From nobody Tue May 1 17:49:29 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59F8F12D7E8 for ; Tue, 1 May 2018 17:49:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8nGes4cbjut4 for ; Tue, 1 May 2018 17:49:25 -0700 (PDT) Received: from guri.nttv6.jp (guri.nttv6.jp [IPv6:2402:c800:ff06:136::140]) by ietfa.amsl.com (Postfix) with ESMTP id 68BDD12D77D for ; Tue, 1 May 2018 17:49:25 -0700 (PDT) Received: from z.nttv6.jp (z.nttv6.jp [192.168.8.15]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id E847925F691; Wed, 2 May 2018 09:49:23 +0900 (JST) Received: from MacBook-Pro-17.local (fujiko.nttv6.jp [115.69.228.141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id 8C62976351D; Wed, 2 May 2018 09:49:23 +0900 (JST) To: mohamed.boucadair@orange.com, "dots@ietf.org" References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: kaname nishizuka Message-ID: Date: Wed, 2 May 2018 09:49:23 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 May 2018 00:49:28 -0000 Hi, I'd like to ask one clarification question about status code 8:    o  A notification message with 'status' code set to '8 (Attack       mitigation is rejected)' and 'conflict-status' set to '1' is sent       to a DOTS client to indicate that this mitigation request is       rejected because a conflict is detected. If a mitigation request is rejected due to a conflict, it is rejected at PUT(4.09(Conflict)), so no resource will be created. So it looks there is no chance to return '8 (Attack mitigation is rejected)'. thanks, Kaname On 2018/04/10 22:47, mohamed.boucadair@orange.com wrote: > Re-, > > This version addresses the comments raised during the WGLC, in particular: > - (Clarification) Indicate that only one hop-limit is included > - Specify the loop diagnostic payload > - (Clarification) Indicate explicitly that GET messages with 'sid' are allowed > - Update the redirect behavior. > > Cheers, > Med > >> -----Message d'origine----- >> De : Dots [mailto:dots-bounces@ietf.org] De la part de internet- >> drafts@ietf.org >> Envoyé : mardi 10 avril 2018 15:40 >> À : i-d-announce@ietf.org >> Cc : dots@ietf.org >> Objet : [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >> >> >> A New Internet-Draft is available from the on-line Internet-Drafts >> directories. >> This draft is a work item of the DDoS Open Threat Signaling WG of the IETF. >> >> Title : Distributed Denial-of-Service Open Threat Signaling >> (DOTS) Signal Channel Specification >> Authors : Tirumaleswar Reddy >> Mohamed Boucadair >> Prashanth Patil >> Andrew Mortensen >> Nik Teague >> Filename : draft-ietf-dots-signal-channel-19.txt >> Pages : 86 >> Date : 2018-04-10 >> >> Abstract: >> This document specifies the DOTS signal channel, a protocol for >> signaling the need for protection against Distributed Denial-of- >> Service (DDoS) attacks to a server capable of enabling network >> traffic mitigation on behalf of the requesting client. >> >> A companion document defines the DOTS data channel, a separate >> reliable communication layer for DOTS management and configuration >> purposes. >> >> Editorial Note (To be removed by RFC Editor) >> >> Please update these statements with the RFC number to be assigned to >> this document: >> >> o "This version of this YANG module is part of RFC XXXX;" >> >> o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling >> (DOTS) Signal Channel Specification"; >> >> o "| [RFCXXXX] |" >> >> o reference: RFC XXXX >> >> Please update TBD statements with the port number to be assigned to >> DOTS Signal Channel Protocol. >> >> Also, please update the "revision" date of the YANG module. >> >> >> The IETF datatracker status page for this draft is: >> https://datatracker.ietf.org/doc/draft-ietf-dots-signal-channel/ >> >> There are also htmlized versions available at: >> https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19 >> https://datatracker.ietf.org/doc/html/draft-ietf-dots-signal-channel-19 >> >> A diff from the previous version is available at: >> https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-signal-channel-19 >> >> >> Please note that it may take a couple of minutes from the time of submission >> until the htmlized version and diff are available at tools.ietf.org. >> >> Internet-Drafts are also available by anonymous FTP at: >> ftp://ftp.ietf.org/internet-drafts/ >> >> _______________________________________________ >> Dots mailing list >> Dots@ietf.org >> https://www.ietf.org/mailman/listinfo/dots > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Fri May 4 01:47:47 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 448C5126CD6 for ; Fri, 4 May 2018 01:47:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.311 X-Spam-Level: X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WnOvRG_DxOy6 for ; Fri, 4 May 2018 01:47:44 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA55A1241FC for ; Fri, 4 May 2018 01:47:43 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1525423664; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-exchange-antispam-report-cfa-test: x-forefront-prvs:x-forefront-antispam-report: received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Office365-Filtering-Correlation-Id:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=q kGHCX+d+m1pXcvT73DLl8eWip4IyPFX+5b796LXdW Q=; b=YHAIEwJPdhiacSJKElb1Qi1tDfoqPOrnqegdSpfoXkLI dj8NHOCtxDpJXyD1GqpSmJvJQkuX9XfsvSoE7J5ZSPQaOeimQ1 xORLphMHC45IfezF0zIoPEIb/u1xh+50ltMR1gGY5LhZkMgF07 9CE9J3/grfMMYZ5Lbh6s79RlHkk= Received: from DNVEXAPP1N06.corpzone.internalzone.com (unknown [10.44.48.90]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 7388_5664_831beed9_04f3_4ac5_8754_2b3e8d607230; Fri, 04 May 2018 03:47:44 -0500 Received: from DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 4 May 2018 02:47:40 -0600 Received: from DNVEXUSR1N10.corpzone.internalzone.com (10.44.48.83) by DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 4 May 2018 02:47:39 -0600 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXUSR1N10.corpzone.internalzone.com (10.44.48.83) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Fri, 4 May 2018 02:47:38 -0600 Received: from NAM03-DM3-obe.outbound.protection.outlook.com (10.44.176.243) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 4 May 2018 02:47:37 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB1442.namprd16.prod.outlook.com (10.172.207.136) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.735.17; Fri, 4 May 2018 08:47:37 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::85:2725:a8fd:6e38]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::85:2725:a8fd:6e38%2]) with mapi id 15.20.0715.024; Fri, 4 May 2018 08:47:37 +0000 From: "Konda, Tirumaleswar Reddy" To: kaname nishizuka , "mohamed.boucadair@orange.com" , "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT0NF/5sqjFXD5eEKW2iVIpIKRtqP6A2IAgCG5zoCAA4zPAA== Date: Fri, 4 May 2018 08:47:37 +0000 Message-ID: References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB1442; 7:9ddwMog5uRwL+g+SMvE4of4GYtEi5sIRQ1VgyCzGHYfPy4G7qkWg3zpVfEQyT1U3Uzb5HA6mbNYrvlxoaiMlvHtU7f/Ad7skmDyCh4o6X3glswjf5yrdOJow18uCTuY1o8Vst1uegNNh/gLUHGDj6NJzjfeXMNqBlWa9H1dYI8GNSKSe8iYSpCVyGz7qThV1f0WliwcvCCLKqsa/xTBQvu22Q+INc+5q+BL96ILcIIXC2nnxQbLwhzppVBi2SPaY x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB1442; x-ms-traffictypediagnostic: BN6PR16MB1442: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(120809045254105)(18271650672692); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3231254)(944501410)(52105095)(3002001)(6041310)(20161123558120)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123560045)(6072148)(201708071742011); SRVR:BN6PR16MB1442; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB1442; x-forefront-prvs: 06628F7CA4 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(346002)(39380400002)(396003)(39850400004)(376002)(32952001)(189003)(13464003)(199004)(377424004)(55784002)(2906002)(5250100002)(2501003)(6246003)(486006)(2900100001)(106356001)(446003)(476003)(11346002)(105586002)(966005)(80792005)(66066001)(5660300001)(8936002)(81156014)(8676002)(81166006)(68736007)(102836004)(53936002)(6506007)(53546011)(76176011)(59450400001)(478600001)(26005)(186003)(6116002)(6436002)(7736002)(72206003)(7696005)(97736004)(9686003)(6306002)(55016002)(99286004)(305945005)(14454004)(33656002)(3280700002)(74316002)(3846002)(25786009)(3660700001)(86362001)(229853002)(2201001)(316002)(110136005)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB1442; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: /sFTMnb+7PdzEonhV57Pmi6QgNb2j4Y4YcLJ7PPh6JOqxBGvd6ssfRqBWS+BIqw/65VQSAZth+EDboyjGszeOwkAhsh0G6CQGIK79hWUovjMgqq4E9nnnHmbdrY7+lITWoHmrKHg9NmjBk0xpbjHIMj3Vsr21oqBi9igFQL5wxA0t/3/w6eDkzgeEzU7TO2mIkRNamzCp8XoCBM5puAOQA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: d2e077b3-7fdf-43e1-8c69-08d5b19bb028 X-MS-Exchange-CrossTenant-Network-Message-Id: d2e077b3-7fdf-43e1-8c69-08d5b19bb028 X-MS-Exchange-CrossTenant-originalarrivaltime: 04 May 2018 08:47:37.5506 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB1442 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6278> : inlines <6610> : streams <1785893> : uri <2636435> Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 May 2018 08:47:46 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBEb3RzIFttYWlsdG86ZG90cy1i b3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2Yga2FuYW1lIG5pc2hpenVrYQ0KPiBTZW50OiBX ZWRuZXNkYXksIE1heSAyLCAyMDE4IDY6MTkgQU0NCj4gVG86IG1vaGFtZWQuYm91Y2FkYWlyQG9y YW5nZS5jb207IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtEb3RzXSBJLUQgQWN0aW9u OiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+IA0KPiBIaSwNCj4gDQo+ IEknZCBsaWtlIHRvIGFzayBvbmUgY2xhcmlmaWNhdGlvbiBxdWVzdGlvbiBhYm91dCBzdGF0dXMg Y29kZSA4Og0KPiANCj4gIMKgwqAgb8KgIEEgbm90aWZpY2F0aW9uIG1lc3NhZ2Ugd2l0aCAnc3Rh dHVzJyBjb2RlIHNldCB0byAnOCAoQXR0YWNrDQo+ICDCoMKgwqDCoMKgIG1pdGlnYXRpb24gaXMg cmVqZWN0ZWQpJyBhbmQgJ2NvbmZsaWN0LXN0YXR1cycgc2V0IHRvICcxJyBpcyBzZW50DQo+ICDC oMKgwqDCoMKgIHRvIGEgRE9UUyBjbGllbnQgdG8gaW5kaWNhdGUgdGhhdCB0aGlzIG1pdGlnYXRp b24gcmVxdWVzdCBpcw0KPiAgwqDCoMKgwqDCoCByZWplY3RlZCBiZWNhdXNlIGEgY29uZmxpY3Qg aXMgZGV0ZWN0ZWQuDQo+IA0KPiBJZiBhIG1pdGlnYXRpb24gcmVxdWVzdCBpcyByZWplY3RlZCBk dWUgdG8gYSBjb25mbGljdCwgaXQgaXMgcmVqZWN0ZWQgYXQNCj4gUFVUKDQuMDkoQ29uZmxpY3Qp KSwgc28gbm8gcmVzb3VyY2Ugd2lsbCBiZSBjcmVhdGVkLg0KPiBTbyBpdCBsb29rcyB0aGVyZSBp cyBubyBjaGFuY2UgdG8gcmV0dXJuICc4IChBdHRhY2sgbWl0aWdhdGlvbiBpcyByZWplY3RlZCkn Lg0KDQpHb29kIHBvaW50LiBJbiB0aGlzIGNhc2UsIHRoZSByZXNvdXJjZSBzaG91bGQgYmUgY3Jl YXRlZCBhbmQgdGhlIHNlcnZlciBzaG91bGQgcmV0dXJuIHN1Y2Nlc3MgKDIuMDEgb3IgMi4wNCkg cmVzcG9uc2UgY29kZSANCmFsb25nIHdpdGggdGhlIGNvbmZsaWN0LWluZm9ybWF0aW9uLg0KDQot VGlydQ0KDQo+IA0KPiB0aGFua3MsDQo+IEthbmFtZQ0KPiANCj4gT24gMjAxOC8wNC8xMCAyMjo0 NywgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPiBSZS0sDQo+ID4NCj4g PiBUaGlzIHZlcnNpb24gYWRkcmVzc2VzIHRoZSBjb21tZW50cyByYWlzZWQgZHVyaW5nIHRoZSBX R0xDLCBpbiBwYXJ0aWN1bGFyOg0KPiA+IC0gKENsYXJpZmljYXRpb24pIEluZGljYXRlIHRoYXQg b25seSBvbmUgaG9wLWxpbWl0IGlzIGluY2x1ZGVkDQo+ID4gLSBTcGVjaWZ5IHRoZSBsb29wIGRp YWdub3N0aWMgcGF5bG9hZA0KPiA+IC0gKENsYXJpZmljYXRpb24pIEluZGljYXRlIGV4cGxpY2l0 bHkgdGhhdCBHRVQgbWVzc2FnZXMgd2l0aCAnc2lkJyBhcmUNCj4gPiBhbGxvd2VkDQo+ID4gLSBV cGRhdGUgdGhlIHJlZGlyZWN0IGJlaGF2aW9yLg0KPiA+DQo+ID4gQ2hlZXJzLA0KPiA+IE1lZA0K PiA+DQo+ID4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+PiBEZcKgOiBEb3RzIFtt YWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBEZSBsYSBwYXJ0IGRlIGludGVybmV0LQ0KPiA+ PiBkcmFmdHNAaWV0Zi5vcmcgRW52b3nDqcKgOiBtYXJkaSAxMCBhdnJpbCAyMDE4IDE1OjQwIMOA wqA6DQo+ID4+IGktZC1hbm5vdW5jZUBpZXRmLm9yZyBDY8KgOiBkb3RzQGlldGYub3JnIE9iamV0 wqA6IFtEb3RzXSBJLUQgQWN0aW9uOg0KPiA+PiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5u ZWwtMTkudHh0DQo+ID4+DQo+ID4+DQo+ID4+IEEgTmV3IEludGVybmV0LURyYWZ0IGlzIGF2YWls YWJsZSBmcm9tIHRoZSBvbi1saW5lIEludGVybmV0LURyYWZ0cw0KPiA+PiBkaXJlY3Rvcmllcy4N Cj4gPj4gVGhpcyBkcmFmdCBpcyBhIHdvcmsgaXRlbSBvZiB0aGUgRERvUyBPcGVuIFRocmVhdCBT aWduYWxpbmcgV0cgb2YgdGhlIElFVEYuDQo+ID4+DQo+ID4+ICAgICAgICAgIFRpdGxlICAgICAg ICAgICA6IERpc3RyaWJ1dGVkIERlbmlhbC1vZi1TZXJ2aWNlIE9wZW4gVGhyZWF0IFNpZ25hbGlu Zw0KPiA+PiAoRE9UUykgU2lnbmFsIENoYW5uZWwgU3BlY2lmaWNhdGlvbg0KPiA+PiAgICAgICAg ICBBdXRob3JzICAgICAgICAgOiBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4gPj4gICAgICAgICAgICAg ICAgICAgICAgICAgICAgTW9oYW1lZCBCb3VjYWRhaXINCj4gPj4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgUHJhc2hhbnRoIFBhdGlsDQo+ID4+ICAgICAgICAgICAgICAgICAgICAgICAgICAg IEFuZHJldyBNb3J0ZW5zZW4NCj4gPj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgTmlrIFRl YWd1ZQ0KPiA+PiAJRmlsZW5hbWUgICAgICAgIDogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFu bmVsLTE5LnR4dA0KPiA+PiAJUGFnZXMgICAgICAgICAgIDogODYNCj4gPj4gCURhdGUgICAgICAg ICAgICA6IDIwMTgtMDQtMTANCj4gPj4NCj4gPj4gQWJzdHJhY3Q6DQo+ID4+ICAgICBUaGlzIGRv Y3VtZW50IHNwZWNpZmllcyB0aGUgRE9UUyBzaWduYWwgY2hhbm5lbCwgYSBwcm90b2NvbCBmb3IN Cj4gPj4gICAgIHNpZ25hbGluZyB0aGUgbmVlZCBmb3IgcHJvdGVjdGlvbiBhZ2FpbnN0IERpc3Ry aWJ1dGVkIERlbmlhbC1vZi0NCj4gPj4gICAgIFNlcnZpY2UgKEREb1MpIGF0dGFja3MgdG8gYSBz ZXJ2ZXIgY2FwYWJsZSBvZiBlbmFibGluZyBuZXR3b3JrDQo+ID4+ICAgICB0cmFmZmljIG1pdGln YXRpb24gb24gYmVoYWxmIG9mIHRoZSByZXF1ZXN0aW5nIGNsaWVudC4NCj4gPj4NCj4gPj4gICAg IEEgY29tcGFuaW9uIGRvY3VtZW50IGRlZmluZXMgdGhlIERPVFMgZGF0YSBjaGFubmVsLCBhIHNl cGFyYXRlDQo+ID4+ICAgICByZWxpYWJsZSBjb21tdW5pY2F0aW9uIGxheWVyIGZvciBET1RTIG1h bmFnZW1lbnQgYW5kIGNvbmZpZ3VyYXRpb24NCj4gPj4gICAgIHB1cnBvc2VzLg0KPiA+Pg0KPiA+ PiBFZGl0b3JpYWwgTm90ZSAoVG8gYmUgcmVtb3ZlZCBieSBSRkMgRWRpdG9yKQ0KPiA+Pg0KPiA+ PiAgICAgUGxlYXNlIHVwZGF0ZSB0aGVzZSBzdGF0ZW1lbnRzIHdpdGggdGhlIFJGQyBudW1iZXIg dG8gYmUgYXNzaWduZWQgdG8NCj4gPj4gICAgIHRoaXMgZG9jdW1lbnQ6DQo+ID4+DQo+ID4+ICAg ICBvICAiVGhpcyB2ZXJzaW9uIG9mIHRoaXMgWUFORyBtb2R1bGUgaXMgcGFydCBvZiBSRkMgWFhY WDsiDQo+ID4+DQo+ID4+ICAgICBvICAiUkZDIFhYWFg6IERpc3RyaWJ1dGVkIERlbmlhbC1vZi1T ZXJ2aWNlIE9wZW4gVGhyZWF0IFNpZ25hbGluZw0KPiA+PiAgICAgICAgKERPVFMpIFNpZ25hbCBD aGFubmVsIFNwZWNpZmljYXRpb24iOw0KPiA+Pg0KPiA+PiAgICAgbyAgInwgW1JGQ1hYWFhdIHwi DQo+ID4+DQo+ID4+ICAgICBvICByZWZlcmVuY2U6IFJGQyBYWFhYDQo+ID4+DQo+ID4+ICAgICBQ bGVhc2UgdXBkYXRlIFRCRCBzdGF0ZW1lbnRzIHdpdGggdGhlIHBvcnQgbnVtYmVyIHRvIGJlIGFz c2lnbmVkIHRvDQo+ID4+ICAgICBET1RTIFNpZ25hbCBDaGFubmVsIFByb3RvY29sLg0KPiA+Pg0K PiA+PiAgICAgQWxzbywgcGxlYXNlIHVwZGF0ZSB0aGUgInJldmlzaW9uIiBkYXRlIG9mIHRoZSBZ QU5HIG1vZHVsZS4NCj4gPj4NCj4gPj4NCj4gPj4gVGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVz IHBhZ2UgZm9yIHRoaXMgZHJhZnQgaXM6DQo+ID4+IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5v cmcvZG9jL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC8NCj4gPj4NCj4gPj4gVGhlcmUg YXJlIGFsc28gaHRtbGl6ZWQgdmVyc2lvbnMgYXZhaWxhYmxlIGF0Og0KPiA+PiBodHRwczovL3Rv b2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5DQo+ID4+ IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtaWV0Zi1kb3RzLXNp Z25hbC1jaGFubmVsLTE5DQo+ID4+DQo+ID4+IEEgZGlmZiBmcm9tIHRoZSBwcmV2aW91cyB2ZXJz aW9uIGlzIGF2YWlsYWJsZSBhdDoNCj4gPj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91 cmwyPWRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOQ0KPiA+Pg0KPiA+Pg0KPiA+PiBQ bGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUg dGltZSBvZg0KPiBzdWJtaXNzaW9uDQo+ID4+IHVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFu ZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQgdG9vbHMuaWV0Zi5vcmcuDQo+ID4+DQo+ID4+IEludGVy bmV0LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUgYnkgYW5vbnltb3VzIEZUUCBhdDoNCj4gPj4g ZnRwOi8vZnRwLmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy8NCj4gPj4NCj4gPj4gX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4gRG90cyBtYWlsaW5n IGxpc3QNCj4gPj4gRG90c0BpZXRmLm9yZw0KPiA+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL2RvdHMNCj4gPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KPiA+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gRG90c0BpZXRmLm9yZw0K PiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiANCj4gX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gRG90cyBtYWls aW5nIGxpc3QNCj4gRG90c0BpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2RvdHMNCg== From nobody Sun May 6 23:12:27 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC7621270A7 for ; Sun, 6 May 2018 23:12:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jc-VSs-RtqGT for ; Sun, 6 May 2018 23:12:23 -0700 (PDT) Received: from orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CA84124207 for ; Sun, 6 May 2018 23:12:23 -0700 (PDT) Received: from opfedar04.francetelecom.fr (unknown [xx.xx.xx.6]) by opfedar20.francetelecom.fr (ESMTP service) with ESMTP id 0722312051D; Mon, 7 May 2018 08:12:22 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.58]) by opfedar04.francetelecom.fr (ESMTP service) with ESMTP id E04214004C; Mon, 7 May 2018 08:12:21 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM33.corporate.adroot.infra.ftgroup ([fe80::3881:fc15:b4b2:9017%19]) with mapi id 14.03.0389.001; Mon, 7 May 2018 08:12:21 +0200 From: To: kaname nishizuka , "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT4a9stIt4EhEniESZceEeGiu1VaQj0Bjw Date: Mon, 7 May 2018 06:12:21 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.2] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 May 2018 06:12:26 -0000 SGkgS2FuYW1lLCANCg0KUGxlYXNlIGNoZWNrIGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcv YXJjaC9tc2cvZG90cy96X2NaUjlfdTI3M0h6QzlvMEl5OUZlUVowSm8gYWJvdXQgdGhlIHJhdGlv bmFsZSBmb3IgYWxsb3dpbmcgdG8gcmV0dXJuIGNvZGUgJzgnIGV2ZW4gaW4gYSBub3RpZmljYXRp b24gbWVzc2FnZS4gVGhlIGludGVudCB3YXMgdG8gaGF2ZSBjb2RlICc4JyBhcyBhIHRyYW5zaXRp b24gc3RhdGUuIA0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0t LS0NCj4gRGXCoDoga2FuYW1lIG5pc2hpenVrYSBbbWFpbHRvOmthbmFtZUBudHR2Ni5qcF0NCj4g RW52b3nDqcKgOiBtZXJjcmVkaSAyIG1haSAyMDE4IDAyOjQ5DQo+IMOAwqA6IEJPVUNBREFJUiBN b2hhbWVkIElNVC9PTE47IGRvdHNAaWV0Zi5vcmcNCj4gT2JqZXTCoDogUmU6IFtEb3RzXSBJLUQg QWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+IA0KPiBIaSwN Cj4gDQo+IEknZCBsaWtlIHRvIGFzayBvbmUgY2xhcmlmaWNhdGlvbiBxdWVzdGlvbiBhYm91dCBz dGF0dXMgY29kZSA4Og0KPiANCj4gIMKgwqAgb8KgIEEgbm90aWZpY2F0aW9uIG1lc3NhZ2Ugd2l0 aCAnc3RhdHVzJyBjb2RlIHNldCB0byAnOCAoQXR0YWNrDQo+ICDCoMKgwqDCoMKgIG1pdGlnYXRp b24gaXMgcmVqZWN0ZWQpJyBhbmQgJ2NvbmZsaWN0LXN0YXR1cycgc2V0IHRvICcxJyBpcyBzZW50 DQo+ICDCoMKgwqDCoMKgIHRvIGEgRE9UUyBjbGllbnQgdG8gaW5kaWNhdGUgdGhhdCB0aGlzIG1p dGlnYXRpb24gcmVxdWVzdCBpcw0KPiAgwqDCoMKgwqDCoCByZWplY3RlZCBiZWNhdXNlIGEgY29u ZmxpY3QgaXMgZGV0ZWN0ZWQuDQo+IA0KPiBJZiBhIG1pdGlnYXRpb24gcmVxdWVzdCBpcyByZWpl Y3RlZCBkdWUgdG8gYSBjb25mbGljdCwgaXQgaXMgcmVqZWN0ZWQgYXQNCj4gUFVUKDQuMDkoQ29u ZmxpY3QpKSwgc28gbm8gcmVzb3VyY2Ugd2lsbCBiZSBjcmVhdGVkLg0KPiBTbyBpdCBsb29rcyB0 aGVyZSBpcyBubyBjaGFuY2UgdG8gcmV0dXJuICc4IChBdHRhY2sgbWl0aWdhdGlvbiBpcyByZWpl Y3RlZCknLg0KPiANCj4gdGhhbmtzLA0KPiBLYW5hbWUNCj4gDQo+IE9uIDIwMTgvMDQvMTAgMjI6 NDcsIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3JvdGU6DQo+ID4gUmUtLA0KPiA+DQo+ ID4gVGhpcyB2ZXJzaW9uIGFkZHJlc3NlcyB0aGUgY29tbWVudHMgcmFpc2VkIGR1cmluZyB0aGUg V0dMQywgaW4gcGFydGljdWxhcjoNCj4gPiAtIChDbGFyaWZpY2F0aW9uKSBJbmRpY2F0ZSB0aGF0 IG9ubHkgb25lIGhvcC1saW1pdCBpcyBpbmNsdWRlZA0KPiA+IC0gU3BlY2lmeSB0aGUgbG9vcCBk aWFnbm9zdGljIHBheWxvYWQNCj4gPiAtIChDbGFyaWZpY2F0aW9uKSBJbmRpY2F0ZSBleHBsaWNp dGx5IHRoYXQgR0VUIG1lc3NhZ2VzIHdpdGggJ3NpZCcgYXJlDQo+IGFsbG93ZWQNCj4gPiAtIFVw ZGF0ZSB0aGUgcmVkaXJlY3QgYmVoYXZpb3IuDQo+ID4NCj4gPiBDaGVlcnMsDQo+ID4gTWVkDQo+ ID4NCj4gPj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4+IERlwqA6IERvdHMgW21h aWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIERlIGxhIHBhcnQgZGUgaW50ZXJuZXQtDQo+ID4+ IGRyYWZ0c0BpZXRmLm9yZw0KPiA+PiBFbnZvecOpwqA6IG1hcmRpIDEwIGF2cmlsIDIwMTggMTU6 NDANCj4gPj4gw4DCoDogaS1kLWFubm91bmNlQGlldGYub3JnDQo+ID4+IENjwqA6IGRvdHNAaWV0 Zi5vcmcNCj4gPj4gT2JqZXTCoDogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1z aWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPj4NCj4gPj4NCj4gPj4gQSBOZXcgSW50ZXJuZXQtRHJh ZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9uLWxpbmUgSW50ZXJuZXQtRHJhZnRzDQo+ID4+IGRp cmVjdG9yaWVzLg0KPiA+PiBUaGlzIGRyYWZ0IGlzIGEgd29yayBpdGVtIG9mIHRoZSBERG9TIE9w ZW4gVGhyZWF0IFNpZ25hbGluZyBXRyBvZiB0aGUNCj4gSUVURi4NCj4gPj4NCj4gPj4gICAgICAg ICAgVGl0bGUgICAgICAgICAgIDogRGlzdHJpYnV0ZWQgRGVuaWFsLW9mLVNlcnZpY2UgT3BlbiBU aHJlYXQNCj4gU2lnbmFsaW5nDQo+ID4+IChET1RTKSBTaWduYWwgQ2hhbm5lbCBTcGVjaWZpY2F0 aW9uDQo+ID4+ICAgICAgICAgIEF1dGhvcnMgICAgICAgICA6IFRpcnVtYWxlc3dhciBSZWRkeQ0K PiA+PiAgICAgICAgICAgICAgICAgICAgICAgICAgICBNb2hhbWVkIEJvdWNhZGFpcg0KPiA+PiAg ICAgICAgICAgICAgICAgICAgICAgICAgICBQcmFzaGFudGggUGF0aWwNCj4gPj4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgQW5kcmV3IE1vcnRlbnNlbg0KPiA+PiAgICAgICAgICAgICAgICAg ICAgICAgICAgICBOaWsgVGVhZ3VlDQo+ID4+IAlGaWxlbmFtZSAgICAgICAgOiBkcmFmdC1pZXRm LWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4+IAlQYWdlcyAgICAgICAgICAgOiA4Ng0K PiA+PiAJRGF0ZSAgICAgICAgICAgIDogMjAxOC0wNC0xMA0KPiA+Pg0KPiA+PiBBYnN0cmFjdDoN Cj4gPj4gICAgIFRoaXMgZG9jdW1lbnQgc3BlY2lmaWVzIHRoZSBET1RTIHNpZ25hbCBjaGFubmVs LCBhIHByb3RvY29sIGZvcg0KPiA+PiAgICAgc2lnbmFsaW5nIHRoZSBuZWVkIGZvciBwcm90ZWN0 aW9uIGFnYWluc3QgRGlzdHJpYnV0ZWQgRGVuaWFsLW9mLQ0KPiA+PiAgICAgU2VydmljZSAoRERv UykgYXR0YWNrcyB0byBhIHNlcnZlciBjYXBhYmxlIG9mIGVuYWJsaW5nIG5ldHdvcmsNCj4gPj4g ICAgIHRyYWZmaWMgbWl0aWdhdGlvbiBvbiBiZWhhbGYgb2YgdGhlIHJlcXVlc3RpbmcgY2xpZW50 Lg0KPiA+Pg0KPiA+PiAgICAgQSBjb21wYW5pb24gZG9jdW1lbnQgZGVmaW5lcyB0aGUgRE9UUyBk YXRhIGNoYW5uZWwsIGEgc2VwYXJhdGUNCj4gPj4gICAgIHJlbGlhYmxlIGNvbW11bmljYXRpb24g bGF5ZXIgZm9yIERPVFMgbWFuYWdlbWVudCBhbmQgY29uZmlndXJhdGlvbg0KPiA+PiAgICAgcHVy cG9zZXMuDQo+ID4+DQo+ID4+IEVkaXRvcmlhbCBOb3RlIChUbyBiZSByZW1vdmVkIGJ5IFJGQyBF ZGl0b3IpDQo+ID4+DQo+ID4+ICAgICBQbGVhc2UgdXBkYXRlIHRoZXNlIHN0YXRlbWVudHMgd2l0 aCB0aGUgUkZDIG51bWJlciB0byBiZSBhc3NpZ25lZCB0bw0KPiA+PiAgICAgdGhpcyBkb2N1bWVu dDoNCj4gPj4NCj4gPj4gICAgIG8gICJUaGlzIHZlcnNpb24gb2YgdGhpcyBZQU5HIG1vZHVsZSBp cyBwYXJ0IG9mIFJGQyBYWFhYOyINCj4gPj4NCj4gPj4gICAgIG8gICJSRkMgWFhYWDogRGlzdHJp YnV0ZWQgRGVuaWFsLW9mLVNlcnZpY2UgT3BlbiBUaHJlYXQgU2lnbmFsaW5nDQo+ID4+ICAgICAg ICAoRE9UUykgU2lnbmFsIENoYW5uZWwgU3BlY2lmaWNhdGlvbiI7DQo+ID4+DQo+ID4+ICAgICBv ICAifCBbUkZDWFhYWF0gfCINCj4gPj4NCj4gPj4gICAgIG8gIHJlZmVyZW5jZTogUkZDIFhYWFgN Cj4gPj4NCj4gPj4gICAgIFBsZWFzZSB1cGRhdGUgVEJEIHN0YXRlbWVudHMgd2l0aCB0aGUgcG9y dCBudW1iZXIgdG8gYmUgYXNzaWduZWQgdG8NCj4gPj4gICAgIERPVFMgU2lnbmFsIENoYW5uZWwg UHJvdG9jb2wuDQo+ID4+DQo+ID4+ICAgICBBbHNvLCBwbGVhc2UgdXBkYXRlIHRoZSAicmV2aXNp b24iIGRhdGUgb2YgdGhlIFlBTkcgbW9kdWxlLg0KPiA+Pg0KPiA+Pg0KPiA+PiBUaGUgSUVURiBk YXRhdHJhY2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczoNCj4gPj4gaHR0cHM6Ly9k YXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLw0K PiA+Pg0KPiA+PiBUaGVyZSBhcmUgYWxzbyBodG1saXplZCB2ZXJzaW9ucyBhdmFpbGFibGUgYXQ6 DQo+ID4+IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWRvdHMtc2lnbmFs LWNoYW5uZWwtMTkNCj4gPj4gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9k cmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkNCj4gPj4NCj4gPj4gQSBkaWZmIGZyb20g dGhlIHByZXZpb3VzIHZlcnNpb24gaXMgYXZhaWxhYmxlIGF0Og0KPiA+PiBodHRwczovL3d3dy5p ZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5DQo+ ID4+DQo+ID4+DQo+ID4+IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2Yg bWludXRlcyBmcm9tIHRoZSB0aW1lIG9mDQo+IHN1Ym1pc3Npb24NCj4gPj4gdW50aWwgdGhlIGh0 bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy4N Cj4gPj4NCj4gPj4gSW50ZXJuZXQtRHJhZnRzIGFyZSBhbHNvIGF2YWlsYWJsZSBieSBhbm9ueW1v dXMgRlRQIGF0Og0KPiA+PiBmdHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzLw0KPiA+ Pg0KPiA+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K PiA+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+PiBEb3RzQGlldGYub3JnDQo+ID4+IGh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+IF9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gRG90cyBtYWlsaW5nIGxpc3QNCj4g PiBEb3RzQGlldGYub3JnDQo+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9kb3RzDQoNCg== From nobody Sun May 6 23:20:01 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BEC0B1270A7 for ; Sun, 6 May 2018 23:19:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rZPgRkU9Ehy1 for ; Sun, 6 May 2018 23:19:56 -0700 (PDT) Received: from guri.nttv6.jp (guri.nttv6.jp [115.69.228.140]) by ietfa.amsl.com (Postfix) with ESMTP id 34AE6124207 for ; Sun, 6 May 2018 23:19:56 -0700 (PDT) Received: from z.nttv6.jp (z.nttv6.jp [192.168.8.15]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id 04A7D25F691; Mon, 7 May 2018 15:19:54 +0900 (JST) Received: from MacBook-Pro-17.local (fujiko.nttv6.jp [115.69.228.141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id D31D4759099; Mon, 7 May 2018 15:19:54 +0900 (JST) To: mohamed.boucadair@orange.com, "dots@ietf.org" References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: kaname nishizuka Message-ID: Date: Mon, 7 May 2018 15:19:54 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 May 2018 06:19:59 -0000 Hi Med, I've read the thread. and the code '8' of the thread is different from the code '8' of the current draft. they'd been discussing the 7,8 and 9 based on this definition, right? https://mailarchive.ietf.org/arch/msg/dots/7zljzN8nycZX7E7ghgk1ux32MkM == 7 | DOTS Server has detected conflicting mitigation requests from different DOTS clients.  This mitigation request is currently inactive until the conflicts are resolved. Another mitigation request is active. 8 | DOTS Server has detected conflicting mitigation requests from different DOTS clients.  This mitigation request is currently active. 9 | DOTS Server has detected conflicting mitigation requests from different DOTS clients.  All conflicting mitigation requests are inactive. == Kaname On 2018/05/07 15:12, mohamed.boucadair@orange.com wrote: > Hi Kaname, > > Please check https://mailarchive.ietf.org/arch/msg/dots/z_cZR9_u273HzC9o0Iy9FeQZ0Jo about the rationale for allowing to return code '8' even in a notification message. The intent was to have code '8' as a transition state. > > Cheers, > Med > >> -----Message d'origine----- >> De : kaname nishizuka [mailto:kaname@nttv6.jp] >> Envoyé : mercredi 2 mai 2018 02:49 >> À : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org >> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >> >> Hi, >> >> I'd like to ask one clarification question about status code 8: >> >>    o  A notification message with 'status' code set to '8 (Attack >>       mitigation is rejected)' and 'conflict-status' set to '1' is sent >>       to a DOTS client to indicate that this mitigation request is >>       rejected because a conflict is detected. >> >> If a mitigation request is rejected due to a conflict, it is rejected at >> PUT(4.09(Conflict)), so no resource will be created. >> So it looks there is no chance to return '8 (Attack mitigation is rejected)'. >> >> thanks, >> Kaname >> >> On 2018/04/10 22:47, mohamed.boucadair@orange.com wrote: >>> Re-, >>> >>> This version addresses the comments raised during the WGLC, in particular: >>> - (Clarification) Indicate that only one hop-limit is included >>> - Specify the loop diagnostic payload >>> - (Clarification) Indicate explicitly that GET messages with 'sid' are >> allowed >>> - Update the redirect behavior. >>> >>> Cheers, >>> Med >>> >>>> -----Message d'origine----- >>>> De : Dots [mailto:dots-bounces@ietf.org] De la part de internet- >>>> drafts@ietf.org >>>> Envoyé : mardi 10 avril 2018 15:40 >>>> À : i-d-announce@ietf.org >>>> Cc : dots@ietf.org >>>> Objet : [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>> >>>> >>>> A New Internet-Draft is available from the on-line Internet-Drafts >>>> directories. >>>> This draft is a work item of the DDoS Open Threat Signaling WG of the >> IETF. >>>> Title : Distributed Denial-of-Service Open Threat >> Signaling >>>> (DOTS) Signal Channel Specification >>>> Authors : Tirumaleswar Reddy >>>> Mohamed Boucadair >>>> Prashanth Patil >>>> Andrew Mortensen >>>> Nik Teague >>>> Filename : draft-ietf-dots-signal-channel-19.txt >>>> Pages : 86 >>>> Date : 2018-04-10 >>>> >>>> Abstract: >>>> This document specifies the DOTS signal channel, a protocol for >>>> signaling the need for protection against Distributed Denial-of- >>>> Service (DDoS) attacks to a server capable of enabling network >>>> traffic mitigation on behalf of the requesting client. >>>> >>>> A companion document defines the DOTS data channel, a separate >>>> reliable communication layer for DOTS management and configuration >>>> purposes. >>>> >>>> Editorial Note (To be removed by RFC Editor) >>>> >>>> Please update these statements with the RFC number to be assigned to >>>> this document: >>>> >>>> o "This version of this YANG module is part of RFC XXXX;" >>>> >>>> o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling >>>> (DOTS) Signal Channel Specification"; >>>> >>>> o "| [RFCXXXX] |" >>>> >>>> o reference: RFC XXXX >>>> >>>> Please update TBD statements with the port number to be assigned to >>>> DOTS Signal Channel Protocol. >>>> >>>> Also, please update the "revision" date of the YANG module. >>>> >>>> >>>> The IETF datatracker status page for this draft is: >>>> https://datatracker.ietf.org/doc/draft-ietf-dots-signal-channel/ >>>> >>>> There are also htmlized versions available at: >>>> https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19 >>>> https://datatracker.ietf.org/doc/html/draft-ietf-dots-signal-channel-19 >>>> >>>> A diff from the previous version is available at: >>>> https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-signal-channel-19 >>>> >>>> >>>> Please note that it may take a couple of minutes from the time of >> submission >>>> until the htmlized version and diff are available at tools.ietf.org. >>>> >>>> Internet-Drafts are also available by anonymous FTP at: >>>> ftp://ftp.ietf.org/internet-drafts/ >>>> >>>> _______________________________________________ >>>> Dots mailing list >>>> Dots@ietf.org >>>> https://www.ietf.org/mailman/listinfo/dots >>> _______________________________________________ >>> Dots mailing list >>> Dots@ietf.org >>> https://www.ietf.org/mailman/listinfo/dots > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Sun May 6 23:37:56 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E131C1271DF for ; Sun, 6 May 2018 23:37:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3H29Hh0C70WQ for ; Sun, 6 May 2018 23:37:52 -0700 (PDT) Received: from orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 769D4124207 for ; Sun, 6 May 2018 23:37:52 -0700 (PDT) Received: from opfedar05.francetelecom.fr (unknown [xx.xx.xx.7]) by opfedar27.francetelecom.fr (ESMTP service) with ESMTP id 40fXxC12VXz2xsP; Mon, 7 May 2018 08:37:51 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.17]) by opfedar05.francetelecom.fr (ESMTP service) with ESMTP id 0414E6006E; Mon, 7 May 2018 08:37:51 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM24.corporate.adroot.infra.ftgroup ([fe80::a1e6:3e6a:1f68:5f7e%18]) with mapi id 14.03.0389.001; Mon, 7 May 2018 08:37:50 +0200 From: To: kaname nishizuka , "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT5ctsXQz3Q8Z2x0mpaE/VMucI3qQjziYw Date: Mon, 7 May 2018 06:37:50 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.2] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 May 2018 06:37:55 -0000 UmUtLA0KDQpBZ3JlZSB0aGF0IHRoZSBjb2RlcyBhcmUgbm90IHRoZSBzYW1lLCBidXQgYWx0ZXJu YXRpdmVzIG9uZXMgYXMgc3VtbWFyaXplZCBoZXJlOiBodHRwczovL21haWxhcmNoaXZlLmlldGYu b3JnL2FyY2gvbXNnL2RvdHMvaEEzTUxLbGtYRmltcEFuNUtTWVRheWFWa2pBLiANCg0KQ2hlZXJz LA0KTWVkDQoNCj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+IERlwqA6IGthbmFtZSBu aXNoaXp1a2EgW21haWx0bzprYW5hbWVAbnR0djYuanBdDQo+IEVudm95w6nCoDogbHVuZGkgNyBt YWkgMjAxOCAwODoyMA0KPiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOyBkb3RzQGll dGYub3JnDQo+IE9iamV0wqA6IFJlOiBbRG90c10gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3Rz LXNpZ25hbC1jaGFubmVsLTE5LnR4dA0KPiANCj4gSGkgTWVkLA0KPiANCj4gSSd2ZSByZWFkIHRo ZSB0aHJlYWQuDQo+IGFuZCB0aGUgY29kZSAnOCcgb2YgdGhlIHRocmVhZCBpcyBkaWZmZXJlbnQg ZnJvbSB0aGUgY29kZSAnOCcgb2YgdGhlIGN1cnJlbnQNCj4gZHJhZnQuDQo+IA0KPiB0aGV5J2Qg YmVlbiBkaXNjdXNzaW5nIHRoZSA3LDggYW5kIDkgYmFzZWQgb24gdGhpcyBkZWZpbml0aW9uLCBy aWdodD8NCj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9kb3RzLzd6bGp6 TjhueWNaWDdFN2doZ2sxdXgzMk1rTQ0KPiA9PQ0KPiA3IHwgRE9UUyBTZXJ2ZXIgaGFzIGRldGVj dGVkIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdHMgZnJvbSBkaWZmZXJlbnQNCj4gRE9U UyBjbGllbnRzLsKgIFRoaXMgbWl0aWdhdGlvbiByZXF1ZXN0IGlzIGN1cnJlbnRseSBpbmFjdGl2 ZSB1bnRpbCB0aGUNCj4gY29uZmxpY3RzIGFyZSByZXNvbHZlZC4gQW5vdGhlciBtaXRpZ2F0aW9u IHJlcXVlc3QgaXMgYWN0aXZlLg0KPiANCj4gOCB8IERPVFMgU2VydmVyIGhhcyBkZXRlY3RlZCBj b25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3RzIGZyb20gZGlmZmVyZW50DQo+IERPVFMgY2xp ZW50cy7CoCBUaGlzIG1pdGlnYXRpb24gcmVxdWVzdCBpcyBjdXJyZW50bHkgYWN0aXZlLg0KPiAN Cj4gOSB8IERPVFMgU2VydmVyIGhhcyBkZXRlY3RlZCBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJl cXVlc3RzIGZyb20gZGlmZmVyZW50DQo+IERPVFMgY2xpZW50cy7CoCBBbGwgY29uZmxpY3Rpbmcg bWl0aWdhdGlvbiByZXF1ZXN0cyBhcmUgaW5hY3RpdmUuDQo+ID09DQo+IA0KPiBLYW5hbWUNCj4g DQo+IA0KPiBPbiAyMDE4LzA1LzA3IDE1OjEyLCBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29t IHdyb3RlOg0KPiA+IEhpIEthbmFtZSwNCj4gPg0KPiA+IFBsZWFzZSBjaGVjaw0KPiBodHRwczov L21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gvbXNnL2RvdHMvel9jWlI5X3UyNzNIekM5bzBJeTlG ZVFaMEpvIGFib3V0DQo+IHRoZSByYXRpb25hbGUgZm9yIGFsbG93aW5nIHRvIHJldHVybiBjb2Rl ICc4JyBldmVuIGluIGEgbm90aWZpY2F0aW9uIG1lc3NhZ2UuDQo+IFRoZSBpbnRlbnQgd2FzIHRv IGhhdmUgY29kZSAnOCcgYXMgYSB0cmFuc2l0aW9uIHN0YXRlLg0KPiA+DQo+ID4gQ2hlZXJzLA0K PiA+IE1lZA0KPiA+DQo+ID4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+PiBEZcKg OiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50dHY2LmpwXQ0KPiA+PiBFbnZvecOp wqA6IG1lcmNyZWRpIDIgbWFpIDIwMTggMDI6NDkNCj4gPj4gw4DCoDogQk9VQ0FEQUlSIE1vaGFt ZWQgSU1UL09MTjsgZG90c0BpZXRmLm9yZw0KPiA+PiBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBB Y3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPj4NCj4gPj4g SGksDQo+ID4+DQo+ID4+IEknZCBsaWtlIHRvIGFzayBvbmUgY2xhcmlmaWNhdGlvbiBxdWVzdGlv biBhYm91dCBzdGF0dXMgY29kZSA4Og0KPiA+Pg0KPiA+PiAgIMKgwqAgb8KgIEEgbm90aWZpY2F0 aW9uIG1lc3NhZ2Ugd2l0aCAnc3RhdHVzJyBjb2RlIHNldCB0byAnOCAoQXR0YWNrDQo+ID4+ICAg wqDCoMKgwqDCoCBtaXRpZ2F0aW9uIGlzIHJlamVjdGVkKScgYW5kICdjb25mbGljdC1zdGF0dXMn IHNldCB0byAnMScgaXMgc2VudA0KPiA+PiAgIMKgwqDCoMKgwqAgdG8gYSBET1RTIGNsaWVudCB0 byBpbmRpY2F0ZSB0aGF0IHRoaXMgbWl0aWdhdGlvbiByZXF1ZXN0IGlzDQo+ID4+ICAgwqDCoMKg wqDCoCByZWplY3RlZCBiZWNhdXNlIGEgY29uZmxpY3QgaXMgZGV0ZWN0ZWQuDQo+ID4+DQo+ID4+ IElmIGEgbWl0aWdhdGlvbiByZXF1ZXN0IGlzIHJlamVjdGVkIGR1ZSB0byBhIGNvbmZsaWN0LCBp dCBpcyByZWplY3RlZCBhdA0KPiA+PiBQVVQoNC4wOShDb25mbGljdCkpLCBzbyBubyByZXNvdXJj ZSB3aWxsIGJlIGNyZWF0ZWQuDQo+ID4+IFNvIGl0IGxvb2tzIHRoZXJlIGlzIG5vIGNoYW5jZSB0 byByZXR1cm4gJzggKEF0dGFjayBtaXRpZ2F0aW9uIGlzDQo+IHJlamVjdGVkKScuDQo+ID4+DQo+ ID4+IHRoYW5rcywNCj4gPj4gS2FuYW1lDQo+ID4+DQo+ID4+IE9uIDIwMTgvMDQvMTAgMjI6NDcs IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3JvdGU6DQo+ID4+PiBSZS0sDQo+ID4+Pg0K PiA+Pj4gVGhpcyB2ZXJzaW9uIGFkZHJlc3NlcyB0aGUgY29tbWVudHMgcmFpc2VkIGR1cmluZyB0 aGUgV0dMQywgaW4NCj4gcGFydGljdWxhcjoNCj4gPj4+IC0gKENsYXJpZmljYXRpb24pIEluZGlj YXRlIHRoYXQgb25seSBvbmUgaG9wLWxpbWl0IGlzIGluY2x1ZGVkDQo+ID4+PiAtIFNwZWNpZnkg dGhlIGxvb3AgZGlhZ25vc3RpYyBwYXlsb2FkDQo+ID4+PiAtIChDbGFyaWZpY2F0aW9uKSBJbmRp Y2F0ZSBleHBsaWNpdGx5IHRoYXQgR0VUIG1lc3NhZ2VzIHdpdGggJ3NpZCcgYXJlDQo+ID4+IGFs bG93ZWQNCj4gPj4+IC0gVXBkYXRlIHRoZSByZWRpcmVjdCBiZWhhdmlvci4NCj4gPj4+DQo+ID4+ PiBDaGVlcnMsDQo+ID4+PiBNZWQNCj4gPj4+DQo+ID4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2lu ZS0tLS0tDQo+ID4+Pj4gRGXCoDogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10g RGUgbGEgcGFydCBkZSBpbnRlcm5ldC0NCj4gPj4+PiBkcmFmdHNAaWV0Zi5vcmcNCj4gPj4+PiBF bnZvecOpwqA6IG1hcmRpIDEwIGF2cmlsIDIwMTggMTU6NDANCj4gPj4+PiDDgMKgOiBpLWQtYW5u b3VuY2VAaWV0Zi5vcmcNCj4gPj4+PiBDY8KgOiBkb3RzQGlldGYub3JnDQo+ID4+Pj4gT2JqZXTC oDogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50 eHQNCj4gPj4+Pg0KPiA+Pj4+DQo+ID4+Pj4gQSBOZXcgSW50ZXJuZXQtRHJhZnQgaXMgYXZhaWxh YmxlIGZyb20gdGhlIG9uLWxpbmUgSW50ZXJuZXQtRHJhZnRzDQo+ID4+Pj4gZGlyZWN0b3JpZXMu DQo+ID4+Pj4gVGhpcyBkcmFmdCBpcyBhIHdvcmsgaXRlbSBvZiB0aGUgRERvUyBPcGVuIFRocmVh dCBTaWduYWxpbmcgV0cgb2YgdGhlDQo+ID4+IElFVEYuDQo+ID4+Pj4gICAgICAgICAgIFRpdGxl ICAgICAgICAgICA6IERpc3RyaWJ1dGVkIERlbmlhbC1vZi1TZXJ2aWNlIE9wZW4gVGhyZWF0DQo+ ID4+IFNpZ25hbGluZw0KPiA+Pj4+IChET1RTKSBTaWduYWwgQ2hhbm5lbCBTcGVjaWZpY2F0aW9u DQo+ID4+Pj4gICAgICAgICAgIEF1dGhvcnMgICAgICAgICA6IFRpcnVtYWxlc3dhciBSZWRkeQ0K PiA+Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNb2hhbWVkIEJvdWNhZGFpcg0KPiA+ Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBQcmFzaGFudGggUGF0aWwNCj4gPj4+PiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgQW5kcmV3IE1vcnRlbnNlbg0KPiA+Pj4+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBOaWsgVGVhZ3VlDQo+ID4+Pj4gCUZpbGVuYW1lICAgICAg ICA6IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPj4+PiAJUGFnZXMg ICAgICAgICAgIDogODYNCj4gPj4+PiAJRGF0ZSAgICAgICAgICAgIDogMjAxOC0wNC0xMA0KPiA+ Pj4+DQo+ID4+Pj4gQWJzdHJhY3Q6DQo+ID4+Pj4gICAgICBUaGlzIGRvY3VtZW50IHNwZWNpZmll cyB0aGUgRE9UUyBzaWduYWwgY2hhbm5lbCwgYSBwcm90b2NvbCBmb3INCj4gPj4+PiAgICAgIHNp Z25hbGluZyB0aGUgbmVlZCBmb3IgcHJvdGVjdGlvbiBhZ2FpbnN0IERpc3RyaWJ1dGVkIERlbmlh bC1vZi0NCj4gPj4+PiAgICAgIFNlcnZpY2UgKEREb1MpIGF0dGFja3MgdG8gYSBzZXJ2ZXIgY2Fw YWJsZSBvZiBlbmFibGluZyBuZXR3b3JrDQo+ID4+Pj4gICAgICB0cmFmZmljIG1pdGlnYXRpb24g b24gYmVoYWxmIG9mIHRoZSByZXF1ZXN0aW5nIGNsaWVudC4NCj4gPj4+Pg0KPiA+Pj4+ICAgICAg QSBjb21wYW5pb24gZG9jdW1lbnQgZGVmaW5lcyB0aGUgRE9UUyBkYXRhIGNoYW5uZWwsIGEgc2Vw YXJhdGUNCj4gPj4+PiAgICAgIHJlbGlhYmxlIGNvbW11bmljYXRpb24gbGF5ZXIgZm9yIERPVFMg bWFuYWdlbWVudCBhbmQgY29uZmlndXJhdGlvbg0KPiA+Pj4+ICAgICAgcHVycG9zZXMuDQo+ID4+ Pj4NCj4gPj4+PiBFZGl0b3JpYWwgTm90ZSAoVG8gYmUgcmVtb3ZlZCBieSBSRkMgRWRpdG9yKQ0K PiA+Pj4+DQo+ID4+Pj4gICAgICBQbGVhc2UgdXBkYXRlIHRoZXNlIHN0YXRlbWVudHMgd2l0aCB0 aGUgUkZDIG51bWJlciB0byBiZSBhc3NpZ25lZA0KPiB0bw0KPiA+Pj4+ICAgICAgdGhpcyBkb2N1 bWVudDoNCj4gPj4+Pg0KPiA+Pj4+ICAgICAgbyAgIlRoaXMgdmVyc2lvbiBvZiB0aGlzIFlBTkcg bW9kdWxlIGlzIHBhcnQgb2YgUkZDIFhYWFg7Ig0KPiA+Pj4+DQo+ID4+Pj4gICAgICBvICAiUkZD IFhYWFg6IERpc3RyaWJ1dGVkIERlbmlhbC1vZi1TZXJ2aWNlIE9wZW4gVGhyZWF0IFNpZ25hbGlu Zw0KPiA+Pj4+ICAgICAgICAgKERPVFMpIFNpZ25hbCBDaGFubmVsIFNwZWNpZmljYXRpb24iOw0K PiA+Pj4+DQo+ID4+Pj4gICAgICBvICAifCBbUkZDWFhYWF0gfCINCj4gPj4+Pg0KPiA+Pj4+ICAg ICAgbyAgcmVmZXJlbmNlOiBSRkMgWFhYWA0KPiA+Pj4+DQo+ID4+Pj4gICAgICBQbGVhc2UgdXBk YXRlIFRCRCBzdGF0ZW1lbnRzIHdpdGggdGhlIHBvcnQgbnVtYmVyIHRvIGJlIGFzc2lnbmVkIHRv DQo+ID4+Pj4gICAgICBET1RTIFNpZ25hbCBDaGFubmVsIFByb3RvY29sLg0KPiA+Pj4+DQo+ID4+ Pj4gICAgICBBbHNvLCBwbGVhc2UgdXBkYXRlIHRoZSAicmV2aXNpb24iIGRhdGUgb2YgdGhlIFlB TkcgbW9kdWxlLg0KPiA+Pj4+DQo+ID4+Pj4NCj4gPj4+PiBUaGUgSUVURiBkYXRhdHJhY2tlciBz dGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczoNCj4gPj4+PiBodHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwvDQo+ID4+Pj4NCj4g Pj4+PiBUaGVyZSBhcmUgYWxzbyBodG1saXplZCB2ZXJzaW9ucyBhdmFpbGFibGUgYXQ6DQo+ID4+ Pj4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hh bm5lbC0xOQ0KPiA+Pj4+IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJh ZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5DQo+ID4+Pj4NCj4gPj4+PiBBIGRpZmYgZnJv bSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6DQo+ID4+Pj4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0x OQ0KPiA+Pj4+DQo+ID4+Pj4NCj4gPj4+PiBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEg Y291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZg0KPiA+PiBzdWJtaXNzaW9uDQo+ID4+ Pj4gdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0 b29scy5pZXRmLm9yZy4NCj4gPj4+Pg0KPiA+Pj4+IEludGVybmV0LURyYWZ0cyBhcmUgYWxzbyBh dmFpbGFibGUgYnkgYW5vbnltb3VzIEZUUCBhdDoNCj4gPj4+PiBmdHA6Ly9mdHAuaWV0Zi5vcmcv aW50ZXJuZXQtZHJhZnRzLw0KPiA+Pj4+DQo+ID4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+Pj4+ IERvdHNAaWV0Zi5vcmcNCj4gPj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL2RvdHMNCj4gPj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fDQo+ID4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+Pj4gRG90c0BpZXRmLm9yZw0KPiA+ Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4gX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiBEb3RzIG1haWxp bmcgbGlzdA0KPiA+IERvdHNAaWV0Zi5vcmcNCj4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL2RvdHMNCg0K From nobody Tue May 8 22:51:28 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 489961270FC for ; Tue, 8 May 2018 22:51:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JJJh5tYP4tFV for ; Tue, 8 May 2018 22:51:25 -0700 (PDT) Received: from orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E733A126DC2 for ; Tue, 8 May 2018 22:51:24 -0700 (PDT) Received: from opfedar06.francetelecom.fr (unknown [xx.xx.xx.8]) by opfedar25.francetelecom.fr (ESMTP service) with ESMTP id 415F812027D; Wed, 9 May 2018 07:51:23 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.3]) by opfedar06.francetelecom.fr (ESMTP service) with ESMTP id 23B5380062; Wed, 9 May 2018 07:51:23 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM5D.corporate.adroot.infra.ftgroup ([fe80::9898:741c:bc1d:258d%19]) with mapi id 14.03.0389.001; Wed, 9 May 2018 07:51:22 +0200 From: To: kaname nishizuka CC: "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT5cts5sqjFXD5eEKW2iVIpIKRtqQjziYwgAMX/QA= Date: Wed, 9 May 2018 05:51:22 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.2] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 May 2018 05:51:27 -0000 SGkgS2FuYW1lLCANCg0KQWZ0ZXIgdGhpbmtpbmcgYWJvdXQgdGhpcywgSSBkbyB0aGluayB0aGF0 IHlvdSBoYXZlIGEgdmFsaWQgcG9pbnQuIEkgc3VnZ2VzdCB0byBtYWtlIHRvIG1ha2UgdGhpcyBj aGFuZ2UgKG1hcmtlZCB3aXRoIF5eXl4pDQoNCk9MRDogDQogICBJZiB0aGUgcmVxdWVzdCBpcyBj b25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdA0KICAgZnJvbSBh IGRpZmZlcmVudCBET1RTIGNsaWVudCwgYW5kIHRoZSBET1RTIHNlcnZlciBkZWNpZGVzIHRvIG1h aW50YWluDQogICB0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUyBz ZXJ2ZXIgcmV0dXJucyA0LjA5DQogICAoQ29uZmxpY3QpIFtSRkM4MTMyXSB0byB0aGUgcmVxdWVz dGluZyBET1RTIGNsaWVudC4gIFRoZSByZXNwb25zZQ0KICAgaW5jbHVkZXMgZW5vdWdoIGluZm9y bWF0aW9uIGZvciBhIERPVFMgY2xpZW50IHRvIHJlY29nbml6ZSB0aGUgc291cmNlDQogICBvZiB0 aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93OiANCg0KTkVXOg0KICAgSWYgdGhlIHJlcXVl c3QgaXMgY29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QNCiAg IGZyb20gYSBkaWZmZXJlbnQgRE9UUyBjbGllbnQsIGFuZCB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRl cyB0byBtYWludGFpbg0KICAgdGhlIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdCwgdGhl IERPVFMgc2VydmVyIHJldHVybnMgMi4wMQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXl5eXg0KICAgKENyZWF0ZWQpIHRvIHRo ZSByZXF1ZXN0aW5nIERPVFMgY2xpZW50LiAgVGhlIHJlc3BvbnNlXg0KICAgXl5eXl5eXl4NCiAg IGluY2x1ZGVzIGVub3VnaCBpbmZvcm1hdGlvbiBmb3IgYSBET1RTIGNsaWVudCB0byByZWNvZ25p emUgdGhlIHNvdXJjZQ0KICAgb2YgdGhlIGNvbmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxvdzoNCg0K Q2hlZXJzLA0KTWVkDQoNCj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+IERlwqA6IERv dHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIERlIGxhIHBhcnQgZGUNCj4gbW9oYW1l ZC5ib3VjYWRhaXJAb3JhbmdlLmNvbQ0KPiBFbnZvecOpwqA6IGx1bmRpIDcgbWFpIDIwMTggMDg6 MzgNCj4gw4DCoDoga2FuYW1lIG5pc2hpenVrYTsgZG90c0BpZXRmLm9yZw0KPiBPYmpldMKgOiBS ZTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50 eHQNCj4gDQo+IFJlLSwNCj4gDQo+IEFncmVlIHRoYXQgdGhlIGNvZGVzIGFyZSBub3QgdGhlIHNh bWUsIGJ1dCBhbHRlcm5hdGl2ZXMgb25lcyBhcyBzdW1tYXJpemVkDQo+IGhlcmU6IGh0dHBzOi8v bWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvZG90cy9oQTNNTEtsa1hGaW1wQW41S1NZVGF5 YVZrakEuDQo+IA0KPiBDaGVlcnMsDQo+IE1lZA0KPiANCj4gPiAtLS0tLU1lc3NhZ2UgZCdvcmln aW5lLS0tLS0NCj4gPiBEZcKgOiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50dHY2 LmpwXQ0KPiA+IEVudm95w6nCoDogbHVuZGkgNyBtYWkgMjAxOCAwODoyMA0KPiA+IMOAwqA6IEJP VUNBREFJUiBNb2hhbWVkIElNVC9PTE47IGRvdHNAaWV0Zi5vcmcNCj4gPiBPYmpldMKgOiBSZTog W0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQN Cj4gPg0KPiA+IEhpIE1lZCwNCj4gPg0KPiA+IEkndmUgcmVhZCB0aGUgdGhyZWFkLg0KPiA+IGFu ZCB0aGUgY29kZSAnOCcgb2YgdGhlIHRocmVhZCBpcyBkaWZmZXJlbnQgZnJvbSB0aGUgY29kZSAn OCcgb2YgdGhlDQo+IGN1cnJlbnQNCj4gPiBkcmFmdC4NCj4gPg0KPiA+IHRoZXknZCBiZWVuIGRp c2N1c3NpbmcgdGhlIDcsOCBhbmQgOSBiYXNlZCBvbiB0aGlzIGRlZmluaXRpb24sIHJpZ2h0Pw0K PiA+IGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvZG90cy83emxqek44bnlj Wlg3RTdnaGdrMXV4MzJNa00NCj4gPiA9PQ0KPiA+IDcgfCBET1RTIFNlcnZlciBoYXMgZGV0ZWN0 ZWQgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0cyBmcm9tIGRpZmZlcmVudA0KPiA+IERP VFMgY2xpZW50cy7CoCBUaGlzIG1pdGlnYXRpb24gcmVxdWVzdCBpcyBjdXJyZW50bHkgaW5hY3Rp dmUgdW50aWwgdGhlDQo+ID4gY29uZmxpY3RzIGFyZSByZXNvbHZlZC4gQW5vdGhlciBtaXRpZ2F0 aW9uIHJlcXVlc3QgaXMgYWN0aXZlLg0KPiA+DQo+ID4gOCB8IERPVFMgU2VydmVyIGhhcyBkZXRl Y3RlZCBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3RzIGZyb20gZGlmZmVyZW50DQo+ID4g RE9UUyBjbGllbnRzLsKgIFRoaXMgbWl0aWdhdGlvbiByZXF1ZXN0IGlzIGN1cnJlbnRseSBhY3Rp dmUuDQo+ID4NCj4gPiA5IHwgRE9UUyBTZXJ2ZXIgaGFzIGRldGVjdGVkIGNvbmZsaWN0aW5nIG1p dGlnYXRpb24gcmVxdWVzdHMgZnJvbSBkaWZmZXJlbnQNCj4gPiBET1RTIGNsaWVudHMuwqAgQWxs IGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdHMgYXJlIGluYWN0aXZlLg0KPiA+ID09DQo+ ID4NCj4gPiBLYW5hbWUNCj4gPg0KPiA+DQo+ID4gT24gMjAxOC8wNS8wNyAxNToxMiwgbW9oYW1l ZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPiA+IEhpIEthbmFtZSwNCj4gPiA+DQo+ ID4gPiBQbGVhc2UgY2hlY2sNCj4gPiBodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gv bXNnL2RvdHMvel9jWlI5X3UyNzNIekM5bzBJeTlGZVFaMEpvDQo+IGFib3V0DQo+ID4gdGhlIHJh dGlvbmFsZSBmb3IgYWxsb3dpbmcgdG8gcmV0dXJuIGNvZGUgJzgnIGV2ZW4gaW4gYSBub3RpZmlj YXRpb24NCj4gbWVzc2FnZS4NCj4gPiBUaGUgaW50ZW50IHdhcyB0byBoYXZlIGNvZGUgJzgnIGFz IGEgdHJhbnNpdGlvbiBzdGF0ZS4NCj4gPiA+DQo+ID4gPiBDaGVlcnMsDQo+ID4gPiBNZWQNCj4g PiA+DQo+ID4gPj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gPj4gRGXCoDoga2Fu YW1lIG5pc2hpenVrYSBbbWFpbHRvOmthbmFtZUBudHR2Ni5qcF0NCj4gPiA+PiBFbnZvecOpwqA6 IG1lcmNyZWRpIDIgbWFpIDIwMTggMDI6NDkNCj4gPiA+PiDDgMKgOiBCT1VDQURBSVIgTW9oYW1l ZCBJTVQvT0xOOyBkb3RzQGlldGYub3JnDQo+ID4gPj4gT2JqZXTCoDogUmU6IFtEb3RzXSBJLUQg QWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4gPj4NCj4g PiA+PiBIaSwNCj4gPiA+Pg0KPiA+ID4+IEknZCBsaWtlIHRvIGFzayBvbmUgY2xhcmlmaWNhdGlv biBxdWVzdGlvbiBhYm91dCBzdGF0dXMgY29kZSA4Og0KPiA+ID4+DQo+ID4gPj4gICDCoMKgIG/C oCBBIG5vdGlmaWNhdGlvbiBtZXNzYWdlIHdpdGggJ3N0YXR1cycgY29kZSBzZXQgdG8gJzggKEF0 dGFjaw0KPiA+ID4+ICAgwqDCoMKgwqDCoCBtaXRpZ2F0aW9uIGlzIHJlamVjdGVkKScgYW5kICdj b25mbGljdC1zdGF0dXMnIHNldCB0byAnMScgaXMNCj4gc2VudA0KPiA+ID4+ICAgwqDCoMKgwqDC oCB0byBhIERPVFMgY2xpZW50IHRvIGluZGljYXRlIHRoYXQgdGhpcyBtaXRpZ2F0aW9uIHJlcXVl c3QgaXMNCj4gPiA+PiAgIMKgwqDCoMKgwqAgcmVqZWN0ZWQgYmVjYXVzZSBhIGNvbmZsaWN0IGlz IGRldGVjdGVkLg0KPiA+ID4+DQo+ID4gPj4gSWYgYSBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgcmVq ZWN0ZWQgZHVlIHRvIGEgY29uZmxpY3QsIGl0IGlzIHJlamVjdGVkIGF0DQo+ID4gPj4gUFVUKDQu MDkoQ29uZmxpY3QpKSwgc28gbm8gcmVzb3VyY2Ugd2lsbCBiZSBjcmVhdGVkLg0KPiA+ID4+IFNv IGl0IGxvb2tzIHRoZXJlIGlzIG5vIGNoYW5jZSB0byByZXR1cm4gJzggKEF0dGFjayBtaXRpZ2F0 aW9uIGlzDQo+ID4gcmVqZWN0ZWQpJy4NCj4gPiA+Pg0KPiA+ID4+IHRoYW5rcywNCj4gPiA+PiBL YW5hbWUNCj4gPiA+Pg0KPiA+ID4+IE9uIDIwMTgvMDQvMTAgMjI6NDcsIG1vaGFtZWQuYm91Y2Fk YWlyQG9yYW5nZS5jb20gd3JvdGU6DQo+ID4gPj4+IFJlLSwNCj4gPiA+Pj4NCj4gPiA+Pj4gVGhp cyB2ZXJzaW9uIGFkZHJlc3NlcyB0aGUgY29tbWVudHMgcmFpc2VkIGR1cmluZyB0aGUgV0dMQywg aW4NCj4gPiBwYXJ0aWN1bGFyOg0KPiA+ID4+PiAtIChDbGFyaWZpY2F0aW9uKSBJbmRpY2F0ZSB0 aGF0IG9ubHkgb25lIGhvcC1saW1pdCBpcyBpbmNsdWRlZA0KPiA+ID4+PiAtIFNwZWNpZnkgdGhl IGxvb3AgZGlhZ25vc3RpYyBwYXlsb2FkDQo+ID4gPj4+IC0gKENsYXJpZmljYXRpb24pIEluZGlj YXRlIGV4cGxpY2l0bHkgdGhhdCBHRVQgbWVzc2FnZXMgd2l0aCAnc2lkJyBhcmUNCj4gPiA+PiBh bGxvd2VkDQo+ID4gPj4+IC0gVXBkYXRlIHRoZSByZWRpcmVjdCBiZWhhdmlvci4NCj4gPiA+Pj4N Cj4gPiA+Pj4gQ2hlZXJzLA0KPiA+ID4+PiBNZWQNCj4gPiA+Pj4NCj4gPiA+Pj4+IC0tLS0tTWVz c2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+ID4+Pj4gRGXCoDogRG90cyBbbWFpbHRvOmRvdHMtYm91 bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZSBpbnRlcm5ldC0NCj4gPiA+Pj4+IGRyYWZ0c0Bp ZXRmLm9yZw0KPiA+ID4+Pj4gRW52b3nDqcKgOiBtYXJkaSAxMCBhdnJpbCAyMDE4IDE1OjQwDQo+ ID4gPj4+PiDDgMKgOiBpLWQtYW5ub3VuY2VAaWV0Zi5vcmcNCj4gPiA+Pj4+IENjwqA6IGRvdHNA aWV0Zi5vcmcNCj4gPiA+Pj4+IE9iamV0wqA6IFtEb3RzXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRm LWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4gPj4+Pg0KPiA+ID4+Pj4NCj4gPiA+Pj4+ IEEgTmV3IEludGVybmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lIEludGVy bmV0LURyYWZ0cw0KPiA+ID4+Pj4gZGlyZWN0b3JpZXMuDQo+ID4gPj4+PiBUaGlzIGRyYWZ0IGlz IGEgd29yayBpdGVtIG9mIHRoZSBERG9TIE9wZW4gVGhyZWF0IFNpZ25hbGluZyBXRyBvZiB0aGUN Cj4gPiA+PiBJRVRGLg0KPiA+ID4+Pj4gICAgICAgICAgIFRpdGxlICAgICAgICAgICA6IERpc3Ry aWJ1dGVkIERlbmlhbC1vZi1TZXJ2aWNlIE9wZW4gVGhyZWF0DQo+ID4gPj4gU2lnbmFsaW5nDQo+ ID4gPj4+PiAoRE9UUykgU2lnbmFsIENoYW5uZWwgU3BlY2lmaWNhdGlvbg0KPiA+ID4+Pj4gICAg ICAgICAgIEF1dGhvcnMgICAgICAgICA6IFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA+ID4+Pj4gICAg ICAgICAgICAgICAgICAgICAgICAgICAgIE1vaGFtZWQgQm91Y2FkYWlyDQo+ID4gPj4+PiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgUHJhc2hhbnRoIFBhdGlsDQo+ID4gPj4+PiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgQW5kcmV3IE1vcnRlbnNlbg0KPiA+ID4+Pj4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgIE5payBUZWFndWUNCj4gPiA+Pj4+IAlGaWxlbmFtZSAgICAgICAg OiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4gPj4+PiAJUGFnZXMg ICAgICAgICAgIDogODYNCj4gPiA+Pj4+IAlEYXRlICAgICAgICAgICAgOiAyMDE4LTA0LTEwDQo+ ID4gPj4+Pg0KPiA+ID4+Pj4gQWJzdHJhY3Q6DQo+ID4gPj4+PiAgICAgIFRoaXMgZG9jdW1lbnQg c3BlY2lmaWVzIHRoZSBET1RTIHNpZ25hbCBjaGFubmVsLCBhIHByb3RvY29sIGZvcg0KPiA+ID4+ Pj4gICAgICBzaWduYWxpbmcgdGhlIG5lZWQgZm9yIHByb3RlY3Rpb24gYWdhaW5zdCBEaXN0cmli dXRlZCBEZW5pYWwtb2YtDQo+ID4gPj4+PiAgICAgIFNlcnZpY2UgKEREb1MpIGF0dGFja3MgdG8g YSBzZXJ2ZXIgY2FwYWJsZSBvZiBlbmFibGluZyBuZXR3b3JrDQo+ID4gPj4+PiAgICAgIHRyYWZm aWMgbWl0aWdhdGlvbiBvbiBiZWhhbGYgb2YgdGhlIHJlcXVlc3RpbmcgY2xpZW50Lg0KPiA+ID4+ Pj4NCj4gPiA+Pj4+ICAgICAgQSBjb21wYW5pb24gZG9jdW1lbnQgZGVmaW5lcyB0aGUgRE9UUyBk YXRhIGNoYW5uZWwsIGEgc2VwYXJhdGUNCj4gPiA+Pj4+ICAgICAgcmVsaWFibGUgY29tbXVuaWNh dGlvbiBsYXllciBmb3IgRE9UUyBtYW5hZ2VtZW50IGFuZA0KPiBjb25maWd1cmF0aW9uDQo+ID4g Pj4+PiAgICAgIHB1cnBvc2VzLg0KPiA+ID4+Pj4NCj4gPiA+Pj4+IEVkaXRvcmlhbCBOb3RlIChU byBiZSByZW1vdmVkIGJ5IFJGQyBFZGl0b3IpDQo+ID4gPj4+Pg0KPiA+ID4+Pj4gICAgICBQbGVh c2UgdXBkYXRlIHRoZXNlIHN0YXRlbWVudHMgd2l0aCB0aGUgUkZDIG51bWJlciB0byBiZSBhc3Np Z25lZA0KPiA+IHRvDQo+ID4gPj4+PiAgICAgIHRoaXMgZG9jdW1lbnQ6DQo+ID4gPj4+Pg0KPiA+ ID4+Pj4gICAgICBvICAiVGhpcyB2ZXJzaW9uIG9mIHRoaXMgWUFORyBtb2R1bGUgaXMgcGFydCBv ZiBSRkMgWFhYWDsiDQo+ID4gPj4+Pg0KPiA+ID4+Pj4gICAgICBvICAiUkZDIFhYWFg6IERpc3Ry aWJ1dGVkIERlbmlhbC1vZi1TZXJ2aWNlIE9wZW4gVGhyZWF0IFNpZ25hbGluZw0KPiA+ID4+Pj4g ICAgICAgICAoRE9UUykgU2lnbmFsIENoYW5uZWwgU3BlY2lmaWNhdGlvbiI7DQo+ID4gPj4+Pg0K PiA+ID4+Pj4gICAgICBvICAifCBbUkZDWFhYWF0gfCINCj4gPiA+Pj4+DQo+ID4gPj4+PiAgICAg IG8gIHJlZmVyZW5jZTogUkZDIFhYWFgNCj4gPiA+Pj4+DQo+ID4gPj4+PiAgICAgIFBsZWFzZSB1 cGRhdGUgVEJEIHN0YXRlbWVudHMgd2l0aCB0aGUgcG9ydCBudW1iZXIgdG8gYmUgYXNzaWduZWQN Cj4gdG8NCj4gPiA+Pj4+ICAgICAgRE9UUyBTaWduYWwgQ2hhbm5lbCBQcm90b2NvbC4NCj4gPiA+ Pj4+DQo+ID4gPj4+PiAgICAgIEFsc28sIHBsZWFzZSB1cGRhdGUgdGhlICJyZXZpc2lvbiIgZGF0 ZSBvZiB0aGUgWUFORyBtb2R1bGUuDQo+ID4gPj4+Pg0KPiA+ID4+Pj4NCj4gPiA+Pj4+IFRoZSBJ RVRGIGRhdGF0cmFja2VyIHN0YXR1cyBwYWdlIGZvciB0aGlzIGRyYWZ0IGlzOg0KPiA+ID4+Pj4g aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1j aGFubmVsLw0KPiA+ID4+Pj4NCj4gPiA+Pj4+IFRoZXJlIGFyZSBhbHNvIGh0bWxpemVkIHZlcnNp b25zIGF2YWlsYWJsZSBhdDoNCj4gPiA+Pj4+IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9k cmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkNCj4gPiA+Pj4+IGh0dHBzOi8vZGF0YXRy YWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLQ0K PiAxOQ0KPiA+ID4+Pj4NCj4gPiA+Pj4+IEEgZGlmZiBmcm9tIHRoZSBwcmV2aW91cyB2ZXJzaW9u IGlzIGF2YWlsYWJsZSBhdDoNCj4gPiA+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/ dXJsMj1kcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkNCj4gPiA+Pj4+DQo+ID4gPj4+ Pg0KPiA+ID4+Pj4gUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51 dGVzIGZyb20gdGhlIHRpbWUgb2YNCj4gPiA+PiBzdWJtaXNzaW9uDQo+ID4gPj4+PiB1bnRpbCB0 aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYu b3JnLg0KPiA+ID4+Pj4NCj4gPiA+Pj4+IEludGVybmV0LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFi bGUgYnkgYW5vbnltb3VzIEZUUCBhdDoNCj4gPiA+Pj4+IGZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRl cm5ldC1kcmFmdHMvDQo+ID4gPj4+Pg0KPiA+ID4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCj4gPiA+Pj4+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4g Pj4+PiBEb3RzQGlldGYub3JnDQo+ID4gPj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2RvdHMNCj4gPiA+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCj4gPiA+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiA+Pj4gRG90c0Bp ZXRmLm9yZw0KPiA+ID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Rv dHMNCj4gPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQo+ID4gPiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+ID4gRG90c0BpZXRmLm9yZw0KPiA+ID4gaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+IA0KPiBfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBEb3RzIG1haWxpbmcgbGlz dA0KPiBEb3RzQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vZG90cw0K From nobody Wed May 9 01:41:19 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F3238127286 for ; Wed, 9 May 2018 01:41:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WcMdCQqKLjpZ for ; Wed, 9 May 2018 01:41:14 -0700 (PDT) Received: from guri.nttv6.jp (guri.nttv6.jp [IPv6:2402:c800:ff06:136::140]) by ietfa.amsl.com (Postfix) with ESMTP id EFC55127241 for ; Wed, 9 May 2018 01:41:13 -0700 (PDT) Received: from z.nttv6.jp (z.nttv6.jp [192.168.8.15]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id D735225F68C; Wed, 9 May 2018 17:41:12 +0900 (JST) Received: from MacBook-Pro-17.lv4.nttv6.jp (fujiko.nttv6.jp [115.69.228.141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id CF129763523; Wed, 9 May 2018 17:41:12 +0900 (JST) To: mohamed.boucadair@orange.com Cc: "dots@ietf.org" References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: kaname nishizuka Message-ID: <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> Date: Wed, 9 May 2018 17:41:10 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 May 2018 08:41:17 -0000 Hi Med, I'm OK with this change. However, to be precise, I'd like to suggest to state about the case the DOTS server decides NOT to maintain it. NEW-2:    If the request is conflicting with an existing mitigation request    from a different DOTS client, and the DOTS server decides to maintain    the conflicting mitigation request, the DOTS server returns 2.01    (Created) to the requesting DOTS client.    Otherwise, the DOTS server returns 4.09 (Conflict) [RFC8132].    The response includes enough information for a DOTS client to    recognize the source of the conflict as described below: thanks, Kaname On 2018/05/09 14:51, mohamed.boucadair@orange.com wrote: > Hi Kaname, > > After thinking about this, I do think that you have a valid point. I suggest to make to make this change (marked with ^^^^) > > OLD: > If the request is conflicting with an existing mitigation request > from a different DOTS client, and the DOTS server decides to maintain > the conflicting mitigation request, the DOTS server returns 4.09 > (Conflict) [RFC8132] to the requesting DOTS client. The response > includes enough information for a DOTS client to recognize the source > of the conflict as described below: > > NEW: > If the request is conflicting with an existing mitigation request > from a different DOTS client, and the DOTS server decides to maintain > the conflicting mitigation request, the DOTS server returns 2.01 > ^^^^ > (Created) to the requesting DOTS client. The response^ > ^^^^^^^^ > includes enough information for a DOTS client to recognize the source > of the conflict as described below: > > Cheers, > Med > >> -----Message d'origine----- >> De : Dots [mailto:dots-bounces@ietf.org] De la part de >> mohamed.boucadair@orange.com >> Envoyé : lundi 7 mai 2018 08:38 >> À : kaname nishizuka; dots@ietf.org >> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >> >> Re-, >> >> Agree that the codes are not the same, but alternatives ones as summarized >> here: https://mailarchive.ietf.org/arch/msg/dots/hA3MLKlkXFimpAn5KSYTayaVkjA. >> >> Cheers, >> Med >> >>> -----Message d'origine----- >>> De : kaname nishizuka [mailto:kaname@nttv6.jp] >>> Envoyé : lundi 7 mai 2018 08:20 >>> À : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org >>> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>> >>> Hi Med, >>> >>> I've read the thread. >>> and the code '8' of the thread is different from the code '8' of the >> current >>> draft. >>> >>> they'd been discussing the 7,8 and 9 based on this definition, right? >>> https://mailarchive.ietf.org/arch/msg/dots/7zljzN8nycZX7E7ghgk1ux32MkM >>> == >>> 7 | DOTS Server has detected conflicting mitigation requests from different >>> DOTS clients.  This mitigation request is currently inactive until the >>> conflicts are resolved. Another mitigation request is active. >>> >>> 8 | DOTS Server has detected conflicting mitigation requests from different >>> DOTS clients.  This mitigation request is currently active. >>> >>> 9 | DOTS Server has detected conflicting mitigation requests from different >>> DOTS clients.  All conflicting mitigation requests are inactive. >>> == >>> >>> Kaname >>> >>> >>> On 2018/05/07 15:12, mohamed.boucadair@orange.com wrote: >>>> Hi Kaname, >>>> >>>> Please check >>> https://mailarchive.ietf.org/arch/msg/dots/z_cZR9_u273HzC9o0Iy9FeQZ0Jo >> about >>> the rationale for allowing to return code '8' even in a notification >> message. >>> The intent was to have code '8' as a transition state. >>>> Cheers, >>>> Med >>>> >>>>> -----Message d'origine----- >>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] >>>>> Envoyé : mercredi 2 mai 2018 02:49 >>>>> À : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org >>>>> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>> >>>>> Hi, >>>>> >>>>> I'd like to ask one clarification question about status code 8: >>>>> >>>>>    o  A notification message with 'status' code set to '8 (Attack >>>>>       mitigation is rejected)' and 'conflict-status' set to '1' is >> sent >>>>>       to a DOTS client to indicate that this mitigation request is >>>>>       rejected because a conflict is detected. >>>>> >>>>> If a mitigation request is rejected due to a conflict, it is rejected at >>>>> PUT(4.09(Conflict)), so no resource will be created. >>>>> So it looks there is no chance to return '8 (Attack mitigation is >>> rejected)'. >>>>> thanks, >>>>> Kaname >>>>> >>>>> On 2018/04/10 22:47, mohamed.boucadair@orange.com wrote: >>>>>> Re-, >>>>>> >>>>>> This version addresses the comments raised during the WGLC, in >>> particular: >>>>>> - (Clarification) Indicate that only one hop-limit is included >>>>>> - Specify the loop diagnostic payload >>>>>> - (Clarification) Indicate explicitly that GET messages with 'sid' are >>>>> allowed >>>>>> - Update the redirect behavior. >>>>>> >>>>>> Cheers, >>>>>> Med >>>>>> >>>>>>> -----Message d'origine----- >>>>>>> De : Dots [mailto:dots-bounces@ietf.org] De la part de internet- >>>>>>> drafts@ietf.org >>>>>>> Envoyé : mardi 10 avril 2018 15:40 >>>>>>> À : i-d-announce@ietf.org >>>>>>> Cc : dots@ietf.org >>>>>>> Objet : [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>>> >>>>>>> >>>>>>> A New Internet-Draft is available from the on-line Internet-Drafts >>>>>>> directories. >>>>>>> This draft is a work item of the DDoS Open Threat Signaling WG of the >>>>> IETF. >>>>>>> Title : Distributed Denial-of-Service Open Threat >>>>> Signaling >>>>>>> (DOTS) Signal Channel Specification >>>>>>> Authors : Tirumaleswar Reddy >>>>>>> Mohamed Boucadair >>>>>>> Prashanth Patil >>>>>>> Andrew Mortensen >>>>>>> Nik Teague >>>>>>> Filename : draft-ietf-dots-signal-channel-19.txt >>>>>>> Pages : 86 >>>>>>> Date : 2018-04-10 >>>>>>> >>>>>>> Abstract: >>>>>>> This document specifies the DOTS signal channel, a protocol for >>>>>>> signaling the need for protection against Distributed Denial-of- >>>>>>> Service (DDoS) attacks to a server capable of enabling network >>>>>>> traffic mitigation on behalf of the requesting client. >>>>>>> >>>>>>> A companion document defines the DOTS data channel, a separate >>>>>>> reliable communication layer for DOTS management and >> configuration >>>>>>> purposes. >>>>>>> >>>>>>> Editorial Note (To be removed by RFC Editor) >>>>>>> >>>>>>> Please update these statements with the RFC number to be assigned >>> to >>>>>>> this document: >>>>>>> >>>>>>> o "This version of this YANG module is part of RFC XXXX;" >>>>>>> >>>>>>> o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling >>>>>>> (DOTS) Signal Channel Specification"; >>>>>>> >>>>>>> o "| [RFCXXXX] |" >>>>>>> >>>>>>> o reference: RFC XXXX >>>>>>> >>>>>>> Please update TBD statements with the port number to be assigned >> to >>>>>>> DOTS Signal Channel Protocol. >>>>>>> >>>>>>> Also, please update the "revision" date of the YANG module. >>>>>>> >>>>>>> >>>>>>> The IETF datatracker status page for this draft is: >>>>>>> https://datatracker.ietf.org/doc/draft-ietf-dots-signal-channel/ >>>>>>> >>>>>>> There are also htmlized versions available at: >>>>>>> https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19 >>>>>>> https://datatracker.ietf.org/doc/html/draft-ietf-dots-signal-channel- >> 19 >>>>>>> A diff from the previous version is available at: >>>>>>> https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-signal-channel-19 >>>>>>> >>>>>>> >>>>>>> Please note that it may take a couple of minutes from the time of >>>>> submission >>>>>>> until the htmlized version and diff are available at tools.ietf.org. >>>>>>> >>>>>>> Internet-Drafts are also available by anonymous FTP at: >>>>>>> ftp://ftp.ietf.org/internet-drafts/ >>>>>>> >>>>>>> _______________________________________________ >>>>>>> Dots mailing list >>>>>>> Dots@ietf.org >>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>> _______________________________________________ >>>>>> Dots mailing list >>>>>> Dots@ietf.org >>>>>> https://www.ietf.org/mailman/listinfo/dots >>>> _______________________________________________ >>>> Dots mailing list >>>> Dots@ietf.org >>>> https://www.ietf.org/mailman/listinfo/dots >> _______________________________________________ >> Dots mailing list >> Dots@ietf.org >> https://www.ietf.org/mailman/listinfo/dots > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu May 10 23:09:21 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0AA9B12E85E for ; Thu, 10 May 2018 23:09:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CcJ3FhIBZpir for ; Thu, 10 May 2018 23:09:18 -0700 (PDT) Received: from orange.com (mta239.mail.business.static.