa2UgdG8gc2VlIGENCm1vcmUgcHJlY2lzZSBkZXNjcmlwdGlvbiBvZiB0aGUgcHJvYmxl bSBoZXJlOiBUaGUgbWFpbiBwcm9ibGVtIGlzIGhlcmUNCnRoYXQgZXhpc3RpbmcgbG9zcy1iYXNl ZCBjb25nZXN0aW9uIGNvbnRyb2xzIGNvbXBsZXRlIGZpbGwgYXZhaWxhYmxlDQpib3R0bGVuZWNr IGJ1ZmZlciBjYXBhY2l0eS4gU28gaXQncyBwcmltYXJpbHkgX25vdF8gdGhlIHRhaWwtZHJvcA0K YmVoYXZpb3IgY2F1c2luZyBibG9hdGVkIHF1ZXVlcywgYnV0IHRoZSBjb25nZXN0aW9uIGNvbnRy b2wuDQoNCkNoYW5nZWQgdG86ICBSZXNlYXJjaCBoYXMgZGVtb25zdHJhdGVkIHRoZSBiZW5lZml0 cyBvZiByZWR1Y2luZyBuZXR3b3JrIGRlbGF5cw0KICAgdGhhdCBhcmUgY2F1c2VkIGJ5IGludGVy YWN0aW9uIG9mIGxvc3MtYmFzZWQgVENQIGNvbmdlc3Rpb24gY29udHJvbA0KICAgYW5kIGV4Y2Vz c2l2ZSBidWZmZXJpbmcgW0JVRkZFUkJMT0FUXS4NCg0KDQpUaGVyZQ0KZXhpc3QgdHdvIGFwcHJv YWNoZXMgdG8gcmVkdWNlIHRoZSBxdWV1ZXM6IHVzZSBkaWZmZXJlbnQgYSBkaWZmZXJlbnQNCmNv bmdlc3Rpb24gY29udHJvbCAobW9kaWZ5IGVuZCBwb2ludHMpIG9yIGVuZm9yY2Ugc2hvcnQgcXVl dWVzIGluDQpyb3V0ZXJzIGJ5IHVzaW5nIEFRTXMgKG1vZGlmeSBpbnRlcm1lZGlhdGUgc3lzdGVt cykuIFNvIGEgZGVsYXktYmFzZWQNCmNvbmdlc3Rpb24gY29udHJvbCBjYW4gdXNlIGEgdGFpbC1k cm9wIEZJRk8gcXVldWUgYW5kIHN0aWxsIGF2b2lkDQpleGNlc3NpdmUgcXVldWluZyBkZWxheXMs IGkuZS4sIG5vdCBldmVuIHJlcXVpcmluZyBhbiBBUU0gdG8gY29udHJvbA0KdGhlIHF1ZXVlLg0K DQpXZSAoYXV0aG9ycykgdGhpbmsgdGhhdCBpdOKAmXMgYmVzdCB0byBsZWF2ZSB0aGUgZGlzY3Vz c2lvbiBvbiB0aGUgZGVsYXktYmFzZWQgQ0NzIG91dHNpZGUgb2YgdGhpcyBkb2N1bWVudC4gRGVz cGl0ZSB0aGUgZmFjdCB0aGF0IHdlIGluaXRpYWxseSB0YWxrZWQgYWJvdXQgdGhpcyBpbiAtMDMs IHdlIGhhdmUgbm93IHJlbW92ZWQgdGhlIHRleHQgdGhhdCBtZW50aW9ucyB0aGVtIChpbiAtMDQg ZHJhZnQpLiBXZSB3b3VsZCBsaWtlIHRvIGF2b2lkIGRldG91cmluZyBpbnRvIHNwZWNpZmljIG1l bnRpb24gb2YgImkuZSBkZWxheS1iYXNlZCIgYXBwcm9hY2hlcyBhbmQgdGhlIGRpc21pc3NpdmUg IlRoZS4uLiBzdWZmZXJzIGZyb20uLi4gb3V0IG9mIHNjb3BlLi4uIi4gVGhlcmUncyBhIHdpZGUg bGl0ZXJhdHVyZSBvbiB0ZWNobmlxdWVzIHRoYXQgYXJlIGJhc2VkIG9uIGRlbGF5LiBIb3dldmVy LCB0aGUgbWVudGlvbiBvZiAiZGVsYXkiIGJhc2VkIENDIGRpc3RyYWN0cyBmcm9tIG91ciBJLUQu IERlbGF5LWJhc2VkIGFsZ29zIGFyZW4ndCBvdXQgb2Ygc2NvcGUgZm9yIG91ciBkb2MgZHVlIHRv IGNvZXhpc3RlbmN5IHByb2JsZW1zIChhcyB3ZSBpbml0aWFsbHkgd3JvdGUgaW4gLTAzKSBidXQg dGhleSBhcmUgb3V0IG9mIHNjb3BlIGJlY2F1c2UgdGhleSdyZSBjb21wbGV0ZWx5IGlycmVsZXZh bnQgdG8gb3VyIHByb3Bvc2FsIGJ5IGRlZmluaXRpb24uDQoNCg0KVGhlc2UgQVFNIG1lY2hhbmlz bXMgaW5zdGFudGlhdGUgc2hvcnQgcXVldWVzIHRoYXQgYXJlIGRlc2lnbmVkIHRvDQp0b2xlcmF0 ZSBwYWNrZXQgYnVyc3RzLg0KDQpNb3JlIHByZWNpc2VseToNClRoZXNlIEFRTSBtZWNoYW5pc21z IGFpbSB0byBrZWVwIGEgc3VzdGFpbmVkIHF1ZXVlIHNob3J0IHdoaWxlDQp0b2xlcmF0aW5nIHRy YW5zaWVudCAoc2hvcnQtdGVybSkgcGFja2V0IGJ1cnN0cy4NCg0KRml4ZWQuDQoNCg0KSG93ZXZl ciwgY29uZ2VzdGlvbiBjb250cm9sIG1lY2hhbmlzbXMNCmNhbm5vdCBhbHdheXMgdXRpbGlzZSBh IGJvdHRsZW5lY2sgbGluayB3ZWxsIHdoZXJlIHRoZXJlIGFyZSBzaG9ydA0KcXVldWVzLg0KDQo9 PiBIb3dldmVyLCBjdXJyZW50bHkgdXNlZCBsb3NzLWJhc2VkIGNvbmdlc3Rpb24gY29udHJvbCBt ZWNoYW5pc21zDQoNCkZpeGVkLg0KDQoNCnRvIGNvbXBlbnNhdGUgZm9yIFRDUCBoYWx2aW5nIHRo ZSAiY3duZCIgYW5kICJzc3RocmVzaCIgdmFyaWFibGVzIGluDQpyZXNwb25zZSB0byBhIGxvc3Qg cGFja2V0IFtSRkM1NjgxXS4NCg0Kc2VlIDEpLCBjd25kIGlzIHNldCB0byBGbGlnaHRTaXplLzIs IG5vdCBjd25kLzIgKFJGQzU2ODEgaXMgcXVpdGUNCnNwZWNpZmljIGFib3V0IHRoaXMpLg0KDQpU aGlzIGxhbmd1YWdlICh1c2luZyDigJxoYWx2aW5n4oCdKSBpcyBjb21tb24gdGhyb3VnaG91dCBS RkMzMTY4IChwZXJoYXBzIHdyb25nbHkpLiBUaGVyZWZvcmUgY2hhbmdlZCDigJxoYWx2aW5n4oCd IHRvIOKAnHJlZHVjaW5n4oCdLiBTaW5jZSBpdCBhbHJlYWR5IGNpdGVzIFJGQzU2ODEsIGl04oCZ cyBjbGVhciBob3cgaXQgZG9lcyBpdC4gc2F5aW5nIGhhbHZpbmcgdGhlIOKAnEZsaWdodFNpemXi gJ0gd291bGQgaGF2ZSBiZWVuIHdyb25nIGFzIFRDUCBkb2VzbuKAmXQgY2hhbmdlIHRoZSBmbGln aHQgc2l6ZSB2YXJpYWJsZSAoaXTigJlzIG1lYXN1cmVkL2NhbGN1bGF0ZWQpLCBzbyB0aGlzIHNl ZW1zIHRvIGJlIGFuIGVhc3kgd2F5IG91dC4NCg0KRml4ZWQgYW5kIHJlYWRzIGFzOg0KDQogICBG b3IgZXhhbXBsZSwgYSBUQ1Agc2VuZGVyIG11c3QgYmUgYWJsZSB0byBzdG9yZSBhdCBsZWFzdCBh bg0KICAgZW5kLXRvLWVuZCBiYW5kd2lkdGgtZGVsYXkgcHJvZHVjdCAoQkRQKSB3b3J0aCBvZiBk YXRhIGF0IHRoZQ0KICAgYm90dGxlbmVjayBidWZmZXIgaWYgaXQgaXMgdG8gbWFpbnRhaW4gZnVs bCBwYXRoIHV0aWxpc2F0aW9uIGluIHRoZQ0KICAgZmFjZSBvZiBsb3NzLWluZHVjZWQgcmVkdWN0 aW9uIG9mIGN3bmQgW1JGQzU2ODFdLCB3aGljaCBlZmZlY3RpdmVseQ0KICAgZG91YmxlcyB0aGUg YW1vdW50IG9mIGRhdGEgdGhhdCBjYW4gYmUgaW4gZmxpZ2h0LCB0aGUgbWF4aW11bSByb3VuZC0N CiAgIHRyaXAgdGltZSAoUlRUKSBleHBlcmllbmNlLCBhbmQgdGhlIHBhdGgncyBlZmZlY3RpdmUg UlRUIHVzaW5nIHRoZQ0KICAgbmV0d29yayBwYXRoLg0KDQoNClRoaXMgcmVxdWlyZXMgdGhlIGJv dHRsZW5lY2sNCnF1ZXVlIHRvIGJlIGFibGUgdG8gc3RvcmUgYXQgbGVhc3QgYW4gZW5kLXRvLWVu ZCBiYW5kd2lkdGgtZGVsYXkNCg0KcXVldWUgPT4gYnVmZmVyDQoNCkRvbmUhDQoNCg0KcHJvZHVj dCAoQkRQKSBvZiBkYXRhLCB3aGljaCBlZmZlY3RpdmVseSBkb3VibGVzIGJvdGggdGhlIGFtb3Vu dCBvZg0KZGF0YSB0aGF0IGNhbiBiZSBpbiBmbGlnaHQgYW5kIHRoZSByb3VuZC10cmlwIHRpbWUg KFJUVCkgZXhwZXJpZW5jZQ0KdXNpbmcgdGhlIG5ldHdvcmsgcGF0aC4NCg0KaXQgZWZmZWN0aXZl bHkgZG91YmxlcyB0aGUgUlRUIG9ubHkgaWYgdGhlIGJ1ZmZlciBpcyBjb21wbGV0ZWx5DQpmaWxs ZWQsIHVzdWFsbHkgdGhlIHF1ZXVlIGlzIHZhcnlpbmcgb3ZlciB0aW1lLg0KDQpBZGRlZCDigJxt YXhpbXVt4oCdIHRvIHRoZSDigJxyb3VuZC10cmlwIHRpbWUgKFJUVCnigJ0uDQoNCg0KQUJFIGlt cHJvdmVzIHRoZQ0KcGVyZm9ybWFuY2Ugd2hlbiByb3V0ZXJzIHVzZSBzaGFsbG93IGJ1ZmZlcmVk IEFRTSBtZWNoYW5pc21zLg0KDQpTZWUgMSksIGUuZy4sICJ3aGVuIHJvdXRlcnMgdXNlIEFRTSBj b250cm9sbGVkIGJ1ZmZlcnMgdGhhdCBhbGxvdw0KZm9yIHNob3J0IHF1ZXVlcyBvbmx5LuKAnQ0K DQpGaXhlZC4NCg0KDQpTZWN0aW9uIDMuDQo9PT09PT09PT09DQpUaGlzIHNwZWNpZmljYXRpb24g ZGVzY3JpYmVzIGFuIHVwZGF0ZSB0byB0aGUgY29uZ2VzdGlvbiBjb250cm9sDQphbGdvcml0aG0g b2YgYW4gRUNOLWNhcGFibGUgVENQIHRyYW5zcG9ydCBwcm90b2NvbC4NCg0KU2VlIDIuKSBUaGlz IHN0YXRlbWVudCBpcyB2ZXJ5IGdlbmVyaWMsIHdoZXJlYXMgdGhlIHJlY29tbWVuZGF0aW9uIGlz DQpxdWl0ZSBzcGVjaWZpYyB0byBDVUJJQyBhbmQgTmV3UmVuby4gSXQgbWF5IGJlIHVzZWZ1bCBm b3Igb3RoZXIgY29uZ2VzdGlvbg0KY29udHJvbHMgYXMgd2VsbCBpZiB0aGV5IHJlcXVpcmUgYWxz byBhIG1vcmUgbW9kZXJhdGUgcmVzcG9uc2UvYmFja29mZg0KaW4gb3JkZXIgdG8ga2VlcCB0aGUg dXRpbGl6YXRpb24gaGlnaC4gVGhlaXIgYmFja29mZiBtb2RpZmljYXRpb24gbWF5DQpob3dldmVy LCBiZSBkaWZmZXJlbnQuIE1vcmVvdmVyLCB0aGVyZSBleGlzdCBvdGhlciBjb25nZXN0aW9uIGNv bnRyb2xzDQp0aGF0IGRvbid0IHN1ZmZlciBmcm9tIHVuZGVydXRpbGl6YXRpb24gaWYgdGhleSBy ZWFjdCB0byBhIGNvbmdlc3Rpb24NCnNpZ25hbC4NCg0KQWN0dWFsbHkgdGhlIHJlY29tbWVuZGF0 aW9uIGlzIHB1cmVseSBmb3IgTmV3UmVubywgYWxzbyBzdGFuZGluZyBhcyBJRVRGLXN0YW5kYXJk IOKAnFRDUCBjb25nZXN0aW9uIGNvbnRyb2zigJ0uIFdlIG1lbnRpb24gdGhhdCB3ZSBoYXZlIHRl c3RlZCBmb3IgQ1VCSUMgYXMgd2VsbCBhcyBwcm92aWRlIGEgdmFsdWUgd2hlcmUgQ1VCSUMgd29y a3Mgd2VsbCBhdCwgYnV0IHRoZSBSRUNPTU1FTkRBVElPTiBnaXZlbiBpbiB0aGUgSS1EIChpLmUu IGJldGFfe2Vjbn09MC44KSBvbmx5IGNvbmNlcm5zIHRoZSBzdGFuZGFyZCBUQ1AuDQoNCg0KSXQg UkVDT01NRU5EUyB0aGF0IGEgVENQDQpzZW5kZXIgbXVsdGlwbGllcyB0aGUgY3duZCBieSAwLjgg YW5kIHJlZHVjZXMgdGhlIHNsb3cgc3RhcnQNCnRocmVzaG9sZCAoc3N0aHJlc2gpIGluIGNvbmdl c3Rpb24gYXZvaWRhbmNlIGZvbGxvd2luZyByZWNlcHRpb24gb2YgYQ0KVENQIHNlZ21lbnQgdGhh dCBzZXRzIHRoZSBFQ04tRWNobyBmbGFnIChkZWZpbmVkIGluIFtSRkMzMTY4XSkuDQoNClNlZSBw cmV2aW91cyBjb21tZW50OiBoZXJlIHlvdSBzaG91bGQgYmUgZXhwbGljaXQgYWJvdXQgdGhlIHBh cnRpY3VsYXINCmNvbmdlc3Rpb24gY29udHJvbHMgd2hlcmUgdGhlIHJlY29tbWVuZGVkIGJlaGF2 aW9yIGFuZCBwYXJhbWV0ZXIgY2FuDQpiZSBhcHBsaWVkIHRvLg0KDQpTZWUgYWJvdmUuDQoNCk1v cmVvdmVyLCAiY3duZD0gbWF4IChGbGlnaHRTaXplICogYmV0YV97ZWNufSwgMiAqIFNNU1MpIiwN CndoaWNoIGlzIGEgYml0IGRpZmZlcmVudCBmcm9tIGN3bmQ9IGN3bmQgICogYmV0YV97ZWNufSAo dGhpcyBpcyB3aGF0DQp0aGUgdGV4dCBzdWdnZXN0cykuDQoNCk5vdyByZWFkcyBhczoNCg0KICAg SXQgUkVDT01NRU5EUyB0aGF0IGEgVENQIHNlbmRlciBtdWx0aXBsaWVzIHRoZSBzbG93IHN0YXJ0 IHRocmVzaG9sZCAoc3N0aHJlc2gpIGJ5IDAuOCB0aW1lcyBvZg0KICAgdGhlIEZsaWdodFNpemUg KHdpdGggaXRzIG1pbmltdW0gdmFsdWUgc2V0IHRvIDIgKiBTTVNTKSBhbmQgcmVkdWNlcw0KICAg dGhlIGN3bmQgaW4gY29uZ2VzdGlvbiBhdm9pZGFuY2UgZm9sbG93aW5nIHJlY2VwdGlvbiBvZiBh IFRDUCBzZWdtZW50DQogICB0aGF0IHNldHMgdGhlIEVDTi1FY2hvIGZsYWcgKGRlZmluZWQgaW4g W1JGQzMxNjhdKS4NCg0KDQpTZWN0aW9uIDQuDQo9PT09PT09PT09DQogcGVyZm9ybWFuY2UgZ2Fp bnMgaW4gbGlnaHRseS1tdWx0aXBsZXhlZCBzY2VuYXJpb3MsIHdpdGhvdXQgbG9zaW5nDQoNCiJs aWdodGx5LW11bHRpcGxleGVkIHNjZW5hcmlvcyIgbWVhbnMgcHJlc3VtYWJseSB0aGF0IG9ubHkg YSBmZXcgZmxvd3MNCnRyYXZlcnNlIHRoZSBjb25zaWRlcmVkIGJvdHRsZW5lY2ssIGJ1dCBob3cg bWFueSBhcmUgImEgZmV3IiB0aGVuPw0KdGhyZWUgb3IgbmluZSBvciB0d2VudHk/DQpMYXRlciBv biBpdCBpcyBkZWZpbmVkIGFzDQoibGlnaHRseS1tdWx0aXBsZXhlZCBjYXNlIChmZXcgY29uY3Vy cmVudCBjb25uZWN0aW9ucykiLA0KYmV0dGVyIG1lbnRpb24gdGhpcyBhdCBmaXJzdCB1c2UgYWxy ZWFkeS4+DQoNCkRvbmUuDQoNCg0KbG9zcyBpcyBkZXRlY3RlZCAocmVnYXJkZWQgYXMgYSBub3Rp ZmljYXRpb24gb2YgY29uZ2VzdGlvbiksIFN0YW5kYXJkDQpUQ1AgaGFsdmVzIHRoZSBjd25kIGFu ZCBzc3RocmVzaCBbUkZDNTY4MV0sIHdoaWNoIGNhdXNlcyB0aGUgVENQDQogIF5eXl5eXl5eXl5e Xl5eXl5eXl5eXl5eXl5eXl5eXl5eDQpTZWUgMSksIHJvdWdobHkgc3BlYWtpbmcgeWVzLCBidXQg bm90IHF1aXRlIGNvcnJlY3QuIE1vcmVvdmVyLCBwYWNrZXQNCmxvc3MgY2FuIGJlIGRldGVjdGVk IGJ5IHZhcmlvdXMgd2F5cywgZS5nLiwgYnkgdXNpbmcgdGhlIHJldHJhbnNtaXNzaW9uDQp0aW1l cg0Kb3Igbm90OyB0aGUgY29uZ2VzdGlvbiBjb250cm9sIHJlc3BvbnNlIG1heSBkaWZmZXIgdGhl biwgdG9vLg0KDQpDb21wbHlpbmcgd2l0aCB0aGUgZGVzY3JpcHRpb24gdGV4dCBvZiBSRkM1Njgx LCBpdCBub3cgcmVhZHMgYXM6DQoNCiAgIFdoZW4gcGFja2V0IGxvc3MgaXMgaW5mZXJyZWQgdXNp bmcgdGhlIHJldHJhbnNtaXNzaW9uIHRpbWVyIGFuZCB0aGUgZ2l2ZW4gcGFja2V0DQogICBoYXMg bm90IHlldCBiZWVuIHJlc2VudCBieSB3YXkgb2YgdGhlIHJldHJhbnNtaXNzaW9uIHRpbWVyIChy ZWdhcmRlZA0KICAgYXMgYSBub3RpZmljYXRpb24gb2YgY29uZ2VzdGlvbiksIFN0YW5kYXJkIFRD UCBzZXRzIHRoZSBzc3RocmVzaCB0bw0KICAgdGhlIG1heGltdW0gb2YgaGFsZiBvZiB0aGUgRmxp Z2h0U2l6ZSBhbmQgMipTTVNTIFtSRkM1NjgxXSwgd2hpY2gNCiAgIGNhdXNlcyB0aGUgVENQIGNv bmdlc3Rpb24gY29udHJvbCB0byBnbyBiYWNrIHRvIGFsbG93aW5nIG9ubHkgYSBCRFANCiAgIG9m IHBhY2tldHMgaW4gZmxpZ2h0IC0tIGp1c3Qgc3VmZmljaWVudCB0byBtYWludGFpbiAxMDAlIHV0 aWxpc2F0aW9uDQogICBvZiB0aGUgYm90dGxlbmVjayBvbiB0aGUgbmV0d29yayBwYXRoLg0KDQoN CmRlbGF5IHRhcmdldCBpbiByb3V0ZXJzIGFuZCB1c2UgY29uZ2VzdGlvbiBub3RpZmljYXRpb25z IHRvIGNvbnN0cmFpbg0KdGhlIHF1ZXVpbmcgZGVsYXlzIGV4cGVyaWVuY2VkIGJ5IHBhY2tldHMs IHJhdGhlciB0aGFuIGluIHJlc3BvbnNlIHRvDQoNCmlmIEFRTXMgc2V0IENFLCB0aGV5IGhvcGUg Zm9yIGFuIGFwcHJvcHJpYXRlIGFjdGlvbiwgaG93ZXZlciwNCnRoZXknbGwgbGltaXQgdGhlIHF1 ZXVlaW5nIGRlbGF5cyBieSBhY3RpdmVseSBkcm9wcGluZyBwYWNrZXRzLg0KDQppdCB1c2VzIHRo ZSB0ZXJtICJjb25nZXN0aW9uIG5vdGlmaWNhdGlvbnPigJ0sIHdoaWNoIGNhbiBiZSBsb3NzIChp bXBsaWNpdCBjb25nZXN0aW9uIG5vdGlmaWNhdGlvbikgb3IgZXhwbGljaXQgKEVDTikuIElmIHRo ZSBzZW5kZXIgaXMgdW5yZXNwb25zaXZlLCB0aGVuIGRyb3BwaW5nIHBhY2tldHMgaXMgYSDigJxw cm90ZWN0aW9uIG1lY2hhbmlzbeKAnSwgYnV0IHRoZSB1bmRlcmx5aW5nIGFzc3VtcHRpb24gaXMg dGhlIHdoYXRldmVyIHRyYWZmaWMgaXMgdHJhdmVyc2luZyB0aGUgcGF0aCBpcyBjb25nZXN0aW9u IGNvbnRyb2xsZWQgYXQgZW5kLXBvaW50cy4NCg0KDQp0aGF0IHdlcmUgbm90IG5lY2Vzc2FyaWx5 IGNvbmZpZ3VyZWQgdG8gZW11bGF0ZSBhDQpzaGFsbG93IHF1ZXVlDQoNCnNlZSAxKSwgc2hvcnQg cXVldWUgdnMuIHNoYWxsb3cgYnVmZmVyDQoNCkNoYW5nZWQgdG8gImVtdWxhdGUgYSBib3R0bGVu ZWNrIHdpdGggYSBzaG9ydCBxdWV1ZSINCg0KDQpIb3dldmVyLCBpdCBpbnRlcmFjdHMgYmFkbHkg Zm9yIGEgbGlnaHRseS1tdWx0aXBsZXhlZA0KY2FzZSAoZmV3IGNvbmN1cnJlbnQgY29ubmVjdGlv bnMpIG92ZXIgYSBwYXRoIHdpdGggYSBsYXJnZSBCRFAuDQpDb252ZW50aW9uYWwgVENQIGJhY2tv ZmYgaW4gc3VjaCBjYXNlcyBsZWFkcyB0byBnYXBzIGluIHBhY2tldA0KdHJhbnNtaXNzaW9uIGFu ZCB1bmRlci11dGlsaXNhdGlvbiBvZiB0aGUgcGF0aC4NCg0KTWF5YmUgY29tYmluZSB0aGVzZSB0 d28gc2VudGVuY2VzOg0KDQpIb3dldmVyLCBpbiBhIGxpZ2h0bHktbXVsdGlwbGV4ZWQgY2FzZSAo ZmV3IGNvbmN1cnJlbnQgY29ubmVjdGlvbnMpDQpvdmVyIGEgcGF0aCB3aXRoIGEgbGFyZ2UgQkRQ LCBjb252ZW50aW9uYWwgVENQIGJhY2tvZmYgbGVhZHMgdG8NCmdhcHMgaW4gcGFja2V0IHRyYW5z bWlzc2lvbiBhbmQgdW5kZXItdXRpbGlzYXRpb24gb2YgdGhlIHBhdGguDQoNCkRvbmUuDQoNCg0K aGVuY2UgdGhlIENFLW1hcmsgbGlrZWx5IGNhbWUgZnJvbSBhIGJvdHRsZW5lY2sgd2l0aCBhIHNo YWxsb3cgcXVldWUuDQoNCmNvbnRyb2xsZWQgYW5kIHNob3J0IHF1ZXVlDQoNCkNoYW5nZWQgdG8g ImNvbnRyb2xsZWQgc2hvcnQgcXVldWUiLg0KDQoNClJlYWN0aW5nIGRpZmZlcmVudGx5IHRvIGFu IEVDTiBDRS1tYXJrIHRoYW4gdG8gcGFja2V0IGxvc3MgY2FuIHRoZW4NCnlpZWxkIHRoZSBiZW5l Zml0IG9mIGEgcmVkdWNlZCBiYWNrLW9mZiwgYXMgd2l0aCBDVUJJQyBbSS1ELkNVQklDXSwNCndo ZW4gcXVldWVzIGFyZSBzaG9ydCwgeWV0IGl0IGNhbiBhdm9pZCBnZW5lcmF0aW5nIGV4Y2Vzc2l2 ZSBkZWxheQ0Kd2hlbiBxdWV1ZXMgYXJlIGxvbmcuDQoNCkknbSBub3Qgc3VyZSB0aGF0IEkgdW5k ZXJzdG9vZCB0aGUgZ2lzdCBpbiB0aGlzIHN0YXRlbWVudCwgYmV0dGVyDQpyZXBocmFzZSBhbmQg c3BsaXQgdXAgaW50byB0d28gc2VudGVuY2VzPw0KDQpOb3cgcmVhZHMgYXM6DQoNCiAgIFJlYWN0 aW5nIGRpZmZlcmVudGx5IHRvIGFuIEVDTi1zaWduYWxsZWQNCiAgIGNvbmdlc3Rpb24gdGhhbiB0 byBhbiBpbmZlcnJlZCBwYWNrZXQgbG9zcyBjYW4gdGhlbiB5aWVsZCB0aGUgYmVuZWZpdA0KICAg b2YgYSByZWR1Y2VkIGJhY2stb2ZmIHdoZW4gcXVldWVzIGFyZSBzaG9ydC4gIFVzaW5nIEVDTiBj YW4gYWxzbyBiZQ0KICAgYWR2YW50YWdlb3VzIGZvciBzZXZlcmFsIG90aGVyIHJlYXNvbnMgW1JG QzgwODddLg0KDQoNCkZvciBub24tRUNOLWVuYWJsZWQNClRDUCBjb25uZWN0aW9ucywNCg0KTm90 IGZ1bGx5IGNsZWFyIHdoYXQgdGhpcyBtZWFucy4gQXJlIHRoZSBlbmQtc3lzdGVtcyBFQ04gY2Fw YWJsZSwgYnV0DQp0aGUgcm91dGVycyBpbiBiZXR3ZWVuIGRvIG5vdCBtYXJrPyBPciBkb2VzIGl0 IG1lYW4gdGhhdCBhdCBsZWFzdCBvbmUNCmVuZC1zeXN0ZW0gaXNuJ3QgRUNOIGNhcGFibGU/DQoN CkVDTi1lbmFibGVkICpjb25uZWN0aW9uKiBpcyB0aGUga2luZCBvZiBjb25uZWN0aW9uIGluIHdo aWNoIGJvdGggZW5kIHBvaW50cyBoYXZlIHN1Y2Nlc3NmdWxseSBuZWdvdGlhdGVkIHRoZSBFQ04u IG5vbi1FQ04tZW5hYmxlZCBjb25uZWN0aW9uIGlzIHRoZSBvcHBvc2l0ZSBvZiB0aGF0Lg0KDQoN CiAgIHNzdGhyZXNoXyh0KzEpID0gbWF4IChGbGlnaHRTaXplX3QgKiBiZXRhX3tsb3NzfSwgMiAq IFNNU1MpDQoNClJGQyA1NjgxIGRvZXNuJ3QgdXNlIGFueSBub3RhdGlvbiB3aXRoICJ0Ii4gSWYg eW91IGFyZSB1c2luZyB0LCB5b3UNCnNob3VsZCBzcGVjaWZ5IHdoYXQgaXQgbWVhbnMuIE15IHN1 Z2dlc3Rpb24gaXMgdG8gYXZvaWQgaW50cm9kdWNpbmcNCml0IGFuZCB0byB1c2UgdGhlIHNhbWUg dGVybWlub2xvZ3kgYXMgaW4gUkZDIDU2ODEuDQoNCkRvbmUuDQoNCg0KSSB0aGluayB0aGF0IHRo ZSBiZWdpbm5pbmcgb2Ygc2VjdGlvbiA0LjMgYmVsb25ncyBtb3JlIHRvIHNlY3Rpb24gMw0Kd2hp bGUgdGhhdCByZXN0IGZpdHMgdG8gdGhlIHNlY3Rpb24gdGl0bGUgKGRpc2N1c3Npb24gb2YgdGhl IEFCRQ0KbXVsdGlwbGllcikuDQoNCldoaWNoIHNlbnRlbmNlIGRvIHlvdSBleGFjdGx5IHByZWZl ciB0byBiZSBtb3ZlZCB0byBTZWN0aW9uIDM/DQoNCg0KU2VjdGlvbiA1Lg0KPT09PT09PT09PT0N Cg0KNS4gIFN0YXR1cyBvZiB0aGUgVXBkYXRlDQoNCkkgZG9uJ3QgdW5kZXJzdGFuZCB0aGUgcHVy cG9zZSBvZiB0aGlzIHNlY3Rpb24gb3IgdGhlIHNlY3Rpb24NCnRpdGxlIGlzIHdlaXJkIGF0IGxl YXN0Lg0KSXMgaXQgbWVhbnQgdG8gZGVzY3JpYmUgcmVxdWlyZWQgY2hhbmdlcz8gVGhlIHVzZSB0 aGlzIGFzIHNlY3Rpb24NCnRpdGxlLg0KDQppdOKAmXMgdGhlICJzdGF0dXMgb2YgdGhlIHVwZGF0 ZSB0byB0aGUgY29uZ2VzdGlvbiBjb250cm9s4oCdIHRoYXQgaXMgYmVpbmcgcHJvcG9zZWQgaW4g dGhpcyBkb2N1bWVudC4gSXQgYWRkcmVzc2VzIHRoZSDigJxSZXF1aXJlbWVudCBmb3IgdGhlIHVw ZGF0ZSB0byB0aGUgY29uZ2VzdGlvbiBjb250cm9s4oCdLCBidXQgZm9yIHRoZSBzYWtlIG9mIGJy ZXZpdHkgSSBoYXZlIG5vdyBjaGFuZ2VkIHRoaXMgdG8g4oCcQUJFIHJlcXVpcmVtZW50c+KAnQ0K DQoNCmNvbmdlc3Rpb24tY29udHJvbCBhbGdvcml0aG1zLCBpdCBkb2VzIG5vdCByZXF1aXJlIGFu eSBjaGFuZ2UgdG8gdGhlDQoNCmV2ZXJ5d2hlcmUgZWxzZSBpdCBpcyAiY29uZ2VzdGlvbiBjb250 cm9sIiB3aXRob3V0IGRhc2guDQoNCkZpeGVkLg0KDQoNCiBUaGUgY3VycmVudGx5IHB1Ymxpc2hl ZCBFQ04gc3BlY2lmaWNhdGlvbiByZXF1aXJlcyB0aGF0IHRoZQ0KIGNvbmdlc3Rpb24gY29udHJv bCByZXNwb25zZSB0byBhIENFLW1hcmtlZCBwYWNrZXQgaXMgdGhlIHNhbWUgYXMgdGhlDQogcmVz cG9uc2UgdG8gYSBkcm9wcGVkIHBhY2tldCBbUkZDMzE2OF0uICBUaGUgc3BlY2lmaWNhdGlvbiBp cw0KIGN1cnJlbnRseSBiZWluZyB1cGRhdGVkIHRvIGFsbG93IGZvciBzcGVjaWZpY2F0aW9ucyB0 aGF0IGRvIG5vdA0KIGZvbGxvdyB0aGlzIHJ1bGUgW0ktRC5FQ04tZXhwXS4gIFRoZSBwcmVzZW50 IHNwZWNpZmljYXRpb24gZGVmaW5lcw0KIHN1Y2ggYW4gZXhwZXJpbWVudCBhbmQgaGFzIHRodXMg YmVlbiBhc3NpZ25lZCBhbiBFeHBlcmltZW50YWwgc3RhdHVzDQogYmVmb3JlIGJlaW5nIHByb3Bv c2VkIGFzIGEgU3RhbmRhcmRzLVRyYWNrIHVwZGF0ZS4NCg0KVGhpcyBpcyBsYXJnZWx5IGEgcmVw ZXRpdGlvbiBmcm9tIHRoZSBpbnRyb2R1Y3Rpb24uDQoNClVubGVzcyByZXBldGl0aW9uIGlzIGJh ZCwgaXQgaXMgb2theS4gSW50cm9kdWN0aW9ucyBjYW4gb2Z0ZW4gYmUgdHJlYXRlZCBhcyBwbGFj ZXMgdGhhdCBzdW1tYXJpc2Uga2V5IG1lc3NhZ2VzIGNvbnRhaW5lZCBpbiB0aGUgYm9keSBvZiBh IGRvY3VtZW50LiBTbyByZXB0aXRpb24gaXMgdG8gYmUgZXhwZWN0ZWQuDQoNCg0KQmVjYXVzZSB0 aGlzIGFkdmFudGFnZSBhcHBsaWVzIG9ubHkgdG8gRUNOLW1hcmtlZCBwYWNrZXRzIGFuZCBub3Qg dG8NCmxvc3MgaW5kaWNhdGlvbnMsIHRoZSBuZXcgbWV0aG9kIGNhbm5vdCBsZWFkIHRvIGNvbmdl c3Rpb24gY29sbGFwc2UuDQoNCkknbSBub3Qgc3VyZSB0aGF0IEkgY2FuIGZvbGxvdyBoZXJlLiBU aGVyZSBhcmUgc2V2ZXJhbCBmb3JtcyBvZiBjb25nZXN0aW9uDQpjb2xsYXBzZSBhbmQgdGhlIGNs YXNzaWNhbCBvbmUgY2F1c2VzIHVubmVjZXNzYXJ5IHJldHJhbnNtaXNzaW9ucyBieSBhDQp0aW1l ciBtaXNtYXRjaC4gTWF5YmUgeW91IGNhbiBlbGFib3JhdGUgYSBiaXQgbW9yZSBoZXJlLg0KDQpJ dCBub3cgcmVhZHMgYXM6DQoNCiAgIEJlY2F1c2UgdGhpcyBhZHZhbnRhZ2UgYXBwbGllcyBvbmx5 IHRvIEVDTi1tYXJrZWQgcGFja2V0cyBhbmQgbm90IHRvDQogICBwYWNrZXQgbG9zcyBpbmRpY2F0 aW9ucywgaW4gdGhlIHdvcnN0LWNhc2UgKGUuZy4sIGFuIEFCRS1jb21wbGlhbnQNCiAgIFRDUCBz ZW5kZXIgdXNpbmcgYmV0YV97ZWNufSA9IDEuMCkgdGhlIEVDTi1jYXBhYmxlIGJvdHRsZW5lY2sg d2lsbA0KICAgc3RpbGwgZmFsbCBiYWNrIHRvIGRyb3BwaW5nIHBhY2tldHMsIGFuZCB0aGUgcmVz dWx0IGlzIG5vIGRpZmZlcmVudA0KICAgdGhhbiBpZiB0aGUgVENQIHNlbmRlciB3YXMgdXNpbmcg dHJhZGl0aW9uYWwgbG9zcy1iYXNlZCBjb25nZXN0aW9uDQogICBjb250cm9sLg0KDQpTZWN0aW9u IDguDQo9PT09PT09PT09DQoNCmh0dHA6Ly9oZWltLmlmaS51aW8ubm8vbmFlZW1rL3Jlc2VhcmNo L0FCRS8gVGhpcyBjb2RlIHdhcyB1c2VkIHRvDQoNCkZ1bGwgc3RvcCBtaXNzaW5nIGhlcmUgKHBy ZXN1bWFibHkgdG8gYXZvaWQgcHJvYmxlbXMgd2l0aCB0aGUgVVJMKS4NCg0KRml4ZWQuDQoNCk1h eWJlIHB1dCB0aGUgKG1vc3QgaW1wb3J0YW50KSBjaGFuZ2VzIGludG8gYW4gYXBwZW5kaXg/IEkn bSBub3Qgc3VyZQ0KaG93IGxvbmcgdGhpcyBVUkwgd2lsbCBiZSB2YWxpZCBhZnRlciB0aGUgUkZD IGhhcyBiZWVuIHB1Ymxpc2hlZC4NCg0KV2UgYXJlIG5vdCB5ZXQgYXQgV0dMQywgYnV0IHdpbGwg Zml4IHRoaXMgaW4gbGF0ZXIgcmV2aXNpb25zLg0KDQoNClJlZ2FyZHMsDQpSb2xhbmQNCg0KDQpD aGVlcnMsDQpOYWVlbQ0K --_000_7447FBC96B814A97AB45C57555B30559ifiuiono_ Content-Type: text/html; charset="utf-8" Content-ID: <6E7749CDAD14AB41BA85F6097223F189@mail.uio.no> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGkgUm9sYW5kJm5ic3A7DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGFua3MgYSBs b3QgZm9yIHRoZSBjb21tZW50cy4gQWxtb3N0IGFsbCBvZiB5b3VyIGNvbW1lbnRzIGFyZSBub3cg YWRkcmVzc2VkIGluIC0wMyAoc3VibWl0dGVkKSBhbmQgLTA0ICh1bi1zdWJtaXR0ZWQgYnV0IGF0 dGFjaGVkIHRvIHRoZSBlbWFpbCBJIHNlbnQgaW4gcmVzcG9uc2UgdG8gTC4gU3Rld2FydOKAmXMg Y29tbWVudHMpLiBIb3dldmVyLCBoZXJlIGFyZSBwZXItaXRlbSByZXNwb25zZXMuIFBsZWFzZSBz ZWUgaW5saW5lOg0KICZuYnNwOzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGRpdj4NCjxibG9ja3F1b3RlIHR5 cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiBPY3QgMjMsIDIwMTcsIGF0IDY6 MTIgUE0sIEJsZXNzLCBSb2xhbmQgKFRNKSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJvbGFuZC5ibGVz c0BraXQuZWR1IiBjbGFzcz0iIj5yb2xhbmQuYmxlc3NAa2l0LmVkdTwvYT4mZ3Q7IHdyb3RlOjwv ZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSIiPkhpLDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCmFzIHBy b21pc2VkIGF0IHRoZSBsYXN0IElFVEYgbWVldGluZywgaGVyZSBpcyBteSAobGVuZ3RoeSk8YnIg Y2xhc3M9IiI+DQpyZXZpZXcgb2YgZHJhZnQtaWV0Zi10Y3BtLWFsdGVybmF0aXZlYmFja29mZi1l Y24tMDIuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KSW4gc3VtbWFyeTo8YnIgY2xhc3M9 IiI+DQoxKSBtb3JlIHByZWNpc2UgdGVybWlub2xvZ3ksIGUuZy4sIGJldHRlciBkaXN0aW5jdGlv biBiZXR3ZWVuIGJ1ZmZlciBhbmQ8YnIgY2xhc3M9IiI+DQpxdWV1ZSw8YnIgY2xhc3M9IiI+DQom bmJzcDsmbmJzcDthbHNvIHVzZSBzYW1lIHRlcm1pbm9sb2d5IGFzIGluIFJGQyA1NjgxIChsYXJn ZWx5IGRvbmUgaW4gLTAyIGFscmVhZHkpLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjIp IHN0YXRlIG1vcmUgY2xlYXJseSB0aGF0IHRoZSBjb25jcmV0ZSByZWNvbW1lbmRhdGlvbnMgYXJl IHRhaWxvcmVkIHRvPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7c3BlY2lmaWMgY29uZ2VzdGlv biBjb250cm9scyBhbmQgYmUgbW9yZSBvcGVuIHRvIG90aGVyIGNvbmdlc3Rpb248YnIgY2xhc3M9 IiI+DQpjb250cm9sIHZhcmlhbnRzPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KMykgdGhl IGFic3RyYWN0IGlzIHRvbyBsb25nPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KYW5kIHNl Y3Rpb24gNCBjb250YWlucyBhIGJpdCByZWR1bmRhbmN5IHcuci50LiBzZWN0aW9ucyAyIGFuZCAz LjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5JIGhhdmUgcHJvdmlkZWQgYW5zd2VycyB0byB0aGUgYWJv dmUgaXRlbXMgaW4gdGhlIOKAnGluIG1vcmUgZGV0YWls4oCdIHBhcnQgYmVsb3c6Jm5ic3A7PC9k aXY+DQo8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxk aXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCmluIG1vcmUgZGV0YWls PGJyIGNsYXNzPSIiPg0KMSkgSSB3b3VsZCBwcmVmZXIgdG8gdXNlIF9idWZmZXJfIGZvciB0aGUg bWF4aW11bSBtZW1vcnkgc3BhY2UgdGhhdCBpczxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwO2Fs bG9jYXRlZCBmb3IgcG90ZW50aWFsbHkgZW5xdWV1ZWQgcGFja2V0cyBhbmQgX3F1ZXVlXyBmb3Ig dGhlPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7YW1vdW50IG9mIGFjdHVhbGx5IHF1ZXVlZCBw YWNrZXRzLCBpLmUuLCBjdXJyZW50IGJ1ZmZlcjxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwO29j Y3VwYW5jeS4gVGhlcmVmb3JlLCBJTUhPIGl0IG1ha2VzIHNlbnNlIHRvIHNwZWFrIG9mIHNoYWxs b3c8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDtidWZmZXJzIGFuZCBzaG9ydCBxdWV1ZXMsIGJ1 dCBub3Qgb2YgJnF1b3Q7c2hhbGxvdyBxdWV1ZXMmcXVvdDsuIEluPGJyIGNsYXNzPSIiPg0KJm5i c3A7Jm5ic3A7cGFydGljdWxhciwgYW4gQVFNIHRyaWVzIHRvIGtlZXAgdGhlIChsb25nZXItdGVy bSkgcXVldWUgc2hvcnQgaW4gYTxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwO2J1ZmZlciB3aGls ZSBhY2NlcHRpbmcgdHJhbnNpZW50IGJ1cnN0cyAtLSB0aGUgYmVoYXZpb3IgdGhlcmVmb3JlPGJy IGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7YWxzbyBkaWZmZXJzIGZyb20gYSAmcXVvdDtzaGFsbG93 IGJ1ZmZlcuKAnS48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0K PGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IGNsYXNzPSIiPkFncmVlZCBp biBnZW5lcmFsOyBjaGFuZ2VkIGFsbCBpbnN0YW5jZXMgb2Yg4oCcc2hhbGxvdyBidWZmZXLigJ0g dG8g4oCcc2hvcnQgcXVldWXigJ0gYm90aCBpbiB0aGUgYWJzdHJhY3QgYW5kIHRoZSBtYWluIGJv ZHksJm5ic3A7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPmV4Y2VwdCBmb3Ig4oCcc2hhbGxvdyBBUU0g bWFya2luZyB0aHJlc2hvbGTigJ0gd2hpY2ggcmVtYWlucyB0aGUgc2FtZSBhcyBpdCByZWZlcnMg dG8gdGhlIOKAnHNoYWxsb3cgdGhyZXNob2xk4oCdLiZuYnNwOzwvZGl2Pg0KPC9kaXY+DQo8YnIg Y2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjIpIHRoZSBtYWluIHBvaW50IG9mIHRo aXMgZHJhZnQgaXM6IGl0IG1ha2VzIHNlbnNlIHRvIGJlaGF2ZSBkaWZmZXJlbnQgdG88YnIgY2xh c3M9IiI+DQombmJzcDsmbmJzcDtDRS1FQ04gbWFya2VkIHBhY2tldHMgdGhhbiB0byBwYWNrZXQg bG9zcy4gT25lIGJlbmVmaXQgaXMgdG88YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDthY2hpZXZl IGhpZ2hlciB1dGlsaXphdGlvbiBieSBhZGp1c3RpbmcgdGhlIGJhY2tvZmYgdG8gYmUgbGVzcy4g VGhlPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7cmVjb21tZW5kYXRpb24gZm9yIHR3byBiYWNr b2ZmIGZhY3RvcnMgaXMgc3BlY2lmaWMgZm9yIHR3bzxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNw O2Nvbmdlc3Rpb24gY29udHJvbHMsIENVQklDIGFuZCBOZXcgUmVuby4gRm9yIG90aGVyIGNvbmdl c3Rpb248YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDtjb250cm9scyBpdCBtYXkgYWxzbyBtYWtl IHNlbnNlIHRvIGFkYXB0IGRpZmZlcmVudGx5LCBidXQgdGhlIGRyYWZ0PGJyIGNsYXNzPSIiPg0K Jm5ic3A7Jm5ic3A7ZG9lc24ndCBwcm92aWRlIGFueSByZWNvbW1lbmRhdGlvbnMgZm9yIHRoZW0u IEluIGdlbmVyYWwsIHRoZXJlIGNhbjxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwO2JlIGxvdHMg b2YgZGlmZmVyZW50IGNvbmdlc3Rpb24gY29udHJvbHMgdGhhdCBkbyBub3QgbmVlZCB0aGlzIGtp bmQ8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDtvZiBtb2RpZmljYXRpb24gdG8ga2VlcCB0aGUg dXRpbGl6YXRpb24gaGlnaC48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1 b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IGNsYXNzPSIiPlRo aXMgc2VlbXMgdG8gaGF2ZSBiZWVuIGFscmVhZHkgY2FwdHVyZWQgaW4gU2VjdGlvbiA0LjMgKGJl bG93KTombmJzcDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48aSBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7YmV0 YV97ZWNufSBkZXBlbmRzIG9uIGhvdyB0aGUgcmVzcG9uc2Ugb2YgYSBUQ1AgY29ubmVjdGlvbiB0 byBzaGFsbG93PC9pPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48aSBjbGFzcz0iIj4mbmJzcDsgJm5i c3A7QVFNIG1hcmtpbmcgdGhyZXNob2xkcyBpcyBvcHRpbWlzZWQuIGJldGFfe2xvc3N9IHJlZmxl Y3RzIHRoZTwvaT48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGkgY2xhc3M9IiI+Jm5ic3A7ICZuYnNw O3ByZWZlcnJlZCByZXNwb25zZSBvZiBlYWNoIGNvbmdlc3Rpb24gY29udHJvbCBhbGdvcml0aG0g d2hlbiBmYWNlZDwvaT48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGkgY2xhc3M9IiI+Jm5ic3A7ICZu YnNwO3dpdGggZXhoYXVzdGlvbiBvZiBidWZmZXJzIChvZiB1bmtub3duIGRlcHRoKSBzaWduYWxs ZWQgYnkgcGFja2V0PC9pPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48aSBjbGFzcz0iIj4mbmJzcDsg Jm5ic3A7bG9zcy4gJm5ic3A7Q29uc2VxdWVudGx5LCBmb3IgYW55IGdpdmVuIFRDUCBjb25nZXN0 aW9uIGNvbnRyb2wgYWxnb3JpdGhtPC9pPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48aSBjbGFzcz0i Ij4mbmJzcDsgJm5ic3A7dGhlIGNob2ljZSBvZiBiZXRhX3tlY259IGlzIGxpa2VseSB0byBiZSBh bGdvcml0aG0tc3BlY2lmaWMsIHJhdGhlcjwvaT48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGkgY2xh c3M9IiI+Jm5ic3A7ICZuYnNwO3RoYW4gYSBjb25zdGFudCBtdWx0aXBsZSBvZiB0aGUgYWxnb3Jp dGhtJ3MgZXhpc3RpbmcgYmV0YV97bG9zc30uPC9pPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0ibWFyZ2luOiAwcHg7IGZvbnQtc2l6ZTogMTFweDsg bGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6IE1lbmxvOyBiYWNrZ3JvdW5kLWNvbG9y OiByZ2IoMjU1LCAyNTUsIDI1NSk7Ij4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiIHN0eWxlPSJtYXJnaW46IDBweDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgYmFj a2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyI+DQo8ZGl2IHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IiBjbGFzcz0iIj5TbyBJ4oCZbSBub3Qg c3VyZSBpZiB3ZSBuZWVkIHRvIGFkZCBhbnl0aGluZyBtb3JlIGJleW9uZCB3aGF04oCZcyBkaXNj dXNzZWQgaW4gaGVyZSB3aXRob3V0IHJpc2tpbmcgYmVpbmcgcmVkdW5kYW50LiBJZiB5b3UgdGhp bmsgb3RoZXJ3aXNlLCBwbGVhc2UmbmJzcDs8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsiIGNsYXNzPSIiPnN1Z2dlc3QgdGV4dCAodGhh dCBkaWZmZXJzIGZyb20gYWJvdmUpIGFuZCBhIHN1aXRhYmxlIChzdWItKXNlY3Rpb24uICZuYnNw OzwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAx MnB4OyIgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IiBjbGFzcz0iIj5JIGhhdmUgYWxzbyBh ZGRlZCB0aGlzIHRleHQgdG8gU2VjdGlvbiA0LjM6Jm5ic3A7PC9kaXY+DQo8ZGl2IHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGkgY2xhc3M9IiI+VGhlIHJlY29tbWVuZGVk IGJldGFfe2Vjbn0gdmFsdWUgaW4gdGhpcyBkb2N1bWVudCBpcyBvbmx5IGFwcGxpY2FibGUmbmJz cDtmb3IgU3RhbmRhcmQgVENQIGNvbmdlc3Rpb24gY29udHJvbC48L2k+PC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQozKSBUaGUgYWJz dHJhY3Qgc2hvdWxkIGJlIGNvcnJlY3RlZCBhY2NvcmRpbmcgdG8gMSBhbmQgc2hvcnRlbmVkLDxi ciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwO3N1Y2ggYXM6IFJlY2VudCBBY3RpdmUgUXVldWUgTWFu YWdlbWVudCAoQVFNKSBtZWNoYW5pc21zIGFsbG93IGZvcjxiciBjbGFzcz0iIj4NCiZuYnNwOyZu YnNwO2J1cnN0IHRvbGVyYW5jZSB3aGlsZSBlbmZvcmNpbmcgc2hvcnQgcXVldWVzIHRvIG1pbmlt aXNlIHRoZSB0aW1lPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7dGhhdCBwYWNrZXRzIHNwZW5k IGVucXVldWVkIGF0IGEgYm90dGxlbmVjay4gVGhpcyBjYW4gY2F1c2U8YnIgY2xhc3M9IiI+DQom bmJzcDsmbmJzcDtub3RpY2VhYmxlIHBlcmZvcm1hbmNlIGRlZ3JhZGF0aW9uIGZvciBUQ1AgY29u bmVjdGlvbnMgdHJhdmVyc2luZzxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwO3N1Y2ggYSBib3R0 bGVuZWNrLCBlc3BlY2lhbGx5IGlmIHRoZXkgYXJlIG9ubHkgYSBmZXcgb3IgdGhlaXI8YnIgY2xh c3M9IiI+DQombmJzcDsmbmJzcDtiYW5kd2lkdGgtZGVsYXktcHJvZHVjdCBpcyBsYXJnZS4gJm5i c3A7QW4gRXhwbGljaXQgQ29uZ2VzdGlvbjxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwO05vdGlm aWNhdGlvbiAoRUNOKSBzaWduYWwgaW5kaWNhdGVzIHRoYXQgYW4gQVFNIG1lY2hhbmlzbSBpcyB1 c2VkPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7YXQgdGhlIGJvdHRsZW5lY2ssIGFuZCB0aGVy ZWZvcmUgdGhlIGJvdHRsZW5lY2sgbmV0d29yayBxdWV1ZSBpczxiciBjbGFzcz0iIj4NCiZuYnNw OyZuYnNwO2xpa2VseSB0byBiZSBzaG9ydC4gJm5ic3A7VGhpcyBkb2N1bWVudCB0aGVyZWZvcmUg cHJvcG9zZXMgYW4gdXBkYXRlIHRvPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7dGhlIFRDUCBz ZW5kZXItc2lkZSBFQ04gcmVhY3Rpb24gaW4gY29uZ2VzdGlvbiBhdm9pZGFuY2UgdG8gcmVkdWNl PGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7dGhlIGNvbmdlc3Rpb24gd2luZG93IGJ5IGEgc21h bGxlciBhbW91bnQgdGhhbiB0aGUgY29uZ2VzdGlvbjxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNw O2NvbnRyb2wgYWxnb3JpdGhtJ3MgcmVhY3Rpb24gdG8gbG9zcy48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXY+U2ltcGx5IHVzZWQgdGhlIGFib3ZlIHRleHQgc3VnZ2VzdGlvbiwgd2hpbGUga2VlcGluZyB0 aGUgYWJicmV2aWF0aW9uIGRlZmluaXRpb24gb2YgY3duZC4mbmJzcDs8L2Rpdj4NCjxiciBjbGFz cz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4N CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KLS0tLS0tLS0tLS0tLS0tLS0tPGJyIGNsYXNz PSIiPg0KV2FsayB0aHJvdWdoOjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClNlY3Rpb24g Mi48YnIgY2xhc3M9IiI+DQo9PT09PT09PT09PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0K PGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+Jm5ic3A7UmVzZWFyY2ggaGFzIGRlbW9u c3RyYXRlZCB0aGUgYmVuZWZpdHMgb2YgcmVkdWNpbmcgbmV0d29yayBkZWxheXMgZHVlPGJyIGNs YXNzPSIiPg0KJm5ic3A7dG8gZXhjZXNzaXZlIGJ1ZmZlcmluZyBbQlVGRkVSQkxPQVRdOyB0aGlz IGhhcyBsZWQgdG8gdGhlIGNyZWF0aW9uIG9mPGJyIGNsYXNzPSIiPg0KJm5ic3A7bmV3IEFRTSBt ZWNoYW5pc21zIGxpa2UgUElFIFtSRkM4MDMzXSBhbmQgQ29EZWwgW0NPREVMMjAxMl08YnIgY2xh c3M9IiI+DQombmJzcDtbSS1ELkNvRGVsXSwgd2hpY2ggYXZvaWQgY2F1c2luZyB0aGUgYmxvYXRl ZCBxdWV1ZXMgdGhhdCBhcmUgY29tbW9uPGJyIGNsYXNzPSIiPg0KJm5ic3A7d2l0aCBhIHNpbXBs ZSB0YWlsLWRyb3AgYmVoYXZpb3VyIChhbHNvIGtub3duIGFzIGEgRmlyc3QtSW4gRmlyc3QtPGJy IGNsYXNzPSIiPg0KJm5ic3A7T3V0LCBGSUZPLCBxdWV1ZSkuPGJyIGNsYXNzPSIiPg0KPC9ibG9j a3F1b3RlPg0KPGJyIGNsYXNzPSIiPg0KVGhlIGZpcnN0IHNlbnRlbmNlIGlzIGNvbmZ1c2luZ2x5 IHB1dDogJnF1b3Q7cmVkdWNpbmcgbmV0d29yayBkZWxheXMgZHVlIHRvPGJyIGNsYXNzPSIiPg0K ZXhjZXNzaXZlIGJ1ZmZlcmluZyZxdW90OywgYmV0dGVyIHJlcGhyYXNlLiA8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+YmVsb3c8 L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+TW9yZW92ZXIsIEknZCBsaWtlIHRvIHNlZSBh PGJyIGNsYXNzPSIiPg0KbW9yZSBwcmVjaXNlIGRlc2NyaXB0aW9uIG9mIHRoZSBwcm9ibGVtIGhl cmU6IFRoZSBtYWluIHByb2JsZW0gaXMgaGVyZTxiciBjbGFzcz0iIj4NCnRoYXQgZXhpc3Rpbmcg bG9zcy1iYXNlZCBjb25nZXN0aW9uIGNvbnRyb2xzIGNvbXBsZXRlIGZpbGwgYXZhaWxhYmxlPGJy IGNsYXNzPSIiPg0KYm90dGxlbmVjayBidWZmZXIgY2FwYWNpdHkuIFNvIGl0J3MgcHJpbWFyaWx5 IF9ub3RfIHRoZSB0YWlsLWRyb3A8YnIgY2xhc3M9IiI+DQpiZWhhdmlvciBjYXVzaW5nIGJsb2F0 ZWQgcXVldWVzLCBidXQgdGhlIGNvbmdlc3Rpb24gY29udHJvbC4gPC9kaXY+DQo8L2Rpdj4NCjwv YmxvY2txdW90ZT4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PkNoYW5nZWQgdG86 ICZuYnNwOzxpIGNsYXNzPSIiPlJlc2VhcmNoIGhhcyBkZW1vbnN0cmF0ZWQgdGhlIGJlbmVmaXRz IG9mIHJlZHVjaW5nIG5ldHdvcmsgZGVsYXlzPC9pPjwvZGl2Pg0KPGRpdj48aSBjbGFzcz0iIj4m bmJzcDsgJm5ic3A7dGhhdCBhcmUgY2F1c2VkIGJ5IGludGVyYWN0aW9uIG9mIGxvc3MtYmFzZWQg VENQIGNvbmdlc3Rpb24gY29udHJvbDwvaT48L2Rpdj4NCjxkaXY+PGkgY2xhc3M9IiI+Jm5ic3A7 ICZuYnNwO2FuZCBleGNlc3NpdmUgYnVmZmVyaW5nIFtCVUZGRVJCTE9BVF0uPC9pPjwvZGl2Pg0K PGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5 cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+VGhlcmU8 YnIgY2xhc3M9IiI+DQpleGlzdCB0d28gYXBwcm9hY2hlcyB0byByZWR1Y2UgdGhlIHF1ZXVlczog dXNlIGRpZmZlcmVudCBhIGRpZmZlcmVudDxiciBjbGFzcz0iIj4NCmNvbmdlc3Rpb24gY29udHJv bCAobW9kaWZ5IGVuZCBwb2ludHMpIG9yIGVuZm9yY2Ugc2hvcnQgcXVldWVzIGluPGJyIGNsYXNz PSIiPg0Kcm91dGVycyBieSB1c2luZyBBUU1zIChtb2RpZnkgaW50ZXJtZWRpYXRlIHN5c3RlbXMp LiBTbyBhIGRlbGF5LWJhc2VkPGJyIGNsYXNzPSIiPg0KY29uZ2VzdGlvbiBjb250cm9sIGNhbiB1 c2UgYSB0YWlsLWRyb3AgRklGTyBxdWV1ZSBhbmQgc3RpbGwgYXZvaWQ8YnIgY2xhc3M9IiI+DQpl eGNlc3NpdmUgcXVldWluZyBkZWxheXMsIGkuZS4sIG5vdCBldmVuIHJlcXVpcmluZyBhbiBBUU0g dG8gY29udHJvbDxiciBjbGFzcz0iIj4NCnRoZSBxdWV1ZS48YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2IGNsYXNzPSIiPldlIChhdXRob3JzKSB0aGluayB0aGF0IGl04oCZcyBiZXN0IHRvIGxl YXZlIHRoZSBkaXNjdXNzaW9uIG9uIHRoZSBkZWxheS1iYXNlZCBDQ3Mgb3V0c2lkZSBvZiB0aGlz IGRvY3VtZW50LiBEZXNwaXRlIHRoZSBmYWN0IHRoYXQgd2UgaW5pdGlhbGx5IHRhbGtlZCBhYm91 dCB0aGlzIGluIC0wMywgd2UgaGF2ZSBub3cgcmVtb3ZlZCB0aGUgdGV4dCB0aGF0IG1lbnRpb25z IHRoZW0gKGluIC0wNCBkcmFmdCkuJm5ic3A7PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6 IHJnYigyNTUsIDI1NSwgMjU1KTsiIGNsYXNzPSIiPldlDQogd291bGQgbGlrZSB0byBhdm9pZCBk ZXRvdXJpbmcgaW50byBzcGVjaWZpYyBtZW50aW9uIG9mICZxdW90O2kuZSBkZWxheS1iYXNlZCZx dW90OyBhcHByb2FjaGVzIGFuZCB0aGUgZGlzbWlzc2l2ZSAmcXVvdDtUaGUuLi4gc3VmZmVycyBm cm9tLi4uIG91dCBvZiBzY29wZS4uLiZxdW90Oy4gVGhlcmUncyBhIHdpZGUgbGl0ZXJhdHVyZSBv biB0ZWNobmlxdWVzIHRoYXQgYXJlIGJhc2VkIG9uIGRlbGF5LiBIb3dldmVyLCB0aGUgbWVudGlv biBvZiAmcXVvdDtkZWxheSZxdW90OyBiYXNlZCBDQyBkaXN0cmFjdHMNCiBmcm9tIG91ciBJLUQu IERlbGF5LWJhc2VkIGFsZ29zIGFyZW4ndCBvdXQgb2Ygc2NvcGUgZm9yIG91ciBkb2MgZHVlIHRv IGNvZXhpc3RlbmN5IHByb2JsZW1zIChhcyB3ZSBpbml0aWFsbHkgd3JvdGUgaW4gLTAzKSBidXQg dGhleSBhcmUgb3V0IG9mIHNjb3BlIGJlY2F1c2UgdGhleSdyZSBjb21wbGV0ZWx5IGlycmVsZXZh bnQgdG8gb3VyIHByb3Bvc2FsIGJ5IGRlZmluaXRpb24uPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8 YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNp dGUiIGNsYXNzPSIiPlRoZXNlIEFRTSBtZWNoYW5pc21zIGluc3RhbnRpYXRlIHNob3J0IHF1ZXVl cyB0aGF0IGFyZSBkZXNpZ25lZCB0bzxiciBjbGFzcz0iIj4NCnRvbGVyYXRlIHBhY2tldCBidXJz dHMuPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiPg0KTW9yZSBwcmVj aXNlbHk6PGJyIGNsYXNzPSIiPg0KVGhlc2UgQVFNIG1lY2hhbmlzbXMgYWltIHRvIGtlZXAgYSBz dXN0YWluZWQgcXVldWUgc2hvcnQgd2hpbGU8YnIgY2xhc3M9IiI+DQp0b2xlcmF0aW5nIHRyYW5z aWVudCAoc2hvcnQtdGVybSkgcGFja2V0IGJ1cnN0cy48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+Rml4 ZWQuPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1 b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPkhvd2V2ZXIsIGNvbmdlc3Rpb24gY29udHJvbCBtZWNo YW5pc21zPGJyIGNsYXNzPSIiPg0KY2Fubm90IGFsd2F5cyB1dGlsaXNlIGEgYm90dGxlbmVjayBs aW5rIHdlbGwgd2hlcmUgdGhlcmUgYXJlIHNob3J0PGJyIGNsYXNzPSIiPg0KcXVldWVzLjxiciBj bGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBjbGFzcz0iIj4NCj0mZ3Q7IEhvd2V2ZXIsIGN1 cnJlbnRseSB1c2VkIGxvc3MtYmFzZWQgY29uZ2VzdGlvbiBjb250cm9sIG1lY2hhbmlzbXM8YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXY+Rml4ZWQuPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90 ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPnRvIGNvbXBlbnNh dGUgZm9yIFRDUCBoYWx2aW5nIHRoZSAmcXVvdDtjd25kJnF1b3Q7IGFuZCAmcXVvdDtzc3RocmVz aCZxdW90OyB2YXJpYWJsZXMgaW48YnIgY2xhc3M9IiI+DQpyZXNwb25zZSB0byBhIGxvc3QgcGFj a2V0IFtSRkM1NjgxXS48YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9IiI+ DQpzZWUgMSksIGN3bmQgaXMgc2V0IHRvIEZsaWdodFNpemUvMiwgbm90IGN3bmQvMiAoUkZDNTY4 MSBpcyBxdWl0ZTxiciBjbGFzcz0iIj4NCnNwZWNpZmljIGFib3V0IHRoaXMpLjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdj5UaGlzIGxhbmd1YWdlICh1c2luZyDigJxoYWx2aW5n4oCdKSBpcyBjb21tb24g dGhyb3VnaG91dCBSRkMzMTY4IChwZXJoYXBzIHdyb25nbHkpLiBUaGVyZWZvcmUgY2hhbmdlZCDi gJxoYWx2aW5n4oCdIHRvIOKAnHJlZHVjaW5n4oCdLiBTaW5jZSBpdCBhbHJlYWR5IGNpdGVzIFJG QzU2ODEsIGl04oCZcyBjbGVhciBob3cgaXQgZG9lcyBpdC4gc2F5aW5nIGhhbHZpbmcgdGhlIOKA nEZsaWdodFNpemXigJ0gd291bGQgaGF2ZSBiZWVuIHdyb25nIGFzIFRDUCBkb2VzbuKAmXQgY2hh bmdlDQogdGhlIGZsaWdodCBzaXplIHZhcmlhYmxlIChpdOKAmXMgbWVhc3VyZWQvY2FsY3VsYXRl ZCksIHNvIHRoaXMgc2VlbXMgdG8gYmUgYW4gZWFzeSB3YXkgb3V0LiZuYnNwOzxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+Rml4ZWQgYW5kIHJl YWRzIGFzOiZuYnNwOzwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2PjxpIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtGb3IgZXhhbXBsZSwgYSBUQ1Agc2VuZGVyIG11 c3QgYmUgYWJsZSB0byBzdG9yZSBhdCBsZWFzdCBhbjwvaT48L2Rpdj4NCjxkaXY+PGkgY2xhc3M9 IiI+Jm5ic3A7ICZuYnNwO2VuZC10by1lbmQgYmFuZHdpZHRoLWRlbGF5IHByb2R1Y3QgKEJEUCkg d29ydGggb2YgZGF0YSBhdCB0aGU8L2k+PC9kaXY+DQo8ZGl2PjxpIGNsYXNzPSIiPiZuYnNwOyAm bmJzcDtib3R0bGVuZWNrIGJ1ZmZlciBpZiBpdCBpcyB0byBtYWludGFpbiBmdWxsIHBhdGggdXRp bGlzYXRpb24gaW4gdGhlPC9pPjwvZGl2Pg0KPGRpdj48aSBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7 