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 254A212E76A for ; Thu, 10 May 2018 23:09:18 -0700 (PDT) Received: from opfedar01.francetelecom.fr (unknown [xx.xx.xx.2]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id 90CC010072D; Fri, 11 May 2018 08:09:16 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.61]) by opfedar01.francetelecom.fr (ESMTP service) with ESMTP id 755CD160071; Fri, 11 May 2018 08:09:16 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM7E.corporate.adroot.infra.ftgroup ([fe80::b91c:ea2c:ac8a:7462%19]) with mapi id 14.03.0389.001; Fri, 11 May 2018 08:09:16 +0200 From: To: kaname nishizuka CC: "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT53F65sqjFXD5eEKW2iVIpIKRtqQqCsuA Date: Fri, 11 May 2018 06:09:15 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> In-Reply-To: <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 May 2018 06:09:20 -0000 SGkgS2FuYW1lLA0KDQpJZiB0aGUgc2VydmVyIGRlY2lkZXMgbm90IHRvIG1haW50YWluIHRoZSBj b25mbGljdGluZyByZXF1ZXN0LCB0aGVuIHRoZSBwcmVzZW50IHJlcXVlc3Qgd2lsbCBiZSBwcm9j ZXNzZWQgYXMgbm9ybWFsOiB0aGF0IGlzIDIuMDEgd2lsbCBiZSByZXR1cm5lZCB0byBhY2sgc3Vj Y2Vzc2Z1bCBoYW5kbGluZy4gQSBub3RpZmljYXRpb24gd2lsbCBiZSBzZW50IHRvIHRoZSBjbGll bnQgb3duZXIgb2YgdGhlIGNvbmZsaWN0aW5nIHJlcXVlc3QgdG8gbm90aWZ5IHdpdGhkcmF3YWwg KHNlY3Rpb24gNC40LjIpLiANCg0KVGhlIHRleHQgZm9jdXNlcyBvbiB0aGUgY2FzZSAiLCBhbmQg dGhlIERPVFMgc2VydmVyIGRlY2lkZXMgdG8gbWFpbnRhaW4gdGhlIGNvbmZsaWN0aW5nIG1pdGln YXRpb24gcmVxdWVzdCIgYmVjYXVzZSB0aGlzIGlzIHRoZSBvbmUgd2hpY2ggcmVxdWlyZXMgYWRk aXRpb25hbCBzcGVjaWZpY2F0aW9uIHZzLiBub3JtYWwgcmVxdWVzdCB0aGF0IGlzIGFjY2VwdGVk IGJ5IGEgc2VydmVyLg0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5l LS0tLS0NCj4gRGXCoDoga2FuYW1lIG5pc2hpenVrYSBbbWFpbHRvOmthbmFtZUBudHR2Ni5qcF0N Cj4gRW52b3nDqcKgOiBtZXJjcmVkaSA5IG1haSAyMDE4IDEwOjQxDQo+IMOAwqA6IEJPVUNBREFJ UiBNb2hhbWVkIElNVC9PTE4NCj4gQ2PCoDogZG90c0BpZXRmLm9yZw0KPiBPYmpldMKgOiBSZTog W0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQN Cj4gDQo+IEhpIE1lZCwNCj4gDQo+IEknbSBPSyB3aXRoIHRoaXMgY2hhbmdlLg0KPiBIb3dldmVy LCB0byBiZSBwcmVjaXNlLCBJJ2QgbGlrZSB0byBzdWdnZXN0IHRvIHN0YXRlIGFib3V0IHRoZSBj YXNlIHRoZSBET1RTDQo+IHNlcnZlciBkZWNpZGVzIE5PVCB0byBtYWludGFpbiBpdC4NCj4gDQo+ IE5FVy0yOg0KPiAgwqDCoCBJZiB0aGUgcmVxdWVzdCBpcyBjb25mbGljdGluZyB3aXRoIGFuIGV4 aXN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdA0KPiAgwqDCoCBmcm9tIGEgZGlmZmVyZW50IERPVFMg Y2xpZW50LCBhbmQgdGhlIERPVFMgc2VydmVyIGRlY2lkZXMgdG8gbWFpbnRhaW4NCj4gIMKgwqAg dGhlIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdCwgdGhlIERPVFMgc2VydmVyIHJldHVy bnMgMi4wMQ0KPiAgwqDCoCAoQ3JlYXRlZCkgdG8gdGhlIHJlcXVlc3RpbmcgRE9UUyBjbGllbnQu DQo+ICDCoMKgIE90aGVyd2lzZSwgdGhlIERPVFMgc2VydmVyIHJldHVybnMgNC4wOSAoQ29uZmxp Y3QpIFtSRkM4MTMyXS4NCj4gIMKgwqAgVGhlIHJlc3BvbnNlIGluY2x1ZGVzIGVub3VnaCBpbmZv cm1hdGlvbiBmb3IgYSBET1RTIGNsaWVudCB0bw0KPiAgwqDCoCByZWNvZ25pemUgdGhlIHNvdXJj ZSBvZiB0aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiANCj4gdGhhbmtzLA0KPiBL YW5hbWUNCj4gDQo+IE9uIDIwMTgvMDUvMDkgMTQ6NTEsIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5n ZS5jb20gd3JvdGU6DQo+ID4gSGkgS2FuYW1lLA0KPiA+DQo+ID4gQWZ0ZXIgdGhpbmtpbmcgYWJv dXQgdGhpcywgSSBkbyB0aGluayB0aGF0IHlvdSBoYXZlIGEgdmFsaWQgcG9pbnQuIEkNCj4gc3Vn Z2VzdCB0byBtYWtlIHRvIG1ha2UgdGhpcyBjaGFuZ2UgKG1hcmtlZCB3aXRoIF5eXl4pDQo+ID4N Cj4gPiBPTEQ6DQo+ID4gICAgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4g ZXhpc3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0DQo+ID4gICAgIGZyb20gYSBkaWZmZXJlbnQgRE9U UyBjbGllbnQsIGFuZCB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRlcyB0byBtYWludGFpbg0KPiA+ICAg ICB0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUyBzZXJ2ZXIgcmV0 dXJucyA0LjA5DQo+ID4gICAgIChDb25mbGljdCkgW1JGQzgxMzJdIHRvIHRoZSByZXF1ZXN0aW5n IERPVFMgY2xpZW50LiAgVGhlIHJlc3BvbnNlDQo+ID4gICAgIGluY2x1ZGVzIGVub3VnaCBpbmZv cm1hdGlvbiBmb3IgYSBET1RTIGNsaWVudCB0byByZWNvZ25pemUgdGhlIHNvdXJjZQ0KPiA+ICAg ICBvZiB0aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+DQo+ID4gTkVXOg0KPiA+ ICAgICBJZiB0aGUgcmVxdWVzdCBpcyBjb25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nIG1pdGln YXRpb24gcmVxdWVzdA0KPiA+ICAgICBmcm9tIGEgZGlmZmVyZW50IERPVFMgY2xpZW50LCBhbmQg dGhlIERPVFMgc2VydmVyIGRlY2lkZXMgdG8gbWFpbnRhaW4NCj4gPiAgICAgdGhlIGNvbmZsaWN0 aW5nIG1pdGlnYXRpb24gcmVxdWVzdCwgdGhlIERPVFMgc2VydmVyIHJldHVybnMgMi4wMQ0KPiA+ ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBeXl5eDQo+ID4gICAgIChDcmVhdGVkKSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNs aWVudC4gIFRoZSByZXNwb25zZV4NCj4gPiAgICAgXl5eXl5eXl4NCj4gPiAgICAgaW5jbHVkZXMg ZW5vdWdoIGluZm9ybWF0aW9uIGZvciBhIERPVFMgY2xpZW50IHRvIHJlY29nbml6ZSB0aGUgc291 cmNlDQo+ID4gICAgIG9mIHRoZSBjb25mbGljdCBhcyBkZXNjcmliZWQgYmVsb3c6DQo+ID4NCj4g PiBDaGVlcnMsDQo+ID4gTWVkDQo+ID4NCj4gPj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0t DQo+ID4+IERlwqA6IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIERlIGxhIHBh cnQgZGUNCj4gPj4gbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbQ0KPiA+PiBFbnZvecOpwqA6 IGx1bmRpIDcgbWFpIDIwMTggMDg6MzgNCj4gPj4gw4DCoDoga2FuYW1lIG5pc2hpenVrYTsgZG90 c0BpZXRmLm9yZw0KPiA+PiBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWll dGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPj4NCj4gPj4gUmUtLA0KPiA+Pg0KPiA+ PiBBZ3JlZSB0aGF0IHRoZSBjb2RlcyBhcmUgbm90IHRoZSBzYW1lLCBidXQgYWx0ZXJuYXRpdmVz IG9uZXMgYXMgc3VtbWFyaXplZA0KPiA+PiBoZXJlOg0KPiBodHRwczovL21haWxhcmNoaXZlLmll dGYub3JnL2FyY2gvbXNnL2RvdHMvaEEzTUxLbGtYRmltcEFuNUtTWVRheWFWa2pBLg0KPiA+Pg0K PiA+PiBDaGVlcnMsDQo+ID4+IE1lZA0KPiA+Pg0KPiA+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2lu ZS0tLS0tDQo+ID4+PiBEZcKgOiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50dHY2 LmpwXQ0KPiA+Pj4gRW52b3nDqcKgOiBsdW5kaSA3IG1haSAyMDE4IDA4OjIwDQo+ID4+PiDDgMKg OiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOyBkb3RzQGlldGYub3JnDQo+ID4+PiBPYmpldMKg OiBSZTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0x OS50eHQNCj4gPj4+DQo+ID4+PiBIaSBNZWQsDQo+ID4+Pg0KPiA+Pj4gSSd2ZSByZWFkIHRoZSB0 aHJlYWQuDQo+ID4+PiBhbmQgdGhlIGNvZGUgJzgnIG9mIHRoZSB0aHJlYWQgaXMgZGlmZmVyZW50 IGZyb20gdGhlIGNvZGUgJzgnIG9mIHRoZQ0KPiA+PiBjdXJyZW50DQo+ID4+PiBkcmFmdC4NCj4g Pj4+DQo+ID4+PiB0aGV5J2QgYmVlbiBkaXNjdXNzaW5nIHRoZSA3LDggYW5kIDkgYmFzZWQgb24g dGhpcyBkZWZpbml0aW9uLCByaWdodD8NCj4gPj4+IGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5v cmcvYXJjaC9tc2cvZG90cy83emxqek44bnljWlg3RTdnaGdrMXV4MzJNa00NCj4gPj4+ID09DQo+ ID4+PiA3IHwgRE9UUyBTZXJ2ZXIgaGFzIGRldGVjdGVkIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24g cmVxdWVzdHMgZnJvbQ0KPiBkaWZmZXJlbnQNCj4gPj4+IERPVFMgY2xpZW50cy7CoCBUaGlzIG1p dGlnYXRpb24gcmVxdWVzdCBpcyBjdXJyZW50bHkgaW5hY3RpdmUgdW50aWwgdGhlDQo+ID4+PiBj b25mbGljdHMgYXJlIHJlc29sdmVkLiBBbm90aGVyIG1pdGlnYXRpb24gcmVxdWVzdCBpcyBhY3Rp dmUuDQo+ID4+Pg0KPiA+Pj4gOCB8IERPVFMgU2VydmVyIGhhcyBkZXRlY3RlZCBjb25mbGljdGlu ZyBtaXRpZ2F0aW9uIHJlcXVlc3RzIGZyb20NCj4gZGlmZmVyZW50DQo+ID4+PiBET1RTIGNsaWVu dHMuwqAgVGhpcyBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgY3VycmVudGx5IGFjdGl2ZS4NCj4gPj4+ DQo+ID4+PiA5IHwgRE9UUyBTZXJ2ZXIgaGFzIGRldGVjdGVkIGNvbmZsaWN0aW5nIG1pdGlnYXRp b24gcmVxdWVzdHMgZnJvbQ0KPiBkaWZmZXJlbnQNCj4gPj4+IERPVFMgY2xpZW50cy7CoCBBbGwg Y29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0cyBhcmUgaW5hY3RpdmUuDQo+ID4+PiA9PQ0K PiA+Pj4NCj4gPj4+IEthbmFtZQ0KPiA+Pj4NCj4gPj4+DQo+ID4+PiBPbiAyMDE4LzA1LzA3IDE1 OjEyLCBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIHdyb3RlOg0KPiA+Pj4+IEhpIEthbmFt ZSwNCj4gPj4+Pg0KPiA+Pj4+IFBsZWFzZSBjaGVjaw0KPiA+Pj4gaHR0cHM6Ly9tYWlsYXJjaGl2 ZS5pZXRmLm9yZy9hcmNoL21zZy9kb3RzL3pfY1pSOV91MjczSHpDOW8wSXk5RmVRWjBKbw0KPiA+ PiBhYm91dA0KPiA+Pj4gdGhlIHJhdGlvbmFsZSBmb3IgYWxsb3dpbmcgdG8gcmV0dXJuIGNvZGUg JzgnIGV2ZW4gaW4gYSBub3RpZmljYXRpb24NCj4gPj4gbWVzc2FnZS4NCj4gPj4+IFRoZSBpbnRl bnQgd2FzIHRvIGhhdmUgY29kZSAnOCcgYXMgYSB0cmFuc2l0aW9uIHN0YXRlLg0KPiA+Pj4+IENo ZWVycywNCj4gPj4+PiBNZWQNCj4gPj4+Pg0KPiA+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5l LS0tLS0NCj4gPj4+Pj4gRGXCoDoga2FuYW1lIG5pc2hpenVrYSBbbWFpbHRvOmthbmFtZUBudHR2 Ni5qcF0NCj4gPj4+Pj4gRW52b3nDqcKgOiBtZXJjcmVkaSAyIG1haSAyMDE4IDAyOjQ5DQo+ID4+ Pj4+IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE47IGRvdHNAaWV0Zi5vcmcNCj4gPj4+ Pj4gT2JqZXTCoDogUmU6IFtEb3RzXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFs LWNoYW5uZWwtMTkudHh0DQo+ID4+Pj4+DQo+ID4+Pj4+IEhpLA0KPiA+Pj4+Pg0KPiA+Pj4+PiBJ J2QgbGlrZSB0byBhc2sgb25lIGNsYXJpZmljYXRpb24gcXVlc3Rpb24gYWJvdXQgc3RhdHVzIGNv ZGUgODoNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgwqDCoCBvwqAgQSBub3RpZmljYXRpb24gbWVzc2Fn ZSB3aXRoICdzdGF0dXMnIGNvZGUgc2V0IHRvICc4IChBdHRhY2sNCj4gPj4+Pj4gICAgwqDCoMKg wqDCoCBtaXRpZ2F0aW9uIGlzIHJlamVjdGVkKScgYW5kICdjb25mbGljdC1zdGF0dXMnIHNldCB0 byAnMScgaXMNCj4gPj4gc2VudA0KPiA+Pj4+PiAgICDCoMKgwqDCoMKgIHRvIGEgRE9UUyBjbGll bnQgdG8gaW5kaWNhdGUgdGhhdCB0aGlzIG1pdGlnYXRpb24gcmVxdWVzdCBpcw0KPiA+Pj4+PiAg ICDCoMKgwqDCoMKgIHJlamVjdGVkIGJlY2F1c2UgYSBjb25mbGljdCBpcyBkZXRlY3RlZC4NCj4g Pj4+Pj4NCj4gPj4+Pj4gSWYgYSBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgcmVqZWN0ZWQgZHVlIHRv IGEgY29uZmxpY3QsIGl0IGlzIHJlamVjdGVkDQo+IGF0DQo+ID4+Pj4+IFBVVCg0LjA5KENvbmZs aWN0KSksIHNvIG5vIHJlc291cmNlIHdpbGwgYmUgY3JlYXRlZC4NCj4gPj4+Pj4gU28gaXQgbG9v a3MgdGhlcmUgaXMgbm8gY2hhbmNlIHRvIHJldHVybiAnOCAoQXR0YWNrIG1pdGlnYXRpb24gaXMN Cj4gPj4+IHJlamVjdGVkKScuDQo+ID4+Pj4+IHRoYW5rcywNCj4gPj4+Pj4gS2FuYW1lDQo+ID4+ Pj4+DQo+ID4+Pj4+IE9uIDIwMTgvMDQvMTAgMjI6NDcsIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5n ZS5jb20gd3JvdGU6DQo+ID4+Pj4+PiBSZS0sDQo+ID4+Pj4+Pg0KPiA+Pj4+Pj4gVGhpcyB2ZXJz aW9uIGFkZHJlc3NlcyB0aGUgY29tbWVudHMgcmFpc2VkIGR1cmluZyB0aGUgV0dMQywgaW4NCj4g Pj4+IHBhcnRpY3VsYXI6DQo+ID4+Pj4+PiAtIChDbGFyaWZpY2F0aW9uKSBJbmRpY2F0ZSB0aGF0 IG9ubHkgb25lIGhvcC1saW1pdCBpcyBpbmNsdWRlZA0KPiA+Pj4+Pj4gLSBTcGVjaWZ5IHRoZSBs b29wIGRpYWdub3N0aWMgcGF5bG9hZA0KPiA+Pj4+Pj4gLSAoQ2xhcmlmaWNhdGlvbikgSW5kaWNh dGUgZXhwbGljaXRseSB0aGF0IEdFVCBtZXNzYWdlcyB3aXRoICdzaWQnIGFyZQ0KPiA+Pj4+PiBh bGxvd2VkDQo+ID4+Pj4+PiAtIFVwZGF0ZSB0aGUgcmVkaXJlY3QgYmVoYXZpb3IuDQo+ID4+Pj4+ Pg0KPiA+Pj4+Pj4gQ2hlZXJzLA0KPiA+Pj4+Pj4gTWVkDQo+ID4+Pj4+Pg0KPiA+Pj4+Pj4+IC0t LS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+Pj4+Pj4+IERlwqA6IERvdHMgW21haWx0bzpk b3RzLWJvdW5jZXNAaWV0Zi5vcmddIERlIGxhIHBhcnQgZGUgaW50ZXJuZXQtDQo+ID4+Pj4+Pj4g ZHJhZnRzQGlldGYub3JnDQo+ID4+Pj4+Pj4gRW52b3nDqcKgOiBtYXJkaSAxMCBhdnJpbCAyMDE4 IDE1OjQwDQo+ID4+Pj4+Pj4gw4DCoDogaS1kLWFubm91bmNlQGlldGYub3JnDQo+ID4+Pj4+Pj4g Q2PCoDogZG90c0BpZXRmLm9yZw0KPiA+Pj4+Pj4+IE9iamV0wqA6IFtEb3RzXSBJLUQgQWN0aW9u OiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4+Pj4+Pj4NCj4gPj4+ Pj4+Pg0KPiA+Pj4+Pj4+IEEgTmV3IEludGVybmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9tIHRo ZSBvbi1saW5lIEludGVybmV0LURyYWZ0cw0KPiA+Pj4+Pj4+IGRpcmVjdG9yaWVzLg0KPiA+Pj4+ Pj4+IFRoaXMgZHJhZnQgaXMgYSB3b3JrIGl0ZW0gb2YgdGhlIEREb1MgT3BlbiBUaHJlYXQgU2ln bmFsaW5nIFdHIG9mIHRoZQ0KPiA+Pj4+PiBJRVRGLg0KPiA+Pj4+Pj4+ICAgICAgICAgICAgVGl0 bGUgICAgICAgICAgIDogRGlzdHJpYnV0ZWQgRGVuaWFsLW9mLVNlcnZpY2UgT3Blbg0KPiBUaHJl YXQNCj4gPj4+Pj4gU2lnbmFsaW5nDQo+ID4+Pj4+Pj4gKERPVFMpIFNpZ25hbCBDaGFubmVsIFNw ZWNpZmljYXRpb24NCj4gPj4+Pj4+PiAgICAgICAgICAgIEF1dGhvcnMgICAgICAgICA6IFRpcnVt YWxlc3dhciBSZWRkeQ0KPiA+Pj4+Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTW9o YW1lZCBCb3VjYWRhaXINCj4gPj4+Pj4+PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFBy YXNoYW50aCBQYXRpbA0KPiA+Pj4+Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQW5k cmV3IE1vcnRlbnNlbg0KPiA+Pj4+Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTmlr IFRlYWd1ZQ0KPiA+Pj4+Pj4+IAlGaWxlbmFtZSAgICAgICAgOiBkcmFmdC1pZXRmLWRvdHMtc2ln bmFsLWNoYW5uZWwtMTkudHh0DQo+ID4+Pj4+Pj4gCVBhZ2VzICAgICAgICAgICA6IDg2DQo+ID4+ Pj4+Pj4gCURhdGUgICAgICAgICAgICA6IDIwMTgtMDQtMTANCj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+ IEFic3RyYWN0Og0KPiA+Pj4+Pj4+ICAgICAgIFRoaXMgZG9jdW1lbnQgc3BlY2lmaWVzIHRoZSBE T1RTIHNpZ25hbCBjaGFubmVsLCBhIHByb3RvY29sIGZvcg0KPiA+Pj4+Pj4+ICAgICAgIHNpZ25h bGluZyB0aGUgbmVlZCBmb3IgcHJvdGVjdGlvbiBhZ2FpbnN0IERpc3RyaWJ1dGVkIERlbmlhbC0N Cj4gb2YtDQo+ID4+Pj4+Pj4gICAgICAgU2VydmljZSAoRERvUykgYXR0YWNrcyB0byBhIHNlcnZl ciBjYXBhYmxlIG9mIGVuYWJsaW5nIG5ldHdvcmsNCj4gPj4+Pj4+PiAgICAgICB0cmFmZmljIG1p dGlnYXRpb24gb24gYmVoYWxmIG9mIHRoZSByZXF1ZXN0aW5nIGNsaWVudC4NCj4gPj4+Pj4+Pg0K PiA+Pj4+Pj4+ICAgICAgIEEgY29tcGFuaW9uIGRvY3VtZW50IGRlZmluZXMgdGhlIERPVFMgZGF0 YSBjaGFubmVsLCBhIHNlcGFyYXRlDQo+ID4+Pj4+Pj4gICAgICAgcmVsaWFibGUgY29tbXVuaWNh dGlvbiBsYXllciBmb3IgRE9UUyBtYW5hZ2VtZW50IGFuZA0KPiA+PiBjb25maWd1cmF0aW9uDQo+ ID4+Pj4+Pj4gICAgICAgcHVycG9zZXMuDQo+ID4+Pj4+Pj4NCj4gPj4+Pj4+PiBFZGl0b3JpYWwg Tm90ZSAoVG8gYmUgcmVtb3ZlZCBieSBSRkMgRWRpdG9yKQ0KPiA+Pj4+Pj4+DQo+ID4+Pj4+Pj4g ICAgICAgUGxlYXNlIHVwZGF0ZSB0aGVzZSBzdGF0ZW1lbnRzIHdpdGggdGhlIFJGQyBudW1iZXIg dG8gYmUNCj4gYXNzaWduZWQNCj4gPj4+IHRvDQo+ID4+Pj4+Pj4gICAgICAgdGhpcyBkb2N1bWVu dDoNCj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+ICAgICAgIG8gICJUaGlzIHZlcnNpb24gb2YgdGhpcyBZ QU5HIG1vZHVsZSBpcyBwYXJ0IG9mIFJGQyBYWFhYOyINCj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+ICAg ICAgIG8gICJSRkMgWFhYWDogRGlzdHJpYnV0ZWQgRGVuaWFsLW9mLVNlcnZpY2UgT3BlbiBUaHJl YXQNCj4gU2lnbmFsaW5nDQo+ID4+Pj4+Pj4gICAgICAgICAgKERPVFMpIFNpZ25hbCBDaGFubmVs IFNwZWNpZmljYXRpb24iOw0KPiA+Pj4+Pj4+DQo+ID4+Pj4+Pj4gICAgICAgbyAgInwgW1JGQ1hY WFhdIHwiDQo+ID4+Pj4+Pj4NCj4gPj4+Pj4+PiAgICAgICBvICByZWZlcmVuY2U6IFJGQyBYWFhY DQo+ID4+Pj4+Pj4NCj4gPj4+Pj4+PiAgICAgICBQbGVhc2UgdXBkYXRlIFRCRCBzdGF0ZW1lbnRz IHdpdGggdGhlIHBvcnQgbnVtYmVyIHRvIGJlDQo+IGFzc2lnbmVkDQo+ID4+IHRvDQo+ID4+Pj4+ Pj4gICAgICAgRE9UUyBTaWduYWwgQ2hhbm5lbCBQcm90b2NvbC4NCj4gPj4+Pj4+Pg0KPiA+Pj4+ Pj4+ICAgICAgIEFsc28sIHBsZWFzZSB1cGRhdGUgdGhlICJyZXZpc2lvbiIgZGF0ZSBvZiB0aGUg WUFORyBtb2R1bGUuDQo+ID4+Pj4+Pj4NCj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+IFRoZSBJRVRGIGRh dGF0cmFja2VyIHN0YXR1cyBwYWdlIGZvciB0aGlzIGRyYWZ0IGlzOg0KPiA+Pj4+Pj4+IGh0dHBz Oi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5l bC8NCj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+IFRoZXJlIGFyZSBhbHNvIGh0bWxpemVkIHZlcnNpb25z IGF2YWlsYWJsZSBhdDoNCj4gPj4+Pj4+PiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5DQo+ID4+Pj4+Pj4gaHR0cHM6Ly9kYXRhdHJh Y2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtDQo+ ID4+IDE5DQo+ID4+Pj4+Pj4gQSBkaWZmIGZyb20gdGhlIHByZXZpb3VzIHZlcnNpb24gaXMgYXZh aWxhYmxlIGF0Og0KPiA+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1k cmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkNCj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+DQo+ ID4+Pj4+Pj4gUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVz IGZyb20gdGhlIHRpbWUgb2YNCj4gPj4+Pj4gc3VibWlzc2lvbg0KPiA+Pj4+Pj4+IHVudGlsIHRo ZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQgdG9vbHMuaWV0Zi5v cmcuDQo+ID4+Pj4+Pj4NCj4gPj4+Pj4+PiBJbnRlcm5ldC1EcmFmdHMgYXJlIGFsc28gYXZhaWxh YmxlIGJ5IGFub255bW91cyBGVFAgYXQ6DQo+ID4+Pj4+Pj4gZnRwOi8vZnRwLmlldGYub3JnL2lu dGVybmV0LWRyYWZ0cy8NCj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+Pj4+Pj4gRG90cyBtYWlsaW5nIGxpc3QN Cj4gPj4+Pj4+PiBEb3RzQGlldGYub3JnDQo+ID4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4+Pj4+PiBfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KPiA+Pj4+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPj4+ Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vZG90cw0KPiA+Pj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fDQo+ID4+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPj4+PiBEb3RzQGlldGYu b3JnDQo+ID4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ ID4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+ IERvdHMgbWFpbGluZyBsaXN0DQo+ID4+IERvdHNAaWV0Zi5vcmcNCj4gPj4gaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4gX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+IERv dHNAaWV0Zi5vcmcNCj4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Rv dHMNCg0K From nobody Fri May 11 01:59:06 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 71A6812785F for ; Fri, 11 May 2018 01:59:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5dreCDmr63l3 for ; Fri, 11 May 2018 01:59:00 -0700 (PDT) Received: from guri.nttv6.jp (guri.nttv6.jp [IPv6:2402:c800:ff06:136::140]) by ietfa.amsl.com (Postfix) with ESMTP id 594FF124BFA for ; Fri, 11 May 2018 01:59:00 -0700 (PDT) Received: from z.nttv6.jp (z.nttv6.jp [192.168.8.15]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id 31CC925F68C; Fri, 11 May 2018 17:58:59 +0900 (JST) Received: from MacBook-Pro-17.lv4.nttv6.jp (fujiko.nttv6.jp [115.69.228.141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id 29E9775904A; Fri, 11 May 2018 17:58:59 +0900 (JST) To: mohamed.boucadair@orange.com Cc: "dots@ietf.org" References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: kaname nishizuka Message-ID: Date: Fri, 11 May 2018 17:58:58 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 May 2018 08:59:03 -0000 Hi Med, > If the server decides not to maintain the conflicting request, then the present request will be processed as normal: that is 2.01 will be returned to ack successful handling. A notification will be sent to the client owner of the conflicting request to notify withdrawal (section 4.4.2). In that case, the status code is '7' (Attack mitigation is withdrawn) My original question is when the status code '8' (Attack mitigation is rejected) will be used. In the text in the draft, "the conflicting mitigation request" is ambiguous whether it is already existing request or the request that just has arrived. Say, the existing request is (A), then a mitigation request (B) arrived which are conflicting with A. If B is selected. (A) will get notification with the withdrawal code '7' (B) will get 2.01 else If B is not selected. (B) will get 4.09 Tiru said: > In this case, the resource should be created and the server should return success (2.01 or 2.04) response code along with the conflict-information. In this situation, (B) will get 2.01 or 2.04 along with the rejected code '8' (Which mitigation request will be selected by the DOTS server is implementation- and deployment-specific.) Thanks, Kaname On 2018/05/11 15:09, mohamed.boucadair@orange.com wrote: > Hi Kaname, > > If the server decides not to maintain the conflicting request, then the present request will be processed as normal: that is 2.01 will be returned to ack successful handling. A notification will be sent to the client owner of the conflicting request to notify withdrawal (section 4.4.2). > > The text focuses on the case ", and the DOTS server decides to maintain the conflicting mitigation request" because this is the one which requires additional specification vs. normal request that is accepted by a server. > > Cheers, > Med > >> -----Message d'origine----- >> De : kaname nishizuka [mailto:kaname@nttv6.jp] >> Envoyé : mercredi 9 mai 2018 10:41 >> À : BOUCADAIR Mohamed IMT/OLN >> Cc : dots@ietf.org >> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >> >> Hi Med, >> >> I'm OK with this change. >> However, to be precise, I'd like to suggest to state about the case the DOTS >> server decides NOT to maintain it. >> >> NEW-2: >>    If the request is conflicting with an existing mitigation request >>    from a different DOTS client, and the DOTS server decides to maintain >>    the conflicting mitigation request, the DOTS server returns 2.01 >>    (Created) to the requesting DOTS client. >>    Otherwise, the DOTS server returns 4.09 (Conflict) [RFC8132]. >>    The response includes enough information for a DOTS client to >>    recognize the source of the conflict as described below: >> >> thanks, >> Kaname >> >> On 2018/05/09 14:51, mohamed.boucadair@orange.com wrote: >>> Hi Kaname, >>> >>> After thinking about this, I do think that you have a valid point. I >> suggest to make to make this change (marked with ^^^^) >>> OLD: >>> If the request is conflicting with an existing mitigation request >>> from a different DOTS client, and the DOTS server decides to maintain >>> the conflicting mitigation request, the DOTS server returns 4.09 >>> (Conflict) [RFC8132] to the requesting DOTS client. The response >>> includes enough information for a DOTS client to recognize the source >>> of the conflict as described below: >>> >>> NEW: >>> If the request is conflicting with an existing mitigation request >>> from a different DOTS client, and the DOTS server decides to maintain >>> the conflicting mitigation request, the DOTS server returns 2.01 >>> ^^^^ >>> (Created) to the requesting DOTS client. The response^ >>> ^^^^^^^^ >>> includes enough information for a DOTS client to recognize the source >>> of the conflict as described below: >>> >>> Cheers, >>> Med >>> >>>> -----Message d'origine----- >>>> De : Dots [mailto:dots-bounces@ietf.org] De la part de >>>> mohamed.boucadair@orange.com >>>> Envoyé : lundi 7 mai 2018 08:38 >>>> À : kaname nishizuka; dots@ietf.org >>>> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>> >>>> Re-, >>>> >>>> Agree that the codes are not the same, but alternatives ones as summarized >>>> here: >> https://mailarchive.ietf.org/arch/msg/dots/hA3MLKlkXFimpAn5KSYTayaVkjA. >>>> Cheers, >>>> Med >>>> >>>>> -----Message d'origine----- >>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] >>>>> Envoyé : lundi 7 mai 2018 08:20 >>>>> À : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org >>>>> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>> >>>>> Hi Med, >>>>> >>>>> I've read the thread. >>>>> and the code '8' of the thread is different from the code '8' of the >>>> current >>>>> draft. >>>>> >>>>> they'd been discussing the 7,8 and 9 based on this definition, right? >>>>> https://mailarchive.ietf.org/arch/msg/dots/7zljzN8nycZX7E7ghgk1ux32MkM >>>>> == >>>>> 7 | DOTS Server has detected conflicting mitigation requests from >> different >>>>> DOTS clients.  This mitigation request is currently inactive until the >>>>> conflicts are resolved. Another mitigation request is active. >>>>> >>>>> 8 | DOTS Server has detected conflicting mitigation requests from >> different >>>>> DOTS clients.  This mitigation request is currently active. >>>>> >>>>> 9 | DOTS Server has detected conflicting mitigation requests from >> different >>>>> DOTS clients.  All conflicting mitigation requests are inactive. >>>>> == >>>>> >>>>> Kaname >>>>> >>>>> >>>>> On 2018/05/07 15:12, mohamed.boucadair@orange.com wrote: >>>>>> Hi Kaname, >>>>>> >>>>>> Please check >>>>> https://mailarchive.ietf.org/arch/msg/dots/z_cZR9_u273HzC9o0Iy9FeQZ0Jo >>>> about >>>>> the rationale for allowing to return code '8' even in a notification >>>> message. >>>>> The intent was to have code '8' as a transition state. >>>>>> Cheers, >>>>>> Med >>>>>> >>>>>>> -----Message d'origine----- >>>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] >>>>>>> Envoyé : mercredi 2 mai 2018 02:49 >>>>>>> À : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org >>>>>>> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>>> >>>>>>> Hi, >>>>>>> >>>>>>> I'd like to ask one clarification question about status code 8: >>>>>>> >>>>>>>    o  A notification message with 'status' code set to '8 (Attack >>>>>>>       mitigation is rejected)' and 'conflict-status' set to '1' is >>>> sent >>>>>>>       to a DOTS client to indicate that this mitigation request is >>>>>>>       rejected because a conflict is detected. >>>>>>> >>>>>>> If a mitigation request is rejected due to a conflict, it is rejected >> at >>>>>>> PUT(4.09(Conflict)), so no resource will be created. >>>>>>> So it looks there is no chance to return '8 (Attack mitigation is >>>>> rejected)'. >>>>>>> thanks, >>>>>>> Kaname >>>>>>> >>>>>>> On 2018/04/10 22:47, mohamed.boucadair@orange.com wrote: >>>>>>>> Re-, >>>>>>>> >>>>>>>> This version addresses the comments raised during the WGLC, in >>>>> particular: >>>>>>>> - (Clarification) Indicate that only one hop-limit is included >>>>>>>> - Specify the loop diagnostic payload >>>>>>>> - (Clarification) Indicate explicitly that GET messages with 'sid' are >>>>>>> allowed >>>>>>>> - Update the redirect behavior. >>>>>>>> >>>>>>>> Cheers, >>>>>>>> Med >>>>>>>> >>>>>>>>> -----Message d'origine----- >>>>>>>>> De : Dots [mailto:dots-bounces@ietf.org] De la part de internet- >>>>>>>>> drafts@ietf.org >>>>>>>>> Envoyé : mardi 10 avril 2018 15:40 >>>>>>>>> À : i-d-announce@ietf.org >>>>>>>>> Cc : dots@ietf.org >>>>>>>>> Objet : [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>>>>> >>>>>>>>> >>>>>>>>> A New Internet-Draft is available from the on-line Internet-Drafts >>>>>>>>> directories. >>>>>>>>> This draft is a work item of the DDoS Open Threat Signaling WG of the >>>>>>> IETF. >>>>>>>>> Title : Distributed Denial-of-Service Open >> Threat >>>>>>> Signaling >>>>>>>>> (DOTS) Signal Channel Specification >>>>>>>>> Authors : Tirumaleswar Reddy >>>>>>>>> Mohamed Boucadair >>>>>>>>> Prashanth Patil >>>>>>>>> Andrew Mortensen >>>>>>>>> Nik Teague >>>>>>>>> Filename : draft-ietf-dots-signal-channel-19.txt >>>>>>>>> Pages : 86 >>>>>>>>> Date : 2018-04-10 >>>>>>>>> >>>>>>>>> Abstract: >>>>>>>>> This document specifies the DOTS signal channel, a protocol for >>>>>>>>> signaling the need for protection against Distributed Denial- >> of- >>>>>>>>> Service (DDoS) attacks to a server capable of enabling network >>>>>>>>> traffic mitigation on behalf of the requesting client. >>>>>>>>> >>>>>>>>> A companion document defines the DOTS data channel, a separate >>>>>>>>> reliable communication layer for DOTS management and >>>> configuration >>>>>>>>> purposes. >>>>>>>>> >>>>>>>>> Editorial Note (To be removed by RFC Editor) >>>>>>>>> >>>>>>>>> Please update these statements with the RFC number to be >> assigned >>>>> to >>>>>>>>> this document: >>>>>>>>> >>>>>>>>> o "This version of this YANG module is part of RFC XXXX;" >>>>>>>>> >>>>>>>>> o "RFC XXXX: Distributed Denial-of-Service Open Threat >> Signaling >>>>>>>>> (DOTS) Signal Channel Specification"; >>>>>>>>> >>>>>>>>> o "| [RFCXXXX] |" >>>>>>>>> >>>>>>>>> o reference: RFC XXXX >>>>>>>>> >>>>>>>>> Please update TBD statements with the port number to be >> assigned >>>> to >>>>>>>>> DOTS Signal Channel Protocol. >>>>>>>>> >>>>>>>>> Also, please update the "revision" date of the YANG module. >>>>>>>>> >>>>>>>>> >>>>>>>>> The IETF datatracker status page for this draft is: >>>>>>>>> https://datatracker.ietf.org/doc/draft-ietf-dots-signal-channel/ >>>>>>>>> >>>>>>>>> There are also htmlized versions available at: >>>>>>>>> https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19 >>>>>>>>> https://datatracker.ietf.org/doc/html/draft-ietf-dots-signal-channel- >>>> 19 >>>>>>>>> A diff from the previous version is available at: >>>>>>>>> https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-signal-channel-19 >>>>>>>>> >>>>>>>>> >>>>>>>>> Please note that it may take a couple of minutes from the time of >>>>>>> submission >>>>>>>>> until the htmlized version and diff are available at tools.ietf.org. >>>>>>>>> >>>>>>>>> Internet-Drafts are also available by anonymous FTP at: >>>>>>>>> ftp://ftp.ietf.org/internet-drafts/ >>>>>>>>> >>>>>>>>> _______________________________________________ >>>>>>>>> Dots mailing list >>>>>>>>> Dots@ietf.org >>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>> _______________________________________________ >>>>>>>> Dots mailing list >>>>>>>> Dots@ietf.org >>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>> _______________________________________________ >>>>>> Dots mailing list >>>>>> Dots@ietf.org >>>>>> https://www.ietf.org/mailman/listinfo/dots >>>> _______________________________________________ >>>> Dots mailing list >>>> Dots@ietf.org >>>> https://www.ietf.org/mailman/listinfo/dots >>> _______________________________________________ >>> Dots mailing list >>> Dots@ietf.org >>> https://www.ietf.org/mailman/listinfo/dots > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Fri May 11 02:39:30 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC43B127078 for ; Fri, 11 May 2018 02:39:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KtGjWpvAUhAh for ; Fri, 11 May 2018 02:39:26 -0700 (PDT) Received: from orange.com (mta239.mail.business.static.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 11F151270A7 for ; Fri, 11 May 2018 02:39:26 -0700 (PDT) Received: from opfedar03.francetelecom.fr (unknown [xx.xx.xx.5]) by opfedar27.francetelecom.fr (ESMTP service) with ESMTP id 40j4mr5F7Lz2xwJ; Fri, 11 May 2018 11:39:24 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.2]) by opfedar03.francetelecom.fr (ESMTP service) with ESMTP id 956851803CE; Fri, 11 May 2018 11:39:24 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06%19]) with mapi id 14.03.0389.001; Fri, 11 May 2018 11:39:24 +0200 From: To: kaname nishizuka CC: "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT6QZM5sqjFXD5eEKW2iVIpIKRtqQqPt1w Date: Fri, 11 May 2018 09:39:24 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 May 2018 09:39:29 -0000 UmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4gDQoNCkNoZWVycywNCk1lZA0KDQo+IC0tLS0tTWVz c2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiBEZcKgOiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2Fu YW1lQG50dHY2LmpwXQ0KPiBFbnZvecOpwqA6IHZlbmRyZWRpIDExIG1haSAyMDE4IDEwOjU5DQo+ IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE4NCj4gQ2PCoDogZG90c0BpZXRmLm9yZw0K PiBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwt Y2hhbm5lbC0xOS50eHQNCj4gDQo+IEhpIE1lZCwNCj4gDQo+ICA+IElmIHRoZSBzZXJ2ZXIgZGVj aWRlcyBub3QgdG8gbWFpbnRhaW4gdGhlIGNvbmZsaWN0aW5nIHJlcXVlc3QsIHRoZW4gdGhlDQo+ IHByZXNlbnQgcmVxdWVzdCB3aWxsIGJlIHByb2Nlc3NlZCBhcyBub3JtYWw6IHRoYXQgaXMgMi4w MSB3aWxsIGJlIHJldHVybmVkIHRvDQo+IGFjayBzdWNjZXNzZnVsIGhhbmRsaW5nLiBBIG5vdGlm aWNhdGlvbiB3aWxsIGJlIHNlbnQgdG8gdGhlIGNsaWVudCBvd25lciBvZg0KPiB0aGUgY29uZmxp Y3RpbmcgcmVxdWVzdCB0byBub3RpZnkgd2l0aGRyYXdhbCAoc2VjdGlvbiA0LjQuMikuDQo+IElu IHRoYXQgY2FzZSwgdGhlIHN0YXR1cyBjb2RlIGlzICc3JyAoQXR0YWNrIG1pdGlnYXRpb24gaXMg d2l0aGRyYXduKQ0KDQpbTWVkXSBZZXMsIHRoYXQgc3RhdHVzIHdpbGwgYmUgc2VudCB0byB0aGUg b3duZXIgb2YgdGhlIChleGlzdGluZykgcmVxdWVzdC4NCg0KPiBNeSBvcmlnaW5hbCBxdWVzdGlv biBpcyB3aGVuIHRoZSBzdGF0dXMgY29kZSAnOCcgKEF0dGFjayBtaXRpZ2F0aW9uIGlzDQo+IHJl amVjdGVkKSB3aWxsIGJlIHVzZWQuDQoNCltNZWRdIEkgZ290IHRoYXQuIA0KDQo+IA0KPiBJbiB0 aGUgdGV4dCBpbiB0aGUgZHJhZnQsICJ0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0 IiBpcyBhbWJpZ3VvdXMNCj4gd2hldGhlciBpdCBpcyBhbHJlYWR5IGV4aXN0aW5nIHJlcXVlc3Qg b3IgdGhlIHJlcXVlc3QgdGhhdCBqdXN0IGhhcyBhcnJpdmVkLg0KDQpbTWVkXSBJdCBpcyByZWxh dGVkIHRvIHRoZSBhbHJlYWR5IGV4aXN0aW5nIHJlcXVlc3QuIA0KDQo+IA0KPiBTYXksIHRoZSBl eGlzdGluZyByZXF1ZXN0IGlzIChBKSwgdGhlbiBhIG1pdGlnYXRpb24gcmVxdWVzdCAoQikgYXJy aXZlZCB3aGljaA0KPiBhcmUgY29uZmxpY3Rpbmcgd2l0aCBBLg0KPiANCj4gSWYgQiBpcyBzZWxl Y3RlZC4NCj4gKEEpIHdpbGwgZ2V0IG5vdGlmaWNhdGlvbiB3aXRoIHRoZSB3aXRoZHJhd2FsIGNv ZGUgJzcnDQo+IChCKSB3aWxsIGdldCAyLjAxDQo+IA0KDQpbTWVkXSBZZXMuIFRoZSBjdXJyZW50 IHRleHQgZG9lcyBjYWxscyBvdXQgeW91ciBzdGVwICgxKSBpbiA0LjQuMi4gWW91ciBzdGVwICgy KSBpcyBub3QgY2FsbGVkIGV4cGxpY2l0IGluIHRoZSB0ZXh0IGJlY2F1c2UgdGhlcmUgaXMgbm8g Y29uZnVzaW9uIGFib3V0IHdoaWNoIGNvZGUgdG8gcmV0dXJuIHdoZW4gYSByZXF1ZXN0IGlzIGFj Y2VwdGVkIHRvIGJlIGhvbm9yZWQuIA0KDQpUaGUgdGV4dCBmb2N1c2VzIG9uIGNhc2VzIHdoaWNo IHJlcXVpcmVzIHNwZWNpZmljIGhhbmRsaW5nOiANCi0gaW5hY3RpdmUgcmVxdWVzdCBiZWNhdXNl IG9mIGEgY29uZmxpY3QNCi0gbXVsdGlwbGUgYWN0aXZlIGNvbmZsaWN0aW5nIHJlcXVlc3RzDQoN Cj4gZWxzZSBJZiBCIGlzIG5vdCBzZWxlY3RlZC4NCj4gKEIpIHdpbGwgZ2V0IDQuMDkNCj4gDQoN CltNZWRdIEluIHRoaXMgY2FzZSwgdGhlIHJlc291cmNlIGlzIG5vdCBjcmVhdGVkIGFuZCBhcyBz dWNoIGNhc2UgcmV0dXJuaW5nIG5vdGlmaWNhdGlvbiBzdGF0dXMgY29kZSBvZiA4IGlzIG5vdCBw b3NzaWJsZSBhcyB5b3UgcmlnaHRmdWwgcG9pbnRlZCBvdXQuIA0KVGhpcyBpcyB3aHkgd2Ugc3Vn Z2VzdGVkIHRvIHJldHVybiAyLjAxIGZvciB0aGlzIGNhc2UgdG9vIHNvIHRoYXQgYW4gdXBkYXRl IG9mIHRoZSBzdGF0dXMgY2FuIGJlIHNlbnQgdG8gdGhlIGNsaWVudCB1cG9uIGNoYW5nZS4gDQoN Cj4gVGlydSBzYWlkOg0KPiAgPiBJbiB0aGlzIGNhc2UsIHRoZSByZXNvdXJjZSBzaG91bGQgYmUg Y3JlYXRlZCBhbmQgdGhlIHNlcnZlciBzaG91bGQgcmV0dXJuDQo+IHN1Y2Nlc3MgKDIuMDEgb3Ig Mi4wNCkgcmVzcG9uc2UgY29kZSBhbG9uZyB3aXRoIHRoZSBjb25mbGljdC1pbmZvcm1hdGlvbi4N Cj4gSW4gdGhpcyBzaXR1YXRpb24sIChCKSB3aWxsIGdldCAyLjAxIG9yIDIuMDQgYWxvbmcgd2l0 aCB0aGUgcmVqZWN0ZWQgY29kZSAnOCcNCj4gDQo+IChXaGljaCBtaXRpZ2F0aW9uIHJlcXVlc3Qg d2lsbCBiZSBzZWxlY3RlZCBieSB0aGUgRE9UUyBzZXJ2ZXIgaXMNCj4gaW1wbGVtZW50YXRpb24t IGFuZCBkZXBsb3ltZW50LXNwZWNpZmljLikNCj4gDQo+IFRoYW5rcywNCj4gS2FuYW1lDQo+IA0K PiANCj4gT24gMjAxOC8wNS8xMSAxNTowOSwgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3 cm90ZToNCj4gPiBIaSBLYW5hbWUsDQo+ID4NCj4gPiBJZiB0aGUgc2VydmVyIGRlY2lkZXMgbm90 IHRvIG1haW50YWluIHRoZSBjb25mbGljdGluZyByZXF1ZXN0LCB0aGVuIHRoZQ0KPiBwcmVzZW50 IHJlcXVlc3Qgd2lsbCBiZSBwcm9jZXNzZWQgYXMgbm9ybWFsOiB0aGF0IGlzIDIuMDEgd2lsbCBi ZSByZXR1cm5lZCB0bw0KPiBhY2sgc3VjY2Vzc2Z1bCBoYW5kbGluZy4gQSBub3RpZmljYXRpb24g d2lsbCBiZSBzZW50IHRvIHRoZSBjbGllbnQgb3duZXIgb2YNCj4gdGhlIGNvbmZsaWN0aW5nIHJl cXVlc3QgdG8gbm90aWZ5IHdpdGhkcmF3YWwgKHNlY3Rpb24gNC40LjIpLg0KPiA+DQo+ID4gVGhl IHRleHQgZm9jdXNlcyBvbiB0aGUgY2FzZSAiLCBhbmQgdGhlIERPVFMgc2VydmVyIGRlY2lkZXMg dG8gbWFpbnRhaW4gdGhlDQo+IGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdCIgYmVjYXVz ZSB0aGlzIGlzIHRoZSBvbmUgd2hpY2ggcmVxdWlyZXMNCj4gYWRkaXRpb25hbCBzcGVjaWZpY2F0 aW9uIHZzLiBub3JtYWwgcmVxdWVzdCB0aGF0IGlzIGFjY2VwdGVkIGJ5IGEgc2VydmVyLg0KPiA+ DQo+ID4gQ2hlZXJzLA0KPiA+IE1lZA0KPiA+DQo+ID4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUt LS0tLQ0KPiA+PiBEZcKgOiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50dHY2Lmpw XQ0KPiA+PiBFbnZvecOpwqA6IG1lcmNyZWRpIDkgbWFpIDIwMTggMTA6NDENCj4gPj4gw4DCoDog Qk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTg0KPiA+PiBDY8KgOiBkb3RzQGlldGYub3JnDQo+ID4+ IE9iamV0wqA6IFJlOiBbRG90c10gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1j aGFubmVsLTE5LnR4dA0KPiA+Pg0KPiA+PiBIaSBNZWQsDQo+ID4+DQo+ID4+IEknbSBPSyB3aXRo IHRoaXMgY2hhbmdlLg0KPiA+PiBIb3dldmVyLCB0byBiZSBwcmVjaXNlLCBJJ2QgbGlrZSB0byBz dWdnZXN0IHRvIHN0YXRlIGFib3V0IHRoZSBjYXNlIHRoZQ0KPiBET1RTDQo+ID4+IHNlcnZlciBk ZWNpZGVzIE5PVCB0byBtYWludGFpbiBpdC4NCj4gPj4NCj4gPj4gTkVXLTI6DQo+ID4+ICAgwqDC oCBJZiB0aGUgcmVxdWVzdCBpcyBjb25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nIG1pdGlnYXRp b24gcmVxdWVzdA0KPiA+PiAgIMKgwqAgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwgYW5k IHRoZSBET1RTIHNlcnZlciBkZWNpZGVzIHRvIG1haW50YWluDQo+ID4+ICAgwqDCoCB0aGUgY29u ZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUyBzZXJ2ZXIgcmV0dXJucyAyLjAx DQo+ID4+ICAgwqDCoCAoQ3JlYXRlZCkgdG8gdGhlIHJlcXVlc3RpbmcgRE9UUyBjbGllbnQuDQo+ ID4+ICAgwqDCoCBPdGhlcndpc2UsIHRoZSBET1RTIHNlcnZlciByZXR1cm5zIDQuMDkgKENvbmZs aWN0KSBbUkZDODEzMl0uDQo+ID4+ICAgwqDCoCBUaGUgcmVzcG9uc2UgaW5jbHVkZXMgZW5vdWdo IGluZm9ybWF0aW9uIGZvciBhIERPVFMgY2xpZW50IHRvDQo+ID4+ICAgwqDCoCByZWNvZ25pemUg dGhlIHNvdXJjZSBvZiB0aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+Pg0KPiA+ PiB0aGFua3MsDQo+ID4+IEthbmFtZQ0KPiA+Pg0KPiA+PiBPbiAyMDE4LzA1LzA5IDE0OjUxLCBt b2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIHdyb3RlOg0KPiA+Pj4gSGkgS2FuYW1lLA0KPiA+ Pj4NCj4gPj4+IEFmdGVyIHRoaW5raW5nIGFib3V0IHRoaXMsIEkgZG8gdGhpbmsgdGhhdCB5b3Ug aGF2ZSBhIHZhbGlkIHBvaW50LiBJDQo+ID4+IHN1Z2dlc3QgdG8gbWFrZSB0byBtYWtlIHRoaXMg Y2hhbmdlIChtYXJrZWQgd2l0aCBeXl5eKQ0KPiA+Pj4gT0xEOg0KPiA+Pj4gICAgICBJZiB0aGUg cmVxdWVzdCBpcyBjb25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nIG1pdGlnYXRpb24gcmVxdWVz dA0KPiA+Pj4gICAgICBmcm9tIGEgZGlmZmVyZW50IERPVFMgY2xpZW50LCBhbmQgdGhlIERPVFMg c2VydmVyIGRlY2lkZXMgdG8NCj4gbWFpbnRhaW4NCj4gPj4+ICAgICAgdGhlIGNvbmZsaWN0aW5n IG1pdGlnYXRpb24gcmVxdWVzdCwgdGhlIERPVFMgc2VydmVyIHJldHVybnMgNC4wOQ0KPiA+Pj4g ICAgICAoQ29uZmxpY3QpIFtSRkM4MTMyXSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4g IFRoZSByZXNwb25zZQ0KPiA+Pj4gICAgICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9y IGEgRE9UUyBjbGllbnQgdG8gcmVjb2duaXplIHRoZQ0KPiBzb3VyY2UNCj4gPj4+ICAgICAgb2Yg dGhlIGNvbmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxvdzoNCj4gPj4+DQo+ID4+PiBORVc6DQo+ID4+ PiAgICAgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcgbWl0 aWdhdGlvbiByZXF1ZXN0DQo+ID4+PiAgICAgIGZyb20gYSBkaWZmZXJlbnQgRE9UUyBjbGllbnQs IGFuZCB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRlcyB0bw0KPiBtYWludGFpbg0KPiA+Pj4gICAgICB0 aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUyBzZXJ2ZXIgcmV0dXJu cyAyLjAxDQo+ID4+PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIF5eXl4NCj4gPj4+ICAgICAgKENyZWF0ZWQpIHRvIHRoZSBy ZXF1ZXN0aW5nIERPVFMgY2xpZW50LiAgVGhlIHJlc3BvbnNlXg0KPiA+Pj4gICAgICBeXl5eXl5e Xg0KPiA+Pj4gICAgICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGll bnQgdG8gcmVjb2duaXplIHRoZQ0KPiBzb3VyY2UNCj4gPj4+ICAgICAgb2YgdGhlIGNvbmZsaWN0 IGFzIGRlc2NyaWJlZCBiZWxvdzoNCj4gPj4+DQo+ID4+PiBDaGVlcnMsDQo+ID4+PiBNZWQNCj4g Pj4+DQo+ID4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4+Pj4gRGXCoDogRG90 cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZQ0KPiA+Pj4+IG1v aGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gPj4+PiBFbnZvecOpwqA6IGx1bmRpIDcgbWFp IDIwMTggMDg6MzgNCj4gPj4+PiDDgMKgOiBrYW5hbWUgbmlzaGl6dWthOyBkb3RzQGlldGYub3Jn DQo+ID4+Pj4gT2JqZXTCoDogUmU6IFtEb3RzXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMt c2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4+Pj4NCj4gPj4+PiBSZS0sDQo+ID4+Pj4NCj4gPj4+ PiBBZ3JlZSB0aGF0IHRoZSBjb2RlcyBhcmUgbm90IHRoZSBzYW1lLCBidXQgYWx0ZXJuYXRpdmVz IG9uZXMgYXMNCj4gc3VtbWFyaXplZA0KPiA+Pj4+IGhlcmU6DQo+ID4+IGh0dHBzOi8vbWFpbGFy Y2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvZG90cy9oQTNNTEtsa1hGaW1wQW41S1NZVGF5YVZrakEu DQo+ID4+Pj4gQ2hlZXJzLA0KPiA+Pj4+IE1lZA0KPiA+Pj4+DQo+ID4+Pj4+IC0tLS0tTWVzc2Fn ZSBkJ29yaWdpbmUtLS0tLQ0KPiA+Pj4+PiBEZcKgOiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86 a2FuYW1lQG50dHY2LmpwXQ0KPiA+Pj4+PiBFbnZvecOpwqA6IGx1bmRpIDcgbWFpIDIwMTggMDg6 MjANCj4gPj4+Pj4gw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTjsgZG90c0BpZXRmLm9y Zw0KPiA+Pj4+PiBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90 cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPj4+Pj4NCj4gPj4+Pj4gSGkgTWVkLA0KPiA+Pj4+ Pg0KPiA+Pj4+PiBJJ3ZlIHJlYWQgdGhlIHRocmVhZC4NCj4gPj4+Pj4gYW5kIHRoZSBjb2RlICc4 JyBvZiB0aGUgdGhyZWFkIGlzIGRpZmZlcmVudCBmcm9tIHRoZSBjb2RlICc4JyBvZiB0aGUNCj4g Pj4+PiBjdXJyZW50DQo+ID4+Pj4+IGRyYWZ0Lg0KPiA+Pj4+Pg0KPiA+Pj4+PiB0aGV5J2QgYmVl biBkaXNjdXNzaW5nIHRoZSA3LDggYW5kIDkgYmFzZWQgb24gdGhpcyBkZWZpbml0aW9uLCByaWdo dD8NCj4gPj4+Pj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9kb3RzLzd6 bGp6TjhueWNaWDdFN2doZ2sxdXgzMk1rTQ0KPiA+Pj4+PiA9PQ0KPiA+Pj4+PiA3IHwgRE9UUyBT ZXJ2ZXIgaGFzIGRldGVjdGVkIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdHMgZnJvbQ0K PiA+PiBkaWZmZXJlbnQNCj4gPj4+Pj4gRE9UUyBjbGllbnRzLsKgIFRoaXMgbWl0aWdhdGlvbiBy ZXF1ZXN0IGlzIGN1cnJlbnRseSBpbmFjdGl2ZSB1bnRpbCB0aGUNCj4gPj4+Pj4gY29uZmxpY3Rz IGFyZSByZXNvbHZlZC4gQW5vdGhlciBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgYWN0aXZlLg0KPiA+ Pj4+Pg0KPiA+Pj4+PiA4IHwgRE9UUyBTZXJ2ZXIgaGFzIGRldGVjdGVkIGNvbmZsaWN0aW5nIG1p dGlnYXRpb24gcmVxdWVzdHMgZnJvbQ0KPiA+PiBkaWZmZXJlbnQNCj4gPj4+Pj4gRE9UUyBjbGll bnRzLsKgIFRoaXMgbWl0aWdhdGlvbiByZXF1ZXN0IGlzIGN1cnJlbnRseSBhY3RpdmUuDQo+ID4+ Pj4+DQo+ID4+Pj4+IDkgfCBET1RTIFNlcnZlciBoYXMgZGV0ZWN0ZWQgY29uZmxpY3RpbmcgbWl0 aWdhdGlvbiByZXF1ZXN0cyBmcm9tDQo+ID4+IGRpZmZlcmVudA0KPiA+Pj4+PiBET1RTIGNsaWVu dHMuwqAgQWxsIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdHMgYXJlIGluYWN0aXZlLg0K PiA+Pj4+PiA9PQ0KPiA+Pj4+Pg0KPiA+Pj4+PiBLYW5hbWUNCj4gPj4+Pj4NCj4gPj4+Pj4NCj4g Pj4+Pj4gT24gMjAxOC8wNS8wNyAxNToxMiwgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3 cm90ZToNCj4gPj4+Pj4+IEhpIEthbmFtZSwNCj4gPj4+Pj4+DQo+ID4+Pj4+PiBQbGVhc2UgY2hl Y2sNCj4gPj4+Pj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9kb3RzL3pf Y1pSOV91MjczSHpDOW8wSXk5RmVRWjBKbw0KPiA+Pj4+IGFib3V0DQo+ID4+Pj4+IHRoZSByYXRp b25hbGUgZm9yIGFsbG93aW5nIHRvIHJldHVybiBjb2RlICc4JyBldmVuIGluIGEgbm90aWZpY2F0 aW9uDQo+ID4+Pj4gbWVzc2FnZS4NCj4gPj4+Pj4gVGhlIGludGVudCB3YXMgdG8gaGF2ZSBjb2Rl ICc4JyBhcyBhIHRyYW5zaXRpb24gc3RhdGUuDQo+ID4+Pj4+PiBDaGVlcnMsDQo+ID4+Pj4+PiBN ZWQNCj4gPj4+Pj4+DQo+ID4+Pj4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4+ Pj4+Pj4gRGXCoDoga2FuYW1lIG5pc2hpenVrYSBbbWFpbHRvOmthbmFtZUBudHR2Ni5qcF0NCj4g Pj4+Pj4+PiBFbnZvecOpwqA6IG1lcmNyZWRpIDIgbWFpIDIwMTggMDI6NDkNCj4gPj4+Pj4+PiDD gMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOyBkb3RzQGlldGYub3JnDQo+ID4+Pj4+Pj4g T2JqZXTCoDogUmU6IFtEb3RzXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNo YW5uZWwtMTkudHh0DQo+ID4+Pj4+Pj4NCj4gPj4+Pj4+PiBIaSwNCj4gPj4+Pj4+Pg0KPiA+Pj4+ Pj4+IEknZCBsaWtlIHRvIGFzayBvbmUgY2xhcmlmaWNhdGlvbiBxdWVzdGlvbiBhYm91dCBzdGF0 dXMgY29kZSA4Og0KPiA+Pj4+Pj4+DQo+ID4+Pj4+Pj4gICAgIMKgwqAgb8KgIEEgbm90aWZpY2F0 aW9uIG1lc3NhZ2Ugd2l0aCAnc3RhdHVzJyBjb2RlIHNldCB0byAnOCAoQXR0YWNrDQo+ID4+Pj4+ Pj4gICAgIMKgwqDCoMKgwqAgbWl0aWdhdGlvbiBpcyByZWplY3RlZCknIGFuZCAnY29uZmxpY3Qt c3RhdHVzJyBzZXQgdG8gJzEnDQo+IGlzDQo+ID4+Pj4gc2VudA0KPiA+Pj4+Pj4+ICAgICDCoMKg wqDCoMKgIHRvIGEgRE9UUyBjbGllbnQgdG8gaW5kaWNhdGUgdGhhdCB0aGlzIG1pdGlnYXRpb24g cmVxdWVzdA0KPiBpcw0KPiA+Pj4+Pj4+ICAgICDCoMKgwqDCoMKgIHJlamVjdGVkIGJlY2F1c2Ug YSBjb25mbGljdCBpcyBkZXRlY3RlZC4NCj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+IElmIGEgbWl0aWdh dGlvbiByZXF1ZXN0IGlzIHJlamVjdGVkIGR1ZSB0byBhIGNvbmZsaWN0LCBpdCBpcyByZWplY3Rl ZA0KPiA+PiBhdA0KPiA+Pj4+Pj4+IFBVVCg0LjA5KENvbmZsaWN0KSksIHNvIG5vIHJlc291cmNl IHdpbGwgYmUgY3JlYXRlZC4NCj4gPj4+Pj4+PiBTbyBpdCBsb29rcyB0aGVyZSBpcyBubyBjaGFu Y2UgdG8gcmV0dXJuICc4IChBdHRhY2sgbWl0aWdhdGlvbiBpcw0KPiA+Pj4+PiByZWplY3RlZCkn Lg0KPiA+Pj4+Pj4+IHRoYW5rcywNCj4gPj4+Pj4+PiBLYW5hbWUNCj4gPj4+Pj4+Pg0KPiA+Pj4+ Pj4+IE9uIDIwMTgvMDQvMTAgMjI6NDcsIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3Jv dGU6DQo+ID4+Pj4+Pj4+IFJlLSwNCj4gPj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4gVGhpcyB2ZXJzaW9u IGFkZHJlc3NlcyB0aGUgY29tbWVudHMgcmFpc2VkIGR1cmluZyB0aGUgV0dMQywgaW4NCj4gPj4+ Pj4gcGFydGljdWxhcjoNCj4gPj4+Pj4+Pj4gLSAoQ2xhcmlmaWNhdGlvbikgSW5kaWNhdGUgdGhh dCBvbmx5IG9uZSBob3AtbGltaXQgaXMgaW5jbHVkZWQNCj4gPj4+Pj4+Pj4gLSBTcGVjaWZ5IHRo ZSBsb29wIGRpYWdub3N0aWMgcGF5bG9hZA0KPiA+Pj4+Pj4+PiAtIChDbGFyaWZpY2F0aW9uKSBJ bmRpY2F0ZSBleHBsaWNpdGx5IHRoYXQgR0VUIG1lc3NhZ2VzIHdpdGggJ3NpZCcNCj4gYXJlDQo+ ID4+Pj4+Pj4gYWxsb3dlZA0KPiA+Pj4+Pj4+PiAtIFVwZGF0ZSB0aGUgcmVkaXJlY3QgYmVoYXZp b3IuDQo+ID4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+IENoZWVycywNCj4gPj4+Pj4+Pj4gTWVkDQo+ID4+ Pj4+Pj4+DQo+ID4+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPj4+Pj4+ Pj4+IERlwqA6IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIERlIGxhIHBhcnQg ZGUgaW50ZXJuZXQtDQo+ID4+Pj4+Pj4+PiBkcmFmdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+Pj4+IEVu dm95w6nCoDogbWFyZGkgMTAgYXZyaWwgMjAxOCAxNTo0MA0KPiA+Pj4+Pj4+Pj4gw4DCoDogaS1k LWFubm91bmNlQGlldGYub3JnDQo+ID4+Pj4+Pj4+PiBDY8KgOiBkb3RzQGlldGYub3JnDQo+ID4+ Pj4+Pj4+PiBPYmpldMKgOiBbRG90c10gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25h bC1jaGFubmVsLTE5LnR4dA0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+PiBB IE5ldyBJbnRlcm5ldC1EcmFmdCBpcyBhdmFpbGFibGUgZnJvbSB0aGUgb24tbGluZSBJbnRlcm5l dC1EcmFmdHMNCj4gPj4+Pj4+Pj4+IGRpcmVjdG9yaWVzLg0KPiA+Pj4+Pj4+Pj4gVGhpcyBkcmFm dCBpcyBhIHdvcmsgaXRlbSBvZiB0aGUgRERvUyBPcGVuIFRocmVhdCBTaWduYWxpbmcgV0cgb2YN Cj4gdGhlDQo+ID4+Pj4+Pj4gSUVURi4NCj4gPj4+Pj4+Pj4+ICAgICAgICAgICAgIFRpdGxlICAg ICAgICAgICA6IERpc3RyaWJ1dGVkIERlbmlhbC1vZi1TZXJ2aWNlIE9wZW4NCj4gPj4gVGhyZWF0 DQo+ID4+Pj4+Pj4gU2lnbmFsaW5nDQo+ID4+Pj4+Pj4+PiAoRE9UUykgU2lnbmFsIENoYW5uZWwg U3BlY2lmaWNhdGlvbg0KPiA+Pj4+Pj4+Pj4gICAgICAgICAgICAgQXV0aG9ycyAgICAgICAgIDog VGlydW1hbGVzd2FyIFJlZGR5DQo+ID4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBNb2hhbWVkIEJvdWNhZGFpcg0KPiA+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgUHJhc2hhbnRoIFBhdGlsDQo+ID4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBBbmRyZXcgTW9ydGVuc2VuDQo+ID4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBOaWsgVGVhZ3VlDQo+ID4+Pj4+Pj4+PiAJRmlsZW5hbWUgICAgICAgIDog ZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0KPiA+Pj4+Pj4+Pj4gCVBhZ2Vz ICAgICAgICAgICA6IDg2DQo+ID4+Pj4+Pj4+PiAJRGF0ZSAgICAgICAgICAgIDogMjAxOC0wNC0x MA0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+IEFic3RyYWN0Og0KPiA+Pj4+Pj4+Pj4gICAgICAg IFRoaXMgZG9jdW1lbnQgc3BlY2lmaWVzIHRoZSBET1RTIHNpZ25hbCBjaGFubmVsLCBhIHByb3Rv Y29sDQo+IGZvcg0KPiA+Pj4+Pj4+Pj4gICAgICAgIHNpZ25hbGluZyB0aGUgbmVlZCBmb3IgcHJv dGVjdGlvbiBhZ2FpbnN0IERpc3RyaWJ1dGVkDQo+IERlbmlhbC0NCj4gPj4gb2YtDQo+ID4+Pj4+ Pj4+PiAgICAgICAgU2VydmljZSAoRERvUykgYXR0YWNrcyB0byBhIHNlcnZlciBjYXBhYmxlIG9m IGVuYWJsaW5nDQo+IG5ldHdvcmsNCj4gPj4+Pj4+Pj4+ICAgICAgICB0cmFmZmljIG1pdGlnYXRp b24gb24gYmVoYWxmIG9mIHRoZSByZXF1ZXN0aW5nIGNsaWVudC4NCj4gPj4+Pj4+Pj4+DQo+ID4+ Pj4+Pj4+PiAgICAgICAgQSBjb21wYW5pb24gZG9jdW1lbnQgZGVmaW5lcyB0aGUgRE9UUyBkYXRh IGNoYW5uZWwsIGENCj4gc2VwYXJhdGUNCj4gPj4+Pj4+Pj4+ICAgICAgICByZWxpYWJsZSBjb21t dW5pY2F0aW9uIGxheWVyIGZvciBET1RTIG1hbmFnZW1lbnQgYW5kDQo+ID4+Pj4gY29uZmlndXJh dGlvbg0KPiA+Pj4+Pj4+Pj4gICAgICAgIHB1cnBvc2VzLg0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+ Pj4+IEVkaXRvcmlhbCBOb3RlIChUbyBiZSByZW1vdmVkIGJ5IFJGQyBFZGl0b3IpDQo+ID4+Pj4+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4gICAgICAgIFBsZWFzZSB1cGRhdGUgdGhlc2Ugc3RhdGVtZW50cyB3 aXRoIHRoZSBSRkMgbnVtYmVyIHRvIGJlDQo+ID4+IGFzc2lnbmVkDQo+ID4+Pj4+IHRvDQo+ID4+ Pj4+Pj4+PiAgICAgICAgdGhpcyBkb2N1bWVudDoNCj4gPj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+PiAg ICAgICAgbyAgIlRoaXMgdmVyc2lvbiBvZiB0aGlzIFlBTkcgbW9kdWxlIGlzIHBhcnQgb2YgUkZD IFhYWFg7Ig0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+ICAgICAgICBvICAiUkZDIFhYWFg6IERp c3RyaWJ1dGVkIERlbmlhbC1vZi1TZXJ2aWNlIE9wZW4gVGhyZWF0DQo+ID4+IFNpZ25hbGluZw0K PiA+Pj4+Pj4+Pj4gICAgICAgICAgIChET1RTKSBTaWduYWwgQ2hhbm5lbCBTcGVjaWZpY2F0aW9u IjsNCj4gPj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+PiAgICAgICAgbyAgInwgW1JGQ1hYWFhdIHwiDQo+ ID4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gICAgICAgIG8gIHJlZmVyZW5jZTogUkZDIFhYWFgNCj4g Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+PiAgICAgICAgUGxlYXNlIHVwZGF0ZSBUQkQgc3RhdGVtZW50 cyB3aXRoIHRoZSBwb3J0IG51bWJlciB0byBiZQ0KPiA+PiBhc3NpZ25lZA0KPiA+Pj4+IHRvDQo+ ID4+Pj4+Pj4+PiAgICAgICAgRE9UUyBTaWduYWwgQ2hhbm5lbCBQcm90b2NvbC4NCj4gPj4+Pj4+ Pj4+DQo+ID4+Pj4+Pj4+PiAgICAgICAgQWxzbywgcGxlYXNlIHVwZGF0ZSB0aGUgInJldmlzaW9u IiBkYXRlIG9mIHRoZSBZQU5HIG1vZHVsZS4NCj4gPj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pg0KPiA+ Pj4+Pj4+Pj4gVGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVzIHBhZ2UgZm9yIHRoaXMgZHJhZnQg aXM6DQo+ID4+Pj4+Pj4+PiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1p ZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwvDQo+ID4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gVGhlcmUg YXJlIGFsc28gaHRtbGl6ZWQgdmVyc2lvbnMgYXZhaWxhYmxlIGF0Og0KPiA+Pj4+Pj4+Pj4gaHR0 cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0x OQ0KPiA+Pj4+Pj4+Pj4gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFm dC1pZXRmLWRvdHMtc2lnbmFsLQ0KPiBjaGFubmVsLQ0KPiA+Pj4+IDE5DQo+ID4+Pj4+Pj4+PiBB IGRpZmYgZnJvbSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6DQo+ID4+Pj4+ Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1kb3RzLXNp Z25hbC1jaGFubmVsLTE5DQo+ID4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+IFBs ZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0 aW1lIG9mDQo+ID4+Pj4+Pj4gc3VibWlzc2lvbg0KPiA+Pj4+Pj4+Pj4gdW50aWwgdGhlIGh0bWxp emVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdA0KPiB0b29scy5pZXRmLm9yZy4N Cj4gPj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+PiBJbnRlcm5ldC1EcmFmdHMgYXJlIGFsc28gYXZhaWxh YmxlIGJ5IGFub255bW91cyBGVFAgYXQ6DQo+ID4+Pj4+Pj4+PiBmdHA6Ly9mdHAuaWV0Zi5vcmcv aW50ZXJuZXQtZHJhZnRzLw0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+IF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+Pj4+Pj4+PiBEb3RzIG1haWxp bmcgbGlzdA0KPiA+Pj4+Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+Pj4+Pj4+Pj4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4+Pj4+Pj4+IF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+Pj4+Pj4+IERvdHMgbWFp bGluZyBsaXN0DQo+ID4+Pj4+Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+Pj4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4+Pj4+PiBfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+Pj4+Pj4gRG90cyBtYWlsaW5n IGxpc3QNCj4gPj4+Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+Pj4+IF9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPj4+ PiBEb3RzQGlldGYub3JnDQo+ID4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9kb3RzDQo+ID4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KPiA+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPj4+IERvdHNAaWV0Zi5vcmcNCj4g Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+IF9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gRG90cyBtYWls aW5nIGxpc3QNCj4gPiBEb3RzQGlldGYub3JnDQo+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9kb3RzDQoNCg== From nobody Mon May 14 02:50:14 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 263F612D86F for ; Mon, 14 May 2018 02:50:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K0EQMd1SE5J7 for ; Mon, 14 May 2018 02:50:10 -0700 (PDT) Received: from guri.nttv6.jp (guri.nttv6.jp [IPv6:2402:c800:ff06:136::140]) by ietfa.amsl.com (Postfix) with ESMTP id 07D7F12D86C for ; Mon, 14 May 2018 02:50:09 -0700 (PDT) Received: from z.nttv6.jp (z.nttv6.jp [192.168.8.15]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id B00A225F68C; Mon, 14 May 2018 18:50:08 +0900 (JST) Received: from [IPv6:::1] (fujiko.nttv6.jp [115.69.228.141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id 1979275906F; Mon, 14 May 2018 18:50:08 +0900 (JST) To: mohamed.boucadair@orange.com Cc: "dots@ietf.org" References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: kaname nishizuka Message-ID: Date: Mon, 14 May 2018 18:49:22 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 May 2018 09:50:14 -0000 Hi Med, Please see inline. thanks, Kaname On 2018/05/11 18:39, mohamed.boucadair@orange.com wrote: > Re-, > > Please see inline. > > Cheers, > Med > >> -----Message d'origine----- >> De : kaname nishizuka [mailto:kaname@nttv6.jp] >> Envoyé : vendredi 11 mai 2018 10:59 >> À : BOUCADAIR Mohamed IMT/OLN >> Cc : dots@ietf.org >> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >> >> Hi Med, >> >> > If the server decides not to maintain the conflicting request, then the >> present request will be processed as normal: that is 2.01 will be returned to >> ack successful handling. A notification will be sent to the client owner of >> the conflicting request to notify withdrawal (section 4.4.2). >> In that case, the status code is '7' (Attack mitigation is withdrawn) > [Med] Yes, that status will be sent to the owner of the (existing) request. > >> My original question is when the status code '8' (Attack mitigation is >> rejected) will be used. > [Med] I got that. > >> In the text in the draft, "the conflicting mitigation request" is ambiguous >> whether it is already existing request or the request that just has arrived. > [Med] It is related to the already existing request. > >> Say, the existing request is (A), then a mitigation request (B) arrived which >> are conflicting with A. >> >> If B is selected. >> (A) will get notification with the withdrawal code '7' >> (B) will get 2.01 >> > [Med] Yes. The current text does calls out your step (1) in 4.4.2. Your step (2) is not called explicit in the text because there is no confusion about which code to return when a request is accepted to be honored. > > The text focuses on cases which requires specific handling: > - inactive request because of a conflict > - multiple active conflicting requests > >> else If B is not selected. >> (B) will get 4.09 >> > [Med] In this case, the resource is not created and as such case returning notification status code of 8 is not possible as you rightful pointed out. > This is why we suggested to return 2.01 for this case too so that an update of the status can be sent to the client upon change. I don't think it is needed to obligate returning of 2.01. If it is obvious that the DOTS server need not to create resource of the conflicting request, it may return 4.09. So, returning of 4.09 should be allowed in this case. It should be left as implementation- and deployment-specific. >> Tiru said: >> > In this case, the resource should be created and the server should return >> success (2.01 or 2.04) response code along with the conflict-information. >> In this situation, (B) will get 2.01 or 2.04 along with the rejected code '8' >> >> (Which mitigation request will be selected by the DOTS server is >> implementation- and deployment-specific.) >> >> Thanks, >> Kaname >> >> >> On 2018/05/11 15:09, mohamed.boucadair@orange.com wrote: >>> Hi Kaname, >>> >>> If the server decides not to maintain the conflicting request, then the >> present request will be processed as normal: that is 2.01 will be returned to >> ack successful handling. A notification will be sent to the client owner of >> the conflicting request to notify withdrawal (section 4.4.2). >>> The text focuses on the case ", and the DOTS server decides to maintain the >> conflicting mitigation request" because this is the one which requires >> additional specification vs. normal request that is accepted by a server. >>> Cheers, >>> Med >>> >>>> -----Message d'origine----- >>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] >>>> Envoyé : mercredi 9 mai 2018 10:41 >>>> À : BOUCADAIR Mohamed IMT/OLN >>>> Cc : dots@ietf.org >>>> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>> >>>> Hi Med, >>>> >>>> I'm OK with this change. >>>> However, to be precise, I'd like to suggest to state about the case the >> DOTS >>>> server decides NOT to maintain it. >>>> >>>> NEW-2: >>>>    If the request is conflicting with an existing mitigation request >>>>    from a different DOTS client, and the DOTS server decides to maintain >>>>    the conflicting mitigation request, the DOTS server returns 2.01 >>>>    (Created) to the requesting DOTS client. >>>>    Otherwise, the DOTS server returns 4.09 (Conflict) [RFC8132]. >>>>    The response includes enough information for a DOTS client to >>>>    recognize the source of the conflict as described below: >>>> >>>> thanks, >>>> Kaname >>>> >>>> On 2018/05/09 14:51, mohamed.boucadair@orange.com wrote: >>>>> Hi Kaname, >>>>> >>>>> After thinking about this, I do think that you have a valid point. I >>>> suggest to make to make this change (marked with ^^^^) >>>>> OLD: >>>>> If the request is conflicting with an existing mitigation request >>>>> from a different DOTS client, and the DOTS server decides to >> maintain >>>>> the conflicting mitigation request, the DOTS server returns 4.09 >>>>> (Conflict) [RFC8132] to the requesting DOTS client. The response >>>>> includes enough information for a DOTS client to recognize the >> source >>>>> of the conflict as described below: >>>>> >>>>> NEW: >>>>> If the request is conflicting with an existing mitigation request >>>>> from a different DOTS client, and the DOTS server decides to >> maintain >>>>> the conflicting mitigation request, the DOTS server returns 2.01 >>>>> ^^^^ >>>>> (Created) to the requesting DOTS client. The response^ >>>>> ^^^^^^^^ >>>>> includes enough information for a DOTS client to recognize the >> source >>>>> of the conflict as described below: >>>>> >>>>> Cheers, >>>>> Med >>>>> >>>>>> -----Message d'origine----- >>>>>> De : Dots [mailto:dots-bounces@ietf.org] De la part de >>>>>> mohamed.boucadair@orange.com >>>>>> Envoyé : lundi 7 mai 2018 08:38 >>>>>> À : kaname nishizuka; dots@ietf.org >>>>>> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>> >>>>>> Re-, >>>>>> >>>>>> Agree that the codes are not the same, but alternatives ones as >> summarized >>>>>> here: >>>> https://mailarchive.ietf.org/arch/msg/dots/hA3MLKlkXFimpAn5KSYTayaVkjA. >>>>>> Cheers, >>>>>> Med >>>>>> >>>>>>> -----Message d'origine----- >>>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] >>>>>>> Envoyé : lundi 7 mai 2018 08:20 >>>>>>> À : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org >>>>>>> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>>> >>>>>>> Hi Med, >>>>>>> >>>>>>> I've read the thread. >>>>>>> and the code '8' of the thread is different from the code '8' of the >>>>>> current >>>>>>> draft. >>>>>>> >>>>>>> they'd been discussing the 7,8 and 9 based on this definition, right? >>>>>>> https://mailarchive.ietf.org/arch/msg/dots/7zljzN8nycZX7E7ghgk1ux32MkM >>>>>>> == >>>>>>> 7 | DOTS Server has detected conflicting mitigation requests from >>>> different >>>>>>> DOTS clients.  This mitigation request is currently inactive until the >>>>>>> conflicts are resolved. Another mitigation request is active. >>>>>>> >>>>>>> 8 | DOTS Server has detected conflicting mitigation requests from >>>> different >>>>>>> DOTS clients.  This mitigation request is currently active. >>>>>>> >>>>>>> 9 | DOTS Server has detected conflicting mitigation requests from >>>> different >>>>>>> DOTS clients.  All conflicting mitigation requests are inactive. >>>>>>> == >>>>>>> >>>>>>> Kaname >>>>>>> >>>>>>> >>>>>>> On 2018/05/07 15:12, mohamed.boucadair@orange.com wrote: >>>>>>>> Hi Kaname, >>>>>>>> >>>>>>>> Please check >>>>>>> https://mailarchive.ietf.org/arch/msg/dots/z_cZR9_u273HzC9o0Iy9FeQZ0Jo >>>>>> about >>>>>>> the rationale for allowing to return code '8' even in a notification >>>>>> message. >>>>>>> The intent was to have code '8' as a transition state. >>>>>>>> Cheers, >>>>>>>> Med >>>>>>>> >>>>>>>>> -----Message d'origine----- >>>>>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] >>>>>>>>> Envoyé : mercredi 2 mai 2018 02:49 >>>>>>>>> À : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org >>>>>>>>> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>>>>> >>>>>>>>> Hi, >>>>>>>>> >>>>>>>>> I'd like to ask one clarification question about status code 8: >>>>>>>>> >>>>>>>>>    o  A notification message with 'status' code set to '8 (Attack >>>>>>>>>       mitigation is rejected)' and 'conflict-status' set to '1' >> is >>>>>> sent >>>>>>>>>       to a DOTS client to indicate that this mitigation request >> is >>>>>>>>>       rejected because a conflict is detected. >>>>>>>>> >>>>>>>>> If a mitigation request is rejected due to a conflict, it is rejected >>>> at >>>>>>>>> PUT(4.09(Conflict)), so no resource will be created. >>>>>>>>> So it looks there is no chance to return '8 (Attack mitigation is >>>>>>> rejected)'. >>>>>>>>> thanks, >>>>>>>>> Kaname >>>>>>>>> >>>>>>>>> On 2018/04/10 22:47, mohamed.boucadair@orange.com wrote: >>>>>>>>>> Re-, >>>>>>>>>> >>>>>>>>>> This version addresses the comments raised during the WGLC, in >>>>>>> particular: >>>>>>>>>> - (Clarification) Indicate that only one hop-limit is included >>>>>>>>>> - Specify the loop diagnostic payload >>>>>>>>>> - (Clarification) Indicate explicitly that GET messages with 'sid' >> are >>>>>>>>> allowed >>>>>>>>>> - Update the redirect behavior. >>>>>>>>>> >>>>>>>>>> Cheers, >>>>>>>>>> Med >>>>>>>>>> >>>>>>>>>>> -----Message d'origine----- >>>>>>>>>>> De : Dots [mailto:dots-bounces@ietf.org] De la part de internet- >>>>>>>>>>> drafts@ietf.org >>>>>>>>>>> Envoyé : mardi 10 avril 2018 15:40 >>>>>>>>>>> À : i-d-announce@ietf.org >>>>>>>>>>> Cc : dots@ietf.org >>>>>>>>>>> Objet : [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> A New Internet-Draft is available from the on-line Internet-Drafts >>>>>>>>>>> directories. >>>>>>>>>>> This draft is a work item of the DDoS Open Threat Signaling WG of >> the >>>>>>>>> IETF. >>>>>>>>>>> Title : Distributed Denial-of-Service Open >>>> Threat >>>>>>>>> Signaling >>>>>>>>>>> (DOTS) Signal Channel Specification >>>>>>>>>>> Authors : Tirumaleswar Reddy >>>>>>>>>>> Mohamed Boucadair >>>>>>>>>>> Prashanth Patil >>>>>>>>>>> Andrew Mortensen >>>>>>>>>>> Nik Teague >>>>>>>>>>> Filename : draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>> Pages : 86 >>>>>>>>>>> Date : 2018-04-10 >>>>>>>>>>> >>>>>>>>>>> Abstract: >>>>>>>>>>> This document specifies the DOTS signal channel, a protocol >> for >>>>>>>>>>> signaling the need for protection against Distributed >> Denial- >>>> of- >>>>>>>>>>> Service (DDoS) attacks to a server capable of enabling >> network >>>>>>>>>>> traffic mitigation on behalf of the requesting client. >>>>>>>>>>> >>>>>>>>>>> A companion document defines the DOTS data channel, a >> separate >>>>>>>>>>> reliable communication layer for DOTS management and >>>>>> configuration >>>>>>>>>>> purposes. >>>>>>>>>>> >>>>>>>>>>> Editorial Note (To be removed by RFC Editor) >>>>>>>>>>> >>>>>>>>>>> Please update these statements with the RFC number to be >>>> assigned >>>>>>> to >>>>>>>>>>> this document: >>>>>>>>>>> >>>>>>>>>>> o "This version of this YANG module is part of RFC XXXX;" >>>>>>>>>>> >>>>>>>>>>> o "RFC XXXX: Distributed Denial-of-Service Open Threat >>>> Signaling >>>>>>>>>>> (DOTS) Signal Channel Specification"; >>>>>>>>>>> >>>>>>>>>>> o "| [RFCXXXX] |" >>>>>>>>>>> >>>>>>>>>>> o reference: RFC XXXX >>>>>>>>>>> >>>>>>>>>>> Please update TBD statements with the port number to be >>>> assigned >>>>>> to >>>>>>>>>>> DOTS Signal Channel Protocol. >>>>>>>>>>> >>>>>>>>>>> Also, please update the "revision" date of the YANG module. >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> The IETF datatracker status page for this draft is: >>>>>>>>>>> https://datatracker.ietf.org/doc/draft-ietf-dots-signal-channel/ >>>>>>>>>>> >>>>>>>>>>> There are also htmlized versions available at: >>>>>>>>>>> https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19 >>>>>>>>>>> https://datatracker.ietf.org/doc/html/draft-ietf-dots-signal- >> channel- >>>>>> 19 >>>>>>>>>>> A diff from the previous version is available at: >>>>>>>>>>> https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-signal-channel-19 >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> Please note that it may take a couple of minutes from the time of >>>>>>>>> submission >>>>>>>>>>> until the htmlized version and diff are available at >> tools.ietf.org. >>>>>>>>>>> Internet-Drafts are also available by anonymous FTP at: >>>>>>>>>>> ftp://ftp.ietf.org/internet-drafts/ >>>>>>>>>>> >>>>>>>>>>> _______________________________________________ >>>>>>>>>>> Dots mailing list >>>>>>>>>>> Dots@ietf.org >>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>> _______________________________________________ >>>>>>>>>> Dots mailing list >>>>>>>>>> Dots@ietf.org >>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>> _______________________________________________ >>>>>>>> Dots mailing list >>>>>>>> Dots@ietf.org >>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>> _______________________________________________ >>>>>> Dots mailing list >>>>>> Dots@ietf.org >>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>> _______________________________________________ >>>>> Dots mailing list >>>>> Dots@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/dots >>> _______________________________________________ >>> Dots mailing list >>> Dots@ietf.org >>> https://www.ietf.org/mailman/listinfo/dots > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Tue May 15 05:47:13 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34C011252BA for ; Tue, 15 May 2018 05:47:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.001 X-Spam-Level: X-Spam-Status: No, score=-0.001 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DMYVQF7yE4fH for ; Tue, 15 May 2018 05:47:09 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 739F7126579 for ; Tue, 15 May 2018 05:47:09 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fIZMA-0008PY-CQ for ietf-supjps-dots@ietf.org; Tue, 15 May 2018 13:47:06 +0100 From: "Jon Shallow" To: Date: Tue, 15 May 2018 13:47:06 +0100 Message-ID: <017601d3ec4a$d50620c0$7f126240$@jpshallow.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0177_01D3EC53.36CA88C0" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdPsStPjVXG7Yx+4T/K9n2ITS/OGmQ== Content-Language: en-gb Archived-At: Subject: [Dots] Data Channel Fragment handling nits X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 May 2018 12:47:11 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0177_01D3EC53.36CA88C0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi there, I am beginning to with that I had not raised how to handle fragments, but it was keyed off my naive interpretation of the handling of IPv6 protocols by netmod-acl! Making this changes has raised some inconsistencies in the draft data channel document. Searching on fragment reveals v4-fragment and v6-fragment which are no longer used. The YANG bits type conversions to JSON in the Appendix A are wrong - I initiated this error. "flags": { "more": 1 } Should be "flags": { "more"} And "flags": { "more": 0 } Should be "flags": { ""} Regards Jon ------=_NextPart_000_0177_01D3EC53.36CA88C0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi = there,

 

I am beginning to with that I had not raised how to = handle fragments, but it was keyed off my naive interpretation of the = handling of IPv6 protocols by netmod-acl!

 

Making this = changes has raised some inconsistencies in the draft data channel = document.

 

Searching on fragment reveals v4-fragment and = v6-fragment which are no longer used.

 

The YANG = bits type conversions to JSON in the Appendix A are wrong – I = initiated this error.

 

         &= nbsp;           = "flags": {

          =             &= nbsp;"more": 1

         &= nbsp;           = }

Should be

         &= nbsp;           &q= uot;flags": { “more”}

 

And

         &= nbsp;           = "flags": {

          =             &= nbsp;"more": 0

         &= nbsp;           = }

Should be

         &= nbsp;           &q= uot;flags": { “”}

 

 

Regards

 

Jon

------=_NextPart_000_0177_01D3EC53.36CA88C0-- From nobody Tue May 15 06:20:33 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F913127775 for ; Tue, 15 May 2018 06:20:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o3djmSPkQqqj for ; Tue, 15 May 2018 06:20:30 -0700 (PDT) Received: from orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D5243120047 for ; Tue, 15 May 2018 06:20:29 -0700 (PDT) Received: from opfednr07.francetelecom.fr (unknown [xx.xx.xx.71]) by opfednr27.francetelecom.fr (ESMTP service) with ESMTP id 1C5CFA0995; Tue, 15 May 2018 15:20:28 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.3]) by opfednr07.francetelecom.fr (ESMTP service) with ESMTP id ED7841C0075; Tue, 15 May 2018 15:20:27 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM5D.corporate.adroot.infra.ftgroup ([fe80::9898:741c:bc1d:258d%19]) with mapi id 14.03.0389.001; Tue, 15 May 2018 15:20:27 +0200 From: To: Jon Shallow , "dots@ietf.org" Thread-Topic: [Dots] Data Channel Fragment handling nits Thread-Index: AdPsStPjVXG7Yx+4T/K9n2ITS/OGmQAAw5HA Date: Tue, 15 May 2018 13:20:27 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF1B46E@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <017601d3ec4a$d50620c0$7f126240$@jpshallow.com> In-Reply-To: <017601d3ec4a$d50620c0$7f126240$@jpshallow.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.6] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93302DF1B46EOPEXCLILMA3corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Data Channel Fragment handling nits X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 May 2018 13:20:31 -0000 --_000_787AE7BB302AE849A7480A190F8B93302DF1B46EOPEXCLILMA3corp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Jon, Please see inline. Cheers, Med De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow Envoy=E9 : mardi 15 mai 2018 14:47 =C0 : dots@ietf.org Objet : [Dots] Data Channel Fragment handling nits Hi there, I am beginning to with that I had not raised how to handle fragments, but i= t was keyed off my naive interpretation of the handling of IPv6 protocols b= y netmod-acl! Making this changes has raised some inconsistencies in the draft data chann= el document. Searching on fragment reveals v4-fragment and v6-fragment which are no long= er used. [Med] Hmm. These are related to the capabilities of a DOTS server to enforc= e fragment-based filtering. See Figure 23 for an example. The YANG bits type conversions to JSON in the Appendix A are wrong - I init= iated this error. [Med] Good catch. Fixed. "flags": { "more": 1 } Should be "flags": { "more"} And "flags": { "more": 0 } Should be "flags": { ""} Regards Jon --_000_787AE7BB302AE849A7480A190F8B93302DF1B46EOPEXCLILMA3corp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi Jon,

 

Please see inline.

 

Cheers,

Med

 

De : Dots [mailto:dots-bounces@ietf.= org] De la part de Jon Shallow
Envoy=E9 : mardi 15 mai 2018 14:47
=C0 : dots@ietf.org
Objet : [Dots] Data Channel Fragment handling nits

 

Hi there,

 

I am beginning to with that I h= ad not raised how to handle fragments, but it was keyed off my naive interp= retation of the handling of IPv6 protocols by netmod-acl!=

 

Making this changes has raised = some inconsistencies in the draft data channel document.<= /p>

Searching on fragment reveals v= 4-fragment and v6-fragment which are no longer used.

 

[Med] Hmm. These are related to the capabilities of =
a DOTS server to enforce fragment-based filtering. See Figure 23 for=
 an example.

 

The YANG bits type conversions = to JSON in the Appendix A are wrong – I initiated this error.

[Med] Good catch. Fixed.

 

     &= nbsp;           &nbs= p;   "flags": {

     &= nbsp;            &nb= sp;    "more": 1

     &= nbsp;           &nbs= p;   }

Should be

     &= nbsp;           &nbs= p;   "flags": { “more”}

 

And

     &= nbsp;           &nbs= p;   "flags": {

     &= nbsp;            &nb= sp;    "more": 0

     &= nbsp;           &nbs= p;   }

Should be

     &= nbsp;           &nbs= p;   "flags": { “”}<= /p>

 

 

Regards

 