ZmFjZSBvZiBsb3NzLWluZHVjZWQgcmVkdWN0aW9uIG9mIGN3bmQgW1JGQzU2ODFdLCB3aGljaCBl ZmZlY3RpdmVseTwvaT48L2Rpdj4NCjxkaXY+PGkgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO2RvdWJs ZXMgdGhlIGFtb3VudCBvZiBkYXRhIHRoYXQgY2FuIGJlIGluIGZsaWdodCwgdGhlIG1heGltdW0g cm91bmQtPC9pPjwvZGl2Pg0KPGRpdj48aSBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7dHJpcCB0aW1l IChSVFQpIGV4cGVyaWVuY2UsIGFuZCB0aGUgcGF0aCdzIGVmZmVjdGl2ZSBSVFQgdXNpbmcgdGhl PC9pPjwvZGl2Pg0KPGRpdj48aSBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7bmV0d29yayBwYXRoLjwv aT48L2Rpdj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIg Y2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5UaGlzIHJlcXVpcmVzIHRoZSBib3R0bGVu ZWNrPGJyIGNsYXNzPSIiPg0KcXVldWUgdG8gYmUgYWJsZSB0byBzdG9yZSBhdCBsZWFzdCBhbiBl bmQtdG8tZW5kIGJhbmR3aWR0aC1kZWxheTxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxi ciBjbGFzcz0iIj4NCnF1ZXVlID0mZ3Q7IGJ1ZmZlcjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5Eb25l ITwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90 ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5wcm9kdWN0IChCRFApIG9mIGRhdGEsIHdoaWNoIGVmZmVj dGl2ZWx5IGRvdWJsZXMgYm90aCB0aGUgYW1vdW50IG9mPGJyIGNsYXNzPSIiPg0KZGF0YSB0aGF0 IGNhbiBiZSBpbiBmbGlnaHQgYW5kIHRoZSByb3VuZC10cmlwIHRpbWUgKFJUVCkgZXhwZXJpZW5j ZTxiciBjbGFzcz0iIj4NCnVzaW5nIHRoZSBuZXR3b3JrIHBhdGguPGJyIGNsYXNzPSIiPg0KPC9i bG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiPg0KaXQgZWZmZWN0aXZlbHkgZG91YmxlcyB0aGUgUlRU IG9ubHkgaWYgdGhlIGJ1ZmZlciBpcyBjb21wbGV0ZWx5PGJyIGNsYXNzPSIiPg0KZmlsbGVkLCB1 c3VhbGx5IHRoZSBxdWV1ZSBpcyB2YXJ5aW5nIG92ZXIgdGltZS48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXY+QWRkZWQg4oCcbWF4aW11beKAnSB0byB0aGUg4oCccm91bmQtdHJpcCB0aW1lIChSVFQp4oCd LjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90 ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5BQkUgaW1wcm92ZXMgdGhlPGJyIGNsYXNzPSIiPg0KcGVy Zm9ybWFuY2Ugd2hlbiByb3V0ZXJzIHVzZSBzaGFsbG93IGJ1ZmZlcmVkIEFRTSBtZWNoYW5pc21z LjxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBjbGFzcz0iIj4NClNlZSAxKSwgZS5n LiwgJnF1b3Q7d2hlbiByb3V0ZXJzIHVzZSBBUU0gY29udHJvbGxlZCBidWZmZXJzIHRoYXQgYWxs b3c8YnIgY2xhc3M9IiI+DQpmb3Igc2hvcnQgcXVldWVzIG9ubHku4oCdPC9kaXY+DQo8L2Rpdj4N CjwvYmxvY2txdW90ZT4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PkZpeGVkLjwv ZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQpTZWN0aW9uIDMuPGJy IGNsYXNzPSIiPg0KPT09PT09PT09PTxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNp dGUiIGNsYXNzPSIiPlRoaXMgc3BlY2lmaWNhdGlvbiBkZXNjcmliZXMgYW4gdXBkYXRlIHRvIHRo ZSBjb25nZXN0aW9uIGNvbnRyb2w8YnIgY2xhc3M9IiI+DQphbGdvcml0aG0gb2YgYW4gRUNOLWNh cGFibGUgVENQIHRyYW5zcG9ydCBwcm90b2NvbC48YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+ DQo8YnIgY2xhc3M9IiI+DQpTZWUgMi4pIFRoaXMgc3RhdGVtZW50IGlzIHZlcnkgZ2VuZXJpYywg d2hlcmVhcyB0aGUgcmVjb21tZW5kYXRpb24gaXM8YnIgY2xhc3M9IiI+DQpxdWl0ZSBzcGVjaWZp YyB0byBDVUJJQyBhbmQgTmV3UmVuby4gSXQgbWF5IGJlIHVzZWZ1bCBmb3Igb3RoZXIgY29uZ2Vz dGlvbjxiciBjbGFzcz0iIj4NCmNvbnRyb2xzIGFzIHdlbGwgaWYgdGhleSByZXF1aXJlIGFsc28g YSBtb3JlIG1vZGVyYXRlIHJlc3BvbnNlL2JhY2tvZmY8YnIgY2xhc3M9IiI+DQppbiBvcmRlciB0 byBrZWVwIHRoZSB1dGlsaXphdGlvbiBoaWdoLiBUaGVpciBiYWNrb2ZmIG1vZGlmaWNhdGlvbiBt YXk8YnIgY2xhc3M9IiI+DQpob3dldmVyLCBiZSBkaWZmZXJlbnQuIE1vcmVvdmVyLCB0aGVyZSBl eGlzdCBvdGhlciBjb25nZXN0aW9uIGNvbnRyb2xzPGJyIGNsYXNzPSIiPg0KdGhhdCBkb24ndCBz dWZmZXIgZnJvbSB1bmRlcnV0aWxpemF0aW9uIGlmIHRoZXkgcmVhY3QgdG8gYSBjb25nZXN0aW9u PGJyIGNsYXNzPSIiPg0Kc2lnbmFsLjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Js b2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5BY3R1YWxseSB0aGUg cmVjb21tZW5kYXRpb24gaXMgcHVyZWx5IGZvciBOZXdSZW5vLCBhbHNvIHN0YW5kaW5nIGFzIElF VEYtc3RhbmRhcmQg4oCcVENQIGNvbmdlc3Rpb24gY29udHJvbOKAnS4gV2UgbWVudGlvbiB0aGF0 IHdlIGhhdmUgdGVzdGVkIGZvciBDVUJJQyBhcyB3ZWxsIGFzIHByb3ZpZGUgYSB2YWx1ZSB3aGVy ZSBDVUJJQyB3b3JrcyB3ZWxsIGF0LCBidXQgdGhlIFJFQ09NTUVOREFUSU9OIGdpdmVuIGluIHRo ZSBJLUQgKGkuZS4gYmV0YV97ZWNufT0wLjgpDQogb25seSBjb25jZXJucyB0aGUgc3RhbmRhcmQg VENQLiZuYnNwOzwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIg Y2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5JdCBSRUNPTU1FTkRTIHRoYXQgYSBUQ1A8 YnIgY2xhc3M9IiI+DQpzZW5kZXIgbXVsdGlwbGllcyB0aGUgY3duZCBieSAwLjggYW5kIHJlZHVj ZXMgdGhlIHNsb3cgc3RhcnQ8YnIgY2xhc3M9IiI+DQp0aHJlc2hvbGQgKHNzdGhyZXNoKSBpbiBj b25nZXN0aW9uIGF2b2lkYW5jZSBmb2xsb3dpbmcgcmVjZXB0aW9uIG9mIGE8YnIgY2xhc3M9IiI+ DQpUQ1Agc2VnbWVudCB0aGF0IHNldHMgdGhlIEVDTi1FY2hvIGZsYWcgKGRlZmluZWQgaW4gW1JG QzMxNjhdKS48YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9IiI+DQpTZWUg cHJldmlvdXMgY29tbWVudDogaGVyZSB5b3Ugc2hvdWxkIGJlIGV4cGxpY2l0IGFib3V0IHRoZSBw YXJ0aWN1bGFyPGJyIGNsYXNzPSIiPg0KY29uZ2VzdGlvbiBjb250cm9scyB3aGVyZSB0aGUgcmVj b21tZW5kZWQgYmVoYXZpb3IgYW5kIHBhcmFtZXRlciBjYW48YnIgY2xhc3M9IiI+DQpiZSBhcHBs aWVkIHRvLiA8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjxkaXY+U2VlIGFib3ZlLiZuYnNwOzwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJs b2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFz cz0iIj5Nb3Jlb3ZlciwgJnF1b3Q7Y3duZD0gbWF4IChGbGlnaHRTaXplICogYmV0YV97ZWNufSwg MiAqIFNNU1MpJnF1b3Q7LDxiciBjbGFzcz0iIj4NCndoaWNoIGlzIGEgYml0IGRpZmZlcmVudCBm cm9tIGN3bmQ9IGN3bmQgJm5ic3A7KiBiZXRhX3tlY259ICh0aGlzIGlzIHdoYXQ8YnIgY2xhc3M9 IiI+DQp0aGUgdGV4dCBzdWdnZXN0cykuPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjwv YmxvY2txdW90ZT4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2Pk5vdyByZWFkcyBh czombmJzcDs8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PjxpIGNsYXNz PSIiPiZuYnNwOyAmbmJzcDtJdCBSRUNPTU1FTkRTIHRoYXQgYSBUQ1AmbmJzcDtzZW5kZXIgbXVs dGlwbGllcyB0aGUgc2xvdyBzdGFydCB0aHJlc2hvbGQgKHNzdGhyZXNoKSBieSAwLjggdGltZXMg b2Y8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7dGhlIEZsaWdodFNpemUgKHdpdGggaXRzIG1p bmltdW0gdmFsdWUgc2V0IHRvIDIgKiBTTVNTKSBhbmQgcmVkdWNlczxiciBjbGFzcz0iIj4NCiZu YnNwOyAmbmJzcDt0aGUgY3duZCBpbiBjb25nZXN0aW9uIGF2b2lkYW5jZSBmb2xsb3dpbmcgcmVj ZXB0aW9uIG9mIGEgVENQIHNlZ21lbnQ8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7dGhhdCBz ZXRzIHRoZSBFQ04tRWNobyBmbGFnIChkZWZpbmVkIGluIFtSRkMzMTY4XSkuPC9pPjwvZGl2Pg0K PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQpTZWN0aW9uIDQuPGJyIGNsYXNz PSIiPg0KPT09PT09PT09PTxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNs YXNzPSIiPiZuYnNwO3BlcmZvcm1hbmNlIGdhaW5zIGluIGxpZ2h0bHktbXVsdGlwbGV4ZWQgc2Nl bmFyaW9zLCB3aXRob3V0IGxvc2luZzxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBj bGFzcz0iIj4NCiZxdW90O2xpZ2h0bHktbXVsdGlwbGV4ZWQgc2NlbmFyaW9zJnF1b3Q7IG1lYW5z IHByZXN1bWFibHkgdGhhdCBvbmx5IGEgZmV3IGZsb3dzPGJyIGNsYXNzPSIiPg0KdHJhdmVyc2Ug dGhlIGNvbnNpZGVyZWQgYm90dGxlbmVjaywgYnV0IGhvdyBtYW55IGFyZSAmcXVvdDthIGZldyZx dW90OyB0aGVuPzxiciBjbGFzcz0iIj4NCnRocmVlIG9yIG5pbmUgb3IgdHdlbnR5PzxiciBjbGFz cz0iIj4NCkxhdGVyIG9uIGl0IGlzIGRlZmluZWQgYXM8YnIgY2xhc3M9IiI+DQomcXVvdDtsaWdo dGx5LW11bHRpcGxleGVkIGNhc2UgKGZldyBjb25jdXJyZW50IGNvbm5lY3Rpb25zKSZxdW90Oyw8 YnIgY2xhc3M9IiI+DQpiZXR0ZXIgbWVudGlvbiB0aGlzIGF0IGZpcnN0IHVzZSBhbHJlYWR5LiZn dDs8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+RG9uZS48L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxibG9j a3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9 IiI+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+bG9zcyBp cyBkZXRlY3RlZCAocmVnYXJkZWQgYXMgYSBub3RpZmljYXRpb24gb2YgY29uZ2VzdGlvbiksIFN0 YW5kYXJkPGJyIGNsYXNzPSIiPg0KVENQIGhhbHZlcyB0aGUgY3duZCBhbmQgc3N0aHJlc2ggW1JG QzU2ODFdLCB3aGljaCBjYXVzZXMgdGhlIFRDUDxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4N CiZuYnNwOyZuYnNwO15eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5ePGJyIGNsYXNzPSIi Pg0KU2VlIDEpLCByb3VnaGx5IHNwZWFraW5nIHllcywgYnV0IG5vdCBxdWl0ZSBjb3JyZWN0LiBN b3Jlb3ZlciwgcGFja2V0PGJyIGNsYXNzPSIiPg0KbG9zcyBjYW4gYmUgZGV0ZWN0ZWQgYnkgdmFy aW91cyB3YXlzLCBlLmcuLCBieSB1c2luZyB0aGUgcmV0cmFuc21pc3Npb248YnIgY2xhc3M9IiI+ DQp0aW1lcjxiciBjbGFzcz0iIj4NCm9yIG5vdDsgdGhlIGNvbmdlc3Rpb24gY29udHJvbCByZXNw b25zZSBtYXkgZGlmZmVyIHRoZW4sIHRvby48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+Q29tcGx5aW5n IHdpdGggdGhlIGRlc2NyaXB0aW9uIHRleHQgb2YgUkZDNTY4MSwgaXQgbm93IHJlYWRzIGFzOiZu YnNwOzwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+PGkgY2xhc3M9IiI+ Jm5ic3A7ICZuYnNwO1doZW4gcGFja2V0Jm5ic3A7bG9zcyBpcyBpbmZlcnJlZCB1c2luZyB0aGUg cmV0cmFuc21pc3Npb24gdGltZXIgYW5kIHRoZSBnaXZlbiBwYWNrZXQ8YnIgY2xhc3M9IiI+DQom bmJzcDsgJm5ic3A7aGFzIG5vdCB5ZXQgYmVlbiByZXNlbnQgYnkgd2F5IG9mIHRoZSByZXRyYW5z bWlzc2lvbiB0aW1lciAocmVnYXJkZWQ8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7YXMgYSBu b3RpZmljYXRpb24gb2YgY29uZ2VzdGlvbiksIFN0YW5kYXJkIFRDUCBzZXRzIHRoZSBzc3RocmVz aCB0bzxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDt0aGUgbWF4aW11bSBvZiBoYWxmIG9mIHRo ZSBGbGlnaHRTaXplIGFuZCAyKlNNU1MgW1JGQzU2ODFdLCB3aGljaDxiciBjbGFzcz0iIj4NCiZu YnNwOyAmbmJzcDtjYXVzZXMgdGhlIFRDUCBjb25nZXN0aW9uIGNvbnRyb2wgdG8gZ28gYmFjayB0 byBhbGxvd2luZyBvbmx5IGEgQkRQPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwO29mIHBhY2tl dHMgaW4gZmxpZ2h0IC0tIGp1c3Qgc3VmZmljaWVudCB0byBtYWludGFpbiAxMDAlIHV0aWxpc2F0 aW9uPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwO29mIHRoZSBib3R0bGVuZWNrIG9uIHRoZSBu ZXR3b3JrIHBhdGguPC9pPjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0i Y2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5kZWxheSB0YXJnZXQgaW4gcm91 dGVycyBhbmQgdXNlIGNvbmdlc3Rpb24gbm90aWZpY2F0aW9ucyB0byBjb25zdHJhaW48YnIgY2xh c3M9IiI+DQp0aGUgcXVldWluZyBkZWxheXMgZXhwZXJpZW5jZWQgYnkgcGFja2V0cywgcmF0aGVy IHRoYW4gaW4gcmVzcG9uc2UgdG88YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xh c3M9IiI+DQppZiBBUU1zIHNldCBDRSwgdGhleSBob3BlIGZvciBhbiBhcHByb3ByaWF0ZSBhY3Rp b24sIGhvd2V2ZXIsPGJyIGNsYXNzPSIiPg0KdGhleSdsbCBsaW1pdCB0aGUgcXVldWVpbmcgZGVs YXlzIGJ5IGFjdGl2ZWx5IGRyb3BwaW5nIHBhY2tldHMuPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2Pml0 IHVzZXMgdGhlIHRlcm0gJnF1b3Q7Y29uZ2VzdGlvbiBub3RpZmljYXRpb25z4oCdLCB3aGljaCBj YW4gYmUgbG9zcyAoaW1wbGljaXQgY29uZ2VzdGlvbiBub3RpZmljYXRpb24pIG9yIGV4cGxpY2l0 IChFQ04pLiBJZiB0aGUgc2VuZGVyIGlzIHVucmVzcG9uc2l2ZSwgdGhlbiBkcm9wcGluZyBwYWNr ZXRzIGlzIGEg4oCccHJvdGVjdGlvbiBtZWNoYW5pc23igJ0sIGJ1dCB0aGUgdW5kZXJseWluZyBh c3N1bXB0aW9uIGlzIHRoZSB3aGF0ZXZlciB0cmFmZmljDQogaXMgdHJhdmVyc2luZyB0aGUgcGF0 aCBpcyBjb25nZXN0aW9uIGNvbnRyb2xsZWQgYXQgZW5kLXBvaW50cy4gJm5ic3A7PC9kaXY+DQo8 YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNp dGUiIGNsYXNzPSIiPnRoYXQgd2VyZSBub3QgbmVjZXNzYXJpbHkgY29uZmlndXJlZCB0byBlbXVs YXRlIGE8YnIgY2xhc3M9IiI+DQpzaGFsbG93IHF1ZXVlPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1 b3RlPg0KPGJyIGNsYXNzPSIiPg0Kc2VlIDEpLCBzaG9ydCBxdWV1ZSB2cy4gc2hhbGxvdyBidWZm ZXI8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+Q2hhbmdlZCB0byA8aSBjbGFzcz0iIj4mcXVvdDtlbXVs YXRlIGEgYm90dGxlbmVjayB3aXRoIGEgc2hvcnQgcXVldWUmcXVvdDs8L2k+PC9kaXY+DQo8YnIg Y2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUi IGNsYXNzPSIiPkhvd2V2ZXIsIGl0IGludGVyYWN0cyBiYWRseSBmb3IgYSBsaWdodGx5LW11bHRp cGxleGVkPGJyIGNsYXNzPSIiPg0KY2FzZSAoZmV3IGNvbmN1cnJlbnQgY29ubmVjdGlvbnMpIG92 ZXIgYSBwYXRoIHdpdGggYSBsYXJnZSBCRFAuPGJyIGNsYXNzPSIiPg0KQ29udmVudGlvbmFsIFRD UCBiYWNrb2ZmIGluIHN1Y2ggY2FzZXMgbGVhZHMgdG8gZ2FwcyBpbiBwYWNrZXQ8YnIgY2xhc3M9 IiI+DQp0cmFuc21pc3Npb24gYW5kIHVuZGVyLXV0aWxpc2F0aW9uIG9mIHRoZSBwYXRoLjxiciBj bGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBjbGFzcz0iIj4NCk1heWJlIGNvbWJpbmUgdGhl c2UgdHdvIHNlbnRlbmNlczo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpIb3dldmVyLCBp biBhIGxpZ2h0bHktbXVsdGlwbGV4ZWQgY2FzZSAoZmV3IGNvbmN1cnJlbnQgY29ubmVjdGlvbnMp PGJyIGNsYXNzPSIiPg0Kb3ZlciBhIHBhdGggd2l0aCBhIGxhcmdlIEJEUCwgY29udmVudGlvbmFs IFRDUCBiYWNrb2ZmIGxlYWRzIHRvPGJyIGNsYXNzPSIiPg0KZ2FwcyBpbiBwYWNrZXQgdHJhbnNt aXNzaW9uIGFuZCB1bmRlci11dGlsaXNhdGlvbiBvZiB0aGUgcGF0aC48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjxkaXY+RG9uZS48L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUi IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0K PGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+aGVuY2UgdGhlIENFLW1hcmsgbGlrZWx5 IGNhbWUgZnJvbSBhIGJvdHRsZW5lY2sgd2l0aCBhIHNoYWxsb3cgcXVldWUuPGJyIGNsYXNzPSIi Pg0KPC9ibG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiPg0KY29udHJvbGxlZCBhbmQgc2hvcnQgcXVl dWU8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+Q2hhbmdlZCB0byA8aSBjbGFzcz0iIj4mcXVvdDtjb250 cm9sbGVkIHNob3J0IHF1ZXVlJnF1b3Q7PC9pPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHg7 IGZvbnQtZmFtaWx5OiBNZW5sbzsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUp OyIgY2xhc3M9IiI+Ljwvc3Bhbj48L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5 cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNs YXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+UmVhY3RpbmcgZGlmZmVy ZW50bHkgdG8gYW4gRUNOIENFLW1hcmsgdGhhbiB0byBwYWNrZXQgbG9zcyBjYW4gdGhlbjxiciBj bGFzcz0iIj4NCnlpZWxkIHRoZSBiZW5lZml0IG9mIGEgcmVkdWNlZCBiYWNrLW9mZiwgYXMgd2l0 aCBDVUJJQyBbSS1ELkNVQklDXSw8YnIgY2xhc3M9IiI+DQp3aGVuIHF1ZXVlcyBhcmUgc2hvcnQs IHlldCBpdCBjYW4gYXZvaWQgZ2VuZXJhdGluZyBleGNlc3NpdmUgZGVsYXk8YnIgY2xhc3M9IiI+ DQp3aGVuIHF1ZXVlcyBhcmUgbG9uZy48YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIg Y2xhc3M9IiI+DQpJJ20gbm90IHN1cmUgdGhhdCBJIHVuZGVyc3Rvb2QgdGhlIGdpc3QgaW4gdGhp cyBzdGF0ZW1lbnQsIGJldHRlcjxiciBjbGFzcz0iIj4NCnJlcGhyYXNlIGFuZCBzcGxpdCB1cCBp bnRvIHR3byBzZW50ZW5jZXM/PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2Pk5vdyByZWFkcyBhczombmJz cDs8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PjxpIGNsYXNzPSIiPiZu YnNwOyAmbmJzcDtSZWFjdGluZyBkaWZmZXJlbnRseSB0byBhbiBFQ04tc2lnbmFsbGVkPGJyIGNs YXNzPSIiPg0KJm5ic3A7ICZuYnNwO2Nvbmdlc3Rpb24gdGhhbiB0byBhbiBpbmZlcnJlZCBwYWNr ZXQgbG9zcyBjYW4gdGhlbiB5aWVsZCB0aGUgYmVuZWZpdDxiciBjbGFzcz0iIj4NCiZuYnNwOyAm bmJzcDtvZiBhIHJlZHVjZWQgYmFjay1vZmYgd2hlbiBxdWV1ZXMgYXJlIHNob3J0LiAmbmJzcDtV c2luZyBFQ04gY2FuIGFsc28gYmU8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7YWR2YW50YWdl b3VzIGZvciBzZXZlcmFsIG90aGVyIHJlYXNvbnMgW1JGQzgwODddLjwvaT48L2Rpdj4NCjxiciBj bGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIg Y2xhc3M9IiI+Rm9yIG5vbi1FQ04tZW5hYmxlZDxiciBjbGFzcz0iIj4NClRDUCBjb25uZWN0aW9u cyw8YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9IiI+DQpOb3QgZnVsbHkg Y2xlYXIgd2hhdCB0aGlzIG1lYW5zLiBBcmUgdGhlIGVuZC1zeXN0ZW1zIEVDTiBjYXBhYmxlLCBi dXQ8YnIgY2xhc3M9IiI+DQp0aGUgcm91dGVycyBpbiBiZXR3ZWVuIGRvIG5vdCBtYXJrPyBPciBk b2VzIGl0IG1lYW4gdGhhdCBhdCBsZWFzdCBvbmU8YnIgY2xhc3M9IiI+DQplbmQtc3lzdGVtIGlz bid0IEVDTiBjYXBhYmxlPzxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5FQ04tZW5hYmxlZCAqY29ubmVj dGlvbiogaXMgdGhlIGtpbmQgb2YgY29ubmVjdGlvbiBpbiB3aGljaCBib3RoIGVuZCBwb2ludHMg aGF2ZSBzdWNjZXNzZnVsbHkgbmVnb3RpYXRlZCB0aGUgRUNOLiBub24tRUNOLWVuYWJsZWQgY29u bmVjdGlvbiBpcyB0aGUgb3Bwb3NpdGUgb2YgdGhhdC4mbmJzcDs8L2Rpdj4NCjxiciBjbGFzcz0i Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxk aXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9 IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7c3N0aHJlc2hfKHQmIzQzOzEpID0gbWF4IChGbGlnaHRTaXpl X3QgKiBiZXRhX3tsb3NzfSwgMiAqIFNNU1MpPGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0K PGJyIGNsYXNzPSIiPg0KUkZDIDU2ODEgZG9lc24ndCB1c2UgYW55IG5vdGF0aW9uIHdpdGggJnF1 b3Q7dCZxdW90Oy4gSWYgeW91IGFyZSB1c2luZyB0LCB5b3U8YnIgY2xhc3M9IiI+DQpzaG91bGQg c3BlY2lmeSB3aGF0IGl0IG1lYW5zLiBNeSBzdWdnZXN0aW9uIGlzIHRvIGF2b2lkIGludHJvZHVj aW5nPGJyIGNsYXNzPSIiPg0KaXQgYW5kIHRvIHVzZSB0aGUgc2FtZSB0ZXJtaW5vbG9neSBhcyBp biBSRkMgNTY4MS48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0K PGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+RG9uZS4mbmJzcDs8L2Rpdj4NCjxiciBj bGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KSSB0aGluayB0aGF0IHRoZSBiZWdpbm5p bmcgb2Ygc2VjdGlvbiA0LjMgYmVsb25ncyBtb3JlIHRvIHNlY3Rpb24gMzxiciBjbGFzcz0iIj4N CndoaWxlIHRoYXQgcmVzdCBmaXRzIHRvIHRoZSBzZWN0aW9uIHRpdGxlIChkaXNjdXNzaW9uIG9m IHRoZSBBQkU8YnIgY2xhc3M9IiI+DQptdWx0aXBsaWVyKS48YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+ V2hpY2ggc2VudGVuY2UgZG8geW91IGV4YWN0bHkgcHJlZmVyIHRvIGJlIG1vdmVkIHRvIFNlY3Rp b24gMz8mbmJzcDs8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUi IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0K U2VjdGlvbiA1LjxiciBjbGFzcz0iIj4NCj09PT09PT09PT09PGJyIGNsYXNzPSIiPg0KPGJyIGNs YXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+NS4gJm5ic3A7U3RhdHVz IG9mIHRoZSBVcGRhdGU8YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9IiI+ DQpJIGRvbid0IHVuZGVyc3RhbmQgdGhlIHB1cnBvc2Ugb2YgdGhpcyBzZWN0aW9uIG9yIHRoZSBz ZWN0aW9uPGJyIGNsYXNzPSIiPg0KdGl0bGUgaXMgd2VpcmQgYXQgbGVhc3QuPGJyIGNsYXNzPSIi Pg0KSXMgaXQgbWVhbnQgdG8gZGVzY3JpYmUgcmVxdWlyZWQgY2hhbmdlcz8gVGhlIHVzZSB0aGlz IGFzIHNlY3Rpb248YnIgY2xhc3M9IiI+DQp0aXRsZS48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+aXTi gJlzIHRoZSAmcXVvdDtzdGF0dXMgb2YgdGhlIHVwZGF0ZSB0byB0aGUgY29uZ2VzdGlvbiBjb250 cm9s4oCdIHRoYXQgaXMgYmVpbmcgcHJvcG9zZWQgaW4gdGhpcyBkb2N1bWVudC4gSXQgYWRkcmVz c2VzIHRoZSDigJxSZXF1aXJlbWVudCBmb3IgdGhlIHVwZGF0ZSB0byB0aGUgY29uZ2VzdGlvbiBj b250cm9s4oCdLCBidXQgZm9yIHRoZSBzYWtlIG9mIGJyZXZpdHkgSSBoYXZlIG5vdyBjaGFuZ2Vk IHRoaXMgdG8g4oCcQUJFIHJlcXVpcmVtZW50c+KAnSAmbmJzcDs8L2Rpdj4NCjxiciBjbGFzcz0i Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxk aXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9 IiI+Y29uZ2VzdGlvbi1jb250cm9sIGFsZ29yaXRobXMsIGl0IGRvZXMgbm90IHJlcXVpcmUgYW55 IGNoYW5nZSB0byB0aGU8YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9IiI+ DQpldmVyeXdoZXJlIGVsc2UgaXQgaXMgJnF1b3Q7Y29uZ2VzdGlvbiBjb250cm9sJnF1b3Q7IHdp dGhvdXQgZGFzaC48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0K PGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+Rml4ZWQuJm5ic3A7PC9kaXY+DQo8YnIg Y2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUi IGNsYXNzPSIiPiZuYnNwO1RoZSBjdXJyZW50bHkgcHVibGlzaGVkIEVDTiBzcGVjaWZpY2F0aW9u IHJlcXVpcmVzIHRoYXQgdGhlPGJyIGNsYXNzPSIiPg0KJm5ic3A7Y29uZ2VzdGlvbiBjb250cm9s IHJlc3BvbnNlIHRvIGEgQ0UtbWFya2VkIHBhY2tldCBpcyB0aGUgc2FtZSBhcyB0aGU8YnIgY2xh c3M9IiI+DQombmJzcDtyZXNwb25zZSB0byBhIGRyb3BwZWQgcGFja2V0IFtSRkMzMTY4XS4gJm5i c3A7VGhlIHNwZWNpZmljYXRpb24gaXM8YnIgY2xhc3M9IiI+DQombmJzcDtjdXJyZW50bHkgYmVp bmcgdXBkYXRlZCB0byBhbGxvdyBmb3Igc3BlY2lmaWNhdGlvbnMgdGhhdCBkbyBub3Q8YnIgY2xh c3M9IiI+DQombmJzcDtmb2xsb3cgdGhpcyBydWxlIFtJLUQuRUNOLWV4cF0uICZuYnNwO1RoZSBw cmVzZW50IHNwZWNpZmljYXRpb24gZGVmaW5lczxiciBjbGFzcz0iIj4NCiZuYnNwO3N1Y2ggYW4g ZXhwZXJpbWVudCBhbmQgaGFzIHRodXMgYmVlbiBhc3NpZ25lZCBhbiBFeHBlcmltZW50YWwgc3Rh dHVzPGJyIGNsYXNzPSIiPg0KJm5ic3A7YmVmb3JlIGJlaW5nIHByb3Bvc2VkIGFzIGEgU3RhbmRh cmRzLVRyYWNrIHVwZGF0ZS48YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9 IiI+DQpUaGlzIGlzIGxhcmdlbHkgYSByZXBldGl0aW9uIGZyb20gdGhlIGludHJvZHVjdGlvbi48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXY+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6IHJnYigy NTUsIDI1NSwgMjU1KTsiIGNsYXNzPSIiPlVubGVzcyByZXBldGl0aW9uIGlzIGJhZCwgaXQgaXMg b2theS4gSW50cm9kdWN0aW9ucyBjYW4gb2Z0ZW4gYmUgdHJlYXRlZCBhcyBwbGFjZXMgdGhhdCBz dW1tYXJpc2Uga2V5IG1lc3NhZ2VzIGNvbnRhaW5lZCBpbiB0aGUgYm9keSBvZiBhIGRvY3VtZW50 LiBTbyByZXB0aXRpb24gaXMgdG8gYmUgZXhwZWN0ZWQuJm5ic3A7PC9zcGFuPjwvZGl2Pg0KPGJy IGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNz PSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRl IiBjbGFzcz0iIj5CZWNhdXNlIHRoaXMgYWR2YW50YWdlIGFwcGxpZXMgb25seSB0byBFQ04tbWFy a2VkIHBhY2tldHMgYW5kIG5vdCB0bzxiciBjbGFzcz0iIj4NCmxvc3MgaW5kaWNhdGlvbnMsIHRo ZSBuZXcgbWV0aG9kIGNhbm5vdCBsZWFkIHRvIGNvbmdlc3Rpb24gY29sbGFwc2UuPGJyIGNsYXNz PSIiPg0KPC9ibG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiPg0KSSdtIG5vdCBzdXJlIHRoYXQgSSBj YW4gZm9sbG93IGhlcmUuIFRoZXJlIGFyZSBzZXZlcmFsIGZvcm1zIG9mIGNvbmdlc3Rpb248YnIg Y2xhc3M9IiI+DQpjb2xsYXBzZSBhbmQgdGhlIGNsYXNzaWNhbCBvbmUgY2F1c2VzIHVubmVjZXNz YXJ5IHJldHJhbnNtaXNzaW9ucyBieSBhPGJyIGNsYXNzPSIiPg0KdGltZXIgbWlzbWF0Y2guIE1h eWJlIHlvdSBjYW4gZWxhYm9yYXRlIGEgYml0IG1vcmUgaGVyZS48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXY+SXQgbm93IHJlYWRzIGFzOiZuYnNwOzwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxkaXY+PGkgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO0JlY2F1c2UgdGhpcyBhZHZhbnRhZ2Ug YXBwbGllcyBvbmx5IHRvIEVDTi1tYXJrZWQgcGFja2V0cyBhbmQgbm90IHRvPGJyIGNsYXNzPSIi Pg0KJm5ic3A7ICZuYnNwO3BhY2tldCBsb3NzIGluZGljYXRpb25zLCBpbiB0aGUgd29yc3QtY2Fz ZSAoZS5nLiwgYW4gQUJFLWNvbXBsaWFudDxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDtUQ1Ag c2VuZGVyIHVzaW5nIGJldGFfe2Vjbn0gPSAxLjApIHRoZSBFQ04tY2FwYWJsZSBib3R0bGVuZWNr IHdpbGw8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7c3RpbGwgZmFsbCBiYWNrIHRvIGRyb3Bw aW5nIHBhY2tldHMsIGFuZCB0aGUgcmVzdWx0IGlzIG5vIGRpZmZlcmVudDxiciBjbGFzcz0iIj4N CiZuYnNwOyAmbmJzcDt0aGFuIGlmIHRoZSBUQ1Agc2VuZGVyIHdhcyB1c2luZyB0cmFkaXRpb25h bCBsb3NzLWJhc2VkIGNvbmdlc3Rpb248YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7Y29udHJv bC48YnIgY2xhc3M9IiI+DQo8L2k+PC9kaXY+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFz cz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NClNlY3Rp b24gOC48YnIgY2xhc3M9IiI+DQo9PT09PT09PT09PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIi Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+PGEgaHJlZj0iaHR0cDovL2hlaW0u aWZpLnVpby5uby9uYWVlbWsvcmVzZWFyY2gvQUJFLyIgY2xhc3M9IiI+aHR0cDovL2hlaW0uaWZp LnVpby5uby9uYWVlbWsvcmVzZWFyY2gvQUJFLzwvYT4gVGhpcyBjb2RlIHdhcyB1c2VkIHRvPGJy IGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiPg0KRnVsbCBzdG9wIG1pc3Np bmcgaGVyZSAocHJlc3VtYWJseSB0byBhdm9pZCBwcm9ibGVtcyB3aXRoIHRoZSBVUkwpLjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdj5GaXhlZC48L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3Rl IHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+TWF5 YmUgcHV0IHRoZSAobW9zdCBpbXBvcnRhbnQpIGNoYW5nZXMgaW50byBhbiBhcHBlbmRpeD8gSSdt IG5vdCBzdXJlPGJyIGNsYXNzPSIiPg0KaG93IGxvbmcgdGhpcyBVUkwgd2lsbCBiZSB2YWxpZCBh ZnRlciB0aGUgUkZDIGhhcyBiZWVuIHB1Ymxpc2hlZC48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+V2Ug YXJlIG5vdCB5ZXQgYXQgV0dMQywgYnV0IHdpbGwgZml4IHRoaXMgaW4gbGF0ZXIgcmV2aXNpb25z LiZuYnNwOzwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xh c3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQpSZWdh cmRzLDxiciBjbGFzcz0iIj4NClJvbGFuZDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj5DaGVlcnMsPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPk5hZWVtPC9kaXY+ DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_7447FBC96B814A97AB45C57555B30559ifiuiono_-- From nobody Wed Nov 15 06:31:00 2017 Return-Path: X-Original-To: tcpm@ietf.org Delivered-To: tcpm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F70F12947D; Wed, 15 Nov 2017 06:30:59 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: tcpm@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.66.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151075625935.20924.10773735792190187056@ietfa.amsl.com> Date: Wed, 15 Nov 2017 06:30:59 -0800 Archived-At: Subject: [tcpm] I-D Action: draft-ietf-tcpm-alternativebackoff-ecn-04.txt X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Nov 2017 14:30:59 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the TCP Maintenance and Minor Extensions WG of the IETF. Title : TCP Alternative Backoff with ECN (ABE) Authors : Naeem Khademi Michael Welzl Grenville Armitage Godred Fairhurst Filename : draft-ietf-tcpm-alternativebackoff-ecn-04.txt Pages : 12 Date : 2017-11-15 Abstract: Recent Active Queue Management (AQM) mechanisms allow for burst tolerance while enforcing short queues to minimise the time that packets spend enqueued at a bottleneck. This can cause noticeable performance degradation for TCP connections traversing such a bottleneck, especially if they are only a few or their bandwidth- delay-product is large. An Explicit Congestion Notification (ECN) signal indicates that an AQM mechanism is used at the bottleneck, and therefore the bottleneck network queue is likely to be short. This document therefore proposes an update to the TCP sender-side ECN reaction in congestion avoidance to reduce the Congestion Window (cwnd) by a smaller amount than the congestion control algorithm's reaction to inferred packet loss. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-tcpm-alternativebackoff-ecn/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-tcpm-alternativebackoff-ecn-04 https://datatracker.ietf.org/doc/html/draft-ietf-tcpm-alternativebackoff-ecn-04 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-tcpm-alternativebackoff-ecn-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Nov 15 06:46:24 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 111571242F5 for ; Wed, 15 Nov 2017 06:46:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.719 X-Spam-Level: X-Spam-Status: No, score=-2.719 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=dell.com header.b=07cRToUI; dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=emc.com header.b=ByOcDT0r Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P8SazTQnLoJD for ; Wed, 15 Nov 2017 06:46:21 -0800 (PST) Received: from esa8.dell-outbound.iphmx.com (esa8.dell-outbound.iphmx.com [68.232.149.218]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 372F11241F5 for ; Wed, 15 Nov 2017 06:46:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=dell.com; i=@dell.com; q=dns/txt; s=smtpout; t=1510757181; x=1542293181; h=from:cc:to:subject:date:message-id:mime-version; bh=LD5PcToTW0yp6cvCAVS4f7Iz6VyIwL+Eoptlv4llPRc=; b=07cRToUICtCUtDxatog79lZz5e5IradENJCR//g2BD2uI0t3AvG5DBkP XestC348cLHRJ5ycaK/sZPHOPzZG8JNmiGfc+hKfsXEK69G/fEPj2jKyd KvVynAqDpiFPzBIu8fhn2rs52bHstzX6LoIceIAqp8G02iwYCo6At2i6K k=; IronPort-PHdr: =?us-ascii?q?9a23=3AYCHGNR1IfqdbWzq3smDT+DRfVm0co7zxezQtwd8Z?= =?us-ascii?q?seISK/ad9pjvdHbS+e9qxAeQG96Ku7Qc06L/iOPJYSQ4+5GPsXQPItRndiQuro?= =?us-ascii?q?EopTEmG9OPEkbhLfTnPGQQFcVGU0J5rTngaRAGUMnxaEfPrXKs8DUcBgvwNRZv?= =?us-ascii?q?JuTyB4Xek9m72/q89pDXYAhEniaxba9vJxiqsAvdsdUbj5F/Iagr0BvJpXVIe+?= =?us-ascii?q?VSxWx2IF+Yggjx6MSt8pN96ipco/0u+dJOXqX8ZKQ4UKdXDC86PGAv5c3krgfM?= =?us-ascii?q?QA2S7XYBSGoWkx5IAw/Y7BHmW5r6ryX3uvZh1CScIMb7S60/Vza/4KdxUBLmiD?= =?us-ascii?q?kJOSMl8G/ZicJwjb5Urx26qhNl34LZZJuYOOZicq/De94RWGpPXtxWVyxEGo6w?= =?us-ascii?q?YZYCD+4bMulErInxv0YFoxWkCgmyBePg1zFEjWLx0KM0yeshDwDG0xE6E98TtH?= =?us-ascii?q?Tbtsn6NKQJXO+o0qbIyTHDY+lK1jf67YjFaxYsquyCU7J3dMre00gvFwXdg1WR?= =?us-ascii?q?t4PlIz2V2v4Ks2iB4OptU/+khW0/qwxpozWixd0ghpfHi44L0FzI6CV0zYkvKd?= =?us-ascii?q?C8TEN3ecOoHIdKuy2HK4d7QtkuTmJytConxLALuYa3fCYUx5kk2xLSbvmKfouH?= =?us-ascii?q?7x/nWuacJDd1i29/d76hghu+7FWsxfb5W8S73ltHrSpIn9/RvX4XzRPT8NKISv?= =?us-ascii?q?5l80ek3jaAyh7c5/lfIUAxiarbM5khwqMslpYLsUTMACv2mELugaCIbUUr4Oml?= =?us-ascii?q?5/76bbr4op+cM5Z4igbjMqQygcO/Bvk4Mg4TUGSF4+i81aXj/U38QLRFlPE5jq?= =?us-ascii?q?7ZsJXCKcQaoK62HRNV354i5hu8FTuqztoVkWcdIF5YeB+KgJLlNlXKLfzgCPew?= =?us-ascii?q?mVWskDNlx/DcOb3hB43AIHbZn7f/fLZy9lRQxRc3zd9F+51UCaoML+/tVU/1sN?= =?us-ascii?q?zUFAM2Mwuxw+r/EtVyypseWX6TAq+eKK7SrUOH5voqI+SXZY8apir9K/Y/6/7p?= =?us-ascii?q?l385lgxVQa78l4cccHWQH/l6LQOee3WmyoMdGn8PlgszUOKsj0eNB219fXG3Cu?= =?us-ascii?q?gW4jgwC8buIY7dR4znyOit1Tm6Ett8YmlNCXiAHHPsMY6DXqFfO2qpPsZ9n2lc?= =?us-ascii?q?BvCaQIg72ET2uQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2HeAAC/Ugxah2Oa6ERaAxwBAQEEAQEKA?= =?us-ascii?q?QGCRCKBJBBuJweOF48ek2mEcYFOQwolhRYChQ0/GAEBAQEBAQEBAQECEAEBAQo?= =?us-ascii?q?LCQgoJAuCOCIQRyEFMgEBAQEBAQEBAQEBAQEBAQEBARcCPQESThMfGgERASodO?= =?us-ascii?q?RQSAQQTCIk4ZAEPqkmDEIgDAQEBAQEBAQMBAQEBAQEBGQMFgzSBNlGBVoFoiBs?= =?us-ascii?q?BKB8MGoJ/gjKKOZd9BgKBcoV5jy6RL4ozgjyJEgIEAgQFAhqBOR+CLXqDQoJsg?= =?us-ascii?q?XN3AYlLASaBDIERAQEB?= X-IPAS-Result: =?us-ascii?q?A2HeAAC/Ugxah2Oa6ERaAxwBAQEEAQEKAQGCRCKBJBBuJwe?= =?us-ascii?q?OF48ek2mEcYFOQwolhRYChQ0/GAEBAQEBAQEBAQECEAEBAQoLCQgoJAuCOCIQR?= =?us-ascii?q?yEFMgEBAQEBAQEBAQEBAQEBAQEBARcCPQESThMfGgERASodORQSAQQTCIk4ZAE?= =?us-ascii?q?PqkmDEIgDAQEBAQEBAQMBAQEBAQEBGQMFgzSBNlGBVoFoiBsBKB8MGoJ/gjKKO?= =?us-ascii?q?Zd9BgKBcoV5jy6RL4ozgjyJEgIEAgQFAhqBOR+CLXqDQoJsgXN3AYlLASaBDIE?= =?us-ascii?q?RAQEB?= Received: from esa6.dell-outbound2.iphmx.com ([68.232.154.99]) by esa8.dell-outbound.iphmx.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 15 Nov 2017 08:46:01 -0600 From: "Black, David" Cc: "Black, David" Received: from mailuogwhop.emc.com ([168.159.213.141]) by esa6.dell-outbound2.iphmx.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 15 Nov 2017 20:45:59 +0600 Received: from maildlpprd04.lss.emc.com (maildlpprd04.lss.emc.com [10.253.24.36]) by mailuogwprd04.lss.emc.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.0) with ESMTP id vAFEjw9f018305 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Wed, 15 Nov 2017 09:45:59 -0500 X-DKIM: OpenDKIM Filter v2.4.3 mailuogwprd04.lss.emc.com vAFEjw9f018305 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=emc.com; s=jan2013; t=1510757159; bh=raTL1JlFl+6wR3fFPzkn2MN1sII=; h=From:To:CC:Subject:Date:Message-ID:Content-Type:MIME-Version; b=ByOcDT0r8FvpGXIW4G34A4OoSC6GYjBxgOrWupu8pb0fcRj48rzDTkvMG0QdrmhcH xydD5mBcQGbYd/x15m0LEqP+Sa4aKDjTd0IO+bY0cSbEw9wOAfcyjR8vKzqBR4owmf syAGbj7ox5GSEhN3O8OORcHhfqzwJHfhUd3xck+Y= X-DKIM: OpenDKIM Filter v2.4.3 mailuogwprd04.lss.emc.com vAFEjw9f018305 Received: from mailusrhubprd53.lss.emc.com (mailusrhubprd53.lss.emc.com [10.106.48.18]) by maildlpprd04.lss.emc.com (RSA Interceptor) for ; Wed, 15 Nov 2017 09:45:38 -0500 Received: from MXHUB309.corp.emc.com (MXHUB309.corp.emc.com [10.146.3.35]) by mailusrhubprd53.lss.emc.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.0) with ESMTP id vAFEjf0R018836 (version=TLSv1.2 cipher=AES128-SHA256 bits=128 verify=FAIL) for ; Wed, 15 Nov 2017 09:45:41 -0500 Received: from MX307CL04.corp.emc.com ([fe80::849f:5da2:11b:4385]) by MXHUB309.corp.emc.com ([10.146.3.35]) with mapi id 14.03.0352.000; Wed, 15 Nov 2017 09:45:41 -0500 To: "tcpm@ietf.org" Thread-Topic: Comments on draft-ietf-tcpm-alternativebackoff-ecn-03 Thread-Index: AdNeGU9EO2gAhLm9Q2uE9C70uZWXlQ== Date: Wed, 15 Nov 2017 14:45:40 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.105.8.135] Content-Type: multipart/alternative; boundary="_000_CE03DB3D7B45C245BCA0D243277949362FD5CA36MX307CL04corpem_" MIME-Version: 1.0 X-Sentrion-Hostname: mailusrhubprd53.lss.emc.com X-RSA-Classifications: public Archived-At: Subject: [tcpm] Comments on draft-ietf-tcpm-alternativebackoff-ecn-03 X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Nov 2017 14:46:23 -0000 --_000_CE03DB3D7B45C245BCA0D243277949362FD5CA36MX307CL04corpem_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I volunteered to review this draft in Prague, so in classic "just before th= e deadline" IETF style, here are some comments. The draft is applicable to use of AQM in general, but seems to limit its fo= cus/analysis to modern AQM mechanisms such as PIE and CoDel. Some broader = discussion of older AQM mechanisms would be a good idea, although it may no= t be necessary to go all the way back to RED. As part of that, this text at the end of Section 4.1: ([RFC7567] notes the curren= t status of RED as an AQM method.) should be strengthened to indicate that current usage of RED is limited. --Section 3: This specification describes an update to the congestion control algorithm of an ECN-capable TCP transport protocol. It allows a TCP stack to update the TCP sender response when it receives feedback indicating reception of a CE-marked packet. It RECOMMENDS that a TCP sender multiplies the slow start threshold (ssthresh) by 0.8 times of the FlightSize (with its minimum value set to 2 * SMSS) and reduces the cwnd in congestion avoidance following reception of a TCP segment that sets the ECN-Echo flag (defined in [RFC3168]). This text has several problems including: - it's not clear what the update is - "allows" is too weak a verb - "RECOMMENDS" is not an RFC 2119 keyword Attempted rewrite, including additional editorial changes: This specification updates the congestion control algorithm of an ECN-capable TCP transport protocol by changing the the TCP sender response to feedback from the TCP receiver that indicates reception of a CE-marked packet, i.e., receipt of a packet with the ECN-Echo flag (defined in [RFC3168]) set. The updated TCP sender response specification is that the slow start threshold (ssthresh) SHOULD be multiplied by 0.8 times the FlightSize with the result increased to the minimum ssthresh value of 2 * SMSS if necessary. The TCP sender also reduces the the cwnd value to that new ssthresh value. In Section 4.3, the text is not clear that the same cwnd reduction applies = to both ECN and packet loss. Section 5: OLD The currently published ECN specification requires that the congestion control response to a CE-marked packet is the same as the response to a dropped packet [RFC3168]. The specification is currently being updated to allow for specifications that do not follow this rule [I-D.ECN-exp]. The present specification d= efines such an experiment and has thus been assigned an Experimental status before being proposed as a Standards-Track update. NEW The original ECN specification, RFC 3168 [RFC3168], required that the congestion control response to a CE-marked packet be the same as the response to a dropped packet [RFC3168]. That requirement has been relaxed by RFC YYYY [I-D.ECN-exp] to enable experimentation = with different congestion control responses. The present specification is one such experiment; if the experiment succeeds, the changed congestion control response will be published in a standards track RFC to encourage deploym= ent. In: To evaluate the benefit, this experiment therefore requires support in AQM routers (except to enable an ECN-marking mechanism [RFC3168] [RFC7567]) for ECN-marking of packe= ts carrying the ECN Capable Transport, ECT(0), codepoint [RFC3168]. I don't understand the parenthetical "(except to ...)" text - can that just= be deleted? Thanks, --David ---------------------------------------------------------------- David L. Black, Distinguished Engineer Dell EMC, 176 South St., Hopkinton, MA 01748 +1 (508) 293-7953 Mobile: +1 (978) 394-7754 David.Black@dell.com ---------------------------------------------------------------- --_000_CE03DB3D7B45C245BCA0D243277949362FD5CA36MX307CL04corpem_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I volunteered to review this draft in Prague, so in = classic “just before the deadline” IETF style, here are some co= mments.

 

The draft is applicable to use of AQM in general, bu= t seems to limit its focus/analysis to modern AQM mechanisms such as PIE an= d CoDel.  Some broader discussion of older AQM mechanisms would be a g= ood idea, although it may not be necessary to go all the way back to RED.

As part of that, this text at the end of Section 4.1= :

           ([RFC7567] notes the current status=
 of RED as an AQM method.)

should be strengthened to indicate that current usag= e of RED is limited.

 

--Section 3:

 
   This specification describes an update to the congestion =
control
   algorithm of an ECN-capable TCP transport protocol. =
 It allows a TCP
   stack to update the TCP sender response when it receives =
feedback
   indicating reception of a CE-marked packet.  It RECO=
MMENDS that a TCP
   sender multiplies the slow start threshold (ssthresh) by =
0.8 times of
   the FlightSize (with its minimum value set to 2 * SMSS) a=
nd reduces
   the cwnd in congestion avoidance following reception of a=
 TCP segment
   that sets the ECN-Echo flag (defined in [RFC3168]).

 

This text has several problems including:=

        &nbs= p;      - it’s not clear what the update is =

        &nbs= p;      - “allows” is too weak a verb<= o:p>

        &nbs= p;      - “RECOMMENDS” is not an RFC 2= 119 keyword

 

Attempted rewrite, including additional editorial ch= anges:

 

   This specification updates the congestion control
   algorithm of an ECN-capable TCP transport protocol by cha=
nging the
   the TCP sender response to feedback from the TCP receiver=
 that
   indicates reception of a CE-marked packet, i.e., receipt =
of a packet
   with the ECN-Echo flag (defined in [RFC3168]) set.  The updated
   TCP sender response specification is that the slow
   start threshold (ssthresh) SHOULD be multiplied by 0.8 ti=
mes
   the FlightSize with the result increased to the minimum s=
sthresh
   value of 2 * SMSS if necessary.  The TCP sender also=
 reduces the 
   the cwnd value to that new ssthresh value.

 

In Section 4.3, the text is not clear that the same = cwnd reduction applies to both ECN and packet loss.

 

Section 5:

 

OLD

   The currently published ECN specification requires that t=
he
   congestion control response to a CE-marked packet is the =
same as the
   response to a dropped packet [RFC3168].  The specification is<=
/o:p>
   currently being updated to allow for specifications that =
do not
   follow this rule [I-D.ECN-exp]=
.  The present specification defines
   such an experiment and has thus been assigned an Experime=
ntal status
   before being proposed as a Standards-Track update.

NEW

   The original ECN specification, RFC 3168 [RFC3168], requi=
red that the
   congestion control response to a CE-marked packet be the =
same as the
   response to a dropped packet [RFC3168].  That requirement has been<=
o:p>
   relaxed by RFC YYYY [I-D.ECN-exp] to enable experimentation with different
   congestion control responses.  The present specifica=
tion is one such
   experiment; if the experiment succeeds, the changed conge=
stion control
   response will be published in a standards track RFC to en=
courage deployment.

 

In:

 

   To evaluate the benefit, this experiment therefore requir=
es support
   in AQM routers (except to enable an ECN-marking mechanism=
 [RFC3168]=

   [RFC756=
7]) for ECN-marking of packets carrying the ECN Capable

   Transport, ECT(0), codepoint [RFC3168].


 


I don’t understand the parenthetical “(e=
xcept to …)” text – can that just be deleted?  