Jon

--_000_787AE7BB302AE849A7480A190F8B93302DF1B46EOPEXCLILMA3corp_-- From nobody Tue May 15 06:26:55 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 01D8F120047 for ; Tue, 15 May 2018 06:26:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v-hTcOzIfAxg for ; Tue, 15 May 2018 06:26:50 -0700 (PDT) Received: from orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01EF612D0C3 for ; Tue, 15 May 2018 06:26:50 -0700 (PDT) Received: from opfedar02.francetelecom.fr (unknown [xx.xx.xx.4]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id 544931008C7; Tue, 15 May 2018 15:26:48 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.21]) by opfedar02.francetelecom.fr (ESMTP service) with ESMTP id 352E0180063; Tue, 15 May 2018 15:26:48 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM6C.corporate.adroot.infra.ftgroup ([fe80::d9f5:9741:7525:a199%18]) with mapi id 14.03.0389.001; Tue, 15 May 2018 15:26:48 +0200 From: To: kaname nishizuka CC: "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT62j1bTaijzcHiUe9TjV5ZiHsCKQwyJQw Date: Tue, 15 May 2018 13:26:47 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.6] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 May 2018 13:26:53 -0000 SGkgS2FuYW1lLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCj4gLS0t LS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+IERlwqA6IGthbmFtZSBuaXNoaXp1a2EgW21haWx0 bzprYW5hbWVAbnR0djYuanBdDQo+IEVudm95w6nCoDogbHVuZGkgMTQgbWFpIDIwMTggMTE6NDkN Cj4gw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTg0KPiBDY8KgOiBkb3RzQGlldGYub3Jn DQo+IE9iamV0wqA6IFJlOiBbRG90c10gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25h bC1jaGFubmVsLTE5LnR4dA0KPiANCj4gSGkgTWVkLA0KPiANCj4gUGxlYXNlIHNlZSBpbmxpbmUu DQo+IA0KPiB0aGFua3MsDQo+IEthbmFtZQ0KPiANCj4gT24gMjAxOC8wNS8xMSAxODozOSwgbW9o YW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPiBSZS0sDQo+ID4NCj4gPiBQbGVh c2Ugc2VlIGlubGluZS4NCj4gPg0KPiA+IENoZWVycywNCj4gPiBNZWQNCj4gPg0KPiA+PiAtLS0t LU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPj4gRGXCoDoga2FuYW1lIG5pc2hpenVrYSBbbWFp bHRvOmthbmFtZUBudHR2Ni5qcF0NCj4gPj4gRW52b3nDqcKgOiB2ZW5kcmVkaSAxMSBtYWkgMjAx OCAxMDo1OQ0KPiA+PiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xODQo+ID4+IENjwqA6 IGRvdHNAaWV0Zi5vcmcNCj4gPj4gT2JqZXTCoDogUmU6IFtEb3RzXSBJLUQgQWN0aW9uOiBkcmFm dC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4+DQo+ID4+IEhpIE1lZCwNCj4g Pj4NCj4gPj4gICA+IElmIHRoZSBzZXJ2ZXIgZGVjaWRlcyBub3QgdG8gbWFpbnRhaW4gdGhlIGNv bmZsaWN0aW5nIHJlcXVlc3QsIHRoZW4NCj4gdGhlDQo+ID4+IHByZXNlbnQgcmVxdWVzdCB3aWxs IGJlIHByb2Nlc3NlZCBhcyBub3JtYWw6IHRoYXQgaXMgMi4wMSB3aWxsIGJlIHJldHVybmVkDQo+ IHRvDQo+ID4+IGFjayBzdWNjZXNzZnVsIGhhbmRsaW5nLiBBIG5vdGlmaWNhdGlvbiB3aWxsIGJl IHNlbnQgdG8gdGhlIGNsaWVudCBvd25lcg0KPiBvZg0KPiA+PiB0aGUgY29uZmxpY3RpbmcgcmVx dWVzdCB0byBub3RpZnkgd2l0aGRyYXdhbCAoc2VjdGlvbiA0LjQuMikuDQo+ID4+IEluIHRoYXQg Y2FzZSwgdGhlIHN0YXR1cyBjb2RlIGlzICc3JyAoQXR0YWNrIG1pdGlnYXRpb24gaXMgd2l0aGRy YXduKQ0KPiA+IFtNZWRdIFllcywgdGhhdCBzdGF0dXMgd2lsbCBiZSBzZW50IHRvIHRoZSBvd25l ciBvZiB0aGUgKGV4aXN0aW5nKSByZXF1ZXN0Lg0KPiA+DQo+ID4+IE15IG9yaWdpbmFsIHF1ZXN0 aW9uIGlzIHdoZW4gdGhlIHN0YXR1cyBjb2RlICc4JyAoQXR0YWNrIG1pdGlnYXRpb24gaXMNCj4g Pj4gcmVqZWN0ZWQpIHdpbGwgYmUgdXNlZC4NCj4gPiBbTWVkXSBJIGdvdCB0aGF0Lg0KPiA+DQo+ ID4+IEluIHRoZSB0ZXh0IGluIHRoZSBkcmFmdCwgInRoZSBjb25mbGljdGluZyBtaXRpZ2F0aW9u IHJlcXVlc3QiIGlzDQo+IGFtYmlndW91cw0KPiA+PiB3aGV0aGVyIGl0IGlzIGFscmVhZHkgZXhp c3RpbmcgcmVxdWVzdCBvciB0aGUgcmVxdWVzdCB0aGF0IGp1c3QgaGFzDQo+IGFycml2ZWQuDQo+ ID4gW01lZF0gSXQgaXMgcmVsYXRlZCB0byB0aGUgYWxyZWFkeSBleGlzdGluZyByZXF1ZXN0Lg0K PiA+DQo+ID4+IFNheSwgdGhlIGV4aXN0aW5nIHJlcXVlc3QgaXMgKEEpLCB0aGVuIGEgbWl0aWdh dGlvbiByZXF1ZXN0IChCKSBhcnJpdmVkDQo+IHdoaWNoDQo+ID4+IGFyZSBjb25mbGljdGluZyB3 aXRoIEEuDQo+ID4+DQo+ID4+IElmIEIgaXMgc2VsZWN0ZWQuDQo+ID4+IChBKSB3aWxsIGdldCBu b3RpZmljYXRpb24gd2l0aCB0aGUgd2l0aGRyYXdhbCBjb2RlICc3Jw0KPiA+PiAoQikgd2lsbCBn ZXQgMi4wMQ0KPiA+Pg0KPiA+IFtNZWRdIFllcy4gVGhlIGN1cnJlbnQgdGV4dCBkb2VzIGNhbGxz IG91dCB5b3VyIHN0ZXAgKDEpIGluIDQuNC4yLiBZb3VyDQo+IHN0ZXAgKDIpIGlzIG5vdCBjYWxs ZWQgZXhwbGljaXQgaW4gdGhlIHRleHQgYmVjYXVzZSB0aGVyZSBpcyBubyBjb25mdXNpb24NCj4g YWJvdXQgd2hpY2ggY29kZSB0byByZXR1cm4gd2hlbiBhIHJlcXVlc3QgaXMgYWNjZXB0ZWQgdG8g YmUgaG9ub3JlZC4NCj4gPg0KPiA+IFRoZSB0ZXh0IGZvY3VzZXMgb24gY2FzZXMgd2hpY2ggcmVx dWlyZXMgc3BlY2lmaWMgaGFuZGxpbmc6DQo+ID4gLSBpbmFjdGl2ZSByZXF1ZXN0IGJlY2F1c2Ug b2YgYSBjb25mbGljdA0KPiA+IC0gbXVsdGlwbGUgYWN0aXZlIGNvbmZsaWN0aW5nIHJlcXVlc3Rz DQo+ID4NCj4gPj4gZWxzZSBJZiBCIGlzIG5vdCBzZWxlY3RlZC4NCj4gPj4gKEIpIHdpbGwgZ2V0 IDQuMDkNCj4gPj4NCj4gPiBbTWVkXSBJbiB0aGlzIGNhc2UsIHRoZSByZXNvdXJjZSBpcyBub3Qg Y3JlYXRlZCBhbmQgYXMgc3VjaCBjYXNlIHJldHVybmluZw0KPiBub3RpZmljYXRpb24gc3RhdHVz IGNvZGUgb2YgOCBpcyBub3QgcG9zc2libGUgYXMgeW91IHJpZ2h0ZnVsIHBvaW50ZWQgb3V0Lg0K PiA+IFRoaXMgaXMgd2h5IHdlIHN1Z2dlc3RlZCB0byByZXR1cm4gMi4wMSBmb3IgdGhpcyBjYXNl IHRvbyBzbyB0aGF0IGFuIHVwZGF0ZQ0KPiBvZiB0aGUgc3RhdHVzIGNhbiBiZSBzZW50IHRvIHRo ZSBjbGllbnQgdXBvbiBjaGFuZ2UuDQo+IEkgZG9uJ3QgdGhpbmsgaXQgaXMgbmVlZGVkIHRvIG9i bGlnYXRlIHJldHVybmluZyBvZiAyLjAxLg0KPiBJZiBpdCBpcyBvYnZpb3VzIHRoYXQgdGhlIERP VFMgc2VydmVyIG5lZWQgbm90IHRvIGNyZWF0ZSByZXNvdXJjZSBvZiB0aGUNCj4gY29uZmxpY3Rp bmcgcmVxdWVzdCwgaXQgbWF5IHJldHVybiA0LjA5Lg0KPiBTbywgcmV0dXJuaW5nIG9mIDQuMDkg c2hvdWxkIGJlIGFsbG93ZWQgaW4gdGhpcyBjYXNlLg0KPiBJdCBzaG91bGQgYmUgbGVmdCBhcyBp bXBsZW1lbnRhdGlvbi0gYW5kIGRlcGxveW1lbnQtc3BlY2lmaWMuDQo+IA0KPiANCg0KW01lZF0g RG8geW91IG1lYW4gdGhhdCB0aGUgdGV4dCBzaG91bGQgYmUgbW9kaWZpZWQgdG8gYWxsb3cgZm9y IGJvdGggMi4wMSBvciA0LjA5IHRvIGJlIHJldHVybmVkIGRlcGVuZGluZyBvbiBzb21lIGxvY2Fs IHBvbGljeT8gDQoNCmUuZy4sIA0KDQpPTEQ6DQogICBJZiB0aGUgcmVxdWVzdCBpcyBjb25mbGlj dGluZyB3aXRoIGFuIGV4aXN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdA0KICAgZnJvbSBhIGRpZmZl cmVudCBET1RTIGNsaWVudCwgYW5kIHRoZSBET1RTIHNlcnZlciBkZWNpZGVzIHRvIG1haW50YWlu DQogICB0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUyBzZXJ2ZXIg cmV0dXJucyA0LjA5DQogICAoQ29uZmxpY3QpIFtSRkM4MTMyXSB0byB0aGUgcmVxdWVzdGluZyBE T1RTIGNsaWVudC4gVGhlIHJlc3BvbnNlDQogICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24g Zm9yIGEgRE9UUyBjbGllbnQgdG8gcmVjb2duaXplIHRoZSBzb3VyY2UNCiAgIG9mIHRoZSBjb25m bGljdCBhcyBkZXNjcmliZWQgYmVsb3c6DQoNCk5FVzoNCiAgIElmIHRoZSByZXF1ZXN0IGlzIGNv bmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0DQogICBmcm9tIGEg ZGlmZmVyZW50IERPVFMgY2xpZW50LCB0aGUgRE9UUyBzZXJ2ZXIgbWF5IHJldHVybiAyLjAxIChD cmVhdGVkKQ0KICAgb3IgNC4wOSAoQ29uZmxpY3QpIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMgY2xp ZW50LiBUaGUgcmVzcG9uc2UNCiAgIGluY2x1ZGVzIGVub3VnaCBpbmZvcm1hdGlvbiBmb3IgYSBE T1RTIGNsaWVudCB0byByZWNvZ25pemUgdGhlIHNvdXJjZQ0KICAgb2YgdGhlIGNvbmZsaWN0IGFz IGRlc2NyaWJlZCBiZWxvdzoNCg0KDQo+ID4+IFRpcnUgc2FpZDoNCj4gPj4gICA+IEluIHRoaXMg Y2FzZSwgdGhlIHJlc291cmNlIHNob3VsZCBiZSBjcmVhdGVkIGFuZCB0aGUgc2VydmVyIHNob3Vs ZA0KPiByZXR1cm4NCj4gPj4gc3VjY2VzcyAoMi4wMSBvciAyLjA0KSByZXNwb25zZSBjb2RlIGFs b25nIHdpdGggdGhlIGNvbmZsaWN0LWluZm9ybWF0aW9uLg0KPiA+PiBJbiB0aGlzIHNpdHVhdGlv biwgKEIpIHdpbGwgZ2V0IDIuMDEgb3IgMi4wNCBhbG9uZyB3aXRoIHRoZSByZWplY3RlZCBjb2Rl DQo+ICc4Jw0KPiA+Pg0KPiA+PiAoV2hpY2ggbWl0aWdhdGlvbiByZXF1ZXN0IHdpbGwgYmUgc2Vs ZWN0ZWQgYnkgdGhlIERPVFMgc2VydmVyIGlzDQo+ID4+IGltcGxlbWVudGF0aW9uLSBhbmQgZGVw bG95bWVudC1zcGVjaWZpYy4pDQo+ID4+DQo+ID4+IFRoYW5rcywNCj4gPj4gS2FuYW1lDQo+ID4+ DQo+ID4+DQo+ID4+IE9uIDIwMTgvMDUvMTEgMTU6MDksIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5n ZS5jb20gd3JvdGU6DQo+ID4+PiBIaSBLYW5hbWUsDQo+ID4+Pg0KPiA+Pj4gSWYgdGhlIHNlcnZl ciBkZWNpZGVzIG5vdCB0byBtYWludGFpbiB0aGUgY29uZmxpY3RpbmcgcmVxdWVzdCwgdGhlbiB0 aGUNCj4gPj4gcHJlc2VudCByZXF1ZXN0IHdpbGwgYmUgcHJvY2Vzc2VkIGFzIG5vcm1hbDogdGhh dCBpcyAyLjAxIHdpbGwgYmUgcmV0dXJuZWQNCj4gdG8NCj4gPj4gYWNrIHN1Y2Nlc3NmdWwgaGFu ZGxpbmcuIEEgbm90aWZpY2F0aW9uIHdpbGwgYmUgc2VudCB0byB0aGUgY2xpZW50IG93bmVyDQo+ IG9mDQo+ID4+IHRoZSBjb25mbGljdGluZyByZXF1ZXN0IHRvIG5vdGlmeSB3aXRoZHJhd2FsIChz ZWN0aW9uIDQuNC4yKS4NCj4gPj4+IFRoZSB0ZXh0IGZvY3VzZXMgb24gdGhlIGNhc2UgIiwgYW5k IHRoZSBET1RTIHNlcnZlciBkZWNpZGVzIHRvIG1haW50YWluDQo+IHRoZQ0KPiA+PiBjb25mbGlj dGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QiIGJlY2F1c2UgdGhpcyBpcyB0aGUgb25lIHdoaWNoIHJl cXVpcmVzDQo+ID4+IGFkZGl0aW9uYWwgc3BlY2lmaWNhdGlvbiB2cy4gbm9ybWFsIHJlcXVlc3Qg dGhhdCBpcyBhY2NlcHRlZCBieSBhIHNlcnZlci4NCj4gPj4+IENoZWVycywNCj4gPj4+IE1lZA0K PiA+Pj4NCj4gPj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPj4+PiBEZcKgOiBr YW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50dHY2LmpwXQ0KPiA+Pj4+IEVudm95w6nC oDogbWVyY3JlZGkgOSBtYWkgMjAxOCAxMDo0MQ0KPiA+Pj4+IMOAwqA6IEJPVUNBREFJUiBNb2hh bWVkIElNVC9PTE4NCj4gPj4+PiBDY8KgOiBkb3RzQGlldGYub3JnDQo+ID4+Pj4gT2JqZXTCoDog UmU6IFtEb3RzXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTku dHh0DQo+ID4+Pj4NCj4gPj4+PiBIaSBNZWQsDQo+ID4+Pj4NCj4gPj4+PiBJJ20gT0sgd2l0aCB0 aGlzIGNoYW5nZS4NCj4gPj4+PiBIb3dldmVyLCB0byBiZSBwcmVjaXNlLCBJJ2QgbGlrZSB0byBz dWdnZXN0IHRvIHN0YXRlIGFib3V0IHRoZSBjYXNlIHRoZQ0KPiA+PiBET1RTDQo+ID4+Pj4gc2Vy dmVyIGRlY2lkZXMgTk9UIHRvIG1haW50YWluIGl0Lg0KPiA+Pj4+DQo+ID4+Pj4gTkVXLTI6DQo+ ID4+Pj4gICAgwqDCoCBJZiB0aGUgcmVxdWVzdCBpcyBjb25mbGljdGluZyB3aXRoIGFuIGV4aXN0 aW5nIG1pdGlnYXRpb24gcmVxdWVzdA0KPiA+Pj4+ICAgIMKgwqAgZnJvbSBhIGRpZmZlcmVudCBE T1RTIGNsaWVudCwgYW5kIHRoZSBET1RTIHNlcnZlciBkZWNpZGVzIHRvDQo+IG1haW50YWluDQo+ ID4+Pj4gICAgwqDCoCB0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9U UyBzZXJ2ZXIgcmV0dXJucyAyLjAxDQo+ID4+Pj4gICAgwqDCoCAoQ3JlYXRlZCkgdG8gdGhlIHJl cXVlc3RpbmcgRE9UUyBjbGllbnQuDQo+ID4+Pj4gICAgwqDCoCBPdGhlcndpc2UsIHRoZSBET1RT IHNlcnZlciByZXR1cm5zIDQuMDkgKENvbmZsaWN0KSBbUkZDODEzMl0uDQo+ID4+Pj4gICAgwqDC oCBUaGUgcmVzcG9uc2UgaW5jbHVkZXMgZW5vdWdoIGluZm9ybWF0aW9uIGZvciBhIERPVFMgY2xp ZW50IHRvDQo+ID4+Pj4gICAgwqDCoCByZWNvZ25pemUgdGhlIHNvdXJjZSBvZiB0aGUgY29uZmxp Y3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+Pj4+DQo+ID4+Pj4gdGhhbmtzLA0KPiA+Pj4+IEth bmFtZQ0KPiA+Pj4+DQo+ID4+Pj4gT24gMjAxOC8wNS8wOSAxNDo1MSwgbW9oYW1lZC5ib3VjYWRh aXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPj4+Pj4gSGkgS2FuYW1lLA0KPiA+Pj4+Pg0KPiA+Pj4+ PiBBZnRlciB0aGlua2luZyBhYm91dCB0aGlzLCBJIGRvIHRoaW5rIHRoYXQgeW91IGhhdmUgYSB2 YWxpZCBwb2ludC4gSQ0KPiA+Pj4+IHN1Z2dlc3QgdG8gbWFrZSB0byBtYWtlIHRoaXMgY2hhbmdl IChtYXJrZWQgd2l0aCBeXl5eKQ0KPiA+Pj4+PiBPTEQ6DQo+ID4+Pj4+ICAgICAgIElmIHRoZSBy ZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0 DQo+ID4+Pj4+ICAgICAgIGZyb20gYSBkaWZmZXJlbnQgRE9UUyBjbGllbnQsIGFuZCB0aGUgRE9U UyBzZXJ2ZXIgZGVjaWRlcyB0bw0KPiA+PiBtYWludGFpbg0KPiA+Pj4+PiAgICAgICB0aGUgY29u ZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUyBzZXJ2ZXIgcmV0dXJucyA0LjA5 DQo+ID4+Pj4+ICAgICAgIChDb25mbGljdCkgW1JGQzgxMzJdIHRvIHRoZSByZXF1ZXN0aW5nIERP VFMgY2xpZW50LiAgVGhlIHJlc3BvbnNlDQo+ID4+Pj4+ICAgICAgIGluY2x1ZGVzIGVub3VnaCBp bmZvcm1hdGlvbiBmb3IgYSBET1RTIGNsaWVudCB0byByZWNvZ25pemUgdGhlDQo+ID4+IHNvdXJj ZQ0KPiA+Pj4+PiAgICAgICBvZiB0aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+ Pj4+Pg0KPiA+Pj4+PiBORVc6DQo+ID4+Pj4+ICAgICAgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZs aWN0aW5nIHdpdGggYW4gZXhpc3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0DQo+ID4+Pj4+ICAgICAg IGZyb20gYSBkaWZmZXJlbnQgRE9UUyBjbGllbnQsIGFuZCB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRl cyB0bw0KPiA+PiBtYWludGFpbg0KPiA+Pj4+PiAgICAgICB0aGUgY29uZmxpY3RpbmcgbWl0aWdh dGlvbiByZXF1ZXN0LCB0aGUgRE9UUyBzZXJ2ZXIgcmV0dXJucyAyLjAxDQo+ID4+Pj4+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIF5eXl4NCj4gPj4+Pj4gICAgICAgKENyZWF0ZWQpIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMg Y2xpZW50LiAgVGhlIHJlc3BvbnNlXg0KPiA+Pj4+PiAgICAgICBeXl5eXl5eXg0KPiA+Pj4+PiAg ICAgICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQgdG8gcmVj b2duaXplIHRoZQ0KPiA+PiBzb3VyY2UNCj4gPj4+Pj4gICAgICAgb2YgdGhlIGNvbmZsaWN0IGFz IGRlc2NyaWJlZCBiZWxvdzoNCj4gPj4+Pj4NCj4gPj4+Pj4gQ2hlZXJzLA0KPiA+Pj4+PiBNZWQN Cj4gPj4+Pj4NCj4gPj4+Pj4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+Pj4+Pj4g RGXCoDogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZQ0K PiA+Pj4+Pj4gbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbQ0KPiA+Pj4+Pj4gRW52b3nDqcKg OiBsdW5kaSA3IG1haSAyMDE4IDA4OjM4DQo+ID4+Pj4+PiDDgMKgOiBrYW5hbWUgbmlzaGl6dWth OyBkb3RzQGlldGYub3JnDQo+ID4+Pj4+PiBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBBY3Rpb246 IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPj4+Pj4+DQo+ID4+Pj4+ PiBSZS0sDQo+ID4+Pj4+Pg0KPiA+Pj4+Pj4gQWdyZWUgdGhhdCB0aGUgY29kZXMgYXJlIG5vdCB0 aGUgc2FtZSwgYnV0IGFsdGVybmF0aXZlcyBvbmVzIGFzDQo+ID4+IHN1bW1hcml6ZWQNCj4gPj4+ Pj4+IGhlcmU6DQo+ID4+Pj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9k b3RzL2hBM01MS2xrWEZpbXBBbjVLU1lUYXlhVmtqQS4NCj4gPj4+Pj4+IENoZWVycywNCj4gPj4+ Pj4+IE1lZA0KPiA+Pj4+Pj4NCj4gPj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0N Cj4gPj4+Pj4+PiBEZcKgOiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50dHY2Lmpw XQ0KPiA+Pj4+Pj4+IEVudm95w6nCoDogbHVuZGkgNyBtYWkgMjAxOCAwODoyMA0KPiA+Pj4+Pj4+ IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE47IGRvdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+ PiBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwt Y2hhbm5lbC0xOS50eHQNCj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+IEhpIE1lZCwNCj4gPj4+Pj4+Pg0K PiA+Pj4+Pj4+IEkndmUgcmVhZCB0aGUgdGhyZWFkLg0KPiA+Pj4+Pj4+IGFuZCB0aGUgY29kZSAn OCcgb2YgdGhlIHRocmVhZCBpcyBkaWZmZXJlbnQgZnJvbSB0aGUgY29kZSAnOCcgb2YgdGhlDQo+ ID4+Pj4+PiBjdXJyZW50DQo+ID4+Pj4+Pj4gZHJhZnQuDQo+ID4+Pj4+Pj4NCj4gPj4+Pj4+PiB0 aGV5J2QgYmVlbiBkaXNjdXNzaW5nIHRoZSA3LDggYW5kIDkgYmFzZWQgb24gdGhpcyBkZWZpbml0 aW9uLCByaWdodD8NCj4gPj4+Pj4+Pg0KPiBodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2Fy Y2gvbXNnL2RvdHMvN3psanpOOG55Y1pYN0U3Z2hnazF1eDMyTWtNDQo+ID4+Pj4+Pj4gPT0NCj4g Pj4+Pj4+PiA3IHwgRE9UUyBTZXJ2ZXIgaGFzIGRldGVjdGVkIGNvbmZsaWN0aW5nIG1pdGlnYXRp b24gcmVxdWVzdHMgZnJvbQ0KPiA+Pj4+IGRpZmZlcmVudA0KPiA+Pj4+Pj4+IERPVFMgY2xpZW50 cy7CoCBUaGlzIG1pdGlnYXRpb24gcmVxdWVzdCBpcyBjdXJyZW50bHkgaW5hY3RpdmUgdW50aWwN Cj4gdGhlDQo+ID4+Pj4+Pj4gY29uZmxpY3RzIGFyZSByZXNvbHZlZC4gQW5vdGhlciBtaXRpZ2F0 aW9uIHJlcXVlc3QgaXMgYWN0aXZlLg0KPiA+Pj4+Pj4+DQo+ID4+Pj4+Pj4gOCB8IERPVFMgU2Vy dmVyIGhhcyBkZXRlY3RlZCBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3RzIGZyb20NCj4g Pj4+PiBkaWZmZXJlbnQNCj4gPj4+Pj4+PiBET1RTIGNsaWVudHMuwqAgVGhpcyBtaXRpZ2F0aW9u IHJlcXVlc3QgaXMgY3VycmVudGx5IGFjdGl2ZS4NCj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+IDkgfCBE T1RTIFNlcnZlciBoYXMgZGV0ZWN0ZWQgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0cyBm cm9tDQo+ID4+Pj4gZGlmZmVyZW50DQo+ID4+Pj4+Pj4gRE9UUyBjbGllbnRzLsKgIEFsbCBjb25m bGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3RzIGFyZSBpbmFjdGl2ZS4NCj4gPj4+Pj4+PiA9PQ0K PiA+Pj4+Pj4+DQo+ID4+Pj4+Pj4gS2FuYW1lDQo+ID4+Pj4+Pj4NCj4gPj4+Pj4+Pg0KPiA+Pj4+ Pj4+IE9uIDIwMTgvMDUvMDcgMTU6MTIsIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3Jv dGU6DQo+ID4+Pj4+Pj4+IEhpIEthbmFtZSwNCj4gPj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4gUGxlYXNl IGNoZWNrDQo+ID4+Pj4+Pj4NCj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21z Zy9kb3RzL3pfY1pSOV91MjczSHpDOW8wSXk5RmVRWjBKbw0KPiA+Pj4+Pj4gYWJvdXQNCj4gPj4+ Pj4+PiB0aGUgcmF0aW9uYWxlIGZvciBhbGxvd2luZyB0byByZXR1cm4gY29kZSAnOCcgZXZlbiBp biBhIG5vdGlmaWNhdGlvbg0KPiA+Pj4+Pj4gbWVzc2FnZS4NCj4gPj4+Pj4+PiBUaGUgaW50ZW50 IHdhcyB0byBoYXZlIGNvZGUgJzgnIGFzIGEgdHJhbnNpdGlvbiBzdGF0ZS4NCj4gPj4+Pj4+Pj4g Q2hlZXJzLA0KPiA+Pj4+Pj4+PiBNZWQNCj4gPj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+IC0tLS0tTWVz c2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+Pj4+Pj4+Pj4gRGXCoDoga2FuYW1lIG5pc2hpenVrYSBb bWFpbHRvOmthbmFtZUBudHR2Ni5qcF0NCj4gPj4+Pj4+Pj4+IEVudm95w6nCoDogbWVyY3JlZGkg MiBtYWkgMjAxOCAwMjo0OQ0KPiA+Pj4+Pj4+Pj4gw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1U L09MTjsgZG90c0BpZXRmLm9yZw0KPiA+Pj4+Pj4+Pj4gT2JqZXTCoDogUmU6IFtEb3RzXSBJLUQg QWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtDQo+IDE5LnR4dA0KPiA+Pj4+ Pj4+Pj4NCj4gPj4+Pj4+Pj4+IEhpLA0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+IEknZCBsaWtl IHRvIGFzayBvbmUgY2xhcmlmaWNhdGlvbiBxdWVzdGlvbiBhYm91dCBzdGF0dXMgY29kZSA4Og0K PiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+ICAgICAgwqDCoCBvwqAgQSBub3RpZmljYXRpb24gbWVz c2FnZSB3aXRoICdzdGF0dXMnIGNvZGUgc2V0IHRvICc4DQo+IChBdHRhY2sNCj4gPj4+Pj4+Pj4+ ICAgICAgwqDCoMKgwqDCoCBtaXRpZ2F0aW9uIGlzIHJlamVjdGVkKScgYW5kICdjb25mbGljdC1z dGF0dXMnIHNldCB0bw0KPiAnMScNCj4gPj4gaXMNCj4gPj4+Pj4+IHNlbnQNCj4gPj4+Pj4+Pj4+ ICAgICAgwqDCoMKgwqDCoCB0byBhIERPVFMgY2xpZW50IHRvIGluZGljYXRlIHRoYXQgdGhpcyBt aXRpZ2F0aW9uDQo+IHJlcXVlc3QNCj4gPj4gaXMNCj4gPj4+Pj4+Pj4+ICAgICAgwqDCoMKgwqDC oCByZWplY3RlZCBiZWNhdXNlIGEgY29uZmxpY3QgaXMgZGV0ZWN0ZWQuDQo+ID4+Pj4+Pj4+Pg0K PiA+Pj4+Pj4+Pj4gSWYgYSBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgcmVqZWN0ZWQgZHVlIHRvIGEg Y29uZmxpY3QsIGl0IGlzDQo+IHJlamVjdGVkDQo+ID4+Pj4gYXQNCj4gPj4+Pj4+Pj4+IFBVVCg0 LjA5KENvbmZsaWN0KSksIHNvIG5vIHJlc291cmNlIHdpbGwgYmUgY3JlYXRlZC4NCj4gPj4+Pj4+ Pj4+IFNvIGl0IGxvb2tzIHRoZXJlIGlzIG5vIGNoYW5jZSB0byByZXR1cm4gJzggKEF0dGFjayBt aXRpZ2F0aW9uIGlzDQo+ID4+Pj4+Pj4gcmVqZWN0ZWQpJy4NCj4gPj4+Pj4+Pj4+IHRoYW5rcywN Cj4gPj4+Pj4+Pj4+IEthbmFtZQ0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+IE9uIDIwMTgvMDQv MTAgMjI6NDcsIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3JvdGU6DQo+ID4+Pj4+Pj4+ Pj4gUmUtLA0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gVGhpcyB2ZXJzaW9uIGFkZHJlc3Nl cyB0aGUgY29tbWVudHMgcmFpc2VkIGR1cmluZyB0aGUgV0dMQywgaW4NCj4gPj4+Pj4+PiBwYXJ0 aWN1bGFyOg0KPiA+Pj4+Pj4+Pj4+IC0gKENsYXJpZmljYXRpb24pIEluZGljYXRlIHRoYXQgb25s eSBvbmUgaG9wLWxpbWl0IGlzIGluY2x1ZGVkDQo+ID4+Pj4+Pj4+Pj4gLSBTcGVjaWZ5IHRoZSBs b29wIGRpYWdub3N0aWMgcGF5bG9hZA0KPiA+Pj4+Pj4+Pj4+IC0gKENsYXJpZmljYXRpb24pIElu ZGljYXRlIGV4cGxpY2l0bHkgdGhhdCBHRVQgbWVzc2FnZXMgd2l0aCAnc2lkJw0KPiA+PiBhcmUN Cj4gPj4+Pj4+Pj4+IGFsbG93ZWQNCj4gPj4+Pj4+Pj4+PiAtIFVwZGF0ZSB0aGUgcmVkaXJlY3Qg YmVoYXZpb3IuDQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+PiBDaGVlcnMsDQo+ID4+Pj4+Pj4+ Pj4gTWVkDQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2lu ZS0tLS0tDQo+ID4+Pj4+Pj4+Pj4+IERlwqA6IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0 Zi5vcmddIERlIGxhIHBhcnQgZGUgaW50ZXJuZXQtDQo+ID4+Pj4+Pj4+Pj4+IGRyYWZ0c0BpZXRm Lm9yZw0KPiA+Pj4+Pj4+Pj4+PiBFbnZvecOpwqA6IG1hcmRpIDEwIGF2cmlsIDIwMTggMTU6NDAN Cj4gPj4+Pj4+Pj4+Pj4gw4DCoDogaS1kLWFubm91bmNlQGlldGYub3JnDQo+ID4+Pj4+Pj4+Pj4+ IENjwqA6IGRvdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+Pj4+Pj4gT2JqZXTCoDogW0RvdHNdIEktRCBB Y3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPj4+Pj4+Pj4+ Pj4NCj4gPj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4gQSBOZXcgSW50ZXJuZXQtRHJhZnQgaXMg YXZhaWxhYmxlIGZyb20gdGhlIG9uLWxpbmUgSW50ZXJuZXQtDQo+IERyYWZ0cw0KPiA+Pj4+Pj4+ Pj4+PiBkaXJlY3Rvcmllcy4NCj4gPj4+Pj4+Pj4+Pj4gVGhpcyBkcmFmdCBpcyBhIHdvcmsgaXRl bSBvZiB0aGUgRERvUyBPcGVuIFRocmVhdCBTaWduYWxpbmcgV0cgb2YNCj4gPj4gdGhlDQo+ID4+ Pj4+Pj4+PiBJRVRGLg0KPiA+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgVGl0bGUgICAgICAgICAg IDogRGlzdHJpYnV0ZWQgRGVuaWFsLW9mLVNlcnZpY2UgT3Blbg0KPiA+Pj4+IFRocmVhdA0KPiA+ Pj4+Pj4+Pj4gU2lnbmFsaW5nDQo+ID4+Pj4+Pj4+Pj4+IChET1RTKSBTaWduYWwgQ2hhbm5lbCBT cGVjaWZpY2F0aW9uDQo+ID4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICBBdXRob3JzICAgICAgICAg OiBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4gPj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIE1vaGFtZWQgQm91Y2FkYWlyDQo+ID4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBQcmFzaGFudGggUGF0aWwNCj4gPj4+Pj4+Pj4+Pj4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIEFuZHJldyBNb3J0ZW5zZW4NCj4gPj4+Pj4+Pj4+Pj4gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIE5payBUZWFndWUNCj4gPj4+Pj4+Pj4+Pj4gCUZp bGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4g Pj4+Pj4+Pj4+Pj4gCVBhZ2VzICAgICAgICAgICA6IDg2DQo+ID4+Pj4+Pj4+Pj4+IAlEYXRlICAg ICAgICAgICAgOiAyMDE4LTA0LTEwDQo+ID4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+IEFic3Ry YWN0Og0KPiA+Pj4+Pj4+Pj4+PiAgICAgICAgIFRoaXMgZG9jdW1lbnQgc3BlY2lmaWVzIHRoZSBE T1RTIHNpZ25hbCBjaGFubmVsLCBhDQo+IHByb3RvY29sDQo+ID4+IGZvcg0KPiA+Pj4+Pj4+Pj4+ PiAgICAgICAgIHNpZ25hbGluZyB0aGUgbmVlZCBmb3IgcHJvdGVjdGlvbiBhZ2FpbnN0IERpc3Ry aWJ1dGVkDQo+ID4+IERlbmlhbC0NCj4gPj4+PiBvZi0NCj4gPj4+Pj4+Pj4+Pj4gICAgICAgICBT ZXJ2aWNlIChERG9TKSBhdHRhY2tzIHRvIGEgc2VydmVyIGNhcGFibGUgb2YgZW5hYmxpbmcNCj4g Pj4gbmV0d29yaw0KPiA+Pj4+Pj4+Pj4+PiAgICAgICAgIHRyYWZmaWMgbWl0aWdhdGlvbiBvbiBi ZWhhbGYgb2YgdGhlIHJlcXVlc3RpbmcgY2xpZW50Lg0KPiA+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+ Pj4+PiAgICAgICAgIEEgY29tcGFuaW9uIGRvY3VtZW50IGRlZmluZXMgdGhlIERPVFMgZGF0YSBj aGFubmVsLCBhDQo+ID4+IHNlcGFyYXRlDQo+ID4+Pj4+Pj4+Pj4+ICAgICAgICAgcmVsaWFibGUg Y29tbXVuaWNhdGlvbiBsYXllciBmb3IgRE9UUyBtYW5hZ2VtZW50IGFuZA0KPiA+Pj4+Pj4gY29u ZmlndXJhdGlvbg0KPiA+Pj4+Pj4+Pj4+PiAgICAgICAgIHB1cnBvc2VzLg0KPiA+Pj4+Pj4+Pj4+ Pg0KPiA+Pj4+Pj4+Pj4+PiBFZGl0b3JpYWwgTm90ZSAoVG8gYmUgcmVtb3ZlZCBieSBSRkMgRWRp dG9yKQ0KPiA+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+PiAgICAgICAgIFBsZWFzZSB1cGRhdGUg dGhlc2Ugc3RhdGVtZW50cyB3aXRoIHRoZSBSRkMgbnVtYmVyIHRvIGJlDQo+ID4+Pj4gYXNzaWdu ZWQNCj4gPj4+Pj4+PiB0bw0KPiA+Pj4+Pj4+Pj4+PiAgICAgICAgIHRoaXMgZG9jdW1lbnQ6DQo+ ID4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+ICAgICAgICAgbyAgIlRoaXMgdmVyc2lvbiBvZiB0 aGlzIFlBTkcgbW9kdWxlIGlzIHBhcnQgb2YgUkZDDQo+IFhYWFg7Ig0KPiA+Pj4+Pj4+Pj4+Pg0K PiA+Pj4+Pj4+Pj4+PiAgICAgICAgIG8gICJSRkMgWFhYWDogRGlzdHJpYnV0ZWQgRGVuaWFsLW9m LVNlcnZpY2UgT3BlbiBUaHJlYXQNCj4gPj4+PiBTaWduYWxpbmcNCj4gPj4+Pj4+Pj4+Pj4gICAg ICAgICAgICAoRE9UUykgU2lnbmFsIENoYW5uZWwgU3BlY2lmaWNhdGlvbiI7DQo+ID4+Pj4+Pj4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4+ICAgICAgICAgbyAgInwgW1JGQ1hYWFhdIHwiDQo+ID4+Pj4+Pj4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4+ICAgICAgICAgbyAgcmVmZXJlbmNlOiBSRkMgWFhYWA0KPiA+Pj4+ Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+PiAgICAgICAgIFBsZWFzZSB1cGRhdGUgVEJEIHN0YXRlbWVu dHMgd2l0aCB0aGUgcG9ydCBudW1iZXIgdG8gYmUNCj4gPj4+PiBhc3NpZ25lZA0KPiA+Pj4+Pj4g dG8NCj4gPj4+Pj4+Pj4+Pj4gICAgICAgICBET1RTIFNpZ25hbCBDaGFubmVsIFByb3RvY29sLg0K PiA+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+PiAgICAgICAgIEFsc28sIHBsZWFzZSB1cGRhdGUg dGhlICJyZXZpc2lvbiIgZGF0ZSBvZiB0aGUgWUFORw0KPiBtb2R1bGUuDQo+ID4+Pj4+Pj4+Pj4+ DQo+ID4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+IFRoZSBJRVRGIGRhdGF0cmFja2VyIHN0YXR1 cyBwYWdlIGZvciB0aGlzIGRyYWZ0IGlzOg0KPiA+Pj4+Pj4+Pj4+PiBodHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwvDQo+ID4+Pj4+ Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+IFRoZXJlIGFyZSBhbHNvIGh0bWxpemVkIHZlcnNpb25zIGF2 YWlsYWJsZSBhdDoNCj4gPj4+Pj4+Pj4+Pj4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2Ry YWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOQ0KPiA+Pj4+Pj4+Pj4+PiBodHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtDQo+ID4+ IGNoYW5uZWwtDQo+ID4+Pj4+PiAxOQ0KPiA+Pj4+Pj4+Pj4+PiBBIGRpZmYgZnJvbSB0aGUgcHJl dmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6DQo+ID4+Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3 LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtDQo+ IDE5DQo+ID4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+IFBsZWFzZSBu b3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9m DQo+ID4+Pj4+Pj4+PiBzdWJtaXNzaW9uDQo+ID4+Pj4+Pj4+Pj4+IHVudGlsIHRoZSBodG1saXpl ZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQNCj4gPj4gdG9vbHMuaWV0Zi5vcmcu DQo+ID4+Pj4+Pj4+Pj4+IEludGVybmV0LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUgYnkgYW5v bnltb3VzIEZUUCBhdDoNCj4gPj4+Pj4+Pj4+Pj4gZnRwOi8vZnRwLmlldGYub3JnL2ludGVybmV0 LWRyYWZ0cy8NCj4gPj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4gX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+Pj4+Pj4+Pj4gRG90cyBtYWlsaW5n IGxpc3QNCj4gPj4+Pj4+Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+Pj4+Pj4+Pj4+PiBodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPj4+Pj4+Pj4+PiBfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+Pj4+Pj4+Pj4+IERv dHMgbWFpbGluZyBsaXN0DQo+ID4+Pj4+Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+Pj4+Pj4+Pj4+ IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+Pj4+Pj4+PiBf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+Pj4+Pj4+ PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+Pj4+Pj4+PiBEb3RzQGlldGYub3JnDQo+ID4+Pj4+Pj4+ IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+Pj4+Pj4gX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+Pj4+IERv dHMgbWFpbGluZyBsaXN0DQo+ID4+Pj4+PiBEb3RzQGlldGYub3JnDQo+ID4+Pj4+PiBodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPj4+Pj4gX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+Pj4gRG90cyBtYWlsaW5n IGxpc3QNCj4gPj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fDQo+ID4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+Pj4gRG90 c0BpZXRmLm9yZw0KPiA+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9k b3RzDQo+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N Cj4gPiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+IERvdHNAaWV0Zi5vcmcNCj4gPiBodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCg0K From nobody Tue May 15 06:52:34 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC91012D954 for ; Tue, 15 May 2018 06:52:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AauYBKADYnw0 for ; Tue, 15 May 2018 06:52:31 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 80FBF127077 for ; Tue, 15 May 2018 06:52:31 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fIaNQ-0008SP-Sw; Tue, 15 May 2018 14:52:29 +0100 From: "Jon Shallow" To: , References: <017601d3ec4a$d50620c0$7f126240$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1B46E@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF1B46E@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Date: Tue, 15 May 2018 14:52:29 +0100 Message-ID: <01a401d3ec53$f6ff6610$e4fe3230$@jpshallow.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_01A5_01D3EC5C.58C3CE10" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQH2vZFs0zYut37SEz72St6q7ZhqZQHaj+Woo9xV3bA= Content-Language: en-gb Archived-At: Subject: Re: [Dots] Data Channel Fragment handling nits X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 May 2018 13:52:34 -0000 This is a multipart message in MIME format. ------=_NextPart_000_01A5_01D3EC5C.58C3CE10 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Med, =20 See inline. =20 Regards =20 Jon =20 From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of ietf-supjps-mohamed.boucadair@orange.com Sent: 15 May 2018 14:20 To: Jon Shallow; dots@ietf.org Subject: Re: [Dots] Data Channel Fragment handling nits =20 Hi Jon,=20 =20 Please see inline.=20 =20 Cheers, Med =20 De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow Envoy=E9 : mardi 15 mai 2018 14:47 =C0 : dots@ietf.org Objet : [Dots] Data Channel Fragment handling nits =20 Hi there, =20 I am beginning to with that I had not raised how to handle fragments, = but it was keyed off my naive interpretation of the handling of IPv6 protocols = by netmod-acl! =20 Making this changes has raised some inconsistencies in the draft data channel document. Searching on fragment reveals v4-fragment and v6-fragment which are no longer used. =20 [Med] Hmm. These are related to the capabilities of a DOTS server to = enforce fragment-based filtering. See Figure 23 for an example.=20 [Jon] I agree =96 Hmm. However the v4-fragment is alluding to = =93flags=94 being supported and v6-fragment to =93fragment=94 being supported =96 not that intuitive! They really should be an identical name match. There is a = part of me that would like to go back to as it was now that we know that we = have to support =93fragment=94 for IPv6 no matter what; unless netmod-acl = comes up with something sensible (unlikely). If we do go back, then do we = actually need both v4-fragment and v6-fragment and just use fragment (in the same = way that length is common)? ~Jon =20 The YANG bits type conversions to JSON in the Appendix A are wrong =96 I initiated this error. [Med] Good catch. Fixed.=20 =20 "flags": { "more": 1 } Should be=20 "flags": { =93more=94} =20 And "flags": { "more": 0 } Should be=20 "flags": { =93=94} =20 =20 Regards =20 Jon ------=_NextPart_000_01A5_01D3EC5C.58C3CE10 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi Med,

 

See = inline.

 

Regards

 

Jon

 

From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On = Behalf Of ietf-supjps-mohamed.boucadair@orange.com
Sent: = 15 May 2018 14:20
To: Jon Shallow; = dots@ietf.org
Subject: Re: [Dots] Data Channel Fragment = handling nits

 

Hi Jon,

 

Please see inline.

 

Cheers,

Med

 

De : Dots [mailto:dots-bounces@ietf.org] De la part de = Jon Shallow
Envoy=E9 : mardi 15 mai 2018 = 14:47
=C0 : dots@ietf.org
Objet : [Dots] = Data Channel Fragment handling nits

 

Hi there,

 

I am = beginning to with that I had not raised how to handle fragments, but it = was keyed off my naive interpretation of the handling of IPv6 protocols = by netmod-acl!

 

Making this = changes has raised some inconsistencies in the draft data channel = document.

Searching on fragment = reveals v4-fragment and v6-fragment which are no longer = used.

 

[Med] Hmm. These are related to the capabilities =
of a DOTS server to enforce fragment-based filtering. See Figure 23 for an example. 
[Jon] I agree – Hmm.=A0 However the v4-fragment is alluding to =
“flags” being supported and v6-fragment to =
“fragment” being supported – not that intuitive!=A0 =
They really should be an identical name match.=A0 There is a part of me =
that would like to go back to as it was now that we know that we have to =
support “fragment” for IPv6 no matter what; unless =
netmod-acl comes up with something sensible (unlikely).=A0 If we do go =
back, then do we actually need both v4-fragment and v6-fragment and just =
use fragment (in the same way that length is =
common)?
~Jon

 

The YANG = bits type conversions to JSON in the Appendix A are wrong – I = initiated this error.

[Med] = Good catch. Fixed.

 

         &= nbsp;           = "flags": {

          =             &= nbsp;"more": 1

         &= nbsp;           = }

Should be

         &= nbsp;           &q= uot;flags": { “more”}

 

And

         &= nbsp;           = "flags": {

          =             &= nbsp;"more": 0

         &= nbsp;           = }

Should be

         &= nbsp;           &q= uot;flags": { “”}

 

 

Regards

 

Jon

------=_NextPart_000_01A5_01D3EC5C.58C3CE10-- From nobody Tue May 15 07:07:01 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 617A112DA3D for ; Tue, 15 May 2018 07:07:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.61 X-Spam-Level: X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=thescout.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kuP6vbDdGlWP for ; Tue, 15 May 2018 07:06:58 -0700 (PDT) Received: from mx0a-00196b01.pphosted.com (mx0a-00196b01.pphosted.com [67.231.149.170]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0663212DA28 for ; Tue, 15 May 2018 07:06:58 -0700 (PDT) Received: from pps.filterd (m0072398.ppops.net [127.0.0.1]) by mx0a-00196b01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w4FE20Ei001180 for ; Tue, 15 May 2018 10:06:57 -0400 Received: from nam02-sn1-obe.outbound.protection.outlook.com (mail-sn1nam02lp0018.outbound.protection.outlook.com [216.32.180.18]) by mx0a-00196b01.pphosted.com with ESMTP id 2hwvdr3nkw-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT) for ; Tue, 15 May 2018 10:06:57 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thescout.onmicrosoft.com; s=selector1-arbor-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=W9HrKogzxCTXFiIsj1mZ6/s/LjM7wRchIw4yT2u2ukQ=; b=msj1fznZU1Ua3264kahggrLAukIcCrg3ojoO6bldpIW4Cewi+Z9lIPXEU5j6W4IRHywtPHAw58pnbOSnfEYy0wbwN7WwgPIuxx49WnA90+b6RD4rEmFocDHB9xTkC3mgMabHagbudIpyvTADLBxsx5Kb68b1SjARCootATf2E3w= Received: from [172.19.254.101] (184.82.233.145) by CY4PR0101MB3176.prod.exchangelabs.com (2603:10b6:910:3f::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.755.16; Tue, 15 May 2018 14:06:48 +0000 From: "Roland Dobbins" To: dots@ietf.org Date: Tue, 15 May 2018 21:06:32 +0700 X-Mailer: MailMate (1.11.2r5479) Message-ID: In-Reply-To: <01a401d3ec53$f6ff6610$e4fe3230$@jpshallow.com> References: <017601d3ec4a$d50620c0$7f126240$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1B46E@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <01a401d3ec53$f6ff6610$e4fe3230$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain X-Originating-IP: [184.82.233.145] X-ClientProxiedBy: SG2PR02CA0050.apcprd02.prod.outlook.com (2603:1096:4:54::14) To CY4PR0101MB3176.prod.exchangelabs.com (2603:10b6:910:3f::24) X-MS-PublicTrafficType: Email X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:CY4PR0101MB3176; X-Microsoft-Exchange-Diagnostics: 1; CY4PR0101MB3176; 3:KBgohIjuCQ10Coo4wPl/jmWXoQ6xiv98yBG7P+n2uv2xiAlZw8SAFExcQ9Dur4SS9TiDeXwMDWW6FWsp/j1VkcqweEJNHKaNF3SdATqq/h3TnyucNqWEwhXPHvjpx0xW20Lb1vSpQzByNMqMd03EF6pF4peEmmkDFmt+BKt0aLQ7TeHN1s1DQW2x862heDB3AztbHlQL+2qki9bUFe6cZDzpmFHeEXRmOE1Lg+T0Kq+PWpZ/wlqD3IBxbuFNqXpd; 25:XUn00zIEhnUWlc3zv6GqJvBb8blyJXc8VbtNGBk3/7ajeX9Si5BTFSgblROx2EmBcILVl+6BgG15hrCfhoNaqkczMzPzwy6i1zceXpm2SZ1CHAltuKrH4QYMDGZWvS0AioR5klCgB+jDwBqfutVQJ5S9Oq1TfBp85xbFxGgFm2iWozVO3f+uG0if6NwZ2do5jFrj1iHR6gad49ZnhWDQztbANruqLbNO4pJOOg0r8j7v09IT/4fM5hu0VY8v2IoA/QAOIq6fBbscqibcB3TOwOmsjhLhUE7UgAA2cGhd70H8LUSxHrfp8rFcIUH6rLtP+NabPatHEf7DSfRApi1RmA==; 31:3SaQbkBQ37JwfEXcZOPsP/ASsOwegFewcOPU8zvWjzugc6KdJw+0sBXdO+cU5etrnlhRd95qVgEsOCdwUzvdMoAEUoFosTGtKhchKWXtQFInCwh1VjyVlxSicVj0fEJ7kDDOb+57clhGwqRRpyr3Oi/DM5ZNzexhPYhVhv6rRNlIMf8xJbS4LP31xVKxDX4zVngYbkUYazrFj5EvogDmV2YNoqa4sXkvV9/GKe/Kcx0= X-MS-TrafficTypeDiagnostic: CY4PR0101MB3176: X-Microsoft-Exchange-Diagnostics: 1; CY4PR0101MB3176; 20:10A+QpOLSInqFdxU7sWunrIxL8oXrkKUyUh0rSsv9+vMPQSWPTIn9cUun6PtpevtSX6AAqvzd+xeAnlZ4YZEtZtHmRiua5l5gPRFBd2rIehgt5HpexJoSAOG9hJT6Uf+V6fCUvbqNo600O5D9NUcseB6JCZ+y8gaqvZObmv5AZoPMWnEM4wqw037POJvUXTndoDfnyI3yf3nNK/hU/iPfyw9RdSu5/yc4OCa9zFHLfZW+98S0wzuugE920KAGvkEB3u0VrZgRTntsPKULfW5SfQDXSh5gqrVXAxxR5a43Adf4XCeD6e9qyb0kYkEgzEtxpupt1gL9tDnmLNw3Afb+g==; 4:l/exbL2Y4ady69WHieZthIX9OjOhrK4XwWqF/524kzmbA0K5nNUJIfodze+LuqEM5j4csHDwA9FE5NDRJiI31EXKzr0l4YyvmcbQhTSbLLnrbuECo5K/ah6XxaFqwIh05cHmcaLb33uXsZSU2dWwTO8WRAetZiisNp1T+U/uiDDtj9SM9FTHEh0Bjeqg63hIM/FT56FaAgwg3qWJhjTn7z+ZxdkHNIu0x9DB3QUx6BQSQluylUj1DhBxnGD22tdO62b2n7pfij31GbNgXsRT1Q== X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-MS-Exchange-SenderADCheck: 1 X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(8121501046)(5005006)(93006095)(93001095)(3002001)(10201501046)(3231254)(944501410)(52105095)(149027)(150027)(6041310)(20161123560045)(20161123564045)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:CY4PR0101MB3176; BCL:0; PCL:0; RULEID:; SRVR:CY4PR0101MB3176; X-Forefront-PRVS: 0673F5BE31 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(6049001)(366004)(396003)(376002)(346002)(39850400004)(39380400002)(199004)(189003)(48376002)(2616005)(956004)(50466002)(476003)(446003)(2351001)(11346002)(486006)(68736007)(7736002)(305945005)(33656002)(66066001)(2906002)(50226002)(8676002)(81156014)(81166006)(82746002)(16576012)(36756003)(47776003)(8936002)(6116002)(6666003)(3846002)(6916009)(16586007)(316002)(83716003)(53546011)(106356001)(105586002)(6486002)(6246003)(97736004)(77096007)(16526019)(26005)(229853002)(186003)(478600001)(25786009)(5660300001)(86362001)(2361001)(53936002)(386003)(76176011)(52116002)(51416003); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR0101MB3176; H:[172.19.254.101]; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; Received-SPF: None (protection.outlook.com: arbor.net does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; CY4PR0101MB3176; 23:YU2CInZDM838yIgsn3O+7gG0o90kmBj3FXIaxku?= =?us-ascii?Q?ilTEb7gI6RqLBXQXC8nKOsCZkJrcmWI7XxmC2bCRkC4yMj9RBs0gYkTebXlR?= =?us-ascii?Q?VuZhZdZJsqo5ZPk1vBvuh3jbfyaS/42NdsWONC98ms24I49ztigEV+MKFOH8?= =?us-ascii?Q?fph8lYYrcPDJRdxlNB0yPw48Arhp2DJU7djFQ4BqNQyeh9u5NFaHsZdz6oj8?= =?us-ascii?Q?DFmPiTDMsYqLz3lpVxLndaFCxl/R25zXzFoqpMxcRNi6Gdpjd6mI/Mbq/R+w?= =?us-ascii?Q?ILQXWy6Oye8Bzf3ksQIhC1/lsV6+pGck5wkSigoMFXp1I7f5wSPN7ChActM0?= =?us-ascii?Q?g+NXb2JlL13oclPDTEUBCDybgmmZhT+G1qZMaGrUacZpgXONy31l1L37GoRr?= =?us-ascii?Q?HC0OI9mGALUjFAWDIEBIlz3tA7RvvMbE8ypaNkXqqLRs9b0QMIIDyQ15MAGL?= =?us-ascii?Q?qymZCX1qCss1gfP05Y/CZz5pZrPtxOBjuwN9i8zspljYByOMW7yNENgEjVxw?= =?us-ascii?Q?lbVi420CgoSiTBkMbyrCK9GjI93xcka6JtoVU5VZA/I++o5/1dV6mOvhpaJH?= =?us-ascii?Q?guaMm+I0M20PUOWk7xVSoLJsg5+l1S1PDwduaXvouaZF1jVP/Z43K5g0WXov?= =?us-ascii?Q?ScxCros20kM3CqLlgwMbcBw9fK52z9czq5bhFFGE1E3CsxD0eYP/XiDEBGAk?= =?us-ascii?Q?wibGsEYEjqctFVHZbzVio1Xp5H+UTL3Mczhic7Opfz5pXQ7bZB/RvfotCj5z?= =?us-ascii?Q?jJQtFGvfFpUy572ETOyhFvrA6gG0ZWpoymGPrzWZSNoPkz9IoFcZgjK6/8xs?= =?us-ascii?Q?vAkeMUyAEuglZrBx8Kj+xU4ugTpAdgCyBqN2oHd5A7kVH7yuIwOKxLMiHh4s?= =?us-ascii?Q?ZxfX6mVcobcDGHGa8+p+Us053GWcAXFVivVOnlnz0oN+Hv79IlrLtHCGLPFb?= =?us-ascii?Q?jgsUuMZsQriuYkZKGJURUWyaX/wmjMxj7YIu+8c6fzgDWP8fU72ePKak2UbT?= =?us-ascii?Q?71H0oA+RR2PYnAHxjYuMXLRSNWdBEASJqiFfMZCwEx8q5TRObwpDnDtDKx0H?= =?us-ascii?Q?rZZv7V57sE+9ZRUjMtmAprjcQdwaIKG9x+5pfAdyuqFPnJKXWermtSftFcHb?= =?us-ascii?Q?aw2gco4QWLHkW6WfPyTHT6wO1Mw4xNKGeTLGqIAfIrlWCKsfdiPdP42ekzjy?= =?us-ascii?Q?jX0Qf5hOJ+vxjwR+Gva9WwIg8LK0hqdYX+Wn6vmbefNUtPJBhZgkWLPxRdpI?= =?us-ascii?Q?mfCDtiE9xctJKMMKUAqkleOmm6IRnsnBhwX85VLmh7xTV+JXBNTDJXtjJAkt?= =?us-ascii?Q?a8Zdgwa1PvpxOdAhuU5pLIBT6PnrTWfz0CWCsZPKWvMb3?= X-Microsoft-Antispam-Message-Info: 7b6j7xvvmisf5/j7fYSR1CZeKthGlo4e+6ALtP78fgAwGERan6GH8AmnKSECEAF4WBLLtw9cRSVIHEqAz6oR7wg/wLeP/Uy/2dhB0X222aSBI96B1MBimxks8+cbsgg0Lptdo58paYAkzy8Y05rlWAtQ/ExL9qvVngLVM61JyWoZFMwZZ/EfdumTtRk3dFmW X-Microsoft-Exchange-Diagnostics: 1; CY4PR0101MB3176; 6:rPb9Qm+31AHpm9baJmlqannRRgC68WRUBF0j29W1O0wTzXazEKyyDzt0m4f01OQ9TPEKwQTpCgnD9pXRoBF6r9CZklvlnJ9IHGO18zVCetYijkljv3sy5L1gEdTxBpsgcHKTadcDKHWEkPK8DXEl87dQQAVCNNX+dm+NHNF2wiOL+xAqNn8T/9JX6cOWlIih4EEZAGNbcZKAmImk+m5ZAKjNgnUQBOSL3ClIfZatN2WaSLSuj7eNsbrjNR4rQ5H/ggZPoa/FNT5Y/TDJ/w5fdzeyIQoesUl80eobzQ0VCnFelzQfOTVVHxwRHdD96eBiD0lyhy5zEdJtnKZJnKCZfvgTVzqieDNUqdeZQpx8/Lcs8qAeZSUPpL/KqsEEp9FxRrufaSzbkm1VS1dReKlHCejMp66TgHeGy1iSzxsD5mp7JDhM6oCDDfieMF8PEyacml2/yXSgQ6I0rXV1gPpR5w==; 5:3B+w/40CpFPrbdTHvpInfhrHtQVmoYw3OijzGCVeAnV6b8ltBsQSJj9zmZyjgpsuL4Q9I5ZhbcbgoKF+D9NIVLv088BhVbwFZheS+Oevz5cVi5HZBUzTDVlAuoPApS1fTP0Q3lHdFK7xArgsrRULbG7XG/pUfsSbw8splzVGGAg=; 24:POAkTh8B38spA3jIHtep4mB8d7snUS/wWpssoIcwFcpMqqwhdGx+IZXMX5YxhYniSyG1vsUb0uCVPab885nfY5MW/TDm9QHJtluGL+M8ia4= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; CY4PR0101MB3176; 7:ASHJPZhIDAHanY2BYC9iSI7/rABM+1qRT37zyXRld80qCYJuyAf6KV/Su530TJLbRszdxUvsXtAuFpcTFYx12rTTxTIs1A98JBK2lEAXmcY1S4ZxT1COioPl0kFGWcsb/acxDf4CbfQ2seZVwsJfswHoVeSHVYBqEpaaruxMZtZHnKN/Ez3p6fAbWyQfN2GyGVRIcUHwNJv+cx2GlDQFK2f83+cLr1kRusoxlGyhEZPzbaBcYGeHMbtd6pWWG5ad X-MS-Office365-Filtering-Correlation-Id: adc3a7de-2738-4b43-0095-08d5ba6d19df X-OriginatorOrg: arbor.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 May 2018 14:06:48.3539 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: adc3a7de-2738-4b43-0095-08d5ba6d19df X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 54f11205-d4aa-4809-bd36-0b542199c5b2 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR0101MB3176 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-05-15_04:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_policy_notspam policy=outbound_policy score=0 priorityscore=1501 malwarescore=0 suspectscore=1 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=773 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1805150143 Archived-At: Subject: Re: [Dots] Data Channel Fragment handling nits X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 May 2018 14:07:00 -0000 On 15 May 2018, at 20:52, Jon Shallow wrote: > do we actually need both v4-fragment and v6-fragment We need support for non-initial fragments on both IPv4 and IPv6, yes. > and just use fragment (in the same way that length is common)? If that can be made to work for both, sure. ----------------------------------- Roland Dobbins From nobody Tue May 15 07:13:56 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 771AF12DA28 for ; Tue, 15 May 2018 07:13:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JFejHFwPc44n for ; Tue, 15 May 2018 07:13:52 -0700 (PDT) Received: from orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 047E512422F for ; Tue, 15 May 2018 07:13:52 -0700 (PDT) Received: from opfedar02.francetelecom.fr (unknown [xx.xx.xx.4]) by opfedar20.francetelecom.fr (ESMTP service) with ESMTP id 62E75120345; Tue, 15 May 2018 16:13:50 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.63]) by opfedar02.francetelecom.fr (ESMTP service) with ESMTP id 429D8180088; Tue, 15 May 2018 16:13:50 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM6E.corporate.adroot.infra.ftgroup ([fe80::f5a7:eab1:c095:d9ec%18]) with mapi id 14.03.0389.001; Tue, 15 May 2018 16:13:50 +0200 From: To: Jon Shallow , "dots@ietf.org" Thread-Topic: [Dots] Data Channel Fragment handling nits Thread-Index: AQH2vZFs0zYut37SEz72St6q7ZhqZQHaj+Woo9xV3bCAAAUX8A== Date: Tue, 15 May 2018 14:13:49 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF1B505@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <017601d3ec4a$d50620c0$7f126240$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1B46E@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <01a401d3ec53$f6ff6610$e4fe3230$@jpshallow.com> In-Reply-To: <01a401d3ec53$f6ff6610$e4fe3230$@jpshallow.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93302DF1B505OPEXCLILMA3corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Data Channel Fragment handling nits X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 May 2018 14:13:54 -0000 --_000_787AE7BB302AE849A7480A190F8B93302DF1B505OPEXCLILMA3corp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Re-, Please see inline. Cheers, Med De : Jon Shallow [mailto:supjps-ietf@jpshallow.com] Envoy=E9 : mardi 15 mai 2018 15:52 =C0 : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org Objet : RE: [Dots] Data Channel Fragment handling nits Hi Med, See inline. Regards Jon From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of ietf-sup= jps-mohamed.boucadair@orange.com Sent: 15 May 2018 14:20 To: Jon Shallow; dots@ietf.org Subject: Re: [Dots] Data Channel Fragment handling nits Hi Jon, Please see inline. Cheers, Med De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow Envoy=E9 : mardi 15 mai 2018 14:47 =C0 : dots@ietf.org Objet : [Dots] Data Channel Fragment handling nits Hi there, I am beginning to with that I had not raised how to handle fragments, but i= t was keyed off my naive interpretation of the handling of IPv6 protocols b= y netmod-acl! Making this changes has raised some inconsistencies in the draft data chann= el document. Searching on fragment reveals v4-fragment and v6-fragment which are no long= er used. [Med] Hmm. These are related to the capabilities of a DOTS server to enforc= e fragment-based filtering. See Figure 23 for an example. [Jon] I agree - Hmm. [Med] Cool. However the v4-fragment is alluding to "flags" being supported and v6-fra= gment to "fragment" being supported - not that intuitive! They really shou= ld be an identical name match. There is a part of me that would like to go= back to as it was now that we know that we have to support "fragment" for = IPv6 no matter what; unless netmod-acl comes up with something sensible (un= likely). If we do go back, then do we actually need both v4-fragment and v= 6-fragment and just use fragment (in the same way that length is common)? [Med] The use of the same name as part of the capabilities is possible only= if we have distinct containers; each for address family (IPv4, IPv6). In t= he current version, we tried to have something compact: "fragment": ["v4-fragment", "v6-fragment"] We may include a fragment leaf as part of ipv4 and ipv6 containers and then= use the same name. Then, it will look like: "ipv4": { "length": "true", "protocol": "true", "destination-prefix": "true", "source-prefix": "true", "fragment": "true" }, "ipv6": { "length": "true", "protocol": "true", "destination-prefix": "true", "source-prefix": "true", "fragment": "true" }, ~Jon The YANG bits type conversions to JSON in the Appendix A are wrong - I init= iated this error. [Med] Good catch. Fixed. "flags": { "more": 1 } Should be "flags": { "more"} And "flags": { "more": 0 } Should be "flags": { ""} Regards Jon --_000_787AE7BB302AE849A7480A190F8B93302DF1B505OPEXCLILMA3corp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Re-,

 

Please see inline.

 

Cheers,

Med

 

De : Jon Shallow [mailto:supjps-ietf= @jpshallow.com]
Envoy=E9 : mardi 15 mai 2018 15:52
=C0 : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org
Objet : RE: [Dots] Data Channel Fragment handling nits

 

Hi Med,=

&n= bsp;

See inl= ine.

&n= bsp;

Regards=

&n= bsp;

Jon

&n= bsp;

From:= Dots [mailto:ietf-sup= jps-dots-bounces@ietf.org] On Behalf Of ietf-supjps-mohamed.boucadair@orange.com
Sent: 15 May 2018 14:20
To: Jon Shallow; dots@ietf.org<= br> Subject: Re: [Dots] Data Channel Fragment handling nits

 

Hi Jon,

 

Please see inline.

 

Cheers,

Med

 

De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow
Envoy=E9 : mardi 15 mai 2018 14:47
=C0 : dots@ietf.org
Objet : [Dots] Data Channel Fragment handling nits

 

Hi there,

 

I am beginning to with that I h= ad not raised how to handle fragments, but it was keyed off my naive interp= retation of the handling of IPv6 protocols by netmod-acl!=

 

Making this changes has raised = some inconsistencies in the draft data channel document.<= /p>

Searching on fragment reveals v= 4-fragment and v6-fragment which are no longer used.

 

[Med] Hmm. These are rela=
ted to the capabilities of a DOTS server to enforce fragment-based filterin=
g. See Figure 23 for an example. 
[=
Jon] I agree – Hmm.
[Med] Cool.
 <=
/pre>

&=
nbsp; However the v4-fragment is alluding to “flags” being supp=
orted and v6-fragment to “fragment” being supported – not=
 that intuitive!  They really should be an identical name match. =
 There is a part of me that would like to go back to as it was now that we =
know that we have to support “fragment” for IPv6 no matter what=
; unless netmod-acl comes up with something sensible (unlikely).  If w=
e do go back, then do we actually need both v4-fragment and v6-fragment and=
 just use fragment (in the same way that length is common)?


 <=
/pre>

[Med] The use of the same=
 name as part of the capabilities is possible only if we have distinct cont=
ainers; each for address family (IPv4, IPv6). In the current version, we tr=
ied to have something compact: 


 <=
/pre>

   &=
nbsp;  
"fragment": ["v4-fragment", &q=
uot;v6-fragment"]


 


We may include a fragment leaf as par=
t of ipv4 and ipv6 containers and then use the same name. Then, it will loo=
k like: 


 


   &=
nbsp;   "ipv4": {


   &=
nbsp;     "length": "true",


   &=
nbsp;     "protocol": "true",<=
/o:p>


   &=
nbsp;     "destination-prefix": "true&qu=
ot;,


   &=
nbsp;     "source-prefix": "true",<=
o:p>


   &=
nbsp;     "fragment": "true"


   &=
nbsp;   },


   &=
nbsp;   "ipv6": {


   &=
nbsp;     "length": "true",


   &=
nbsp;     "protocol": "true",<=
/o:p>


   &=
nbsp;     "destination-prefix": "true&qu=
ot;,


   &=
nbsp;     "source-prefix": "true",<=
o:p>


   &=
nbsp;     "fragment": "true"


   &=
nbsp;   },


 


 <=
/pre>

~=
Jon


 


The YANG bits type conversions =
to JSON in the Appendix A are wrong – I initiated this error.


[Med] Good catch. Fixed.



 


     &=
nbsp;           &nbs=
p;   "flags": {


     &=
nbsp;            &nb=
sp;    "more": 1


     &=
nbsp;           &nbs=
p;   }


Should be 

     &=
nbsp;           &nbs=
p;   "flags": { “more”}


 


And


     &=
nbsp;           &nbs=
p;   "flags": {


     &=
nbsp;            &nb=
sp;    "more": 0


     &=
nbsp;           &nbs=
p;   }


Should be 

     &=
nbsp;           &nbs=
p;   "flags": { “”}<=
/p>

 


 


Regards


 


Jon
--_000_787AE7BB302AE849A7480A190F8B93302DF1B505OPEXCLILMA3corp_-- From nobody Tue May 15 07:48:12 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED76712AAB6 for ; Tue, 15 May 2018 07:48:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qkigY6YatXBT for ; Tue, 15 May 2018 07:48:08 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ED08F124D37 for ; Tue, 15 May 2018 07:48:07 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fIbFF-0008Uj-By; Tue, 15 May 2018 15:48:05 +0100 From: "Jon Shallow" To: , References: <017601d3ec4a$d50620c0$7f126240$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1B46E@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <01a401d3ec53$f6ff6610$e4fe3230$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1B505@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF1B505@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Date: Tue, 15 May 2018 15:48:05 +0100 Message-ID: <01cc01d3ec5b$bbac0bb0$33042310$@jpshallow.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_01CD_01D3EC64.1D7073B0" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQH2vZFs0zYut37SEz72St6q7ZhqZQHaj+WoAh/5KLcBfLH19qO/ghBA Content-Language: en-gb Archived-At: Subject: Re: [Dots] Data Channel Fragment handling nits X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 May 2018 14:48:10 -0000 This is a multipart message in MIME format. ------=_NextPart_000_01CD_01D3EC64.1D7073B0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi there =20 See inline [Jon1] =20 Regards =20 Jon =20 De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow Envoy=E9 : mardi 15 mai 2018 14:47 =C0 : dots@ietf.org Objet : [Dots] Data Channel Fragment handling nits =20 Hi there, =20 I am beginning to with that I had not raised how to handle fragments, = but it was keyed off my naive interpretation of the handling of IPv6 protocols = by netmod-acl! =20 Making this changes has raised some inconsistencies in the draft data channel document. Searching on fragment reveals v4-fragment and v6-fragment which are no longer used. =20 [Med] Hmm. These are related to the capabilities of a DOTS server to = enforce fragment-based filtering. See Figure 23 for an example.=20 [Jon] I agree =96 Hmm. [Med] Cool. =20 However the v4-fragment is alluding to =93flags=94 being supported and v6-fragment to =93fragment=94 being supported =96 not that intuitive! = They really should be an identical name match. There is a part of me that would = like to go back to as it was now that we know that we have to support = =93fragment=94 for IPv6 no matter what; unless netmod-acl comes up with something sensible (unlikely). If we do go back, then do we actually need both v4-fragment = and v6-fragment and just use fragment (in the same way that length is = common)? =20 [Med] The use of the same name as part of the capabilities is possible = only if we have distinct containers; each for address family (IPv4, IPv6). In = the current version, we tried to have something compact:=20 =20 "fragment": ["v4-fragment", "v6-fragment"] =20 We may include a fragment leaf as part of ipv4 and ipv6 containers and = then use the same name. Then, it will look like:=20 =20 "ipv4": { "length": "true", "protocol": "true", "destination-prefix": "true", "source-prefix": "true", "fragment": "true" }, "ipv6": { "length": "true", "protocol": "true", "destination-prefix": "true", "source-prefix": "true", "fragment": "true" }, =20 [Jon1] Works for me ~Jon1 ~Jon =20 The YANG bits type conversions to JSON in the Appendix A are wrong =96 I initiated this error. [Med] Good catch. Fixed.=20 =20 "flags": { "more": 1 } Should be=20 "flags": { =93more=94} =20 And "flags": { "more": 0 } Should be=20 "flags": { =93=94} =20 =20 Regards =20 Jon ------=_NextPart_000_01CD_01D3EC64.1D7073B0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi there

 

See inline = [Jon1]

 

Regards

 

Jon

 

De : Dots [mailto:dots-bounces@ietf.org] = De la part de Jon Shallow
Envoy=E9 : mardi 15 mai = 2018 14:47
=C0 : dots@ietf.org
Objet : = [Dots] Data Channel Fragment handling = nits

 

Hi = there,

 

I am beginning to with that I had not raised how to = handle fragments, but it was keyed off my naive interpretation of the = handling of IPv6 protocols by netmod-acl!

 

Making this = changes has raised some inconsistencies in the draft data channel = document.

Searching on fragment = reveals v4-fragment and v6-fragment which are no longer = used.

 

[Med] Hmm. These are related =
to the capabilities of a DOTS server to enforce fragment-based =
filtering. See Figure 23 for an example. =

[Jon] I agree – =
Hmm.
[Med] = Cool.
 
<= pre>  However the = v4-fragment is alluding to “flags” being supported and = v6-fragment to “fragment” being supported – not that = intuitive!  They really should be an identical name match.  = There is a part of me that would like to go back to as it was now that = we know that we have to support “fragment” for IPv6 no = matter what; unless netmod-acl comes up with something sensible = (unlikely).  If we do go back, then do we actually need both = v4-fragment and v6-fragment and just use fragment (in the same way that = length is common)?
 
<= pre>[Med] The use of the same name = as part of the capabilities is possible only if we have distinct = containers; each for address family (IPv4, IPv6). In the current = version, we tried to have something compact: = 
 
<= p class=3DMsoNormal>       = "fragment": = ["v4-fragment", = "v6-fragment"]

 

We may include a fragment leaf as part of =
ipv4 and ipv6 containers and then use the same name. Then, it will look =
like: 
 

       = "ipv4": {

       &= nbsp; "length": "true",

       &= nbsp; "protocol": "true",

       &= nbsp; "destination-prefix": = "true",

       &= nbsp; "source-prefix": = "true",

       &= nbsp; "fragment": "true"

       = },

       = "ipv6": {

       &= nbsp; "length": "true",

       &= nbsp; "protocol": "true",

       &= nbsp; "destination-prefix": = "true",

       &= nbsp; "source-prefix": = "true",

       &= nbsp; "fragment": "true"

       = },

 
[Jon1] Works for =
me
~Jon1
~Jon
 
The =
YANG bits type conversions to JSON in the Appendix A are wrong – I =
initiated this error.
[Med] =
Good catch. Fixed. 
 
         &=
nbsp;           =
"flags": {
          =
            &=
nbsp;"more": 1
         &=
nbsp;           =
}
Should be 
         &=
nbsp;           &q=
uot;flags": { “more”}
 
And
         &=
nbsp;           =
"flags": {
          =
            &=
nbsp;"more": 0
         &=
nbsp;           =
}
Should be 
         &=
nbsp;           &q=
uot;flags": { “”}
 