 


Thanks, --David


----------------------------------------------------=
------------


David L. Black, Distinguished Engineer

Dell EMC, 176 South St., Hopkinton, MA  01748


+1 (508) 293-7953    Mobile: +=
;1 (978) 394-7754


David.Black@dell.com


----------------------------------------------------=
------------


 
--_000_CE03DB3D7B45C245BCA0D243277949362FD5CA36MX307CL04corpem_-- From nobody Wed Nov 15 17:16:26 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B26F7124319 for ; Wed, 15 Nov 2017 17:16:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.72 X-Spam-Level: X-Spam-Status: No, score=-2.72 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=dell.com header.b=KwhS6W6U; dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=rsa.com header.b=sYmk6OSt Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bqaZsftx3rkb for ; Wed, 15 Nov 2017 17:16:22 -0800 (PST) Received: from esa2.dell-outbound.iphmx.com (esa2.dell-outbound.iphmx.com [68.232.149.220]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B8F1B120227 for ; Wed, 15 Nov 2017 17:16:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=dell.com; i=@dell.com; q=dns/txt; s=smtpout; t=1510794982; x=1542330982; h=from:cc:to:subject:date:message-id:references: in-reply-to:mime-version; bh=xx5AdX9jlBv4E+q8neLeHltr+0e5ONRDLkz4GCS+CY4=; b=KwhS6W6UbZ+o6NI7jjsvwI176fuJESB7UGARwbFkfNH1bDS1BnXP/1WJ yntmHaBZQc3h9Wbh2OoWRQo+m8Aq/8+kYhFlL86xNGdT5H65rM2KxMFgW dZOrY2tk4+dN6CimpOElVHGdMY9yy+OP8QgfXych4MykfhnF9mQDrqude c=; IronPort-PHdr: =?us-ascii?q?9a23=3AwCtfJRPBbvJJZjdl7mYl6mtUPXoX/o7sNwtQ0KIM?= =?us-ascii?q?zox0Ivj+rarrMEGX3/hxlliBBdydsKMUzbKO+4nbGkU4qa6bt34DdJEeHzQksu?= =?us-ascii?q?4x2zIaPcieFEfgJ+TrZSFpVO5LVVti4m3peRMNQJW2aFLduGC94iAPERvjKwV1?= =?us-ascii?q?Ov71GonPhMiryuy+4ZPebgFLiTanfb9+MAi9oBnMuMURnYZsMLs6xAHTontPde?= =?us-ascii?q?RWxGdoKkyWkh3h+Mq+/4Nt/jpJtf45+MFOTav1f6IjTbxFFzsmKHw65NfqtRbY?= =?us-ascii?q?UwSC4GYXX3gMnRpJBwjF6wz6Xov0vyDnuOdxxDWWMMvrRr0yRD+s7bpkSAXwhS?= =?us-ascii?q?kHKTA37X3XhMJzgqJVoh2hpgBwzIHPbY6PKPZzernQcc8GSWZfWMtaSixPApm7?= =?us-ascii?q?b4sKF+cNM/tVr43nqFQSrhuyHRSnCu31xT9Wh3/5wKM22PkmHA/IxgMgAdMOv2?= =?us-ascii?q?nOoNjoMKcdS/y6zKrTwDrecfxW3TP95JLUfRAmpPGBRLR9etffx0koEgPKlFSQ?= =?us-ascii?q?qYr9MjOUyOsNr2ab4/BnVeK1hG4qrRx6rDu3xso0i4TEhZgZxk7K+Cln2oo5ON?= =?us-ascii?q?21RUFhbdOlHpZcrzyWO5dsTs8/X21luDw2x74ctZKmciUHyIwrxxDBZPGEb4SF?= =?us-ascii?q?5xfuWeWeLDp8inJofbKyiAuo/kS+z+DwS9S4301PoydKnNTBtXAA2hrO4cadUP?= =?us-ascii?q?R95F2u2TOX2gDW7eFLPF47mLLAK54k3r4wjp0TsVnfHiPumEX5kquWdkI89+e2?= =?us-ascii?q?8OToeLvrqoWBOIBqjgH+Nr0imsuiAeQkKQcOWHWb+eKh27H950H5Qa1Kjv0zkq?= =?us-ascii?q?jWqpzVOcMbpquhDw9U1IYs9Qq/Ai+n3dkbh3ULMlxIdAydg4T0O1zDL+r0APax?= =?us-ascii?q?jli0lTdk3fHGPrnvApXXKXjDla/sc7hn5E5CyQo80MpT6o9QCr4bPP3zWVT8u8?= =?us-ascii?q?HGAR89Nwy42froCNJ41o8GQ2KAHreZML/OsV+P/u8vP/WDZJcQuDvmKvgq+eLu?= =?us-ascii?q?jXEjlV8aZ6mp0shfVHftVOhtO0CxYHfwjJEGC2hA9l4iR/TvoFyPTTAVYGy9Cf?= =?us-ascii?q?ES/DY+XciMCY7IRcTlrLWf3SvxVsl6b35HBhamFX7jdK2IVvMILimVJ5kywXQ/?= =?us-ascii?q?SbG9Rtp5hlmVvwjgxu8/Iw=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2FUAAAh5gxahz+a6ERbAxoBAQEBAQIBA?= =?us-ascii?q?QEBCAEBAQGCRCKBJBBuJweOF48ggX2RbIRxgU5DCiWFFgKFDj8YAQEBAQEBAQE?= =?us-ascii?q?BAQIQAQEBCgsJCCgkC4I4IhBHITcBAQEBAQEjAg8vEgIYAQEBBC0THxoBDwIBC?= =?us-ascii?q?BEEAQELHQcyFAkIAQEEEwiJOGQBD6wMgxCHfwEBAQEBAQEBAQEBAQEBAQEBAQE?= =?us-ascii?q?BARUDBYM0gTZRgVaBaIMqhHEBKB8MCRGCf4IyijmBA5Z6BgKHa48ukS+KM4I8i?= =?us-ascii?q?RICBAIEBQIagTkfgi16g0IJgmOBc3cBiFUBJoEMgREBAQE?= X-IPAS-Result: =?us-ascii?q?A2FUAAAh5gxahz+a6ERbAxoBAQEBAQIBAQEBCAEBAQGCRCK?= =?us-ascii?q?BJBBuJweOF48ggX2RbIRxgU5DCiWFFgKFDj8YAQEBAQEBAQEBAQIQAQEBCgsJC?= =?us-ascii?q?CgkC4I4IhBHITcBAQEBAQEjAg8vEgIYAQEBBC0THxoBDwIBCBEEAQELHQcyFAk?= =?us-ascii?q?IAQEEEwiJOGQBD6wMgxCHfwEBAQEBAQEBAQEBAQEBAQEBAQEBARUDBYM0gTZRg?= =?us-ascii?q?VaBaIMqhHEBKB8MCRGCf4IyijmBA5Z6BgKHa48ukS+KM4I8iRICBAIEBQIagTk?= =?us-ascii?q?fgi16g0IJgmOBc3cBiFUBJoEMgREBAQE?= Received: from esa3.dell-outbound2.iphmx.com ([68.232.154.63]) by esa2.dell-outbound.iphmx.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 15 Nov 2017 19:16:20 -0600 From: "Black, David" Cc: "Black, David" Received: from mailuogwhop.emc.com ([168.159.213.141]) by esa3.dell-outbound2.iphmx.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 16 Nov 2017 07:13:55 +0600 Received: from maildlpprd04.lss.emc.com (maildlpprd04.lss.emc.com [10.253.24.36]) by mailuogwprd05.lss.emc.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.0) with ESMTP id vAG1GHhs020097 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Wed, 15 Nov 2017 20:16:18 -0500 X-DKIM: OpenDKIM Filter v2.4.3 mailuogwprd05.lss.emc.com vAG1GHhs020097 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=rsa.com; s=jan2013; t=1510794978; bh=Ffxh1ZDxORHe8EeJOo2pj59c6Jw=; h=From:To:CC:Subject:Date:Message-ID:References:In-Reply-To: Content-Type:MIME-Version; b=sYmk6OStYPdpTv/i+OSaaotiXlX1OeDWiq3OphymFf4T1R/R5kAwYokdK5Ph+a2uh 4eTK9O/CFVCwp79PWeWE3H0O1dIcuB7vo6HpnyFpVPBhcixpPvdYGS3CkXYjrZPGch HmxiwqyUDtde42AbAyWRgNP/3L0I+Au7QWAOshts= X-DKIM: OpenDKIM Filter v2.4.3 mailuogwprd05.lss.emc.com vAG1GHhs020097 Received: from mailusrhubprd02.lss.emc.com (mailusrhubprd02.lss.emc.com [10.253.24.20]) by maildlpprd04.lss.emc.com (RSA Interceptor) for ; Wed, 15 Nov 2017 20:15:57 -0500 Received: from MXHUB318.corp.emc.com (MXHUB318.corp.emc.com [10.146.3.96]) by mailusrhubprd02.lss.emc.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.0) with ESMTP id vAG1G0rr012941 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=FAIL) for ; Wed, 15 Nov 2017 20:16:01 -0500 Received: from MX307CL04.corp.emc.com ([fe80::849f:5da2:11b:4385]) by MXHUB318.corp.emc.com ([10.146.3.96]) with mapi id 14.03.0352.000; Wed, 15 Nov 2017 20:16:00 -0500 To: "tcpm@ietf.org" Thread-Topic: Comments on draft-ietf-tcpm-alternativebackoff-ecn-03 Thread-Index: AdNeGU9EO2gAhLm9Q2uE9C70uZWXlQAXnAnQ Date: Thu, 16 Nov 2017 01:15:59 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.105.8.135] Content-Type: multipart/alternative; boundary="_000_CE03DB3D7B45C245BCA0D243277949362FD5E122MX307CL04corpem_" MIME-Version: 1.0 X-Sentrion-Hostname: mailusrhubprd02.lss.emc.com X-RSA-Classifications: public Archived-At: Subject: Re: [tcpm] Comments on draft-ietf-tcpm-alternativebackoff-ecn-03 X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Nov 2017 01:16:25 -0000 --_000_CE03DB3D7B45C245BCA0D243277949362FD5E122MX307CL04corpem_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Updating to -04 inline ... Thanks, --David From: Black, David Sent: Wednesday, November 15, 2017 9:46 AM To: tcpm@ietf.org Cc: Black, David Subject: Comments on draft-ietf-tcpm-alternativebackoff-ecn-03 I volunteered to review this draft in Prague, so in classic "just before th= e deadline" IETF style, here are some comments. The draft is applicable to use of AQM in general, but seems to limit its fo= cus/analysis to modern AQM mechanisms such as PIE and CoDel. Some broader = discussion of older AQM mechanisms would be a good idea, although it may no= t be necessary to go all the way back to RED. As part of that, this text at the end of Section 4.1: ([RFC7567] notes the curren= t status of RED as an AQM method.) should be strengthened to indicate that current usage of RED is limited. [David>] Still the case - both the scope of AQMs considered and the specifi= c language about RED. --Section 3: This specification describes an update to the congestion control algorithm of an ECN-capable TCP transport protocol. It allows a TCP stack to update the TCP sender response when it receives feedback indicating reception of a CE-marked packet. It RECOMMENDS that a TCP sender multiplies the slow start threshold (ssthresh) by 0.8 times of the FlightSize (with its minimum value set to 2 * SMSS) and reduces the cwnd in congestion avoidance following reception of a TCP segment that sets the ECN-Echo flag (defined in [RFC3168]). This text has several problems including: - it's not clear what the update is - "allows" is too weak a verb - "RECOMMENDS" is not an RFC 2119 keyword [David>] Still the case, although the original text has been slightly edite= d in -04. Attempted rewrite, including additional editorial changes: This specification updates the congestion control algorithm of an ECN-capable TCP transport protocol by changing the the TCP sender response to feedback from the TCP receiver that indicates reception of a CE-marked packet, i.e., receipt of a packet with the ECN-Echo flag (defined in [RFC3168]) set. The updated TCP sender response specification is that the slow start threshold (ssthresh) SHOULD be multiplied by 0.8 times the FlightSize with the result increased to the minimum ssthresh value of 2 * SMSS if necessary. The TCP sender also reduces the the cwnd value to that new ssthresh value. In Section 4.3, the text is not clear that the same cwnd reduction applies = to both ECN and packet loss. [David>] Still the case - it's not clear whether "cwnd =3D ssthresh" applie= s to both preceding assignments or just the immediately preceding one. Section 5: OLD The currently published ECN specification requires that the congestion control response to a CE-marked packet is the same as the response to a dropped packet [RFC3168]. The specification is currently being updated to allow for specifications that do not follow this rule [I-D.ECN-exp]. The present specification d= efines such an experiment and has thus been assigned an Experimental status before being proposed as a Standards-Track update. NEW The original ECN specification, RFC 3168 [RFC3168], required that the congestion control response to a CE-marked packet be the same as the response to a dropped packet [RFC3168]. That requirement has been relaxed by RFC YYYY [I-D.ECN-exp] to enable experimentation = with different congestion control responses. The present specification is one such experiment; if the experiment succeeds, the changed congestion control response will be published in a standards track RFC to encourage deploym= ent. [David>] Fixed in -04 w/different text. In: To evaluate the benefit, this experiment therefore requires support in AQM routers (except to enable an ECN-marking mechanism [RFC3168] [RFC7567]) for ECN-marking of packe= ts carrying the ECN Capable Transport, ECT(0), codepoint [RFC3168]. I don't understand the parenthetical "(except to ...)" text - can that just= be deleted? [David>] Still a concern in -04. Thanks, --David ---------------------------------------------------------------- David L. Black, Distinguished Engineer Dell EMC, 176 South St., Hopkinton, MA 01748 +1 (508) 293-7953 Mobile: +1 (978) 394-7754 David.Black@dell.com ---------------------------------------------------------------- --_000_CE03DB3D7B45C245BCA0D243277949362FD5E122MX307CL04corpem_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Updating to -04 inline …

 

Thanks, --David

 

From: Black, David
Sent: Wednesday, November 15, 2017 9:46 AM
To: tcpm@ietf.org
Cc: Black, David <david.black@emc.com>
Subject: Comments on draft-ietf-tcpm-alternativebackoff-ecn-03<= /o:p>

 

I volunteered to review this draft in Prague, so in = classic “just before the deadline” IETF style, here are some co= mments.

 

The draft is applicable to use of AQM in general, bu= t seems to limit its focus/analysis to modern AQM mechanisms such as PIE an= d CoDel.  Some broader discussion of older AQM mechanisms would be a g= ood idea, although it may not be necessary to go all the way back to RED.

As part of that, this text at the end of Section 4.1= :

           ([RFC7567] notes the current status=
 of RED as an AQM method.)

should be strengthened to indicate that current usag= e of RED is limited.

[David>] Stil= l the case – both the scope of AQMs considered and the specific langu= age about RED.

 

--Section 3:

 
   This specification describes an update to the congestion =
control
   algorithm of an ECN-capable TCP transport protocol. =
 It allows a TCP
   stack to update the TCP sender response when it receives =
feedback
   indicating reception of a CE-marked packet.  It RECO=
MMENDS that a TCP
   sender multiplies the slow start threshold (ssthresh) by =
0.8 times of
   the FlightSize (with its minimum value set to 2 * SMSS) a=
nd reduces
   the cwnd in congestion avoidance following reception of a=
 TCP segment
   that sets the ECN-Echo flag (defined in [RFC3168]).

 

This text has several problems including:=

        &nbs= p;      - it’s not clear what the update is =

        &nbs= p;      - “allows” is too weak a verb<= o:p>

        &nbs= p;      - “RECOMMENDS” is not an RFC 2= 119 keyword

[David>] Stil= l the case, although the original text has been slightly edited in -04.

 

Attempted rewrite, including additional editorial ch= anges:

 

   This specification updates the congestion control
   algorithm of an ECN-capable TCP transport protocol by cha=
nging the
   the TCP sender response to feedback from the TCP receiver=
 that
   indicates reception of a CE-marked packet, i.e., receipt =
of a packet
   with the ECN-Echo flag (defined in [RFC3168]) set.  The updated
   TCP sender response specification is that the slow
   start threshold (ssthresh) SHOULD be multiplied by 0.8 ti=
mes
   the FlightSize with the result increased to the minimum s=
sthresh
   value of 2 * SMSS if necessary.  The TCP sender also=
 reduces the 
   the cwnd value to that new ssthresh value.

 

In Section 4.3, the text is not clear that the same = cwnd reduction applies to both ECN and packet loss.

[David>] Stil= l the case – it’s not clear whether “cwnd =3D ssthresh= 221; applies to both preceding assignments or just the immediately precedin= g one.

 

Section 5:

 

OLD

   The currently published ECN specification requires that t=
he
   congestion control response to a CE-marked packet is the =
same as the
   response to a dropped packet [RFC3168].  The specification is<=
/o:p>
   currently being updated to allow for specifications that =
do not
   follow this rule [I-D.ECN-exp]=
.  The present specification defines
   such an experiment and has thus been assigned an Experime=
ntal status
   before being proposed as a Standards-Track update.

NEW

   The original ECN specification, RFC 3168 [RFC3168], requi=
red that the
   congestion control response to a CE-marked packet be the =
same as the
   response to a dropped packet [RFC3168].  That requirement has been<=
o:p>
   relaxed by RFC YYYY [I-D.ECN-exp] to enable experimentation with different
   congestion control responses.  The present specifica=
tion is one such
   experiment; if the experiment succeeds, the changed conge=
stion control
   response will be published in a standards track RFC to en=
courage deployment.
[David>] Fixed in -04 w/different text.=

 

In:

 

   To evaluate the benefit, this experiment therefore requir=
es support
   in AQM routers (except to enable an ECN-marking mechanism=
 [RFC3168]=

   [RFC756=
7]) for ECN-marking of packets carrying the ECN Capable

   Transport, ECT(0), codepoint [RFC3168].


 


I don’t understand the parenthetical “(e=
xcept to …)” text – can that just be deleted?


[David>] Stil=
l a concern in -04.


  


 


Thanks, --David


----------------------------------------------------=
------------


David L. Black, Distinguished Engineer

Dell EMC, 176 South St., Hopkinton, MA  01748


+1 (508) 293-7953    Mobile: +=
;1 (978) 394-7754


David.Black@=
dell.com


----------------------------------------------------=
------------


 
--_000_CE03DB3D7B45C245BCA0D243277949362FD5E122MX307CL04corpem_-- From nobody Thu Nov 16 18:13:12 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91665126D73 for ; Thu, 16 Nov 2017 18:13:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=it-uc3m-es.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HPhVawxZXjCz for ; Thu, 16 Nov 2017 18:13:07 -0800 (PST) Received: from mail-pf0-x22f.google.com (mail-pf0-x22f.google.com [IPv6:2607:f8b0:400e:c00::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 428741267BB for ; Thu, 16 Nov 2017 18:13:07 -0800 (PST) Received: by mail-pf0-x22f.google.com with SMTP id a84so802251pfl.0 for ; Thu, 16 Nov 2017 18:13:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=it-uc3m-es.20150623.gappssmtp.com; s=20150623; h=subject:references:to:from:message-id:date:user-agent:mime-version :in-reply-to; bh=zR++36wGlgzDaPz3KmkRQ71ywgXNtQLMuxkHo01mGJ0=; b=GJs5/6on/Yh2/h+87ctyAbFHj0028zmRY5OF9Vhx33k69yPBx78eamnsvTYkCfuriW U6042FNFYseAgqKN9rtqebBTts9QoAH2YdKJrqQ3E7YnyxU0nEMA/61dRQCJ+8nmvDll 9IuyDg9Buusj43tZwOQDq9FJgdPRVXhPcah3X+i4iM2hVEfrg01P37FwREOVK9CXFgzZ Aq2HL4RkM+6CbePh2FyjZ7055atzGJ4u8wpgk5jcsGiphcMdKn09wwxf1t3XZf3hBONA ZvCnBlS6EK2V37+TxUTJl5BLPyRHCdoan5oiCfDKiQrgWnYJoJcKxBdFsEewMm3U59p5 YsIA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:references:to:from:message-id:date :user-agent:mime-version:in-reply-to; bh=zR++36wGlgzDaPz3KmkRQ71ywgXNtQLMuxkHo01mGJ0=; b=afmhGAsyLjjvbRYAwDTSBsMLzBfUomKKoW+Zn31Qzt328YMCJfFtBXnkmxXjTiTdT0 UE9chRlJJQi1Nh8ahFAH4YeIXvUo0kI1VbAhFUis5l+catjgbYap+2QbxTGIEN5x8HdS VR+DMK8XoRdRCRbIwAknta+D8EuT11dAU7/0R9zKIbsGBdDVmYAHQFxxSd4B4DA31rra FvhFt51Noo2mjo5qCHB5sTsrPEO0BfwAoe4RvxD6Hc3E0IHX2/sx6xe+sdwRNpXQ7PXw jSvOWrDRoxpV03qXrBudDJ6zNXA8oQ8xkqshg79hbIMWngkNJ4FUEkKpE9Xjt/3jv6+P ZwFQ== X-Gm-Message-State: AJaThX78hGwVl1ow0GFViZKObWtG7JK7Ze99vje64G7UjC+bXbevROCX oc4q7b1/FYeiu2xXDx814PsgDA== X-Google-Smtp-Source: AGs4zMZOn6vN6+i62Tlp0usnAS9pKPFF3e2b0UDadNqtBrnw+s7SYW3gVB/xvCZrMHxeCukxYdb0Pw== X-Received: by 10.99.52.65 with SMTP id b62mr3588239pga.383.1510884786510; Thu, 16 Nov 2017 18:13:06 -0800 (PST) Received: from dhcp-8910.meeting.ietf.org ([2001:67c:370:128:94b:868d:c80d:5078]) by smtp.gmail.com with ESMTPSA id c73sm5879875pfd.139.2017.11.16.18.13.04 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 16 Nov 2017 18:13:05 -0800 (PST) References: To: tcpm IETF list , "pravb@microsoft.com" , ANNA MARIA MANDALARI From: marcelo bagnulo braun X-Forwarded-Message-Id: Message-ID: <56717d4d-a8b2-7e2e-0884-d00446c57ff0@it.uc3m.es> Date: Fri, 17 Nov 2017 10:13:04 +0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/mixed; boundary="------------CE905D634DD661ECD5C4CAD8" Archived-At: Subject: [tcpm] IW distribution X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Nov 2017 02:13:09 -0000 This is a multi-part message in MIME format. --------------CE905D634DD661ECD5C4CAD8 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Hi, Find attached the detail about the Initial window we measured in the Alexa top 500k that was requested in the meeting. If you need further data, let us know. Regards, marcelo --------------CE905D634DD661ECD5C4CAD8 Content-Type: application/pdf; name="InitialWindow.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="InitialWindow.pdf" JVBERi0xLjMKJcTl8uXrp/Og0MTGCjQgMCBvYmoKPDwgL0xlbmd0aCA1IDAgUiAvRmlsdGVy IC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAG9W8+v3DYOvuuvENDLy6Guftu+9NBgD12gWCwy QA5FD8XbdpvivXTTFNh/v6QlUrTH8mhe5k0DNDYjkfrIj7IoaT7pf+tP+pu3n61+/Kzt8ufz ozbwxxoX9Jgm/ecv+tel2Vb6Xn/krmaY8b+UFCpZVGDf56rmKT8a/bSof9K/FbWjH6JOxsD/ n/U8xmGyY35XT/we/TAZH6Dz0ry+/pYF1B/HtDNORRDNEJIbQ7QanqblEZ6iszFNI457DGgb RuLHMAQ/L29P/BbjNBjnPQwNWtIbDAvRyC7POoGCaZyKAnoTXUpzJUSohVrmYaBDfHYIWKE3 0YWakwhGhlrM4N1obfD4FMw8ATx4AifOzhWg1EWgZRFDVtGmwYQ0ou8Bcn3LZiYb7RgdKJ/s PHo34ZPz0U8RzZBPSLGqjiERKGYQVTt3rCLpHeoM+nacwqLaecdEw0/qzE+kpbJCuIEGGiDe pniJntV1Pqp2zkerSES62bUsWPmn6to6o6QVsoq7nilv+GbLIVU0VM+wSvaLd4OZc+4GHepb wzfg/h3+sJ2zkbKgai6m1cYYt8yRqszhMZOrRMfSaaurJ79Yi/BOGSTEgPzjZzNYS/kl3hr+ 2c2vOryaX2y+5pfQvmNe8Efq23EKiYQ+cq4QrTiEWdWYh7hL9ROLhJ/CNNjlCxCUp+drfKRZ afURiSAeDIB0s4dIIPwjdW2dIfKLx3mmfOUbzKp93xBS4RkaDQ/PpMEmyi9f3xq+2c+vMlLh GbLDQ6+ai2m1McYtc9eaX+wGdlXVVTptdfXkF5sX3imKRX65FAY7UX6Jt4Z/9vNL2GKYZyC0 0E7hESLBnwpXeKnqIz+JzmRViFYcOsgv7lL9xKKaX865wdnlK6/4+RofVfSVRWRH5BfrZg+R YeEfqWvrDJFfrIu9I3V1cIiQCs+QBhqencwAK74882jx1vDNfn6VkQrPkB0autBM+SVEK9/k rpU57AZylehY1CshygO/vD7kLtU7JBL5Zf00uEj5Jd4a/tnPL1IMa9Edh7Co2uLwVJHwUYVb vcQm6jpajHbHxMpPB/nFWoSf6qhooHMa3GRM0k8K1tH1rSzXO9fRwhZHttoiEEL7ufnFILUU +gp5FIuqn4Q+6ihEKz/tfctULqy4S/UTi+o8FMPgS6kH5Qa/rNiEOXZUbbDayiYW1S99US64 vDZ3BrVySWijnKvaqN9aG1ba7Vq3FHdY+3Jxqy7XurCSjUsZGmGK0m6el5o1QDk+ppSwdqcq XUGBn6t0A6Ug1r9Qr0N9arBK+4QCLPq1M7OOadaPz/q7k/7aDMYYp0+P2sWlRf5LnZ71N6cT 1vqnX/XD9+/f6NPv+h8n2Ce4FiZ4/zJMJPEMxThWfW2karsfcYgUylaB1KUML/91elYC3lcv R4efU9jfUBxTSL4VCTA8CWt82Ck4Rld2WzrjOMZ0gG4JHmzVQPB+1A//ewNscPrhlzcYcHj4 kx4e6YH/6WNp+9fP9E//XSQKe/+kT/98GQuKn4j7QIodP2WyQ2EbcTviiOy4m8VkB5wtsiMF YMcik31LAclwWyigrif4Bhq8ZmhK7lkxwbvRLXRdpW6YIEHcpNpoXMlXZ0cXLpO6jPBlu3BM 6hYiJSanJV7niCbYTzmOT0akHuJAEXrBFLSJ0AH5cKMg3ox6sAHZQT13J+r1YjsPExIPsHQQ z892mu9EvAaeTtodx4ZoNw8UndelHewaRdxCu9GcF0LoIJ6/F/G60TWoF0IH9Wx0ZroX9VqI ushn9HF8iHywrhgvA8pHKTDF4Tp1tbxcrbsOJj3cI0u4QXkr9sGCsv2NojUlfZ9e+4vbj67B PuM62OfnZOPlYN3ki9tE1MU+OBQ4jA+xbx5ofnjVqQ+3DtPNJj6fTAf1KFCvTr1ObPvEAywd xLOQtB3fqNsQbx9PF+2MPo4N0c4PhsLzuryDzdiEu+o3mvS87Skz0p0+ubib3YeuwT3bU2Z4 n2LHsvw23Gsh6mLfqI/jQ+wbh47V65d/cXHXPOGRxY3I58aeQoMWE6897fWj2ycfoOmZ+Lzr mSluQr4mok7yHceHyOfvU+PiYcIIG4EHe4lXbK84mEIvL/ZoYf7q1OvE1iCe7yo0xhjNnZZ6 jVh10c7o49gQ7eD0tGMB8eWTHh7PjHjOdiPm2bmnzKD5/LWZ149un3uApmfSczbci3tNRJ3s O44Psc8N013We3joBXvmN/rkwklKpEpDHKFszhjqBrN6sB1h+6Icox3mfqDaqM3hUJigOmdg e/vlOWz6wcE+X6BZHRfq6trDr9XuBG+aZxfApT95bnINJMiu1aY5nMgipI7cinagPYmLlQfs phxvt2wAwak3AloOOOBoEU7l4Jx4Ow+e5dVy5/bwjMtBKW/NbuWxPsKDU6BvYamej3+Aitef 5Igjrv7zvH6sO7PinFrYdD6epDnEwoXfyx/kL8ouOu1oApJHseW0Y5tdCxX3g7UCpB/g7vK6 rsonxXSgRNTL71dSseRWPmuDG8x4FL9l4hmYBhMh6elc2c5wE5qqEDxWtuO4HCs350Q8mTz9 CzgJlfPD6Y26npJ0mth1vkPzIxza92FGRuLFhooRp0fGeDQ7BhfnROVWnkxuH0Gi5FWAtpOj B0Adc6M13Z+vF06Ne5f6g/4h/wDh7bt62ouM46sN795yeL62enSQ48uiEP5a7ubb5UcH5Q3u vJZrE0/6HUSFArvbk9vCDZOiLOK1R/gJBFzwaXZHg1Mc5ui9w2v30BV/ZMCihmUMwVlbuI1i 4GcRcIZ9qTtWYGjZOtjA8JDhpCsLID+aA960rDaLroOui8U0D7MBnwibJGp0lVgttRV2SdTo TlidtcM0wS81qmUS9eDlttUyiYDBTXchZoeXPSTiImh0k3i5K0X2uCtjneFox0OmCqxF1IWV 2gqspLExaLLs/QgMhKtH1TKLGl0lXm5bLbOo0Z0tj/MwzgKxXwQ9eEtLYTPrumAxODsst6oq VhY1ukqs3LbaZVGjO2ENyQ9jWHGZRD14ua2wTBovWI4mwmbQPIv4sqjRVWLmttUyixrdEXOZ dBRmE7/BT0cuT880XXFb7q7q9HycvqIrZSGLljHzqmb1YYDF5jJa1zXO2goY7OCaI3062mPD weBvdrIZepNDgz2M3W/WWdscDVR2yTAGc5nTIA7kDXfEOWwcwzgk/BCy81l0NHdS7ER3Msmi TBrEKRcEZ5XRebXg4CdqKdGOENx6xD/lr3W18P3HD399+PlJv//w8T9//F/XwoF8C3ujK2X5 2uPfAYDeGQplbmRzdHJlYW0KZW5kb2JqCjUgMCBvYmoKMjQ2NwplbmRvYmoKMiAwIG9iago8 PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9SZXNvdXJjZXMgNiAwIFIgL0NvbnRlbnRz IDQgMCBSIC9NZWRpYUJveCBbMCAwIDEwMjQgNzY4XQo+PgplbmRvYmoKNiAwIG9iago8PCAv UHJvY1NldCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9G b250IDw8IC9UVDEgOCAwIFIKL1RUMiA5IDAgUiA+PiA+PgplbmRvYmoKMTEgMCBvYmoKPDwg L0xlbmd0aCAxMiAwIFIgL04gMyAvQWx0ZXJuYXRlIC9EZXZpY2VSR0IgL0ZpbHRlciAvRmxh dGVEZWNvZGUgPj4Kc3RyZWFtCngBnZZ3VFPZFofPvTe90BIiICX0GnoJINI7SBUEUYlJgFAC hoQmdkQFRhQRKVZkVMABR4ciY0UUC4OCYtcJ8hBQxsFRREXl3YxrCe+tNfPemv3HWd/Z57fX 2Wfvfde6AFD8ggTCdFgBgDShWBTu68FcEhPLxPcCGBABDlgBwOFmZgRH+EQC1Py9PZmZqEjG s/buLoBku9ssv1Amc9b/f5EiN0MkBgAKRdU2PH4mF+UClFOzxRky/wTK9JUpMoYxMhahCaKs IuPEr2z2p+Yru8mYlybkoRpZzhm8NJ6Mu1DemiXho4wEoVyYJeBno3wHZb1USZoA5fco09P4 nEwAMBSZX8znJqFsiTJFFBnuifICAAiUxDm8cg6L+TlongB4pmfkigSJSWKmEdeYaeXoyGb6 8bNT+WIxK5TDTeGIeEzP9LQMjjAXgK9vlkUBJVltmWiR7a0c7e1Z1uZo+b/Z3x5+U/09yHr7 VfEm7M+eQYyeWd9s7KwvvRYA9iRamx2zvpVVALRtBkDl4axP7yAA8gUAtN6c8x6GbF6SxOIM JwuL7OxscwGfay4r6Df7n4Jvyr+GOfeZy+77VjumFz+BI0kVM2VF5aanpktEzMwMDpfPZP33 EP/jwDlpzcnDLJyfwBfxhehVUeiUCYSJaLuFPIFYkC5kCoR/1eF/GDYnBxl+nWsUaHVfAH2F OVC4SQfIbz0AQyMDJG4/egJ961sQMQrIvrxorZGvc48yev7n+h8LXIpu4UxBIlPm9gyPZHIl oiwZo9+EbMECEpAHdKAKNIEuMAIsYA0cgDNwA94gAISASBADlgMuSAJpQASyQT7YAApBMdgB doNqcADUgXrQBE6CNnAGXARXwA1wCwyAR0AKhsFLMAHegWkIgvAQFaJBqpAWpA+ZQtYQG1oI eUNBUDgUA8VDiZAQkkD50CaoGCqDqqFDUD30I3Qaughdg/qgB9AgNAb9AX2EEZgC02EN2AC2 gNmwOxwIR8LL4ER4FZwHF8Db4Uq4Fj4Ot8IX4RvwACyFX8KTCEDICAPRRlgIG/FEQpBYJAER IWuRIqQCqUWakA6kG7mNSJFx5AMGh6FhmBgWxhnjh1mM4WJWYdZiSjDVmGOYVkwX5jZmEDOB +YKlYtWxplgnrD92CTYRm40txFZgj2BbsJexA9hh7DscDsfAGeIccH64GFwybjWuBLcP14y7 gOvDDeEm8Xi8Kt4U74IPwXPwYnwhvgp/HH8e348fxr8nkAlaBGuCDyGWICRsJFQQGgjnCP2E EcI0UYGoT3QihhB5xFxiKbGO2EG8SRwmTpMUSYYkF1IkKZm0gVRJaiJdJj0mvSGTyTpkR3IY WUBeT64knyBfJQ+SP1CUKCYUT0ocRULZTjlKuUB5QHlDpVINqG7UWKqYup1aT71EfUp9L0eT M5fzl+PJrZOrkWuV65d7JU+U15d3l18unydfIX9K/qb8uAJRwUDBU4GjsFahRuG0wj2FSUWa opViiGKaYolig+I1xVElvJKBkrcST6lA6bDSJaUhGkLTpXnSuLRNtDraZdowHUc3pPvTk+nF 9B/ovfQJZSVlW+Uo5RzlGuWzylIGwjBg+DNSGaWMk4y7jI/zNOa5z+PP2zavaV7/vCmV+Spu KnyVIpVmlQGVj6pMVW/VFNWdqm2qT9QwaiZqYWrZavvVLquNz6fPd57PnV80/+T8h+qwuol6 uPpq9cPqPeqTGpoavhoZGlUalzTGNRmabprJmuWa5zTHtGhaC7UEWuVa57VeMJWZ7sxUZiWz izmhra7tpy3RPqTdqz2tY6izWGejTrPOE12SLls3Qbdct1N3Qk9LL1gvX69R76E+UZ+tn6S/ R79bf8rA0CDaYItBm8GooYqhv2GeYaPhYyOqkavRKqNaozvGOGO2cYrxPuNbJrCJnUmSSY3J TVPY1N5UYLrPtM8Ma+ZoJjSrNbvHorDcWVmsRtagOcM8yHyjeZv5Kws9i1iLnRbdFl8s7SxT LessH1kpWQVYbbTqsPrD2sSaa11jfceGauNjs86m3ea1rakt33a/7X07ml2w3Ra7TrvP9g72 Ivsm+zEHPYd4h70O99h0dii7hH3VEevo4bjO8YzjByd7J7HTSaffnVnOKc4NzqMLDBfwF9Qt GHLRceG4HHKRLmQujF94cKHUVduV41rr+sxN143ndsRtxN3YPdn9uPsrD0sPkUeLx5Snk+ca zwteiJevV5FXr7eS92Lvau+nPjo+iT6NPhO+dr6rfS/4Yf0C/Xb63fPX8Of61/tPBDgErAno CqQERgRWBz4LMgkSBXUEw8EBwbuCHy/SXyRc1BYCQvxDdoU8CTUMXRX6cxguLDSsJux5uFV4 fnh3BC1iRURDxLtIj8jSyEeLjRZLFndGyUfFRdVHTUV7RZdFS5dYLFmz5EaMWowgpj0WHxsV eyR2cqn30t1Lh+Ps4grj7i4zXJaz7NpyteWpy8+ukF/BWXEqHhsfHd8Q/4kTwqnlTK70X7l3 5QTXk7uH+5LnxivnjfFd+GX8kQSXhLKE0USXxF2JY0muSRVJ4wJPQbXgdbJf8oHkqZSQlKMp M6nRqc1phLT4tNNCJWGKsCtdMz0nvS/DNKMwQ7rKadXuVROiQNGRTChzWWa7mI7+TPVIjCSb JYNZC7Nqst5nR2WfylHMEeb05JrkbssdyfPJ+341ZjV3dWe+dv6G/ME17msOrYXWrlzbuU53 XcG64fW+649tIG1I2fDLRsuNZRvfbore1FGgUbC+YGiz7+bGQrlCUeG9Lc5bDmzFbBVs7d1m s61q25ciXtH1YsviiuJPJdyS699ZfVf53cz2hO29pfal+3fgdgh33N3puvNYmWJZXtnQruBd reXM8qLyt7tX7L5WYVtxYA9pj2SPtDKosr1Kr2pH1afqpOqBGo+a5r3qe7ftndrH29e/321/ 0wGNA8UHPh4UHLx/yPdQa61BbcVh3OGsw8/rouq6v2d/X39E7Ujxkc9HhUelx8KPddU71Nc3 qDeUNsKNksax43HHb/3g9UN7E6vpUDOjufgEOCE58eLH+B/vngw82XmKfarpJ/2f9rbQWopa odbc1om2pDZpe0x73+mA050dzh0tP5v/fPSM9pmas8pnS8+RzhWcmzmfd37yQsaF8YuJF4c6 V3Q+urTk0p2usK7ey4GXr17xuXKp2737/FWXq2euOV07fZ19ve2G/Y3WHruell/sfmnpte9t velws/2W462OvgV95/pd+y/e9rp95Y7/nRsDiwb67i6+e/9e3D3pfd790QepD14/zHo4/Wj9 Y+zjoicKTyqeqj+t/dX412apvfTsoNdgz7OIZ4+GuEMv/5X5r0/DBc+pzytGtEbqR61Hz4z5 jN16sfTF8MuMl9Pjhb8p/rb3ldGrn353+71nYsnE8GvR65k/St6ovjn61vZt52To5NN3ae+m p4req74/9oH9oftj9MeR6exP+E+Vn40/d3wJ/PJ4Jm1m5t/3hPP7CmVuZHN0cmVhbQplbmRv YmoKMTIgMCBvYmoKMjYxMgplbmRvYmoKNyAwIG9iagpbIC9JQ0NCYXNlZCAxMSAwIFIgXQpl bmRvYmoKMTQgMCBvYmoKPDwgL0xlbmd0aCAxNSAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUg Pj4Kc3RyZWFtCngBrVfLbuM2FN3zK2539iIakeJLMNBFgyxaoC2KCMhiMCgCj2fq1vZMJgH6 +z2XFCVSlmIHnRiJSYa8j8NzH3yiP+iJ3t0+S9o+kwyf5y3V+MhaaXLW07cdfQrbpqsPdBqO 1lXLP9YKFhJE8NnjKOYQhzUdgvgD/QWxLLLm7U84FeSTNC1Zq2h7FD915OOO/qs70ruuU9jb faLVz6f9y/7xQA/708cv/9KPUEBr6v6muy7YO5EotkeCxPBP9traypCtPf4eqTWukrW2/cJh XDCqrVpjYHY40E8F219IYDSCBxluJULaKqcNrKq0D0OMjJLGeicAgXWsHLY0tqlMowEDpodx amxbKeWCKY6yGSOZDokow9q6qm0bRbLp/TQ7lU5MJaW9vaTW2Mr2yMCaYZpJSiemkurKSyOd UYJHrWuUh8teNabxhm8dLg9iMr+Htdz5BrAZA9z5UJzAnNz1XNacSePaIGvEoJA47kyQM0N6 HDLr0poYDRqPFhKvJ5yYJ1zw9Yxw1oG9bJBjXqjWROI0rnJOGYHQLSnIMVp7x8HGAesdAquM vrYm4zyij2PlBqyRzlG3FcoGdvdfMRA51BGI72nV/b6mG+kxWNMH6n65EGVMLRh+McrmnW6s rmqOj+/puNYyc7zwVky9vTutgZ+i1cu+H3yD+2FllwbIRGHha//9GP8hVp/7Bey8AqlX8pHI 89E8UkxGgBSjbJYinN0fxDSPv0oRh3seKVIgRd1RIEGPvPgtwfGl9zrBMuD0GpQiYprOTKCk N0L5/0gXIw0xzbXgYqCFWCkDy1syuu4Da4raWNbESqJIjGXs+sRB84ljvlKNMbTgUiBGXuCp FpNcoX1zlUu0klLJwqXI3ZgF3l58J2QXx5DlRrJf7xLuqbglh9yIW+pbheVbopVVuvCobAbK dgJXMCzMX9LEIzQBC+2E0PRrbLpu72MOP8vn97dDN3UjyaLHQV+EfK5a5FxOmzJ0PGkqdB2K BUy4z9qm+aNpbybNo0ZozuX3grkam67itEFZCr1IVDxMk7AFxXwJZ3uzpVHxktmsr1cCjvhW xRbvgt6AVQIpnV9Ch41UwyYeXzbLtzJ2VBGPNL3mItLeTOOwNCpeugjWp8CtAQm15BZjwLtd WxltcvDiSn+OL/zVnvc8DyJ7ajSEkI/+okE/iE//VXT3aCqQNCrpW3TL+JIbKc1md3rZo9Zy p7H78+vj5x2txVhFE/tQyQ01KHvXaFEStJC2crZStdlIlbSIXEtWq0stml8qF3xZWTjCzrAq 5zdrkR4pCD3fWmMcYllq7SzCk3su3+jahXfURW14U1TWaqTnAr+V8VkVia+oItUxRDPGN41H PONeSnG4jjnwl2BRyKMzsJzJVAqI4NehV2o3ytRvUtJcxyPkPTxC+OnEF73Bw3ZOyxKPuP+d cQWtzli0uQWOF4wXmm6hrgZd217NVUQCCleoQXcQOGQqPBvhDejq55xZupdRy12XZYkQMCDE sp9yaPXBqtiW+TQw60uN2jZt/ScNhv7v5Tkt/YA+74NIb4eC94Np8fH+H2WJgnUKZW5kc3Ry ZWFtCmVuZG9iagoxNSAwIG9iagoxMTcxCmVuZG9iagoxMyAwIG9iago8PCAvVHlwZSAvUGFn ZSAvUGFyZW50IDMgMCBSIC9SZXNvdXJjZXMgMTYgMCBSIC9Db250ZW50cyAxNCAwIFIgL01l ZGlhQm94ClswIDAgMTAyNCA3NjhdID4+CmVuZG9iagoxNiAwIG9iago8PCAvUHJvY1NldCBb IC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9U VDEgOCAwIFIKL1RUMiA5IDAgUiA+PiA+PgplbmRvYmoKMTkgMCBvYmoKPDwgL0xlbmd0aCAy MCAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBrVdLb+M2EL7zV8ylgAKs FZLiS5cAbbAFUmC7LSwgh6IH1+vsupDtTeK2+Zv+R53hQy9LthZtDETkiDOc+eapZ/gVnuH2 /lXA+hWE/72ugeNPcKnAGgcvG3jyx4bUR9g3rDwv6c8YRkK8COLdtWLqsORQe/E1fEGxJJLT 8Wfk8vJB6BKMkbDesR8qcOFEfFQ7uK0qiWerJ8ge9tvjdlXD43b/6fAP3OEFcAPVn/C+8voO JLL1DlCif0lWG5NrMNzh/x2U2uaCKxMJdUvQssxLrVFtzxC3jPTvSSA0vAUd3PoIKSOt0qhV rpxf4kpLoY2zDCEwli5HXQpT5LpQCANu63arTZlLab0qFjo7QjIxsSDDGJ5zUwaRpHrcdrgS x1BSOhslldrkJiKD2jTbjqTEMZTEcye0sFoyWpW2kA5NdrLQhdPkdTS5EdOxu6F1jS8QNq0R d2IKG1Sna3pX1phKLa2R1WLQk9ieTJBThEQcOtolGmsVall7EucHHBsPOG/rWcAZi9FLClmK C1nqEDiFza2VmmHq9kOQcpQ7S8lGCessJlY/+0oO2jrMPsqVBUaNsBaqNZPGR3d8hESkVMdE /A2y6uMNLITDxQ38DtVPV7KMQgsVv5pl40YXRuWc8uP/NFwp0TG8Zy0bWvt+f4P4SciO27h4 QfM9ZZMWWIk84Wt8rsILln2OBDw5A6kL9Yh169E4UhSMCFLIstEQoer+yIZ1/GKIWPRzGyI9 pKDaMSzQbVz8nOA4RKsTLA1Ol6BkAdPEM4ASvhHK/xZ0IdMwp6kXXE00nyv9xHIGtOIxsYao tW2NZQKbRNvG5hcOGC8c452qzaEJk3xgdBs8cDaoFcoVs0yCTAgpeiaF2A1V4Nub7yDY2c5X uTbY55uEfup5yWJtRC/FUWHaS5AZqXoW9YeB/jiBLmgI404aWIRDwMQ4wRR8CEPX/TLU8LN6 vrxvpqmFAIMzDs5FWM9liTWXyqbwE0/aMsV9s0AVlp2xaZw1ne1Ic9gjFNXyJaNYDUNXj1tj W/KzSLi42SZhExeTE87OdkjtxVNq033xEowRV8ow4l2512OVQEr8U+iQkrI5ROvrarlShIkq 4JG2cxyRznZubEjtxVOOoPskxlaDhJwyizCg07bMtdJd8AIl8pHDL86853UQPwqULGKCYT2k X3z0p/vvv67WXzYg8zc4nRZ31uROfzc630+IVA79TVNLX+6UCBwFY3HuaRWbf/zmwFHnvj78 9elHbPg07hz2x9PpdCcUada285QGmH6OJvMgGB2czFWFyvHVbN34PN0+bNdJsdfD03Hx8LC8 xaRH+PQ7d0lFfu4RZSV+p8xWUaoZKmb7z9v9263I3xA1D9w7M+3UMZFaFzh48b5XsimfCuxQ GMk4ybbQkw+6EcHQpx9fVut6s9j+Uq/2m+PiMTh388diuXn5e4OQYs/PFnf8Ioh4WQzr8In5 L6lOP/AKZW5kc3RyZWFtCmVuZG9iagoyMCAwIG9iagoxMTAyCmVuZG9iagoxOCAwIG9iago8 PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9SZXNvdXJjZXMgMjEgMCBSIC9Db250ZW50 cyAxOSAwIFIgL01lZGlhQm94ClswIDAgMTAyNCA3NjhdID4+CmVuZG9iagoyMSAwIG9iago8 PCAvUHJvY1NldCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+ IC9Gb250IDw8IC9UVDEgOCAwIFIKL1RUMiA5IDAgUiA+PiA+PgplbmRvYmoKMyAwIG9iago8 PCAvVHlwZSAvUGFnZXMgL01lZGlhQm94IFswIDAgMTAyNCA3NjhdIC9Db3VudCAzIC9LaWRz IFsgMiAwIFIgMTMgMCBSIDE4IDAgUgpdID4+CmVuZG9iagoyMyAwIG9iago8PCAvVHlwZSAv Q2F0YWxvZyAvUGFnZXMgMyAwIFIgPj4KZW5kb2JqCjE3IDAgb2JqClsgMTMgMCBSIC9YWVog MCA3NjggMCBdCmVuZG9iagoyMiAwIG9iagpbIDE4IDAgUiAvWFlaIDAgNzY4IDAgXQplbmRv YmoKMTAgMCBvYmoKWyAyIDAgUiAvWFlaIDAgNzY4IDAgXQplbmRvYmoKOCAwIG9iago8PCAv VHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1ZVR5cGUgL0Jhc2VGb250IC9BVFRNRUkrSGVsdmV0 aWNhLUJvbGQgL0ZvbnREZXNjcmlwdG9yCjI0IDAgUiAvRW5jb2RpbmcgL01hY1JvbWFuRW5j b2RpbmcgL0ZpcnN0Q2hhciAzMiAvTGFzdENoYXIgMTE2IC9XaWR0aHMgWyAyNzgKMzMzIDAg NTU2IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDU1NiA1NTYgNTU2IDU1NiA1NTYgNTU2IDU1 NiA1NTYgNTU2IDU1NgowIDAgMCAwIDU4NCAwIDAgMCAwIDAgMCA2NjcgMCAwIDAgMjc4IDAg MCAwIDAgNzIyIDc3OCAwIDAgMCAwIDYxMSAwIDAgOTQ0CjAgMCAwIDAgMCAwIDAgMCAwIDU1 NiAwIDU1NiAwIDU1NiAwIDYxMSAwIDI3OCAwIDU1NiAwIDAgNjExIDYxMSA2MTEgMCAzODkK NTU2IDMzMyBdID4+CmVuZG9iagoyNCAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3Ig L0ZvbnROYW1lIC9BVFRNRUkrSGVsdmV0aWNhLUJvbGQgL0ZsYWdzIDMyIC9Gb250QkJveApb LTEwMTggLTQ4MSAxNDM2IDExNTldIC9JdGFsaWNBbmdsZSAwIC9Bc2NlbnQgNzcwIC9EZXNj ZW50IC0yMzAgL0NhcEhlaWdodAo3MjAgL1N0ZW1WIDE0OSAvWEhlaWdodCA1MzIgL1N0ZW1I IDEyNCAvQXZnV2lkdGggNjIxIC9NYXhXaWR0aCAxNTAwIC9Gb250RmlsZTIKMjUgMCBSID4+ CmVuZG9iagoyNSAwIG9iago8PCAvTGVuZ3RoIDI2IDAgUiAvTGVuZ3RoMSAxMzAwOCAvRmls dGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHFegl0FFXW/3u19r7v6U53pTsJ2Tt7GgIp QkICIRAChAQTSAjBsCYsZlhEI6DBuOE3gyzjjKAIDKNjExQa+ePHMLgg8H2MOqLIiM4Aohh1 NMoIdPX/VnUIJGfOHM/5e+bf1bfeWu/d97v33Xffq1q+9J4WpEadiERVM5ra5yLp5y9AiNjS vKipPZo2nYHwWHPHck80TaciRG6Y2373omha9jJCys13L1zZ/7z5A4Ts77W2NM2JlqObEOa1 QkY0jXMg9LUuWr4imjZNgHD9wrbm/nLzryBdsqhpRX//6DykPYubFrVE6/t1EA5rb1u2PJrO eAHCOe1LW/rr41rg712EIZdDq5AcLUQyRCAdXMAhe0W5GVFQKpYD/TBpxa9maQu/R3qZ1Nyz iemdYuTPU0//17XzNxOV98nHQj25VF8sgGeYJCEJIRWG8o+U9w2UiKXijwuh+pQQqgYqBxoF lAOUnLJPxr+KNyJTQx8vx24KKd0f2L96DaeDDC5L9yBO51VqJG9eV+huXreuPGm0HFegfAoj Ny5FPiks6fH93h3Co3p8XghGRgOiJ98FKcTL833ucP5s9838kAzzMe5/+n7pvgb0g6/I/b0v 0/1nqHcmv8x9ejSU97hPJocICN72hSjMa91v+R5wv5Kf5H45f4S7JxHyetz7RkNwwL0z/wH3 c+ulnGeTpWCHL4S39bi3i8EB9zPQ/lPrpIJN0QfXRoP29VJHbfulYPH+EPH7A+5FvgT3bHgQ 80p3g2+hu94XcE8dHcLxPe5K8bED7gmJp90VYtc9bj7aUV609VyfxHFWtNtU32H3sGgPcWJt 3uj2+Ca4XdB+6van3Km+me7RySG852D5sGRfeeJTeSHcJ/UhBsCoGCyOBs2JR/BuVIaS8AwU j7fuL08CnvHGHvc6CLbtLx+WHx8ir/AG9/7E8sT1QHlA8UDTQngqn8puZuew09hsNoVNYhNY jo1lY1iTzCDTyTQylUwhk8kYGSUjZEhmCkU+4VNETTIxoMsYMZR4p6S4jhDjcIM7IrCMQONR iEEPWjqKbEWGUfrA2JJ/cWuUMhtLUm7/bLejKTbsCj5VMaU2uNdVF8wSIxFX3R3l/y/RlmJ4 uqJ65f7qlVdrSlu8pY3e0hagxuAjHa22YOdsj2ff1ZVigSdIJjTObm4Vw6aW4EpvS0nwqrfE s69aem5IcY1YXO0t2YdqSqfW7qvhW0p6qvnqUm9TSd3+qtLyiYP6enigr/LSf9FXqdhYudhX lfTckL4misVVYl8Txb4min1V8VVSXykppfOmFCP6KNLTx1AavRm5qGLkQihyDugjMRSmRL6m zyBFJBzpJcG64TiRLtzAJvQSYtFBdB9YnHfQXixHXtSLs9CH2IWT0QdIQB+hvyEHegRth3sp uoJ/AEvzOR4GdfLQWvRb9EykHbWjIriuYBqZUQH6PLI68lbkR1SMutFxzGIjdkUOoQzUBdc2 9DRWEbMj+5ANTUC/AMu+Fp1A5yI9kS+g/Tx0CetxBjUi8ldQMBpyAuhhtBcdxBz24mR8V+QS 5NuAx3q0N1IZ6YDnvoZaGWgiWg29fYrdOAGn4G34Y7I30hl5HMbmhLJpqBmuRegBtAU9jV6U as2mnLQZ2i9BFVD2ODqFrqBvwegm4WK8gvgL+QX5DTWC2hY5DnxMg/4a0TOYBFR8eBqeg9vx i/hl/Cf8A5FPNJEB8i9UO7UDeJuGNqAd6Ah6E72L/oquol50HYUxBTyNwpPwavwbeO5vRDbR QKwhHiXOEV+TmeTHFEs9Qj9IH45Qkb9ErgPPsSgZjYCZPhnVoha45qLF6B50P1qPWbQZ7UN/ Am4voAtYgXU4A2fiMjwV34UX4JXoSbwTv4rP44v4Mv4cuDMSbsJLZBAd0N9a4mHiRaKHOET0 knpyObmGPEp+TP5AmakG6ihcF+g0ejnjZCrYycKvhAuRtMjGyDaQiwUuH0pCaWgUpgDFRWg9 SPJhwOxptBP9Hv0B9aCeyA0cQMfRn4GvT9HX6BpIzAkXh7NwAa7Ck4HDhXgRvh9vAQ734gPA 5WF8GJ3FZ/ENuARkJ+REGnEX0USshGsb2kK8K+GjIjlyGJlGVpBTIv8gXyT3kd9S8dQMagm1 muqmtlDP0E56JD2dnkG305voA/RJ+n36a7qPcTFdzE7mZeZdVsbmsFtYAccBLx4cj15Gr4HW PUW2Q9qHxuD1INUadAq0txe9jm6gH9FRtBu7kECK0kyI7EChyAaQ5hH0CnkvKkRPEr8kxkeK yD2kHGdFrkFbfpDXwMUnJw1LTIj3eeM4jzvW5Yxx2G1Wi9lkNOh1Wo1apVTIZSxDUySBUWqp d2yjJ5jQGKQSvOXlaWLa2wQZTXdkNAY9kDV2cJ2gR3yuCYoG1eSh5twhNfloTX6gJtZ5ClFh Wqqn1OsJni7xekJ4xuRaiD9W4q3zBHuleKUU3yjF1RDnOHjAU2prLfEEcaOnNDi2o7W7tLEk LRUf4mExUKSlokMI8UgpNhxEY5rWgHFFY8QapUGHt6Q0aPdCHMrI+NKmOcGqybWlJTEcV5eW GsRjmr2zg8hbHNSm9D8uPgdGML66FvpOS50XBP7RI6o53jmPhHg0u1GMNdXXBsmmuiDRKPah TwlavSVB66pLttvJW7HSR+8oDBLxY5tauscG+cZHAHQx2Simmh6FVMUUDzRLPFhXG8QPAnMi ExLv0VFEl4n4xvmeoNxb7G3tnt8ImKOq2h4H7yj1NpbUBVF1bY+dt0uJtNRDtvtGcADKobTR aaPFcARnuy8afrYumv/OUTG03Xf8EwgrqgdwwWLf3nHAZtDTDJ0AFsBrgXhrKUDdzQUAH/zq MIxyHvAzJkiAKpHxQTp+XFOwc0o/G02tJf3MzS/pkdsd0rpUXAf1G7t1w0GAUF/n9XR/j0Cy 3t4vB+c09ecw8brvkVgoyn9AhYK46Va8Q1w/42FJarV5W0XxdUiihrTXVnpHBqTFdSsNHM7U ihCSV9Xuw/jxuhCOPBhCJa5DsMCQs2ZCcYqocPNKoDtIpKZCRjIHMeBgLHQ0VtQMT7ene9yc bs9YTyuoFBUvhVDQ0l2XAYBNqQVY0NRaLsjXxQxEW+rqhkM76WI78AhU766DFub3twChlJUR hkoZqRUwqoSq2sm1wc6SmCBfUgeggxIfraoNHgX9rauDWv4BToHjNfNs/TxnAs/+ZCjPirYC bk0nNFHX3S22OaXWywWPdnfHdIuzLpoGD3loBt+fEUJiFRHhEO6sgmch8HIxEuSclwO26kRM s0GBbykQuPX/HuHcAb7hyTzgNldCOP9nQrjgpyAc+EkIDx/gdBDCI4Dn4SLChf85hEcOQnjU v0e4aIBvYJIHboskhEf/TAgX/xSEx/wkhEsGOB2EcCnwXCIiPPY/h3DZIITL/z3C4wb4BibH A7fjJIQrfiaEJ/wUhCt/EsITBzgdhPAk4HmiiHDVfw7hyYMQrv73CE8Z4BuYnArcTpEQnvYz IVzzUxCe/pMQrh3gdBDCdcBzrYjwjAGE+ZggutMOdw4xu+hnN8x3DYK8/t9D3jAwEOB6JrDf IEE+62eCvPGnQN70kyCfPcDpIMibgefZIuRz/j9C3nIH5Ih+E20jAnBksRd9Si1DCIgHerw/ zIPwFon5Of3pkdQLyErXoOfh2fXQxmYmgFqovyOOfQzFQp0RQGVAGZBXDHUehvhaiHeJaaA1 pAvSy6BsL+yOERyaiOd6cDiHGNiJIOSBPWP0OIWU8v/VjYI9KAP7Qhm4RgqkhGfVA9U0AzEx ou1PiSeQ0Z8eGW5FkVGKmQbStyMiZxYgK5ANyA7kAEIoBnbQcJYAe1I38Br95aActBh34E8I E7GRNJGryE+oRmo77aAfp88xKiaHuZd5hyXYv8kekvXJNygIRZ7ilNKpXKo8o3Kotqu+gJ3y NoRg33YMTnZZNIrnaMYF+yGKdZFIQVMukiQccoZ1YWSXyfdyCwvhsGhiX2FluHCi7ofCSl24 EBUVhgtFyvRn6zl9ItA26rnQzdP0seujQlT1jT+IvBKwG0WEgz4CCMrRGD6OoEHydewwuUJp tTpk7XInIimSwu3IrlC2cw9EO6q8FAisybg3w6br+x6OY0ouo8qi8FdFgUCm38jpSS8Jd+5T HJi8aQqLk4X36SNCd7iKCN48J1yAPuFHLYFzGBJORbfzXyrUMq1CJ7cqbEq73BGQB1Tj5eNV tWiGeoau1lRnq7PPs82zr9RuNm2NfUHxonKPdrfuWduz9sOKw8pD2gO2A/YTmnPoA+0Hji/U X2g/M33m/FF7zZkix3Kl3GjDVp3NmKRJsCXFTrdvMu0yqbpxt4MwmC0WPcW63TJEme0azBrs GoI1OJUkZXYqacrsUjCswQWbUb1LoZLpnUq1TG/X6GR6m9bIGmxaE2W2aa1ui03rcFvsmhi3 xamMdVtcCovZIGMpRu+WM3Qs5VJj5KDsKoKMoZROZwg/z2sMLpdCZzRZKZtWa7OJWWaD3a5x Oe02rUapkOndGgUFfYbwroPA0yEL8ARx3gKdPGh3ukibggPp6P/b7fbcXWZL0RXqwpIYKlGR tbCvEKReqIsGRYVYb7AGutJT1uheZ62FXek2MWYt1El/qVA75NelKywUKdOPly5pwEYvyWUb vfnZxmxSItZLZgN5oQCIaJ68a6Kw6OSkU2mnFr25aNf8N+efSDsxGVIL3lywE3JOEgXYJ5zH vj34l8IikfYI5/cI7XijSKIO8pHz1DD6ZZi5VnQPX2fFiexZLVmgztfmGwvMFeoSbYlxknmL +aDxVfMbxrfNaiuawnSgDoZimF3MW1pSxltpgter6XUa5TrNbp3JbyLaTZ2mjabtpqDpjOkb E2uyl9km6jqO295rWHKxslfXi4p6i3oz/Ugc4lJkyM4y5OoSvHEMGAS9juA8hF5n4HBz9f33 T5p0//3V+PKFC8JV4eqFC9iMTwvXsPw6Zm7eFK4TvcIqYStc98JJyd1wPQTqjeH0B5EsvRcs URYfm0QHaEKNT8kplUq5H8kLPCq/qlEVVFEqbZkmytXFU8BSUd9pYKnBmJuXL1254tx9vCuv Ji/eqOwVzpNXjjEqYyBxdKLxeg15BfrhYS5x9D54U7KBb2JNmIphnW0GknLZscU2FzdSs5m7 HZvxJmKLYxdWIrvOnmPPdVJOO0VQsVoFb6Rjd3CqWCdFatj9lmVuTGiatfe6d+s43M51chu5 7VyQO8N9w7GctyzuNoJ9vYGArq9Xbw2gonBR718hghsy/Q1L0JJbvOcAnCzDcpDmsiiziWW0 GCYaZ+ZKikb+/fXhdXNnrc2IoYWrbOFS7L2MdY1FG5cumBRDrLzpfvqBJ599bOSsJfWrmgpW HVr6YeSdHWumzJ08oSTthmg+MMoDnRHH7UcdB+QevCUO+0NYxhemWmPj45U/tKkuqAiVKtXI x9IUn6qOj2d1bRy7Lkn1qKXZei9qTtqt8/v9xHZ/0H/G/42f8meVZd4eXW9f+LKu971eQyBD 0hMIG8KBkWDwTutEpWnAS7DJasnOysvNSUzwiuLKFYfLWMXR5o/C2VlwpAWDzxKPtgivJzEh EU905jw8dc3y4scfyZ/VVNsyixB+oDhvRcG29jORCf6cxHGLIteFUyuKWHxkemDesoVP+GNO EfbkzimtnQsWNk0rz847+0pnbb5pTMtLIeHzEwteFOdOHsg/g94B654aPcGXalTlqnL1E6rz KtqtwrXsKvZhdiu7h6Vp9Vj1OvX7akqvxhSNSJVcrcAypVpBqlRq9fcGhmEZFUsp1NcQHcIT eDmpUrO0ityvOIyHA95y/Lv9DCirhFHle32FF8OF+gAIv09cZwIBDCaGAssCtiRqN2BiYS9o L5eLOX02p8dUxk7h8/Axwoz5nUKpsAkXCG/hgh/J9psdxNLw45JMz4FMN8M6OpO3aLTaHQaD wajWHDPKeavVZdihpeAobhpvJ3mXWl9gNKgRs86h/RNq0xQ4dnviyjjdRHGCX6y8GIYJDtwF LoL0YJqD+MKBvuMij8Ai8BcLAopKDGQUbwSVJEFu2aKWIi7Ol4ir9Y3189taF+ckjImLoLmk O/xSTnH8qLqXsUoQhMj/Cj9o8fqGlk1L2raqbaPhEPZb4U8pGuu3n50Qjn98SrJp56hkOgS+ SCrYtHET1BNS69X1qVR+wnQjkapXEGYZb7PFJur5JNpD8LFqhUrdlnov3RZjvqhqi9mti/PH Ee1xnXEb47bHBePOxH0Tx8all6X149+wZOLFyvAlXS9MQRBCbwD+MMregD6gAxOCG1ADiqqn NAnNWFRTcTaKqmnoV0l9zi1dteKZ9zXNWnTvjHEFU/GTMekNj4zwqHIfnfHHa99GhK/Wtmjs 5aNOPPr2N1pc86snlt7flTr6SWKpN7nk6Zo9RcOF66dOCm9f2o9jdrUeWj2v839fAFnCWxSq AGSpAe/FZyHM5DWaRKodaopVKUFs7BvqZWiPDswgcUaFVboy7e3J1xcdU1EY3AncgBmCZQgz ZzAa8jkjRxXwFytHzhY+UH/3m/nhNIpCVKhIOPJCl7BqDX4IP4/puzGYXrAP56h4sA9KeBuS gWbzllY3dmg0soQETypvgtXCo3ZYm5NCeNYBep1Lo2/OgChvUa5z7dF5/V5iuzfoPeP9xkt5 M8v8t3kLg93TibdbZuF0IP04sAmAD8DNmH15+ek4NwcUCmY/w8ZiUCtvHJF7Zx08s2327LYl jY1LhA/aFswr+urDD78qmrdgofCP7767joubaqbPmjW9pgkP7+hY0LZsWdvdb2SNfa7stxcu /LbsucLCN1YdFCIYHySy58yZVNPUVCPagpGR96k0+gB4pMloBp8X6zXb+eRkhZcnaI2eV6hj NeaLnnWMpk19b2Ibs0fn9DuJTudG53Zn0HnG+Y2TcaaWpdweK+gWeJKXDKKFf12aRKKOZfoN KNtjtOh1LCFOFU6cS6BHYD+8cb5cqt8SsozZZMkeidVnccXqsWM6hb3PCTeN2KmoHfdYwC1L TK2650Whj8jKaVo2Z1xO9bxF1CbMCR/tEv4h/BgU9v3xEF/1dM3zmQ7/159eiRu1dfXGJH7r Aw9Ebb818jG1j5oJPv8CPlDOYPBQCSrOQNMMSZAUEWfAGMELBEwRDHwTQGCKoQ8jgjwM659D RthZ2V5OdJtSJl7UXbajIltlOBCAPxgM8IcC4C5RYChkYCkgtEkR0eTLsR7+mNp3Yy45/uYB ahv+rcBjC7x3S8JWYRTo/PPgsxPgsytRhvjlwKvAoBxVwJcDjC6E8Bn0qrRHqYACJQxEDEl4 r1iR4s8EEzlwUR/f7CNOhXNI/43nqAB1RHgzgoQHhWvQMMh4PSx+B+gL0pN+Xk8R8IqZYsAb pOClt51mXoXvDTicu2+ltCOAkUmOIaxiReDPJWE9l4gPCP+Ds7bSx2DbQsD7MkSX0K9LO6fp fIaMmE4QBMNiNhlQJAhWpiAxAW++FQrMyIhE2qFiZYlyu1J1lKu+1Ye46agMi/YW+oFNR6Eh IEGo61oDcwPcGQ761Ys3vBmPISqwWzgV3iV8Ssymj924QdHXR1HWG58DEzCqlshZ+gv6a0BI 3FmN5hMtKovBbrI7NjtoerTTSipHa+VOIt9pjHHEyvKNdlfsBe5qTXS0vSIj+kCvtGgXSgu1 z5CbQ8DcM5sM2T6W4WAl1uvAIfFYLXpMXjh79uDBc+cOEscu7BaOC8d3f/LJblyIC3dfCI86 jzU//hNrhW9//FH4dtW7L7zwLn4Mbzr5wgsnhQWkSvRBOLBxJ0EsLCrgVZhJZglKJgdRoBCu 7SHiYR2t5eUM7NCOcvcsjXLYFx7w1IvEvZkEDIBDnRTKhLeFUvqYcOPGGOoIvG3DsKdEbBu0 b8Dz+W8VFE3LVYxuPFVKl6s2UF10t2qDukv7kO5D6iz9kep9nd4COw0TbVdbtTSIDjZuMAFY lpbJ5axaprFpCDkptsIwMiWjZw1WhVVpU60kV1IddAfToX+VfJV6mX6FOUGeoN6g32A+JD+k 3qffZz4nP6cu05cZdy05g5pGT2em6+eR86i59FymVTlXrxS5sqssuleUh/WXlJf01xTfK7/T K5UKwq6IN8hZud5A2A3xsM8mNCxB6ilarjDQCBxslVImkytJBc2owP1EWE+C56ojNYQJUFS8 hkOIhalMAGlw6IDBbmy5BDh2TNT1wZy9eDFsj+56xB0O/PsDG+hgYSFshCCLFlf8iuoVq3TH u3S3YuKqsmQJaoAszSCCAnBajNZ8IyfdMKckOYxb/pScsguXvpSW9joOCE3CuZ6cnB7hb8JM +tjNl69eJifD/W/ktOujyJnYJfz95rPiTBV1eQTYqQJqFqyBATQcvLNJI4jcvJX4YUx9EIsT vruc/JlXo6bhTb7RkQLvQ6mE9IT0ZDGDilHGxVhSh7vZZIUyNUs53FiJKtOH5yaPSnAUOipj 0mSVufYRhf8H20EHy/EfUL/690kT4KI+cPrSJWkOwAHA6Sgukm2LYpQiAgAurAZrMVht0U5n 5eUn3vJhB1x2cF31Jmsstpq5dJwo2feEXNFlMBIfx+T7+RmJxZOH1/+afHFS3MiGGS3JsQqh V14GAO5/5BGCdDqFt8G7HFFZv/xXf/z1tOfbCYPeLFfprInV40YvfOJrhdaRPyY7K77oifqN ZWWvC6qc8QXD1Mnc8Hg+Lfd3vz4xI9OM3xNxJFAZrOU5gKMLZsRivnSrZY+F6HLiceZaQ6th hWKlIWR+0/iWWWYjGMr1DuWLdbAWjUKlO6jymZSxujytG+XFWl0OjyzPand7urjyiYPsBazn IlqSx1hUGA0lJQGQEqJ+kznq7edzAAPnIXJ1CJxFKyZ1Ms7fsjHX6cx+bM5UOfYqpj4k/CiA 3TD84zSmbUIMcXhkZvETE+5bMW7Dwpq1yw+Dx4vtuCD0Od4p6UgG7GOGw9gYkGQc+j0/bqys y7QZb1VQDJbTjI52VNBjdeM8D+EHtV1uBWkhrUaL0Voum2CZYB3nqLfUW2c4zuOPqM9dn3mu eXTj8VjdBnqdjiJCeBOfPUkzS9OmITWaGMYXx7FWQ2qM0kIScWSedXVcbKOqE3ZJDh/h1myK tXt9WwaQCV8EU9oAtvRibwasiYDOaUBG2gaBRYct85IGBFu7dOzNs1jhYjm4SX6AiJA3Dul1 aATGZxZp8GF29V0bzpXxRiURtjBNI6bU5sdasVc549GbZ4Rj2H3JRC6/d/6Se67OXdzUWfHY zuKkrBh/05xnsAqn4xj4rE7CqVgopmYCTmrw5vzg3ei6Y2Gxpn3+DNbAxKt94MkV8R6nJ9Wm 9RNugzs+0Z9qdGQ518ekyfNS7ZlZMLbSQdNEHwj3XQS5h0+L7jOMTi/5m75b+wJJ5AYYXC6n h62c5Ov0D3KkOG9Ehy7HkJ1PHOlet/ipQKxn+FPKka08NpetEnb9WfinBuepYtIXbcuJS8qY tuGdG99+fNcXm5//9bOPVSyeNb6bXGpPWfabGz+8uyC087ksS+LdxU+PHesdjRNvfocrpKNO Ar4hQXgvfRIsCYtG8HET0ARcj+rhc5l9YCIYViGtNUwiZmGJ6eGqosOTDgGlM7mioqLK6GZV XHxF2itcACdLIgo+PRJ+ceM1cR1bC+vYIjgDVKJv+B6eGEu/R1wiKK1MIZ9GP0w/IXtc/jr9 tuxD9oLsvFwpY2xMBpkBBzZpTD5ZwEwgy5kGso6ZT85jVlAbqM3kJvZ35EvUXmYPe4AMUW/A auKoYMazNfQGap3sOP2WTFxY/sqekylpuVxcj5RK+K6OhSh896EgPCR50kBRUAReHUPIFRTJ KFgFfLXpUGNFIlJ6lH4lr6SUdpW6i6v6uyjUmw3S0edXoptTJLofGM4juiqlLWnF5NpVdceR AfICAW2XTlbI6sSVFzR4CbgmeszJ4TscVs+txTbcjJuEdfhRYY9wo0O4Qh+5eRlvE2aF5+B3 Vgu/E21RF2DVBHpogbOqCj6NhtOgeJyPa5WtSgYbdIzcB5NBQymsdJ5VSzjsek2i1m6zv3ZL PJXh47edFOC1Vzo1FbcPZnAD+ndpYpQzizvSRLL7rHDemtzxZJ5TuIiN+Zm1XfOo+n2nw3HE 5pr0qatHt4R7KP6ZqfHFotKQqBhs5dNUC8jSCifVlfwwK4llqg2qDTrSqrZp56pJ2mczsUqf RmmzyYg8q8Mhy9Pb7Y4Q7tg/MP2ldQQmxIAjBUdkS5f0Tw1pxfAhzoNyc8S7GRNXH3pozZqu rjVEuvCl8BlcX2ITmDk7NoXfPdGzc+e+fTt39swVfo+nffMlniHs+pLgAcs1whRqGzUD5rQH jeeTrEaZwukgfB7WwSh8RqVdI1Pb1Hk6RxzjjnHbEu12Lm4LV9Vvu2HyikD2StYJzvKKgF29 tD9B0k6332LnGkRT5I2DA5gBUMnlyx749fDYlsLqX6xxYbkQPrW2JiNNuIz16Tmz1hHPHPvl xBWvVaaFthIB4bLwtfCJ8M5oX2n4LfrrHWVJ4wDm6JwhblD18M5g/CFE4rL9hFbNhHAZbzey akal8BB+gidIMzgyhEaZqLKb4Ah3zn6uam7UCIWPvxd1XhpAZ0Xe3xOnqsWqB5MK+/TbGkD8 VWmMSVa/MIITPsW64syqTqoeYzgKJNqL1oWvUcWvLRo2RuSJANl/BN9+NaEUOHO4j58k1zEJ djUppzilskIxTlnGlXjKk86SMlecR6WgLCmUxZGaamCp1GHK1FStWeFxWSrjWHMaWxnvSFch V6U2DVWm2NPS71gx+2ARkHDvAz8bJhTAH1WS8GndaZh0mf6ZDTNh1y5ZSul0LB6WUGkvTFk5 aTUF/RGXDPFkjPF6EnIxbpbH5j4xtXnYMCFyaMKE3rOnMDYKf2fsGUsaJiUnR/ZOm/qPm0Lk e/gQrn6CJ5CV5bfbR6aXlnRu/vC5t/I9w4cnZlqsBcMmV69+9vSHe0iYCBiZI18QK+hWmKfj D+hStW5Vqv5VvARRuJ63sKiewYwNRKNl+ih5IvovkBOcw2v2c42ieN4TD7f6CkX5fAVH6nDA 1VsE6gYvN6Tz2GyzVx/1mcwsA2PTm7dgx759cdPVLk3X2+P95KKT2C+cORk+Oga8x7/QbGXm XOIZkI/0i4hfLP6rH+wmYP5S4AkYkQnehYkWxgZvmhzSTohDw0CqmSgL5YMvWYLGonL4sHgC fL05GVWjKfCWrAZNhxYwvM/CUvOM+D5t9NSplaXjUspbFna0LJ/X3JRW3LZwjljr1u9RiGwB 2gMUAnoL6AOgK0D/hIqwgcY2oGFABUDlQLVArUArgDYAbQHaAxQCegvoA6ArQP8EpZQB2YCG ARUAlQPVArUCrQDaEOn/QX9oII7BIgxOi+jcWe4dkvYPSWcOSWcNSWcPScN51aD2c4ek4Zx1 UHn+kDSMbVA5vEkdlB41JF06JC2ZlTvGP3FI+aQh6alD0qLs78SnaUi6eUha0sE7+rt7SPm8 IekFQ9KLh6TbhqTbh6SXDknDG+ZB/C4X0/8XwfXkxAplbmRzdHJlYW0KZW5kb2JqCjI2IDAg b2JqCjg2NDQKZW5kb2JqCjkgMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVU eXBlIC9CYXNlRm9udCAvV1VPWlBMK0hlbHZldGljYS1MaWdodCAvRm9udERlc2NyaXB0b3IK MjcgMCBSIC9FbmNvZGluZyAvTWFjUm9tYW5FbmNvZGluZyAvRmlyc3RDaGFyIDMyIC9MYXN0 Q2hhciAyMDkgL1dpZHRocyBbIDI3OAowIDAgMCAwIDg4OSAwIDAgMCAwIDAgMCAyNzggMzMz IDI3OCAyNzggNTU2IDU1NiA1NTYgNTU2IDU1NiA1NTYgNTU2IDU1NiA1NTYKNTU2IDAgMjc4 IDAgMCA2NjAgMCAwIDY2NyAwIDcyMiAwIDAgNTU2IDAgMCAyNzggMCAwIDAgODMzIDAgNzc4 IDYxMSAwIDAgNjExCjAgMCAwIDg4OSAwIDAgMCAwIDAgMCAwIDUwMCAwIDU1NiA2MTEgNTU2 IDYxMSA1NTYgMjc4IDYxMSA1NTYgMjIyIDAgMCAyMjIKMCA1NTYgNTU2IDYxMSAwIDMzMyA1 MDAgMjc4IDU1NiA1MDAgNzIyIDUwMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMAow IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwCjAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDEwMDAKXSA+PgplbmRvYmoK MjcgMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9Gb250TmFtZSAvV1VPWlBMK0hl bHZldGljYS1MaWdodCAvRmxhZ3MgMzIgL0ZvbnRCQm94ClstNDUzIC0zNTUgMTM0NSAxMjA2 XSAvSXRhbGljQW5nbGUgMCAvQXNjZW50IDc3MCAvRGVzY2VudCAtMjMwIC9DYXBIZWlnaHQK NzE4IC9TdGVtViA2OCAvWEhlaWdodCA1MjQgL1N0ZW1IIDU4IC9BdmdXaWR0aCA1OTcgL01h eFdpZHRoIDE0NDUgL0ZvbnRGaWxlMgoyOCAwIFIgPj4KZW5kb2JqCjI4IDAgb2JqCjw8IC9M ZW5ndGggMjkgMCBSIC9MZW5ndGgxIDExNDEyIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0 cmVhbQp4Ae1aeWxb933//R4vnaQoXiIpUSSfSIqnKJ6iRFGkLuuyTsuWbCeOY8tHHCde6qRJ mrZemx5x0i5og7ZYmmIt2iZI29RbkVSxuqZNu60DttYrMjQYtqxr0i1D06DIsj9mRNQ+3/ce D1nB1gHDhgGT8Ph+7/t+7/f73td7F++6e4O1sEtMxYonzh+/wKQ/3euM8QdO3HPRLV8Ll3Ae PXXh9Hnl+oeMqddP337fKfm68S8Y83ac2Th+Ur5m7+CcOQOAfM1TOPecOX/xXvla58b5R7ff eUK530jPnTp//F5lf/a3uHbfcfz8Bs74i9yOn94Ld77nonTJwq/h/PELd20o8/ka8A3svtYD hFkJ9mXWyO5mGumKMTNjAnAHvVyCcN35tMv79jFD/l+ZXQW6GXtefPMHdP6rA3/5ufJQ+QlN Sf0cLhvxoPyHdVXCjoMxzVdw/0VNSVlbuY1TYpM1hflVpmUm1hLmLzArW2Illma9rBO328Mv MBs7ypZ3QTrYnDKnXZrDXmBGdgyTSnWPtbP3sZNsniWrC5nYHdKcGsTMTt0AsbAMizKR2Zmy 9FUM1cwY3mRt7on3n+0YJ4Q3GQuzqyBGYAJhr5IHL2BwlE2zHAsyEM0agL0a9NRDgCsHHofZ JDhemSQA+12TrkIMGqajjeRdSR4JNsjybBwLm3ZSrEHQMr1wlemEa+CdGf+DwDwB/E9hTh7r 1c+jOQyrRWY3WePi2h9y/sn1Tb7zkU023vU8JKY6dnN0k/GI2z1xdvwKvwUXQgSAkAcjVcQ9 eUXlm1xeE9fdl92Xp09edk+6zxw/eUXtk864sXF5vc99ha2sncXvgTXPleK6szrcWF8fxDpq WgePYPrldaxwm7ICzhKobxuTNJFZ9xWVf3Ftae3KpXHnleL4utPjcU9c+d7i2pXvjTs96+uY pa1iCoxJLDLOOuCsDeF+g7zKytqVovMKW798mdZcWRM9Vy5dvuy8DDqU6032vRsAnN0IKCoA cAJrgBMTm/zSIhbDSfQ4CSB6RA/wXB/H3o2R2ZW1CWDqIUyb/mOWN1cJwdwWoN8ssbz1v4nl +t+G5YbfiuVtVUx3sdwInNuI5e3/iyw3/T/L/6e1vJ7lcDX8bRxW+Pv72BjOp/h+1iudrTvb QoQFcNyLI47Di6MHh4gjiGMIR4TGNF94jC0KjzOD8FNp7gxgZ1UlNq9qYmnhBJvHEcYeetoP z8RwvYBzH84DOEcx36yMp9gr8P+vsCXAp3D4aS7wmsWzMWke4BgbsZcB53Y5qsE/UzxkiPZa fgfObvZHCoSgldhGY5ALB69B9NKxBnjRJtaMp1qZnhlYG+4apTkUSeCLcSCm4s8i/YJX0p8N vx0IMvRH8YD+nPKp+kuhsIu5WDdw8TAvE1kP80l3/fgNIOoFcQ4hKIEDLMb6WFy6+3/pp19C 9iA7yDt4ka/xe/ineFmIC19ShVR3qV5WH1A/ovFrvqp5XavXTmm/rH1FJ+hu073UEG/4g4Y3 GlnjM00DTZ9sdjQ/1qJu+XqruXWt9YHW1/SL+pcNDsNHDa+1TbZdbPtu23VjC/bR0F78beE7 kJ8WcmuBvI7DjfVtMh2OtjZEyms46LrteYhc9TauMDJgRGF0Yo3uOp/HMs2FdQUgEEBgGgmA yWpsgTCKURNG8X6jx+jhHpvJqDMFdIFsgL9dbuFfLn/96R89/cjTT7ueflr4zva4cHmn/BIv 42dnJ7qzQ7iO7bylSgvfhwYF2BBbYCvss1tsFqgnmDq8BeGrkPjQyI6RQRppMBIxquCaJdSy dbguE2C5DrBIgEUFeSKviQBNBNgClQJ0l7bIYxTFCPdBl4sJoDCL0SRG8X6ecAkWs14QvTEh nSoINq8e1y4hmSjgOibwuntJzNUpcFGZZxJ5UviUNx+x2yN5r3c46nBG8x5boMvY7gpYrDgb uwLlf3JEh73efNThiMqTvmoNuNqNrl4rzkajKzCc4p9I8dnK7cr0XDumWDAFi0lTuVBdJR91 Yton8TDdqS5WnhF+QqrCTu28l32TrcG+e4gdKhh8jbsNxKoGYhVxjBhhM2t16QIf5mI6+c2g u8XqnXZF0k2+hk6Xd43W62W/5D4uYiGLnEeqwkzmM8fC4KRFTHPfNhcLBXl//NL+KtqfnA7q iqp0FU2U9kdOiv2T6aTl1PQatmJ8Z3vnq9wtvIrHOilV5Qx77VbZ1sI6cBZNyfTArwYOq4bx GOQc2HlLUEt6F2Q3bbIQrIEsIgTr8ME6fH1EbcUynHWWYSZ+mOuUy00At6xcZmgLagzojRsj g2QZHLpR0QHSFVXCpa7XI/7DVv/EQHrMbzD2jiVzEz0tz6Tm0p52rTl9dHr6prS5PXkzP5I7 fzCVXrswOH7nfHhg7Q7+eHdmaulgcPLSrYODJz48PXZpQ+blvWDKHaCrieW2IDbVLl7qCFVd He6NBGiU7UAA8xT5iOmCKps0ijz2XG+p39OQLAotIVVTZzq6PYI58L+CCntE2bEt1DRq2CaZ D0xH2m0Lm6slCyVD2mQ28NPWV5GKhrbU1OHQQYAOWcGsEu804F2vxDsT7IxsCfxS6/Qqncfi KfBsQUP2Rjy1Tbjzq6n0UrazO1kaH3UY3Y42zh8qJ7nZ61uYG0+5OkIDHjEXtAr8b1Krw57u 1FRv39RAJNBjbu3yBu2Z5HIglO8LxAZD3ozf1BUv9pB+cOaFfjDQOMTObSHoqCTHsEU+EsGP qIVOgAwakaJn6jTWSgRZ6yjsJUCvzGVaewiTN5kVVJLv3GS9GPXL9Nb7DDGVyRa4TL5W51KR 0ujgfAJJs5UUKRBT6f4uOpN2dQSzLm+211pEnr4SCU1n3P1Jf39nk2twNTN8OO/VFo/P+0f7 7FzoGV6O8Y83d6eCnj6X3hrMeuL7PS6jJTwayS5aWwJ9qY7I3KDIrcmVwtKKIzLYHc55mqkC BFuEBlRkTcgA4DQrmoViBBJWQ8IM55ZrFSmriGRVHQ/qNa0FPCATxwN4SKM8rLsW7/d50jxp TFpEi+jzGPmp8nf51OCttxbL21z1TJb/dTmUeeY1fg+eF3fe4teBT4jt34L1qYBRzWe00+7t dbv7COCTJeDE063S7j7wHS4DEmjHyCxJIOsCx2WHLnq1uoAJKqcrqBQllJx/4ETTsYnASMRm j5Z643Nd6Ry/ufxyxCL2BDriy3mPr7AUThwaDaq/PbWvs7/kD4zGHaJfx89nft3a3qx25w9l Bg7lu819s1nSNYEFoWsCdM2NoHd6kyXhh+I4kmBOB5jTAV8EfgPNONBsq/NFXURWVx2dJgKY ZDpbQadHorOrSqcJo7BEJ49xMiCJNKvFrK1EtWTCatMpEUtmhJ8/2zyaK8326tUGT2ggcO7u e25PHx71W3Mn5g9caPqZbyhoNQbykeiw37ggmDOlwrELCXNvt+m+287dLy7+7k0jH7swtbb6 aGd8pMc1nHB3J0fcy+uyHTD+DmSoJ1+FmLNLhnsyEMV5VTOQVikYQD7wCyL8lWeIf3/utnGP alKTnLslWX5EuJo/+OzXHkvNfe2pJ+AcVSwi2fSLYJCP7SO7pkxiAiySs4uwNEoDRtnFFsxU zjgqOh0n5sbruF0kQFHmtquq00XwWLZrEpesVXwXR2OCate1XxVTSRmF5Olg6rwWHzLc5ivE HKRqYj5qd8QKflcqYLWHMl1diR7L5HMOX0ezOzMd6t2f74kmB8fE0tEB/8JI7whfb/flAp6B YIctNCj6sr52nmhzx7th+QaDN+XPDJV/09blDbt7in0Obg6Votl5u+VoIbWY6XSk5lMjJyq6 Sb7eh17TuU2Wgl424EhBN43QTSNdg0yKkLjCKFinn3s8YS1WbiGb58hNyQtQrJTtkHyiv94O swE99FROuHbZoEkPJkluMJ3y39M8NjQyGzQIgvvYSGIx1905sDq471iuwz9x80BwKuNV/2xp eXUemmo58HhusHDz+biQGXDnDyQTqyPiwC0fmjn8saMxc6gY5r8RbllZOky6On+c6JdyI/4G ciMDm6EkRo14SUg3ggMqcIDOLTiT/9NX/V8ta9qCsxEUQolTe3MoFfIZJY+arsukeF5KccCl xZ3rwjj/N2TzPVclh6HC/gL2U1f346SKnFQRTlSTjvK0RhhHBv6V8hH+9i9/VfyTq8W/lx41 gKiH0VXTAZFiRbOVp5EpgY669F+2NQIo/hyALdCPOgA8QCbGk1wMeHQmj8rAnfu5eXKlvLl6 O3d8Qri2Hf/FL3gnvx9YxXd+LXwBOVqAjVHkUMNl1Xy1lzD3stretXxgk3klzaA8vAMj2eIV z1VJvbNJvapeQ2zCouWuo6Wbh7vsg7fOxOZygaZ9LbHZc1Mr98x6k4fvn8oem+5r5DtH51Nr 7ynmLx4ZcKWnwqmbJoPDZx7af/rRI8GuwdUB8IqzGfDKAV41slmiWs5uZInv4XwNf8VxSazS glWUTKPZqFACphkRUqRjhl8rX+Rnyp8Trg2W3xksP4U9z2Lnb2BPFevbwo+8528hJ1o3aTw7 Town3OeB+79gHQN7TK79yGrraz/SRaAG1lIEb4IGN2GGXAcStBWQ1mrWtkdDlDTu3chWdGiX vyYdaiZJN8s6CmRN+DeKRlGFf+P8mTeE10+PC28Ufy2AhI8I79uOCx/a/gAdkt6moUMvQYeo TkS+3gtc7Th6gXulmrWDImSewJ2ogA+vVrN7kDUQKgZChTw06RflnFTxxfvrck4p3Guq6YBc 76XDBx5YOvDB1XD4wAdWVj5wIMQXJzdK3b7Jk4UJnLtLG/z0wuXT+aHTDy/MP3Q6nz/90Fvp tYsjs+89EMmsXxwpXlxLgSRoBsmoCBnpkUBvbDIH6DHjcNTRRAWFLCWiSS9R13Gj1b+bEChV rbgd0j2bXDoZPUoVG+ZGk0SYH6N5rps8krb0z59I/P7n43PprvXjV4Rr7oHp3vx8tL38Ir+3 xZOLjU+WfwG8OQtDFlnIIsemt8iWwTiKl/0Ygf/V+ksx5Bp2KeJ6Sua6RuI6WbUoYZZ1IceS 8i4thULJ14uVLN+lq2Qo59VidioYn4xY/MMLKwvD/u7ho/nhI3lXqStR9Kb2hdo02khx/+Ls oHj5/QO3TAZ+Fh8LmTqCGVco5TGbHJGJtG8y4/YOzUeCeX97V2ygUww5jXQjdfKOrqFDQ6AP L41U5yTbWatYntL+qNGidBBqAD0Rp6/zY2oCoIFWdaq1mAAfDeUnxce/ZAjCR4UnJv949knh ydmr448LT87dIlyABTyw/SCs4VHhgsR3tvNh/vbOs3ALrVI9XanXNBakzei3zCYSkl7FkOdY BTNSxTH2ebwEgU7ZcJCdjEO3SjiXkFNqpZhtgwhCymiT5XAvV7V6JW1urJLQRzT11dGUIECi DlCTseIG8jQjLwu9WUq2Ke12yEmonusojitNlADVdhzxXMpMkdNJWmA0W7MWygJQ76Qr2UCW P+6fD0zsN3UHLT3jafeGsc9g0A1NdqcCdvWwqic3GwpMJLvsfp2zVd9qQNrtvzXnHYl3Psvb 2ppUmlS6Q7Q1U4J0p9Cg03n0saFmZ9QbKwVNRl8hWv5H0aTvExpUgsFi14ci7f6s/8EOstkF 8DYM3TAhj/70JouAr+Q3I+CrBbyzgK9miZvEbTOgVP1SOwk1CtwMQUKAhKo8VnKkmiI5iWFO VmO60nGoKVKtmql0G5zYQO42mCrMzMgVMjxs0lipIuXmVUB82BYZDfmLcadgjkzEgqVoRz7f tZEdOpTrdOTWRuyp/mCrwDV9S0NeZ2q2v3+16BOHFso/Ea6VX433R2dPZnInp0N6R4B6upz1 oRZ7B/omyvFdBexrXkBJ+WrkKARL5OzO/FCxUJ9NrkxkrcjsDu9WG/9223w+Nhoym0KjfWNL zcUGMTvXXzg82NmdXx88fKeenxgs+UcWeoPzBd9MKbwv2RmaPpnLnJiLHjwC+Q1AfmZFfp+V 5VexDZKhCNmI1d6PDRAzIGQj1qqN2AGxV+WnSKcmP6Xaf3eCpezKRRJ2yUZDtb/cMXJVZVjp GNkUWUKCYlqsT3PAh5c7oqVg33jELDjjRX9oNGLL54XWYH/KPrKWc3TmDg1lN7q4JrIwJPqK q/39symnd2iJX9+OH4Hc9BJTTs5G+6VmOvqeUm1khgP3sw9usgD5CxwBcMAFel3gSbPEAcoU KNc14WyiWUDbL+s2IOYqX0QiUqxTYzsB7EQ1NYg4lqO8SKzST+G7TdYAxe/D65NnuFEHdPwF S7DQ2zscdqit4dHw0AH9WHNPZkbSAs/w2sC5+zkP+Mf6u1yJUV8iNJv1FHK+kT5HaPpELndy NvzpR6C2wABvLDgXXkHz6TNbaBdQm4NQagd1ZMuUYduqsVZL6Gvr/LvS0agJXsmRaoJX2hA1 QL3qU1DG/vAJWozQEpHyFlnfaPcOtENM6WQ6laGS3CL5xC6O1ggs2rw/kdd3tJjbbI4W1cmT ef5SYrkwJQhZjbFTbC8myhH+kqTrEei6Gb6qwL64yUYgrTBJDKuPgLYkzsmqrocBIV0PAxtZ 1wkyDMhwVaaKrtcIGiCmDNQJWXFeumrEiNGMmKzrA1ha1vUYRuSvNhl5Lrniq2i9RSuHA2i9 0lEPJOXk4IZa0JbkL9c5svE+yZFZMjfP5JZTTl7UuYIJ5/CMv5nv9W38Bt/G+8uR1LGpcFck bevyWRpC4wej9Z6u1w59mYK8XoXvcLL7NlknOKnH0QkuyRlopQoWwDM9yGqFVVTyhz35s6JO NVbWygasR+lyK3GuVeYcqUi7ZBuU5ZM7t9rQJYAqKMESUdQ4le/Zn4kvd5p0+cJUZ8zn0DWq 4bHf9Mc9wc4hd/kbfHly0tjZY7bHnOV/hn4g/2SPgh5q+N8qd2DUkgWoqzTROyJYAigSqlqw R8/3pNf1tFBirVaSz6SRat2l/MiooN2+Lrx3HW0g8HUJv6gYgYdU8+zuWe/hXG1xueZZyldq Hlk+5pp8DIp8OPDn0HTkdVA5qtoNwEpfJx8lv6uJQ6leaoDatop8lIRPimP0Is0kywfx1vLu Anow/24C0k69m3yAqsD88MlayX4D9AaPah6qD6jmoaaphq6xMb23qxQwNY1TEtR3J4ASEmi0 5HLIS1Pc1chNqEqXxXTDawtuTRwq+V35w3m0lLu8I+v3m0Oj8b6xkBk2GKaznnvHT43nTsyE w4i4hZNTAW6MLQ55fcMLofjSoNtXIIUDXQs7KeRQ5Jf+CzkUZU5y5JXzKXTdq9al+NUarUqE rQEUz1XzS7WefMUn1eJvJYcKKCygHMqSrG8C+wMPU/iNTfwn4ZffEH7LauGnR+y9u8Ivx+tO xhPgh54ty+/f6DUMtAwUq6rxR6keaiTtUdl6DaXqHn0aelsmI4/I4Uf9+jEkCfaFUnI0YBC0 xwv9Je4dXEBHmKFm4H8KHKIMPaAYNIv6BTFgYICmGWA7nZKW0br1nN8T4ur5Wuutk67F+2u9 dbUS1kTK9bQI89U3YoFz+ulxT7y7rX/m4Ez/sUMHzjYPN8zmcnnp2j2wPxbbl+gUvjSWbXN6 TX6fxeAaSJZWZtfy/f29os/W7hlI+HJ+E5IifESAGL/zFisLn4G2X9jCJwv0Spx4qwVllMkY ca69tVBCeo3Hig+uAWp9MDho8EInGVED8QhHGw4VoPQaC+8cqVjxp5G70RtLitxKOlNu7rFG +6an88ePC00WU4u9RRCaooP8fYlHH02UnzB1tjeowTs2BZm8ii/h7OxuuTvAIAe84ZTMVvZj 1CvQY1c97oC6qkUoulBDXOl41ACK+tSqitobmmrXmvJOJe2kaCy3W/mT+XyLK5DypibDpnxh n2+o10rufErvshu7UhNBvlr++ti+rtQU6RW+EpFo0OIVmeI49+CmMLWGmxJQgBtyoKSTo1Q2 lp56qvTnY4K2PM6/s30dfoTD8THhB+BPK94dK2vviU17RNpCYbWlLmWpF6kUeGuNK9TptTId aPDyx4efKv6O8J6pL+Q/eu/YIn9u+zr/Vnk/sJrEl5KEE76H4f8AnJrxhkHBSWkE1MjbE1sU rGuyqH2fAKvRiaZA0pZN6kziO1+c/rNvz/zep+e2Xpz6+c95y/Uf//h6GR8Lcez9pup17oCC U29A/sqHWrTD3GNRvf5mJAK/K/2hf0Bdgr1/BKXXaPR1jxF00HeXFqiyDfmxHQW7Ey7AhTdK PcjXgujex7FOElIdZKP4JnMCX0nsQ4Y0ja7pLD5hXUBUX8bXHKvsIDsE+azjq9Aj7FvStsQl wpjBGPGl0KHVhcOLc+Gpjdvv2bh49sTx6NzZ02cu/jukZTo4CmVuZHN0cmVhbQplbmRvYmoK MjkgMCBvYmoKNjI0MQplbmRvYmoKMzAgMCBvYmoKKEluaXRpYWxXaW5kb3cpCmVuZG9iagoz MSAwIG9iagooTWFjIE9TIFggMTAuMTEuMiBRdWFydHogUERGQ29udGV4dCkKZW5kb2JqCjMy IDAgb2JqCihLZXlub3RlKQplbmRvYmoKMzMgMCBvYmoKKEQ6MjAxNzExMTYxMjIzMjhaMDAn MDAnKQplbmRvYmoKMSAwIG9iago8PCAvVGl0bGUgMzAgMCBSIC9Qcm9kdWNlciAzMSAwIFIg L0NyZWF0b3IgMzIgMCBSIC9DcmVhdGlvbkRhdGUgMzMgMCBSIC9Nb2REYXRlCjMzIDAgUiA+ PgplbmRvYmoKeHJlZgowIDM0CjAwMDAwMDAwMDAgNjU1MzUgZiAKMDAwMDAyNTU1NCAwMDAw MCBuIAowMDAwMDAyNTgzIDAwMDAwIG4gCjAwMDAwMDg0NjkgMDAwMDAgbiAKMDAwMDAwMDAy MiAwMDAwMCBuIAowMDAwMDAyNTYzIDAwMDAwIG4gCjAwMDAwMDI2ODggMDAwMDAgbiAKMDAw MDAwNTUzMiAwMDAwMCBuIAowMDAwMDA4NzM2IDAwMDAwIG4gCjAwMDAwMTgxNjAgMDAwMDAg biAKMDAwMDAwODY5NyAwMDAwMCBuIAowMDAwMDAyNzk2IDAwMDAwIG4gCjAwMDAwMDU1MTEg MDAwMDAgbiAKMDAwMDAwNjgzNiAwMDAwMCBuIAowMDAwMDA1NTY4IDAwMDAwIG4gCjAwMDAw MDY4MTUgMDAwMDAgbiAKMDAwMDAwNjk0NCAwMDAwMCBuIAowMDAwMDA4NjE3IDAwMDAwIG4g CjAwMDAwMDgyNTIgMDAwMDAgbiAKMDAwMDAwNzA1MyAwMDAwMCBuIAowMDAwMDA4MjMxIDAw MDAwIG4gCjAwMDAwMDgzNjAgMDAwMDAgbiAKMDAwMDAwODY1NyAwMDAwMCBuIAowMDAwMDA4 NTY3IDAwMDAwIG4gCjAwMDAwMDkxNDYgMDAwMDAgbiAKMDAwMDAwOTQwNCAwMDAwMCBuIAow MDAwMDE4MTM5IDAwMDAwIG4gCjAwMDAwMTg3OTIgMDAwMDAgbiAKMDAwMDAxOTA0OCAwMDAw MCBuIAowMDAwMDI1MzgwIDAwMDAwIG4gCjAwMDAwMjU0MDEgMDAwMDAgbiAKMDAwMDAyNTQz MyAwMDAwMCBuIAowMDAwMDI1NDg2IDAwMDAwIG4gCjAwMDAwMjU1MTIgMDAwMDAgbiAKdHJh aWxlcgo8PCAvU2l6ZSAzNCAvUm9vdCAyMyAwIFIgL0luZm8gMSAwIFIgL0lEIFsgPDc2YzMx NDgxZWQzZjQxY2VhNDJlZGNmY2RlMjZmYjI0Pgo8NzZjMzE0ODFlZDNmNDFjZWE0MmVkY2Zj ZGUyNmZiMjQ+IF0gPj4Kc3RhcnR4cmVmCjI1NjU5CiUlRU9GCg== --------------CE905D634DD661ECD5C4CAD8-- From nobody Thu Nov 16 19:47:40 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34CE81279E5 for ; Thu, 16 Nov 2017 19:47:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.989 X-Spam-Level: X-Spam-Status: No, score=-1.989 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=strayalpha.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7dpF1-TngTCY for ; Thu, 16 Nov 2017 19:47:37 -0800 (PST) Received: from server217-3.web-hosting.com (server217-3.web-hosting.com [198.54.115.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C6B8127868 for ; Thu, 16 Nov 2017 19:47:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=strayalpha.com; s=default; h=Content-Transfer-Encoding:Content-Type: In-Reply-To:MIME-Version:Date:Message-ID:From:References:To:Subject:Sender: Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=sng5tgI8XHx8/SvbyGwVi0x53J5bpCeSybuNbihLVJc=; b=AX7pnJ1w2kXhiUjxALsyXjZfF9 p30o8dQKB0vEvnpPW6QUMPCch2/pIWvDS4/hvJeQVJ3lCeKjZpuzQt9JUs6qTE1MRKssyjXOlpOcv d8AXONbzWUq4rmFkaQqLxAizaugFaDY3xYjeNE3h/bHJsW7z/I7IZzOZsglx7HkUXwDt8v6kX2naF wVfjBOhyUzuKy4IHjt6ffmdJhYbbrqo1P9u8e7GtKD4kzfMOtpj9uMMa4Yv3LZXvhBNHcTc6zm1/F IZse6m9NInb+oBsf3mE1zbfTiIFmbtxouZvMFtcnBn8OC4jekJ4Db7oHFYdoq6cx59Etqx6y+5ygt A/NxaNBw==; Received: from cpe-172-250-240-132.socal.res.rr.com ([172.250.240.132]:55787 helo=[192.168.1.189]) by server217.web-hosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89) (envelope-from ) id 1eFXct-003t3a-GK; Thu, 16 Nov 2017 22:47:36 -0500 To: Wesley Eddy , tcpm@ietf.org References: <5043d1eb-c98b-647d-af66-8fb47def432f@mti-systems.com> From: Joe Touch Message-ID: <75ac651c-c99b-5923-388e-9f8a957a3ee5@strayalpha.com> Date: Thu, 16 Nov 2017 19:47:29 -0800 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: <5043d1eb-c98b-647d-af66-8fb47def432f@mti-systems.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server217.web-hosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - strayalpha.com X-Get-Message-Sender-Via: server217.web-hosting.com: authenticated_id: touch@strayalpha.com X-Authenticated-Sender: server217.web-hosting.com: touch@strayalpha.com X-Source: X-Source-Args: X-Source-Dir: X-From-Rewrite: unmodified, already matched Archived-At: Subject: Re: [tcpm] 793bis: New security considerations section X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Nov 2017 03:47:39 -0000 Hi, Wes (et al.), It looks OK but appears to omit some of the advice from various non-cryptographic security methods, notably that they are recommended only in particular environments (e.g., see RFC 5961 Sec 1.1). IMO, the same could be said of others that predate that consideration. Joe On 11/13/2017 11:22 AM, Wesley Eddy wrote: > Hi, one thing that I want to make the WG aware of in the latest RFC > 793bis draft is the new security and privacy considerations section. > > https://tools.ietf.org/html/draft-ietf-tcpm-rfc793bis-07#section-6 > > The original RFC 793 predates security considerations sections, so I > didn't have much to start from.  My goal was to point to relevant > references without creating dozens of pages of meandering text on > every little possible security issue (most of which are well-known by > now). > > This is a first crack at it, and it could likely be improved in big > ways.  Your feedback, suggestions, corrections, etc. is appreciated. > > > _______________________________________________ > tcpm mailing list > tcpm@ietf.org > https://www.ietf.org/mailman/listinfo/tcpm From nobody Fri Nov 17 10:14:28 2017 Return-Path: X-Original-To: tcpm@ietfa.amsl.com Delivered-To: tcpm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5344A1293E0 for ; Fri, 17 Nov 2017 10:14:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mti-systems-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wNJ4KHfN5TCA for ; Fri, 17 Nov 2017 10:14:25 -0800 (PST) Received: from mail-it0-x232.google.com (mail-it0-x232.google.com [IPv6:2607:f8b0:4001:c0b::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE40F128DE5 for ; Fri, 17 Nov 2017 10:14:24 -0800 (PST) Received: by mail-it0-x232.google.com with SMTP id 187so2885119iti.1 for ; Fri, 17 Nov 2017 10:14:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mti-systems-com.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language; bh=/Uv6we27blAMFDbbReShdqQkRDhgZn4a8yvWSnHHAz4=; b=ggIr7EegeJCSb4gOlX64dXI/9KL8buOMp/m/CHJYhJQikGFbTAA5GNzPHwjMg9PByG D/z6ecdM4tu/+un5c9M8pI4rPyPEZunrmkNENCiiBNRUHp2OVA3edfbXblSaGQjdidrd tBe2qxWQtmKIRNZ6Ot8A7fxg2I7AbD8YYAcA9SRkk6C/li+reE+cF8QSGn9Evcjm8T35 2FhpT4Xvf+K9TB+cnVTUqyAz1r4PM8Q5dX9t9eOlm3oMY06gJ32F9O8n8AcRtjUsQXjx 3+n7z+7VQj3YQkjkh0JflHQpAZHPPpFAmP206N9R1nL8NUTAEZHxBgovmHSJ/42blkHl kjtw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=/Uv6we27blAMFDbbReShdqQkRDhgZn4a8yvWSnHHAz4=; b=EMj2FuAYyv4AVQLE787hBYfPPPoPQgyiZzW4BSTVt4XYLpetfX/WpjFp5IVGfmQ7/2 lhzYJTMZFXzSazf2/HDVJ5M6FC+vBSYKBaezDIPlLzjKNf3hXT7vouaHZTUp9mWWaB4h XL6n0gtj590tZGprALfNZF7VlxhJBRpzRttwNzPw9dKjowdvzlAcsOunWsFJu8mUkCrX koYpIajdaCmitqRf23MdijOwHau7r2jBIuhFNwzqxfwox5QNedxa1FMWiQxh4LUm9fPc FE8oKHx/76zjGdYMNvd/SO4kut95nbiu83E583JIpgK4E4GvqTE5gviQjGc5ZdTiIvkW xAUQ== X-Gm-Message-State: AJaThX5WlNqZWy3FJm/3m45Hcxwn8ukUjHA9zc502idvCEffsTsAQI06 qHSwHUV24XXsPy6AJDfEwT4wkwMUw5I= X-Google-Smtp-Source: AGs4zMa/FSUfv/JHX5K1mfZhgLdSm+qQ2hefXjP+wDCma6EDDyKRwaAUq0eKhjAP8DtMGx/LaeVCjA== X-Received: by 10.36.196.85 with SMTP id v82mr8363687itf.136.1510942464168; Fri, 17 Nov 2017 10:14:24 -0800 (PST) Received: from [192.168.1.105] (cpe-76-188-215-129.neo.res.rr.com. [76.188.215.129]) by smtp.gmail.com with ESMTPSA id m31sm2243976iti.3.2017.11.17.10.14.23 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 17 Nov 2017 10:14:23 -0800 (PST) To: Joe Touch , tcpm@ietf.org References: <5043d1eb-c98b-647d-af66-8fb47def432f@mti-systems.com> <75ac651c-c99b-5923-388e-9f8a957a3ee5@strayalpha.com> From: Wesley Eddy Message-ID: <3672e7a6-02d3-07db-78ce-6f9bcd40570c@mti-systems.com> Date: Fri, 17 Nov 2017 13:14:20 -0500 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: <75ac651c-c99b-5923-388e-9f8a957a3ee5@strayalpha.com> Content-Type: multipart/alternative; boundary="------------FBB9DEFB9F84C72B9BAC7FA5" Content-Language: en-US Archived-At: Subject: Re: [tcpm] 793bis: New security considerations section X-BeenThere: tcpm@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: TCP Maintenance and Minor Extensions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Nov 2017 18:14:27 -0000 This is a multi-part message in MIME format. --------------FBB9DEFB9F84C72B9BAC7FA5 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Hi Joe, that is a great point, and I agree that the applicability statement you mention should be noted. Additionally I wanted to mention that the way I currently handled RFC 5961 in the document should be reviewed along with the Errata on 5961. (1) I added references to 5961 added in the relevant places where validations are taking place, and content has been taken from the "Mitigation" subsections of 5961 where the state machine modifications live. (2) I put in errata 5068 on RFC 5961 in order to correct a problem I found, but it isn't yet verified (but I so far assumed that it will be in 793bis).  See: https://www.rfc-editor.org/errata_search.php?rfc=5961&eid=5068 My description in the Notes there is: The text in section 3.2 begins by stating a change from RFC 793 for RST bit handling "when in a synchronized state" (which means all states except for LISTEN, SYN-SENT, and SYN-RECEIVED). Later in the section, the same change is described more loosely and text states that it's applicable "In all states except SYN-SENT", and separate behavior is provided for SYN-SENT, but the earlier text leaves uncertainty if the former is supposed to apply to SYN-RECEIVED as well, since the earlier text in the section section begins by discussing only "synchronized" states. Since the check is totally valid for SYN-RECEIVED, and the behavior in steps 1, 2, and 3 are valid for SYN-RECEIVED, it seems appropriate to make sure this is clarified in the earlier text. If there isn't agreement that this should be Verified as an Errata to 5961, then we'll have to change 793bis accordingly. On 11/16/2017 10:47 PM, Joe Touch wrote: > Hi, Wes (et al.), > > It looks OK but appears to omit some of the advice from various > non-cryptographic security methods, notably that they are recommended > only in particular environments (e.g., see RFC 5961 Sec 1.1). IMO, the > same could be said of others that predate that consideration. > > Joe > > On 11/13/2017 11:22 AM, Wesley Eddy wrote: >> Hi, one thing that I want to make the WG aware of in the latest RFC >> 793bis draft is the new security and privacy considerations section. >> >> https://tools.ietf.org/html/draft-ietf-tcpm-rfc793bis-07#section-6 >> >> The original RFC 793 predates security considerations sections, so I >> didn't have much to start from.  My goal was to point to relevant >> references without creating dozens of pages of meandering text on >> every little possible security issue (most of which are well-known by >> now). >> >> This is a first crack at it, and it could likely be improved in big >> ways.  Your feedback, suggestions, corrections, etc. is appreciated. >> >> >> _______________________________________________ >> tcpm mailing list >> tcpm@ietf.org >> https://www.ietf.org/mailman/listinfo/tcpm --------------FBB9DEFB9F84C72B9BAC7FA5 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