 
Regards
 
Jon
------=_NextPart_000_01CD_01D3EC64.1D7073B0-- From nobody Tue May 15 18:16:32 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 732F312E9DD for ; Tue, 15 May 2018 18:16:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ObwqGpTmvEw6 for ; Tue, 15 May 2018 18:16:26 -0700 (PDT) Received: from guri.nttv6.jp (guri.nttv6.jp [115.69.228.140]) by ietfa.amsl.com (Postfix) with ESMTP id 7DE08126CD6 for ; Tue, 15 May 2018 18:16:26 -0700 (PDT) Received: from z.nttv6.jp (z.nttv6.jp [192.168.8.15]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id 8244D25F68D; Wed, 16 May 2018 10:16:23 +0900 (JST) Received: from MacBook-Pro-17.local (fujiko.nttv6.jp [115.69.228.141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id 4111075900A; Wed, 16 May 2018 10:16:23 +0900 (JST) To: mohamed.boucadair@orange.com Cc: "dots@ietf.org" References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: kaname nishizuka Message-ID: <8ae47725-4db3-e02a-7846-d2f4d5d9b739@nttv6.jp> Date: Wed, 16 May 2018 10:16:23 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 May 2018 01:16:30 -0000 Hi Med, Please see inline. thanks, kaname On 2018/05/15 22:26, mohamed.boucadair@orange.com wrote: > Hi Kaname, > > Please see inline. > > Cheers, > Med > >> -----Message d'origine----- >> De : kaname nishizuka [mailto:kaname@nttv6.jp] >> Envoyé : lundi 14 mai 2018 11:49 >> À : BOUCADAIR Mohamed IMT/OLN >> Cc : dots@ietf.org >> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >> >> Hi Med, >> >> Please see inline. >> >> thanks, >> Kaname >> >> On 2018/05/11 18:39, mohamed.boucadair@orange.com wrote: >>> Re-, >>> >>> Please see inline. >>> >>> Cheers, >>> Med >>> >>>> -----Message d'origine----- >>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] >>>> Envoyé : vendredi 11 mai 2018 10:59 >>>> À : BOUCADAIR Mohamed IMT/OLN >>>> Cc : dots@ietf.org >>>> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>> >>>> Hi Med, >>>> >>>> > If the server decides not to maintain the conflicting request, then >> the >>>> present request will be processed as normal: that is 2.01 will be returned >> to >>>> ack successful handling. A notification will be sent to the client owner >> of >>>> the conflicting request to notify withdrawal (section 4.4.2). >>>> In that case, the status code is '7' (Attack mitigation is withdrawn) >>> [Med] Yes, that status will be sent to the owner of the (existing) request. >>> >>>> My original question is when the status code '8' (Attack mitigation is >>>> rejected) will be used. >>> [Med] I got that. >>> >>>> In the text in the draft, "the conflicting mitigation request" is >> ambiguous >>>> whether it is already existing request or the request that just has >> arrived. >>> [Med] It is related to the already existing request. >>> >>>> Say, the existing request is (A), then a mitigation request (B) arrived >> which >>>> are conflicting with A. >>>> >>>> If B is selected. >>>> (A) will get notification with the withdrawal code '7' >>>> (B) will get 2.01 >>>> >>> [Med] Yes. The current text does calls out your step (1) in 4.4.2. Your >> step (2) is not called explicit in the text because there is no confusion >> about which code to return when a request is accepted to be honored. >>> The text focuses on cases which requires specific handling: >>> - inactive request because of a conflict >>> - multiple active conflicting requests >>> >>>> else If B is not selected. >>>> (B) will get 4.09 >>>> >>> [Med] In this case, the resource is not created and as such case returning >> notification status code of 8 is not possible as you rightful pointed out. >>> This is why we suggested to return 2.01 for this case too so that an update >> of the status can be sent to the client upon change. >> I don't think it is needed to obligate returning of 2.01. >> If it is obvious that the DOTS server need not to create resource of the >> conflicting request, it may return 4.09. >> So, returning of 4.09 should be allowed in this case. >> It should be left as implementation- and deployment-specific. >> >> > [Med] Do you mean that the text should be modified to allow for both 2.01 or 4.09 to be returned depending on some local policy? > > e.g., > > OLD: > If the request is conflicting with an existing mitigation request > from a different DOTS client, and the DOTS server decides to maintain > the conflicting mitigation request, the DOTS server returns 4.09 > (Conflict) [RFC8132] to the requesting DOTS client. The response > includes enough information for a DOTS client to recognize the source > of the conflict as described below: > > NEW: > If the request is conflicting with an existing mitigation request > from a different DOTS client, the DOTS server may return 2.01 (Created) > or 4.09 (Conflict) to the requesting DOTS client. The response > includes enough information for a DOTS client to recognize the source > of the conflict as described below: > Yes, it works for me. >>>> Tiru said: >>>> > In this case, the resource should be created and the server should >> return >>>> success (2.01 or 2.04) response code along with the conflict-information. >>>> In this situation, (B) will get 2.01 or 2.04 along with the rejected code >> '8' >>>> (Which mitigation request will be selected by the DOTS server is >>>> implementation- and deployment-specific.) >>>> >>>> Thanks, >>>> Kaname >>>> >>>> >>>> On 2018/05/11 15:09, mohamed.boucadair@orange.com wrote: >>>>> Hi Kaname, >>>>> >>>>> If the server decides not to maintain the conflicting request, then the >>>> present request will be processed as normal: that is 2.01 will be returned >> to >>>> ack successful handling. A notification will be sent to the client owner >> of >>>> the conflicting request to notify withdrawal (section 4.4.2). >>>>> The text focuses on the case ", and the DOTS server decides to maintain >> the >>>> conflicting mitigation request" because this is the one which requires >>>> additional specification vs. normal request that is accepted by a server. >>>>> Cheers, >>>>> Med >>>>> >>>>>> -----Message d'origine----- >>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] >>>>>> Envoyé : mercredi 9 mai 2018 10:41 >>>>>> À : BOUCADAIR Mohamed IMT/OLN >>>>>> Cc : dots@ietf.org >>>>>> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>> >>>>>> Hi Med, >>>>>> >>>>>> I'm OK with this change. >>>>>> However, to be precise, I'd like to suggest to state about the case the >>>> DOTS >>>>>> server decides NOT to maintain it. >>>>>> >>>>>> NEW-2: >>>>>>    If the request is conflicting with an existing mitigation request >>>>>>    from a different DOTS client, and the DOTS server decides to >> maintain >>>>>>    the conflicting mitigation request, the DOTS server returns 2.01 >>>>>>    (Created) to the requesting DOTS client. >>>>>>    Otherwise, the DOTS server returns 4.09 (Conflict) [RFC8132]. >>>>>>    The response includes enough information for a DOTS client to >>>>>>    recognize the source of the conflict as described below: >>>>>> >>>>>> thanks, >>>>>> Kaname >>>>>> >>>>>> On 2018/05/09 14:51, mohamed.boucadair@orange.com wrote: >>>>>>> Hi Kaname, >>>>>>> >>>>>>> After thinking about this, I do think that you have a valid point. I >>>>>> suggest to make to make this change (marked with ^^^^) >>>>>>> OLD: >>>>>>> If the request is conflicting with an existing mitigation request >>>>>>> from a different DOTS client, and the DOTS server decides to >>>> maintain >>>>>>> the conflicting mitigation request, the DOTS server returns 4.09 >>>>>>> (Conflict) [RFC8132] to the requesting DOTS client. The response >>>>>>> includes enough information for a DOTS client to recognize the >>>> source >>>>>>> of the conflict as described below: >>>>>>> >>>>>>> NEW: >>>>>>> If the request is conflicting with an existing mitigation request >>>>>>> from a different DOTS client, and the DOTS server decides to >>>> maintain >>>>>>> the conflicting mitigation request, the DOTS server returns 2.01 >>>>>>> ^^^^ >>>>>>> (Created) to the requesting DOTS client. The response^ >>>>>>> ^^^^^^^^ >>>>>>> includes enough information for a DOTS client to recognize the >>>> source >>>>>>> of the conflict as described below: >>>>>>> >>>>>>> Cheers, >>>>>>> Med >>>>>>> >>>>>>>> -----Message d'origine----- >>>>>>>> De : Dots [mailto:dots-bounces@ietf.org] De la part de >>>>>>>> mohamed.boucadair@orange.com >>>>>>>> Envoyé : lundi 7 mai 2018 08:38 >>>>>>>> À : kaname nishizuka; dots@ietf.org >>>>>>>> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>>>> >>>>>>>> Re-, >>>>>>>> >>>>>>>> Agree that the codes are not the same, but alternatives ones as >>>> summarized >>>>>>>> here: >>>>>> https://mailarchive.ietf.org/arch/msg/dots/hA3MLKlkXFimpAn5KSYTayaVkjA. >>>>>>>> Cheers, >>>>>>>> Med >>>>>>>> >>>>>>>>> -----Message d'origine----- >>>>>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] >>>>>>>>> Envoyé : lundi 7 mai 2018 08:20 >>>>>>>>> À : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org >>>>>>>>> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>>>>> >>>>>>>>> Hi Med, >>>>>>>>> >>>>>>>>> I've read the thread. >>>>>>>>> and the code '8' of the thread is different from the code '8' of the >>>>>>>> current >>>>>>>>> draft. >>>>>>>>> >>>>>>>>> they'd been discussing the 7,8 and 9 based on this definition, right? >>>>>>>>> >> https://mailarchive.ietf.org/arch/msg/dots/7zljzN8nycZX7E7ghgk1ux32MkM >>>>>>>>> == >>>>>>>>> 7 | DOTS Server has detected conflicting mitigation requests from >>>>>> different >>>>>>>>> DOTS clients.  This mitigation request is currently inactive until >> the >>>>>>>>> conflicts are resolved. Another mitigation request is active. >>>>>>>>> >>>>>>>>> 8 | DOTS Server has detected conflicting mitigation requests from >>>>>> different >>>>>>>>> DOTS clients.  This mitigation request is currently active. >>>>>>>>> >>>>>>>>> 9 | DOTS Server has detected conflicting mitigation requests from >>>>>> different >>>>>>>>> DOTS clients.  All conflicting mitigation requests are inactive. >>>>>>>>> == >>>>>>>>> >>>>>>>>> Kaname >>>>>>>>> >>>>>>>>> >>>>>>>>> On 2018/05/07 15:12, mohamed.boucadair@orange.com wrote: >>>>>>>>>> Hi Kaname, >>>>>>>>>> >>>>>>>>>> Please check >> https://mailarchive.ietf.org/arch/msg/dots/z_cZR9_u273HzC9o0Iy9FeQZ0Jo >>>>>>>> about >>>>>>>>> the rationale for allowing to return code '8' even in a notification >>>>>>>> message. >>>>>>>>> The intent was to have code '8' as a transition state. >>>>>>>>>> Cheers, >>>>>>>>>> Med >>>>>>>>>> >>>>>>>>>>> -----Message d'origine----- >>>>>>>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] >>>>>>>>>>> Envoyé : mercredi 2 mai 2018 02:49 >>>>>>>>>>> À : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org >>>>>>>>>>> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel- >> 19.txt >>>>>>>>>>> Hi, >>>>>>>>>>> >>>>>>>>>>> I'd like to ask one clarification question about status code 8: >>>>>>>>>>> >>>>>>>>>>>    o  A notification message with 'status' code set to '8 >> (Attack >>>>>>>>>>>       mitigation is rejected)' and 'conflict-status' set to >> '1' >>>> is >>>>>>>> sent >>>>>>>>>>>       to a DOTS client to indicate that this mitigation >> request >>>> is >>>>>>>>>>>       rejected because a conflict is detected. >>>>>>>>>>> >>>>>>>>>>> If a mitigation request is rejected due to a conflict, it is >> rejected >>>>>> at >>>>>>>>>>> PUT(4.09(Conflict)), so no resource will be created. >>>>>>>>>>> So it looks there is no chance to return '8 (Attack mitigation is >>>>>>>>> rejected)'. >>>>>>>>>>> thanks, >>>>>>>>>>> Kaname >>>>>>>>>>> >>>>>>>>>>> On 2018/04/10 22:47, mohamed.boucadair@orange.com wrote: >>>>>>>>>>>> Re-, >>>>>>>>>>>> >>>>>>>>>>>> This version addresses the comments raised during the WGLC, in >>>>>>>>> particular: >>>>>>>>>>>> - (Clarification) Indicate that only one hop-limit is included >>>>>>>>>>>> - Specify the loop diagnostic payload >>>>>>>>>>>> - (Clarification) Indicate explicitly that GET messages with 'sid' >>>> are >>>>>>>>>>> allowed >>>>>>>>>>>> - Update the redirect behavior. >>>>>>>>>>>> >>>>>>>>>>>> Cheers, >>>>>>>>>>>> Med >>>>>>>>>>>> >>>>>>>>>>>>> -----Message d'origine----- >>>>>>>>>>>>> De : Dots [mailto:dots-bounces@ietf.org] De la part de internet- >>>>>>>>>>>>> drafts@ietf.org >>>>>>>>>>>>> Envoyé : mardi 10 avril 2018 15:40 >>>>>>>>>>>>> À : i-d-announce@ietf.org >>>>>>>>>>>>> Cc : dots@ietf.org >>>>>>>>>>>>> Objet : [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> A New Internet-Draft is available from the on-line Internet- >> Drafts >>>>>>>>>>>>> directories. >>>>>>>>>>>>> This draft is a work item of the DDoS Open Threat Signaling WG of >>>> the >>>>>>>>>>> IETF. >>>>>>>>>>>>> Title : Distributed Denial-of-Service Open >>>>>> Threat >>>>>>>>>>> Signaling >>>>>>>>>>>>> (DOTS) Signal Channel Specification >>>>>>>>>>>>> Authors : Tirumaleswar Reddy >>>>>>>>>>>>> Mohamed Boucadair >>>>>>>>>>>>> Prashanth Patil >>>>>>>>>>>>> Andrew Mortensen >>>>>>>>>>>>> Nik Teague >>>>>>>>>>>>> Filename : draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>>>> Pages : 86 >>>>>>>>>>>>> Date : 2018-04-10 >>>>>>>>>>>>> >>>>>>>>>>>>> Abstract: >>>>>>>>>>>>> This document specifies the DOTS signal channel, a >> protocol >>>> for >>>>>>>>>>>>> signaling the need for protection against Distributed >>>> Denial- >>>>>> of- >>>>>>>>>>>>> Service (DDoS) attacks to a server capable of enabling >>>> network >>>>>>>>>>>>> traffic mitigation on behalf of the requesting client. >>>>>>>>>>>>> >>>>>>>>>>>>> A companion document defines the DOTS data channel, a >>>> separate >>>>>>>>>>>>> reliable communication layer for DOTS management and >>>>>>>> configuration >>>>>>>>>>>>> purposes. >>>>>>>>>>>>> >>>>>>>>>>>>> Editorial Note (To be removed by RFC Editor) >>>>>>>>>>>>> >>>>>>>>>>>>> Please update these statements with the RFC number to be >>>>>> assigned >>>>>>>>> to >>>>>>>>>>>>> this document: >>>>>>>>>>>>> >>>>>>>>>>>>> o "This version of this YANG module is part of RFC >> XXXX;" >>>>>>>>>>>>> o "RFC XXXX: Distributed Denial-of-Service Open Threat >>>>>> Signaling >>>>>>>>>>>>> (DOTS) Signal Channel Specification"; >>>>>>>>>>>>> >>>>>>>>>>>>> o "| [RFCXXXX] |" >>>>>>>>>>>>> >>>>>>>>>>>>> o reference: RFC XXXX >>>>>>>>>>>>> >>>>>>>>>>>>> Please update TBD statements with the port number to be >>>>>> assigned >>>>>>>> to >>>>>>>>>>>>> DOTS Signal Channel Protocol. >>>>>>>>>>>>> >>>>>>>>>>>>> Also, please update the "revision" date of the YANG >> module. >>>>>>>>>>>>> >>>>>>>>>>>>> The IETF datatracker status page for this draft is: >>>>>>>>>>>>> https://datatracker.ietf.org/doc/draft-ietf-dots-signal-channel/ >>>>>>>>>>>>> >>>>>>>>>>>>> There are also htmlized versions available at: >>>>>>>>>>>>> https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19 >>>>>>>>>>>>> https://datatracker.ietf.org/doc/html/draft-ietf-dots-signal- >>>> channel- >>>>>>>> 19 >>>>>>>>>>>>> A diff from the previous version is available at: >>>>>>>>>>>>> https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-signal-channel- >> 19 >>>>>>>>>>>>> >>>>>>>>>>>>> Please note that it may take a couple of minutes from the time of >>>>>>>>>>> submission >>>>>>>>>>>>> until the htmlized version and diff are available at >>>> tools.ietf.org. >>>>>>>>>>>>> Internet-Drafts are also available by anonymous FTP at: >>>>>>>>>>>>> ftp://ftp.ietf.org/internet-drafts/ >>>>>>>>>>>>> >>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>> Dots mailing list >>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>> _______________________________________________ >>>>>>>>>> Dots mailing list >>>>>>>>>> Dots@ietf.org >>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>> _______________________________________________ >>>>>>>> Dots mailing list >>>>>>>> Dots@ietf.org >>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>> _______________________________________________ >>>>>>> Dots mailing list >>>>>>> Dots@ietf.org >>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>> _______________________________________________ >>>>> Dots mailing list >>>>> Dots@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/dots >>> _______________________________________________ >>> Dots mailing list >>> Dots@ietf.org >>> https://www.ietf.org/mailman/listinfo/dots From nobody Tue May 15 22:22:23 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE149126C19 for ; Tue, 15 May 2018 22:22:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.7 X-Spam-Level: X-Spam-Status: No, score=-0.7 tagged_above=-999 required=5 tests=[RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zN8kZY5Jv2UG for ; Tue, 15 May 2018 22:22:18 -0700 (PDT) Received: from orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B06CF124234 for ; Tue, 15 May 2018 22:22:17 -0700 (PDT) Received: from opfednr04.francetelecom.fr (unknown [xx.xx.xx.68]) by opfednr27.francetelecom.fr (ESMTP service) with ESMTP id 16024A05D5; Wed, 16 May 2018 07:22:16 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.17]) by opfednr04.francetelecom.fr (ESMTP service) with ESMTP id EACA84006D; Wed, 16 May 2018 07:22:15 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM24.corporate.adroot.infra.ftgroup ([fe80::a1e6:3e6a:1f68:5f7e%18]) with mapi id 14.03.0389.001; Wed, 16 May 2018 07:22:15 +0200 From: To: kaname nishizuka CC: "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT7LOEmhD0sjmZX0C9xK1xSGU2saQx0iSg Date: Wed, 16 May 2018 05:22:15 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF1BCA8@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <8ae47725-4db3-e02a-7846-d2f4d5d9b739@nttv6.jp> In-Reply-To: <8ae47725-4db3-e02a-7846-d2f4d5d9b739@nttv6.jp> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 May 2018 05:22:21 -0000 SGkgS2FuYW1lLCANCg0KVGhhbmsgeW91IGZvciBBQ2tpbmcuIEkgd2lsbCBpbXBsZW1lbnQgdGhp cyBjaGFuZ2UuIA0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0t LS0NCj4gRGXCoDoga2FuYW1lIG5pc2hpenVrYSBbbWFpbHRvOmthbmFtZUBudHR2Ni5qcF0NCj4g RW52b3nDqcKgOiBtZXJjcmVkaSAxNiBtYWkgMjAxOCAwMzoxNg0KPiDDgMKgOiBCT1VDQURBSVIg TW9oYW1lZCBJTVQvT0xODQo+IENjwqA6IGRvdHNAaWV0Zi5vcmcNCj4gT2JqZXTCoDogUmU6IFtE b3RzXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ IA0KPiBIaSBNZWQsDQo+IA0KPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gDQo+IHRoYW5rcywNCj4g a2FuYW1lDQo+IA0KPiBPbiAyMDE4LzA1LzE1IDIyOjI2LCBtb2hhbWVkLmJvdWNhZGFpckBvcmFu Z2UuY29tIHdyb3RlOg0KPiA+IEhpIEthbmFtZSwNCj4gPg0KPiA+IFBsZWFzZSBzZWUgaW5saW5l Lg0KPiA+DQo+ID4gQ2hlZXJzLA0KPiA+IE1lZA0KPiA+DQo+ID4+IC0tLS0tTWVzc2FnZSBkJ29y aWdpbmUtLS0tLQ0KPiA+PiBEZcKgOiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50 dHY2LmpwXQ0KPiA+PiBFbnZvecOpwqA6IGx1bmRpIDE0IG1haSAyMDE4IDExOjQ5DQo+ID4+IMOA wqA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE4NCj4gPj4gQ2PCoDogZG90c0BpZXRmLm9yZw0K PiA+PiBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWdu YWwtY2hhbm5lbC0xOS50eHQNCj4gPj4NCj4gPj4gSGkgTWVkLA0KPiA+Pg0KPiA+PiBQbGVhc2Ug c2VlIGlubGluZS4NCj4gPj4NCj4gPj4gdGhhbmtzLA0KPiA+PiBLYW5hbWUNCj4gPj4NCj4gPj4g T24gMjAxOC8wNS8xMSAxODozOSwgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToN Cj4gPj4+IFJlLSwNCj4gPj4+DQo+ID4+PiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPj4+DQo+ID4+ PiBDaGVlcnMsDQo+ID4+PiBNZWQNCj4gPj4+DQo+ID4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2lu ZS0tLS0tDQo+ID4+Pj4gRGXCoDoga2FuYW1lIG5pc2hpenVrYSBbbWFpbHRvOmthbmFtZUBudHR2 Ni5qcF0NCj4gPj4+PiBFbnZvecOpwqA6IHZlbmRyZWRpIDExIG1haSAyMDE4IDEwOjU5DQo+ID4+ Pj4gw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTg0KPiA+Pj4+IENjwqA6IGRvdHNAaWV0 Zi5vcmcNCj4gPj4+PiBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYt ZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPj4+Pg0KPiA+Pj4+IEhpIE1lZCwNCj4gPj4+ Pg0KPiA+Pj4+ICAgID4gSWYgdGhlIHNlcnZlciBkZWNpZGVzIG5vdCB0byBtYWludGFpbiB0aGUg Y29uZmxpY3RpbmcgcmVxdWVzdCwgdGhlbg0KPiA+PiB0aGUNCj4gPj4+PiBwcmVzZW50IHJlcXVl c3Qgd2lsbCBiZSBwcm9jZXNzZWQgYXMgbm9ybWFsOiB0aGF0IGlzIDIuMDEgd2lsbCBiZQ0KPiBy ZXR1cm5lZA0KPiA+PiB0bw0KPiA+Pj4+IGFjayBzdWNjZXNzZnVsIGhhbmRsaW5nLiBBIG5vdGlm aWNhdGlvbiB3aWxsIGJlIHNlbnQgdG8gdGhlIGNsaWVudCBvd25lcg0KPiA+PiBvZg0KPiA+Pj4+ IHRoZSBjb25mbGljdGluZyByZXF1ZXN0IHRvIG5vdGlmeSB3aXRoZHJhd2FsIChzZWN0aW9uIDQu NC4yKS4NCj4gPj4+PiBJbiB0aGF0IGNhc2UsIHRoZSBzdGF0dXMgY29kZSBpcyAnNycgKEF0dGFj ayBtaXRpZ2F0aW9uIGlzIHdpdGhkcmF3bikNCj4gPj4+IFtNZWRdIFllcywgdGhhdCBzdGF0dXMg d2lsbCBiZSBzZW50IHRvIHRoZSBvd25lciBvZiB0aGUgKGV4aXN0aW5nKQ0KPiByZXF1ZXN0Lg0K PiA+Pj4NCj4gPj4+PiBNeSBvcmlnaW5hbCBxdWVzdGlvbiBpcyB3aGVuIHRoZSBzdGF0dXMgY29k ZSAnOCcgKEF0dGFjayBtaXRpZ2F0aW9uIGlzDQo+ID4+Pj4gcmVqZWN0ZWQpIHdpbGwgYmUgdXNl ZC4NCj4gPj4+IFtNZWRdIEkgZ290IHRoYXQuDQo+ID4+Pg0KPiA+Pj4+IEluIHRoZSB0ZXh0IGlu IHRoZSBkcmFmdCwgInRoZSBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QiIGlzDQo+ID4+ IGFtYmlndW91cw0KPiA+Pj4+IHdoZXRoZXIgaXQgaXMgYWxyZWFkeSBleGlzdGluZyByZXF1ZXN0 IG9yIHRoZSByZXF1ZXN0IHRoYXQganVzdCBoYXMNCj4gPj4gYXJyaXZlZC4NCj4gPj4+IFtNZWRd IEl0IGlzIHJlbGF0ZWQgdG8gdGhlIGFscmVhZHkgZXhpc3RpbmcgcmVxdWVzdC4NCj4gPj4+DQo+ ID4+Pj4gU2F5LCB0aGUgZXhpc3RpbmcgcmVxdWVzdCBpcyAoQSksIHRoZW4gYSBtaXRpZ2F0aW9u IHJlcXVlc3QgKEIpIGFycml2ZWQNCj4gPj4gd2hpY2gNCj4gPj4+PiBhcmUgY29uZmxpY3Rpbmcg d2l0aCBBLg0KPiA+Pj4+DQo+ID4+Pj4gSWYgQiBpcyBzZWxlY3RlZC4NCj4gPj4+PiAoQSkgd2ls bCBnZXQgbm90aWZpY2F0aW9uIHdpdGggdGhlIHdpdGhkcmF3YWwgY29kZSAnNycNCj4gPj4+PiAo Qikgd2lsbCBnZXQgMi4wMQ0KPiA+Pj4+DQo+ID4+PiBbTWVkXSBZZXMuIFRoZSBjdXJyZW50IHRl eHQgZG9lcyBjYWxscyBvdXQgeW91ciBzdGVwICgxKSBpbiA0LjQuMi4gWW91cg0KPiA+PiBzdGVw ICgyKSBpcyBub3QgY2FsbGVkIGV4cGxpY2l0IGluIHRoZSB0ZXh0IGJlY2F1c2UgdGhlcmUgaXMg bm8gY29uZnVzaW9uDQo+ID4+IGFib3V0IHdoaWNoIGNvZGUgdG8gcmV0dXJuIHdoZW4gYSByZXF1 ZXN0IGlzIGFjY2VwdGVkIHRvIGJlIGhvbm9yZWQuDQo+ID4+PiBUaGUgdGV4dCBmb2N1c2VzIG9u IGNhc2VzIHdoaWNoIHJlcXVpcmVzIHNwZWNpZmljIGhhbmRsaW5nOg0KPiA+Pj4gLSBpbmFjdGl2 ZSByZXF1ZXN0IGJlY2F1c2Ugb2YgYSBjb25mbGljdA0KPiA+Pj4gLSBtdWx0aXBsZSBhY3RpdmUg Y29uZmxpY3RpbmcgcmVxdWVzdHMNCj4gPj4+DQo+ID4+Pj4gZWxzZSBJZiBCIGlzIG5vdCBzZWxl Y3RlZC4NCj4gPj4+PiAoQikgd2lsbCBnZXQgNC4wOQ0KPiA+Pj4+DQo+ID4+PiBbTWVkXSBJbiB0 aGlzIGNhc2UsIHRoZSByZXNvdXJjZSBpcyBub3QgY3JlYXRlZCBhbmQgYXMgc3VjaCBjYXNlDQo+ IHJldHVybmluZw0KPiA+PiBub3RpZmljYXRpb24gc3RhdHVzIGNvZGUgb2YgOCBpcyBub3QgcG9z c2libGUgYXMgeW91IHJpZ2h0ZnVsIHBvaW50ZWQgb3V0Lg0KPiA+Pj4gVGhpcyBpcyB3aHkgd2Ug c3VnZ2VzdGVkIHRvIHJldHVybiAyLjAxIGZvciB0aGlzIGNhc2UgdG9vIHNvIHRoYXQgYW4NCj4g dXBkYXRlDQo+ID4+IG9mIHRoZSBzdGF0dXMgY2FuIGJlIHNlbnQgdG8gdGhlIGNsaWVudCB1cG9u IGNoYW5nZS4NCj4gPj4gSSBkb24ndCB0aGluayBpdCBpcyBuZWVkZWQgdG8gb2JsaWdhdGUgcmV0 dXJuaW5nIG9mIDIuMDEuDQo+ID4+IElmIGl0IGlzIG9idmlvdXMgdGhhdCB0aGUgRE9UUyBzZXJ2 ZXIgbmVlZCBub3QgdG8gY3JlYXRlIHJlc291cmNlIG9mIHRoZQ0KPiA+PiBjb25mbGljdGluZyBy ZXF1ZXN0LCBpdCBtYXkgcmV0dXJuIDQuMDkuDQo+ID4+IFNvLCByZXR1cm5pbmcgb2YgNC4wOSBz aG91bGQgYmUgYWxsb3dlZCBpbiB0aGlzIGNhc2UuDQo+ID4+IEl0IHNob3VsZCBiZSBsZWZ0IGFz IGltcGxlbWVudGF0aW9uLSBhbmQgZGVwbG95bWVudC1zcGVjaWZpYy4NCj4gPj4NCj4gPj4NCj4g PiBbTWVkXSBEbyB5b3UgbWVhbiB0aGF0IHRoZSB0ZXh0IHNob3VsZCBiZSBtb2RpZmllZCB0byBh bGxvdyBmb3IgYm90aCAyLjAxDQo+IG9yIDQuMDkgdG8gYmUgcmV0dXJuZWQgZGVwZW5kaW5nIG9u IHNvbWUgbG9jYWwgcG9saWN5Pw0KPiA+DQo+ID4gZS5nLiwNCj4gPg0KPiA+IE9MRDoNCj4gPiAg ICAgSWYgdGhlIHJlcXVlc3QgaXMgY29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZyBtaXRpZ2F0 aW9uIHJlcXVlc3QNCj4gPiAgICAgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwgYW5kIHRo ZSBET1RTIHNlcnZlciBkZWNpZGVzIHRvIG1haW50YWluDQo+ID4gICAgIHRoZSBjb25mbGljdGlu ZyBtaXRpZ2F0aW9uIHJlcXVlc3QsIHRoZSBET1RTIHNlcnZlciByZXR1cm5zIDQuMDkNCj4gPiAg ICAgKENvbmZsaWN0KSBbUkZDODEzMl0gdG8gdGhlIHJlcXVlc3RpbmcgRE9UUyBjbGllbnQuIFRo ZSByZXNwb25zZQ0KPiA+ICAgICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9U UyBjbGllbnQgdG8gcmVjb2duaXplIHRoZSBzb3VyY2UNCj4gPiAgICAgb2YgdGhlIGNvbmZsaWN0 IGFzIGRlc2NyaWJlZCBiZWxvdzoNCj4gPg0KPiA+IE5FVzoNCj4gPiAgICAgSWYgdGhlIHJlcXVl c3QgaXMgY29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QNCj4g PiAgICAgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwgdGhlIERPVFMgc2VydmVyIG1heSBy ZXR1cm4gMi4wMSAoQ3JlYXRlZCkNCj4gPiAgICAgb3IgNC4wOSAoQ29uZmxpY3QpIHRvIHRoZSBy ZXF1ZXN0aW5nIERPVFMgY2xpZW50LiBUaGUgcmVzcG9uc2UNCj4gPiAgICAgaW5jbHVkZXMgZW5v dWdoIGluZm9ybWF0aW9uIGZvciBhIERPVFMgY2xpZW50IHRvIHJlY29nbml6ZSB0aGUgc291cmNl DQo+ID4gICAgIG9mIHRoZSBjb25mbGljdCBhcyBkZXNjcmliZWQgYmVsb3c6DQo+ID4NCj4gDQo+ IFllcywgaXQgd29ya3MgZm9yIG1lLg0KPiANCj4gDQo+ID4+Pj4gVGlydSBzYWlkOg0KPiA+Pj4+ ICAgID4gSW4gdGhpcyBjYXNlLCB0aGUgcmVzb3VyY2Ugc2hvdWxkIGJlIGNyZWF0ZWQgYW5kIHRo ZSBzZXJ2ZXIgc2hvdWxkDQo+ID4+IHJldHVybg0KPiA+Pj4+IHN1Y2Nlc3MgKDIuMDEgb3IgMi4w NCkgcmVzcG9uc2UgY29kZSBhbG9uZyB3aXRoIHRoZSBjb25mbGljdC0NCj4gaW5mb3JtYXRpb24u DQo+ID4+Pj4gSW4gdGhpcyBzaXR1YXRpb24sIChCKSB3aWxsIGdldCAyLjAxIG9yIDIuMDQgYWxv bmcgd2l0aCB0aGUgcmVqZWN0ZWQNCj4gY29kZQ0KPiA+PiAnOCcNCj4gPj4+PiAoV2hpY2ggbWl0 aWdhdGlvbiByZXF1ZXN0IHdpbGwgYmUgc2VsZWN0ZWQgYnkgdGhlIERPVFMgc2VydmVyIGlzDQo+ ID4+Pj4gaW1wbGVtZW50YXRpb24tIGFuZCBkZXBsb3ltZW50LXNwZWNpZmljLikNCj4gPj4+Pg0K PiA+Pj4+IFRoYW5rcywNCj4gPj4+PiBLYW5hbWUNCj4gPj4+Pg0KPiA+Pj4+DQo+ID4+Pj4gT24g MjAxOC8wNS8xMSAxNTowOSwgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4g Pj4+Pj4gSGkgS2FuYW1lLA0KPiA+Pj4+Pg0KPiA+Pj4+PiBJZiB0aGUgc2VydmVyIGRlY2lkZXMg bm90IHRvIG1haW50YWluIHRoZSBjb25mbGljdGluZyByZXF1ZXN0LCB0aGVuIHRoZQ0KPiA+Pj4+ IHByZXNlbnQgcmVxdWVzdCB3aWxsIGJlIHByb2Nlc3NlZCBhcyBub3JtYWw6IHRoYXQgaXMgMi4w MSB3aWxsIGJlDQo+IHJldHVybmVkDQo+ID4+IHRvDQo+ID4+Pj4gYWNrIHN1Y2Nlc3NmdWwgaGFu ZGxpbmcuIEEgbm90aWZpY2F0aW9uIHdpbGwgYmUgc2VudCB0byB0aGUgY2xpZW50IG93bmVyDQo+ ID4+IG9mDQo+ID4+Pj4gdGhlIGNvbmZsaWN0aW5nIHJlcXVlc3QgdG8gbm90aWZ5IHdpdGhkcmF3 YWwgKHNlY3Rpb24gNC40LjIpLg0KPiA+Pj4+PiBUaGUgdGV4dCBmb2N1c2VzIG9uIHRoZSBjYXNl ICIsIGFuZCB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRlcyB0byBtYWludGFpbg0KPiA+PiB0aGUNCj4g Pj4+PiBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QiIGJlY2F1c2UgdGhpcyBpcyB0aGUg b25lIHdoaWNoIHJlcXVpcmVzDQo+ID4+Pj4gYWRkaXRpb25hbCBzcGVjaWZpY2F0aW9uIHZzLiBu b3JtYWwgcmVxdWVzdCB0aGF0IGlzIGFjY2VwdGVkIGJ5IGENCj4gc2VydmVyLg0KPiA+Pj4+PiBD aGVlcnMsDQo+ID4+Pj4+IE1lZA0KPiA+Pj4+Pg0KPiA+Pj4+Pj4gLS0tLS1NZXNzYWdlIGQnb3Jp Z2luZS0tLS0tDQo+ID4+Pj4+PiBEZcKgOiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2FuYW1l QG50dHY2LmpwXQ0KPiA+Pj4+Pj4gRW52b3nDqcKgOiBtZXJjcmVkaSA5IG1haSAyMDE4IDEwOjQx DQo+ID4+Pj4+PiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xODQo+ID4+Pj4+PiBDY8Kg OiBkb3RzQGlldGYub3JnDQo+ID4+Pj4+PiBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBBY3Rpb246 IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPj4+Pj4+DQo+ID4+Pj4+ PiBIaSBNZWQsDQo+ID4+Pj4+Pg0KPiA+Pj4+Pj4gSSdtIE9LIHdpdGggdGhpcyBjaGFuZ2UuDQo+ ID4+Pj4+PiBIb3dldmVyLCB0byBiZSBwcmVjaXNlLCBJJ2QgbGlrZSB0byBzdWdnZXN0IHRvIHN0 YXRlIGFib3V0IHRoZSBjYXNlDQo+IHRoZQ0KPiA+Pj4+IERPVFMNCj4gPj4+Pj4+IHNlcnZlciBk ZWNpZGVzIE5PVCB0byBtYWludGFpbiBpdC4NCj4gPj4+Pj4+DQo+ID4+Pj4+PiBORVctMjoNCj4g Pj4+Pj4+ICAgICDCoMKgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhp c3RpbmcgbWl0aWdhdGlvbg0KPiByZXF1ZXN0DQo+ID4+Pj4+PiAgICAgwqDCoCBmcm9tIGEgZGlm ZmVyZW50IERPVFMgY2xpZW50LCBhbmQgdGhlIERPVFMgc2VydmVyIGRlY2lkZXMgdG8NCj4gPj4g bWFpbnRhaW4NCj4gPj4+Pj4+ICAgICDCoMKgIHRoZSBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJl cXVlc3QsIHRoZSBET1RTIHNlcnZlciByZXR1cm5zDQo+IDIuMDENCj4gPj4+Pj4+ICAgICDCoMKg IChDcmVhdGVkKSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4NCj4gPj4+Pj4+ICAgICDC oMKgIE90aGVyd2lzZSwgdGhlIERPVFMgc2VydmVyIHJldHVybnMgNC4wOSAoQ29uZmxpY3QpIFtS RkM4MTMyXS4NCj4gPj4+Pj4+ICAgICDCoMKgIFRoZSByZXNwb25zZSBpbmNsdWRlcyBlbm91Z2gg aW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQgdG8NCj4gPj4+Pj4+ICAgICDCoMKgIHJlY29n bml6ZSB0aGUgc291cmNlIG9mIHRoZSBjb25mbGljdCBhcyBkZXNjcmliZWQgYmVsb3c6DQo+ID4+ Pj4+Pg0KPiA+Pj4+Pj4gdGhhbmtzLA0KPiA+Pj4+Pj4gS2FuYW1lDQo+ID4+Pj4+Pg0KPiA+Pj4+ Pj4gT24gMjAxOC8wNS8wOSAxNDo1MSwgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90 ZToNCj4gPj4+Pj4+PiBIaSBLYW5hbWUsDQo+ID4+Pj4+Pj4NCj4gPj4+Pj4+PiBBZnRlciB0aGlu a2luZyBhYm91dCB0aGlzLCBJIGRvIHRoaW5rIHRoYXQgeW91IGhhdmUgYSB2YWxpZCBwb2ludC4g SQ0KPiA+Pj4+Pj4gc3VnZ2VzdCB0byBtYWtlIHRvIG1ha2UgdGhpcyBjaGFuZ2UgKG1hcmtlZCB3 aXRoIF5eXl4pDQo+ID4+Pj4+Pj4gT0xEOg0KPiA+Pj4+Pj4+ICAgICAgICBJZiB0aGUgcmVxdWVz dCBpcyBjb25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nIG1pdGlnYXRpb24NCj4gcmVxdWVzdA0K PiA+Pj4+Pj4+ICAgICAgICBmcm9tIGEgZGlmZmVyZW50IERPVFMgY2xpZW50LCBhbmQgdGhlIERP VFMgc2VydmVyIGRlY2lkZXMgdG8NCj4gPj4+PiBtYWludGFpbg0KPiA+Pj4+Pj4+ICAgICAgICB0 aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUyBzZXJ2ZXIgcmV0dXJu cw0KPiA0LjA5DQo+ID4+Pj4+Pj4gICAgICAgIChDb25mbGljdCkgW1JGQzgxMzJdIHRvIHRoZSBy ZXF1ZXN0aW5nIERPVFMgY2xpZW50LiAgVGhlDQo+IHJlc3BvbnNlDQo+ID4+Pj4+Pj4gICAgICAg IGluY2x1ZGVzIGVub3VnaCBpbmZvcm1hdGlvbiBmb3IgYSBET1RTIGNsaWVudCB0byByZWNvZ25p emUgdGhlDQo+ID4+Pj4gc291cmNlDQo+ID4+Pj4+Pj4gICAgICAgIG9mIHRoZSBjb25mbGljdCBh cyBkZXNjcmliZWQgYmVsb3c6DQo+ID4+Pj4+Pj4NCj4gPj4+Pj4+PiBORVc6DQo+ID4+Pj4+Pj4g ICAgICAgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcgbWl0 aWdhdGlvbg0KPiByZXF1ZXN0DQo+ID4+Pj4+Pj4gICAgICAgIGZyb20gYSBkaWZmZXJlbnQgRE9U UyBjbGllbnQsIGFuZCB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRlcyB0bw0KPiA+Pj4+IG1haW50YWlu DQo+ID4+Pj4+Pj4gICAgICAgIHRoZSBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QsIHRo ZSBET1RTIHNlcnZlciByZXR1cm5zDQo+IDIuMDENCj4gPj4+Pj4+Pg0KPiBeXl5eDQo+ID4+Pj4+ Pj4gICAgICAgIChDcmVhdGVkKSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4gIFRoZSBy ZXNwb25zZV4NCj4gPj4+Pj4+PiAgICAgICAgXl5eXl5eXl4NCj4gPj4+Pj4+PiAgICAgICAgaW5j bHVkZXMgZW5vdWdoIGluZm9ybWF0aW9uIGZvciBhIERPVFMgY2xpZW50IHRvIHJlY29nbml6ZSB0 aGUNCj4gPj4+PiBzb3VyY2UNCj4gPj4+Pj4+PiAgICAgICAgb2YgdGhlIGNvbmZsaWN0IGFzIGRl c2NyaWJlZCBiZWxvdzoNCj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+IENoZWVycywNCj4gPj4+Pj4+PiBN ZWQNCj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4g Pj4+Pj4+Pj4gRGXCoDogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEg cGFydCBkZQ0KPiA+Pj4+Pj4+PiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4+Pj4+ Pj4+IEVudm95w6nCoDogbHVuZGkgNyBtYWkgMjAxOCAwODozOA0KPiA+Pj4+Pj4+PiDDgMKgOiBr YW5hbWUgbmlzaGl6dWthOyBkb3RzQGlldGYub3JnDQo+ID4+Pj4+Pj4+IE9iamV0wqA6IFJlOiBb RG90c10gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0K PiA+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+PiBSZS0sDQo+ID4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+IEFncmVl IHRoYXQgdGhlIGNvZGVzIGFyZSBub3QgdGhlIHNhbWUsIGJ1dCBhbHRlcm5hdGl2ZXMgb25lcyBh cw0KPiA+Pj4+IHN1bW1hcml6ZWQNCj4gPj4+Pj4+Pj4gaGVyZToNCj4gPj4+Pj4+DQo+IGh0dHBz Oi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvZG90cy9oQTNNTEtsa1hGaW1wQW41S1NZ VGF5YVZrakEuDQo+ID4+Pj4+Pj4+IENoZWVycywNCj4gPj4+Pj4+Pj4gTWVkDQo+ID4+Pj4+Pj4+ DQo+ID4+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPj4+Pj4+Pj4+IERl wqA6IGthbmFtZSBuaXNoaXp1a2EgW21haWx0bzprYW5hbWVAbnR0djYuanBdDQo+ID4+Pj4+Pj4+ PiBFbnZvecOpwqA6IGx1bmRpIDcgbWFpIDIwMTggMDg6MjANCj4gPj4+Pj4+Pj4+IMOAwqA6IEJP VUNBREFJUiBNb2hhbWVkIElNVC9PTE47IGRvdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+Pj4+IE9iamV0 wqA6IFJlOiBbRG90c10gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVs LQ0KPiAxOS50eHQNCj4gPj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+PiBIaSBNZWQsDQo+ID4+Pj4+Pj4+ Pg0KPiA+Pj4+Pj4+Pj4gSSd2ZSByZWFkIHRoZSB0aHJlYWQuDQo+ID4+Pj4+Pj4+PiBhbmQgdGhl IGNvZGUgJzgnIG9mIHRoZSB0aHJlYWQgaXMgZGlmZmVyZW50IGZyb20gdGhlIGNvZGUgJzgnIG9m DQo+IHRoZQ0KPiA+Pj4+Pj4+PiBjdXJyZW50DQo+ID4+Pj4+Pj4+PiBkcmFmdC4NCj4gPj4+Pj4+ Pj4+DQo+ID4+Pj4+Pj4+PiB0aGV5J2QgYmVlbiBkaXNjdXNzaW5nIHRoZSA3LDggYW5kIDkgYmFz ZWQgb24gdGhpcyBkZWZpbml0aW9uLA0KPiByaWdodD8NCj4gPj4+Pj4+Pj4+DQo+ID4+IGh0dHBz Oi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvZG90cy83emxqek44bnljWlg3RTdnaGdr MXV4MzJNa00NCj4gPj4+Pj4+Pj4+ID09DQo+ID4+Pj4+Pj4+PiA3IHwgRE9UUyBTZXJ2ZXIgaGFz IGRldGVjdGVkIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdHMgZnJvbQ0KPiA+Pj4+Pj4g ZGlmZmVyZW50DQo+ID4+Pj4+Pj4+PiBET1RTIGNsaWVudHMuwqAgVGhpcyBtaXRpZ2F0aW9uIHJl cXVlc3QgaXMgY3VycmVudGx5IGluYWN0aXZlIHVudGlsDQo+ID4+IHRoZQ0KPiA+Pj4+Pj4+Pj4g Y29uZmxpY3RzIGFyZSByZXNvbHZlZC4gQW5vdGhlciBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgYWN0 aXZlLg0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+IDggfCBET1RTIFNlcnZlciBoYXMgZGV0ZWN0 ZWQgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0cyBmcm9tDQo+ID4+Pj4+PiBkaWZmZXJl bnQNCj4gPj4+Pj4+Pj4+IERPVFMgY2xpZW50cy7CoCBUaGlzIG1pdGlnYXRpb24gcmVxdWVzdCBp cyBjdXJyZW50bHkgYWN0aXZlLg0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+IDkgfCBET1RTIFNl cnZlciBoYXMgZGV0ZWN0ZWQgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0cyBmcm9tDQo+ ID4+Pj4+PiBkaWZmZXJlbnQNCj4gPj4+Pj4+Pj4+IERPVFMgY2xpZW50cy7CoCBBbGwgY29uZmxp Y3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0cyBhcmUgaW5hY3RpdmUuDQo+ID4+Pj4+Pj4+PiA9PQ0K PiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+IEthbmFtZQ0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+ DQo+ID4+Pj4+Pj4+PiBPbiAyMDE4LzA1LzA3IDE1OjEyLCBtb2hhbWVkLmJvdWNhZGFpckBvcmFu Z2UuY29tIHdyb3RlOg0KPiA+Pj4+Pj4+Pj4+IEhpIEthbmFtZSwNCj4gPj4+Pj4+Pj4+Pg0KPiA+ Pj4+Pj4+Pj4+IFBsZWFzZSBjaGVjaw0KPiA+PiBodHRwczovL21haWxhcmNoaXZlLmlldGYub3Jn L2FyY2gvbXNnL2RvdHMvel9jWlI5X3UyNzNIekM5bzBJeTlGZVFaMEpvDQo+ID4+Pj4+Pj4+IGFi b3V0DQo+ID4+Pj4+Pj4+PiB0aGUgcmF0aW9uYWxlIGZvciBhbGxvd2luZyB0byByZXR1cm4gY29k ZSAnOCcgZXZlbiBpbiBhDQo+IG5vdGlmaWNhdGlvbg0KPiA+Pj4+Pj4+PiBtZXNzYWdlLg0KPiA+ Pj4+Pj4+Pj4gVGhlIGludGVudCB3YXMgdG8gaGF2ZSBjb2RlICc4JyBhcyBhIHRyYW5zaXRpb24g c3RhdGUuDQo+ID4+Pj4+Pj4+Pj4gQ2hlZXJzLA0KPiA+Pj4+Pj4+Pj4+IE1lZA0KPiA+Pj4+Pj4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+Pj4+Pj4+ Pj4+PiBEZcKgOiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50dHY2LmpwXQ0KPiA+ Pj4+Pj4+Pj4+PiBFbnZvecOpwqA6IG1lcmNyZWRpIDIgbWFpIDIwMTggMDI6NDkNCj4gPj4+Pj4+ Pj4+Pj4gw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTjsgZG90c0BpZXRmLm9yZw0KPiA+ Pj4+Pj4+Pj4+PiBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90 cy1zaWduYWwtY2hhbm5lbC0NCj4gPj4gMTkudHh0DQo+ID4+Pj4+Pj4+Pj4+IEhpLA0KPiA+Pj4+ Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+PiBJJ2QgbGlrZSB0byBhc2sgb25lIGNsYXJpZmljYXRpb24g cXVlc3Rpb24gYWJvdXQgc3RhdHVzIGNvZGUgODoNCj4gPj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+ Pj4gICAgICAgwqDCoCBvwqAgQSBub3RpZmljYXRpb24gbWVzc2FnZSB3aXRoICdzdGF0dXMnIGNv ZGUgc2V0IHRvICc4DQo+ID4+IChBdHRhY2sNCj4gPj4+Pj4+Pj4+Pj4gICAgICAgwqDCoMKgwqDC oCBtaXRpZ2F0aW9uIGlzIHJlamVjdGVkKScgYW5kICdjb25mbGljdC1zdGF0dXMnIHNldCB0bw0K PiA+PiAnMScNCj4gPj4+PiBpcw0KPiA+Pj4+Pj4+PiBzZW50DQo+ID4+Pj4+Pj4+Pj4+ICAgICAg IMKgwqDCoMKgwqAgdG8gYSBET1RTIGNsaWVudCB0byBpbmRpY2F0ZSB0aGF0IHRoaXMgbWl0aWdh dGlvbg0KPiA+PiByZXF1ZXN0DQo+ID4+Pj4gaXMNCj4gPj4+Pj4+Pj4+Pj4gICAgICAgwqDCoMKg wqDCoCByZWplY3RlZCBiZWNhdXNlIGEgY29uZmxpY3QgaXMgZGV0ZWN0ZWQuDQo+ID4+Pj4+Pj4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4+IElmIGEgbWl0aWdhdGlvbiByZXF1ZXN0IGlzIHJlamVjdGVkIGR1 ZSB0byBhIGNvbmZsaWN0LCBpdCBpcw0KPiA+PiByZWplY3RlZA0KPiA+Pj4+Pj4gYXQNCj4gPj4+ Pj4+Pj4+Pj4gUFVUKDQuMDkoQ29uZmxpY3QpKSwgc28gbm8gcmVzb3VyY2Ugd2lsbCBiZSBjcmVh dGVkLg0KPiA+Pj4+Pj4+Pj4+PiBTbyBpdCBsb29rcyB0aGVyZSBpcyBubyBjaGFuY2UgdG8gcmV0 dXJuICc4IChBdHRhY2sgbWl0aWdhdGlvbiBpcw0KPiA+Pj4+Pj4+Pj4gcmVqZWN0ZWQpJy4NCj4g Pj4+Pj4+Pj4+Pj4gdGhhbmtzLA0KPiA+Pj4+Pj4+Pj4+PiBLYW5hbWUNCj4gPj4+Pj4+Pj4+Pj4N Cj4gPj4+Pj4+Pj4+Pj4gT24gMjAxOC8wNC8xMCAyMjo0NywgbW9oYW1lZC5ib3VjYWRhaXJAb3Jh bmdlLmNvbSB3cm90ZToNCj4gPj4+Pj4+Pj4+Pj4+IFJlLSwNCj4gPj4+Pj4+Pj4+Pj4+DQo+ID4+ Pj4+Pj4+Pj4+PiBUaGlzIHZlcnNpb24gYWRkcmVzc2VzIHRoZSBjb21tZW50cyByYWlzZWQgZHVy aW5nIHRoZSBXR0xDLCBpbg0KPiA+Pj4+Pj4+Pj4gcGFydGljdWxhcjoNCj4gPj4+Pj4+Pj4+Pj4+ IC0gKENsYXJpZmljYXRpb24pIEluZGljYXRlIHRoYXQgb25seSBvbmUgaG9wLWxpbWl0IGlzIGlu Y2x1ZGVkDQo+ID4+Pj4+Pj4+Pj4+PiAtIFNwZWNpZnkgdGhlIGxvb3AgZGlhZ25vc3RpYyBwYXls b2FkDQo+ID4+Pj4+Pj4+Pj4+PiAtIChDbGFyaWZpY2F0aW9uKSBJbmRpY2F0ZSBleHBsaWNpdGx5 IHRoYXQgR0VUIG1lc3NhZ2VzIHdpdGgNCj4gJ3NpZCcNCj4gPj4+PiBhcmUNCj4gPj4+Pj4+Pj4+ Pj4gYWxsb3dlZA0KPiA+Pj4+Pj4+Pj4+Pj4gLSBVcGRhdGUgdGhlIHJlZGlyZWN0IGJlaGF2aW9y Lg0KPiA+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+IENoZWVycywNCj4gPj4+Pj4+Pj4+Pj4+ IE1lZA0KPiA+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmln aW5lLS0tLS0NCj4gPj4+Pj4+Pj4+Pj4+PiBEZcKgOiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2Vz QGlldGYub3JnXSBEZSBsYSBwYXJ0IGRlDQo+IGludGVybmV0LQ0KPiA+Pj4+Pj4+Pj4+Pj4+IGRy YWZ0c0BpZXRmLm9yZw0KPiA+Pj4+Pj4+Pj4+Pj4+IEVudm95w6nCoDogbWFyZGkgMTAgYXZyaWwg MjAxOCAxNTo0MA0KPiA+Pj4+Pj4+Pj4+Pj4+IMOAwqA6IGktZC1hbm5vdW5jZUBpZXRmLm9yZw0K PiA+Pj4+Pj4+Pj4+Pj4+IENjwqA6IGRvdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+Pj4+Pj4+PiBPYmpl dMKgOiBbRG90c10gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLQ0K PiAxOS50eHQNCj4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+ Pj4gQSBOZXcgSW50ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9uLWxpbmUgSW50 ZXJuZXQtDQo+ID4+IERyYWZ0cw0KPiA+Pj4+Pj4+Pj4+Pj4+IGRpcmVjdG9yaWVzLg0KPiA+Pj4+ Pj4+Pj4+Pj4+IFRoaXMgZHJhZnQgaXMgYSB3b3JrIGl0ZW0gb2YgdGhlIEREb1MgT3BlbiBUaHJl YXQgU2lnbmFsaW5nIFdHDQo+IG9mDQo+ID4+Pj4gdGhlDQo+ID4+Pj4+Pj4+Pj4+IElFVEYuDQo+ ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICBUaXRsZSAgICAgICAgICAgOiBEaXN0cmlidXRl ZCBEZW5pYWwtb2YtU2VydmljZQ0KPiBPcGVuDQo+ID4+Pj4+PiBUaHJlYXQNCj4gPj4+Pj4+Pj4+ Pj4gU2lnbmFsaW5nDQo+ID4+Pj4+Pj4+Pj4+Pj4gKERPVFMpIFNpZ25hbCBDaGFubmVsIFNwZWNp ZmljYXRpb24NCj4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgIEF1dGhvcnMgICAgICAgICA6 IFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgTW9oYW1lZCBCb3VjYWRhaXINCj4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFByYXNoYW50aCBQYXRpbA0KPiA+Pj4+Pj4+Pj4+Pj4+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQW5kcmV3IE1vcnRlbnNlbg0KPiA+Pj4+Pj4+ Pj4+Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTmlrIFRlYWd1ZQ0KPiA+Pj4+ Pj4+Pj4+Pj4+IAlGaWxlbmFtZSAgICAgICAgOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5u ZWwtMTkudHh0DQo+ID4+Pj4+Pj4+Pj4+Pj4gCVBhZ2VzICAgICAgICAgICA6IDg2DQo+ID4+Pj4+ Pj4+Pj4+Pj4gCURhdGUgICAgICAgICAgICA6IDIwMTgtMDQtMTANCj4gPj4+Pj4+Pj4+Pj4+Pg0K PiA+Pj4+Pj4+Pj4+Pj4+IEFic3RyYWN0Og0KPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIFRoaXMg ZG9jdW1lbnQgc3BlY2lmaWVzIHRoZSBET1RTIHNpZ25hbCBjaGFubmVsLCBhDQo+ID4+IHByb3Rv Y29sDQo+ID4+Pj4gZm9yDQo+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgc2lnbmFsaW5nIHRoZSBu ZWVkIGZvciBwcm90ZWN0aW9uIGFnYWluc3QgRGlzdHJpYnV0ZWQNCj4gPj4+PiBEZW5pYWwtDQo+ ID4+Pj4+PiBvZi0NCj4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBTZXJ2aWNlIChERG9TKSBhdHRh Y2tzIHRvIGEgc2VydmVyIGNhcGFibGUgb2YgZW5hYmxpbmcNCj4gPj4+PiBuZXR3b3JrDQo+ID4+ Pj4+Pj4+Pj4+Pj4gICAgICAgICAgdHJhZmZpYyBtaXRpZ2F0aW9uIG9uIGJlaGFsZiBvZiB0aGUg cmVxdWVzdGluZyBjbGllbnQuDQo+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+PiAgICAg ICAgICBBIGNvbXBhbmlvbiBkb2N1bWVudCBkZWZpbmVzIHRoZSBET1RTIGRhdGEgY2hhbm5lbCwg YQ0KPiA+Pj4+IHNlcGFyYXRlDQo+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgcmVsaWFibGUgY29t bXVuaWNhdGlvbiBsYXllciBmb3IgRE9UUyBtYW5hZ2VtZW50IGFuZA0KPiA+Pj4+Pj4+PiBjb25m aWd1cmF0aW9uDQo+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgcHVycG9zZXMuDQo+ID4+Pj4+Pj4+ Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+PiBFZGl0b3JpYWwgTm90ZSAoVG8gYmUgcmVtb3ZlZCBieSBS RkMgRWRpdG9yKQ0KPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgUGxl YXNlIHVwZGF0ZSB0aGVzZSBzdGF0ZW1lbnRzIHdpdGggdGhlIFJGQyBudW1iZXIgdG8NCj4gYmUN Cj4gPj4+Pj4+IGFzc2lnbmVkDQo+ID4+Pj4+Pj4+PiB0bw0KPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAg ICAgIHRoaXMgZG9jdW1lbnQ6DQo+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+PiAgICAg ICAgICBvICAiVGhpcyB2ZXJzaW9uIG9mIHRoaXMgWUFORyBtb2R1bGUgaXMgcGFydCBvZiBSRkMN Cj4gPj4gWFhYWDsiDQo+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgbyAgIlJGQyBYWFhYOiBEaXN0 cmlidXRlZCBEZW5pYWwtb2YtU2VydmljZSBPcGVuDQo+IFRocmVhdA0KPiA+Pj4+Pj4gU2lnbmFs aW5nDQo+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgKERPVFMpIFNpZ25hbCBDaGFubmVsIFNw ZWNpZmljYXRpb24iOw0KPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAg byAgInwgW1JGQ1hYWFhdIHwiDQo+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+PiAgICAg ICAgICBvICByZWZlcmVuY2U6IFJGQyBYWFhYDQo+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+ Pj4+PiAgICAgICAgICBQbGVhc2UgdXBkYXRlIFRCRCBzdGF0ZW1lbnRzIHdpdGggdGhlIHBvcnQg bnVtYmVyIHRvDQo+IGJlDQo+ID4+Pj4+PiBhc3NpZ25lZA0KPiA+Pj4+Pj4+PiB0bw0KPiA+Pj4+ Pj4+Pj4+Pj4+ICAgICAgICAgIERPVFMgU2lnbmFsIENoYW5uZWwgUHJvdG9jb2wuDQo+ID4+Pj4+ Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBBbHNvLCBwbGVhc2UgdXBkYXRlIHRo ZSAicmV2aXNpb24iIGRhdGUgb2YgdGhlIFlBTkcNCj4gPj4gbW9kdWxlLg0KPiA+Pj4+Pj4+Pj4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4gVGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVzIHBhZ2UgZm9y IHRoaXMgZHJhZnQgaXM6DQo+ID4+Pj4+Pj4+Pj4+Pj4gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRm Lm9yZy9kb2MvZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC0NCj4gY2hhbm5lbC8NCj4gPj4+Pj4+Pj4+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+IFRoZXJlIGFyZSBhbHNvIGh0bWxpemVkIHZlcnNpb25zIGF2 YWlsYWJsZSBhdDoNCj4gPj4+Pj4+Pj4+Pj4+PiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwv ZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5DQo+ID4+Pj4+Pj4+Pj4+Pj4gaHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1pZXRmLWRvdHMtc2lnbmFsLQ0K PiA+Pj4+IGNoYW5uZWwtDQo+ID4+Pj4+Pj4+IDE5DQo+ID4+Pj4+Pj4+Pj4+Pj4gQSBkaWZmIGZy b20gdGhlIHByZXZpb3VzIHZlcnNpb24gaXMgYXZhaWxhYmxlIGF0Og0KPiA+Pj4+Pj4+Pj4+Pj4+ IGh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLWRvdHMtc2lnbmFs LQ0KPiBjaGFubmVsLQ0KPiA+PiAxOQ0KPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4g UGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhl IHRpbWUNCj4gb2YNCj4gPj4+Pj4+Pj4+Pj4gc3VibWlzc2lvbg0KPiA+Pj4+Pj4+Pj4+Pj4+IHVu dGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQNCj4gPj4+ PiB0b29scy5pZXRmLm9yZy4NCj4gPj4+Pj4+Pj4+Pj4+PiBJbnRlcm5ldC1EcmFmdHMgYXJlIGFs c28gYXZhaWxhYmxlIGJ5IGFub255bW91cyBGVFAgYXQ6DQo+ID4+Pj4+Pj4+Pj4+Pj4gZnRwOi8v ZnRwLmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy8NCj4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+ Pj4+Pj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ ID4+Pj4+Pj4+Pj4+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPj4+Pj4+Pj4+Pj4+PiBEb3RzQGll dGYub3JnDQo+ID4+Pj4+Pj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9kb3RzDQo+ID4+Pj4+Pj4+Pj4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KPiA+Pj4+Pj4+Pj4+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPj4+ Pj4+Pj4+Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+Pj4+Pj4+Pj4+IF9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+Pj4+Pj4+Pj4gRG90cyBtYWlsaW5n IGxpc3QNCj4gPj4+Pj4+Pj4+PiBEb3RzQGlldGYub3JnDQo+ID4+Pj4+Pj4+Pj4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4+Pj4+Pj4+IF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+Pj4+Pj4+IERvdHMgbWFp bGluZyBsaXN0DQo+ID4+Pj4+Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+Pj4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4+Pj4+Pj4gX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+Pj4+PiBEb3RzIG1haWxp bmcgbGlzdA0KPiA+Pj4+Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+PiBodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPj4+Pj4gX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+Pj4gRG90cyBtYWlsaW5nIGxpc3QN Cj4gPj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL2RvdHMNCj4gPj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQo+ID4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+Pj4gRG90c0BpZXRm Lm9yZw0KPiA+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQoN Cg== From nobody Tue May 15 23:13:14 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE91E124234 for ; Tue, 15 May 2018 23:13:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.411 X-Spam-Level: X-Spam-Status: No, score=-2.411 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z7PplDbJ0eid for ; Tue, 15 May 2018 23:13:10 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 837561200C1 for ; Tue, 15 May 2018 23:13:10 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1526451181; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Office365-Filtering-Correlation-Id:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=d Ydv0IzryItJSh+TKwtKo54y2wV3lhsJRGqPPID7SB s=; b=piwSx0gdT4faLiNcPFujasGjJkNkWQpWLwFoaS6scuE9 M2gOtALLIH7simlGIwIt+0MtK4rRgd3gzbXMDRZ7dNXwA3mmSM iuYatiBR19/gJkmAmKZ9qs2jdeNb1smT86JKKjinIuWFmB0hLL Tw7ske7xgFle7tUAEmXcqFyRSFE= Received: from DNVEXAPP1N05.corpzone.internalzone.com (unknown [10.44.48.89]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 2fa9_5192_40738122_d3ca_4520_8a78_2ece8259689b; Wed, 16 May 2018 01:13:00 -0500 Received: from DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 May 2018 00:10:41 -0600 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Wed, 16 May 2018 00:10:42 -0600 Received: from NAM01-SN1-obe.outbound.protection.outlook.com (10.44.176.242) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 May 2018 00:10:41 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB1587.namprd16.prod.outlook.com (10.172.208.141) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.776.11; Wed, 16 May 2018 06:10:39 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8%9]) with mapi id 15.20.0776.010; Wed, 16 May 2018 06:10:39 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "kaname nishizuka" CC: "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT0NF/5sqjFXD5eEKW2iVIpIKRtqP6A2IAgCG5zoCACDXkgIAAAhwAgAAFAwCAAxeuAIAAL3EAgAL6OICAAC9rAIAAC0wAgAS5xwCAAc8UgIAAxkKAgABEsoCAAAn6UA== Date: Wed, 16 May 2018 06:10:39 +0000 Message-ID: References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <8ae47725-4db3-e02a-7846-d2f4d5d9b739@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BCA8@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF1BCA8@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB1587; 7:Jy4k6U4zEUnEv57i0AweBmSt99ADsFGNe3KjxCXr+vJQGHw2C7quQEmASgDyoaEzAR2/9qfzSs4NQK+C/cgLPTt6bI4i9vIIEOvPlQJY91AV0y5MpFjdLBrKWu83HaO9EANQhgREf8WunAmqiu7ohQQsCXXnXzG6rOj6MFcmkNrH7WcxmfYsKS0UV4ZecYLccIV7sHn0O0oyL4+mER8HpW+H2mEMm5Zn2XpCz9UujMQq5CoF8X4nUMjJ8MYM6EVS x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB1587; x-ms-traffictypediagnostic: BN6PR16MB1587: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(120809045254105)(18271650672692); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3231254)(944501410)(52105095)(10201501046)(93006095)(93001095)(3002001)(149027)(150027)(6041310)(20161123560045)(20161123564045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(6072148)(201708071742011); SRVR:BN6PR16MB1587; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB1587; x-forefront-prvs: 0674DC6DD3 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(366004)(376002)(396003)(39860400002)(346002)(13464003)(55784002)(189003)(199004)(377424004)(32952001)(68736007)(102836004)(26005)(74316002)(186003)(76176011)(93886005)(53936002)(6506007)(53546011)(53946003)(59450400001)(6246003)(6306002)(966005)(72206003)(4326008)(3846002)(55016002)(2900100001)(6116002)(9686003)(7696005)(2906002)(5660300001)(81156014)(305945005)(8676002)(99286004)(81166006)(7736002)(345774005)(110136005)(316002)(8936002)(6436002)(3280700002)(80792005)(3660700001)(229853002)(14454004)(476003)(86362001)(486006)(97736004)(5890100001)(25786009)(2501003)(106356001)(5250100002)(105586002)(478600001)(446003)(33656002)(66066001)(575784001)(11346002)(85282002)(579004); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB1587; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: PkyGvdwt8+IuXm75+THhVACnH7K3Qit0iU650mMYTljVdJEZV/A0R7hFvXHwvWe5/FZ/pcDxAbszUrJh2UIljtDWPHkH+GOwM+CfIK9NJ/hdQQWA1gMj7yHpySpdczJjYus1ZW3tV8TKHF4jjVMqg8sWFKVHD3100MuC7weL+vrBEWPEhrcM5jJzQPAEpXaLGrL92llyvUW60lbB8eLJjA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: 51b351a7-596b-4de1-3145-08d5baf3bf97 X-MS-Exchange-CrossTenant-Network-Message-Id: 51b351a7-596b-4de1-3145-08d5baf3bf97 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 May 2018 06:10:39.5406 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB1587 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6286> : inlines <6637> : streams <1786876> : uri <2642055> Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 May 2018 06:13:13 -0000 SSBwcm9wb3NlIHRvIHVwZGF0ZSB0aGUgdGV4dCBhcyBmb2xsb3dzIHRvIG1ha2UgaXQgbW9yZSBj bGVhcjoNCg0KSWYgdGhlIHJlcXVlc3QgaXMgY29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZyBt aXRpZ2F0aW9uIHJlcXVlc3QgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwgdGhlIERPVFMg c2VydmVyIG1heSBlaXRoZXIgZGVjaWRlIHRvIG1haW50YWluIHRoZSBjb25mbGljdGluZyByZXF1 ZXN0IG9yIHJlamVjdCB0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LiBJZiB0aGUg RE9UUyBzZXJ2ZXIgZGVjaWRlcyB0byBtYWludGFpbg0KdGhlIGNvbmZsaWN0aW5nIG1pdGlnYXRp b24gcmVxdWVzdCwgdGhlIERPVFMgc2VydmVyIHJldHVybnMgMi4wMSAoQ3JlYXRlZCkgdG8gdGhl IHJlcXVlc3RpbmcgRE9UUyBjbGllbnQuIElmIHRoZSBET1RTIHNlcnZlciBkZWNpZGVzIHRvIHJl amVjdCB0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUyBzZXJ2ZXIg cmV0dXJucyA0LjA5IChDb25mbGljdCkgW1JGQzgxMzJdIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMg Y2xpZW50DQpGb3IgYm90aCAyLjAxIChDcmVhdGVkKSBhbmQgNC4wOSAoQ29uZmxpY3QpIHJlc3Bv bnNlcywgdGhlIHJlc3BvbnNlIG1lc3NhZ2UgaW5jbHVkZXMgZW5vdWdoIGluZm9ybWF0aW9uIGZv ciBhIERPVFMgY2xpZW50IHRvIHJlY29nbml6ZSB0aGUgc291cmNlIG9mIHRoZSBjb25mbGljdCBh cyBkZXNjcmliZWQgYmVsb3c6DQoNCi1UaXJ1DQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0t LS0NCj4gRnJvbTogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxm IE9mDQo+IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gU2VudDogV2VkbmVzZGF5LCBN YXkgMTYsIDIwMTggMTA6NTIgQU0NCj4gVG86IGthbmFtZSBuaXNoaXp1a2EgPGthbmFtZUBudHR2 Ni5qcD4NCj4gQ2M6IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtEb3RzXSBJLUQgQWN0 aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+IA0KPiBUaGlzIGVt YWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdCBj bGljayBsaW5rcyBvcg0KPiBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRo ZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMNCj4gc2FmZS4NCj4gDQo+IEhpIEthbmFt ZSwNCj4gDQo+IFRoYW5rIHlvdSBmb3IgQUNraW5nLiBJIHdpbGwgaW1wbGVtZW50IHRoaXMgY2hh bmdlLg0KPiANCj4gQ2hlZXJzLA0KPiBNZWQNCj4gDQo+ID4gLS0tLS1NZXNzYWdlIGQnb3JpZ2lu ZS0tLS0tDQo+ID4gRGXCoDoga2FuYW1lIG5pc2hpenVrYSBbbWFpbHRvOmthbmFtZUBudHR2Ni5q cF0gRW52b3nDqcKgOiBtZXJjcmVkaSAxNg0KPiA+IG1haSAyMDE4IDAzOjE2IMOAwqA6IEJPVUNB REFJUiBNb2hhbWVkIElNVC9PTE4gQ2PCoDogZG90c0BpZXRmLm9yZw0KPiBPYmpldA0KPiA+IDog UmU6IFtEb3RzXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTku dHh0DQo+ID4NCj4gPiBIaSBNZWQsDQo+ID4NCj4gPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPg0K PiA+IHRoYW5rcywNCj4gPiBrYW5hbWUNCj4gPg0KPiA+IE9uIDIwMTgvMDUvMTUgMjI6MjYsIG1v aGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3JvdGU6DQo+ID4gPiBIaSBLYW5hbWUsDQo+ID4g Pg0KPiA+ID4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+ID4gPg0KPiA+ID4gQ2hlZXJzLA0KPiA+ID4g TWVkDQo+ID4gPg0KPiA+ID4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+ID4+IERl wqA6IGthbmFtZSBuaXNoaXp1a2EgW21haWx0bzprYW5hbWVAbnR0djYuanBdIEVudm95w6nCoDog bHVuZGkgMTQNCj4gPiA+PiBtYWkgMjAxOCAxMTo0OSDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJ TVQvT0xOIENjwqA6IGRvdHNAaWV0Zi5vcmcNCj4gPiA+PiBPYmpldMKgOiBSZTogW0RvdHNdIEkt RCBBY3Rpb246DQo+ID4gPj4gZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0K PiA+ID4+DQo+ID4gPj4gSGkgTWVkLA0KPiA+ID4+DQo+ID4gPj4gUGxlYXNlIHNlZSBpbmxpbmUu DQo+ID4gPj4NCj4gPiA+PiB0aGFua3MsDQo+ID4gPj4gS2FuYW1lDQo+ID4gPj4NCj4gPiA+PiBP biAyMDE4LzA1LzExIDE4OjM5LCBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIHdyb3RlOg0K PiA+ID4+PiBSZS0sDQo+ID4gPj4+DQo+ID4gPj4+IFBsZWFzZSBzZWUgaW5saW5lLg0KPiA+ID4+ Pg0KPiA+ID4+PiBDaGVlcnMsDQo+ID4gPj4+IE1lZA0KPiA+ID4+Pg0KPiA+ID4+Pj4gLS0tLS1N ZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gPj4+PiBEZcKgOiBrYW5hbWUgbmlzaGl6dWthIFtt YWlsdG86a2FuYW1lQG50dHY2LmpwXSBFbnZvecOpwqA6IHZlbmRyZWRpDQo+ID4gPj4+PiAxMSBt YWkgMjAxOCAxMDo1OSDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOIENjwqA6DQo+ID4g Pj4+PiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFJlOiBbRG90c10gSS1EIEFjdGlvbjoNCj4gPiA+ Pj4+IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPiA+Pj4+DQo+ID4g Pj4+PiBIaSBNZWQsDQo+ID4gPj4+Pg0KPiA+ID4+Pj4gICAgPiBJZiB0aGUgc2VydmVyIGRlY2lk ZXMgbm90IHRvIG1haW50YWluIHRoZSBjb25mbGljdGluZw0KPiA+ID4+Pj4gcmVxdWVzdCwgdGhl bg0KPiA+ID4+IHRoZQ0KPiA+ID4+Pj4gcHJlc2VudCByZXF1ZXN0IHdpbGwgYmUgcHJvY2Vzc2Vk IGFzIG5vcm1hbDogdGhhdCBpcyAyLjAxIHdpbGwgYmUNCj4gPiByZXR1cm5lZA0KPiA+ID4+IHRv DQo+ID4gPj4+PiBhY2sgc3VjY2Vzc2Z1bCBoYW5kbGluZy4gQSBub3RpZmljYXRpb24gd2lsbCBi ZSBzZW50IHRvIHRoZQ0KPiA+ID4+Pj4gY2xpZW50IG93bmVyDQo+ID4gPj4gb2YNCj4gPiA+Pj4+ IHRoZSBjb25mbGljdGluZyByZXF1ZXN0IHRvIG5vdGlmeSB3aXRoZHJhd2FsIChzZWN0aW9uIDQu NC4yKS4NCj4gPiA+Pj4+IEluIHRoYXQgY2FzZSwgdGhlIHN0YXR1cyBjb2RlIGlzICc3JyAoQXR0 YWNrIG1pdGlnYXRpb24gaXMNCj4gPiA+Pj4+IHdpdGhkcmF3bikNCj4gPiA+Pj4gW01lZF0gWWVz LCB0aGF0IHN0YXR1cyB3aWxsIGJlIHNlbnQgdG8gdGhlIG93bmVyIG9mIHRoZSAoZXhpc3Rpbmcp DQo+ID4gcmVxdWVzdC4NCj4gPiA+Pj4NCj4gPiA+Pj4+IE15IG9yaWdpbmFsIHF1ZXN0aW9uIGlz IHdoZW4gdGhlIHN0YXR1cyBjb2RlICc4JyAoQXR0YWNrDQo+ID4gPj4+PiBtaXRpZ2F0aW9uIGlz DQo+ID4gPj4+PiByZWplY3RlZCkgd2lsbCBiZSB1c2VkLg0KPiA+ID4+PiBbTWVkXSBJIGdvdCB0 aGF0Lg0KPiA+ID4+Pg0KPiA+ID4+Pj4gSW4gdGhlIHRleHQgaW4gdGhlIGRyYWZ0LCAidGhlIGNv bmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdCIgaXMNCj4gPiA+PiBhbWJpZ3VvdXMNCj4gPiA+ Pj4+IHdoZXRoZXIgaXQgaXMgYWxyZWFkeSBleGlzdGluZyByZXF1ZXN0IG9yIHRoZSByZXF1ZXN0 IHRoYXQganVzdA0KPiA+ID4+Pj4gaGFzDQo+ID4gPj4gYXJyaXZlZC4NCj4gPiA+Pj4gW01lZF0g SXQgaXMgcmVsYXRlZCB0byB0aGUgYWxyZWFkeSBleGlzdGluZyByZXF1ZXN0Lg0KPiA+ID4+Pg0K PiA+ID4+Pj4gU2F5LCB0aGUgZXhpc3RpbmcgcmVxdWVzdCBpcyAoQSksIHRoZW4gYSBtaXRpZ2F0 aW9uIHJlcXVlc3QgKEIpDQo+ID4gPj4+PiBhcnJpdmVkDQo+ID4gPj4gd2hpY2gNCj4gPiA+Pj4+ IGFyZSBjb25mbGljdGluZyB3aXRoIEEuDQo+ID4gPj4+Pg0KPiA+ID4+Pj4gSWYgQiBpcyBzZWxl Y3RlZC4NCj4gPiA+Pj4+IChBKSB3aWxsIGdldCBub3RpZmljYXRpb24gd2l0aCB0aGUgd2l0aGRy YXdhbCBjb2RlICc3Jw0KPiA+ID4+Pj4gKEIpIHdpbGwgZ2V0IDIuMDENCj4gPiA+Pj4+DQo+ID4g Pj4+IFtNZWRdIFllcy4gVGhlIGN1cnJlbnQgdGV4dCBkb2VzIGNhbGxzIG91dCB5b3VyIHN0ZXAg KDEpIGluIDQuNC4yLg0KPiA+ID4+PiBZb3VyDQo+ID4gPj4gc3RlcCAoMikgaXMgbm90IGNhbGxl ZCBleHBsaWNpdCBpbiB0aGUgdGV4dCBiZWNhdXNlIHRoZXJlIGlzIG5vDQo+ID4gPj4gY29uZnVz aW9uIGFib3V0IHdoaWNoIGNvZGUgdG8gcmV0dXJuIHdoZW4gYSByZXF1ZXN0IGlzIGFjY2VwdGVk IHRvIGJlDQo+IGhvbm9yZWQuDQo+ID4gPj4+IFRoZSB0ZXh0IGZvY3VzZXMgb24gY2FzZXMgd2hp Y2ggcmVxdWlyZXMgc3BlY2lmaWMgaGFuZGxpbmc6DQo+ID4gPj4+IC0gaW5hY3RpdmUgcmVxdWVz dCBiZWNhdXNlIG9mIGEgY29uZmxpY3QNCj4gPiA+Pj4gLSBtdWx0aXBsZSBhY3RpdmUgY29uZmxp Y3RpbmcgcmVxdWVzdHMNCj4gPiA+Pj4NCj4gPiA+Pj4+IGVsc2UgSWYgQiBpcyBub3Qgc2VsZWN0 ZWQuDQo+ID4gPj4+PiAoQikgd2lsbCBnZXQgNC4wOQ0KPiA+ID4+Pj4NCj4gPiA+Pj4gW01lZF0g SW4gdGhpcyBjYXNlLCB0aGUgcmVzb3VyY2UgaXMgbm90IGNyZWF0ZWQgYW5kIGFzIHN1Y2ggY2Fz ZQ0KPiA+IHJldHVybmluZw0KPiA+ID4+IG5vdGlmaWNhdGlvbiBzdGF0dXMgY29kZSBvZiA4IGlz IG5vdCBwb3NzaWJsZSBhcyB5b3UgcmlnaHRmdWwgcG9pbnRlZCBvdXQuDQo+ID4gPj4+IFRoaXMg aXMgd2h5IHdlIHN1Z2dlc3RlZCB0byByZXR1cm4gMi4wMSBmb3IgdGhpcyBjYXNlIHRvbyBzbyB0 aGF0DQo+ID4gPj4+IGFuDQo+ID4gdXBkYXRlDQo+ID4gPj4gb2YgdGhlIHN0YXR1cyBjYW4gYmUg c2VudCB0byB0aGUgY2xpZW50IHVwb24gY2hhbmdlLg0KPiA+ID4+IEkgZG9uJ3QgdGhpbmsgaXQg aXMgbmVlZGVkIHRvIG9ibGlnYXRlIHJldHVybmluZyBvZiAyLjAxLg0KPiA+ID4+IElmIGl0IGlz IG9idmlvdXMgdGhhdCB0aGUgRE9UUyBzZXJ2ZXIgbmVlZCBub3QgdG8gY3JlYXRlIHJlc291cmNl DQo+ID4gPj4gb2YgdGhlIGNvbmZsaWN0aW5nIHJlcXVlc3QsIGl0IG1heSByZXR1cm4gNC4wOS4N Cj4gPiA+PiBTbywgcmV0dXJuaW5nIG9mIDQuMDkgc2hvdWxkIGJlIGFsbG93ZWQgaW4gdGhpcyBj YXNlLg0KPiA+ID4+IEl0IHNob3VsZCBiZSBsZWZ0IGFzIGltcGxlbWVudGF0aW9uLSBhbmQgZGVw bG95bWVudC1zcGVjaWZpYy4NCj4gPiA+Pg0KPiA+ID4+DQo+ID4gPiBbTWVkXSBEbyB5b3UgbWVh biB0aGF0IHRoZSB0ZXh0IHNob3VsZCBiZSBtb2RpZmllZCB0byBhbGxvdyBmb3IgYm90aA0KPiA+ ID4gMi4wMQ0KPiA+IG9yIDQuMDkgdG8gYmUgcmV0dXJuZWQgZGVwZW5kaW5nIG9uIHNvbWUgbG9j YWwgcG9saWN5Pw0KPiA+ID4NCj4gPiA+IGUuZy4sDQo+ID4gPg0KPiA+ID4gT0xEOg0KPiA+ID4g ICAgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcgbWl0aWdh dGlvbiByZXF1ZXN0DQo+ID4gPiAgICAgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwgYW5k IHRoZSBET1RTIHNlcnZlciBkZWNpZGVzIHRvIG1haW50YWluDQo+ID4gPiAgICAgdGhlIGNvbmZs aWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdCwgdGhlIERPVFMgc2VydmVyIHJldHVybnMgNC4wOQ0K PiA+ID4gICAgIChDb25mbGljdCkgW1JGQzgxMzJdIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMgY2xp ZW50LiBUaGUgcmVzcG9uc2UNCj4gPiA+ICAgICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24g Zm9yIGEgRE9UUyBjbGllbnQgdG8gcmVjb2duaXplIHRoZSBzb3VyY2UNCj4gPiA+ICAgICBvZiB0 aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+ID4NCj4gPiA+IE5FVzoNCj4gPiA+ ICAgICBJZiB0aGUgcmVxdWVzdCBpcyBjb25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nIG1pdGln YXRpb24gcmVxdWVzdA0KPiA+ID4gICAgIGZyb20gYSBkaWZmZXJlbnQgRE9UUyBjbGllbnQsIHRo ZSBET1RTIHNlcnZlciBtYXkgcmV0dXJuIDIuMDEgKENyZWF0ZWQpDQo+ID4gPiAgICAgb3IgNC4w OSAoQ29uZmxpY3QpIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMgY2xpZW50LiBUaGUgcmVzcG9uc2UN Cj4gPiA+ICAgICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQg dG8gcmVjb2duaXplIHRoZSBzb3VyY2UNCj4gPiA+ICAgICBvZiB0aGUgY29uZmxpY3QgYXMgZGVz Y3JpYmVkIGJlbG93Og0KPiA+ID4NCj4gPg0KPiA+IFllcywgaXQgd29ya3MgZm9yIG1lLg0KPiA+ DQo+ID4NCj4gPiA+Pj4+IFRpcnUgc2FpZDoNCj4gPiA+Pj4+ICAgID4gSW4gdGhpcyBjYXNlLCB0 aGUgcmVzb3VyY2Ugc2hvdWxkIGJlIGNyZWF0ZWQgYW5kIHRoZSBzZXJ2ZXINCj4gPiA+Pj4+IHNo b3VsZA0KPiA+ID4+IHJldHVybg0KPiA+ID4+Pj4gc3VjY2VzcyAoMi4wMSBvciAyLjA0KSByZXNw b25zZSBjb2RlIGFsb25nIHdpdGggdGhlIGNvbmZsaWN0LQ0KPiA+IGluZm9ybWF0aW9uLg0KPiA+ ID4+Pj4gSW4gdGhpcyBzaXR1YXRpb24sIChCKSB3aWxsIGdldCAyLjAxIG9yIDIuMDQgYWxvbmcg d2l0aCB0aGUNCj4gPiA+Pj4+IHJlamVjdGVkDQo+ID4gY29kZQ0KPiA+ID4+ICc4Jw0KPiA+ID4+ Pj4gKFdoaWNoIG1pdGlnYXRpb24gcmVxdWVzdCB3aWxsIGJlIHNlbGVjdGVkIGJ5IHRoZSBET1RT IHNlcnZlciBpcw0KPiA+ID4+Pj4gaW1wbGVtZW50YXRpb24tIGFuZCBkZXBsb3ltZW50LXNwZWNp ZmljLikNCj4gPiA+Pj4+DQo+ID4gPj4+PiBUaGFua3MsDQo+ID4gPj4+PiBLYW5hbWUNCj4gPiA+ Pj4+DQo+ID4gPj4+Pg0KPiA+ID4+Pj4gT24gMjAxOC8wNS8xMSAxNTowOSwgbW9oYW1lZC5ib3Vj YWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPiA+Pj4+PiBIaSBLYW5hbWUsDQo+ID4gPj4+Pj4N Cj4gPiA+Pj4+PiBJZiB0aGUgc2VydmVyIGRlY2lkZXMgbm90IHRvIG1haW50YWluIHRoZSBjb25m bGljdGluZyByZXF1ZXN0LA0KPiA+ID4+Pj4+IHRoZW4gdGhlDQo+ID4gPj4+PiBwcmVzZW50IHJl cXVlc3Qgd2lsbCBiZSBwcm9jZXNzZWQgYXMgbm9ybWFsOiB0aGF0IGlzIDIuMDEgd2lsbCBiZQ0K PiA+IHJldHVybmVkDQo+ID4gPj4gdG8NCj4gPiA+Pj4+IGFjayBzdWNjZXNzZnVsIGhhbmRsaW5n LiBBIG5vdGlmaWNhdGlvbiB3aWxsIGJlIHNlbnQgdG8gdGhlDQo+ID4gPj4+PiBjbGllbnQgb3du ZXINCj4gPiA+PiBvZg0KPiA+ID4+Pj4gdGhlIGNvbmZsaWN0aW5nIHJlcXVlc3QgdG8gbm90aWZ5 IHdpdGhkcmF3YWwgKHNlY3Rpb24gNC40LjIpLg0KPiA+ID4+Pj4+IFRoZSB0ZXh0IGZvY3VzZXMg b24gdGhlIGNhc2UgIiwgYW5kIHRoZSBET1RTIHNlcnZlciBkZWNpZGVzIHRvDQo+ID4gPj4+Pj4g bWFpbnRhaW4NCj4gPiA+PiB0aGUNCj4gPiA+Pj4+IGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVx dWVzdCIgYmVjYXVzZSB0aGlzIGlzIHRoZSBvbmUgd2hpY2gNCj4gPiA+Pj4+IHJlcXVpcmVzIGFk ZGl0aW9uYWwgc3BlY2lmaWNhdGlvbiB2cy4gbm9ybWFsIHJlcXVlc3QgdGhhdCBpcw0KPiA+ID4+ Pj4gYWNjZXB0ZWQgYnkgYQ0KPiA+IHNlcnZlci4NCj4gPiA+Pj4+PiBDaGVlcnMsDQo+ID4gPj4+ Pj4gTWVkDQo+ID4gPj4+Pj4NCj4gPiA+Pj4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0t DQo+ID4gPj4+Pj4+IERlwqA6IGthbmFtZSBuaXNoaXp1a2EgW21haWx0bzprYW5hbWVAbnR0djYu anBdIEVudm95w6nCoDoNCj4gPiA+Pj4+Pj4gbWVyY3JlZGkgOSBtYWkgMjAxOCAxMDo0MSDDgMKg OiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOIENjwqA6DQo+ID4gPj4+Pj4+IGRvdHNAaWV0Zi5v cmcgT2JqZXTCoDogUmU6IFtEb3RzXSBJLUQgQWN0aW9uOg0KPiA+ID4+Pj4+PiBkcmFmdC1pZXRm LWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4gPj4+Pj4+DQo+ID4gPj4+Pj4+IEhpIE1l ZCwNCj4gPiA+Pj4+Pj4NCj4gPiA+Pj4+Pj4gSSdtIE9LIHdpdGggdGhpcyBjaGFuZ2UuDQo+ID4g Pj4+Pj4+IEhvd2V2ZXIsIHRvIGJlIHByZWNpc2UsIEknZCBsaWtlIHRvIHN1Z2dlc3QgdG8gc3Rh dGUgYWJvdXQgdGhlDQo+ID4gPj4+Pj4+IGNhc2UNCj4gPiB0aGUNCj4gPiA+Pj4+IERPVFMNCj4g PiA+Pj4+Pj4gc2VydmVyIGRlY2lkZXMgTk9UIHRvIG1haW50YWluIGl0Lg0KPiA+ID4+Pj4+Pg0K PiA+ID4+Pj4+PiBORVctMjoNCj4gPiA+Pj4+Pj4gICAgIMKgwqAgSWYgdGhlIHJlcXVlc3QgaXMg Y29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZw0KPiA+ID4+Pj4+PiBtaXRpZ2F0aW9uDQo+ID4g cmVxdWVzdA0KPiA+ID4+Pj4+PiAgICAgwqDCoCBmcm9tIGEgZGlmZmVyZW50IERPVFMgY2xpZW50 LCBhbmQgdGhlIERPVFMgc2VydmVyDQo+ID4gPj4+Pj4+IGRlY2lkZXMgdG8NCj4gPiA+PiBtYWlu dGFpbg0KPiA+ID4+Pj4+PiAgICAgwqDCoCB0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1 ZXN0LCB0aGUgRE9UUyBzZXJ2ZXINCj4gPiA+Pj4+Pj4gcmV0dXJucw0KPiA+IDIuMDENCj4gPiA+ Pj4+Pj4gICAgIMKgwqAgKENyZWF0ZWQpIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMgY2xpZW50Lg0K PiA+ID4+Pj4+PiAgICAgwqDCoCBPdGhlcndpc2UsIHRoZSBET1RTIHNlcnZlciByZXR1cm5zIDQu MDkgKENvbmZsaWN0KSBbUkZDODEzMl0uDQo+ID4gPj4+Pj4+ICAgICDCoMKgIFRoZSByZXNwb25z ZSBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQgdG8NCj4gPiA+ Pj4+Pj4gICAgIMKgwqAgcmVjb2duaXplIHRoZSBzb3VyY2Ugb2YgdGhlIGNvbmZsaWN0IGFzIGRl c2NyaWJlZCBiZWxvdzoNCj4gPiA+Pj4+Pj4NCj4gPiA+Pj4+Pj4gdGhhbmtzLA0KPiA+ID4+Pj4+ PiBLYW5hbWUNCj4gPiA+Pj4+Pj4NCj4gPiA+Pj4+Pj4gT24gMjAxOC8wNS8wOSAxNDo1MSwgbW9o YW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPiA+Pj4+Pj4+IEhpIEthbmFtZSwN Cj4gPiA+Pj4+Pj4+DQo+ID4gPj4+Pj4+PiBBZnRlciB0aGlua2luZyBhYm91dCB0aGlzLCBJIGRv IHRoaW5rIHRoYXQgeW91IGhhdmUgYSB2YWxpZA0KPiA+ID4+Pj4+Pj4gcG9pbnQuIEkNCj4gPiA+ Pj4+Pj4gc3VnZ2VzdCB0byBtYWtlIHRvIG1ha2UgdGhpcyBjaGFuZ2UgKG1hcmtlZCB3aXRoIF5e Xl4pDQo+ID4gPj4+Pj4+PiBPTEQ6DQo+ID4gPj4+Pj4+PiAgICAgICAgSWYgdGhlIHJlcXVlc3Qg aXMgY29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZw0KPiA+ID4+Pj4+Pj4gbWl0aWdhdGlvbg0K PiA+IHJlcXVlc3QNCj4gPiA+Pj4+Pj4+ICAgICAgICBmcm9tIGEgZGlmZmVyZW50IERPVFMgY2xp ZW50LCBhbmQgdGhlIERPVFMgc2VydmVyDQo+ID4gPj4+Pj4+PiBkZWNpZGVzIHRvDQo+ID4gPj4+ PiBtYWludGFpbg0KPiA+ID4+Pj4+Pj4gICAgICAgIHRoZSBjb25mbGljdGluZyBtaXRpZ2F0aW9u IHJlcXVlc3QsIHRoZSBET1RTIHNlcnZlcg0KPiA+ID4+Pj4+Pj4gcmV0dXJucw0KPiA+IDQuMDkN Cj4gPiA+Pj4+Pj4+ICAgICAgICAoQ29uZmxpY3QpIFtSRkM4MTMyXSB0byB0aGUgcmVxdWVzdGlu ZyBET1RTIGNsaWVudC4NCj4gPiA+Pj4+Pj4+IFRoZQ0KPiA+IHJlc3BvbnNlDQo+ID4gPj4+Pj4+ PiAgICAgICAgaW5jbHVkZXMgZW5vdWdoIGluZm9ybWF0aW9uIGZvciBhIERPVFMgY2xpZW50IHRv DQo+ID4gPj4+Pj4+PiByZWNvZ25pemUgdGhlDQo+ID4gPj4+PiBzb3VyY2UNCj4gPiA+Pj4+Pj4+ ICAgICAgICBvZiB0aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+ID4+Pj4+Pj4N Cj4gPiA+Pj4+Pj4+IE5FVzoNCj4gPiA+Pj4+Pj4+ICAgICAgICBJZiB0aGUgcmVxdWVzdCBpcyBj b25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nDQo+ID4gPj4+Pj4+PiBtaXRpZ2F0aW9uDQo+ID4g cmVxdWVzdA0KPiA+ID4+Pj4+Pj4gICAgICAgIGZyb20gYSBkaWZmZXJlbnQgRE9UUyBjbGllbnQs IGFuZCB0aGUgRE9UUyBzZXJ2ZXINCj4gPiA+Pj4+Pj4+IGRlY2lkZXMgdG8NCj4gPiA+Pj4+IG1h aW50YWluDQo+ID4gPj4+Pj4+PiAgICAgICAgdGhlIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVx dWVzdCwgdGhlIERPVFMgc2VydmVyDQo+ID4gPj4+Pj4+PiByZXR1cm5zDQo+ID4gMi4wMQ0KPiA+ ID4+Pj4+Pj4NCj4gPiBeXl5eDQo+ID4gPj4+Pj4+PiAgICAgICAgKENyZWF0ZWQpIHRvIHRoZSBy ZXF1ZXN0aW5nIERPVFMgY2xpZW50LiAgVGhlIHJlc3BvbnNlXg0KPiA+ID4+Pj4+Pj4gICAgICAg IF5eXl5eXl5eDQo+ID4gPj4+Pj4+PiAgICAgICAgaW5jbHVkZXMgZW5vdWdoIGluZm9ybWF0aW9u IGZvciBhIERPVFMgY2xpZW50IHRvDQo+ID4gPj4+Pj4+PiByZWNvZ25pemUgdGhlDQo+ID4gPj4+ PiBzb3VyY2UNCj4gPiA+Pj4+Pj4+ICAgICAgICBvZiB0aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVk IGJlbG93Og0KPiA+ID4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+IENoZWVycywNCj4gPiA+Pj4+Pj4+IE1l ZA0KPiA+ID4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0N Cj4gPiA+Pj4+Pj4+PiBEZcKgOiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBE ZSBsYSBwYXJ0IGRlDQo+ID4gPj4+Pj4+Pj4gbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSBF bnZvecOpwqA6IGx1bmRpIDcgbWFpIDIwMTgNCj4gMDg6MzgNCj4gPiA+Pj4+Pj4+PiDDgMKgOiBr YW5hbWUgbmlzaGl6dWthOyBkb3RzQGlldGYub3JnIE9iamV0wqA6IFJlOiBbRG90c10gSS1EDQo+ ID4gPj4+Pj4+Pj4gQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0 DQo+ID4gPj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+PiBSZS0sDQo+ID4gPj4+Pj4+Pj4NCj4gPiA+Pj4+ Pj4+PiBBZ3JlZSB0aGF0IHRoZSBjb2RlcyBhcmUgbm90IHRoZSBzYW1lLCBidXQgYWx0ZXJuYXRp dmVzIG9uZXMNCj4gPiA+Pj4+Pj4+PiBhcw0KPiA+ID4+Pj4gc3VtbWFyaXplZA0KPiA+ID4+Pj4+ Pj4+IGhlcmU6DQo+ID4gPj4+Pj4+DQo+ID4NCj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9y Zy9hcmNoL21zZy9kb3RzL2hBM01MS2xrWEZpbXBBbjVLU1lUYXlhVmtqQS4NCj4gPiA+Pj4+Pj4+ PiBDaGVlcnMsDQo+ID4gPj4+Pj4+Pj4gTWVkDQo+ID4gPj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4g LS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gPj4+Pj4+Pj4+IERlwqA6IGthbmFtZSBu aXNoaXp1a2EgW21haWx0bzprYW5hbWVAbnR0djYuanBdIEVudm95w6nCoDoNCj4gPiA+Pj4+Pj4+ Pj4gbHVuZGkgNyBtYWkgMjAxOCAwODoyMCDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xO Ow0KPiA+ID4+Pj4+Pj4+PiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFJlOiBbRG90c10gSS1EIEFj dGlvbjoNCj4gPiA+Pj4+Pj4+Pj4gZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLQ0KPiA+ IDE5LnR4dA0KPiA+ID4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+PiBIaSBNZWQsDQo+ID4gPj4+Pj4+ Pj4+DQo+ID4gPj4+Pj4+Pj4+IEkndmUgcmVhZCB0aGUgdGhyZWFkLg0KPiA+ID4+Pj4+Pj4+PiBh bmQgdGhlIGNvZGUgJzgnIG9mIHRoZSB0aHJlYWQgaXMgZGlmZmVyZW50IGZyb20gdGhlIGNvZGUN Cj4gPiA+Pj4+Pj4+Pj4gJzgnIG9mDQo+ID4gdGhlDQo+ID4gPj4+Pj4+Pj4gY3VycmVudA0KPiA+ ID4+Pj4+Pj4+PiBkcmFmdC4NCj4gPiA+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4gdGhleSdkIGJl ZW4gZGlzY3Vzc2luZyB0aGUgNyw4IGFuZCA5IGJhc2VkIG9uIHRoaXMNCj4gPiA+Pj4+Pj4+Pj4g ZGVmaW5pdGlvbiwNCj4gPiByaWdodD8NCj4gPiA+Pj4+Pj4+Pj4NCj4gPiA+PiBodHRwczovL21h aWxhcmNoaXZlLmlldGYub3JnL2FyY2gvbXNnL2RvdHMvN3psanpOOG55Y1pYN0U3Z2hnazF1eDMy DQo+ID4gPj4gTWtNDQo+ID4gPj4+Pj4+Pj4+ID09DQo+ID4gPj4+Pj4+Pj4+IDcgfCBET1RTIFNl cnZlciBoYXMgZGV0ZWN0ZWQgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0cw0KPiA+ID4+ Pj4+Pj4+PiBmcm9tDQo+ID4gPj4+Pj4+IGRpZmZlcmVudA0KPiA+ID4+Pj4+Pj4+PiBET1RTIGNs aWVudHMuwqAgVGhpcyBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgY3VycmVudGx5IGluYWN0aXZlDQo+ ID4gPj4+Pj4+Pj4+IHVudGlsDQo+ID4gPj4gdGhlDQo+ID4gPj4+Pj4+Pj4+IGNvbmZsaWN0cyBh cmUgcmVzb2x2ZWQuIEFub3RoZXIgbWl0aWdhdGlvbiByZXF1ZXN0IGlzIGFjdGl2ZS4NCj4gPiA+ Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4gOCB8IERPVFMgU2VydmVyIGhhcyBkZXRlY3RlZCBjb25m bGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3RzDQo+ID4gPj4+Pj4+Pj4+IGZyb20NCj4gPiA+Pj4+ Pj4gZGlmZmVyZW50DQo+ID4gPj4+Pj4+Pj4+IERPVFMgY2xpZW50cy7CoCBUaGlzIG1pdGlnYXRp b24gcmVxdWVzdCBpcyBjdXJyZW50bHkgYWN0aXZlLg0KPiA+ID4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+ Pj4+PiA5IHwgRE9UUyBTZXJ2ZXIgaGFzIGRldGVjdGVkIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24g cmVxdWVzdHMNCj4gPiA+Pj4+Pj4+Pj4gZnJvbQ0KPiA+ID4+Pj4+PiBkaWZmZXJlbnQNCj4gPiA+ Pj4+Pj4+Pj4gRE9UUyBjbGllbnRzLsKgIEFsbCBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVl c3RzIGFyZSBpbmFjdGl2ZS4NCj4gPiA+Pj4+Pj4+Pj4gPT0NCj4gPiA+Pj4+Pj4+Pj4NCj4gPiA+ Pj4+Pj4+Pj4gS2FuYW1lDQo+ID4gPj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+ Pj4+IE9uIDIwMTgvMDUvMDcgMTU6MTIsIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3Jv dGU6DQo+ID4gPj4+Pj4+Pj4+PiBIaSBLYW5hbWUsDQo+ID4gPj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+ Pj4+Pj4gUGxlYXNlIGNoZWNrDQo+ID4gPj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9h cmNoL21zZy9kb3RzL3pfY1pSOV91MjczSHpDOW8wSXk5RmVRWg0KPiA+ID4+IDBKbw0KPiA+ID4+ Pj4+Pj4+IGFib3V0DQo+ID4gPj4+Pj4+Pj4+IHRoZSByYXRpb25hbGUgZm9yIGFsbG93aW5nIHRv IHJldHVybiBjb2RlICc4JyBldmVuIGluIGENCj4gPiBub3RpZmljYXRpb24NCj4gPiA+Pj4+Pj4+ PiBtZXNzYWdlLg0KPiA+ID4+Pj4+Pj4+PiBUaGUgaW50ZW50IHdhcyB0byBoYXZlIGNvZGUgJzgn IGFzIGEgdHJhbnNpdGlvbiBzdGF0ZS4NCj4gPiA+Pj4+Pj4+Pj4+IENoZWVycywNCj4gPiA+Pj4+ Pj4+Pj4+IE1lZA0KPiA+ID4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2Ug ZCdvcmlnaW5lLS0tLS0gRGXCoDoga2FuYW1lIG5pc2hpenVrYQ0KPiA+ID4+Pj4+Pj4+Pj4+IFtt YWlsdG86a2FuYW1lQG50dHY2LmpwXSBFbnZvecOpwqA6IG1lcmNyZWRpIDIgbWFpIDIwMTgNCj4g PiA+Pj4+Pj4+Pj4+PiAwMjo0OSDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOyBkb3Rz QGlldGYub3JnDQo+IE9iamV0wqA6DQo+ID4gPj4+Pj4+Pj4+Pj4gUmU6IFtEb3RzXSBJLUQgQWN0 aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtDQo+ID4gPj4gMTkudHh0DQo+ID4g Pj4+Pj4+Pj4+Pj4gSGksDQo+ID4gPj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+PiBJJ2QgbGlr ZSB0byBhc2sgb25lIGNsYXJpZmljYXRpb24gcXVlc3Rpb24gYWJvdXQgc3RhdHVzIGNvZGUgODoN Cj4gPiA+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+ICAgICAgIMKgwqAgb8KgIEEgbm90aWZp Y2F0aW9uIG1lc3NhZ2Ugd2l0aCAnc3RhdHVzJyBjb2RlIHNldA0KPiA+ID4+Pj4+Pj4+Pj4+IHRv ICc4DQo+ID4gPj4gKEF0dGFjaw0KPiA+ID4+Pj4+Pj4+Pj4+ICAgICAgIMKgwqDCoMKgwqAgbWl0 aWdhdGlvbiBpcyByZWplY3RlZCknIGFuZCAnY29uZmxpY3Qtc3RhdHVzJw0KPiA+ID4+Pj4+Pj4+ Pj4+IHNldCB0bw0KPiA+ID4+ICcxJw0KPiA+ID4+Pj4gaXMNCj4gPiA+Pj4+Pj4+PiBzZW50DQo+ ID4gPj4+Pj4+Pj4+Pj4gICAgICAgwqDCoMKgwqDCoCB0byBhIERPVFMgY2xpZW50IHRvIGluZGlj YXRlIHRoYXQgdGhpcw0KPiA+ID4+Pj4+Pj4+Pj4+IG1pdGlnYXRpb24NCj4gPiA+PiByZXF1ZXN0 DQo+ID4gPj4+PiBpcw0KPiA+ID4+Pj4+Pj4+Pj4+ICAgICAgIMKgwqDCoMKgwqAgcmVqZWN0ZWQg YmVjYXVzZSBhIGNvbmZsaWN0IGlzIGRldGVjdGVkLg0KPiA+ID4+Pj4+Pj4+Pj4+DQo+ID4gPj4+ Pj4+Pj4+Pj4gSWYgYSBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgcmVqZWN0ZWQgZHVlIHRvIGEgY29u ZmxpY3QsIGl0DQo+ID4gPj4+Pj4+Pj4+Pj4gaXMNCj4gPiA+PiByZWplY3RlZA0KPiA+ID4+Pj4+ PiBhdA0KPiA+ID4+Pj4+Pj4+Pj4+IFBVVCg0LjA5KENvbmZsaWN0KSksIHNvIG5vIHJlc291cmNl IHdpbGwgYmUgY3JlYXRlZC4NCj4gPiA+Pj4+Pj4+Pj4+PiBTbyBpdCBsb29rcyB0aGVyZSBpcyBu byBjaGFuY2UgdG8gcmV0dXJuICc4IChBdHRhY2sNCj4gPiA+Pj4+Pj4+Pj4+PiBtaXRpZ2F0aW9u IGlzDQo+ID4gPj4+Pj4+Pj4+IHJlamVjdGVkKScuDQo+ID4gPj4+Pj4+Pj4+Pj4gdGhhbmtzLA0K PiA+ID4+Pj4+Pj4+Pj4+IEthbmFtZQ0KPiA+ID4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4g T24gMjAxOC8wNC8xMCAyMjo0NywgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbQ0KPiB3cm90 ZToNCj4gPiA+Pj4+Pj4+Pj4+Pj4gUmUtLA0KPiA+ID4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+ Pj4+PiBUaGlzIHZlcnNpb24gYWRkcmVzc2VzIHRoZSBjb21tZW50cyByYWlzZWQgZHVyaW5nIHRo ZQ0KPiA+ID4+Pj4+Pj4+Pj4+PiBXR0xDLCBpbg0KPiA+ID4+Pj4+Pj4+PiBwYXJ0aWN1bGFyOg0K PiA+ID4+Pj4+Pj4+Pj4+PiAtIChDbGFyaWZpY2F0aW9uKSBJbmRpY2F0ZSB0aGF0IG9ubHkgb25l IGhvcC1saW1pdCBpcw0KPiA+ID4+Pj4+Pj4+Pj4+PiBpbmNsdWRlZA0KPiA+ID4+Pj4+Pj4+Pj4+ PiAtIFNwZWNpZnkgdGhlIGxvb3AgZGlhZ25vc3RpYyBwYXlsb2FkDQo+ID4gPj4+Pj4+Pj4+Pj4+ IC0gKENsYXJpZmljYXRpb24pIEluZGljYXRlIGV4cGxpY2l0bHkgdGhhdCBHRVQgbWVzc2FnZXMN Cj4gPiA+Pj4+Pj4+Pj4+Pj4gd2l0aA0KPiA+ICdzaWQnDQo+ID4gPj4+PiBhcmUNCj4gPiA+Pj4+ Pj4+Pj4+PiBhbGxvd2VkDQo+ID4gPj4+Pj4+Pj4+Pj4+IC0gVXBkYXRlIHRoZSByZWRpcmVjdCBi ZWhhdmlvci4NCj4gPiA+Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+Pj4gQ2hlZXJzLA0KPiA+ ID4+Pj4+Pj4+Pj4+PiBNZWQNCj4gPiA+Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+IC0t LS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLSBEZcKgOiBEb3RzDQo+ID4gPj4+Pj4+Pj4+Pj4+PiBb bWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZQ0KPiA+IGludGVybmV0 LQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gZHJhZnRzQGlldGYub3JnDQo+ID4gPj4+Pj4+Pj4+Pj4+PiBF bnZvecOpwqA6IG1hcmRpIDEwIGF2cmlsIDIwMTggMTU6NDAgw4DCoDoNCj4gPiA+Pj4+Pj4+Pj4+ Pj4+IGktZC1hbm5vdW5jZUBpZXRmLm9yZyBDY8KgOiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFtE b3RzXQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25h bC1jaGFubmVsLQ0KPiA+IDE5LnR4dA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+ Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+PiBBIE5ldyBJbnRlcm5ldC1EcmFmdCBpcyBhdmFpbGFibGUg ZnJvbSB0aGUgb24tbGluZQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gSW50ZXJuZXQtDQo+ID4gPj4gRHJh ZnRzDQo+ID4gPj4+Pj4+Pj4+Pj4+PiBkaXJlY3Rvcmllcy4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+IFRo aXMgZHJhZnQgaXMgYSB3b3JrIGl0ZW0gb2YgdGhlIEREb1MgT3BlbiBUaHJlYXQNCj4gPiA+Pj4+ Pj4+Pj4+Pj4+IFNpZ25hbGluZyBXRw0KPiA+IG9mDQo+ID4gPj4+PiB0aGUNCj4gPiA+Pj4+Pj4+ Pj4+PiBJRVRGLg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICBUaXRsZSAgICAgICAg ICAgOiBEaXN0cmlidXRlZCBEZW5pYWwtb2YtU2VydmljZQ0KPiA+IE9wZW4NCj4gPiA+Pj4+Pj4g VGhyZWF0DQo+ID4gPj4+Pj4+Pj4+Pj4gU2lnbmFsaW5nDQo+ID4gPj4+Pj4+Pj4+Pj4+PiAoRE9U UykgU2lnbmFsIENoYW5uZWwgU3BlY2lmaWNhdGlvbg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAg ICAgICAgICBBdXRob3JzICAgICAgICAgOiBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4gPiA+Pj4+Pj4+ Pj4+Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTW9oYW1lZCBCb3VjYWRhaXIN Cj4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUHJhc2hh bnRoIFBhdGlsDQo+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIEFuZHJldyBNb3J0ZW5zZW4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgTmlrIFRlYWd1ZQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gCUZpbGVuYW1lICAg ICAgICA6IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPiA+Pj4+Pj4+ Pj4+Pj4+IAlQYWdlcyAgICAgICAgICAgOiA4Ng0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gCURhdGUgICAg ICAgICAgICA6IDIwMTgtMDQtMTANCj4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+ PiBBYnN0cmFjdDoNCj4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIFRoaXMgZG9jdW1lbnQgc3Bl Y2lmaWVzIHRoZSBET1RTIHNpZ25hbA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gY2hhbm5lbCwgYQ0KPiA+ ID4+IHByb3RvY29sDQo+ID4gPj4+PiBmb3INCj4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIHNp Z25hbGluZyB0aGUgbmVlZCBmb3IgcHJvdGVjdGlvbiBhZ2FpbnN0DQo+ID4gPj4+Pj4+Pj4+Pj4+ PiBEaXN0cmlidXRlZA0KPiA+ID4+Pj4gRGVuaWFsLQ0KPiA+ID4+Pj4+PiBvZi0NCj4gPiA+Pj4+ Pj4+Pj4+Pj4+ICAgICAgICAgIFNlcnZpY2UgKEREb1MpIGF0dGFja3MgdG8gYSBzZXJ2ZXIgY2Fw YWJsZSBvZg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gZW5hYmxpbmcNCj4gPiA+Pj4+IG5ldHdvcmsNCj4g PiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIHRyYWZmaWMgbWl0aWdhdGlvbiBvbiBiZWhhbGYgb2Yg dGhlIHJlcXVlc3RpbmcgY2xpZW50Lg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+ Pj4+ICAgICAgICAgIEEgY29tcGFuaW9uIGRvY3VtZW50IGRlZmluZXMgdGhlIERPVFMgZGF0YQ0K PiA+ID4+Pj4+Pj4+Pj4+Pj4gY2hhbm5lbCwgYQ0KPiA+ID4+Pj4gc2VwYXJhdGUNCj4gPiA+Pj4+ Pj4+Pj4+Pj4+ICAgICAgICAgIHJlbGlhYmxlIGNvbW11bmljYXRpb24gbGF5ZXIgZm9yIERPVFMN Cj4gPiA+Pj4+Pj4+Pj4+Pj4+IG1hbmFnZW1lbnQgYW5kDQo+ID4gPj4+Pj4+Pj4gY29uZmlndXJh dGlvbg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgcHVycG9zZXMuDQo+ID4gPj4+Pj4+Pj4+ Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gRWRpdG9yaWFsIE5vdGUgKFRvIGJlIHJlbW92ZWQgYnkg UkZDIEVkaXRvcikNCj4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAg ICBQbGVhc2UgdXBkYXRlIHRoZXNlIHN0YXRlbWVudHMgd2l0aCB0aGUgUkZDDQo+ID4gPj4+Pj4+ Pj4+Pj4+PiBudW1iZXIgdG8NCj4gPiBiZQ0KPiA+ID4+Pj4+PiBhc3NpZ25lZA0KPiA+ID4+Pj4+ Pj4+PiB0bw0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgdGhpcyBkb2N1bWVudDoNCj4gPiA+ Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBvICAiVGhpcyB2ZXJzaW9u IG9mIHRoaXMgWUFORyBtb2R1bGUgaXMgcGFydCBvZg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gUkZDDQo+ ID4gPj4gWFhYWDsiDQo+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBvICAiUkZDIFhYWFg6IERp c3RyaWJ1dGVkIERlbmlhbC1vZi1TZXJ2aWNlDQo+ID4gPj4+Pj4+Pj4+Pj4+PiBPcGVuDQo+ID4g VGhyZWF0DQo+ID4gPj4+Pj4+IFNpZ25hbGluZw0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAg ICAgKERPVFMpIFNpZ25hbCBDaGFubmVsIFNwZWNpZmljYXRpb24iOw0KPiA+ID4+Pj4+Pj4+Pj4+ Pj4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIG8gICJ8IFtSRkNYWFhYXSB8Ig0KPiA+ID4+ Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIG8gIHJlZmVyZW5jZTogUkZD IFhYWFgNCj4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBQbGVh c2UgdXBkYXRlIFRCRCBzdGF0ZW1lbnRzIHdpdGggdGhlIHBvcnQNCj4gPiA+Pj4+Pj4+Pj4+Pj4+ IG51bWJlciB0bw0KPiA+IGJlDQo+ID4gPj4+Pj4+IGFzc2lnbmVkDQo+ID4gPj4+Pj4+Pj4gdG8N Cj4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIERPVFMgU2lnbmFsIENoYW5uZWwgUHJvdG9jb2wu DQo+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgQWxzbywgcGxl YXNlIHVwZGF0ZSB0aGUgInJldmlzaW9uIiBkYXRlIG9mIHRoZQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4g WUFORw0KPiA+ID4+IG1vZHVsZS4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+ PiBUaGUgSUVURiBkYXRhdHJhY2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczoNCj4g PiA+Pj4+Pj4+Pj4+Pj4+IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWll dGYtZG90cy1zaWduYWwtDQo+ID4gY2hhbm5lbC8NCj4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+ Pj4+Pj4+Pj4+PiBUaGVyZSBhcmUgYWxzbyBodG1saXplZCB2ZXJzaW9ucyBhdmFpbGFibGUgYXQ6 DQo+ID4gPj4+Pj4+Pj4+Pj4+PiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0 Zi1kb3RzLXNpZ25hbC1jaGFubg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gZWwtMTkNCj4gPiA+Pj4+Pj4+ Pj4+Pj4+IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtaWV0Zi1k b3RzLXNpDQo+ID4gPj4+Pj4+Pj4+Pj4+PiBnbmFsLQ0KPiA+ID4+Pj4gY2hhbm5lbC0NCj4gPiA+ Pj4+Pj4+PiAxOQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gQSBkaWZmIGZyb20gdGhlIHByZXZpb3VzIHZl cnNpb24gaXMgYXZhaWxhYmxlIGF0Og0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtZG90cy1zaWduYWwNCj4gPiA+Pj4+Pj4+Pj4+ Pj4+IC0NCj4gPiBjaGFubmVsLQ0KPiA+ID4+IDE5DQo+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+ Pj4+Pj4+Pj4+Pj4gUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51 dGVzIGZyb20NCj4gPiA+Pj4+Pj4+Pj4+Pj4+IHRoZSB0aW1lDQo+ID4gb2YNCj4gPiA+Pj4+Pj4+ Pj4+PiBzdWJtaXNzaW9uDQo+ID4gPj4+Pj4+Pj4+Pj4+PiB1bnRpbCB0aGUgaHRtbGl6ZWQgdmVy c2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0DQo+ID4gPj4+PiB0b29scy5pZXRmLm9yZy4N Cj4gPiA+Pj4+Pj4+Pj4+Pj4+IEludGVybmV0LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUgYnkg YW5vbnltb3VzIEZUUCBhdDoNCj4gPiA+Pj4+Pj4+Pj4+Pj4+IGZ0cDovL2Z0cC5pZXRmLm9yZy9p bnRlcm5ldC1kcmFmdHMvDQo+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiA+Pj4+Pj4+ Pj4+Pj4+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPj4+Pj4+Pj4+Pj4+PiBEb3RzQGlldGYub3Jn DQo+ID4gPj4+Pj4+Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2RvdHMNCj4gPiA+Pj4+Pj4+Pj4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCj4gPiA+Pj4+Pj4+Pj4+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiA+ Pj4+Pj4+Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+ID4+Pj4+Pj4+Pj4+PiBodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPiA+Pj4+Pj4+Pj4+IF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gPj4+Pj4+Pj4+PiBEb3Rz IG1haWxpbmcgbGlzdA0KPiA+ID4+Pj4+Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+ID4+Pj4+Pj4+ Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4gPj4+Pj4+ Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiA+ Pj4+Pj4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+ID4+Pj4+Pj4+IERvdHNAaWV0Zi5vcmcNCj4g PiA+Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4g PiA+Pj4+Pj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQo+ID4gPj4+Pj4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+ID4+Pj4+Pj4gRG90c0BpZXRmLm9y Zw0KPiA+ID4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3Rz DQo+ID4gPj4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18NCj4gPiA+Pj4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+ID4+Pj4+IERvdHNAaWV0Zi5vcmcN Cj4gPiA+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4g PiA+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4g PiA+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiA+Pj4gRG90c0BpZXRmLm9yZw0KPiA+ID4+PiBo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gDQo+IF9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IERvdHMgbWFpbGluZyBs aXN0DQo+IERvdHNAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9kb3RzDQo= From nobody Tue May 15 23:56:02 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 310D8127AD4 for ; Tue, 15 May 2018 23:56:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.7 X-Spam-Level: X-Spam-Status: No, score=-0.7 tagged_above=-999 required=5 tests=[RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 94W5HUoCcSgQ for ; Tue, 15 May 2018 23:55:56 -0700 (PDT) Received: from orange.com (mta239.mail.business.static.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 22B78129C51 for ; Tue, 15 May 2018 23:55:56 -0700 (PDT) Received: from opfedar02.francetelecom.fr (unknown [xx.xx.xx.4]) by opfedar24.francetelecom.fr (ESMTP service) with ESMTP id BCB15C01A4; Wed, 16 May 2018 08:55:54 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.24]) by opfedar02.francetelecom.fr (ESMTP service) with ESMTP id 93789180066; Wed, 16 May 2018 08:55:54 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM7D.corporate.adroot.infra.ftgroup ([fe80::9044:c5ee:4dd2:4f16%19]) with mapi id 14.03.0389.001; Wed, 16 May 2018 08:55:54 +0200 From: To: "Konda, Tirumaleswar Reddy" , "kaname nishizuka" CC: "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT0NF/5sqjFXD5eEKW2iVIpIKRtqP6A2IAgCG5zoCACDXkgIAAAhwAgAAFAwCAAxeuAIAAL3EAgAL6OICAAC9rAIAAC0wAgAS5xwCAAc8UgIAAxkKAgABEsoCAAAn6UIAACZ8Q Date: Wed, 16 May 2018 06:55:53 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF1BD67@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <8ae47725-4db3-e02a-7846-d2f4d5d9b739@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BCA8@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 May 2018 06:56:00 -0000 SGkgVGlydSwgDQoNClBsZWFzZSBzZWUgaW5saW5lLiANCg0KQ2hlZXJzLA0KTWVkDQoNCj4gLS0t LS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+IERlwqA6IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVk ZHkgW21haWx0bzpUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tXQ0KPiBFbnZvecOp wqA6IG1lcmNyZWRpIDE2IG1haSAyMDE4IDA4OjExDQo+IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVk IElNVC9PTE47IGthbmFtZSBuaXNoaXp1a2ENCj4gQ2PCoDogZG90c0BpZXRmLm9yZw0KPiBPYmpl dMKgOiBSRTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5l bC0xOS50eHQNCj4gDQo+IEkgcHJvcG9zZSB0byB1cGRhdGUgdGhlIHRleHQgYXMgZm9sbG93cyB0 byBtYWtlIGl0IG1vcmUgY2xlYXI6DQo+IA0KPiBJZiB0aGUgcmVxdWVzdCBpcyBjb25mbGljdGlu ZyB3aXRoIGFuIGV4aXN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdCBmcm9tIGENCj4gZGlmZmVyZW50 IERPVFMgY2xpZW50LCB0aGUgRE9UUyBzZXJ2ZXIgbWF5IGVpdGhlciBkZWNpZGUgdG8gbWFpbnRh aW4gdGhlDQo+IGNvbmZsaWN0aW5nIHJlcXVlc3Qgb3IgcmVqZWN0IHRoZSBjb25mbGljdGluZyBt aXRpZ2F0aW9uIHJlcXVlc3QuIElmIHRoZSBET1RTDQo+IHNlcnZlciBkZWNpZGVzIHRvIG1haW50 YWluDQo+IHRoZSBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QsDQoNCltNZWRdIEkgZ3Vl c3MgImNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdCIgcG9pbnRzIHRvIHRoZSBuZXcgcmVx dWVzdC4gICANCg0KIHRoZSBET1RTIHNlcnZlciByZXR1cm5zIDIuMDEgKENyZWF0ZWQpIHRvDQo+ IHRoZSByZXF1ZXN0aW5nIERPVFMgY2xpZW50LiBJZiB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRlcyB0 byByZWplY3QgdGhlDQo+IGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdCwgdGhlIERPVFMg c2VydmVyIHJldHVybnMgNC4wOSAoQ29uZmxpY3QpDQo+IFtSRkM4MTMyXSB0byB0aGUgcmVxdWVz dGluZyBET1RTIGNsaWVudA0KDQpbTWVkXSBJZGVtIGFzIGFib3ZlLiAgDQoNCg0KPiBGb3IgYm90 aCAyLjAxIChDcmVhdGVkKSBhbmQgNC4wOSAoQ29uZmxpY3QpIHJlc3BvbnNlcywNCg0KW01lZF0g SSBsaWtlIHRoaXMuDQoNCiB0aGUgcmVzcG9uc2UgbWVzc2FnZQ0KPiBpbmNsdWRlcyBlbm91Z2gg aW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQgdG8gcmVjb2duaXplIHRoZSBzb3VyY2Ugb2Yg dGhlDQo+IGNvbmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxvdzoNCg0KW01lZF0gV2hhdCBhYm91dD8N Cg0KTkVXOg0KDQogICBJZiB0aGUgcmVxdWVzdCBpcyBjb25mbGljdGluZyB3aXRoIGFuIGV4aXN0 aW5nIG1pdGlnYXRpb24gcmVxdWVzdA0KICAgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwg dGhlIERPVFMgc2VydmVyIG1heSByZXR1cm4gMi4wMQ0KICAgKENyZWF0ZWQpIG9yIDQuMDkgKENv bmZsaWN0KSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4gIEZvcg0KICAgZXhhbXBsZToN Cg0KICAgbyAgSWYgdGhlIERPVFMgc2VydmVyIGRlY2lkZXMgdG8gbWFpbnRhaW4gdGhlIG5ldyBt aXRpZ2F0aW9uIHJlcXVlc3QsDQogICAgICB0aGUgRE9UUyBzZXJ2ZXIgcmV0dXJucyAyLjAxIChD cmVhdGVkKSB0byB0aGUgcmVxdWVzdGluZyBET1RTDQogICAgICBjbGllbnQuDQoNCiAgIG8gIElm IHRoZSBET1RTIHNlcnZlciBkZWNpZGVzIHRvIHJlamVjdCB0aGUgbmV3IG1pdGlnYXRpb24gcmVx dWVzdCwNCiAgICAgIHRoZSBET1RTIHNlcnZlciByZXR1cm5zIDQuMDkgKENvbmZsaWN0KSB0byB0 aGUgcmVxdWVzdGluZyBET1RTDQogICAgICBjbGllbnQuDQoNCiAgIEZvciBib3RoIDIuMDEgKENy ZWF0ZWQpIGFuZCA0LjA5IChDb25mbGljdCkgcmVzcG9uc2VzLCB0aGUgcmVzcG9uc2UNCiAgIGlu Y2x1ZGVzIGVub3VnaCBpbmZvcm1hdGlvbiBmb3IgYSBET1RTIGNsaWVudCB0byByZWNvZ25pemUg dGhlIHNvdXJjZQ0KICAgb2YgdGhlIGNvbmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxvdzoNCg0KPiAN Cj4gLVRpcnUNCj4gDQo+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiBGcm9tOiBE b3RzIFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YNCj4gPiBtb2hh bWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4gU2VudDogV2VkbmVzZGF5LCBNYXkgMTYsIDIw MTggMTA6NTIgQU0NCj4gPiBUbzoga2FuYW1lIG5pc2hpenVrYSA8a2FuYW1lQG50dHY2LmpwPg0K PiA+IENjOiBkb3RzQGlldGYub3JnDQo+ID4gU3ViamVjdDogUmU6IFtEb3RzXSBJLUQgQWN0aW9u OiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4NCj4gPiBUaGlzIGVt YWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdCBj bGljayBsaW5rcw0KPiBvcg0KPiA+IG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25p emUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcw0KPiA+IHNhZmUuDQo+ID4NCj4g PiBIaSBLYW5hbWUsDQo+ID4NCj4gPiBUaGFuayB5b3UgZm9yIEFDa2luZy4gSSB3aWxsIGltcGxl bWVudCB0aGlzIGNoYW5nZS4NCj4gPg0KPiA+IENoZWVycywNCj4gPiBNZWQNCj4gPg0KPiA+ID4g LS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gPiBEZcKgOiBrYW5hbWUgbmlzaGl6dWth IFttYWlsdG86a2FuYW1lQG50dHY2LmpwXSBFbnZvecOpwqA6IG1lcmNyZWRpIDE2DQo+ID4gPiBt YWkgMjAxOCAwMzoxNiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOIENjwqA6IGRvdHNA aWV0Zi5vcmcNCj4gPiBPYmpldA0KPiA+ID4gOiBSZTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0 LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPiA+DQo+ID4gPiBIaSBNZWQsDQo+ ID4gPg0KPiA+ID4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+ID4gPg0KPiA+ID4gdGhhbmtzLA0KPiA+ ID4ga2FuYW1lDQo+ID4gPg0KPiA+ID4gT24gMjAxOC8wNS8xNSAyMjoyNiwgbW9oYW1lZC5ib3Vj YWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPiA+ID4gSGkgS2FuYW1lLA0KPiA+ID4gPg0KPiA+ ID4gPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPiA+ID4NCj4gPiA+ID4gQ2hlZXJzLA0KPiA+ID4g PiBNZWQNCj4gPiA+ID4NCj4gPiA+ID4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+ ID4gPj4gRGXCoDoga2FuYW1lIG5pc2hpenVrYSBbbWFpbHRvOmthbmFtZUBudHR2Ni5qcF0gRW52 b3nDqcKgOiBsdW5kaSAxNA0KPiA+ID4gPj4gbWFpIDIwMTggMTE6NDkgw4DCoDogQk9VQ0FEQUlS IE1vaGFtZWQgSU1UL09MTiBDY8KgOiBkb3RzQGlldGYub3JnDQo+ID4gPiA+PiBPYmpldMKgOiBS ZTogW0RvdHNdIEktRCBBY3Rpb246DQo+ID4gPiA+PiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNo YW5uZWwtMTkudHh0DQo+ID4gPiA+Pg0KPiA+ID4gPj4gSGkgTWVkLA0KPiA+ID4gPj4NCj4gPiA+ ID4+IFBsZWFzZSBzZWUgaW5saW5lLg0KPiA+ID4gPj4NCj4gPiA+ID4+IHRoYW5rcywNCj4gPiA+ ID4+IEthbmFtZQ0KPiA+ID4gPj4NCj4gPiA+ID4+IE9uIDIwMTgvMDUvMTEgMTg6MzksIG1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3JvdGU6DQo+ID4gPiA+Pj4gUmUtLA0KPiA+ID4gPj4+ DQo+ID4gPiA+Pj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+ID4gPiA+Pj4NCj4gPiA+ID4+PiBDaGVl cnMsDQo+ID4gPiA+Pj4gTWVkDQo+ID4gPiA+Pj4NCj4gPiA+ID4+Pj4gLS0tLS1NZXNzYWdlIGQn b3JpZ2luZS0tLS0tDQo+ID4gPiA+Pj4+IERlwqA6IGthbmFtZSBuaXNoaXp1a2EgW21haWx0bzpr YW5hbWVAbnR0djYuanBdIEVudm95w6nCoDogdmVuZHJlZGkNCj4gPiA+ID4+Pj4gMTEgbWFpIDIw MTggMTA6NTkgw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTiBDY8KgOg0KPiA+ID4gPj4+ PiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFJlOiBbRG90c10gSS1EIEFjdGlvbjoNCj4gPiA+ID4+ Pj4gZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0KPiA+ID4gPj4+Pg0KPiA+ ID4gPj4+PiBIaSBNZWQsDQo+ID4gPiA+Pj4+DQo+ID4gPiA+Pj4+ICAgID4gSWYgdGhlIHNlcnZl ciBkZWNpZGVzIG5vdCB0byBtYWludGFpbiB0aGUgY29uZmxpY3RpbmcNCj4gPiA+ID4+Pj4gcmVx dWVzdCwgdGhlbg0KPiA+ID4gPj4gdGhlDQo+ID4gPiA+Pj4+IHByZXNlbnQgcmVxdWVzdCB3aWxs IGJlIHByb2Nlc3NlZCBhcyBub3JtYWw6IHRoYXQgaXMgMi4wMSB3aWxsIGJlDQo+ID4gPiByZXR1 cm5lZA0KPiA+ID4gPj4gdG8NCj4gPiA+ID4+Pj4gYWNrIHN1Y2Nlc3NmdWwgaGFuZGxpbmcuIEEg bm90aWZpY2F0aW9uIHdpbGwgYmUgc2VudCB0byB0aGUNCj4gPiA+ID4+Pj4gY2xpZW50IG93bmVy DQo+ID4gPiA+PiBvZg0KPiA+ID4gPj4+PiB0aGUgY29uZmxpY3RpbmcgcmVxdWVzdCB0byBub3Rp Znkgd2l0aGRyYXdhbCAoc2VjdGlvbiA0LjQuMikuDQo+ID4gPiA+Pj4+IEluIHRoYXQgY2FzZSwg dGhlIHN0YXR1cyBjb2RlIGlzICc3JyAoQXR0YWNrIG1pdGlnYXRpb24gaXMNCj4gPiA+ID4+Pj4g d2l0aGRyYXduKQ0KPiA+ID4gPj4+IFtNZWRdIFllcywgdGhhdCBzdGF0dXMgd2lsbCBiZSBzZW50 IHRvIHRoZSBvd25lciBvZiB0aGUgKGV4aXN0aW5nKQ0KPiA+ID4gcmVxdWVzdC4NCj4gPiA+ID4+ Pg0KPiA+ID4gPj4+PiBNeSBvcmlnaW5hbCBxdWVzdGlvbiBpcyB3aGVuIHRoZSBzdGF0dXMgY29k ZSAnOCcgKEF0dGFjaw0KPiA+ID4gPj4+PiBtaXRpZ2F0aW9uIGlzDQo+ID4gPiA+Pj4+IHJlamVj dGVkKSB3aWxsIGJlIHVzZWQuDQo+ID4gPiA+Pj4gW01lZF0gSSBnb3QgdGhhdC4NCj4gPiA+ID4+ Pg0KPiA+ID4gPj4+PiBJbiB0aGUgdGV4dCBpbiB0aGUgZHJhZnQsICJ0aGUgY29uZmxpY3Rpbmcg bWl0aWdhdGlvbiByZXF1ZXN0IiBpcw0KPiA+ID4gPj4gYW1iaWd1b3VzDQo+ID4gPiA+Pj4+IHdo ZXRoZXIgaXQgaXMgYWxyZWFkeSBleGlzdGluZyByZXF1ZXN0IG9yIHRoZSByZXF1ZXN0IHRoYXQg anVzdA0KPiA+ID4gPj4+PiBoYXMNCj4gPiA+ID4+IGFycml2ZWQuDQo+ID4gPiA+Pj4gW01lZF0g SXQgaXMgcmVsYXRlZCB0byB0aGUgYWxyZWFkeSBleGlzdGluZyByZXF1ZXN0Lg0KPiA+ID4gPj4+ DQo+ID4gPiA+Pj4+IFNheSwgdGhlIGV4aXN0aW5nIHJlcXVlc3QgaXMgKEEpLCB0aGVuIGEgbWl0 aWdhdGlvbiByZXF1ZXN0IChCKQ0KPiA+ID4gPj4+PiBhcnJpdmVkDQo+ID4gPiA+PiB3aGljaA0K PiA+ID4gPj4+PiBhcmUgY29uZmxpY3Rpbmcgd2l0aCBBLg0KPiA+ID4gPj4+Pg0KPiA+ID4gPj4+ PiBJZiBCIGlzIHNlbGVjdGVkLg0KPiA+ID4gPj4+PiAoQSkgd2lsbCBnZXQgbm90aWZpY2F0aW9u IHdpdGggdGhlIHdpdGhkcmF3YWwgY29kZSAnNycNCj4gPiA+ID4+Pj4gKEIpIHdpbGwgZ2V0IDIu MDENCj4gPiA+ID4+Pj4NCj4gPiA+ID4+PiBbTWVkXSBZZXMuIFRoZSBjdXJyZW50IHRleHQgZG9l cyBjYWxscyBvdXQgeW91ciBzdGVwICgxKSBpbiA0LjQuMi4NCj4gPiA+ID4+PiBZb3VyDQo+ID4g PiA+PiBzdGVwICgyKSBpcyBub3QgY2FsbGVkIGV4cGxpY2l0IGluIHRoZSB0ZXh0IGJlY2F1c2Ug dGhlcmUgaXMgbm8NCj4gPiA+ID4+IGNvbmZ1c2lvbiBhYm91dCB3aGljaCBjb2RlIHRvIHJldHVy biB3aGVuIGEgcmVxdWVzdCBpcyBhY2NlcHRlZCB0byBiZQ0KPiA+IGhvbm9yZWQuDQo+ID4gPiA+ Pj4gVGhlIHRleHQgZm9jdXNlcyBvbiBjYXNlcyB3aGljaCByZXF1aXJlcyBzcGVjaWZpYyBoYW5k bGluZzoNCj4gPiA+ID4+PiAtIGluYWN0aXZlIHJlcXVlc3QgYmVjYXVzZSBvZiBhIGNvbmZsaWN0 DQo+ID4gPiA+Pj4gLSBtdWx0aXBsZSBhY3RpdmUgY29uZmxpY3RpbmcgcmVxdWVzdHMNCj4gPiA+ ID4+Pg0KPiA+ID4gPj4+PiBlbHNlIElmIEIgaXMgbm90IHNlbGVjdGVkLg0KPiA+ID4gPj4+PiAo Qikgd2lsbCBnZXQgNC4wOQ0KPiA+ID4gPj4+Pg0KPiA+ID4gPj4+IFtNZWRdIEluIHRoaXMgY2Fz ZSwgdGhlIHJlc291cmNlIGlzIG5vdCBjcmVhdGVkIGFuZCBhcyBzdWNoIGNhc2UNCj4gPiA+IHJl dHVybmluZw0KPiA+ID4gPj4gbm90aWZpY2F0aW9uIHN0YXR1cyBjb2RlIG9mIDggaXMgbm90IHBv c3NpYmxlIGFzIHlvdSByaWdodGZ1bCBwb2ludGVkDQo+IG91dC4NCj4gPiA+ID4+PiBUaGlzIGlz IHdoeSB3ZSBzdWdnZXN0ZWQgdG8gcmV0dXJuIDIuMDEgZm9yIHRoaXMgY2FzZSB0b28gc28gdGhh dA0KPiA+ID4gPj4+IGFuDQo+ID4gPiB1cGRhdGUNCj4gPiA+ID4+IG9mIHRoZSBzdGF0dXMgY2Fu IGJlIHNlbnQgdG8gdGhlIGNsaWVudCB1cG9uIGNoYW5nZS4NCj4gPiA+ID4+IEkgZG9uJ3QgdGhp bmsgaXQgaXMgbmVlZGVkIHRvIG9ibGlnYXRlIHJldHVybmluZyBvZiAyLjAxLg0KPiA+ID4gPj4g SWYgaXQgaXMgb2J2aW91cyB0aGF0IHRoZSBET1RTIHNlcnZlciBuZWVkIG5vdCB0byBjcmVhdGUg cmVzb3VyY2UNCj4gPiA+ID4+IG9mIHRoZSBjb25mbGljdGluZyByZXF1ZXN0LCBpdCBtYXkgcmV0 dXJuIDQuMDkuDQo+ID4gPiA+PiBTbywgcmV0dXJuaW5nIG9mIDQuMDkgc2hvdWxkIGJlIGFsbG93 ZWQgaW4gdGhpcyBjYXNlLg0KPiA+ID4gPj4gSXQgc2hvdWxkIGJlIGxlZnQgYXMgaW1wbGVtZW50 YXRpb24tIGFuZCBkZXBsb3ltZW50LXNwZWNpZmljLg0KPiA+ID4gPj4NCj4gPiA+ID4+DQo+ID4g PiA+IFtNZWRdIERvIHlvdSBtZWFuIHRoYXQgdGhlIHRleHQgc2hvdWxkIGJlIG1vZGlmaWVkIHRv IGFsbG93IGZvciBib3RoDQo+ID4gPiA+IDIuMDENCj4gPiA+IG9yIDQuMDkgdG8gYmUgcmV0dXJu ZWQgZGVwZW5kaW5nIG9uIHNvbWUgbG9jYWwgcG9saWN5Pw0KPiA+ID4gPg0KPiA+ID4gPiBlLmcu LA0KPiA+ID4gPg0KPiA+ID4gPiBPTEQ6DQo+ID4gPiA+ICAgICBJZiB0aGUgcmVxdWVzdCBpcyBj b25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdA0KPiA+ID4gPiAg ICAgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwgYW5kIHRoZSBET1RTIHNlcnZlciBkZWNp ZGVzIHRvDQo+IG1haW50YWluDQo+ID4gPiA+ICAgICB0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlv biByZXF1ZXN0LCB0aGUgRE9UUyBzZXJ2ZXIgcmV0dXJucyA0LjA5DQo+ID4gPiA+ICAgICAoQ29u ZmxpY3QpIFtSRkM4MTMyXSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4gVGhlIHJlc3Bv bnNlDQo+ID4gPiA+ICAgICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBj bGllbnQgdG8gcmVjb2duaXplIHRoZQ0KPiBzb3VyY2UNCj4gPiA+ID4gICAgIG9mIHRoZSBjb25m bGljdCBhcyBkZXNjcmliZWQgYmVsb3c6DQo+ID4gPiA+DQo+ID4gPiA+IE5FVzoNCj4gPiA+ID4g ICAgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcgbWl0aWdh dGlvbiByZXF1ZXN0DQo+ID4gPiA+ICAgICBmcm9tIGEgZGlmZmVyZW50IERPVFMgY2xpZW50LCB0 aGUgRE9UUyBzZXJ2ZXIgbWF5IHJldHVybiAyLjAxDQo+IChDcmVhdGVkKQ0KPiA+ID4gPiAgICAg b3IgNC4wOSAoQ29uZmxpY3QpIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMgY2xpZW50LiBUaGUgcmVz cG9uc2UNCj4gPiA+ID4gICAgIGluY2x1ZGVzIGVub3VnaCBpbmZvcm1hdGlvbiBmb3IgYSBET1RT IGNsaWVudCB0byByZWNvZ25pemUgdGhlDQo+IHNvdXJjZQ0KPiA+ID4gPiAgICAgb2YgdGhlIGNv bmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxvdzoNCj4gPiA+ID4NCj4gPiA+DQo+ID4gPiBZZXMsIGl0 IHdvcmtzIGZvciBtZS4NCj4gPiA+DQo+ID4gPg0KPiA+ID4gPj4+PiBUaXJ1IHNhaWQ6DQo+ID4g PiA+Pj4+ICAgID4gSW4gdGhpcyBjYXNlLCB0aGUgcmVzb3VyY2Ugc2hvdWxkIGJlIGNyZWF0ZWQg YW5kIHRoZSBzZXJ2ZXINCj4gPiA+ID4+Pj4gc2hvdWxkDQo+ID4gPiA+PiByZXR1cm4NCj4gPiA+ ID4+Pj4gc3VjY2VzcyAoMi4wMSBvciAyLjA0KSByZXNwb25zZSBjb2RlIGFsb25nIHdpdGggdGhl IGNvbmZsaWN0LQ0KPiA+ID4gaW5mb3JtYXRpb24uDQo+ID4gPiA+Pj4+IEluIHRoaXMgc2l0dWF0 aW9uLCAoQikgd2lsbCBnZXQgMi4wMSBvciAyLjA0IGFsb25nIHdpdGggdGhlDQo+ID4gPiA+Pj4+ IHJlamVjdGVkDQo+ID4gPiBjb2RlDQo+ID4gPiA+PiAnOCcNCj4gPiA+ID4+Pj4gKFdoaWNoIG1p dGlnYXRpb24gcmVxdWVzdCB3aWxsIGJlIHNlbGVjdGVkIGJ5IHRoZSBET1RTIHNlcnZlciBpcw0K PiA+ID4gPj4+PiBpbXBsZW1lbnRhdGlvbi0gYW5kIGRlcGxveW1lbnQtc3BlY2lmaWMuKQ0KPiA+ ID4gPj4+Pg0KPiA+ID4gPj4+PiBUaGFua3MsDQo+ID4gPiA+Pj4+IEthbmFtZQ0KPiA+ID4gPj4+ Pg0KPiA+ID4gPj4+Pg0KPiA+ID4gPj4+PiBPbiAyMDE4LzA1LzExIDE1OjA5LCBtb2hhbWVkLmJv dWNhZGFpckBvcmFuZ2UuY29tIHdyb3RlOg0KPiA+ID4gPj4+Pj4gSGkgS2FuYW1lLA0KPiA+ID4g Pj4+Pj4NCj4gPiA+ID4+Pj4+IElmIHRoZSBzZXJ2ZXIgZGVjaWRlcyBub3QgdG8gbWFpbnRhaW4g dGhlIGNvbmZsaWN0aW5nIHJlcXVlc3QsDQo+ID4gPiA+Pj4+PiB0aGVuIHRoZQ0KPiA+ID4gPj4+ PiBwcmVzZW50IHJlcXVlc3Qgd2lsbCBiZSBwcm9jZXNzZWQgYXMgbm9ybWFsOiB0aGF0IGlzIDIu MDEgd2lsbCBiZQ0KPiA+ID4gcmV0dXJuZWQNCj4gPiA+ID4+IHRvDQo+ID4gPiA+Pj4+IGFjayBz dWNjZXNzZnVsIGhhbmRsaW5nLiBBIG5vdGlmaWNhdGlvbiB3aWxsIGJlIHNlbnQgdG8gdGhlDQo+ ID4gPiA+Pj4+IGNsaWVudCBvd25lcg0KPiA+ID4gPj4gb2YNCj4gPiA+ID4+Pj4gdGhlIGNvbmZs aWN0aW5nIHJlcXVlc3QgdG8gbm90aWZ5IHdpdGhkcmF3YWwgKHNlY3Rpb24gNC40LjIpLg0KPiA+ ID4gPj4+Pj4gVGhlIHRleHQgZm9jdXNlcyBvbiB0aGUgY2FzZSAiLCBhbmQgdGhlIERPVFMgc2Vy dmVyIGRlY2lkZXMgdG8NCj4gPiA+ID4+Pj4+IG1haW50YWluDQo+ID4gPiA+PiB0aGUNCj4gPiA+ ID4+Pj4gY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0IiBiZWNhdXNlIHRoaXMgaXMgdGhl IG9uZSB3aGljaA0KPiA+ID4gPj4+PiByZXF1aXJlcyBhZGRpdGlvbmFsIHNwZWNpZmljYXRpb24g dnMuIG5vcm1hbCByZXF1ZXN0IHRoYXQgaXMNCj4gPiA+ID4+Pj4gYWNjZXB0ZWQgYnkgYQ0KPiA+ ID4gc2VydmVyLg0KPiA+ID4gPj4+Pj4gQ2hlZXJzLA0KPiA+ID4gPj4+Pj4gTWVkDQo+ID4gPiA+ Pj4+Pg0KPiA+ID4gPj4+Pj4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+ID4gPj4+ Pj4+IERlwqA6IGthbmFtZSBuaXNoaXp1a2EgW21haWx0bzprYW5hbWVAbnR0djYuanBdIEVudm95 w6nCoDoNCj4gPiA+ID4+Pj4+PiBtZXJjcmVkaSA5IG1haSAyMDE4IDEwOjQxIMOAwqA6IEJPVUNB REFJUiBNb2hhbWVkIElNVC9PTE4gQ2PCoDoNCj4gPiA+ID4+Pj4+PiBkb3RzQGlldGYub3JnIE9i amV0wqA6IFJlOiBbRG90c10gSS1EIEFjdGlvbjoNCj4gPiA+ID4+Pj4+PiBkcmFmdC1pZXRmLWRv dHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4gPiA+Pj4+Pj4NCj4gPiA+ID4+Pj4+PiBIaSBN ZWQsDQo+ID4gPiA+Pj4+Pj4NCj4gPiA+ID4+Pj4+PiBJJ20gT0sgd2l0aCB0aGlzIGNoYW5nZS4N Cj4gPiA+ID4+Pj4+PiBIb3dldmVyLCB0byBiZSBwcmVjaXNlLCBJJ2QgbGlrZSB0byBzdWdnZXN0 IHRvIHN0YXRlIGFib3V0IHRoZQ0KPiA+ID4gPj4+Pj4+IGNhc2UNCj4gPiA+IHRoZQ0KPiA+ID4g Pj4+PiBET1RTDQo+ID4gPiA+Pj4+Pj4gc2VydmVyIGRlY2lkZXMgTk9UIHRvIG1haW50YWluIGl0 Lg0KPiA+ID4gPj4+Pj4+DQo+ID4gPiA+Pj4+Pj4gTkVXLTI6DQo+ID4gPiA+Pj4+Pj4gICAgIMKg wqAgSWYgdGhlIHJlcXVlc3QgaXMgY29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZw0KPiA+ID4g Pj4+Pj4+IG1pdGlnYXRpb24NCj4gPiA+IHJlcXVlc3QNCj4gPiA+ID4+Pj4+PiAgICAgwqDCoCBm cm9tIGEgZGlmZmVyZW50IERPVFMgY2xpZW50LCBhbmQgdGhlIERPVFMgc2VydmVyDQo+ID4gPiA+ Pj4+Pj4gZGVjaWRlcyB0bw0KPiA+ID4gPj4gbWFpbnRhaW4NCj4gPiA+ID4+Pj4+PiAgICAgwqDC oCB0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUyBzZXJ2ZXINCj4g PiA+ID4+Pj4+PiByZXR1cm5zDQo+ID4gPiAyLjAxDQo+ID4gPiA+Pj4+Pj4gICAgIMKgwqAgKENy ZWF0ZWQpIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMgY2xpZW50Lg0KPiA+ID4gPj4+Pj4+ICAgICDC oMKgIE90aGVyd2lzZSwgdGhlIERPVFMgc2VydmVyIHJldHVybnMgNC4wOSAoQ29uZmxpY3QpDQo+ IFtSRkM4MTMyXS4NCj4gPiA+ID4+Pj4+PiAgICAgwqDCoCBUaGUgcmVzcG9uc2UgaW5jbHVkZXMg ZW5vdWdoIGluZm9ybWF0aW9uIGZvciBhIERPVFMgY2xpZW50DQo+IHRvDQo+ID4gPiA+Pj4+Pj4g ICAgIMKgwqAgcmVjb2duaXplIHRoZSBzb3VyY2Ugb2YgdGhlIGNvbmZsaWN0IGFzIGRlc2NyaWJl ZCBiZWxvdzoNCj4gPiA+ID4+Pj4+Pg0KPiA+ID4gPj4+Pj4+IHRoYW5rcywNCj4gPiA+ID4+Pj4+ PiBLYW5hbWUNCj4gPiA+ID4+Pj4+Pg0KPiA+ID4gPj4+Pj4+IE9uIDIwMTgvMDUvMDkgMTQ6NTEs IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3JvdGU6DQo+ID4gPiA+Pj4+Pj4+IEhpIEth bmFtZSwNCj4gPiA+ID4+Pj4+Pj4NCj4gPiA+ID4+Pj4+Pj4gQWZ0ZXIgdGhpbmtpbmcgYWJvdXQg dGhpcywgSSBkbyB0aGluayB0aGF0IHlvdSBoYXZlIGEgdmFsaWQNCj4gPiA+ID4+Pj4+Pj4gcG9p bnQuIEkNCj4gPiA+ID4+Pj4+PiBzdWdnZXN0IHRvIG1ha2UgdG8gbWFrZSB0aGlzIGNoYW5nZSAo bWFya2VkIHdpdGggXl5eXikNCj4gPiA+ID4+Pj4+Pj4gT0xEOg0KPiA+ID4gPj4+Pj4+PiAgICAg ICAgSWYgdGhlIHJlcXVlc3QgaXMgY29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZw0KPiA+ID4g Pj4+Pj4+PiBtaXRpZ2F0aW9uDQo+ID4gPiByZXF1ZXN0DQo+ID4gPiA+Pj4+Pj4+ICAgICAgICBm cm9tIGEgZGlmZmVyZW50IERPVFMgY2xpZW50LCBhbmQgdGhlIERPVFMgc2VydmVyDQo+ID4gPiA+ Pj4+Pj4+IGRlY2lkZXMgdG8NCj4gPiA+ID4+Pj4gbWFpbnRhaW4NCj4gPiA+ID4+Pj4+Pj4gICAg ICAgIHRoZSBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QsIHRoZSBET1RTIHNlcnZlcg0K PiA+ID4gPj4+Pj4+PiByZXR1cm5zDQo+ID4gPiA0LjA5DQo+ID4gPiA+Pj4+Pj4+ICAgICAgICAo Q29uZmxpY3QpIFtSRkM4MTMyXSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4NCj4gPiA+ ID4+Pj4+Pj4gVGhlDQo+ID4gPiByZXNwb25zZQ0KPiA+ID4gPj4+Pj4+PiAgICAgICAgaW5jbHVk ZXMgZW5vdWdoIGluZm9ybWF0aW9uIGZvciBhIERPVFMgY2xpZW50IHRvDQo+ID4gPiA+Pj4+Pj4+ IHJlY29nbml6ZSB0aGUNCj4gPiA+ID4+Pj4gc291cmNlDQo+ID4gPiA+Pj4+Pj4+ICAgICAgICBv ZiB0aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+ID4gPj4+Pj4+Pg0KPiA+ID4g Pj4+Pj4+PiBORVc6DQo+ID4gPiA+Pj4+Pj4+ICAgICAgICBJZiB0aGUgcmVxdWVzdCBpcyBjb25m bGljdGluZyB3aXRoIGFuIGV4aXN0aW5nDQo+ID4gPiA+Pj4+Pj4+IG1pdGlnYXRpb24NCj4gPiA+ IHJlcXVlc3QNCj4gPiA+ID4+Pj4+Pj4gICAgICAgIGZyb20gYSBkaWZmZXJlbnQgRE9UUyBjbGll bnQsIGFuZCB0aGUgRE9UUyBzZXJ2ZXINCj4gPiA+ID4+Pj4+Pj4gZGVjaWRlcyB0bw0KPiA+ID4g Pj4+PiBtYWludGFpbg0KPiA+ID4gPj4+Pj4+PiAgICAgICAgdGhlIGNvbmZsaWN0aW5nIG1pdGln YXRpb24gcmVxdWVzdCwgdGhlIERPVFMgc2VydmVyDQo+ID4gPiA+Pj4+Pj4+IHJldHVybnMNCj4g PiA+IDIuMDENCj4gPiA+ID4+Pj4+Pj4NCj4gPiA+IF5eXl4NCj4gPiA+ID4+Pj4+Pj4gICAgICAg IChDcmVhdGVkKSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4gIFRoZSByZXNwb25zZV4N Cj4gPiA+ID4+Pj4+Pj4gICAgICAgIF5eXl5eXl5eDQo+ID4gPiA+Pj4+Pj4+ICAgICAgICBpbmNs dWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQgdG8NCj4gPiA+ID4+Pj4+ Pj4gcmVjb2duaXplIHRoZQ0KPiA+ID4gPj4+PiBzb3VyY2UNCj4gPiA+ID4+Pj4+Pj4gICAgICAg IG9mIHRoZSBjb25mbGljdCBhcyBkZXNjcmliZWQgYmVsb3c6DQo+ID4gPiA+Pj4+Pj4+DQo+ID4g PiA+Pj4+Pj4+IENoZWVycywNCj4gPiA+ID4+Pj4+Pj4gTWVkDQo+ID4gPiA+Pj4+Pj4+DQo+ID4g PiA+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiA+ID4+Pj4+Pj4+IERl wqA6IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIERlIGxhIHBhcnQgZGUNCj4g PiA+ID4+Pj4+Pj4+IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gRW52b3nDqcKgOiBsdW5k aSA3IG1haSAyMDE4DQo+ID4gMDg6MzgNCj4gPiA+ID4+Pj4+Pj4+IMOAwqA6IGthbmFtZSBuaXNo aXp1a2E7IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDogUmU6IFtEb3RzXSBJLUQNCj4gPiA+ID4+Pj4+ Pj4+IEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0KPiA+ID4g Pj4+Pj4+Pj4NCj4gPiA+ID4+Pj4+Pj4+IFJlLSwNCj4gPiA+ID4+Pj4+Pj4+DQo+ID4gPiA+Pj4+ Pj4+PiBBZ3JlZSB0aGF0IHRoZSBjb2RlcyBhcmUgbm90IHRoZSBzYW1lLCBidXQgYWx0ZXJuYXRp dmVzIG9uZXMNCj4gPiA+ID4+Pj4+Pj4+IGFzDQo+ID4gPiA+Pj4+IHN1bW1hcml6ZWQNCj4gPiA+ ID4+Pj4+Pj4+IGhlcmU6DQo+ID4gPiA+Pj4+Pj4NCj4gPiA+DQo+ID4gaHR0cHM6Ly9tYWlsYXJj aGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9kb3RzL2hBM01MS2xrWEZpbXBBbjVLU1lUYXlhVmtqQS4N Cj4gPiA+ID4+Pj4+Pj4+IENoZWVycywNCj4gPiA+ID4+Pj4+Pj4+IE1lZA0KPiA+ID4gPj4+Pj4+ Pj4NCj4gPiA+ID4+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiA+ID4+ Pj4+Pj4+PiBEZcKgOiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50dHY2LmpwXSBF bnZvecOpwqA6DQo+ID4gPiA+Pj4+Pj4+Pj4gbHVuZGkgNyBtYWkgMjAxOCAwODoyMCDDgMKgOiBC T1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOw0KPiA+ID4gPj4+Pj4+Pj4+IGRvdHNAaWV0Zi5vcmcg T2JqZXTCoDogUmU6IFtEb3RzXSBJLUQgQWN0aW9uOg0KPiA+ID4gPj4+Pj4+Pj4+IGRyYWZ0LWll dGYtZG90cy1zaWduYWwtY2hhbm5lbC0NCj4gPiA+IDE5LnR4dA0KPiA+ID4gPj4+Pj4+Pj4+DQo+ ID4gPiA+Pj4+Pj4+Pj4gSGkgTWVkLA0KPiA+ID4gPj4+Pj4+Pj4+DQo+ID4gPiA+Pj4+Pj4+Pj4g SSd2ZSByZWFkIHRoZSB0aHJlYWQuDQo+ID4gPiA+Pj4+Pj4+Pj4gYW5kIHRoZSBjb2RlICc4JyBv ZiB0aGUgdGhyZWFkIGlzIGRpZmZlcmVudCBmcm9tIHRoZSBjb2RlDQo+ID4gPiA+Pj4+Pj4+Pj4g JzgnIG9mDQo+ID4gPiB0aGUNCj4gPiA+ID4+Pj4+Pj4+IGN1cnJlbnQNCj4gPiA+ID4+Pj4+Pj4+ PiBkcmFmdC4NCj4gPiA+ID4+Pj4+Pj4+Pg0KPiA+ID4gPj4+Pj4+Pj4+IHRoZXknZCBiZWVuIGRp c2N1c3NpbmcgdGhlIDcsOCBhbmQgOSBiYXNlZCBvbiB0aGlzDQo+ID4gPiA+Pj4+Pj4+Pj4gZGVm aW5pdGlvbiwNCj4gPiA+IHJpZ2h0Pw0KPiA+ID4gPj4+Pj4+Pj4+DQo+ID4gPiA+PiBodHRwczov L21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gvbXNnL2RvdHMvN3psanpOOG55Y1pYN0U3Z2hnazF1 eDMyDQo+ID4gPiA+PiBNa00NCj4gPiA+ID4+Pj4+Pj4+PiA9PQ0KPiA+ID4gPj4+Pj4+Pj4+IDcg fCBET1RTIFNlcnZlciBoYXMgZGV0ZWN0ZWQgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0 cw0KPiA+ID4gPj4+Pj4+Pj4+IGZyb20NCj4gPiA+ID4+Pj4+PiBkaWZmZXJlbnQNCj4gPiA+ID4+ Pj4+Pj4+PiBET1RTIGNsaWVudHMuwqAgVGhpcyBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgY3VycmVu dGx5IGluYWN0aXZlDQo+ID4gPiA+Pj4+Pj4+Pj4gdW50aWwNCj4gPiA+ID4+IHRoZQ0KPiA+ID4g Pj4+Pj4+Pj4+IGNvbmZsaWN0cyBhcmUgcmVzb2x2ZWQuIEFub3RoZXIgbWl0aWdhdGlvbiByZXF1 ZXN0IGlzIGFjdGl2ZS4NCj4gPiA+ID4+Pj4+Pj4+Pg0KPiA+ID4gPj4+Pj4+Pj4+IDggfCBET1RT IFNlcnZlciBoYXMgZGV0ZWN0ZWQgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0cw0KPiA+ ID4gPj4+Pj4+Pj4+IGZyb20NCj4gPiA+ID4+Pj4+PiBkaWZmZXJlbnQNCj4gPiA+ID4+Pj4+Pj4+ PiBET1RTIGNsaWVudHMuwqAgVGhpcyBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgY3VycmVudGx5IGFj dGl2ZS4NCj4gPiA+ID4+Pj4+Pj4+Pg0KPiA+ID4gPj4+Pj4+Pj4+IDkgfCBET1RTIFNlcnZlciBo YXMgZGV0ZWN0ZWQgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0cw0KPiA+ID4gPj4+Pj4+ Pj4+IGZyb20NCj4gPiA+ID4+Pj4+PiBkaWZmZXJlbnQNCj4gPiA+ID4+Pj4+Pj4+PiBET1RTIGNs aWVudHMuwqAgQWxsIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdHMgYXJlDQo+IGluYWN0 aXZlLg0KPiA+ID4gPj4+Pj4+Pj4+ID09DQo+ID4gPiA+Pj4+Pj4+Pj4NCj4gPiA+ID4+Pj4+Pj4+ PiBLYW5hbWUNCj4gPiA+ID4+Pj4+Pj4+Pg0KPiA+ID4gPj4+Pj4+Pj4+DQo+ID4gPiA+Pj4+Pj4+ Pj4gT24gMjAxOC8wNS8wNyAxNToxMiwgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90 ZToNCj4gPiA+ID4+Pj4+Pj4+Pj4gSGkgS2FuYW1lLA0KPiA+ID4gPj4+Pj4+Pj4+Pg0KPiA+ID4g Pj4+Pj4+Pj4+PiBQbGVhc2UgY2hlY2sNCj4gPiA+ID4+IGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0 Zi5vcmcvYXJjaC9tc2cvZG90cy96X2NaUjlfdTI3M0h6QzlvMEl5OUZlUVoNCj4gPiA+ID4+IDBK bw0KPiA+ID4gPj4+Pj4+Pj4gYWJvdXQNCj4gPiA+ID4+Pj4+Pj4+PiB0aGUgcmF0aW9uYWxlIGZv ciBhbGxvd2luZyB0byByZXR1cm4gY29kZSAnOCcgZXZlbiBpbiBhDQo+ID4gPiBub3RpZmljYXRp b24NCj4gPiA+ID4+Pj4+Pj4+IG1lc3NhZ2UuDQo+ID4gPiA+Pj4+Pj4+Pj4gVGhlIGludGVudCB3 YXMgdG8gaGF2ZSBjb2RlICc4JyBhcyBhIHRyYW5zaXRpb24gc3RhdGUuDQo+ID4gPiA+Pj4+Pj4+ Pj4+IENoZWVycywNCj4gPiA+ID4+Pj4+Pj4+Pj4gTWVkDQo+ID4gPiA+Pj4+Pj4+Pj4+DQo+ID4g PiA+Pj4+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0gRGXCoDoga2FuYW1lIG5p c2hpenVrYQ0KPiA+ID4gPj4+Pj4+Pj4+Pj4gW21haWx0bzprYW5hbWVAbnR0djYuanBdIEVudm95 w6nCoDogbWVyY3JlZGkgMiBtYWkgMjAxOA0KPiA+ID4gPj4+Pj4+Pj4+Pj4gMDI6NDkgw4DCoDog Qk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTjsgZG90c0BpZXRmLm9yZw0KPiA+IE9iamV0wqA6DQo+ ID4gPiA+Pj4+Pj4+Pj4+PiBSZTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1z aWduYWwtY2hhbm5lbC0NCj4gPiA+ID4+IDE5LnR4dA0KPiA+ID4gPj4+Pj4+Pj4+Pj4gSGksDQo+ ID4gPiA+Pj4+Pj4+Pj4+Pg0KPiA+ID4gPj4+Pj4+Pj4+Pj4gSSdkIGxpa2UgdG8gYXNrIG9uZSBj bGFyaWZpY2F0aW9uIHF1ZXN0aW9uIGFib3V0IHN0YXR1cyBjb2RlDQo+IDg6DQo+ID4gPiA+Pj4+ Pj4+Pj4+Pg0KPiA+ID4gPj4+Pj4+Pj4+Pj4gICAgICAgwqDCoCBvwqAgQSBub3RpZmljYXRpb24g bWVzc2FnZSB3aXRoICdzdGF0dXMnIGNvZGUgc2V0DQo+ID4gPiA+Pj4+Pj4+Pj4+PiB0byAnOA0K PiA+ID4gPj4gKEF0dGFjaw0KPiA+ID4gPj4+Pj4+Pj4+Pj4gICAgICAgwqDCoMKgwqDCoCBtaXRp Z2F0aW9uIGlzIHJlamVjdGVkKScgYW5kICdjb25mbGljdC1zdGF0dXMnDQo+ID4gPiA+Pj4+Pj4+ Pj4+PiBzZXQgdG8NCj4gPiA+ID4+ICcxJw0KPiA+ID4gPj4+PiBpcw0KPiA+ID4gPj4+Pj4+Pj4g c2VudA0KPiA+ID4gPj4+Pj4+Pj4+Pj4gICAgICAgwqDCoMKgwqDCoCB0byBhIERPVFMgY2xpZW50 IHRvIGluZGljYXRlIHRoYXQgdGhpcw0KPiA+ID4gPj4+Pj4+Pj4+Pj4gbWl0aWdhdGlvbg0KPiA+ ID4gPj4gcmVxdWVzdA0KPiA+ID4gPj4+PiBpcw0KPiA+ID4gPj4+Pj4+Pj4+Pj4gICAgICAgwqDC oMKgwqDCoCByZWplY3RlZCBiZWNhdXNlIGEgY29uZmxpY3QgaXMgZGV0ZWN0ZWQuDQo+ID4gPiA+ Pj4+Pj4+Pj4+Pg0KPiA+ID4gPj4+Pj4+Pj4+Pj4gSWYgYSBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMg cmVqZWN0ZWQgZHVlIHRvIGEgY29uZmxpY3QsIGl0DQo+ID4gPiA+Pj4+Pj4+Pj4+PiBpcw0KPiA+ ID4gPj4gcmVqZWN0ZWQNCj4gPiA+ID4+Pj4+PiBhdA0KPiA+ID4gPj4+Pj4+Pj4+Pj4gUFVUKDQu MDkoQ29uZmxpY3QpKSwgc28gbm8gcmVzb3VyY2Ugd2lsbCBiZSBjcmVhdGVkLg0KPiA+ID4gPj4+ Pj4+Pj4+Pj4gU28gaXQgbG9va3MgdGhlcmUgaXMgbm8gY2hhbmNlIHRvIHJldHVybiAnOCAoQXR0 YWNrDQo+ID4gPiA+Pj4+Pj4+Pj4+PiBtaXRpZ2F0aW9uIGlzDQo+ID4gPiA+Pj4+Pj4+Pj4gcmVq ZWN0ZWQpJy4NCj4gPiA+ID4+Pj4+Pj4+Pj4+IHRoYW5rcywNCj4gPiA+ID4+Pj4+Pj4+Pj4+IEth bmFtZQ0KPiA+ID4gPj4+Pj4+Pj4+Pj4NCj4gPiA+ID4+Pj4+Pj4+Pj4+IE9uIDIwMTgvMDQvMTAg MjI6NDcsIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gPiB3cm90ZToNCj4gPiA+ID4+ Pj4+Pj4+Pj4+PiBSZS0sDQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4+Pj4+Pj4+Pj4+PiBU aGlzIHZlcnNpb24gYWRkcmVzc2VzIHRoZSBjb21tZW50cyByYWlzZWQgZHVyaW5nIHRoZQ0KPiA+ ID4gPj4+Pj4+Pj4+Pj4+IFdHTEMsIGluDQo+ID4gPiA+Pj4+Pj4+Pj4gcGFydGljdWxhcjoNCj4g PiA+ID4+Pj4+Pj4+Pj4+PiAtIChDbGFyaWZpY2F0aW9uKSBJbmRpY2F0ZSB0aGF0IG9ubHkgb25l IGhvcC1saW1pdCBpcw0KPiA+ID4gPj4+Pj4+Pj4+Pj4+IGluY2x1ZGVkDQo+ID4gPiA+Pj4+Pj4+ Pj4+Pj4gLSBTcGVjaWZ5IHRoZSBsb29wIGRpYWdub3N0aWMgcGF5bG9hZA0KPiA+ID4gPj4+Pj4+ Pj4+Pj4+IC0gKENsYXJpZmljYXRpb24pIEluZGljYXRlIGV4cGxpY2l0bHkgdGhhdCBHRVQgbWVz c2FnZXMNCj4gPiA+ID4+Pj4+Pj4+Pj4+PiB3aXRoDQo+ID4gPiAnc2lkJw0KPiA+ID4gPj4+PiBh cmUNCj4gPiA+ID4+Pj4+Pj4+Pj4+IGFsbG93ZWQNCj4gPiA+ID4+Pj4+Pj4+Pj4+PiAtIFVwZGF0 ZSB0aGUgcmVkaXJlY3QgYmVoYXZpb3IuDQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4+Pj4+ Pj4+Pj4+PiBDaGVlcnMsDQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4gTWVkDQo+ID4gPiA+Pj4+Pj4+Pj4+ Pj4NCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tIERlwqA6 IERvdHMNCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmdd IERlIGxhIHBhcnQgZGUNCj4gPiA+IGludGVybmV0LQ0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBkcmFm dHNAaWV0Zi5vcmcNCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gRW52b3nDqcKgOiBtYXJkaSAxMCBhdnJp bCAyMDE4IDE1OjQwIMOAwqA6DQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IGktZC1hbm5vdW5jZUBpZXRm Lm9yZyBDY8KgOiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFtEb3RzXQ0KPiA+ID4gPj4+Pj4+Pj4+ Pj4+PiBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtDQo+ID4gPiAx OS50eHQNCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4+ Pj4+Pj4+Pj4+Pj4gQSBOZXcgSW50ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9u LWxpbmUNCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gSW50ZXJuZXQtDQo+ID4gPiA+PiBEcmFmdHMNCj4g PiA+ID4+Pj4+Pj4+Pj4+Pj4gZGlyZWN0b3JpZXMuDQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IFRoaXMg ZHJhZnQgaXMgYSB3b3JrIGl0ZW0gb2YgdGhlIEREb1MgT3BlbiBUaHJlYXQNCj4gPiA+ID4+Pj4+ Pj4+Pj4+Pj4gU2lnbmFsaW5nIFdHDQo+ID4gPiBvZg0KPiA+ID4gPj4+PiB0aGUNCj4gPiA+ID4+ Pj4+Pj4+Pj4+IElFVEYuDQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgVGl0bGUg ICAgICAgICAgIDogRGlzdHJpYnV0ZWQgRGVuaWFsLW9mLQ0KPiBTZXJ2aWNlDQo+ID4gPiBPcGVu DQo+ID4gPiA+Pj4+Pj4gVGhyZWF0DQo+ID4gPiA+Pj4+Pj4+Pj4+PiBTaWduYWxpbmcNCj4gPiA+ ID4+Pj4+Pj4+Pj4+Pj4gKERPVFMpIFNpZ25hbCBDaGFubmVsIFNwZWNpZmljYXRpb24NCj4gPiA+ ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICBBdXRob3JzICAgICAgICAgOiBUaXJ1bWFsZXN3 YXIgUmVkZHkNCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBNb2hhbWVkIEJvdWNhZGFpcg0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFByYXNoYW50aCBQYXRpbA0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEFuZHJldyBNb3J0ZW5zZW4NCj4gPiA+ID4+ Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBOaWsgVGVhZ3VlDQo+ ID4gPiA+Pj4+Pj4+Pj4+Pj4+IAlGaWxlbmFtZSAgICAgICAgOiBkcmFmdC1pZXRmLWRvdHMtc2ln bmFsLWNoYW5uZWwtMTkudHh0DQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IAlQYWdlcyAgICAgICAgICAg OiA4Ng0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAJRGF0ZSAgICAgICAgICAgIDogMjAxOC0wNC0xMA0K PiA+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBBYnN0cmFjdDoNCj4gPiA+ ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgVGhpcyBkb2N1bWVudCBzcGVjaWZpZXMgdGhlIERPVFMg c2lnbmFsDQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IGNoYW5uZWwsIGENCj4gPiA+ID4+IHByb3RvY29s DQo+ID4gPiA+Pj4+IGZvcg0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBzaWduYWxpbmcg dGhlIG5lZWQgZm9yIHByb3RlY3Rpb24gYWdhaW5zdA0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBEaXN0 cmlidXRlZA0KPiA+ID4gPj4+PiBEZW5pYWwtDQo+ID4gPiA+Pj4+Pj4gb2YtDQo+ID4gPiA+Pj4+ Pj4+Pj4+Pj4+ICAgICAgICAgIFNlcnZpY2UgKEREb1MpIGF0dGFja3MgdG8gYSBzZXJ2ZXIgY2Fw YWJsZSBvZg0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBlbmFibGluZw0KPiA+ID4gPj4+PiBuZXR3b3Jr DQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIHRyYWZmaWMgbWl0aWdhdGlvbiBvbiBiZWhh bGYgb2YgdGhlIHJlcXVlc3RpbmcNCj4gY2xpZW50Lg0KPiA+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+ ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBBIGNvbXBhbmlvbiBkb2N1bWVudCBkZWZpbmVzIHRo ZSBET1RTIGRhdGENCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gY2hhbm5lbCwgYQ0KPiA+ID4gPj4+PiBz ZXBhcmF0ZQ0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICByZWxpYWJsZSBjb21tdW5pY2F0 aW9uIGxheWVyIGZvciBET1RTDQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IG1hbmFnZW1lbnQgYW5kDQo+ ID4gPiA+Pj4+Pj4+PiBjb25maWd1cmF0aW9uDQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAg IHB1cnBvc2VzLg0KPiA+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBFZGl0 b3JpYWwgTm90ZSAoVG8gYmUgcmVtb3ZlZCBieSBSRkMgRWRpdG9yKQ0KPiA+ID4gPj4+Pj4+Pj4+ Pj4+Pg0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBQbGVhc2UgdXBkYXRlIHRoZXNlIHN0 YXRlbWVudHMgd2l0aCB0aGUgUkZDDQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IG51bWJlciB0bw0KPiA+ ID4gYmUNCj4gPiA+ID4+Pj4+PiBhc3NpZ25lZA0KPiA+ID4gPj4+Pj4+Pj4+IHRvDQo+ID4gPiA+ Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIHRoaXMgZG9jdW1lbnQ6DQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ DQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIG8gICJUaGlzIHZlcnNpb24gb2YgdGhpcyBZ QU5HIG1vZHVsZSBpcyBwYXJ0IG9mDQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IFJGQw0KPiA+ID4gPj4g WFhYWDsiDQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIG8gICJSRkMgWFhYWDogRGlzdHJp YnV0ZWQgRGVuaWFsLW9mLVNlcnZpY2UNCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gT3Blbg0KPiA+ID4g VGhyZWF0DQo+ID4gPiA+Pj4+Pj4gU2lnbmFsaW5nDQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAg ICAgICAgIChET1RTKSBTaWduYWwgQ2hhbm5lbCBTcGVjaWZpY2F0aW9uIjsNCj4gPiA+ID4+Pj4+ Pj4+Pj4+Pj4NCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgbyAgInwgW1JGQ1hYWFhdIHwi DQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIG8gIHJl ZmVyZW5jZTogUkZDIFhYWFgNCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4+Pj4+Pj4+Pj4+ Pj4gICAgICAgICAgUGxlYXNlIHVwZGF0ZSBUQkQgc3RhdGVtZW50cyB3aXRoIHRoZSBwb3J0DQo+ ID4gPiA+Pj4+Pj4+Pj4+Pj4+IG51bWJlciB0bw0KPiA+ID4gYmUNCj4gPiA+ID4+Pj4+PiBhc3Np Z25lZA0KPiA+ID4gPj4+Pj4+Pj4gdG8NCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgRE9U UyBTaWduYWwgQ2hhbm5lbCBQcm90b2NvbC4NCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4+ Pj4+Pj4+Pj4+Pj4gICAgICAgICAgQWxzbywgcGxlYXNlIHVwZGF0ZSB0aGUgInJldmlzaW9uIiBk YXRlIG9mIHRoZQ0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBZQU5HDQo+ID4gPiA+PiBtb2R1bGUuDQo+ ID4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IFRoZSBJRVRGIGRhdGF0cmFj a2VyIHN0YXR1cyBwYWdlIGZvciB0aGlzIGRyYWZ0IGlzOg0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBo dHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWRvdHMtc2lnbmFsLQ0K PiA+ID4gY2hhbm5lbC8NCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4g VGhlcmUgYXJlIGFsc28gaHRtbGl6ZWQgdmVyc2lvbnMgYXZhaWxhYmxlIGF0Og0KPiA+ID4gPj4+ Pj4+Pj4+Pj4+PiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1kb3RzLXNp Z25hbC1jaGFubg0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBlbC0xOQ0KPiA+ID4gPj4+Pj4+Pj4+Pj4+ PiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LWlldGYtZG90cy1z aQ0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBnbmFsLQ0KPiA+ID4gPj4+PiBjaGFubmVsLQ0KPiA+ID4g Pj4+Pj4+Pj4gMTkNCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gQSBkaWZmIGZyb20gdGhlIHByZXZpb3Vz IHZlcnNpb24gaXMgYXZhaWxhYmxlIGF0Og0KPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBodHRwczovL3d3 dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbA0KPiA+ID4gPj4+ Pj4+Pj4+Pj4+PiAtDQo+ID4gPiBjaGFubmVsLQ0KPiA+ID4gPj4gMTkNCj4gPiA+ID4+Pj4+Pj4+ Pj4+Pj4NCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBh IGNvdXBsZSBvZiBtaW51dGVzIGZyb20NCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gdGhlIHRpbWUNCj4g PiA+IG9mDQo+ID4gPiA+Pj4+Pj4+Pj4+PiBzdWJtaXNzaW9uDQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ IHVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQNCj4g PiA+ID4+Pj4gdG9vbHMuaWV0Zi5vcmcuDQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IEludGVybmV0LURy YWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUgYnkgYW5vbnltb3VzIEZUUCBhdDoNCj4gPiA+ID4+Pj4+ Pj4+Pj4+Pj4gZnRwOi8vZnRwLmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy8NCj4gPiA+ID4+Pj4+ Pj4+Pj4+Pj4NCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gRG90cyBtYWlsaW5nIGxp c3QNCj4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+ID4gPj4+Pj4+Pj4+Pj4+ PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPiA+ID4+Pj4+ Pj4+Pj4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K PiA+ID4gPj4+Pj4+Pj4+Pj4+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiA+Pj4+Pj4+Pj4+Pj4g RG90c0BpZXRmLm9yZw0KPiA+ID4gPj4+Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vZG90cw0KPiA+ID4gPj4+Pj4+Pj4+PiBfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ID4gPj4+Pj4+Pj4+PiBEb3RzIG1haWxp bmcgbGlzdA0KPiA+ID4gPj4+Pj4+Pj4+PiBEb3RzQGlldGYub3JnDQo+ID4gPiA+Pj4+Pj4+Pj4+ IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+ID4gPj4+Pj4+ Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiA+ ID4+Pj4+Pj4+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiA+Pj4+Pj4+PiBEb3RzQGlldGYub3Jn DQo+ID4gPiA+Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Rv dHMNCj4gPiA+ID4+Pj4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NCj4gPiA+ID4+Pj4+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiA+ID4+Pj4+Pj4g RG90c0BpZXRmLm9yZw0KPiA+ID4gPj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2RvdHMNCj4gPiA+ID4+Pj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQo+ID4gPiA+Pj4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+ID4g Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+ID4gPj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9kb3RzDQo+ID4gPiA+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCj4gPiA+ID4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+ID4g Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPiA+ID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2RvdHMNCj4gPg0KPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQo+ID4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiBEb3RzQGlldGYub3Jn DQo+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo= From nobody Wed May 16 00:04:08 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E25A129C51 for ; Wed, 16 May 2018 00:04:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.411 X-Spam-Level: X-Spam-Status: No, score=-2.411 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qgivLsQmnbcQ for ; Wed, 16 May 2018 00:04:02 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 33459127AD4 for ; Wed, 16 May 2018 00:04:02 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1526454235; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Office365-Filtering-Correlation-Id:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=5omhvPkeh5BU3Tl8OVMyksQBiiswF7LQf/+SjN 2Bcko=; b=K56HwP7WIlqQmudG59QzyJvmB1b2ORf+X6riRIwF mIa/6TXfXT2H2hvaWo1XhXqISFvafsDgB8GFQvxlPQLgxNTrfW r1eHz8OO6CyRlClr6+566VPYGrz5nHydBPbLuCNZgNkqAXDEw/ CUYIvdw4DRGrxssVIp9cMgkRMG40c+0= Received: from DNVEXAPP1N06.corpzone.internalzone.com (unknown [10.44.48.90]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 2fa1_03fd_7449b09b_5629_4155_a7d2_db256a95a3a7; Wed, 16 May 2018 02:03:55 -0500 Received: from DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 May 2018 01:03:48 -0600 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Wed, 16 May 2018 01:03:47 -0600 Received: from NAM03-CO1-obe.outbound.protection.outlook.com (10.44.176.241) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 May 2018 01:03:47 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB1620.namprd16.prod.outlook.com (10.172.27.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.776.11; Wed, 16 May 2018 07:03:45 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8%9]) with mapi id 15.20.0776.010; Wed, 16 May 2018 07:03:45 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "kaname nishizuka" CC: "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT0NF/5sqjFXD5eEKW2iVIpIKRtqP6A2IAgCG5zoCACDXkgIAAAhwAgAAFAwCAAxeuAIAAL3EAgAL6OICAAC9rAIAAC0wAgAS5xwCAAc8UgIAAxkKAgABEsoCAAAn6UIAACZ8QgAAHNfA= Date: Wed, 16 May 2018 07:03:45 +0000 Message-ID: References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <8ae47725-4db3-e02a-7846-d2f4d5d9b739@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BCA8@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BD67@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF1BD67@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB1620; 7:MpxetW5JZZ/dsXovYZaCChYyv80I6WL9vU+4Qw0IVnx2uoo2r0IVhROrTvoq8GlWF788/WUlmkmY0K5OMAUY+TsD6A+LsQEDbN0CUsWgmESFMw7aJfFoqibsOtIg+tqTni+htktvz45koikLltVpQqMdZpzJoQUHdlAx5fT0pWvwLGb6ByFEgFM7qtJHCHnnMNcgvh8Euu+LKyoOpkwjnI65k8PcADTH7y8A+ymoapFOF/Hge/yiDvX0ssK5ykIi x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB1620; x-ms-traffictypediagnostic: BN6PR16MB1620: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(120809045254105)(18271650672692)(123452027830198); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3231254)(944501410)(52105095)(93006095)(93001095)(3002001)(10201501046)(149027)(150027)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(20161123564045)(20161123560045)(6072148)(201708071742011); SRVR:BN6PR16MB1620; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB1620; x-forefront-prvs: 0674DC6DD3 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(39380400002)(396003)(376002)(346002)(366004)(55784002)(13464003)(32952001)(377424004)(199004)(189003)(486006)(97736004)(476003)(11346002)(6306002)(93886005)(76176011)(9686003)(478600001)(2900100001)(55016002)(80792005)(33656002)(6246003)(74316002)(2906002)(305945005)(7696005)(5250100002)(186003)(345774005)(26005)(3846002)(6116002)(229853002)(6506007)(53546011)(66066001)(25786009)(81166006)(72206003)(5890100001)(2501003)(102836004)(7736002)(59450400001)(3280700002)(8936002)(3660700001)(99286004)(966005)(53936002)(14454004)(110136005)(68736007)(105586002)(86362001)(106356001)(8676002)(575784001)(446003)(4326008)(53946003)(6436002)(5660300001)(81156014)(316002)(85282002)(559001)(579004); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB1620; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 4QrrFIupl9D6KH/F84JN6vxd9kXsq8FQN4APjEF0/SaxhVC3s2OgWjD/CxImwq2xOjRZjZKm/lZ73jgJfdzY6eutKEUy1qlyYJuTbyJZnU0PIfvc0gjCo+KnF5MPsRM+oKbRUBYk9ZDS9S5tK3eN9CkU/c98wQcMQulcvh4414HTeqqNOmqBNH8O0JH0eAjiJKoGDuVG1oBUWIvIs/idiA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: d4147359-eefe-4988-e85c-08d5bafb2a9c X-MS-Exchange-CrossTenant-Network-Message-Id: d4147359-eefe-4988-e85c-08d5bafb2a9c X-MS-Exchange-CrossTenant-originalarrivaltime: 16 May 2018 07:03:45.6026 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB1620 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6286> : inlines <6637> : streams <1786879> : uri <2642074> Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 May 2018 07:04:06 -0000 SGkgTWVkLA0KDQpQbGVhc2Ugc2VlIGlubGluZSANCg0KPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2Ut LS0tLQ0KPiBGcm9tOiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+IFttYWlsdG86bW9o YW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbV0NCj4gU2VudDogV2VkbmVzZGF5LCBNYXkgMTYsIDIw MTggMTI6MjYgUE0NCj4gVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgPFRpcnVtYWxlc3dh clJlZGR5X0tvbmRhQE1jQWZlZS5jb20+Ow0KPiBrYW5hbWUgbmlzaGl6dWthIDxrYW5hbWVAbnR0 djYuanA+DQo+IENjOiBkb3RzQGlldGYub3JnDQo+IFN1YmplY3Q6IFJFOiBbRG90c10gSS1EIEFj dGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0KPiANCj4gVGhpcyBl bWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3Qg Y2xpY2sgbGlua3Mgb3INCj4gb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0 aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzDQo+IHNhZmUuDQo+IA0KPiBIaSBUaXJ1 LA0KPiANCj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+IA0KPiBDaGVlcnMsDQo+IE1lZA0KPiANCj4g PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiBEZcKgOiBLb25kYSwgVGlydW1hbGVz d2FyIFJlZGR5DQo+ID4gW21haWx0bzpUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29t XQ0KPiA+IEVudm95w6nCoDogbWVyY3JlZGkgMTYgbWFpIDIwMTggMDg6MTENCj4gPiDDgMKgOiBC T1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOyBrYW5hbWUgbmlzaGl6dWthIENjwqA6IGRvdHNAaWV0 Zi5vcmcNCj4gPiBPYmpldMKgOiBSRTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90 cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPg0KPiA+IEkgcHJvcG9zZSB0byB1cGRhdGUgdGhl IHRleHQgYXMgZm9sbG93cyB0byBtYWtlIGl0IG1vcmUgY2xlYXI6DQo+ID4NCj4gPiBJZiB0aGUg cmVxdWVzdCBpcyBjb25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nIG1pdGlnYXRpb24gcmVxdWVz dCBmcm9tDQo+ID4gYSBkaWZmZXJlbnQgRE9UUyBjbGllbnQsIHRoZSBET1RTIHNlcnZlciBtYXkg ZWl0aGVyIGRlY2lkZSB0byBtYWludGFpbg0KPiA+IHRoZSBjb25mbGljdGluZyByZXF1ZXN0IG9y IHJlamVjdCB0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0Lg0KPiA+IElmIHRoZSBE T1RTIHNlcnZlciBkZWNpZGVzIHRvIG1haW50YWluIHRoZSBjb25mbGljdGluZyBtaXRpZ2F0aW9u DQo+ID4gcmVxdWVzdCwNCj4gDQo+IFtNZWRdIEkgZ3Vlc3MgImNvbmZsaWN0aW5nIG1pdGlnYXRp b24gcmVxdWVzdCIgcG9pbnRzIHRvIHRoZSBuZXcgcmVxdWVzdC4NCj4gDQo+ICB0aGUgRE9UUyBz ZXJ2ZXIgcmV0dXJucyAyLjAxIChDcmVhdGVkKSB0bw0KPiA+IHRoZSByZXF1ZXN0aW5nIERPVFMg Y2xpZW50LiBJZiB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRlcyB0byByZWplY3QgdGhlDQo+ID4gY29u ZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUyBzZXJ2ZXIgcmV0dXJucyA0LjA5 DQo+ID4gKENvbmZsaWN0KSBbUkZDODEzMl0gdG8gdGhlIHJlcXVlc3RpbmcgRE9UUyBjbGllbnQN Cj4gDQo+IFtNZWRdIElkZW0gYXMgYWJvdmUuDQo+IA0KPiANCj4gPiBGb3IgYm90aCAyLjAxIChD cmVhdGVkKSBhbmQgNC4wOSAoQ29uZmxpY3QpIHJlc3BvbnNlcywNCj4gDQo+IFtNZWRdIEkgbGlr ZSB0aGlzLg0KPiANCj4gIHRoZSByZXNwb25zZSBtZXNzYWdlDQo+ID4gaW5jbHVkZXMgZW5vdWdo IGluZm9ybWF0aW9uIGZvciBhIERPVFMgY2xpZW50IHRvIHJlY29nbml6ZSB0aGUgc291cmNlDQo+ ID4gb2YgdGhlIGNvbmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxvdzoNCj4gDQo+IFtNZWRdIFdoYXQg YWJvdXQ/DQo+IA0KPiBORVc6DQo+IA0KPiAgICBJZiB0aGUgcmVxdWVzdCBpcyBjb25mbGljdGlu ZyB3aXRoIGFuIGV4aXN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdA0KPiAgICBmcm9tIGEgZGlmZmVy ZW50IERPVFMgY2xpZW50LCB0aGUgRE9UUyBzZXJ2ZXIgbWF5IHJldHVybiAyLjAxDQo+ICAgIChD cmVhdGVkKSBvciA0LjA5IChDb25mbGljdCkgdG8gdGhlIHJlcXVlc3RpbmcgRE9UUyBjbGllbnQu ICBGb3INCj4gICAgZXhhbXBsZToNCj4gDQo+ICAgIG8gIElmIHRoZSBET1RTIHNlcnZlciBkZWNp ZGVzIHRvIG1haW50YWluIHRoZSBuZXcgbWl0aWdhdGlvbiByZXF1ZXN0LA0KPiAgICAgICB0aGUg RE9UUyBzZXJ2ZXIgcmV0dXJucyAyLjAxIChDcmVhdGVkKSB0byB0aGUgcmVxdWVzdGluZyBET1RT DQo+ICAgICAgIGNsaWVudC4NCj4gDQo+ICAgIG8gIElmIHRoZSBET1RTIHNlcnZlciBkZWNpZGVz IHRvIHJlamVjdCB0aGUgbmV3IG1pdGlnYXRpb24gcmVxdWVzdCwNCj4gICAgICAgdGhlIERPVFMg c2VydmVyIHJldHVybnMgNC4wOSAoQ29uZmxpY3QpIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMNCj4g ICAgICAgY2xpZW50Lg0KPiANCj4gICAgRm9yIGJvdGggMi4wMSAoQ3JlYXRlZCkgYW5kIDQuMDkg KENvbmZsaWN0KSByZXNwb25zZXMsIHRoZSByZXNwb25zZQ0KPiAgICBpbmNsdWRlcyBlbm91Z2gg aW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQgdG8gcmVjb2duaXplIHRoZSBzb3VyY2UNCj4g ICAgb2YgdGhlIGNvbmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxvdzoNCg0KUHJvcG9zZWQgdGV4dCBs b29rcyBnb29kLiBOaXQ6IEkgZG9uJ3Qgc2VlIHRoZSBuZWVkIGZvciAiRm9yIGV4YW1wbGUiLiAN Cg0KQ2hlZXJzLA0KLVRpcnUNCg0KPiANCj4gPg0KPiA+IC1UaXJ1DQo+ID4NCj4gPiA+IC0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gPiBGcm9tOiBEb3RzIFttYWlsdG86ZG90cy1ib3Vu Y2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YNCj4gPiA+IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5n ZS5jb20NCj4gPiA+IFNlbnQ6IFdlZG5lc2RheSwgTWF5IDE2LCAyMDE4IDEwOjUyIEFNDQo+ID4g PiBUbzoga2FuYW1lIG5pc2hpenVrYSA8a2FuYW1lQG50dHY2LmpwPg0KPiA+ID4gQ2M6IGRvdHNA aWV0Zi5vcmcNCj4gPiA+IFN1YmplY3Q6IFJlOiBbRG90c10gSS1EIEFjdGlvbjoNCj4gPiA+IGRy YWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPiA+DQo+ID4gPiBUaGlzIGVt YWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdCBj bGljaw0KPiA+ID4gbGlua3MNCj4gPiBvcg0KPiA+ID4gb3BlbiBhdHRhY2htZW50cyB1bmxlc3Mg eW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZQ0KPiA+ID4gY29udGVudCBpcyBz YWZlLg0KPiA+ID4NCj4gPiA+IEhpIEthbmFtZSwNCj4gPiA+DQo+ID4gPiBUaGFuayB5b3UgZm9y IEFDa2luZy4gSSB3aWxsIGltcGxlbWVudCB0aGlzIGNoYW5nZS4NCj4gPiA+DQo+ID4gPiBDaGVl cnMsDQo+ID4gPiBNZWQNCj4gPiA+DQo+ID4gPiA+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0t LQ0KPiA+ID4gPiBEZcKgOiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50dHY2Lmpw XSBFbnZvecOpwqA6IG1lcmNyZWRpDQo+ID4gPiA+IDE2IG1haSAyMDE4IDAzOjE2IMOAwqA6IEJP VUNBREFJUiBNb2hhbWVkIElNVC9PTE4gQ2PCoDoNCj4gZG90c0BpZXRmLm9yZw0KPiA+ID4gT2Jq ZXQNCj4gPiA+ID4gOiBSZTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWdu YWwtY2hhbm5lbC0xOS50eHQNCj4gPiA+ID4NCj4gPiA+ID4gSGkgTWVkLA0KPiA+ID4gPg0KPiA+ ID4gPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPiA+ID4NCj4gPiA+ID4gdGhhbmtzLA0KPiA+ID4g PiBrYW5hbWUNCj4gPiA+ID4NCj4gPiA+ID4gT24gMjAxOC8wNS8xNSAyMjoyNiwgbW9oYW1lZC5i b3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPiA+ID4gPiBIaSBLYW5hbWUsDQo+ID4gPiA+ ID4NCj4gPiA+ID4gPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IENo ZWVycywNCj4gPiA+ID4gPiBNZWQNCj4gPiA+ID4gPg0KPiA+ID4gPiA+PiAtLS0tLU1lc3NhZ2Ug ZCdvcmlnaW5lLS0tLS0NCj4gPiA+ID4gPj4gRGXCoDoga2FuYW1lIG5pc2hpenVrYSBbbWFpbHRv OmthbmFtZUBudHR2Ni5qcF0gRW52b3nDqcKgOiBsdW5kaQ0KPiA+ID4gPiA+PiAxNCBtYWkgMjAx OCAxMTo0OSDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOIENjwqA6DQo+ID4gPiA+ID4+ IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDogUmU6IFtEb3RzXSBJLUQgQWN0aW9uOg0KPiA+ID4gPiA+ PiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4gPiA+ID4+DQo+ID4g PiA+ID4+IEhpIE1lZCwNCj4gPiA+ID4gPj4NCj4gPiA+ID4gPj4gUGxlYXNlIHNlZSBpbmxpbmUu DQo+ID4gPiA+ID4+DQo+ID4gPiA+ID4+IHRoYW5rcywNCj4gPiA+ID4gPj4gS2FuYW1lDQo+ID4g PiA+ID4+DQo+ID4gPiA+ID4+IE9uIDIwMTgvMDUvMTEgMTg6MzksIG1vaGFtZWQuYm91Y2FkYWly QG9yYW5nZS5jb20gd3JvdGU6DQo+ID4gPiA+ID4+PiBSZS0sDQo+ID4gPiA+ID4+Pg0KPiA+ID4g PiA+Pj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+ID4gPiA+ID4+Pg0KPiA+ID4gPiA+Pj4gQ2hlZXJz LA0KPiA+ID4gPiA+Pj4gTWVkDQo+ID4gPiA+ID4+Pg0KPiA+ID4gPiA+Pj4+IC0tLS0tTWVzc2Fn ZSBkJ29yaWdpbmUtLS0tLQ0KPiA+ID4gPiA+Pj4+IERlwqA6IGthbmFtZSBuaXNoaXp1a2EgW21h aWx0bzprYW5hbWVAbnR0djYuanBdIEVudm95w6nCoDoNCj4gPiA+ID4gPj4+PiB2ZW5kcmVkaQ0K PiA+ID4gPiA+Pj4+IDExIG1haSAyMDE4IDEwOjU5IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIElN VC9PTE4gQ2PCoDoNCj4gPiA+ID4gPj4+PiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFJlOiBbRG90 c10gSS1EIEFjdGlvbjoNCj4gPiA+ID4gPj4+PiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5u ZWwtMTkudHh0DQo+ID4gPiA+ID4+Pj4NCj4gPiA+ID4gPj4+PiBIaSBNZWQsDQo+ID4gPiA+ID4+ Pj4NCj4gPiA+ID4gPj4+PiAgICA+IElmIHRoZSBzZXJ2ZXIgZGVjaWRlcyBub3QgdG8gbWFpbnRh aW4gdGhlIGNvbmZsaWN0aW5nDQo+ID4gPiA+ID4+Pj4gcmVxdWVzdCwgdGhlbg0KPiA+ID4gPiA+ PiB0aGUNCj4gPiA+ID4gPj4+PiBwcmVzZW50IHJlcXVlc3Qgd2lsbCBiZSBwcm9jZXNzZWQgYXMg bm9ybWFsOiB0aGF0IGlzIDIuMDENCj4gPiA+ID4gPj4+PiB3aWxsIGJlDQo+ID4gPiA+IHJldHVy bmVkDQo+ID4gPiA+ID4+IHRvDQo+ID4gPiA+ID4+Pj4gYWNrIHN1Y2Nlc3NmdWwgaGFuZGxpbmcu IEEgbm90aWZpY2F0aW9uIHdpbGwgYmUgc2VudCB0byB0aGUNCj4gPiA+ID4gPj4+PiBjbGllbnQg b3duZXINCj4gPiA+ID4gPj4gb2YNCj4gPiA+ID4gPj4+PiB0aGUgY29uZmxpY3RpbmcgcmVxdWVz dCB0byBub3RpZnkgd2l0aGRyYXdhbCAoc2VjdGlvbiA0LjQuMikuDQo+ID4gPiA+ID4+Pj4gSW4g dGhhdCBjYXNlLCB0aGUgc3RhdHVzIGNvZGUgaXMgJzcnIChBdHRhY2sgbWl0aWdhdGlvbiBpcw0K PiA+ID4gPiA+Pj4+IHdpdGhkcmF3bikNCj4gPiA+ID4gPj4+IFtNZWRdIFllcywgdGhhdCBzdGF0 dXMgd2lsbCBiZSBzZW50IHRvIHRoZSBvd25lciBvZiB0aGUNCj4gPiA+ID4gPj4+IChleGlzdGlu ZykNCj4gPiA+ID4gcmVxdWVzdC4NCj4gPiA+ID4gPj4+DQo+ID4gPiA+ID4+Pj4gTXkgb3JpZ2lu YWwgcXVlc3Rpb24gaXMgd2hlbiB0aGUgc3RhdHVzIGNvZGUgJzgnIChBdHRhY2sNCj4gPiA+ID4g Pj4+PiBtaXRpZ2F0aW9uIGlzDQo+ID4gPiA+ID4+Pj4gcmVqZWN0ZWQpIHdpbGwgYmUgdXNlZC4N Cj4gPiA+ID4gPj4+IFtNZWRdIEkgZ290IHRoYXQuDQo+ID4gPiA+ID4+Pg0KPiA+ID4gPiA+Pj4+ IEluIHRoZSB0ZXh0IGluIHRoZSBkcmFmdCwgInRoZSBjb25mbGljdGluZyBtaXRpZ2F0aW9uDQo+ ID4gPiA+ID4+Pj4gcmVxdWVzdCIgaXMNCj4gPiA+ID4gPj4gYW1iaWd1b3VzDQo+ID4gPiA+ID4+ Pj4gd2hldGhlciBpdCBpcyBhbHJlYWR5IGV4aXN0aW5nIHJlcXVlc3Qgb3IgdGhlIHJlcXVlc3Qg dGhhdA0KPiA+ID4gPiA+Pj4+IGp1c3QgaGFzDQo+ID4gPiA+ID4+IGFycml2ZWQuDQo+ID4gPiA+ ID4+PiBbTWVkXSBJdCBpcyByZWxhdGVkIHRvIHRoZSBhbHJlYWR5IGV4aXN0aW5nIHJlcXVlc3Qu DQo+ID4gPiA+ID4+Pg0KPiA+ID4gPiA+Pj4+IFNheSwgdGhlIGV4aXN0aW5nIHJlcXVlc3QgaXMg KEEpLCB0aGVuIGEgbWl0aWdhdGlvbiByZXF1ZXN0DQo+ID4gPiA+ID4+Pj4gKEIpIGFycml2ZWQN Cj4gPiA+ID4gPj4gd2hpY2gNCj4gPiA+ID4gPj4+PiBhcmUgY29uZmxpY3Rpbmcgd2l0aCBBLg0K PiA+ID4gPiA+Pj4+DQo+ID4gPiA+ID4+Pj4gSWYgQiBpcyBzZWxlY3RlZC4NCj4gPiA+ID4gPj4+ PiAoQSkgd2lsbCBnZXQgbm90aWZpY2F0aW9uIHdpdGggdGhlIHdpdGhkcmF3YWwgY29kZSAnNycN Cj4gPiA+ID4gPj4+PiAoQikgd2lsbCBnZXQgMi4wMQ0KPiA+ID4gPiA+Pj4+DQo+ID4gPiA+ID4+ PiBbTWVkXSBZZXMuIFRoZSBjdXJyZW50IHRleHQgZG9lcyBjYWxscyBvdXQgeW91ciBzdGVwICgx KSBpbiA0LjQuMi4NCj4gPiA+ID4gPj4+IFlvdXINCj4gPiA+ID4gPj4gc3RlcCAoMikgaXMgbm90 IGNhbGxlZCBleHBsaWNpdCBpbiB0aGUgdGV4dCBiZWNhdXNlIHRoZXJlIGlzIG5vDQo+ID4gPiA+ ID4+IGNvbmZ1c2lvbiBhYm91dCB3aGljaCBjb2RlIHRvIHJldHVybiB3aGVuIGEgcmVxdWVzdCBp cyBhY2NlcHRlZA0KPiA+ID4gPiA+PiB0byBiZQ0KPiA+ID4gaG9ub3JlZC4NCj4gPiA+ID4gPj4+ IFRoZSB0ZXh0IGZvY3VzZXMgb24gY2FzZXMgd2hpY2ggcmVxdWlyZXMgc3BlY2lmaWMgaGFuZGxp bmc6DQo+ID4gPiA+ID4+PiAtIGluYWN0aXZlIHJlcXVlc3QgYmVjYXVzZSBvZiBhIGNvbmZsaWN0 DQo+ID4gPiA+ID4+PiAtIG11bHRpcGxlIGFjdGl2ZSBjb25mbGljdGluZyByZXF1ZXN0cw0KPiA+ ID4gPiA+Pj4NCj4gPiA+ID4gPj4+PiBlbHNlIElmIEIgaXMgbm90IHNlbGVjdGVkLg0KPiA+ID4g PiA+Pj4+IChCKSB3aWxsIGdldCA0LjA5DQo+ID4gPiA+ID4+Pj4NCj4gPiA+ID4gPj4+IFtNZWRd IEluIHRoaXMgY2FzZSwgdGhlIHJlc291cmNlIGlzIG5vdCBjcmVhdGVkIGFuZCBhcyBzdWNoDQo+ ID4gPiA+ID4+PiBjYXNlDQo+ID4gPiA+IHJldHVybmluZw0KPiA+ID4gPiA+PiBub3RpZmljYXRp b24gc3RhdHVzIGNvZGUgb2YgOCBpcyBub3QgcG9zc2libGUgYXMgeW91IHJpZ2h0ZnVsDQo+ID4g PiA+ID4+IHBvaW50ZWQNCj4gPiBvdXQuDQo+ID4gPiA+ID4+PiBUaGlzIGlzIHdoeSB3ZSBzdWdn ZXN0ZWQgdG8gcmV0dXJuIDIuMDEgZm9yIHRoaXMgY2FzZSB0b28gc28NCj4gPiA+ID4gPj4+IHRo YXQgYW4NCj4gPiA+ID4gdXBkYXRlDQo+ID4gPiA+ID4+IG9mIHRoZSBzdGF0dXMgY2FuIGJlIHNl bnQgdG8gdGhlIGNsaWVudCB1cG9uIGNoYW5nZS4NCj4gPiA+ID4gPj4gSSBkb24ndCB0aGluayBp dCBpcyBuZWVkZWQgdG8gb2JsaWdhdGUgcmV0dXJuaW5nIG9mIDIuMDEuDQo+ID4gPiA+ID4+IElm IGl0IGlzIG9idmlvdXMgdGhhdCB0aGUgRE9UUyBzZXJ2ZXIgbmVlZCBub3QgdG8gY3JlYXRlDQo+ ID4gPiA+ID4+IHJlc291cmNlIG9mIHRoZSBjb25mbGljdGluZyByZXF1ZXN0LCBpdCBtYXkgcmV0 dXJuIDQuMDkuDQo+ID4gPiA+ID4+IFNvLCByZXR1cm5pbmcgb2YgNC4wOSBzaG91bGQgYmUgYWxs b3dlZCBpbiB0aGlzIGNhc2UuDQo+ID4gPiA+ID4+IEl0IHNob3VsZCBiZSBsZWZ0IGFzIGltcGxl bWVudGF0aW9uLSBhbmQgZGVwbG95bWVudC1zcGVjaWZpYy4NCj4gPiA+ID4gPj4NCj4gPiA+ID4g Pj4NCj4gPiA+ID4gPiBbTWVkXSBEbyB5b3UgbWVhbiB0aGF0IHRoZSB0ZXh0IHNob3VsZCBiZSBt b2RpZmllZCB0byBhbGxvdyBmb3INCj4gPiA+ID4gPiBib3RoDQo+ID4gPiA+ID4gMi4wMQ0KPiA+ ID4gPiBvciA0LjA5IHRvIGJlIHJldHVybmVkIGRlcGVuZGluZyBvbiBzb21lIGxvY2FsIHBvbGlj eT8NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IGUuZy4sDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBPTEQ6 DQo+ID4gPiA+ID4gICAgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhp c3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0DQo+ID4gPiA+ID4gICAgIGZyb20gYSBkaWZmZXJlbnQg RE9UUyBjbGllbnQsIGFuZCB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRlcyB0bw0KPiA+IG1haW50YWlu DQo+ID4gPiA+ID4gICAgIHRoZSBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QsIHRoZSBE T1RTIHNlcnZlciByZXR1cm5zIDQuMDkNCj4gPiA+ID4gPiAgICAgKENvbmZsaWN0KSBbUkZDODEz Ml0gdG8gdGhlIHJlcXVlc3RpbmcgRE9UUyBjbGllbnQuIFRoZSByZXNwb25zZQ0KPiA+ID4gPiA+ ICAgICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQgdG8gcmVj b2duaXplDQo+ID4gPiA+ID4gdGhlDQo+ID4gc291cmNlDQo+ID4gPiA+ID4gICAgIG9mIHRoZSBj b25mbGljdCBhcyBkZXNjcmliZWQgYmVsb3c6DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBORVc6DQo+ ID4gPiA+ID4gICAgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3Rp bmcgbWl0aWdhdGlvbiByZXF1ZXN0DQo+ID4gPiA+ID4gICAgIGZyb20gYSBkaWZmZXJlbnQgRE9U UyBjbGllbnQsIHRoZSBET1RTIHNlcnZlciBtYXkgcmV0dXJuDQo+ID4gPiA+ID4gMi4wMQ0KPiA+ IChDcmVhdGVkKQ0KPiA+ID4gPiA+ICAgICBvciA0LjA5IChDb25mbGljdCkgdG8gdGhlIHJlcXVl c3RpbmcgRE9UUyBjbGllbnQuIFRoZSByZXNwb25zZQ0KPiA+ID4gPiA+ICAgICBpbmNsdWRlcyBl bm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQgdG8gcmVjb2duaXplDQo+ID4gPiA+ ID4gdGhlDQo+ID4gc291cmNlDQo+ID4gPiA+ID4gICAgIG9mIHRoZSBjb25mbGljdCBhcyBkZXNj cmliZWQgYmVsb3c6DQo+ID4gPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gWWVzLCBpdCB3b3JrcyBm b3IgbWUuDQo+ID4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+ID4+Pj4gVGlydSBzYWlkOg0KPiA+ID4g PiA+Pj4+ICAgID4gSW4gdGhpcyBjYXNlLCB0aGUgcmVzb3VyY2Ugc2hvdWxkIGJlIGNyZWF0ZWQg YW5kIHRoZQ0KPiA+ID4gPiA+Pj4+IHNlcnZlciBzaG91bGQNCj4gPiA+ID4gPj4gcmV0dXJuDQo+ ID4gPiA+ID4+Pj4gc3VjY2VzcyAoMi4wMSBvciAyLjA0KSByZXNwb25zZSBjb2RlIGFsb25nIHdp dGggdGhlIGNvbmZsaWN0LQ0KPiA+ID4gPiBpbmZvcm1hdGlvbi4NCj4gPiA+ID4gPj4+PiBJbiB0 aGlzIHNpdHVhdGlvbiwgKEIpIHdpbGwgZ2V0IDIuMDEgb3IgMi4wNCBhbG9uZyB3aXRoIHRoZQ0K PiA+ID4gPiA+Pj4+IHJlamVjdGVkDQo+ID4gPiA+IGNvZGUNCj4gPiA+ID4gPj4gJzgnDQo+ID4g PiA+ID4+Pj4gKFdoaWNoIG1pdGlnYXRpb24gcmVxdWVzdCB3aWxsIGJlIHNlbGVjdGVkIGJ5IHRo ZSBET1RTIHNlcnZlcg0KPiA+ID4gPiA+Pj4+IGlzDQo+ID4gPiA+ID4+Pj4gaW1wbGVtZW50YXRp b24tIGFuZCBkZXBsb3ltZW50LXNwZWNpZmljLikNCj4gPiA+ID4gPj4+Pg0KPiA+ID4gPiA+Pj4+ IFRoYW5rcywNCj4gPiA+ID4gPj4+PiBLYW5hbWUNCj4gPiA+ID4gPj4+Pg0KPiA+ID4gPiA+Pj4+ DQo+ID4gPiA+ID4+Pj4gT24gMjAxOC8wNS8xMSAxNTowOSwgbW9oYW1lZC5ib3VjYWRhaXJAb3Jh bmdlLmNvbSB3cm90ZToNCj4gPiA+ID4gPj4+Pj4gSGkgS2FuYW1lLA0KPiA+ID4gPiA+Pj4+Pg0K PiA+ID4gPiA+Pj4+PiBJZiB0aGUgc2VydmVyIGRlY2lkZXMgbm90IHRvIG1haW50YWluIHRoZSBj b25mbGljdGluZw0KPiA+ID4gPiA+Pj4+PiByZXF1ZXN0LCB0aGVuIHRoZQ0KPiA+ID4gPiA+Pj4+ IHByZXNlbnQgcmVxdWVzdCB3aWxsIGJlIHByb2Nlc3NlZCBhcyBub3JtYWw6IHRoYXQgaXMgMi4w MQ0KPiA+ID4gPiA+Pj4+IHdpbGwgYmUNCj4gPiA+ID4gcmV0dXJuZWQNCj4gPiA+ID4gPj4gdG8N Cj4gPiA+ID4gPj4+PiBhY2sgc3VjY2Vzc2Z1bCBoYW5kbGluZy4gQSBub3RpZmljYXRpb24gd2ls bCBiZSBzZW50IHRvIHRoZQ0KPiA+ID4gPiA+Pj4+IGNsaWVudCBvd25lcg0KPiA+ID4gPiA+PiBv Zg0KPiA+ID4gPiA+Pj4+IHRoZSBjb25mbGljdGluZyByZXF1ZXN0IHRvIG5vdGlmeSB3aXRoZHJh d2FsIChzZWN0aW9uIDQuNC4yKS4NCj4gPiA+ID4gPj4+Pj4gVGhlIHRleHQgZm9jdXNlcyBvbiB0 aGUgY2FzZSAiLCBhbmQgdGhlIERPVFMgc2VydmVyIGRlY2lkZXMNCj4gPiA+ID4gPj4+Pj4gdG8g bWFpbnRhaW4NCj4gPiA+ID4gPj4gdGhlDQo+ID4gPiA+ID4+Pj4gY29uZmxpY3RpbmcgbWl0aWdh dGlvbiByZXF1ZXN0IiBiZWNhdXNlIHRoaXMgaXMgdGhlIG9uZSB3aGljaA0KPiA+ID4gPiA+Pj4+ IHJlcXVpcmVzIGFkZGl0aW9uYWwgc3BlY2lmaWNhdGlvbiB2cy4gbm9ybWFsIHJlcXVlc3QgdGhh dCBpcw0KPiA+ID4gPiA+Pj4+IGFjY2VwdGVkIGJ5IGENCj4gPiA+ID4gc2VydmVyLg0KPiA+ID4g PiA+Pj4+PiBDaGVlcnMsDQo+ID4gPiA+ID4+Pj4+IE1lZA0KPiA+ID4gPiA+Pj4+Pg0KPiA+ID4g PiA+Pj4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tIERlwqA6IGthbmFtZSBuaXNoaXp1 a2ENCj4gPiA+ID4gPj4+Pj4+IFttYWlsdG86a2FuYW1lQG50dHY2LmpwXSBFbnZvecOpwqA6DQo+ ID4gPiA+ID4+Pj4+PiBtZXJjcmVkaSA5IG1haSAyMDE4IDEwOjQxIMOAwqA6IEJPVUNBREFJUiBN b2hhbWVkIElNVC9PTE4NCj4gQ2PCoDoNCj4gPiA+ID4gPj4+Pj4+IGRvdHNAaWV0Zi5vcmcgT2Jq ZXTCoDogUmU6IFtEb3RzXSBJLUQgQWN0aW9uOg0KPiA+ID4gPiA+Pj4+Pj4gZHJhZnQtaWV0Zi1k b3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0KPiA+ID4gPiA+Pj4+Pj4NCj4gPiA+ID4gPj4+Pj4+ IEhpIE1lZCwNCj4gPiA+ID4gPj4+Pj4+DQo+ID4gPiA+ID4+Pj4+PiBJJ20gT0sgd2l0aCB0aGlz IGNoYW5nZS4NCj4gPiA+ID4gPj4+Pj4+IEhvd2V2ZXIsIHRvIGJlIHByZWNpc2UsIEknZCBsaWtl IHRvIHN1Z2dlc3QgdG8gc3RhdGUgYWJvdXQNCj4gPiA+ID4gPj4+Pj4+IHRoZSBjYXNlDQo+ID4g PiA+IHRoZQ0KPiA+ID4gPiA+Pj4+IERPVFMNCj4gPiA+ID4gPj4+Pj4+IHNlcnZlciBkZWNpZGVz IE5PVCB0byBtYWludGFpbiBpdC4NCj4gPiA+ID4gPj4+Pj4+DQo+ID4gPiA+ID4+Pj4+PiBORVct MjoNCj4gPiA+ID4gPj4+Pj4+ICAgICDCoMKgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5n IHdpdGggYW4gZXhpc3RpbmcNCj4gPiA+ID4gPj4+Pj4+IG1pdGlnYXRpb24NCj4gPiA+ID4gcmVx dWVzdA0KPiA+ID4gPiA+Pj4+Pj4gICAgIMKgwqAgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVu dCwgYW5kIHRoZSBET1RTIHNlcnZlcg0KPiA+ID4gPiA+Pj4+Pj4gZGVjaWRlcyB0bw0KPiA+ID4g PiA+PiBtYWludGFpbg0KPiA+ID4gPiA+Pj4+Pj4gICAgIMKgwqAgdGhlIGNvbmZsaWN0aW5nIG1p dGlnYXRpb24gcmVxdWVzdCwgdGhlIERPVFMgc2VydmVyDQo+ID4gPiA+ID4+Pj4+PiByZXR1cm5z DQo+ID4gPiA+IDIuMDENCj4gPiA+ID4gPj4+Pj4+ICAgICDCoMKgIChDcmVhdGVkKSB0byB0aGUg cmVxdWVzdGluZyBET1RTIGNsaWVudC4NCj4gPiA+ID4gPj4+Pj4+ICAgICDCoMKgIE90aGVyd2lz ZSwgdGhlIERPVFMgc2VydmVyIHJldHVybnMgNC4wOSAoQ29uZmxpY3QpDQo+ID4gW1JGQzgxMzJd Lg0KPiA+ID4gPiA+Pj4+Pj4gICAgIMKgwqAgVGhlIHJlc3BvbnNlIGluY2x1ZGVzIGVub3VnaCBp bmZvcm1hdGlvbiBmb3IgYSBET1RTDQo+ID4gPiA+ID4+Pj4+PiBjbGllbnQNCj4gPiB0bw0KPiA+ ID4gPiA+Pj4+Pj4gICAgIMKgwqAgcmVjb2duaXplIHRoZSBzb3VyY2Ugb2YgdGhlIGNvbmZsaWN0 IGFzIGRlc2NyaWJlZCBiZWxvdzoNCj4gPiA+ID4gPj4+Pj4+DQo+ID4gPiA+ID4+Pj4+PiB0aGFu a3MsDQo+ID4gPiA+ID4+Pj4+PiBLYW5hbWUNCj4gPiA+ID4gPj4+Pj4+DQo+ID4gPiA+ID4+Pj4+ PiBPbiAyMDE4LzA1LzA5IDE0OjUxLCBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIHdyb3Rl Og0KPiA+ID4gPiA+Pj4+Pj4+IEhpIEthbmFtZSwNCj4gPiA+ID4gPj4+Pj4+Pg0KPiA+ID4gPiA+ Pj4+Pj4+IEFmdGVyIHRoaW5raW5nIGFib3V0IHRoaXMsIEkgZG8gdGhpbmsgdGhhdCB5b3UgaGF2 ZSBhDQo+ID4gPiA+ID4+Pj4+Pj4gdmFsaWQgcG9pbnQuIEkNCj4gPiA+ID4gPj4+Pj4+IHN1Z2dl c3QgdG8gbWFrZSB0byBtYWtlIHRoaXMgY2hhbmdlIChtYXJrZWQgd2l0aCBeXl5eKQ0KPiA+ID4g PiA+Pj4+Pj4+IE9MRDoNCj4gPiA+ID4gPj4+Pj4+PiAgICAgICAgSWYgdGhlIHJlcXVlc3QgaXMg Y29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZw0KPiA+ID4gPiA+Pj4+Pj4+IG1pdGlnYXRpb24N Cj4gPiA+ID4gcmVxdWVzdA0KPiA+ID4gPiA+Pj4+Pj4+ICAgICAgICBmcm9tIGEgZGlmZmVyZW50 IERPVFMgY2xpZW50LCBhbmQgdGhlIERPVFMgc2VydmVyDQo+ID4gPiA+ID4+Pj4+Pj4gZGVjaWRl cyB0bw0KPiA+ID4gPiA+Pj4+IG1haW50YWluDQo+ID4gPiA+ID4+Pj4+Pj4gICAgICAgIHRoZSBj b25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QsIHRoZSBET1RTIHNlcnZlcg0KPiA+ID4gPiA+ Pj4+Pj4+IHJldHVybnMNCj4gPiA+ID4gNC4wOQ0KPiA+ID4gPiA+Pj4+Pj4+ICAgICAgICAoQ29u ZmxpY3QpIFtSRkM4MTMyXSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4NCj4gPiA+ID4g Pj4+Pj4+PiBUaGUNCj4gPiA+ID4gcmVzcG9uc2UNCj4gPiA+ID4gPj4+Pj4+PiAgICAgICAgaW5j bHVkZXMgZW5vdWdoIGluZm9ybWF0aW9uIGZvciBhIERPVFMgY2xpZW50IHRvDQo+ID4gPiA+ID4+ Pj4+Pj4gcmVjb2duaXplIHRoZQ0KPiA+ID4gPiA+Pj4+IHNvdXJjZQ0KPiA+ID4gPiA+Pj4+Pj4+ ICAgICAgICBvZiB0aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+ID4gPiA+Pj4+ Pj4+DQo+ID4gPiA+ID4+Pj4+Pj4gTkVXOg0KPiA+ID4gPiA+Pj4+Pj4+ICAgICAgICBJZiB0aGUg cmVxdWVzdCBpcyBjb25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nDQo+ID4gPiA+ID4+Pj4+Pj4g bWl0aWdhdGlvbg0KPiA+ID4gPiByZXF1ZXN0DQo+ID4gPiA+ID4+Pj4+Pj4gICAgICAgIGZyb20g YSBkaWZmZXJlbnQgRE9UUyBjbGllbnQsIGFuZCB0aGUgRE9UUyBzZXJ2ZXINCj4gPiA+ID4gPj4+ Pj4+PiBkZWNpZGVzIHRvDQo+ID4gPiA+ID4+Pj4gbWFpbnRhaW4NCj4gPiA+ID4gPj4+Pj4+PiAg ICAgICAgdGhlIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdCwgdGhlIERPVFMgc2VydmVy DQo+ID4gPiA+ID4+Pj4+Pj4gcmV0dXJucw0KPiA+ID4gPiAyLjAxDQo+ID4gPiA+ID4+Pj4+Pj4N Cj4gPiA+ID4gXl5eXg0KPiA+ID4gPiA+Pj4+Pj4+ICAgICAgICAoQ3JlYXRlZCkgdG8gdGhlIHJl cXVlc3RpbmcgRE9UUyBjbGllbnQuICBUaGUgcmVzcG9uc2VeDQo+ID4gPiA+ID4+Pj4+Pj4gICAg ICAgIF5eXl5eXl5eDQo+ID4gPiA+ID4+Pj4+Pj4gICAgICAgIGluY2x1ZGVzIGVub3VnaCBpbmZv cm1hdGlvbiBmb3IgYSBET1RTIGNsaWVudCB0bw0KPiA+ID4gPiA+Pj4+Pj4+IHJlY29nbml6ZSB0 aGUNCj4gPiA+ID4gPj4+PiBzb3VyY2UNCj4gPiA+ID4gPj4+Pj4+PiAgICAgICAgb2YgdGhlIGNv bmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxvdzoNCj4gPiA+ID4gPj4+Pj4+Pg0KPiA+ID4gPiA+Pj4+ Pj4+IENoZWVycywNCj4gPiA+ID4gPj4+Pj4+PiBNZWQNCj4gPiA+ID4gPj4+Pj4+Pg0KPiA+ID4g PiA+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0gRGXCoDogRG90cw0KPiA+ID4g PiA+Pj4+Pj4+PiBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZQ0K PiA+ID4gPiA+Pj4+Pj4+PiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIEVudm95w6nCoDog bHVuZGkgNyBtYWkgMjAxOA0KPiA+ID4gMDg6MzgNCj4gPiA+ID4gPj4+Pj4+Pj4gw4DCoDoga2Fu YW1lIG5pc2hpenVrYTsgZG90c0BpZXRmLm9yZyBPYmpldMKgOiBSZTogW0RvdHNdDQo+ID4gPiA+ ID4+Pj4+Pj4+IEktRA0KPiA+ID4gPiA+Pj4+Pj4+PiBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1z aWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPiA+ID4gPj4+Pj4+Pj4NCj4gPiA+ID4gPj4+Pj4+Pj4g UmUtLA0KPiA+ID4gPiA+Pj4+Pj4+Pg0KPiA+ID4gPiA+Pj4+Pj4+PiBBZ3JlZSB0aGF0IHRoZSBj b2RlcyBhcmUgbm90IHRoZSBzYW1lLCBidXQgYWx0ZXJuYXRpdmVzDQo+ID4gPiA+ID4+Pj4+Pj4+ IG9uZXMgYXMNCj4gPiA+ID4gPj4+PiBzdW1tYXJpemVkDQo+ID4gPiA+ID4+Pj4+Pj4+IGhlcmU6 DQo+ID4gPiA+ID4+Pj4+Pg0KPiA+ID4gPg0KPiA+ID4NCj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5p ZXRmLm9yZy9hcmNoL21zZy9kb3RzL2hBM01MS2xrWEZpbXBBbjVLU1lUYXlhVmtqQS4NCj4gPiA+ ID4gPj4+Pj4+Pj4gQ2hlZXJzLA0KPiA+ID4gPiA+Pj4+Pj4+PiBNZWQNCj4gPiA+ID4gPj4+Pj4+ Pj4NCj4gPiA+ID4gPj4+Pj4+Pj4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLSBEZcKgOiBr YW5hbWUgbmlzaGl6dWthDQo+ID4gPiA+ID4+Pj4+Pj4+PiBbbWFpbHRvOmthbmFtZUBudHR2Ni5q cF0gRW52b3nDqcKgOg0KPiA+ID4gPiA+Pj4+Pj4+Pj4gbHVuZGkgNyBtYWkgMjAxOCAwODoyMCDD gMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOw0KPiA+ID4gPiA+Pj4+Pj4+Pj4gZG90c0Bp ZXRmLm9yZyBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBBY3Rpb246DQo+ID4gPiA+ID4+Pj4+Pj4+ PiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtDQo+ID4gPiA+IDE5LnR4dA0KPiA+ID4g PiA+Pj4+Pj4+Pj4NCj4gPiA+ID4gPj4+Pj4+Pj4+IEhpIE1lZCwNCj4gPiA+ID4gPj4+Pj4+Pj4+ DQo+ID4gPiA+ID4+Pj4+Pj4+PiBJJ3ZlIHJlYWQgdGhlIHRocmVhZC4NCj4gPiA+ID4gPj4+Pj4+ Pj4+IGFuZCB0aGUgY29kZSAnOCcgb2YgdGhlIHRocmVhZCBpcyBkaWZmZXJlbnQgZnJvbSB0aGUN Cj4gPiA+ID4gPj4+Pj4+Pj4+IGNvZGUgJzgnIG9mDQo+ID4gPiA+IHRoZQ0KPiA+ID4gPiA+Pj4+ Pj4+PiBjdXJyZW50DQo+ID4gPiA+ID4+Pj4+Pj4+PiBkcmFmdC4NCj4gPiA+ID4gPj4+Pj4+Pj4+ DQo+ID4gPiA+ID4+Pj4+Pj4+PiB0aGV5J2QgYmVlbiBkaXNjdXNzaW5nIHRoZSA3LDggYW5kIDkg YmFzZWQgb24gdGhpcw0KPiA+ID4gPiA+Pj4+Pj4+Pj4gZGVmaW5pdGlvbiwNCj4gPiA+ID4gcmln aHQ/DQo+ID4gPiA+ID4+Pj4+Pj4+Pg0KPiA+ID4gPiA+PiBodHRwczovL21haWxhcmNoaXZlLmll dGYub3JnL2FyY2gvbXNnL2RvdHMvN3psanpOOG55Y1pYN0U3Z2hnazENCj4gPiA+ID4gPj4gdXgz Mg0KPiA+ID4gPiA+PiBNa00NCj4gPiA+ID4gPj4+Pj4+Pj4+ID09DQo+ID4gPiA+ID4+Pj4+Pj4+ PiA3IHwgRE9UUyBTZXJ2ZXIgaGFzIGRldGVjdGVkIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24NCj4g PiA+ID4gPj4+Pj4+Pj4+IHJlcXVlc3RzIGZyb20NCj4gPiA+ID4gPj4+Pj4+IGRpZmZlcmVudA0K PiA+ID4gPiA+Pj4+Pj4+Pj4gRE9UUyBjbGllbnRzLsKgIFRoaXMgbWl0aWdhdGlvbiByZXF1ZXN0 IGlzIGN1cnJlbnRseQ0KPiA+ID4gPiA+Pj4+Pj4+Pj4gaW5hY3RpdmUgdW50aWwNCj4gPiA+ID4g Pj4gdGhlDQo+ID4gPiA+ID4+Pj4+Pj4+PiBjb25mbGljdHMgYXJlIHJlc29sdmVkLiBBbm90aGVy IG1pdGlnYXRpb24gcmVxdWVzdCBpcyBhY3RpdmUuDQo+ID4gPiA+ID4+Pj4+Pj4+Pg0KPiA+ID4g PiA+Pj4+Pj4+Pj4gOCB8IERPVFMgU2VydmVyIGhhcyBkZXRlY3RlZCBjb25mbGljdGluZyBtaXRp Z2F0aW9uDQo+ID4gPiA+ID4+Pj4+Pj4+PiByZXF1ZXN0cyBmcm9tDQo+ID4gPiA+ID4+Pj4+PiBk