Hi Joe, that is a great point, and I agree that the applicability statement you mention should be noted.

Additionally I wanted to mention that the way I currently handled RFC 5961 in the document should be reviewed along with the Errata on 5961.

(1) I added references to 5961 added in the relevant places where validations are taking place, and content has been taken from the "Mitigation" subsections of 5961 where the state machine modifications live.

(2) I put in errata 5068 on RFC 5961 in order to correct a problem I found, but it isn't yet verified (but I so far assumed that it will be in 793bis).  See: https://www.rfc-editor.org/errata_search.php?rfc=5961&eid=5068

My description in the Notes there is:

The text in section 3.2 begins by stating a change from RFC 793 for RST bit handling "when in a synchronized state" (which means all states except for LISTEN, SYN-SENT, and SYN-RECEIVED). Later in the section, the same change is described more loosely and text states that it's applicable "In all states except SYN-SENT", and separate behavior is provided for SYN-SENT, but the earlier text leaves uncertainty if the former is supposed to apply to SYN-RECEIVED as well, since the earlier text in the section section begins by discussing only "synchronized" states.

Since the check is totally valid for SYN-RECEIVED, and the behavior in steps 1, 2, and 3 are valid for SYN-RECEIVED, it seems appropriate to make sure this is clarified in the earlier text.

If there isn't agreement that this should be Verified as an Errata to 5961, then we'll have to change 793bis accordingly.





On 11/16/2017 10:47 PM, Joe Touch wrote:
Hi, Wes (et al.),

It looks OK but appears to omit some of the advice from various
non-cryptographic security methods, notably that they are recommended
only in particular environments (e.g., see RFC 5961 Sec 1.1). IMO, the
same could be said of others that predate that consideration.

Joe

On 11/13/2017 11:22 AM, Wesley Eddy wrote:

Hi, one thing that I want to make the WG aware of in the latest RFC
793bis draft is the new security and privacy considerations section.

https://tools.ietf.org/html/draft-ietf-tcpm-rfc793bis-07#section-6

The original RFC 793 predates security considerations sections, so I
didn't have much to start from.  My goal was to point to relevant
references without creating dozens of pages of meandering text on
every little possible security issue (most of which are well-known by
now).

This is a first crack at it, and it could likely be improved in big
ways.  Your feedback, suggestions, corrections, etc. is appreciated.


_______________________________________________
tcpm mailing list
tcpm@ietf.org
https://www.ietf.org/mailman/listinfo/tcpm


    

    

  


--------------FBB9DEFB9F84C72B9BAC7FA5--


From nobody Sat Nov 18 09:18:15 2017
Return-Path: 
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8EEF126D46 for ; Sat, 18 Nov 2017 09:18:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.09
X-Spam-Level: 
X-Spam-Status: No, score=-0.09 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=strayalpha.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id admDljpZ1505 for ; Sat, 18 Nov 2017 09:18:12 -0800 (PST)
Received: from server217-3.web-hosting.com (server217-3.web-hosting.com [198.54.115.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C667C124BFA for ; Sat, 18 Nov 2017 09:18:12 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=strayalpha.com; s=default; h=Content-Transfer-Encoding:Content-Type: In-Reply-To:MIME-Version:Date:Message-ID:From:References:To:Subject:Sender: Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=OsKkBnA5yDEqCGg2+/Z6kgjPAlTSQ2I7QntR5OEuPZw=; b=v+gnbuwJyIsrg4uP796SJzqATb CPGYDivGr8gCu/O5t28cUC2sw9RkixLray19Tfchg7GPVjcEvMgElyd+A8VsItXT8L0ucNaYr2qjB TzE21vcHGn3l83iZ2abbWMWnJVER/F8pinwVAeQdG7Sq8az7b2Vv1Hr5VQF3ZRqhUCcxAIOdFd25M zHNBzPA+rNlkInSm6nyEPZaHaNNsJ3Zlm1YtRaYvVDWc7DaOpxQNGm3eCAyuPC3wqgm6MU6yGINUX i/8XfDpWYydFYC2sq2/gut+fDXJ56AoXwztjSJZNZd8e/KJZwbw69iszRY1HHnYiss89iisWAJ/yl 1MthA51Q==;
Received: from cpe-172-250-240-132.socal.res.rr.com ([172.250.240.132]:50163 helo=[192.168.1.189]) by server217.web-hosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89) (envelope-from ) id 1eG6kt-003NtC-7f; Sat, 18 Nov 2017 12:18:11 -0500
To: Wesley Eddy , tcpm@ietf.org
References: <5043d1eb-c98b-647d-af66-8fb47def432f@mti-systems.com> <75ac651c-c99b-5923-388e-9f8a957a3ee5@strayalpha.com> <3672e7a6-02d3-07db-78ce-6f9bcd40570c@mti-systems.com>
From: Joe Touch 
Message-ID: 
Date: Sat, 18 Nov 2017 09:18:05 -0800
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0
MIME-Version: 1.0
In-Reply-To: <3672e7a6-02d3-07db-78ce-6f9bcd40570c@mti-systems.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Content-Language: en-US
X-OutGoing-Spam-Status: No, score=-1.0
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server217.web-hosting.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - strayalpha.com
X-Get-Message-Sender-Via: server217.web-hosting.com: authenticated_id: touch@strayalpha.com
X-Authenticated-Sender: server217.web-hosting.com: touch@strayalpha.com
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-From-Rewrite: unmodified, already matched
Archived-At: 
Subject: Re: [tcpm] 793bis: New security considerations section
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Sat, 18 Nov 2017 17:18:14 -0000

On 11/17/2017 10:14 AM, Wesley Eddy wrote:
> Hi Joe, that is a great point, and I agree that the applicability
> statement you mention should be noted.

FWIW, I also think that the security section should be a little more
clear on the following:

    - if you want TCP security, you need IPsec or TCP-AO
        anything else protects only a small fraction of TCP control
(tcpcrypt) or no TCP control at all (TLS)
    - all other "security" measures only partially hinder attacks at
best (they might be better at anti-tracking than attack resistance)
        e.g., ISN generation, RST sequence number checks, etc.

Joe


From gaardiolor@gmail.com  Fri Nov 17 06:59:19 2017
Return-Path: 
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 528C3126B72 for ; Fri, 17 Nov 2017 06:59:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pia9mcxtPpox for ; Fri, 17 Nov 2017 06:59:14 -0800 (PST)
Received: from mail-qt0-x231.google.com (mail-qt0-x231.google.com [IPv6:2607:f8b0:400d:c0d::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4AF3126C2F for ; Fri, 17 Nov 2017 06:59:13 -0800 (PST)
Received: by mail-qt0-x231.google.com with SMTP id r58so6711676qtc.0 for ; Fri, 17 Nov 2017 06:59:13 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:from:date:message-id:subject:to; bh=XS9JZ5t4vT8NZtZ8nOajFl3J05YUVXB8oiEr/DINY94=; b=nT3jeDQRY+crhzLmAXb5U5uppET8XMvHwt9h6Qh/b2PoScFxuajtRhVTK8CtiNXZPg U7vsTpgKHFmad6OcyAtYsN4mOZQ0Vn0zV8cpQdV/3iDwQxqzUhCff0RVSaadyebfTFch svCJtLw/VaaTIa6ywDvwoFGDM+hHuS8ZhlYtDrInk5zgOieyzXFQsCO2iORW2+cyopez avP/SukbInoG5e9piYuUR0/TDnUR6c4NuvnmyFjJN2wvyGxvHv7R0nbXS5AbP1RKqloU uXP/K8xmZIDVTppHizuSOUlae3znPTlhht5UyMkhs+bLPDQrpazlC36pADpr+7kwKneg HOMQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=XS9JZ5t4vT8NZtZ8nOajFl3J05YUVXB8oiEr/DINY94=; b=dYmC1ed/zxNGJEU/0cu1gsGGHxF+JaLmMagqBNNwPESqcQix7LNyh35gjaTsh8+69W Fw7MSkJp/zON7XvuH0SfYjiMvNKxla9AZrtPC3cAryPzFLg77Tf9jQ0O31GnfHvQmgyV MdJRHc9lEZYBPjBtsvJqgBsR/FJdF+ywQ51tZfgxfOZODnY1GmmB4kO9ii14cQdG5dMl B2I4xvf/A4/6yOymGSv3pJ41q9Uo7C49WHoW1E2hAW+nJmX4GXvCMvUMi0qibZveTp6H svbxxTqzCDGyDLs4/23w3vcTEZpixHVxPwQsqkJovel3EoOGnjPvaj0qhheXWxMdFZWL hPaA==
X-Gm-Message-State: AJaThX4j504tu3xOWtYcHJzHR3pbbbNrVw6y6SAeOOtIGxw4Jnob1FhJ H39gi3PWteXf/LwMMv5gCXZLqGmu142DhR9JEMU=
X-Google-Smtp-Source: AGs4zMZr3TJS2XVgckY3A+ISCOtHbKvgXjHYs9Ht1nHOWUHL5ibcpQuIi2wCsp0AptZrxXYjce5Qq8ejRGMuUWrfopw=
X-Received: by 10.55.121.2 with SMTP id u2mr8253976qkc.19.1510930752921; Fri, 17 Nov 2017 06:59:12 -0800 (PST)
MIME-Version: 1.0
Received: by 10.237.37.25 with HTTP; Fri, 17 Nov 2017 06:59:12 -0800 (PST)
From: Marc 
Date: Fri, 17 Nov 2017 15:59:12 +0100
Message-ID: 
To: tcpm@ietf.org
Content-Type: multipart/mixed; boundary="94eb2c062734cefe59055e2efa7b"
Archived-At: 
Subject: [tcpm] increased back-off across different retransmissions
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Sat, 18 Nov 2017 21:45:13 -0000

--94eb2c062734cefe59055e2efa7b
Content-Type: multipart/alternative; boundary="94eb2c062734cefe55055e2efa79"

--94eb2c062734cefe55055e2efa79
Content-Type: text/plain; charset="UTF-8"

Hello,

I'm reading RFC 6298, which mentions the TCP back-off algorithm. One detail
is not very clear in this RFC, or maybe I'm missing it. Hope someone can
point me in the right direction!

In our network we have a link that's sometimes congested. When that's the
case, sometimes we have a TCP connection that just has a streak of bad luck
and loses multiple packets in a row. See attachment for an example, taken
on a switch connected to the server. Unfortunately I'm not allowed to share
the PCAP.. But I think / hope the tcpdump information contains everything
needed (time, ip, port, win, seq, len, ack, sack, sle, sre..)

Client: 1.1.1.1
Server: 2.2.2.2

So some packets from Server to Client are dropped. I've marked the packets
below in attachment with P1 until P7.

Packet 1: seq 135650, len 1348, dropped
Packet 2: seq 136998, len 1348, received <-- so this one is not dropped
Packet 3: seq 138346, len 1348, dropped
Packet 4: seq 139694, len 81, dropped
Packet 5: seq 139775, len 1348, dropped
Packet 6: seq 141123, len 1348, dropped
Packet 7: seq 142471, len 1221, dropped

Then the retransmissions, marked in attachment with R1 until R5:
- Retransmission 1: 0.5 sec after dropped 'Packet 1', packet with seq
135650, len 1348 is retransmitted.
Ack <10ms. Now the ack # is 138346, higher than seq135650 + len1348 =
136998, the client is also ack'ing 'Packet 2'.

- Retransmission 2: 1.1 seconds after Retransmission 1, packet with seq
138346, len 1348 is retransmitted.
Ack <10ms, ack # 139694 (matches seq+len of Retransmission 2). This
Retransmission covers dropped 'Packet 3'

- Retransmission 3: 2.8 seconds after Retransmission 2, packet with seq
139694, len 1348 is retransmitted.
Ack <10ms, ack # 141042 (matches seq+len of Retransmission 3). Note that
this packet contains data from dropped 'Packet 4' and 'Packet 5'

- Retransmission 4: 7.1 seconds after Retransmission 3, packet with seq
141042, len 1348 is retransmitted.
Ack <10ms, ack # 142390 (matches seq+len of Retransmission 4). Note that
this packet contains data from dropped 'Packet 5' and 'Packet 6'

- Retransmission 5: 17.8 seconds after Retransmission 4, packet with seq
142390, len 1302 is retransmitted.
Ack <10ms, ack # 143692 (matches seq+len of Retransmission 5). Note that
this packet contains data from dropped 'Packet 6' and 'Packet 7'

So the back-off is increased across _different_ retransmissions, despite
the fact those retransmissions are ack'ed very quickly. Now I know there is
a chance those acks are coming from the original tranmission so the server
can't calculate a new RTT, but well.. I'm not sure if exponentially (~ x2.5
in my case actually..) increasing the timer across different ack'ed
retransmissions is the right strategy here. 10 lost packets (which isn't
pretty, I know) in my case would mean 500 seconds of waiting.

Am I right that the RFC (or Karn's algorithm) doesn't make a statement
about this particular scenario ? In that case, should it be clarified ? Or
is this such an obvious bad strategy that it's overkill to explicitly
forbid it per RFC ?

Thanks,

Marc

--94eb2c062734cefe55055e2efa79
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable


Hello,

I'm reading RFC 6298, which mentions the=
 TCP back-off algorithm. One detail is not very clear in this RFC, or maybe=
 I'm missing it. Hope someone can point me in the right direction!
=

In our network we have a link that's sometimes congested=
. When that's the case, sometimes we have a TCP connection that just ha=
s a streak of bad luck and loses multiple packets in a row. See attachment =
for an example, taken on a switch connected to the server. Unfortunately I&=
#39;m not allowed to share the PCAP.. But I think / hope the tcpdump inform=
ation contains everything needed (time, ip, port, win, seq, len, ack, sack,=
 sle, sre..)

Client: 1.1.1.1
Server: 2.2=
.2.2

So some packets from Server to Client are dro=
pped. I've marked the packets below in attachment with P1 until P7.=C2=
=A0

Packet 1: seq 135650, len 1348, dropped
Packet 2: seq 136998, len 1348, received <-- so this one is not=
 dropped=C2=A0
Packet 3: seq 138346, len 1348, dropped=C2=A0
Packet 4: seq 139694, len 81, dropped=C2=A0
Packet 5: seq 1=
39775, len 1348, dropped=C2=A0
Packet 6: seq 141123, len 1348, dr=
opped=C2=A0
Packet 7: seq 142471, len 1221, dropped=C2=A0

Then the retransmissions, marked in attachment with R1 un=
til R5:
- Retransmission 1: 0.5 sec after dropped 'Packet 1&#=
39;, packet with seq 135650, len 1348 is retransmitted.=C2=A0
	Ack <10ms. Now the ack # is 13=
8346, higher than seq135650 + len1348 =3D 136998, the client is also ack=
9;ing 'Packet 2'.=C2=A0

- Retransmission 2=
: 1.1 seconds after Retransmission 1, packet with seq 138346, len 1348 is r=
etransmitted.=C2=A0
	=
Ack <10ms, ack # 139694 (matches seq+len of Retransmission 2). This Retr=
ansmission covers dropped 'Packet 3'

- Ret=
ransmission 3: 2.8 seconds after Retransmission 2, packet with seq 139694, =
len 1348 is retransmitted.=C2=A0
	Ack <10ms, ack # 141042 (matches seq+len of Retransmission =
3). Note that this packet contains data from dropped 'Packet 4' and=
 'Packet 5'

- Retransmission 4: 7.1 second=
s after Retransmission 3, packet with seq 141042, len 1348 is retransmitted=
.=C2=A0
	Ack <10ms=
, ack # 142390 (matches seq+len of Retransmission 4). Note that this packet=
 contains data from dropped 'Packet 5' and 'Packet 6'
=


- Retransmission 5: 17.8 seconds after Retransmission 4=
, packet with seq 142390, len 1302 is retransmitted.=C2=A0
	Ack <10ms, ack # 143692 (matches =
seq+len of Retransmission 5). Note that this packet contains data from drop=
ped 'Packet 6' and 'Packet 7'

So the back-off is increased across _different_ retransmissions, despite =
the fact those retransmissions are ack'ed very quickly. Now I know ther=
e is a chance those acks are coming from the original tranmission so the se=
rver can't calculate a new RTT, but well.. I'm not sure if exponent=
ially (~ x2.5 in my case actually..) increasing the timer across different =
ack'ed retransmissions is the right strategy here. 10 lost packets (whi=
ch isn't pretty, I know) in my case would mean 500 seconds of waiting.=
=C2=A0

Am I right that the RFC (or Karn's algo=
rithm) doesn't make a statement about this particular scenario ? In tha=
t case, should it be clarified ? Or is this such an obvious bad strategy th=
at it's overkill to explicitly forbid it per RFC ?

=

Thanks,

Marc


--94eb2c062734cefe55055e2efa79--

--94eb2c062734cefe59055e2efa7b
Content-Type: text/plain; charset="US-ASCII"; name="capture2.txt"
Content-Disposition: attachment; filename="capture2.txt"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_ja4134y80
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--94eb2c062734cefe59055e2efa7b--


From nobody Sat Nov 18 15:56:54 2017
Return-Path: 
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08ADD126C22 for ; Sat, 18 Nov 2017 15:56:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nqPltYvbfmje for ; Sat, 18 Nov 2017 15:56:49 -0800 (PST)
Received: from mail-wr0-x229.google.com (mail-wr0-x229.google.com [IPv6:2a00:1450:400c:c0c::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 572F91201F2 for ; Sat, 18 Nov 2017 15:56:49 -0800 (PST)
Received: by mail-wr0-x229.google.com with SMTP id 11so1692426wrb.6 for ; Sat, 18 Nov 2017 15:56:49 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=LSyM+W+ThbOsenuo2NyWP/THpFxuebcuZxcLlFXxrWY=; b=ZO3SyADulbvAkGYVuFDpoZV+MpSq/v88iQOrr50QLpS+6QLpcl8Uy9ZTj1eg5F90LN eLlhdQUvsOHbyQ03fHeFqaRIZ/cndjRyP3aXmehe/Y2SfyccAQG5eiU2g+8IiW3q/4Rx PYbqbWnZc4JTbLQ0fzJZOdYx+y5OX/TThiq4heLEce7shG+DT6qa7AFirVg8A72mC3mX GvuVasELPSQ+aQg5SAEpybI9g542QKMkum+zK2ApykDFkXVTzuBb8F5bJsrI1CxDyNRv wUbx6R65OfARnMJEMS56xN4eEAmfwI2zSmdsQ+kyJppSIFLgnGj9VEygiT3gOVbpd65M BZoA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=LSyM+W+ThbOsenuo2NyWP/THpFxuebcuZxcLlFXxrWY=; b=Dg4rBhdFxbSpD2hk5U10S8iV63QaQIzbRLmYy5rAAVySdQ7q4oVH+ayOs+9VUqIGFZ MaVfrsfZebmImbtVIWoA9hl4jmg5+wUEt8f2mbGoqMgLoWhDl9InTJswoN7ZGdf4JYdp sTQMSZJg3QWgI3qQG/ZcMSk1c/WevokFWD+lBK2Q0EC05jX/y4YaRnX/cDEF0dDTDY8k /a0ICghUB+iMLoSjhr9djDZ4Zwpyndo2TvCOIQmufeFpgw/ntLDtwLncir+QZUX5/VGO x+uhsdPdRO15XOGQozEom3fihVQcQMtZd2lYNfkS+AnysAidUfMOZ9ZcGFlnTt1jq7B1 hgCg==
X-Gm-Message-State: AJaThX6zzSnR1f4tHtK9jjQumFbPQypfUAvdo7MOYmZ/lix+43F2aElH Yg/WFJp3PNB1Y711ePCUVMSftL68I5cxJR5N4eNWVA==
X-Google-Smtp-Source: AGs4zMa5cXUElEp33ZoCF+Jw2qs0gmkibTdpDQg3mVaaJ+AL1gCE6wPu7exjWKQiYH13TTCBkZ7xQ8kLPsAL+99zlhQ=
X-Received: by 10.223.136.253 with SMTP id g58mr8209560wrg.86.1511049407432; Sat, 18 Nov 2017 15:56:47 -0800 (PST)
MIME-Version: 1.0
Received: by 10.28.16.10 with HTTP; Sat, 18 Nov 2017 15:56:06 -0800 (PST)
In-Reply-To: 
References: 
From: Yuchung Cheng 
Date: Sat, 18 Nov 2017 15:56:06 -0800
Message-ID: 
To: Marc 
Cc: "tcpm@ietf.org Extensions" 
Content-Type: multipart/alternative; boundary="001a11461c722b9f32055e4a9bab"
Archived-At: 
Subject: Re: [tcpm] increased back-off across different retransmissions
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Sat, 18 Nov 2017 23:56:52 -0000

--001a11461c722b9f32055e4a9bab
Content-Type: text/plain; charset="UTF-8"

On Fri, Nov 17, 2017 at 6:59 AM, Marc  wrote:

> Hello,
>
> I'm reading RFC 6298, which mentions the TCP back-off algorithm. One
> detail is not very clear in this RFC, or maybe I'm missing it. Hope someone
> can point me in the right direction!
>
> In our network we have a link that's sometimes congested. When that's the
> case, sometimes we have a TCP connection that just has a streak of bad luck
> and loses multiple packets in a row. See attachment for an example, taken
> on a switch connected to the server. Unfortunately I'm not allowed to share
> the PCAP.. But I think / hope the tcpdump information contains everything
> needed (time, ip, port, win, seq, len, ack, sack, sle, sre..)
>
> Client: 1.1.1.1
> Server: 2.2.2.2
>
> So some packets from Server to Client are dropped. I've marked the packets
> below in attachment with P1 until P7.
>
> Packet 1: seq 135650, len 1348, dropped
> Packet 2: seq 136998, len 1348, received <-- so this one is not dropped
> Packet 3: seq 138346, len 1348, dropped
> Packet 4: seq 139694, len 81, dropped
> Packet 5: seq 139775, len 1348, dropped
> Packet 6: seq 141123, len 1348, dropped
> Packet 7: seq 142471, len 1221, dropped
>
> Then the retransmissions, marked in attachment with R1 until R5:
> - Retransmission 1: 0.5 sec after dropped 'Packet 1', packet with seq
> 135650, len 1348 is retransmitted.
> Ack <10ms. Now the ack # is 138346, higher than seq135650 + len1348 =
> 136998, the client is also ack'ing 'Packet 2'.
>
> - Retransmission 2: 1.1 seconds after Retransmission 1, packet with seq
> 138346, len 1348 is retransmitted.
> Ack <10ms, ack # 139694 (matches seq+len of Retransmission 2). This
> Retransmission covers dropped 'Packet 3'
>
The sender does not seem to implement TCP RFCs correctly. According to the
RFC5681, upon the first timeout the sender should reduce cwnd to 1 and
enter slow start. Upon receiving the ACK of rtx of P2, cwnd would be 2 so
the sender should have retransmitted P3 and P4 right away. The next round
trip would retransmit P5,P6,P7. This is called slow start after timeout and
it should take only 0.5s + 10ms * 3.

Regarding the exponential backoff, RFC6298 section 5.2 (end) states that
RTO is recomputed whenever a new RTT sample is acquired, hence clearing the
backoff. But in your case there shouldn't be backoff at all. Normally we'd
see exponentially backoffs if the first unacked packet after timeout is
lost again (and again), which indicates severe congestion.

HTH


>
> - Retransmission 3: 2.8 seconds after Retransmission 2, packet with seq
> 139694, len 1348 is retransmitted.
> Ack <10ms, ack # 141042 (matches seq+len of Retransmission 3). Note that
> this packet contains data from dropped 'Packet 4' and 'Packet 5'
>
> - Retransmission 4: 7.1 seconds after Retransmission 3, packet with seq
> 141042, len 1348 is retransmitted.
> Ack <10ms, ack # 142390 (matches seq+len of Retransmission 4). Note that
> this packet contains data from dropped 'Packet 5' and 'Packet 6'
>
> - Retransmission 5: 17.8 seconds after Retransmission 4, packet with seq
> 142390, len 1302 is retransmitted.
> Ack <10ms, ack # 143692 (matches seq+len of Retransmission 5). Note that
> this packet contains data from dropped 'Packet 6' and 'Packet 7'
>
> So the back-off is increased across _different_ retransmissions, despite
> the fact those retransmissions are ack'ed very quickly. Now I know there is
> a chance those acks are coming from the original tranmission so the server
> can't calculate a new RTT, but well.. I'm not sure if exponentially (~ x2.5
> in my case actually..) increasing the timer across different ack'ed
> retransmissions is the right strategy here. 10 lost packets (which isn't
> pretty, I know) in my case would mean 500 seconds of waiting.
>
> Am I right that the RFC (or Karn's algorithm) doesn't make a statement
> about this particular scenario ? In that case, should it be clarified ? Or
> is this such an obvious bad strategy that it's overkill to explicitly
> forbid it per RFC ?
>
> Thanks,
>
> Marc
>
> _______________________________________________
> tcpm mailing list
> tcpm@ietf.org
> https://www.ietf.org/mailman/listinfo/tcpm
>
>

--001a11461c722b9f32055e4a9bab
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable




On Fri, Nov 17, 2017 at 6:59 AM, Marc <gaardiolor@gmail.com>=
 wrote:
Hello,
I'm reading RFC 6298, which mentions the TCP back-off algorithm. O=
ne detail is not very clear in this RFC, or maybe I'm missing it. Hope =
someone can point me in the right direction!

In our netw=
ork we have a link that's sometimes congested. When that's the case=
, sometimes we have a TCP connection that just has a streak of bad luck and=
 loses multiple packets in a row. See attachment for an example, taken on a=
 switch connected to the server. Unfortunately I'm not allowed to share=
 the PCAP.. But I think / hope the tcpdump information contains everything =
needed (time, ip, port, win, seq, len, ack, sack, sle, sre..)
Client: 1.1.1.1
Server: 2.2.2.2

<=
div>So some packets from Server to Client are dropped. I've marked the =
packets below in attachment with P1 until P7.=C2=A0

Packet 1: seq 135650, len 1348, dropped
Packet 2: seq 1369=
98, len 1348, received <-- so this one is not dropped=C2=A0
Pa=
cket 3: seq 138346, len 1348, dropped=C2=A0
Packet 4: seq 139694,=
 len 81, dropped=C2=A0
Packet 5: seq 139775, len 1348, dropped=C2=
=A0
Packet 6: seq 141123, len 1348, dropped=C2=A0
Packe=
t 7: seq 142471, len 1221, dropped=C2=A0

Then the =
retransmissions, marked in attachment with R1 until R5:
- Retrans=
mission 1: 0.5 sec after dropped 'Packet 1', packet with seq 135650=
, len 1348 is retransmitted.=C2=A0
	Ack <10ms. Now the ack # is 138346, higher than seq135650=
 + len1348 =3D 136998, the client is also ack'ing 'Packet 2'.=
=C2=A0

- Retransmission 2: 1.1 seconds after Retra=
nsmission 1, packet with seq 138346, len 1348 is retransmitted.=C2=A0
=

	Ack <10ms, ack # 13969=
4 (matches seq+len of Retransmission 2). This Retransmission covers dropped=
 'Packet 3'
The sender does not =
seem to implement TCP RFCs correctly. According to the RFC5681, upon the fi=
rst timeout the sender should reduce cwnd to 1 and enter slow start. Upon r=
eceiving the ACK of rtx of P2, cwnd would be 2 so the sender should have re=
transmitted P3 and P4 right away. The next round trip would retransmit P5,P=
6,P7. This is called slow start after timeout and it should take only 0.5s =
+ 10ms * 3.

Regarding the exponential backoff, RFC=
6298 section 5.2 (end) states that RTO is recomputed whenever a new RTT sam=
ple is acquired, hence clearing the backoff. But in your case there shouldn=
't be backoff at all. Normally we'd see exponentially backoffs if t=
he first unacked packet after timeout is lost again (and again), which indi=
cates severe congestion.

HTH=C2=A0
=C2=
=A0

- Retransmission 3: 2.8 seconds after Retransmission 2, packet with =
seq 139694, len 1348 is retransmitted.=C2=A0
	Ack <10ms, ack # 141042 (matches seq+len of Ret=
ransmission 3). Note that this packet contains data from dropped 'Packe=
t 4' and 'Packet 5'

- Retransmission 4=
: 7.1 seconds after Retransmission 3, packet with seq 141042, len 1348 is r=
etransmitted.=C2=A0
	=
Ack <10ms, ack # 142390 (matches seq+len of Retransmission 4). Note that=
 this packet contains data from dropped 'Packet 5' and 'Packet =
6'

- Retransmission 5: 17.8 seconds after Retr=
ansmission 4, packet with seq 142390, len 1302 is retransmitted.=C2=A0
	Ack <10ms, ack # 1436=
92 (matches seq+len of Retransmission 5). Note that this packet contains da=
ta from dropped 'Packet 6' and 'Packet 7'
<=
br>
So the back-off is increased across _different_ retransmissio=
ns, despite the fact those retransmissions are ack'ed very quickly. Now=
 I know there is a chance those acks are coming from the original tranmissi=
on so the server can't calculate a new RTT, but well.. I'm not sure=
 if exponentially (~ x2.5 in my case actually..) increasing the timer acros=
s different ack'ed retransmissions is the right strategy here. 10 lost =
packets (which isn't pretty, I know) in my case would mean 500 seconds =
of waiting.=C2=A0

Am I right that the RFC (or Karn=
's algorithm) doesn't make a statement about this particular scenar=
io ? In that case, should it be clarified ? Or is this such an obvious bad =
strategy that it's overkill to explicitly forbid it per RFC ?

Thanks,

Marc


_______________________________________________

tcpm mailing list

tcpm@ietf.org

https://www.ietf.org/mailman/listinfo/tcpm





--001a11461c722b9f32055e4a9bab--


From nobody Sun Nov 19 03:34:38 2017
Return-Path: 
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 899FE1200CF for ; Sun, 19 Nov 2017 03:34:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xFLtXmCU093l for ; Sun, 19 Nov 2017 03:34:35 -0800 (PST)
Received: from mail-qt0-x22d.google.com (mail-qt0-x22d.google.com [IPv6:2607:f8b0:400d:c0d::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21E2C1200C5 for ; Sun, 19 Nov 2017 03:34:35 -0800 (PST)
Received: by mail-qt0-x22d.google.com with SMTP id d15so11777044qte.4 for ; Sun, 19 Nov 2017 03:34:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=jQ4OVBKsSewHguR5iIWtSpV/m40UhG2FfhAB+Ovs5SI=; b=dLK0GqS35wblozHgPHt5BXpf6Yeg90lUPC8u2eijPFH/Lmfj3M4V9nUHkzdQEEpufW V8nG2Z60s2vIFr+/RYTki+VuXKVAV+3yhvemrdB0IG/q6lwrOvRlAhpl1DqAf45llkGI 5qXLKkqqbj2QUTzPndcmwwIEMG/8nz7Cw3GSohrOPJ06k3fKK3Nb8U2L5QEcOR2nWhuS BPZT6UGgu/JZUWawkLz54min2B5i0ejz+gBPqsRSHeSY6YAC1BNleCPrdZ7iLZpVc/cN 5pDxuTyjZbpJK2XUuS0LocCGJoSGv94oxhqppm43OdonXqG4bqWfmLxRp0CNXYS+Bb7I djvg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=jQ4OVBKsSewHguR5iIWtSpV/m40UhG2FfhAB+Ovs5SI=; b=pO+5RbchAMapA4ptGaHOBaUUECJTZOxthnf4AigeSSjJHu1/9QFviZeMox3SbFwUSd ukx99ftVku3PUNmVYI6kwk0KavPqYFY2aM6j+wP4FgAAhI5ZVy3LDmVEA1Fqrm2VPNUm 8yJZkUcp1pxLWN8BdNbXhoBCjFu8g1NIjBxs8jzZdZPpM65PNM250qEQBSEWgkgvNk9m oWUwPloBsSFP8epmeQUck/0g1ChqwfRPowJMYbIq8mEG9PoGj3P3uR71IXAM+OzOm8Zl rpCccjFIv37X33iUXZYJx+xXa0bUTQjygU7eKZEMQ0+X4yYdX1mu5bkd8sm2IJ9En9Jy QrnQ==
X-Gm-Message-State: AJaThX5RW1ynS8urERze41j6hxwqNlmpBcR+cLWZexLQkxvJffJUy2fb UpSBx2EJ5gAe57P179DZZnk4+Dl+qGSbnNCukRdAWg==
X-Google-Smtp-Source: AGs4zMaR72kGjdSaO2YMGhcfNYKVEgtVwG3GFBGDLxO77PcE1OPts0NRMNnndtDyw7FxpDgTvpO6MHunhkYIAZYvHU8=
X-Received: by 10.237.50.130 with SMTP id z2mr4736995qtd.243.1511091274291; Sun, 19 Nov 2017 03:34:34 -0800 (PST)
MIME-Version: 1.0
Received: by 10.237.37.25 with HTTP; Sun, 19 Nov 2017 03:34:33 -0800 (PST)
In-Reply-To: 
References:  
From: Marc 
Date: Sun, 19 Nov 2017 12:34:33 +0100
Message-ID: 
To: Yuchung Cheng 
Cc: "tcpm@ietf.org Extensions" 
Content-Type: multipart/alternative; boundary="94eb2c122a28a09f7c055e545a02"
Archived-At: 
Subject: Re: [tcpm] increased back-off across different retransmissions
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Sun, 19 Nov 2017 11:34:36 -0000

--94eb2c122a28a09f7c055e545a02
Content-Type: text/plain; charset="UTF-8"

Thanks Yuchung & Richard, I think this will certainly be of help. Some more
RFC's for me to study! The misbehaving component is an SSL offloading
appliance. The vendor states they're using the BSD tcp implementation,
which could be true.. but perhaps a very dated version. Hope this info
helps them to improve.

Marc

--94eb2c122a28a09f7c055e545a02
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable


Thanks=C2=A0Yuchung & Richard, I think this will certa=
inly be of help. Some more RFC's for me to study! The misbehaving compo=
nent is an SSL offloading appliance. The vendor states they're using th=
e BSD tcp implementation, which could be true.. but perhaps a very dated ve=
rsion. Hope this info helps them to improve.=C2=A0

Marc<=
br>




--94eb2c122a28a09f7c055e545a02--


From nobody Sun Nov 19 05:16:37 2017
Return-Path: 
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24584127B5A for ; Sun, 19 Nov 2017 05:16:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.589
X-Spam-Level: 
X-Spam-Status: No, score=-2.589 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dw4SbQ6ooAK6 for ; Sun, 19 Nov 2017 05:16:33 -0800 (PST)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4403E127873 for ; Sun, 19 Nov 2017 05:16:33 -0800 (PST)
Received: from srichardlxp2 ([213.143.121.76]) by mail.gmx.com (mrgmx101 [212.227.17.168]) with ESMTPSA (Nemesis) id 0LyA2L-1fCPYh0PR7-015avP; Sun, 19 Nov 2017 14:16:30 +0100
Message-ID: <90DC8D1E36A24A18B428D2A7505F0330@srichardlxp2>
From: "Richard Scheffenegger" 
To: "Marc" , "Yuchung Cheng" 
Cc: 
References:   
Date: Sun, 19 Nov 2017 14:09:37 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_00BA_01D36140.09DA2990"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5931
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157
X-Provags-ID: V03:K0:tk8HnMXeeJ2nwv0RuVftg9YrfvhYadmKqmq8AzqS2wkcI6P6PCL O+rkzKAJsvzE9IrgXBacyopThhVpR1ec1As5QbJtQTyvVe/M8KDuYEVkvUy37/iaOgyteQ0 Xfmlv2Du/L4PZsG3+ThRWxNEdxHjGILfD8gSsJEJoDy6ZPIxIo27l6yDLbnriW2Zvr5YAid Z+1SYfl7LLv3FIpCbxnyQ==
X-UI-Out-Filterresults: notjunk:1;V01:K0:tAsJs8g/mx4=:Q1lDKXccMjxZsTHJ/6kykm w8pYxaILBnodDdFfIJAN0IzoDmp9miY8IOcfC1EiLu5KEss7OROd2zrrE+3EJZjHOzX98ccsV SZ3yZqYZP1I/EgJC4XVweIsY36ilgAyD4XZz/mqLU34E4Xk5hpxtE6i7q5SKG3TAPfZ2Pmr1F 6Cf+wIj2LaPQs354oKLUQQ65uWRQKJGSLwgpMtSdyHjpWOQR70zl+4TMLnCffYuyaUk68eJ4u roGc19Zkg3j6R6bHyNIeUe5Qja/RqfjLBU4iJekkPdCx0hj2XGYVENK6vAAwGs+8aKqVUEPS4 6/frpTENEc76WaWnZ+Gv7LX3BLPd3R6aRLlvWzw4JnVB5KdOLlEqgjvKJF1bIvsbWTIOcpMGF x6bUZSRz/fecjbnYzDZtRVCb52atpW3ZjW63uZBmaxOJvmkFpV1x3UwTBfDiaihJWkzkrpFab aPlyfyCQj0k42ztcl5LjNVA/b0vIngoD5fXsOTlFT4kYzbidIRGyOoA2lAHajLI4NiUinsZ/m c10N9VQmYGPAh8Gn9pJiPmbAxdnULVvXzG70BTYFV3nKEML1yCP5QjxSy6Lu2hCblxXGI2+op CD9rNAVttui3Si4wgLIBakqVTeoGTUU8vobla6HXHWYo2Kd3h35tGSryW8yt4ypvDJjnJQkYQ 6HHabWzbn+aXVj3SpALPxYBpkeDnMYO4WVExhCtvut+pUifXdG8X7fArZ09iJR6RGha+Z5zm+ yWA4pFBXCm70cybyAwEJ/cAIbtSREn/psfaUbt2Hwsj46Hi9D3IZDpXhRDQg1C9CkSCJKbjj8 MNWqK3Qnk8PrcSiZJ/IKtltE1krNHX7n/w+lgCCDfQL1ZRjsvg=
Archived-At: 
Subject: Re: [tcpm] increased back-off across different retransmissions
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Sun, 19 Nov 2017 13:16:36 -0000

This is a multi-part message in MIME format.

------=_NextPart_000_00BA_01D36140.09DA2990
Content-Type: text/plain;
	charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Marc,

One thing you could be trying though - I've seen in the past misbehavior =
(not quite like this, with the exponential backoff - just multiple =
rounds of timeout loss recovery for all trailing packets) similiar to =
this for SACK-enabled sessions when tail packets were dropped. Loss =
recovery then was significantly worse than with NewReno alone...

In that particular circumstance shown in your trace, disabling SACK and =
forcing the sender to regular NewReno behavior should improve latency. =
For bulk transfers, SACK is usually better though. With incomplete SACK =
recovery, NewReno can have benefits for the high-percentile transaction =
latency.

IIRC, that observation was exactly what ultimately led to having =
RescueRxmt in 6675.

Something you could try with changing only on the client side (and =
potentially on a per session basis).

Best regards,
  Richard


  ----- Original Message -----=20
  From: Marc=20
  To: Yuchung Cheng=20
  Cc: tcpm@ietf.org Extensions=20
  Sent: Sunday, November 19, 2017 12:34 PM
  Subject: Re: [tcpm] increased back-off across different =
retransmissions


  Thanks Yuchung & Richard, I think this will certainly be of help. Some =
more RFC's for me to study! The misbehaving component is an SSL =
offloading appliance. The vendor states they're using the BSD tcp =
implementation, which could be true.. but perhaps a very dated version. =
Hope this info helps them to improve.=20


  Marc






       Virus-free. www.avg.com =20



-------------------------------------------------------------------------=
-----


  _______________________________________________
  tcpm mailing list
  tcpm@ietf.org
  https://www.ietf.org/mailman/listinfo/tcpm

------=_NextPart_000_00BA_01D36140.09DA2990
Content-Type: text/html;
	charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

=EF=BB=BF







Marc,


 


One thing you could be trying though - =
I've seen in=20
the past misbehavior (not quite like this, with the exponential backoff =
- just=20
multiple rounds of timeout loss recovery for all trailing packets) =
similiar to=20
this for SACK-enabled sessions when tail packets were dropped. Loss =
recovery=20
then was significantly worse than with NewReno alone...


 


In that particular circumstance shown =
in your=20
trace, disabling SACK and forcing the sender to regular NewReno =
behavior=20
should improve latency. For bulk transfers, SACK is usually better =
though. With=20
incomplete SACK recovery, NewReno can have benefits for the =
high-percentile=20
transaction latency.


 


IIRC, that observation was exactly what =
ultimately=20
led to having RescueRxmt in 6675.


 


Something you could try with changing =
only on the=20
client side (and potentially on a per session basis).


 


Best regards,


  Richard


 


 


  
----- Original Message ----- 

  From:=20
  Marc=20
  

  
  
  
Sent: Sunday, November 19, 2017 =
12:34=20
  PM

  
Subject: Re: [tcpm] increased =
back-off=20
  across different retransmissions

  


  
Thanks Yuchung & Richard, I think this will =
certainly be=20
  of help. Some more RFC's for me to study! The misbehaving component is =
an SSL=20
  offloading appliance. The vendor states they're using the BSD tcp=20
  implementation, which could be true.. but perhaps a very dated =
version. Hope=20
  this info helps them to improve. 
  


  
Marc

  


  


  


  Virus-free.=20
        www.avg.com 

    
    

      
      

  

  


  
_______________________________________________
tcpm mailing =

  =
list
tcpm@ietf.org
https://www.ietf.org/mailman/listinfo/tcpm


------=_NextPart_000_00BA_01D36140.09DA2990--


From nobody Sun Nov 19 22:03:37 2017
Return-Path: 
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF0F912741D for ; Sun, 19 Nov 2017 22:03:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YRGjpmBMTzxE for ; Sun, 19 Nov 2017 22:03:34 -0800 (PST)
Received: from smtp-01.netinary.com (smtp-01.netinary.com [5.196.120.251]) by ietfa.amsl.com (Postfix) with ESMTP id 38A5112751F for ; Sun, 19 Nov 2017 22:03:31 -0800 (PST)
Received: from loadbalancer1.netinary.net (unknown [217.16.13.51]) by smtp-01.netinary.com (Postfix) with ESMTPS id E8E48142D; Mon, 20 Nov 2017 07:03:29 +0100 (CET)
Received: from orange-cl2-01.netinary.net (unknown [217.16.13.130]) by loadbalancer1.netinary.net (Postfix) with ESMTP id 8E37D6003E; Mon, 20 Nov 2017 07:03:29 +0100 (CET)
Received: from Gs-MacBook-Pro.local (unknown [172.16.90.103]) by orange-cl2-01.netinary.net (Postfix) with ESMTP id 2B99A142BD4; Mon, 20 Nov 2017 07:03:28 +0100 (CET)
Message-ID: <5A127030.8050809@erg.abdn.ac.uk>
Date: Mon, 20 Nov 2017 07:03:28 +0100
From: Gorry Fairhurst 
Reply-To: gorry@erg.abdn.ac.uk
Organization: University of Aberdeen
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:12.0) Gecko/20120428 Thunderbird/12.0.1
MIME-Version: 1.0
To: tcpm@ietf.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: 
Subject: [tcpm] Comments on ECN++ (rev 02)
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 20 Nov 2017 06:03:36 -0000

tcpm@ietf.org

I reviewed this draft prior to the IETF-100 meeting, but did not manage 
to send notes until just now. Thanks for this revison!

Overall, I had three observations and some comments on the writing iof 
the current ID.

* It seems like a silly question, but as I read this I do wonder: Do we 
**need** to allow ECT(1) on SYN as in 3.2.2.1?

* I think the AccECN studff requires a decision on how to present the 
info differently. This talks about recommending AccECN implementation, 
which implies a reader beds ti read both this and AccECN together. Both 
of these are long documents, and when you read these together one 
discovers many areas of overlap - but the pieces neded are in both drafts.

... One thing I suggest we consider is whether the ECN++ draft simply 
defines the method when AccECN is not supported. The AccECN draft 
appears to contain the machinery to allow ECT on SYN. One drawback is 
that the AccECN draft does not define mechanisms to react, but does 
define fallback. It could even be that the simplest is to write 3 drafts 
- having one just on AccECN+ECTonSYN?

... The considerations for reaction to CE-marked SYN and the 
implications of loss seem to be one area of experimentation, hence 
placing this in one place may help identify whether that experiment has 
suceeded. I'll type-up my notes on AccECN next.

Whatever, the two drafts are not consistent on the use of caching, and 
specifying the SYN processing once I think would help to simplify things.

If this is the direction, Table 1 could then be simplified, and one 
could add a column showing the section number where the topic is discussed?

* The section 4 is quite long. I'm not sure of who is the real target 
(or tragets) for section 4 and I think this therefore needs to be made 
clearer, so that people would know beforehand whether they should read 
the whole of this section.

Gorry

---

Some more specific comments on the text in the -02 draft:

(1) Style: The introduction sectionc contains a "RECOMMENDS: statement 
recommending AccECN. This comes before the IETF keyword declaration, and 
is not normal for an introduction. I suggest you avoid keywords in the 
intro.

(2) Final para of 1.1
- I really dislike the way this statemnent somehow reads as asserting 
the value of "ongoing experimental efforts to promote the adoption of a 
***slightly*** modified variant of DCTP". I suggest the should be 
English improved here, to avoid making the prior claim that this is 
"slight" (even if it may turn out to be so).  e.g., if the WG thinks the 
work should be based on DCTP, I'm sure the ID can say ths, but I'd 
really prefer we simply state the effort to build an IETF transport for L4S.

(3)Final para of 1.1: Is there really a problem with the SYN packet 
travelling via a different queue? The text suggests reordering is an 
issue, which I do not understand.  I'd have thought a SYN packet was the 
only packet in flight when the connection is being setup, what is the 
ordering wrt?

(4) I think in this case you could refer to the RFC: There is a phrase 
/When this specification/. This phrase always seems problematic in ID, 
with ambiguity to know whether it refers to the present document.

(5) TEXT: "MAY be adopted if found to be more effective".
- To me that seems like the document is almost defining working group 
process surrounding this. I don't think this document ought to do this. 
I suggest you delete the text, or at least don't use a RFC2119 keyword.

(6) TEXT: "MAY also implement AckCC".
-  Is this a /It is RECOMMENDED that AckCC is implemented/ - from text 
elsewhere this seems correct. I think some people prefer to say "is 
RECOMMNDED" when the text refers to an implemementation requirement, 
rather than protocol requirement.

(7) 3.2.3
- I do see the logic in not setting ECT unless there is feedback 
sup[ported to report CE.

(8) 3.2.4
- Please rephrase the first para in terms of citing the ECN-Experiments 
ID (in TSVWG) that enables this, rather than talking of the prohibition 
that has passed and the need to ignore - there is no need for this, 
since the TSVWG ID *WILL* be published before this.

(9) 3.2.6
- This recommends RFC5961. This seems an odd thing to suddently place an 
implementation requirement, if there are important requirements then I 
would hope these appear earlier in the document and are justified. I 
really encourage the WG to put all implementation requirements in a 
separate section, so implementors know what depends on what.

(10) Setion 4
- The section seems to call out a number of things that need to be done. 
Some of these may be neded before WGLC... but I don't know see which? 
Some are evidently targeting IETF experimentation, some are discussion 
of the background (could be an appendix?). At the moment this makes for 
quite a long read.

(11) Section 5.3, Para 1
The style of the SCTP discussion seems well-intentioned, but 
inappropriate, since it is based on a long-expired draft. (I strongly 
suggest we do not publish RFCs that discuss IDs that have not been 
progressed in WGs.) I suggest that more appropriate text could simply 
say "RFC4960 describes how ECN would be supported for SCTP, but at the 
time of writing there is no IETF Specification for this", or something 
similar.

Gorry






From nobody Sun Nov 19 23:15:43 2017
Return-Path: 
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02ECC129417 for ; Sun, 19 Nov 2017 23:15:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z0R4rQvhEhKa for ; Sun, 19 Nov 2017 23:15:39 -0800 (PST)
Received: from smtp-01.netinary.com (smtp-01.netinary.com [5.196.120.251]) by ietfa.amsl.com (Postfix) with ESMTP id 18691129412 for ; Sun, 19 Nov 2017 23:15:38 -0800 (PST)
Received: from loadbalancer1.netinary.net (unknown [217.16.13.51]) by smtp-01.netinary.com (Postfix) with ESMTPS id 72EBB142C; Mon, 20 Nov 2017 08:15:37 +0100 (CET)
Received: from orange-cl2-01.netinary.net (unknown [217.16.13.130]) by loadbalancer1.netinary.net (Postfix) with ESMTP id 27EB66003E; Mon, 20 Nov 2017 08:15:37 +0100 (CET)
Received: from Gs-MacBook-Pro.local (unknown [172.16.90.103]) by orange-cl2-01.netinary.net (Postfix) with ESMTP id 2A6A014002D; Mon, 20 Nov 2017 08:15:36 +0100 (CET)
Message-ID: <5A128116.9080609@erg.abdn.ac.uk>
Date: Mon, 20 Nov 2017 08:15:34 +0100
From: Gorry Fairhurst 
Reply-To: gorry@erg.abdn.ac.uk
Organization: University of Aberdeen
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:12.0) Gecko/20120428 Thunderbird/12.0.1
MIME-Version: 1.0
To: tcpm@ietf.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: 
Subject: [tcpm] Detailed review of  AccECN rev -04
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 20 Nov 2017 07:15:42 -0000

tcpm@ietf.org

I've read the -04 rev of teh above ID, and I have the following comments 
for the TCPM WG.

Overall,

* This document reads well, and seems mature.

* There are several references to other IETF activities, and the text 
concerning these appears to need to be revised before this is ready to 
proceed. See below.

* Since this document was adopted, work on ECN++ appears to have become 
inter-twined with this ID. I did not find this helpful, and made 
comments on ECN++ today that voiced this concern and requested we 
consider as a WG to best frame the proposed modification on the TCP SYN 
permitting ECT(?) to be set. See comment (6).

* I wonder if this document updates any other RFCs - I'd assume not -  
but it may if a future work proceeds along the standards track. I think 
it would be good to specifically identify in one section of the intro 
what these implications are.
For instance:
- The discussion of ECN on SYN is predecated by ECN-Experimentation 
(targeting publication as PS)
- The discussion of ECN on SYN has implications on ECN++, which 
recommends AccECN is implemented.
- A future standards-track document based on the AccECN experimental RFC 
could update RFC3168.
- etc.

* The document may intend a proposed change to RFC 5681 (4.2.  
Generating Acknowledgments). See comment (8).

Gorry

---

Some more specific comments on the text in the -04 AccECN draft:

(1) The introduction - "until the AccECN experiment suceeds, [RFC3168] 
will remain as the standards track specification for adding ECN to TCP."
- This seems odd. I think this is not the case:
Quite simply: "RFC3168 defines the current TCP feedback method."
- It may be you think a  future standards-track document based on the 
AccECN experimental RFC could update RFC3168, that is possible, but 
there is no need for an EXP to make that direct claim against as PS.

(2) Section 1.5. First para. (On loss v drop using ECN)
- I'd feel happier also noting that a router implementing AQM is still 
allowed to drop packets marked as ECT() when this is needed - and you 
could refer to the BCP to say so: /RFC/7567.

(3) Section 1.5. Last para.
- Please remove the discussion of Nonce from here!
- It is OK simply to refer to the PS specifying ECN Experimentation - or 
the process document to do this.
- If it is really necessary to discuss this, please use the form of 
words expressed in that draft, rather than saying "was never deployed".

(4) Section 3.1.1
"is being reclassified as historic."
- Again this text is now out-of-date, see comment (3).

(5) Section 3.1.1, ECN Nonce.
- This definition also contains text later that say "does not need...". 
It's not that it doesn't need, more that the IETF has changed the use of 
this field. I think it would be easy to simply remove this definition - 
but the WG wants to keep it please align the text precisely with the ECN 
Experimentation draft. The last para of section 4 repeats this and has 
the smae problem.

(6) Section 3.1.2. ECN on SYN
- This section seems to be a variant of the section expressed in the 
ECN++ draft (sect 4.2). That draft rather awkwardly refers back to thsi 
draft recommending AccECN is implemented - but the two specs differ.

I do encourage the WG to think about where the update on ECN for SYN is 
best described. There are specific issues for experimentation and for 
cahcing in ECN++ and other issues here. I'd like a cleaner spec so that 
**IF** there are results from the experiments we know how to then 
publish a PS and declare the experiment as historic. At the moment this 
seems awkard.

- Section 3.2.7.2 is also about the SYN negotiation. And similar to ECN++.

(7) Section 3.2.3 (First segment after SYN)
- TCP segments can be re-ordered, so saying the "first segment after 
SYN" should (I think) probably be the segment numbered after the SYN 
segment - noting that this is not necessarily the next segment received 
(in time order).

(8) Section 3.2.5
- The modified delayed ACK policy stated here is an experimental update 
to the IETF recommended procedure in a PS (RFC5681, 4.2.  Generating 
Acknowledgments). I think it is important that the change is referenced 
back to this RFC. The proposed change could have implications on the 
capacity used for the ACK stream - and this should be noted.

(9) RFC2119:  Section 3.2.7.1, para 1
- The ID says the client MUST NOT include the AccECN option on the SYN. 
What does a server do that receives such an option?

(10) RFC2119:   Section 3.2.7.1, para 2
- "A TCP server that confirms its support ... SHOULD also"
- I couldn't parse that sentence... Is that to imply there are valid 
reasons why the server could be implemented in a way that does not do 
this? (That doesn't seem to be explained).
- What is the meaning of "also" here. Does that mean the support is 
already confirmed in some other way? (I'm not sure also after SHOULD is 
a helpful construction of a clause).

(11) RFC2119: Section 3.2.7.1, para 3
- I think the sentence starting "A TCP Client" also contains two SHOULD 
clauses without saying what are the conditions for not doing this.  I 
think it is often wiser to start these sort of clauses by saying 
something like this order to avoid this:

... A host that receives an AccECN option SHOULD respond by returning 
the AccECN option in the first ACK at the end of the 3WHS. ... There are 
three cases when the host could decide not to ...

When the TCP client returns the ECN option, it SHOULD also include an 
AccECN option on the first data segment it sends... This is to ensure 
that...

(12) RFC2119: Please also avoid "MAY NOT" as a construct, since this can 
be mis-interpretted by different varients of English usage.

(13) Section 3.3 appears to make string normative requirements (MUST) on 
the operation of middleboxes. This may be the intention, but if so, I 
think it would be much wider to then make this evident in the section 
title and the document introduction.

(14) RFC2119: Section 3.3 appears to make mixed normative requirements 
(MUST attempt) on offload. I don't know what that means. I think this 
could be equivalent to "SHOULD" with an explanation of WHY this is so 
needed (which is sort of there).

(15) Section 3.3 on offload.
- If this is intended to change offload behaviour, I think it needs a 
separate section to say this, mentioned in the intro, otherewise people 
implementing offload will not see and read this.

(16) Section 4, Section 5, Appendix A, intro.
- You could remove (not normative) to be even clearer.

(17) For the avoidance of doubt it may be wise to state the standards 
status of the TCP AO and Conex work... e.g., "TCP AO is a 
standards-track method to ..."

Best wishes,

Gorry


From nobody Tue Nov 21 07:24:38 2017
Return-Path: 
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B7711294CF for ; Tue, 21 Nov 2017 07:24:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=netapp.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tljrKdnFdr28 for ; Tue, 21 Nov 2017 07:24:36 -0800 (PST)
Received: from mx144.netapp.com (mx144.netapp.com [IPv6:2620:10a:4005:8000:2306::d]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0FB901294CC for ; Tue, 21 Nov 2017 07:24:36 -0800 (PST)
X-IronPort-AV: E=Sophos;i="5.44,432,1505804400";  d="asc'?scan'208";a="228005735"
Received: from vmwexchts02-prd.hq.netapp.com ([10.122.105.23]) by mx144-out.netapp.com with ESMTP; 21 Nov 2017 07:23:37 -0800
Received: from VMWEXCCAS07-PRD.hq.netapp.com (10.122.105.25) by VMWEXCHTS02-PRD.hq.netapp.com (10.122.105.23) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Tue, 21 Nov 2017 07:23:36 -0800
Received: from NAM03-DM3-obe.outbound.protection.outlook.com (10.120.60.153) by VMWEXCCAS07-PRD.hq.netapp.com (10.122.105.25) with Microsoft SMTP Server (TLS) id 15.0.1320.4 via Frontend Transport; Tue, 21 Nov 2017 07:23:36 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netapp.onmicrosoft.com; s=selector1-netapp-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=sgRI633llov6KQ4ZZEu56AfBjSNbTHosAzr3mwI/5mA=; b=XWx9dHRMud4ATOuF+9ab0Cv9ybvtzi/gsF95czIvMFrTJt8o0tYlapRbqhNpaHTq7i/AtEJr8qkDnci4aHjyAknjVLcsXqbA/ShFCvbmb8Itrhva65UIx+u/SXmlfYys1JdVZjs11IRvd24VxMxinoUWqwLqMGTYQKhCjwj5R2g=
Received: from BLUPR06MB1764.namprd06.prod.outlook.com (10.162.224.150) by BLUPR06MB1762.namprd06.prod.outlook.com (10.162.224.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.239.5; Tue, 21 Nov 2017 15:23:35 +0000
Received: from BLUPR06MB1764.namprd06.prod.outlook.com ([10.162.224.150]) by BLUPR06MB1764.namprd06.prod.outlook.com ([10.162.224.150]) with mapi id 15.20.0239.009; Tue, 21 Nov 2017 15:23:35 +0000
From: "Eggert, Lars" 
To: "tcpm@ietf.org" 
Thread-Topic: Comments on draft-bagnulo-tcpm-esn
Thread-Index: AQHTYtyyUx4BVthVkkGprVG/ij7pJw==
Date: Tue, 21 Nov 2017 15:23:35 +0000
Message-ID: 
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-mailer: Apple Mail (2.3445.4.7)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=lars@netapp.com; 
x-originating-ip: [217.70.211.15]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BLUPR06MB1762; 6:NWA6Hxir9Yfd78yBzvDkg5p4IpEBWBjlZ9fhjDcEFFBJv8qH8sEORQGfNHLGKqipqU56gjvomlvpYUsfxeFdqDHSJFvK4Gw2LECoC8ueDwQebtvorbONts2O1hbvDHzyqmrHu34GEVIzGPhTP+NJ8LSy7VghNY7oXI5FuYwcoO4zHL2PIVaJZv6GxB4gLCE0KdFGHHjrM+896VsMPCWVlsbjKHIS0rjnpXaHS6lltyUhgdgl24tFUDFNhVANh1IqENPNfvHKobZbecrFk5KNj9on7n6aiMfcMOFQeuPLBnnGysqE45Sv8CKyhQYuazi9PCejug6xwv5mnTlJ6NRyFzRJhqiIi2SPczflcHQZW/k=; 5:F6PmP0PL5WEpOnjVBqEDKN/xbQ51XjYJjCvkt9sGqFirJCZ8SNS8XHw34HGaMXe79n3KF4QnJreXfh4tFADkP0295LLwyd0h/gWx/KmUlDqNTGWaLQm3j8tTEAp9zBmtjPh5Qn/MSFY4BfkhkjcY5ikDcbDJO04pv7kZE33oyf0=; 24:fOvq4jlJsaU/C2pFOUGjFtK3n2rHm8VK4ycKbmfc4WsmQQKH1IubTw2sRvPW5TEucyvknLurgjBwiFZwBhYUSyFktPfyHSen5fqNNigylgU=; 7:x+vXa59AQC30UuLQxjuYeFdnYEP1qI8uuvaarJ0UMm3vz93Ubj29lvMsLRzVBOt+SqJ1o7AoVPv0HVmT7cmrwNplUb3hD5gp/30PtakLL4JBtY7B0ymRJtlZSDSlKwZivOKqMsOJtHnZskMuhDqUkpW3qHb/kAnhYUj0ZNEImG0Vl+6VJbn+/ErjG44+1JJVFhFXflqhbzs9TSo1ANi/O3TlNRahSBCTZhJ9OigFV7de9UgCDzpenk03gzKxDrnS
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-correlation-id: b2567351-df9d-4c90-d52c-08d530f3d504
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(2017052603199)(49563074); SRVR:BLUPR06MB1762; 
x-ms-traffictypediagnostic: BLUPR06MB1762:
x-microsoft-antispam-prvs: 
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(102415395)(6040450)(2401047)(5005006)(8121501046)(100000703101)(100105400095)(93006095)(93001095)(3231022)(10201501046)(3002001)(6055026)(6041248)(20161123562025)(20161123555025)(20161123558100)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123560025)(20161123564025)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:BLUPR06MB1762; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:BLUPR06MB1762; 
x-forefront-prvs: 049897979A
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(346002)(376002)(189002)(199003)(101416001)(3660700001)(230783001)(3280700002)(33656002)(97736004)(106356001)(105586002)(50986999)(82746002)(14454004)(2906002)(6486002)(6506006)(77096006)(6436002)(25786009)(99936001)(57306001)(5640700003)(50226002)(68736007)(53936002)(66066001)(478600001)(2501003)(36756003)(8676002)(86362001)(2900100001)(81166006)(81156014)(1730700003)(99286004)(6512007)(7736002)(305945005)(102836003)(8936002)(83716003)(2351001)(6116002)(3846002)(5660300001)(189998001)(6916009)(316002); DIR:OUT; SFP:1101; SCL:1; SRVR:BLUPR06MB1762; H:BLUPR06MB1764.namprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  MX:1; A:1; LANG:en; 
received-spf: None (protection.outlook.com: netapp.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/signed; boundary="Apple-Mail=_AD14C2A5-B29C-4C87-8E6E-D394498736E0"; protocol="application/pgp-signature"; micalg=pgp-sha512
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: b2567351-df9d-4c90-d52c-08d530f3d504
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2017 15:23:35.0593 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4b0911a0-929b-4715-944b-c03745165b3a
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR06MB1762
X-OriginatorOrg: netapp.com
Archived-At: 
Subject: [tcpm] Comments on draft-bagnulo-tcpm-esn
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Tue, 21 Nov 2017 15:24:37 -0000

--Apple-Mail=_AD14C2A5-B29C-4C87-8E6E-D394498736E0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Hi,

after my half-baked idea during the Singapore session (i.e., WS option =
15 means "multiply by 64 or other large value), here's another one, even =
less baked:

Make WS option 15 mean "no flow control".

If you're doing >100G/s for a single flow, you're very unlikely to still =
rely on flow control to protect you from being overrun. Your problem is =
likely the exact opposite, i.e., making sure that there are no local =
bottlenecks that would prevent you from reaching that level of =
throughput. Plus, the number of slots in your NIC ring is probably =
already enforcing some sort of FC on you...

Lars

--Apple-Mail=_AD14C2A5-B29C-4C87-8E6E-D394498736E0
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="signature.asc"
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Message signed with OpenPGP

-----BEGIN PGP SIGNATURE-----
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=Qej0
-----END PGP SIGNATURE-----

--Apple-Mail=_AD14C2A5-B29C-4C87-8E6E-D394498736E0--


From nobody Tue Nov 21 08:56:15 2017
Return-Path: 
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 99507129AC6 for ; Tue, 21 Nov 2017 08:56:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=it-uc3m-es.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w8JExYFSGtEa for ; Tue, 21 Nov 2017 08:56:10 -0800 (PST)
Received: from mail-wr0-x231.google.com (mail-wr0-x231.google.com [IPv6:2a00:1450:400c:c0c::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C6A59129ACC for ; Tue, 21 Nov 2017 08:56:09 -0800 (PST)
Received: by mail-wr0-x231.google.com with SMTP id s41so6483979wrc.7 for ; Tue, 21 Nov 2017 08:56:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=it-uc3m-es.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=booWruCUW/00Ka0B4H6K/6YEHg8rtBZ1Owb1YxGt38g=; b=OIfxReqMwGHevVXPTuomyPqgHWLOPF7KVbgtVvfCyr2DiNmCmt1mFqxhIemJBprFaL GKKrGey1L3jR8PeJmJEyekRuFyUU7/tCN486xUj4adtlqdE7i3IOK8jy+eU6bHrvm+O1 ZBk+cTCvQi27yxetgtJgr8szqfrP1fv9hm1MsMsdQuLnAghyYDtnvlWpAzFqNF1zx0L5 6D4gqqadLfD/DHt9k7visT7SlB8X/8gIQJQJGB9Osi4z+Q8JluMZYZmPnFFxG4XQKp9V 3jIgwZ0CqoL812cyszalM/yPimgH65qyrAU4v9wuOnRi9egigph/8LIs6yluBu0YOp1b 6hKw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=booWruCUW/00Ka0B4H6K/6YEHg8rtBZ1Owb1YxGt38g=; b=MomEh2t+R8Yz6RcdbWwXc9e5q52AnD4gKbw/2OzhoCOhJ2wvbQRH/IJnlpgeK+hvKs ocEJlZq00sqZUOkKwU5LzLvZdJHPvApTGlGunE90+yirqKYuSopRt4XEbRC4oRMtYzPu +cQG6j9VHGUt21mQXzxvCGYQoZrnZH3b44AH7f5FqJZq2Lk/BEJObigfPWa9aeihlblu gPA2BHFZD5t6J4MxchcvAXoWHdONQ/jrpl7/coXXg7QKq33P8ue5eybiIw5FVOtP9OI7 XRZQmWegCM1YeaREHQfoJvONALxvgiVALmY/fxE0IFT+R1ugeQe6AhU1981VEhudlZyv ARDw==
X-Gm-Message-State: AJaThX6JOtaP0AMpA8fyzJGKi8jV+d0cVu2ucKO7fiFAgzursLuN1mvY DZ9/JTSvu/UQGY69d6to6GCYcfN2
X-Google-Smtp-Source: AGs4zMafE7MBYyX92hKgcqUR8Jl21UaYMdxaglRK+FsEOgCH6gzvrB3aXIW5UHg3Wk2YOZUblPlXsQ==
X-Received: by 10.223.163.11 with SMTP id c11mr8417563wrb.214.1511283368046; Tue, 21 Nov 2017 08:56:08 -0800 (PST)
Received: from Macintosh-6.local (111.26.219.87.dynamic.jazztel.es. [87.219.26.111]) by smtp.gmail.com with ESMTPSA id o10sm539598wrg.5.2017.11.21.08.56.06 for  (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 21 Nov 2017 08:56:07 -0800 (PST)
To: tcpm@ietf.org
References: 
From: marcelo bagnulo braun 
Message-ID: <01a5c8a6-cc73-46d5-9150-82f3340894ed@it.uc3m.es>
Date: Tue, 21 Nov 2017 17:56:06 +0100
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
Archived-At: 
Subject: Re: [tcpm] Comments on draft-bagnulo-tcpm-esn
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Tue, 21 Nov 2017 16:56:14 -0000

Hi,

Reply below...

El 21/11/17 a las 16:23, Eggert, Lars escribi:
> Hi,
>
> after my half-baked idea during the Singapore session (i.e., WS option 15 means "multiply by 64 or other large value), here's another one, even less baked:

I understand what you are saying here is that the units to which a 
sequence number is assigned is no longer a byte, but a multiple of n 
bytes, e.g. 64 bytes.

I guess a first issue here is what happens if the amount of data that 
the sender wants to send in a segment is not multiple of 64 bytes (and 
it is not the last segment in the connection)?

The problem is which seq number you put to the next segment, since the 
first byte of data in the next segment was part of the previous segment 
64-byte word. Moreover, what happens if you want to send n packets of 
one single byte?

Regards, marcelo
> Make WS option 15 mean "no flow control".



> If you're doing >100G/s for a single flow, you're very unlikely to still rely on flow control to protect you from being overrun. Your problem is likely the exact opposite, i.e., making sure that there are no local bottlenecks that would prevent you from reaching that level of throughput. Plus, the number of slots in your NIC ring is probably already enforcing some sort of FC on you...
>
> Lars
>
>
> _______________________________________________
> tcpm mailing list
> tcpm@ietf.org
> https://www.ietf.org/mailman/listinfo/tcpm



From nobody Wed Nov 22 00:07:50 2017
Return-Path: 
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 21705127AD4 for ; Wed, 22 Nov 2017 00:07:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=netapp.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6DY5Cpr_7f_d for ; Wed, 22 Nov 2017 00:07:46 -0800 (PST)
Received: from mx144.netapp.com (mx144.netapp.com [IPv6:2620:10a:4005:8000:2306::d]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 947571279EB for ; Wed, 22 Nov 2017 00:07:46 -0800 (PST)
X-IronPort-AV: E=Sophos;i="5.44,436,1505804400";  d="asc'?scan'208";a="228161313"
Received: from hioexcmbx03-prd.hq.netapp.com ([10.122.105.36]) by mx144-out.netapp.com with ESMTP; 22 Nov 2017 00:07:45 -0800
Received: from VMWEXCCAS01-PRD.hq.netapp.com (10.122.105.11) by hioexcmbx03-prd.hq.netapp.com (10.122.105.36) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Wed, 22 Nov 2017 00:07:45 -0800
Received: from NAM01-SN1-obe.outbound.protection.outlook.com (10.120.60.153) by VMWEXCCAS01-PRD.hq.netapp.com (10.122.105.11) with Microsoft SMTP Server (TLS) id 15.0.1320.4 via Frontend Transport; Wed, 22 Nov 2017 00:07:45 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netapp.onmicrosoft.com; s=selector1-netapp-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=RxJ/+94Gpd5ZBUfuWMj32WL4CzWqoLW1nwGVqmzD0+w=; b=UpG+Dr5UDFvr9kCWX5+eKPyxEAt5CtyQoyafySrqW56yLxiznbSvMzqG0isS25QXSfnoBzEZI/WU2P9zi25EBpH9IoRwfoavnPEDsz2TJm6soCDl9Pcu8gk+H0rgxslPkoEtEQVe2A+MdsOT6jBcgKXgxYtfxwLokMVIWedxUtQ=
Received: from BLUPR06MB1764.namprd06.prod.outlook.com (10.162.224.150) by BLUPR06MB1762.namprd06.prod.outlook.com (10.162.224.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.239.5; Wed, 22 Nov 2017 08:07:44 +0000
Received: from BLUPR06MB1764.namprd06.prod.outlook.com ([10.162.224.150]) by BLUPR06MB1764.namprd06.prod.outlook.com ([10.162.224.150]) with mapi id 15.20.0260.004; Wed, 22 Nov 2017 08:07:43 +0000
From: "Eggert, Lars" 
To: Marcelo Bagnulo 
CC: "tcpm@ietf.org" 
Thread-Topic: [tcpm] Comments on draft-bagnulo-tcpm-esn
Thread-Index: AQHTYtyyG2ENxnqm7k+WHuddaTAjZaMfDYQAgAD+swA=
Date: Wed, 22 Nov 2017 08:07:43 +0000
Message-ID: <72668587-3FC7-4981-9DFF-89BD785045A3@netapp.com>
References:  <01a5c8a6-cc73-46d5-9150-82f3340894ed@it.uc3m.es>
In-Reply-To: <01a5c8a6-cc73-46d5-9150-82f3340894ed@it.uc3m.es>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-mailer: Apple Mail (2.3445.4.7)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=lars@netapp.com; 
x-originating-ip: [217.70.211.15]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BLUPR06MB1762; 6:7gWoS/g6p+OLcAhxRdwFjTpO/8IaneyTxQOl8Uhr48flqt8f8BCxUG6aby7JknON/NlhKLANc3xVSysbGBJaCmm2kQxSQTXno7ZcTS3i6VXF4FakkcFroHwzHh2mm4VbK3W8EXfHIMiisaLrxzeUJQqUg3r1TfjiIK8frwtQlmDDb8VSkygGJ6mCId+DZtF4zxcNX455lX5YcmQ4iCAxD5aBv73Ij2YAoZ+uNg3AQxWsMS68WZobPJm4JVFdlX5Q7tIdkA67iepDkU+6iboKCrfoYgt2RLha/Sxv6bF0uiTENt9bD67NAHiXxe9EGpMcJSIFWfxm5piFOXHDm0wvl7lZM+VKiMzl02KylC6Gy6M=; 5:jrDrhwPt2CZlkvnUVQZzV/2Fmv7JT46Pou5XbVD4e3RUcIFDKIeZGwV197pYXSNjW36uEmog0HsMUyNPr2jQYVGczYEkH0f2pdlZQtWC7ius2U8hrzSlw0HhC3bIbVWScG07XJqmN2R58VY7H3se2jvbg2PzgI5f9uc0pZtnrtM=; 24:+pwv0z6xtFz0IJFarj2ZcyUKt8CdOnyVN3u48vX+COBE0zvDbHqw4xKWboo8Grjljp7TRGyOOwhx948LVpLN/3pHVQEhId5D126fWvhOQgQ=; 7:HFNTEiDHBbWtHKbcHXyHuhfuCtzaL8ZfgfiUjcP6/k4UgmYRbVNJr20WkYBi+07Qu32JbrgFfUAVXnF20cPsPVBGUeXU2KRWWAdIYGKJfrWeO8pXrhx2Bi5Cy/4WNKcXWpjSNBm+wWQMVS0jcMRiCLKz++6YLU4kzx3Uo6l3vefPnkP3g/naUauO1rFlJk2BQxoJic+dLTkUbxqE2pvyvdJ9TKf+RML39Iip+FzGa8QaB13slx51JbyH88UORS39
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-correlation-id: 0beebf1d-f29e-4f20-fe27-08d531801c10
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(2017052603199)(49563074); SRVR:BLUPR06MB1762; 
x-ms-traffictypediagnostic: BLUPR06MB1762:
x-microsoft-antispam-prvs: 
x-exchange-antispam-report-test: UriScan:(190756311086443);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(102415395)(6040450)(2401047)(5005006)(8121501046)(100000703101)(100105400095)(3002001)(3231022)(93006095)(93001095)(10201501046)(6055026)(6041248)(20161123555025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(20161123560025)(20161123564025)(20161123562025)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:BLUPR06MB1762; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:BLUPR06MB1762; 
x-forefront-prvs: 0499DAF22A
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(346002)(376002)(189002)(31014005)(199003)(24454002)(377424004)(77096006)(3280700002)(2906002)(4326008)(2950100002)(6916009)(7736002)(99286004)(68736007)(36756003)(2900100001)(189998001)(229853002)(81156014)(50226002)(8676002)(81166006)(83716003)(478600001)(82746002)(86362001)(4001150100001)(105586002)(106356001)(33656002)(66066001)(101416001)(25786009)(230783001)(316002)(53546010)(57306001)(6512007)(6436002)(8936002)(53936002)(305945005)(50986999)(99936001)(76176999)(6506006)(6486002)(3660700001)(14454004)(6116002)(102836003)(3846002)(6246003)(5660300001)(97736004); DIR:OUT; SFP:1101; SCL:1; SRVR:BLUPR06MB1762; H:BLUPR06MB1764.namprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  MX:1; A:1; LANG:en; 
received-spf: None (protection.outlook.com: netapp.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/signed; boundary="Apple-Mail=_C83F914C-2929-4580-9435-696DAC44A5ED"; protocol="application/pgp-signature"; micalg=pgp-sha512
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 0beebf1d-f29e-4f20-fe27-08d531801c10
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Nov 2017 08:07:43.5962 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4b0911a0-929b-4715-944b-c03745165b3a
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR06MB1762
X-OriginatorOrg: netapp.com
Archived-At: 
Subject: Re: [tcpm] Comments on draft-bagnulo-tcpm-esn
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Wed, 22 Nov 2017 08:07:48 -0000

--Apple-Mail=_C83F914C-2929-4580-9435-696DAC44A5ED
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi,

On 2017-11-21, at 17:56, marcelo bagnulo braun  =
wrote:
> El 21/11/17 a las 16:23, Eggert, Lars escribi=C3=B3:
>> after my half-baked idea during the Singapore session (i.e., WS =
option 15 means "multiply by 64 or other large value), here's another =
one, even less baked:
>=20
> I understand what you are saying here is that the units to which a =
sequence number is assigned is no longer a byte, but a multiple of n =
bytes, e.g. 64 bytes.
>=20
> I guess a first issue here is what happens if the amount of data that =
the sender wants to send in a segment is not multiple of 64 bytes (and =
it is not the last segment in the connection)?
>=20
> The problem is which seq number you put to the next segment, since the =
first byte of data in the next segment was part of the previous segment =
64-byte word. Moreover, what happens if you want to send n packets of =
one single byte?

I said "half-baked" for a reason :-)

I'd observe that if you intent to go 100G on a single flow, you are =
unlikely to be successful if you are sending packets with less than 64B =
of data.

There are ugly ways to handle such corner cases, such as padding to 64B =
with dummy data and adding a new TCP option to remove that data from the =
byte stream delivered to applications.

>> Make WS option 15 mean "no flow control".
>=20
>> If you're doing >100G/s for a single flow, you're very unlikely to =
still rely on flow control to protect you from being overrun. Your =
problem is likely the exact opposite, i.e., making sure that there are =
no local bottlenecks that would prevent you from reaching that level of =
throughput. Plus, the number of slots in your NIC ring is probably =
already enforcing some sort of FC on you...

Lars

--Apple-Mail=_C83F914C-2929-4580-9435-696DAC44A5ED
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="signature.asc"
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Message signed with OpenPGP

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEmpq0ZpSoejRmyhheVLXDCb9wwVcFAloVME4ACgkQVLXDCb9w
wVcQlQ//StC38WSqTZpvi3QzcO7/MgK2zRu1qsf7p7OB2uweMtr3FsbjwGBZe+z5
/paWLdc7BCT1xATZkRrdFyuphtKjC/ZiQzH66fZMTKZEPNoGfMPIL7mvt4n5aih0
ohDDgUO4u/Zoibs1ZC87tme11qw+BxuOu+fZwK5em9W7i5mOkzr9OmX/MSQR6Wme
4a3NbIT6f9SsmnxKsa64ixPE8yX/W00+qjFCqjfOb54kFwszD1nMku6mvPJgsivp
KkAf9QPociSUllcYuCEB/IwRTR42eDBjOjSLY222Y3myy9tvrShNrYLiS00HvwmH
Qf0UM8oBvtB56lnX4JpylglATpJ+5ysKUF7WjbIM4sHchc+zC0O6BQPmnr2TmyH9
bOcIvOEtE0yoNbh6oZ8sf8hbqLjdjVwOdBee/ocA7jR159n3YOlgZTZ4C9277TKx
b3Xnxhl////2pB2QOK0xV/mJOrJdtpuQNATwinxqQwkjOy6XdhfXfGRLvOW5hrM8
m3S+Dfuw/oG3i9eBFHgW/5ZfjIlvZaAWPMtOINIVgSRhg+IQwwwV5qc/T3DZU2Iu
H5ESMM+64pyTorCUQFnqlRctI6G/Tao9t9wHnVFXsEp4VdHTPTFps4PJXpTzomcN
+rwvgV9bkwGGZ9VUVnCl/CcUF884+81YZ9n2DxTkBTOf8HgXhxk=
=YNIf
-----END PGP SIGNATURE-----

--Apple-Mail=_C83F914C-2929-4580-9435-696DAC44A5ED--


From nobody Wed Nov 22 06:44:29 2017
Return-Path: 
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 414B7129447; Wed, 22 Nov 2017 06:44:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.919
X-Spam-Level: 
X-Spam-Status: No, score=-1.919 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5xpP04hEMRGa; Wed, 22 Nov 2017 06:44:26 -0800 (PST)
Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30090.outbound.protection.outlook.com [40.107.3.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 415411200FC; Wed, 22 Nov 2017 06:44:26 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com;  s=selector1-nokia-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=9b1vJDH3qmeH84VyUj2JO3DGDqcGW3sYYVN1K+YxUkY=; b=irFiuOMiJu+ORugcJPlC2BhHjZzfZxpYLmqkKUVWokLhSO85ENJxm1tXweK3WuAkcxEUs2Ym2GZ96KzRhWZcIml1/YtASVXrkywSGopasA5buQLucBcJKaVV4Gc0eaoaExhz3IFiV0KsuF2fMsYU6FB/SlR+oMrldfjq/TuRciU=
Received: from AM5PR0701MB2547.eurprd07.prod.outlook.com (10.173.92.15) by AM5PR0701MB2548.eurprd07.prod.outlook.com (10.173.92.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.260.2; Wed, 22 Nov 2017 14:44:23 +0000
Received: from AM5PR0701MB2547.eurprd07.prod.outlook.com ([fe80::d8a4:eb2b:a214:9eb2]) by AM5PR0701MB2547.eurprd07.prod.outlook.com ([fe80::d8a4:eb2b:a214:9eb2%17]) with mapi id 15.20.0260.001; Wed, 22 Nov 2017 14:44:24 +0000
From: "Scharf, Michael (Nokia - DE/Stuttgart)" 
To: "tcpm@ietf.org" 
CC: "tcpm-chairs@ietf.org" 
Thread-Topic: Draft minutes posted
Thread-Index: AdNjoDMsThkN+ZjQS0uO2+a9u250Ig==
Date: Wed, 22 Nov 2017 14:44:23 +0000
Message-ID: 
Accept-Language: en-US, de-DE
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=michael.scharf@nokia.com; 
x-originating-ip: [135.245.212.10]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; AM5PR0701MB2548; 6:g5KUih/d51P+FfZdVS1m8dZfg09g/Nhk3zdUwUJojod+dqKXAimfUl3F3kmtJ7nlG+myADO4I1lAvvDKIdeZRZOBP7xZuFR56BNSZGNi2XgtRXNYniKwD8TWKoHR1vPqR+HrngCM1H+gPBY5fQxZcs/PdbeQ/iEUFcZnUPK1Zp6cDcUcIwxtsGB3sMko7U21danf6QIeA8aU9nZ8Vt7NYEqEL05x9sbXoSwWBt0cunyzixf6rj5kxh4yoXleZ/KoZicz6ZQZAmxerdnrfllkP05WD2FtCKyJjRFzgFhIG08ek9bhZ9Bwiv7UN3b3YYBUb19tdn7IjwbQKpOS+mbCz7j3KGG1wyW8A60YoGOQj3o=; 5:kUPWRo5orpY1FwPA9MGMBDnzlo793UMBmoeSky/KCvBW+HXJzyQyU0QvTKwcljb8GZq8WPp8SusA5sfQKWaZ+QeUiUT4pTF3KDaoHDyVQqMgxacsVesOrOxRO6++jFQ2uVpD9f3Z6o6r3/17dh9OJmqwL640DEDHsg3Jbp0S60M=; 24:wDmv8r6sQlne8M79xcwvsLIgrk6yKGQP8lDn5lM0pFHLBaM4zPQOjupGsp+eMx1Z5XOip/raOV4rIkZ/Zk5BcQKx+EKqFAS/9qGx0AdUzJc=; 7:PsZWvEJrTBe0B+CMVEsPaI2ys4UEKe7blRcaMSJGQXullv1rkXpydQXJIohJ4krmvBzM/sLt2TBbdutwAQQkVBM0uMAPOOFSxPZGogCDxKqdBch/rnokq1+mbSMrGbWP68gjIBpa97SDSmUSYdZRUtGni19CcdrTtnH5gSer0LEC90lcl8UT10M6fPIDfg2mqwqkNFFG8YFOY8NTlUW+CfgG/az5I9gnKbq9gQLLCOJ5DOUnLyPTE2R64Qozr2pR
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: be945cc9-90a3-45ee-a022-08d531b78607
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(48565401081)(5600022)(4604075)(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(2017052603258); SRVR:AM5PR0701MB2548; 
x-ms-traffictypediagnostic: AM5PR0701MB2548:
x-microsoft-antispam-prvs: 
x-exchange-antispam-report-test: UriScan:(120809045254105)(227612066756510)(21748063052155); 
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(93006095)(93001095)(3231022)(3002001)(10201501046)(100000703101)(100105400095)(6055026)(6041248)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123564025)(20161123562025)(20161123555025)(20161123558100)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:AM5PR0701MB2548; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:AM5PR0701MB2548; 
x-forefront-prvs: 0499DAF22A
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(39860400002)(189002)(199003)(50986999)(66066001)(74316002)(7116003)(33656002)(55016002)(53936002)(97736004)(450100002)(6306002)(54896002)(189998001)(236005)(5660300001)(106356001)(606006)(8676002)(68736007)(8936002)(81156014)(4326008)(2906002)(5250100002)(19609705001)(1730700003)(81166006)(966005)(5630700001)(6506006)(6916009)(316002)(6436002)(3280700002)(5640700003)(9686003)(14454004)(101416001)(558084003)(7696004)(478600001)(25786009)(2351001)(2501003)(102836003)(7736002)(86362001)(790700001)(105586002)(2900100001)(54356999)(6116002)(99286004)(3846002)(3480700004)(3660700001); DIR:OUT; SFP:1102; SCL:1; SRVR:AM5PR0701MB2548; H:AM5PR0701MB2547.eurprd07.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; 
received-spf: None (protection.outlook.com: nokia.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_AM5PR0701MB254714B91A51353DA58E252B93200AM5PR0701MB2547_"
MIME-Version: 1.0
X-OriginatorOrg: nokia.com
X-MS-Exchange-CrossTenant-Network-Message-Id: be945cc9-90a3-45ee-a022-08d531b78607
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Nov 2017 14:44:23.9155 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0701MB2548
Archived-At: 
Subject: [tcpm] Draft minutes posted
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Wed, 22 Nov 2017 14:44:28 -0000

--_000_AM5PR0701MB254714B91A51353DA58E252B93200AM5PR0701MB2547_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

https://datatracker.ietf.org/meeting/100/materials/minutes-100-tcpm/

Please feel free to let us know any mistakes or omissions.

Many thanks to Gorry as note taker

Michael

--_000_AM5PR0701MB254714B91A51353DA58E252B93200AM5PR0701MB2547_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable











https://datatracker.ietf.org/meeting/100/mater=
ials/minutes-100-tcpm/


 


Please feel free to let us know any mistakes or omis=
sions.


 


Many thanks to Gorry as note taker


 


Michael






--_000_AM5PR0701MB254714B91A51353DA58E252B93200AM5PR0701MB2547_--


From nobody Wed Nov 22 08:57:19 2017
Return-Path: 
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 958F6126D74 for ; Wed, 22 Nov 2017 08:57:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QNNQ2dtTnG10 for ; Wed, 22 Nov 2017 08:57:15 -0800 (PST)
Received: from mail.sfc.wide.ad.jp (shonan.sfc.wide.ad.jp [203.178.142.130]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5FA8D126C26 for ; Wed, 22 Nov 2017 08:57:15 -0800 (PST)
Received: from mail-wm0-f45.google.com (mail-wm0-f45.google.com [74.125.82.45]) by mail.sfc.wide.ad.jp (Postfix) with ESMTPSA id 8C23627855C for ; Thu, 23 Nov 2017 01:57:13 +0900 (JST)
Received: by mail-wm0-f45.google.com with SMTP id l188so9986124wma.1 for ; Wed, 22 Nov 2017 08:57:13 -0800 (PST)
X-Gm-Message-State: AJaThX4fXEY30y57UZQfYB1hZBsmp/oa1u0ansFPUO906/Ub9VG9hEHu Mg3yk2utgpDG78T+yPVkeNCQRd1s3RPUQviHq2M=
X-Google-Smtp-Source: AGs4zMYESgT0WuaOzUh6zhlvOt4DtLqbTJEoQvBMKzJ5rlD8yH1g+AEl7CUzqZSJcWaySomdVW58H2MkKQcyAYX2XDY=
X-Received: by 10.28.124.23 with SMTP id x23mr5070872wmc.78.1511369831564; Wed, 22 Nov 2017 08:57:11 -0800 (PST)
MIME-Version: 1.0
Received: by 10.223.165.153 with HTTP; Wed, 22 Nov 2017 08:57:10 -0800 (PST)
In-Reply-To: <72668587-3FC7-4981-9DFF-89BD785045A3@netapp.com>
References:  <01a5c8a6-cc73-46d5-9150-82f3340894ed@it.uc3m.es> <72668587-3FC7-4981-9DFF-89BD785045A3@netapp.com>
From: Yoshifumi Nishida 
Date: Wed, 22 Nov 2017 08:57:10 -0800
X-Gmail-Original-Message-ID: 
Message-ID: 
To: "Eggert, Lars" 
Cc: Marcelo Bagnulo , "tcpm@ietf.org" 
Content-Type: multipart/alternative; boundary="089e082d1facef4d29055e9535bf"
Archived-At: 
Subject: Re: [tcpm] Comments on draft-bagnulo-tcpm-esn
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Wed, 22 Nov 2017 16:57:17 -0000

--089e082d1facef4d29055e9535bf
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Wed, Nov 22, 2017 at 12:07 AM, Eggert, Lars  wrote:

> Hi,
>
> On 2017-11-21, at 17:56, marcelo bagnulo braun  wrote=
:
> > El 21/11/17 a las 16:23, Eggert, Lars escribi=C3=B3:
> >> after my half-baked idea during the Singapore session (i.e., WS option
> 15 means "multiply by 64 or other large value), here's another one, even
> less baked:
> >
> > I understand what you are saying here is that the units to which a
> sequence number is assigned is no longer a byte, but a multiple of n byte=
s,
> e.g. 64 bytes.
> >
> > I guess a first issue here is what happens if the amount of data that
> the sender wants to send in a segment is not multiple of 64 bytes (and it
> is not the last segment in the connection)?
> >
> > The problem is which seq number you put to the next segment, since the
> first byte of data in the next segment was part of the previous segment
> 64-byte word. Moreover, what happens if you want to send n packets of one
> single byte?
>
> I said "half-baked" for a reason :-)
>
> I'd observe that if you intent to go 100G on a single flow, you are
> unlikely to be successful if you are sending packets with less than 64B o=
f
> data.
>
> There are ugly ways to handle such corner cases, such as padding to 64B
> with dummy data and adding a new TCP option to remove that data from the
> byte stream delivered to applications.
>
>
I would like to think about it a bit more, but this approach will
definitely require to investigate middlebox interventions as it looks
inconsistent retransmissions from them.
Some proxies that try to cache the segments might be confused by it.

BTW, I'm not sure how we do "no flow control".. Do we still use sliding
window?
--
Yoshi

--089e082d1facef4d29055e9535bf
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable



=
On Wed, Nov 22, 2017 at 12:07 AM, Eggert, Lars <lars@netapp.com> wrote:
Hi,



On 2017-11-21, at 17:56, marcelo bagnulo braun <marcelo@it.uc3m.es> wrote:

> El 21/11/17 a las 16:23, Eggert, Lars escribi=C3=B3:

>> after my half-baked idea during the Singapore session=
 (i.e., WS option 15 means "multiply by 64 or other large value), here=
's another one, even less baked:

>

> I understand what you are saying here is that the units to which a seq=
uence number is assigned is no longer a byte, but a multiple of n bytes, e.=
g. 64 bytes.

>

> I guess a first issue here is what happens if the amount of data that =
the sender wants to send in a segment is not multiple of 64 bytes (and it i=
s not the last segment in the connection)?

>

> The problem is which seq number you put to the next segment, since the=
 first byte of data in the next segment was part of the previous segment 64=
-byte word. Moreover, what happens if you want to send n packets of one sin=
gle byte?



I said "half-baked" for a reason :-)



I'd observe that if you intent to go 100G on a single flow, you are unl=
ikely to be successful if you are sending packets with less than 64B of dat=
a.



There are ugly ways to handle such corner cases, such as padding to 64B wit=
h dummy data and adding a new TCP option to remove that data from the byte =
stream delivered to applications.




I would like to t=
hink about it a bit more, but this approach will definitely require to inve=
stigate middlebox interventions as it looks inconsistent retransmissions fr=
om them.
Some proxies that try to cache the segments might be con=
fused by it.

BTW, I'm not sure how we do "=
;no flow control".. Do we still use sliding window?
--
=

Yoshi

=C2=A0


--089e082d1facef4d29055e9535bf--


From nobody Tue Nov 28 07:50:43 2017
Return-Path: 
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3B38126CE8; Tue, 28 Nov 2017 07:50:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.919
X-Spam-Level: 
X-Spam-Status: No, score=-1.919 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vnOshyWUsNLZ; Tue, 28 Nov 2017 07:50:30 -0800 (PST)
Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10134.outbound.protection.outlook.com [40.107.1.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 32AD61242EA; Tue, 28 Nov 2017 07:50:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com;  s=selector1-nokia-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=GfFTK2mmGdPz3ZKwRMsPtVyfyf2tfQxXLupkTvPVDic=; b=L5ReV0VMghgykMG9s0ueeJI/uoeSsDmLKj3kwdNimwZK9c3Z+K3igjqs2qfta8gsNg8B3o8dB03aFwkzLYICcJVuB6Mm4+kvoamFtXOHRLHC1/F7Ipxv+dE7JN+YjskBgdevXT+T51kWsD0BygLizR+CSxRsF0u8dRJIJhlVP4s=
Received: from AM5PR0701MB2547.eurprd07.prod.outlook.com (10.173.92.15) by AM5PR0701MB2548.eurprd07.prod.outlook.com (10.173.92.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.282.3; Tue, 28 Nov 2017 15:50:27 +0000
Received: from AM5PR0701MB2547.eurprd07.prod.outlook.com ([fe80::d8a4:eb2b:a214:9eb2]) by AM5PR0701MB2547.eurprd07.prod.outlook.com ([fe80::d8a4:eb2b:a214:9eb2%17]) with mapi id 15.20.0282.002; Tue, 28 Nov 2017 15:50:27 +0000
From: "Scharf, Michael (Nokia - DE/Stuttgart)" 
To: =?utf-8?B?SmFpbWUgSmltw6luZXo=?= , "core@ietf.org WG (core@ietf.org)" 
CC: "tcpm@ietf.org" , "iccrg@irtf.org" , "ietf@kuehlewind.net" 
Thread-Topic: =?utf-8?B?W2NvcmVdIPCflJQgV0dMQyBvbiBkcmFmdC1pZXRmLWNvcmUtY29jb2E=?=
Thread-Index: AQHTXe66Qfaot2+MTkyzw8OJMhwnkaMqAs/A
Date: Tue, 28 Nov 2017 15:50:26 +0000
Message-ID: 
References: 
In-Reply-To: 
Accept-Language: en-US, de-DE
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=michael.scharf@nokia.com; 
x-originating-ip: [135.245.212.10]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; AM5PR0701MB2548; 6:7g9fhfaerjBFB4FlBGY/zGpvc6TRq5kt9pf81uKuynSCPSlYgcs3ah48XbVaCpC5o9reK2zv11jkNhItP6U3g/1KZ8NHpZimeNZx945+yq5tHc9h7c1fQr5CblizsEIbY+q8+ZRfWjmzgCSVO7d4tuOC+wE3Rjvv2E+z3i3VfSAkX5Rrr26bsSShO/2dG5g13FVkWHw/tz2H7i+LRaqgz1feCoO43CpL7PcRPdfiliLgju+UxXt03wTj+Uoqzdn75doAJJvNk8LYJ9Sqy7dyJZS21WzvnKmzuQ9xflcoZX60zMPPChQ8xZ6lBPmnE0EX1Lg/zD6s0DNLEgXlp3txfg2ocQ0HzM218e7BFLjWD14=; 5:ArZDoPKSPhIOayQcIwLzVCCUmEd2cPwxBGT155SLDGbmODalflYmPWafW0sI+LomN76iXH51vcfXcvSS0DKWUWeUsNyDoVDo3E+a4epD2bJYssp2Cdww/Wd1haSXV3TpPVqXk8ujC/TkLvVPqShW+9i5UyJmC0Y+lZ0CWL2YKe8=; 24:ZuB6v579Glxscn2nJz1oYHyz8841uPSa0KZt5djc/zN9m33SOmVIpDgzHVvJi19Ac9LlE8MiapZ72M+6rTrjXy2fe8NtMR/Zw1RxxjV/AX4=; 7:iHe4rlp6k/EyHZPC5d2e8ZmX/qiDF8Hd5NxmyFTfamtbjkdwGUcm6z/ZotEOTi0zBoT5UTDCZG2aHjMp/r7nSF6RLJesNloFVQ3lNnAuxSE42WiZzRPr9NjhJj5PsTCb6swN8ylNC90U1cVEtJ9+8H0aCT/FHOO8/r8HWQb9g6aFnHL7fc3+v4Vk4l4SZZ8Dba6b1f3mlRuYRj/3m/yn0wADSW1f+hrVNCmMDL2CAefJr5RtPVDi+YZRmzBn3bCS
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: 7e670103-04c9-4710-de61-08d53677beac
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(48565401081)(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(5600026)(4604075)(2017052603258); SRVR:AM5PR0701MB2548; 
x-ms-traffictypediagnostic: AM5PR0701MB2548:
x-microsoft-antispam-prvs: 
x-exchange-antispam-report-test: UriScan:(227612066756510)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(2401047)(8121501046)(5005006)(3002001)(3231022)(10201501046)(93006095)(93001095)(6055026)(6041248)(20161123564025)(20161123562025)(20161123558100)(20161123555025)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:AM5PR0701MB2548; BCL:0; PCL:0; RULEID:(100000803101)(100110400095); SRVR:AM5PR0701MB2548; 
x-forefront-prvs: 0505147DDB
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(366004)(376002)(346002)(189002)(199003)(53754006)(4326008)(3280700002)(7736002)(19609705001)(6436002)(53546010)(76176999)(54356999)(50986999)(6506006)(3660700001)(316002)(106356001)(229383001)(7696005)(110136005)(8936002)(966005)(81166006)(81156014)(14454004)(54906003)(74316002)(55016002)(66066001)(2900100001)(606006)(6246003)(2906002)(229853002)(105586002)(2950100002)(478600001)(97736004)(189998001)(68736007)(53936002)(6306002)(5250100002)(9686003)(25786009)(54896002)(236005)(3846002)(790700001)(6116002)(102836003)(230783001)(33656002)(99286004)(86362001)(101416001)(5660300001); DIR:OUT; SFP:1102; SCL:1; SRVR:AM5PR0701MB2548; H:AM5PR0701MB2547.eurprd07.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; 
received-spf: None (protection.outlook.com: nokia.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_AM5PR0701MB25477E27F68305DE3FF809B0933A0AM5PR0701MB2547_"
MIME-Version: 1.0
X-OriginatorOrg: nokia.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 7e670103-04c9-4710-de61-08d53677beac
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Nov 2017 15:50:27.0020 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0701MB2548
Archived-At: 
Subject: Re: [tcpm]  =?utf-8?q?=5Bcore=5D_=F0=9F=94=94_WGLC_on_draft-ietf-core?= =?utf-8?q?-cocoa?=
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Tue, 28 Nov 2017 15:50:35 -0000

--_000_AM5PR0701MB25477E27F68305DE3FF809B0933A0AM5PR0701MB2547_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_AM5PR0701MB25477E27F68305DE3FF809B0933A0AM5PR0701MB2547_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_AM5PR0701MB25477E27F68305DE3FF809B0933A0AM5PR0701MB2547_--