aWZmZXJlbnQNCj4gPiA+ID4gPj4+Pj4+Pj4+IERPVFMgY2xpZW50cy7CoCBUaGlzIG1pdGlnYXRp b24gcmVxdWVzdCBpcyBjdXJyZW50bHkgYWN0aXZlLg0KPiA+ID4gPiA+Pj4+Pj4+Pj4NCj4gPiA+ ID4gPj4+Pj4+Pj4+IDkgfCBET1RTIFNlcnZlciBoYXMgZGV0ZWN0ZWQgY29uZmxpY3RpbmcgbWl0 aWdhdGlvbg0KPiA+ID4gPiA+Pj4+Pj4+Pj4gcmVxdWVzdHMgZnJvbQ0KPiA+ID4gPiA+Pj4+Pj4g ZGlmZmVyZW50DQo+ID4gPiA+ID4+Pj4+Pj4+PiBET1RTIGNsaWVudHMuwqAgQWxsIGNvbmZsaWN0 aW5nIG1pdGlnYXRpb24gcmVxdWVzdHMgYXJlDQo+ID4gaW5hY3RpdmUuDQo+ID4gPiA+ID4+Pj4+ Pj4+PiA9PQ0KPiA+ID4gPiA+Pj4+Pj4+Pj4NCj4gPiA+ID4gPj4+Pj4+Pj4+IEthbmFtZQ0KPiA+ ID4gPiA+Pj4+Pj4+Pj4NCj4gPiA+ID4gPj4+Pj4+Pj4+DQo+ID4gPiA+ID4+Pj4+Pj4+PiBPbiAy MDE4LzA1LzA3IDE1OjEyLCBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+IHdyb3RlOg0K PiA+ID4gPiA+Pj4+Pj4+Pj4+IEhpIEthbmFtZSwNCj4gPiA+ID4gPj4+Pj4+Pj4+Pg0KPiA+ID4g PiA+Pj4+Pj4+Pj4+IFBsZWFzZSBjaGVjaw0KPiA+ID4gPiA+PiBodHRwczovL21haWxhcmNoaXZl LmlldGYub3JnL2FyY2gvbXNnL2RvdHMvel9jWlI5X3UyNzNIekM5bzBJeTkNCj4gPiA+ID4gPj4g RmVRWg0KPiA+ID4gPiA+PiAwSm8NCj4gPiA+ID4gPj4+Pj4+Pj4gYWJvdXQNCj4gPiA+ID4gPj4+ Pj4+Pj4+IHRoZSByYXRpb25hbGUgZm9yIGFsbG93aW5nIHRvIHJldHVybiBjb2RlICc4JyBldmVu IGluIGENCj4gPiA+ID4gbm90aWZpY2F0aW9uDQo+ID4gPiA+ID4+Pj4+Pj4+IG1lc3NhZ2UuDQo+ ID4gPiA+ID4+Pj4+Pj4+PiBUaGUgaW50ZW50IHdhcyB0byBoYXZlIGNvZGUgJzgnIGFzIGEgdHJh bnNpdGlvbiBzdGF0ZS4NCj4gPiA+ID4gPj4+Pj4+Pj4+PiBDaGVlcnMsDQo+ID4gPiA+ID4+Pj4+ Pj4+Pj4gTWVkDQo+ID4gPiA+ID4+Pj4+Pj4+Pj4NCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4gLS0tLS1N ZXNzYWdlIGQnb3JpZ2luZS0tLS0tIERlwqA6IGthbmFtZSBuaXNoaXp1a2ENCj4gPiA+ID4gPj4+ Pj4+Pj4+Pj4gW21haWx0bzprYW5hbWVAbnR0djYuanBdIEVudm95w6nCoDogbWVyY3JlZGkgMiBt YWkgMjAxOA0KPiA+ID4gPiA+Pj4+Pj4+Pj4+PiAwMjo0OSDDgMKgOiBCT1VDQURBSVIgTW9oYW1l ZCBJTVQvT0xOOyBkb3RzQGlldGYub3JnDQo+ID4gPiBPYmpldMKgOg0KPiA+ID4gPiA+Pj4+Pj4+ Pj4+PiBSZTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5l bC0NCj4gPiA+ID4gPj4gMTkudHh0DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+IEhpLA0KPiA+ID4gPiA+ Pj4+Pj4+Pj4+Pg0KPiA+ID4gPiA+Pj4+Pj4+Pj4+PiBJJ2QgbGlrZSB0byBhc2sgb25lIGNsYXJp ZmljYXRpb24gcXVlc3Rpb24gYWJvdXQNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4gc3RhdHVzIGNvZGUN Cj4gPiA4Og0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pg0KPiA+ID4gPiA+Pj4+Pj4+Pj4+PiAgICAgICDC oMKgIG/CoCBBIG5vdGlmaWNhdGlvbiBtZXNzYWdlIHdpdGggJ3N0YXR1cycgY29kZQ0KPiA+ID4g PiA+Pj4+Pj4+Pj4+PiBzZXQgdG8gJzgNCj4gPiA+ID4gPj4gKEF0dGFjaw0KPiA+ID4gPiA+Pj4+ Pj4+Pj4+PiAgICAgICDCoMKgwqDCoMKgIG1pdGlnYXRpb24gaXMgcmVqZWN0ZWQpJyBhbmQgJ2Nv bmZsaWN0LXN0YXR1cycNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4gc2V0IHRvDQo+ID4gPiA+ID4+ICcx Jw0KPiA+ID4gPiA+Pj4+IGlzDQo+ID4gPiA+ID4+Pj4+Pj4+IHNlbnQNCj4gPiA+ID4gPj4+Pj4+ Pj4+Pj4gICAgICAgwqDCoMKgwqDCoCB0byBhIERPVFMgY2xpZW50IHRvIGluZGljYXRlIHRoYXQg dGhpcw0KPiA+ID4gPiA+Pj4+Pj4+Pj4+PiBtaXRpZ2F0aW9uDQo+ID4gPiA+ID4+IHJlcXVlc3QN Cj4gPiA+ID4gPj4+PiBpcw0KPiA+ID4gPiA+Pj4+Pj4+Pj4+PiAgICAgICDCoMKgwqDCoMKgIHJl amVjdGVkIGJlY2F1c2UgYSBjb25mbGljdCBpcyBkZXRlY3RlZC4NCj4gPiA+ID4gPj4+Pj4+Pj4+ Pj4NCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4gSWYgYSBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgcmVqZWN0 ZWQgZHVlIHRvIGEgY29uZmxpY3QsDQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+IGl0IGlzDQo+ID4gPiA+ ID4+IHJlamVjdGVkDQo+ID4gPiA+ID4+Pj4+PiBhdA0KPiA+ID4gPiA+Pj4+Pj4+Pj4+PiBQVVQo NC4wOShDb25mbGljdCkpLCBzbyBubyByZXNvdXJjZSB3aWxsIGJlIGNyZWF0ZWQuDQo+ID4gPiA+ ID4+Pj4+Pj4+Pj4+IFNvIGl0IGxvb2tzIHRoZXJlIGlzIG5vIGNoYW5jZSB0byByZXR1cm4gJzgg KEF0dGFjaw0KPiA+ID4gPiA+Pj4+Pj4+Pj4+PiBtaXRpZ2F0aW9uIGlzDQo+ID4gPiA+ID4+Pj4+ Pj4+PiByZWplY3RlZCknLg0KPiA+ID4gPiA+Pj4+Pj4+Pj4+PiB0aGFua3MsDQo+ID4gPiA+ID4+ Pj4+Pj4+Pj4+IEthbmFtZQ0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pg0KPiA+ID4gPiA+Pj4+Pj4+Pj4+ PiBPbiAyMDE4LzA0LzEwIDIyOjQ3LCBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4g PiB3cm90ZToNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+IFJlLSwNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+ DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+PiBUaGlzIHZlcnNpb24gYWRkcmVzc2VzIHRoZSBjb21tZW50 cyByYWlzZWQgZHVyaW5nIHRoZQ0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4gV0dMQywgaW4NCj4gPiA+ ID4gPj4+Pj4+Pj4+IHBhcnRpY3VsYXI6DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+PiAtIChDbGFyaWZp Y2F0aW9uKSBJbmRpY2F0ZSB0aGF0IG9ubHkgb25lIGhvcC1saW1pdCBpcw0KPiA+ID4gPiA+Pj4+ Pj4+Pj4+Pj4gaW5jbHVkZWQNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+IC0gU3BlY2lmeSB0aGUgbG9v cCBkaWFnbm9zdGljIHBheWxvYWQNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+IC0gKENsYXJpZmljYXRp b24pIEluZGljYXRlIGV4cGxpY2l0bHkgdGhhdCBHRVQNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+IG1l c3NhZ2VzIHdpdGgNCj4gPiA+ID4gJ3NpZCcNCj4gPiA+ID4gPj4+PiBhcmUNCj4gPiA+ID4gPj4+ Pj4+Pj4+Pj4gYWxsb3dlZA0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4gLSBVcGRhdGUgdGhlIHJlZGly ZWN0IGJlaGF2aW9yLg0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+ IENoZWVycywNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+IE1lZA0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4N Cj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0gRGXCoDog RG90cw0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3Jn XSBEZSBsYSBwYXJ0IGRlDQo+ID4gPiA+IGludGVybmV0LQ0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ IGRyYWZ0c0BpZXRmLm9yZw0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IEVudm95w6nCoDogbWFyZGkg MTAgYXZyaWwgMjAxOCAxNTo0MCDDgMKgOg0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IGktZC1hbm5v dW5jZUBpZXRmLm9yZyBDY8KgOiBkb3RzQGlldGYub3JnIE9iamV0wqA6DQo+ID4gPiA+ID4+Pj4+ Pj4+Pj4+Pj4gW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5l bC0NCj4gPiA+ID4gMTkudHh0DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4gPj4+Pj4+ Pj4+Pj4+Pg0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IEEgTmV3IEludGVybmV0LURyYWZ0IGlzIGF2 YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lDQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gSW50ZXJuZXQt DQo+ID4gPiA+ID4+IERyYWZ0cw0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IGRpcmVjdG9yaWVzLg0K PiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IFRoaXMgZHJhZnQgaXMgYSB3b3JrIGl0ZW0gb2YgdGhlIERE b1MgT3BlbiBUaHJlYXQNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBTaWduYWxpbmcgV0cNCj4gPiA+ ID4gb2YNCj4gPiA+ID4gPj4+PiB0aGUNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4gSUVURi4NCj4gPiA+ ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgIFRpdGxlICAgICAgICAgICA6IERpc3RyaWJ1 dGVkIERlbmlhbC1vZi0NCj4gPiBTZXJ2aWNlDQo+ID4gPiA+IE9wZW4NCj4gPiA+ID4gPj4+Pj4+ IFRocmVhdA0KPiA+ID4gPiA+Pj4+Pj4+Pj4+PiBTaWduYWxpbmcNCj4gPiA+ID4gPj4+Pj4+Pj4+ Pj4+PiAoRE9UUykgU2lnbmFsIENoYW5uZWwgU3BlY2lmaWNhdGlvbg0KPiA+ID4gPiA+Pj4+Pj4+ Pj4+Pj4+ICAgICAgICAgICAgICAgQXV0aG9ycyAgICAgICAgIDogVGlydW1hbGVzd2FyIFJlZGR5 DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBN b2hhbWVkIEJvdWNhZGFpcg0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgUHJhc2hhbnRoIFBhdGlsDQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBbmRyZXcgTW9ydGVuc2VuDQo+ID4gPiA+ID4+ Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBOaWsgVGVhZ3VlDQo+ ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gCUZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtZG90cy1z aWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAJUGFnZXMgICAgICAg ICAgIDogODYNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAJRGF0ZSAgICAgICAgICAgIDogMjAxOC0w NC0xMA0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gQWJzdHJh Y3Q6DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgVGhpcyBkb2N1bWVudCBzcGVjaWZp ZXMgdGhlIERPVFMgc2lnbmFsDQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gY2hhbm5lbCwgYQ0KPiA+ ID4gPiA+PiBwcm90b2NvbA0KPiA+ID4gPiA+Pj4+IGZvcg0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ ICAgICAgICAgIHNpZ25hbGluZyB0aGUgbmVlZCBmb3IgcHJvdGVjdGlvbiBhZ2FpbnN0DQo+ID4g PiA+ID4+Pj4+Pj4+Pj4+Pj4gRGlzdHJpYnV0ZWQNCj4gPiA+ID4gPj4+PiBEZW5pYWwtDQo+ID4g PiA+ID4+Pj4+PiBvZi0NCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBTZXJ2aWNlIChE RG9TKSBhdHRhY2tzIHRvIGEgc2VydmVyIGNhcGFibGUNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBv ZiBlbmFibGluZw0KPiA+ID4gPiA+Pj4+IG5ldHdvcmsNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAg ICAgICAgICB0cmFmZmljIG1pdGlnYXRpb24gb24gYmVoYWxmIG9mIHRoZQ0KPiA+ID4gPiA+Pj4+ Pj4+Pj4+Pj4+IHJlcXVlc3RpbmcNCj4gPiBjbGllbnQuDQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4N Cj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBBIGNvbXBhbmlvbiBkb2N1bWVudCBkZWZp bmVzIHRoZSBET1RTIGRhdGENCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBjaGFubmVsLCBhDQo+ID4g PiA+ID4+Pj4gc2VwYXJhdGUNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICByZWxpYWJs ZSBjb21tdW5pY2F0aW9uIGxheWVyIGZvciBET1RTDQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gbWFu YWdlbWVudCBhbmQNCj4gPiA+ID4gPj4+Pj4+Pj4gY29uZmlndXJhdGlvbg0KPiA+ID4gPiA+Pj4+ Pj4+Pj4+Pj4+ICAgICAgICAgIHB1cnBvc2VzLg0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4g PiA+ID4+Pj4+Pj4+Pj4+Pj4gRWRpdG9yaWFsIE5vdGUgKFRvIGJlIHJlbW92ZWQgYnkgUkZDIEVk aXRvcikNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAg ICAgIFBsZWFzZSB1cGRhdGUgdGhlc2Ugc3RhdGVtZW50cyB3aXRoIHRoZSBSRkMNCj4gPiA+ID4g Pj4+Pj4+Pj4+Pj4+PiBudW1iZXIgdG8NCj4gPiA+ID4gYmUNCj4gPiA+ID4gPj4+Pj4+IGFzc2ln bmVkDQo+ID4gPiA+ID4+Pj4+Pj4+PiB0bw0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAg IHRoaXMgZG9jdW1lbnQ6DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4gPj4+Pj4+Pj4+ Pj4+PiAgICAgICAgICBvICAiVGhpcyB2ZXJzaW9uIG9mIHRoaXMgWUFORyBtb2R1bGUgaXMNCj4g PiA+ID4gPj4+Pj4+Pj4+Pj4+PiBwYXJ0IG9mIFJGQw0KPiA+ID4gPiA+PiBYWFhYOyINCj4gPiA+ ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBvICAiUkZDIFhYWFg6IERpc3RyaWJ1dGVkIERlbmlh bC1vZi1TZXJ2aWNlDQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gT3Blbg0KPiA+ID4gPiBUaHJlYXQN Cj4gPiA+ID4gPj4+Pj4+IFNpZ25hbGluZw0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAg ICAgIChET1RTKSBTaWduYWwgQ2hhbm5lbCBTcGVjaWZpY2F0aW9uIjsNCj4gPiA+ID4gPj4+Pj4+ Pj4+Pj4+Pg0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIG8gICJ8IFtSRkNYWFhYXSB8 Ig0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAg byAgcmVmZXJlbmNlOiBSRkMgWFhYWA0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPiA+ID4+ Pj4+Pj4+Pj4+Pj4gICAgICAgICAgUGxlYXNlIHVwZGF0ZSBUQkQgc3RhdGVtZW50cyB3aXRoIHRo ZSBwb3J0DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gbnVtYmVyIHRvDQo+ID4gPiA+IGJlDQo+ID4g PiA+ID4+Pj4+PiBhc3NpZ25lZA0KPiA+ID4gPiA+Pj4+Pj4+PiB0bw0KPiA+ID4gPiA+Pj4+Pj4+ Pj4+Pj4+ICAgICAgICAgIERPVFMgU2lnbmFsIENoYW5uZWwgUHJvdG9jb2wuDQo+ID4gPiA+ID4+ Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBBbHNvLCBwbGVhc2Ug dXBkYXRlIHRoZSAicmV2aXNpb24iIGRhdGUgb2YNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiB0aGUg WUFORw0KPiA+ID4gPiA+PiBtb2R1bGUuDQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4g Pj4+Pj4+Pj4+Pj4+PiBUaGUgSUVURiBkYXRhdHJhY2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBk cmFmdCBpczoNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9kcmFmdC1pZXRmLWRvdHMtc2lnDQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gbmFsLQ0K PiA+ID4gPiBjaGFubmVsLw0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPiA+ID4+Pj4+Pj4+ Pj4+Pj4gVGhlcmUgYXJlIGFsc28gaHRtbGl6ZWQgdmVyc2lvbnMgYXZhaWxhYmxlIGF0Og0KPiA+ ID4gPiA+Pj4+Pj4+Pj4+Pj4+IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRm LWRvdHMtc2lnbmFsLWMNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBoYW5uDQo+ID4gPiA+ID4+Pj4+ Pj4+Pj4+Pj4gZWwtMTkNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBodHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LWlldGYtZG90DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4g cy1zaQ0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IGduYWwtDQo+ID4gPiA+ID4+Pj4gY2hhbm5lbC0N Cj4gPiA+ID4gPj4+Pj4+Pj4gMTkNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBBIGRpZmYgZnJvbSB0 aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+ Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtZG90cy1zaQ0K PiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IGduYWwNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAtDQo+ID4g PiA+IGNoYW5uZWwtDQo+ID4gPiA+ID4+IDE5DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ ID4gPj4+Pj4+Pj4+Pj4+PiBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9m IG1pbnV0ZXMNCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBmcm9tIHRoZSB0aW1lDQo+ID4gPiA+IG9m DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+IHN1Ym1pc3Npb24NCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiB1 bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0DQo+ID4g PiA+ID4+Pj4gdG9vbHMuaWV0Zi5vcmcuDQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gSW50ZXJuZXQt RHJhZnRzIGFyZSBhbHNvIGF2YWlsYWJsZSBieSBhbm9ueW1vdXMgRlRQIGF0Og0KPiA+ID4gPiA+ Pj4+Pj4+Pj4+Pj4+IGZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvDQo+ID4gPiA+ ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiBfX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IERv dHMgbWFpbGluZyBsaXN0DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+ ID4gPiA+Pj4+Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v ZG90cw0KPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCj4gPiA+ID4gPj4+Pj4+Pj4+Pj4+IERvdHMgbWFpbGluZyBsaXN0 DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+PiBEb3RzQGlldGYub3JnDQo+ID4gPiA+ID4+Pj4+Pj4+Pj4+ PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPiA+ID4gPj4+ Pj4+Pj4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K PiA+ID4gPiA+Pj4+Pj4+Pj4+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiA+ID4+Pj4+Pj4+Pj4g RG90c0BpZXRmLm9yZw0KPiA+ID4gPiA+Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vZG90cw0KPiA+ID4gPiA+Pj4+Pj4+PiBfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ID4gPiA+Pj4+Pj4+PiBEb3RzIG1haWxp bmcgbGlzdA0KPiA+ID4gPiA+Pj4+Pj4+PiBEb3RzQGlldGYub3JnDQo+ID4gPiA+ID4+Pj4+Pj4+ IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+ID4gPiA+Pj4+ Pj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4g PiA+ID4+Pj4+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiA+ID4gPj4+Pj4+PiBEb3RzQGlldGYu b3JnDQo+ID4gPiA+ID4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9kb3RzDQo+ID4gPiA+ID4+Pj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fDQo+ID4gPiA+ID4+Pj4+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiA+ID4+ Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPiA+ID4gPj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9kb3RzDQo+ID4gPiA+ID4+PiBfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KPiA+ID4gPiA+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4g PiA+ID4gPj4+IERvdHNAaWV0Zi5vcmcNCj4gPiA+ID4gPj4+IGh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+ID4NCj4gPiA+IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gPiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+ ID4gRG90c0BpZXRmLm9yZw0KPiA+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9kb3RzDQo= From nobody Wed May 16 00:15:51 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A76C1200C1 for ; Wed, 16 May 2018 00:15:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.001 X-Spam-Level: X-Spam-Status: No, score=-0.001 tagged_above=-999 required=5 tests=[SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PugNz3pTuf3C for ; Wed, 16 May 2018 00:15:47 -0700 (PDT) Received: from guri.nttv6.jp (guri.nttv6.jp [115.69.228.140]) by ietfa.amsl.com (Postfix) with ESMTP id AF363127AD4 for ; Wed, 16 May 2018 00:15:46 -0700 (PDT) Received: from z.nttv6.jp (z.nttv6.jp [192.168.8.15]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id 6B0AE25F6D2; Wed, 16 May 2018 16:15:45 +0900 (JST) Received: from MacBook-Pro-17.local (fujiko.nttv6.jp [115.69.228.141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id 23F7475900A; Wed, 16 May 2018 16:15:45 +0900 (JST) To: "Konda, Tirumaleswar Reddy" , "mohamed.boucadair@orange.com" Cc: "dots@ietf.org" References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <8ae47725-4db3-e02a-7846-d2f4d5d9b739@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BCA8@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BD67@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: kaname nishizuka Message-ID: <7d182f8a-b995-eea5-6fd8-aed749716e20@nttv6.jp> Date: Wed, 16 May 2018 16:15:44 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 May 2018 07:15:50 -0000 Hi Med, Tiru, Thanks for the improvement of the wording. I'm also OK with the proposed text. thanks, kaname On 2018/05/16 16:03, Konda, Tirumaleswar Reddy wrote: > Hi Med, > > Please see inline > >> -----Original Message----- >> From: mohamed.boucadair@orange.com >> [mailto:mohamed.boucadair@orange.com] >> Sent: Wednesday, May 16, 2018 12:26 PM >> To: Konda, Tirumaleswar Reddy ; >> kaname nishizuka >> Cc: dots@ietf.org >> Subject: RE: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >> >> This email originated from outside of the organization. Do not click links or >> open attachments unless you recognize the sender and know the content is >> safe. >> >> Hi Tiru, >> >> Please see inline. >> >> Cheers, >> Med >> >>> -----Message d'origine----- >>> De : Konda, Tirumaleswar Reddy >>> [mailto:TirumaleswarReddy_Konda@McAfee.com] >>> Envoyé : mercredi 16 mai 2018 08:11 >>> À : BOUCADAIR Mohamed IMT/OLN; kaname nishizuka Cc : dots@ietf.org >>> Objet : RE: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>> >>> I propose to update the text as follows to make it more clear: >>> >>> If the request is conflicting with an existing mitigation request from >>> a different DOTS client, the DOTS server may either decide to maintain >>> the conflicting request or reject the conflicting mitigation request. >>> If the DOTS server decides to maintain the conflicting mitigation >>> request, >> [Med] I guess "conflicting mitigation request" points to the new request. >> >> the DOTS server returns 2.01 (Created) to >>> the requesting DOTS client. If the DOTS server decides to reject the >>> conflicting mitigation request, the DOTS server returns 4.09 >>> (Conflict) [RFC8132] to the requesting DOTS client >> [Med] Idem as above. >> >> >>> For both 2.01 (Created) and 4.09 (Conflict) responses, >> [Med] I like this. >> >> the response message >>> includes enough information for a DOTS client to recognize the source >>> of the conflict as described below: >> [Med] What about? >> >> NEW: >> >> If the request is conflicting with an existing mitigation request >> from a different DOTS client, the DOTS server may return 2.01 >> (Created) or 4.09 (Conflict) to the requesting DOTS client. For >> example: >> >> o If the DOTS server decides to maintain the new mitigation request, >> the DOTS server returns 2.01 (Created) to the requesting DOTS >> client. >> >> o If the DOTS server decides to reject the new mitigation request, >> the DOTS server returns 4.09 (Conflict) to the requesting DOTS >> client. >> >> For both 2.01 (Created) and 4.09 (Conflict) responses, the response >> includes enough information for a DOTS client to recognize the source >> of the conflict as described below: > Proposed text looks good. Nit: I don't see the need for "For example". > > Cheers, > -Tiru > >>> -Tiru >>> >>>> -----Original Message----- >>>> From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of >>>> mohamed.boucadair@orange.com >>>> Sent: Wednesday, May 16, 2018 10:52 AM >>>> To: kaname nishizuka >>>> Cc: dots@ietf.org >>>> Subject: Re: [Dots] I-D Action: >>>> draft-ietf-dots-signal-channel-19.txt >>>> >>>> This email originated from outside of the organization. Do not click >>>> links >>> or >>>> open attachments unless you recognize the sender and know the >>>> content is safe. >>>> >>>> Hi Kaname, >>>> >>>> Thank you for ACking. I will implement this change. >>>> >>>> Cheers, >>>> Med >>>> >>>>> -----Message d'origine----- >>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] Envoyé : mercredi >>>>> 16 mai 2018 03:16 À : BOUCADAIR Mohamed IMT/OLN Cc : >> dots@ietf.org >>>> Objet >>>>> : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>> >>>>> Hi Med, >>>>> >>>>> Please see inline. >>>>> >>>>> thanks, >>>>> kaname >>>>> >>>>> On 2018/05/15 22:26, mohamed.boucadair@orange.com wrote: >>>>>> Hi Kaname, >>>>>> >>>>>> Please see inline. >>>>>> >>>>>> Cheers, >>>>>> Med >>>>>> >>>>>>> -----Message d'origine----- >>>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] Envoyé : lundi >>>>>>> 14 mai 2018 11:49 À : BOUCADAIR Mohamed IMT/OLN Cc : >>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>> >>>>>>> Hi Med, >>>>>>> >>>>>>> Please see inline. >>>>>>> >>>>>>> thanks, >>>>>>> Kaname >>>>>>> >>>>>>> On 2018/05/11 18:39, mohamed.boucadair@orange.com wrote: >>>>>>>> Re-, >>>>>>>> >>>>>>>> Please see inline. >>>>>>>> >>>>>>>> Cheers, >>>>>>>> Med >>>>>>>> >>>>>>>>> -----Message d'origine----- >>>>>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] Envoyé : >>>>>>>>> vendredi >>>>>>>>> 11 mai 2018 10:59 À : BOUCADAIR Mohamed IMT/OLN Cc : >>>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>>>> >>>>>>>>> Hi Med, >>>>>>>>> >>>>>>>>> > If the server decides not to maintain the conflicting >>>>>>>>> request, then >>>>>>> the >>>>>>>>> present request will be processed as normal: that is 2.01 >>>>>>>>> will be >>>>> returned >>>>>>> to >>>>>>>>> ack successful handling. A notification will be sent to the >>>>>>>>> client owner >>>>>>> of >>>>>>>>> the conflicting request to notify withdrawal (section 4.4.2). >>>>>>>>> In that case, the status code is '7' (Attack mitigation is >>>>>>>>> withdrawn) >>>>>>>> [Med] Yes, that status will be sent to the owner of the >>>>>>>> (existing) >>>>> request. >>>>>>>>> My original question is when the status code '8' (Attack >>>>>>>>> mitigation is >>>>>>>>> rejected) will be used. >>>>>>>> [Med] I got that. >>>>>>>> >>>>>>>>> In the text in the draft, "the conflicting mitigation >>>>>>>>> request" is >>>>>>> ambiguous >>>>>>>>> whether it is already existing request or the request that >>>>>>>>> just has >>>>>>> arrived. >>>>>>>> [Med] It is related to the already existing request. >>>>>>>> >>>>>>>>> Say, the existing request is (A), then a mitigation request >>>>>>>>> (B) arrived >>>>>>> which >>>>>>>>> are conflicting with A. >>>>>>>>> >>>>>>>>> If B is selected. >>>>>>>>> (A) will get notification with the withdrawal code '7' >>>>>>>>> (B) will get 2.01 >>>>>>>>> >>>>>>>> [Med] Yes. The current text does calls out your step (1) in 4.4.2. >>>>>>>> Your >>>>>>> step (2) is not called explicit in the text because there is no >>>>>>> confusion about which code to return when a request is accepted >>>>>>> to be >>>> honored. >>>>>>>> The text focuses on cases which requires specific handling: >>>>>>>> - inactive request because of a conflict >>>>>>>> - multiple active conflicting requests >>>>>>>> >>>>>>>>> else If B is not selected. >>>>>>>>> (B) will get 4.09 >>>>>>>>> >>>>>>>> [Med] In this case, the resource is not created and as such >>>>>>>> case >>>>> returning >>>>>>> notification status code of 8 is not possible as you rightful >>>>>>> pointed >>> out. >>>>>>>> This is why we suggested to return 2.01 for this case too so >>>>>>>> that an >>>>> update >>>>>>> of the status can be sent to the client upon change. >>>>>>> I don't think it is needed to obligate returning of 2.01. >>>>>>> If it is obvious that the DOTS server need not to create >>>>>>> resource of the conflicting request, it may return 4.09. >>>>>>> So, returning of 4.09 should be allowed in this case. >>>>>>> It should be left as implementation- and deployment-specific. >>>>>>> >>>>>>> >>>>>> [Med] Do you mean that the text should be modified to allow for >>>>>> both >>>>>> 2.01 >>>>> or 4.09 to be returned depending on some local policy? >>>>>> e.g., >>>>>> >>>>>> OLD: >>>>>> If the request is conflicting with an existing mitigation request >>>>>> from a different DOTS client, and the DOTS server decides to >>> maintain >>>>>> the conflicting mitigation request, the DOTS server returns 4.09 >>>>>> (Conflict) [RFC8132] to the requesting DOTS client. The response >>>>>> includes enough information for a DOTS client to recognize >>>>>> the >>> source >>>>>> of the conflict as described below: >>>>>> >>>>>> NEW: >>>>>> If the request is conflicting with an existing mitigation request >>>>>> from a different DOTS client, the DOTS server may return >>>>>> 2.01 >>> (Created) >>>>>> or 4.09 (Conflict) to the requesting DOTS client. The response >>>>>> includes enough information for a DOTS client to recognize >>>>>> the >>> source >>>>>> of the conflict as described below: >>>>>> >>>>> Yes, it works for me. >>>>> >>>>> >>>>>>>>> Tiru said: >>>>>>>>> > In this case, the resource should be created and the >>>>>>>>> server should >>>>>>> return >>>>>>>>> success (2.01 or 2.04) response code along with the conflict- >>>>> information. >>>>>>>>> In this situation, (B) will get 2.01 or 2.04 along with the >>>>>>>>> rejected >>>>> code >>>>>>> '8' >>>>>>>>> (Which mitigation request will be selected by the DOTS server >>>>>>>>> is >>>>>>>>> implementation- and deployment-specific.) >>>>>>>>> >>>>>>>>> Thanks, >>>>>>>>> Kaname >>>>>>>>> >>>>>>>>> >>>>>>>>> On 2018/05/11 15:09, mohamed.boucadair@orange.com wrote: >>>>>>>>>> Hi Kaname, >>>>>>>>>> >>>>>>>>>> If the server decides not to maintain the conflicting >>>>>>>>>> request, then the >>>>>>>>> present request will be processed as normal: that is 2.01 >>>>>>>>> will be >>>>> returned >>>>>>> to >>>>>>>>> ack successful handling. A notification will be sent to the >>>>>>>>> client owner >>>>>>> of >>>>>>>>> the conflicting request to notify withdrawal (section 4.4.2). >>>>>>>>>> The text focuses on the case ", and the DOTS server decides >>>>>>>>>> to maintain >>>>>>> the >>>>>>>>> conflicting mitigation request" because this is the one which >>>>>>>>> requires additional specification vs. normal request that is >>>>>>>>> accepted by a >>>>> server. >>>>>>>>>> Cheers, >>>>>>>>>> Med >>>>>>>>>> >>>>>>>>>>> -----Message d'origine----- De : kaname nishizuka >>>>>>>>>>> [mailto:kaname@nttv6.jp] Envoyé : >>>>>>>>>>> mercredi 9 mai 2018 10:41 À : BOUCADAIR Mohamed IMT/OLN >> Cc : >>>>>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>> >>>>>>>>>>> Hi Med, >>>>>>>>>>> >>>>>>>>>>> I'm OK with this change. >>>>>>>>>>> However, to be precise, I'd like to suggest to state about >>>>>>>>>>> the case >>>>> the >>>>>>>>> DOTS >>>>>>>>>>> server decides NOT to maintain it. >>>>>>>>>>> >>>>>>>>>>> NEW-2: >>>>>>>>>>>    If the request is conflicting with an existing >>>>>>>>>>> mitigation >>>>> request >>>>>>>>>>>    from a different DOTS client, and the DOTS server >>>>>>>>>>> decides to >>>>>>> maintain >>>>>>>>>>>    the conflicting mitigation request, the DOTS server >>>>>>>>>>> returns >>>>> 2.01 >>>>>>>>>>>    (Created) to the requesting DOTS client. >>>>>>>>>>>    Otherwise, the DOTS server returns 4.09 (Conflict) >>> [RFC8132]. >>>>>>>>>>>    The response includes enough information for a DOTS >>>>>>>>>>> client >>> to >>>>>>>>>>>    recognize the source of the conflict as described below: >>>>>>>>>>> >>>>>>>>>>> thanks, >>>>>>>>>>> Kaname >>>>>>>>>>> >>>>>>>>>>> On 2018/05/09 14:51, mohamed.boucadair@orange.com wrote: >>>>>>>>>>>> Hi Kaname, >>>>>>>>>>>> >>>>>>>>>>>> After thinking about this, I do think that you have a >>>>>>>>>>>> valid point. I >>>>>>>>>>> suggest to make to make this change (marked with ^^^^) >>>>>>>>>>>> OLD: >>>>>>>>>>>> If the request is conflicting with an existing >>>>>>>>>>>> mitigation >>>>> request >>>>>>>>>>>> from a different DOTS client, and the DOTS server >>>>>>>>>>>> decides to >>>>>>>>> maintain >>>>>>>>>>>> the conflicting mitigation request, the DOTS server >>>>>>>>>>>> returns >>>>> 4.09 >>>>>>>>>>>> (Conflict) [RFC8132] to the requesting DOTS client. >>>>>>>>>>>> The >>>>> response >>>>>>>>>>>> includes enough information for a DOTS client to >>>>>>>>>>>> recognize the >>>>>>>>> source >>>>>>>>>>>> of the conflict as described below: >>>>>>>>>>>> >>>>>>>>>>>> NEW: >>>>>>>>>>>> If the request is conflicting with an existing >>>>>>>>>>>> mitigation >>>>> request >>>>>>>>>>>> from a different DOTS client, and the DOTS server >>>>>>>>>>>> decides to >>>>>>>>> maintain >>>>>>>>>>>> the conflicting mitigation request, the DOTS server >>>>>>>>>>>> returns >>>>> 2.01 >>>>> ^^^^ >>>>>>>>>>>> (Created) to the requesting DOTS client. The response^ >>>>>>>>>>>> ^^^^^^^^ >>>>>>>>>>>> includes enough information for a DOTS client to >>>>>>>>>>>> recognize the >>>>>>>>> source >>>>>>>>>>>> of the conflict as described below: >>>>>>>>>>>> >>>>>>>>>>>> Cheers, >>>>>>>>>>>> Med >>>>>>>>>>>> >>>>>>>>>>>>> -----Message d'origine----- De : Dots >>>>>>>>>>>>> [mailto:dots-bounces@ietf.org] De la part de >>>>>>>>>>>>> mohamed.boucadair@orange.com Envoyé : lundi 7 mai 2018 >>>> 08:38 >>>>>>>>>>>>> À : kaname nishizuka; dots@ietf.org Objet : Re: [Dots] >>>>>>>>>>>>> I-D >>>>>>>>>>>>> Action: draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>>>> >>>>>>>>>>>>> Re-, >>>>>>>>>>>>> >>>>>>>>>>>>> Agree that the codes are not the same, but alternatives >>>>>>>>>>>>> ones as >>>>>>>>> summarized >>>>>>>>>>>>> here: >> https://mailarchive.ietf.org/arch/msg/dots/hA3MLKlkXFimpAn5KSYTayaVkjA. >>>>>>>>>>>>> Cheers, >>>>>>>>>>>>> Med >>>>>>>>>>>>> >>>>>>>>>>>>>> -----Message d'origine----- De : kaname nishizuka >>>>>>>>>>>>>> [mailto:kaname@nttv6.jp] Envoyé : >>>>>>>>>>>>>> lundi 7 mai 2018 08:20 À : BOUCADAIR Mohamed IMT/OLN; >>>>>>>>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>>>>>>>> draft-ietf-dots-signal-channel- >>>>> 19.txt >>>>>>>>>>>>>> Hi Med, >>>>>>>>>>>>>> >>>>>>>>>>>>>> I've read the thread. >>>>>>>>>>>>>> and the code '8' of the thread is different from the >>>>>>>>>>>>>> code '8' of >>>>> the >>>>>>>>>>>>> current >>>>>>>>>>>>>> draft. >>>>>>>>>>>>>> >>>>>>>>>>>>>> they'd been discussing the 7,8 and 9 based on this >>>>>>>>>>>>>> definition, >>>>> right? >>>>>>> https://mailarchive.ietf.org/arch/msg/dots/7zljzN8nycZX7E7ghgk1 >>>>>>> ux32 >>>>>>> MkM >>>>>>>>>>>>>> == >>>>>>>>>>>>>> 7 | DOTS Server has detected conflicting mitigation >>>>>>>>>>>>>> requests from >>>>>>>>>>> different >>>>>>>>>>>>>> DOTS clients.  This mitigation request is currently >>>>>>>>>>>>>> inactive until >>>>>>> the >>>>>>>>>>>>>> conflicts are resolved. Another mitigation request is active. >>>>>>>>>>>>>> >>>>>>>>>>>>>> 8 | DOTS Server has detected conflicting mitigation >>>>>>>>>>>>>> requests from >>>>>>>>>>> different >>>>>>>>>>>>>> DOTS clients.  This mitigation request is currently active. >>>>>>>>>>>>>> >>>>>>>>>>>>>> 9 | DOTS Server has detected conflicting mitigation >>>>>>>>>>>>>> requests from >>>>>>>>>>> different >>>>>>>>>>>>>> DOTS clients.  All conflicting mitigation requests are >>> inactive. >>>>>>>>>>>>>> == >>>>>>>>>>>>>> >>>>>>>>>>>>>> Kaname >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> On 2018/05/07 15:12, mohamed.boucadair@orange.com >> wrote: >>>>>>>>>>>>>>> Hi Kaname, >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Please check >>>>>>> https://mailarchive.ietf.org/arch/msg/dots/z_cZR9_u273HzC9o0Iy9 >>>>>>> FeQZ >>>>>>> 0Jo >>>>>>>>>>>>> about >>>>>>>>>>>>>> the rationale for allowing to return code '8' even in a >>>>> notification >>>>>>>>>>>>> message. >>>>>>>>>>>>>> The intent was to have code '8' as a transition state. >>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>> Med >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> -----Message d'origine----- De : kaname nishizuka >>>>>>>>>>>>>>>> [mailto:kaname@nttv6.jp] Envoyé : mercredi 2 mai 2018 >>>>>>>>>>>>>>>> 02:49 À : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org >>>> Objet : >>>>>>>>>>>>>>>> Re: [Dots] I-D Action: draft-ietf-dots-signal-channel- >>>>>>> 19.txt >>>>>>>>>>>>>>>> Hi, >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> I'd like to ask one clarification question about >>>>>>>>>>>>>>>> status code >>> 8: >>>>>>>>>>>>>>>>    o  A notification message with 'status' code >>>>>>>>>>>>>>>> set to '8 >>>>>>> (Attack >>>>>>>>>>>>>>>>       mitigation is rejected)' and 'conflict-status' >>>>>>>>>>>>>>>> set to >>>>>>> '1' >>>>>>>>> is >>>>>>>>>>>>> sent >>>>>>>>>>>>>>>>       to a DOTS client to indicate that this >>>>>>>>>>>>>>>> mitigation >>>>>>> request >>>>>>>>> is >>>>>>>>>>>>>>>>       rejected because a conflict is detected. >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> If a mitigation request is rejected due to a conflict, >>>>>>>>>>>>>>>> it is >>>>>>> rejected >>>>>>>>>>> at >>>>>>>>>>>>>>>> PUT(4.09(Conflict)), so no resource will be created. >>>>>>>>>>>>>>>> So it looks there is no chance to return '8 (Attack >>>>>>>>>>>>>>>> mitigation is >>>>>>>>>>>>>> rejected)'. >>>>>>>>>>>>>>>> thanks, >>>>>>>>>>>>>>>> Kaname >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> On 2018/04/10 22:47, mohamed.boucadair@orange.com >>>> wrote: >>>>>>>>>>>>>>>>> Re-, >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> This version addresses the comments raised during the >>>>>>>>>>>>>>>>> WGLC, in >>>>>>>>>>>>>> particular: >>>>>>>>>>>>>>>>> - (Clarification) Indicate that only one hop-limit is >>>>>>>>>>>>>>>>> included >>>>>>>>>>>>>>>>> - Specify the loop diagnostic payload >>>>>>>>>>>>>>>>> - (Clarification) Indicate explicitly that GET >>>>>>>>>>>>>>>>> messages with >>>>> 'sid' >>>>>>>>> are >>>>>>>>>>>>>>>> allowed >>>>>>>>>>>>>>>>> - Update the redirect behavior. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>>>> Med >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> -----Message d'origine----- De : Dots >>>>>>>>>>>>>>>>>> [mailto:dots-bounces@ietf.org] De la part de >>>>> internet- >>>>>>>>>>>>>>>>>> drafts@ietf.org >>>>>>>>>>>>>>>>>> Envoyé : mardi 10 avril 2018 15:40 À : >>>>>>>>>>>>>>>>>> i-d-announce@ietf.org Cc : dots@ietf.org Objet : >>>>>>>>>>>>>>>>>> [Dots] I-D Action: draft-ietf-dots-signal-channel- >>>>> 19.txt >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> A New Internet-Draft is available from the on-line >>>>>>>>>>>>>>>>>> Internet- >>>>>>> Drafts >>>>>>>>>>>>>>>>>> directories. >>>>>>>>>>>>>>>>>> This draft is a work item of the DDoS Open Threat >>>>>>>>>>>>>>>>>> Signaling WG >>>>> of >>>>>>>>> the >>>>>>>>>>>>>>>> IETF. >>>>>>>>>>>>>>>>>> Title : Distributed Denial-of- >>> Service >>>>> Open >>>>>>>>>>> Threat >>>>>>>>>>>>>>>> Signaling >>>>>>>>>>>>>>>>>> (DOTS) Signal Channel Specification >>>>>>>>>>>>>>>>>> Authors : Tirumaleswar Reddy >>>>>>>>>>>>>>>>>> Mohamed Boucadair >>>>>>>>>>>>>>>>>> Prashanth Patil >>>>>>>>>>>>>>>>>> Andrew Mortensen >>>>>>>>>>>>>>>>>> Nik Teague >>>>>>>>>>>>>>>>>> Filename : draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>>>>>>>>> Pages : 86 >>>>>>>>>>>>>>>>>> Date : 2018-04-10 >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Abstract: >>>>>>>>>>>>>>>>>> This document specifies the DOTS signal >>>>>>>>>>>>>>>>>> channel, a >>>>>>> protocol >>>>>>>>> for >>>>>>>>>>>>>>>>>> signaling the need for protection against >>>>>>>>>>>>>>>>>> Distributed >>>>>>>>> Denial- >>>>>>>>>>> of- >>>>>>>>>>>>>>>>>> Service (DDoS) attacks to a server capable >>>>>>>>>>>>>>>>>> of enabling >>>>>>>>> network >>>>>>>>>>>>>>>>>> traffic mitigation on behalf of the >>>>>>>>>>>>>>>>>> requesting >>> client. >>>>>>>>>>>>>>>>>> A companion document defines the DOTS data >>>>>>>>>>>>>>>>>> channel, a >>>>>>>>> separate >>>>>>>>>>>>>>>>>> reliable communication layer for DOTS >>>>>>>>>>>>>>>>>> management and >>>>>>>>>>>>> configuration >>>>>>>>>>>>>>>>>> purposes. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Editorial Note (To be removed by RFC Editor) >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Please update these statements with the RFC >>>>>>>>>>>>>>>>>> number to >>>>> be >>>>>>>>>>> assigned >>>>>>>>>>>>>> to >>>>>>>>>>>>>>>>>> this document: >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> o "This version of this YANG module is >>>>>>>>>>>>>>>>>> part of RFC >>>>>>> XXXX;" >>>>>>>>>>>>>>>>>> o "RFC XXXX: Distributed Denial-of-Service >>>>>>>>>>>>>>>>>> Open >>>>> Threat >>>>>>>>>>> Signaling >>>>>>>>>>>>>>>>>> (DOTS) Signal Channel Specification"; >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> o "| [RFCXXXX] |" >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> o reference: RFC XXXX >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Please update TBD statements with the port >>>>>>>>>>>>>>>>>> number to >>>>> be >>>>>>>>>>> assigned >>>>>>>>>>>>> to >>>>>>>>>>>>>>>>>> DOTS Signal Channel Protocol. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Also, please update the "revision" date of >>>>>>>>>>>>>>>>>> the YANG >>>>>>> module. >>>>>>>>>>>>>>>>>> The IETF datatracker status page for this draft is: >>>>>>>>>>>>>>>>>> https://datatracker.ietf.org/doc/draft-ietf-dots-sig >>>>>>>>>>>>>>>>>> nal- >>>>> channel/ >>>>>>>>>>>>>>>>>> There are also htmlized versions available at: >>>>>>>>>>>>>>>>>> https://tools.ietf.org/html/draft-ietf-dots-signal-c >>>>>>>>>>>>>>>>>> hann >>>>>>>>>>>>>>>>>> el-19 >>>>>>>>>>>>>>>>>> https://datatracker.ietf.org/doc/html/draft-ietf-dot >>>>>>>>>>>>>>>>>> s-si >>>>>>>>>>>>>>>>>> gnal- >>>>>>>>> channel- >>>>>>>>>>>>> 19 >>>>>>>>>>>>>>>>>> A diff from the previous version is available at: >>>>>>>>>>>>>>>>>> https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-si >>>>>>>>>>>>>>>>>> gnal >>>>>>>>>>>>>>>>>> - >>>>> channel- >>>>>>> 19 >>>>>>>>>>>>>>>>>> Please note that it may take a couple of minutes >>>>>>>>>>>>>>>>>> from the time >>>>> of >>>>>>>>>>>>>>>> submission >>>>>>>>>>>>>>>>>> until the htmlized version and diff are available at >>>>>>>>> tools.ietf.org. >>>>>>>>>>>>>>>>>> Internet-Drafts are also available by anonymous FTP at: >>>>>>>>>>>>>>>>>> ftp://ftp.ietf.org/internet-drafts/ >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >> _______________________________________________ >>>>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>> Dots mailing list >>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>> _______________________________________________ >>>>>>>>>> Dots mailing list >>>>>>>>>> Dots@ietf.org >>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>> _______________________________________________ >>>>>>>> Dots mailing list >>>>>>>> Dots@ietf.org >>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>> _______________________________________________ >>>> Dots mailing list >>>> Dots@ietf.org >>>> https://www.ietf.org/mailman/listinfo/dots > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Wed May 16 00:33:23 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 11452129C59 for ; Wed, 16 May 2018 00:33:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.7 X-Spam-Level: X-Spam-Status: No, score=-0.7 tagged_above=-999 required=5 tests=[RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id om9N-97SZKRB for ; Wed, 16 May 2018 00:33:16 -0700 (PDT) Received: from orange.com (mta239.mail.business.static.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E096129C51 for ; Wed, 16 May 2018 00:33:16 -0700 (PDT) Received: from opfedar02.francetelecom.fr (unknown [xx.xx.xx.4]) by opfedar23.francetelecom.fr (ESMTP service) with ESMTP id E9DF91605CE; Wed, 16 May 2018 09:33:14 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.21]) by opfedar02.francetelecom.fr (ESMTP service) with ESMTP id C56E2180083; Wed, 16 May 2018 09:33:14 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM6C.corporate.adroot.infra.ftgroup ([fe80::d9f5:9741:7525:a199%18]) with mapi id 14.03.0389.001; Wed, 16 May 2018 09:33:13 +0200 From: To: "Konda, Tirumaleswar Reddy" , "kaname nishizuka" CC: "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT0NF/5sqjFXD5eEKW2iVIpIKRtqP6A2IAgCG5zoCACDXkgIAAAhwAgAAFAwCAAxeuAIAAL3EAgAL6OICAAC9rAIAAC0wAgAS5xwCAAc8UgIAAxkKAgABEsoCAAAn6UIAACZ8QgAAHNfCAAAi+0A== Date: Wed, 16 May 2018 07:33:13 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF1BDCD@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DEFB67D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF150EA@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF16948@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <8ae47725-4db3-e02a-7846-d2f4d5d9b739@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BCA8@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BD67@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 May 2018 07:33:20 -0000 UmUtLA0KDQoiRm9yIGV4YW1wbGUiIGlzIHRoZXJlIHRvIGFjY29tbW9kYXRlIGEgY29tbWVudCBm cm9tIEthbmFtZSB3aG8gd2FudGVkIHRoZSBiZWhhdmlvciB0byBiZSBhbHNvIGltcGxlbWVudGF0 aW9uL2RlcGxveW1lbnQuIA0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0tLU1lc3NhZ2UgZCdvcmln aW5lLS0tLS0NCj4gRGXCoDogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeSBbbWFpbHRvOlRpcnVt YWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb21dDQo+IEVudm95w6nCoDogbWVyY3JlZGkgMTYg bWFpIDIwMTggMDk6MDQNCj4gw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTjsga2FuYW1l IG5pc2hpenVrYQ0KPiBDY8KgOiBkb3RzQGlldGYub3JnDQo+IE9iamV0wqA6IFJFOiBbRG90c10g SS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0KPiANCj4g SGkgTWVkLA0KPiANCj4gUGxlYXNlIHNlZSBpbmxpbmUNCj4gDQo+ID4gLS0tLS1PcmlnaW5hbCBN ZXNzYWdlLS0tLS0NCj4gPiBGcm9tOiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4g W21haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tXQ0KPiA+IFNlbnQ6IFdlZG5lc2Rh eSwgTWF5IDE2LCAyMDE4IDEyOjI2IFBNDQo+ID4gVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVk ZHkgPFRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20+Ow0KPiA+IGthbmFtZSBuaXNo aXp1a2EgPGthbmFtZUBudHR2Ni5qcD4NCj4gPiBDYzogZG90c0BpZXRmLm9yZw0KPiA+IFN1Ympl Y3Q6IFJFOiBbRG90c10gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVs LTE5LnR4dA0KPiA+DQo+ID4gVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0 aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3MNCj4gb3INCj4gPiBvcGVuIGF0dGFj aG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRl bnQgaXMNCj4gPiBzYWZlLg0KPiA+DQo+ID4gSGkgVGlydSwNCj4gPg0KPiA+IFBsZWFzZSBzZWUg aW5saW5lLg0KPiA+DQo+ID4gQ2hlZXJzLA0KPiA+IE1lZA0KPiA+DQo+ID4gPiAtLS0tLU1lc3Nh Z2UgZCdvcmlnaW5lLS0tLS0NCj4gPiA+IERlwqA6IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkN Cj4gPiA+IFttYWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbV0NCj4gPiA+ IEVudm95w6nCoDogbWVyY3JlZGkgMTYgbWFpIDIwMTggMDg6MTENCj4gPiA+IMOAwqA6IEJPVUNB REFJUiBNb2hhbWVkIElNVC9PTE47IGthbmFtZSBuaXNoaXp1a2EgQ2PCoDogZG90c0BpZXRmLm9y Zw0KPiA+ID4gT2JqZXTCoDogUkU6IFtEb3RzXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMt c2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4gPg0KPiA+ID4gSSBwcm9wb3NlIHRvIHVwZGF0ZSB0 aGUgdGV4dCBhcyBmb2xsb3dzIHRvIG1ha2UgaXQgbW9yZSBjbGVhcjoNCj4gPiA+DQo+ID4gPiBJ ZiB0aGUgcmVxdWVzdCBpcyBjb25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nIG1pdGlnYXRpb24g cmVxdWVzdCBmcm9tDQo+ID4gPiBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwgdGhlIERPVFMgc2Vy dmVyIG1heSBlaXRoZXIgZGVjaWRlIHRvIG1haW50YWluDQo+ID4gPiB0aGUgY29uZmxpY3Rpbmcg cmVxdWVzdCBvciByZWplY3QgdGhlIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdC4NCj4g PiA+IElmIHRoZSBET1RTIHNlcnZlciBkZWNpZGVzIHRvIG1haW50YWluIHRoZSBjb25mbGljdGlu ZyBtaXRpZ2F0aW9uDQo+ID4gPiByZXF1ZXN0LA0KPiA+DQo+ID4gW01lZF0gSSBndWVzcyAiY29u ZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0IiBwb2ludHMgdG8gdGhlIG5ldyByZXF1ZXN0Lg0K PiA+DQo+ID4gIHRoZSBET1RTIHNlcnZlciByZXR1cm5zIDIuMDEgKENyZWF0ZWQpIHRvDQo+ID4g PiB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4gSWYgdGhlIERPVFMgc2VydmVyIGRlY2lkZXMg dG8gcmVqZWN0IHRoZQ0KPiA+ID4gY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUg RE9UUyBzZXJ2ZXIgcmV0dXJucyA0LjA5DQo+ID4gPiAoQ29uZmxpY3QpIFtSRkM4MTMyXSB0byB0 aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudA0KPiA+DQo+ID4gW01lZF0gSWRlbSBhcyBhYm92ZS4N Cj4gPg0KPiA+DQo+ID4gPiBGb3IgYm90aCAyLjAxIChDcmVhdGVkKSBhbmQgNC4wOSAoQ29uZmxp Y3QpIHJlc3BvbnNlcywNCj4gPg0KPiA+IFtNZWRdIEkgbGlrZSB0aGlzLg0KPiA+DQo+ID4gIHRo ZSByZXNwb25zZSBtZXNzYWdlDQo+ID4gPiBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9y IGEgRE9UUyBjbGllbnQgdG8gcmVjb2duaXplIHRoZSBzb3VyY2UNCj4gPiA+IG9mIHRoZSBjb25m bGljdCBhcyBkZXNjcmliZWQgYmVsb3c6DQo+ID4NCj4gPiBbTWVkXSBXaGF0IGFib3V0Pw0KPiA+ DQo+ID4gTkVXOg0KPiA+DQo+ID4gICAgSWYgdGhlIHJlcXVlc3QgaXMgY29uZmxpY3Rpbmcgd2l0 aCBhbiBleGlzdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QNCj4gPiAgICBmcm9tIGEgZGlmZmVyZW50 IERPVFMgY2xpZW50LCB0aGUgRE9UUyBzZXJ2ZXIgbWF5IHJldHVybiAyLjAxDQo+ID4gICAgKENy ZWF0ZWQpIG9yIDQuMDkgKENvbmZsaWN0KSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4g IEZvcg0KPiA+ICAgIGV4YW1wbGU6DQo+ID4NCj4gPiAgICBvICBJZiB0aGUgRE9UUyBzZXJ2ZXIg ZGVjaWRlcyB0byBtYWludGFpbiB0aGUgbmV3IG1pdGlnYXRpb24gcmVxdWVzdCwNCj4gPiAgICAg ICB0aGUgRE9UUyBzZXJ2ZXIgcmV0dXJucyAyLjAxIChDcmVhdGVkKSB0byB0aGUgcmVxdWVzdGlu ZyBET1RTDQo+ID4gICAgICAgY2xpZW50Lg0KPiA+DQo+ID4gICAgbyAgSWYgdGhlIERPVFMgc2Vy dmVyIGRlY2lkZXMgdG8gcmVqZWN0IHRoZSBuZXcgbWl0aWdhdGlvbiByZXF1ZXN0LA0KPiA+ICAg ICAgIHRoZSBET1RTIHNlcnZlciByZXR1cm5zIDQuMDkgKENvbmZsaWN0KSB0byB0aGUgcmVxdWVz dGluZyBET1RTDQo+ID4gICAgICAgY2xpZW50Lg0KPiA+DQo+ID4gICAgRm9yIGJvdGggMi4wMSAo Q3JlYXRlZCkgYW5kIDQuMDkgKENvbmZsaWN0KSByZXNwb25zZXMsIHRoZSByZXNwb25zZQ0KPiA+ ICAgIGluY2x1ZGVzIGVub3VnaCBpbmZvcm1hdGlvbiBmb3IgYSBET1RTIGNsaWVudCB0byByZWNv Z25pemUgdGhlIHNvdXJjZQ0KPiA+ICAgIG9mIHRoZSBjb25mbGljdCBhcyBkZXNjcmliZWQgYmVs b3c6DQo+IA0KPiBQcm9wb3NlZCB0ZXh0IGxvb2tzIGdvb2QuIE5pdDogSSBkb24ndCBzZWUgdGhl IG5lZWQgZm9yICJGb3IgZXhhbXBsZSIuDQo+IA0KPiBDaGVlcnMsDQo+IC1UaXJ1DQo+IA0KPiA+ DQo+ID4gPg0KPiA+ID4gLVRpcnUNCj4gPiA+DQo+ID4gPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tDQo+ID4gPiA+IEZyb206IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmdd IE9uIEJlaGFsZiBPZg0KPiA+ID4gPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4g PiA+IFNlbnQ6IFdlZG5lc2RheSwgTWF5IDE2LCAyMDE4IDEwOjUyIEFNDQo+ID4gPiA+IFRvOiBr YW5hbWUgbmlzaGl6dWthIDxrYW5hbWVAbnR0djYuanA+DQo+ID4gPiA+IENjOiBkb3RzQGlldGYu b3JnDQo+ID4gPiA+IFN1YmplY3Q6IFJlOiBbRG90c10gSS1EIEFjdGlvbjoNCj4gPiA+ID4gZHJh ZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0KPiA+ID4gPg0KPiA+ID4gPiBUaGlz IGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5v dCBjbGljaw0KPiA+ID4gPiBsaW5rcw0KPiA+ID4gb3INCj4gPiA+ID4gb3BlbiBhdHRhY2htZW50 cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZQ0KPiA+ID4gPiBj b250ZW50IGlzIHNhZmUuDQo+ID4gPiA+DQo+ID4gPiA+IEhpIEthbmFtZSwNCj4gPiA+ID4NCj4g PiA+ID4gVGhhbmsgeW91IGZvciBBQ2tpbmcuIEkgd2lsbCBpbXBsZW1lbnQgdGhpcyBjaGFuZ2Uu DQo+ID4gPiA+DQo+ID4gPiA+IENoZWVycywNCj4gPiA+ID4gTWVkDQo+ID4gPiA+DQo+ID4gPiA+ ID4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gPiA+ID4gRGXCoDoga2FuYW1lIG5p c2hpenVrYSBbbWFpbHRvOmthbmFtZUBudHR2Ni5qcF0gRW52b3nDqcKgOiBtZXJjcmVkaQ0KPiA+ ID4gPiA+IDE2IG1haSAyMDE4IDAzOjE2IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE4g Q2PCoDoNCj4gPiBkb3RzQGlldGYub3JnDQo+ID4gPiA+IE9iamV0DQo+ID4gPiA+ID4gOiBSZTog W0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQN Cj4gPiA+ID4gPg0KPiA+ID4gPiA+IEhpIE1lZCwNCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFBsZWFz ZSBzZWUgaW5saW5lLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gdGhhbmtzLA0KPiA+ID4gPiA+IGth bmFtZQ0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gT24gMjAxOC8wNS8xNSAyMjoyNiwgbW9oYW1lZC5i b3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPiA+ID4gPiA+IEhpIEthbmFtZSwNCj4gPiA+ ID4gPiA+DQo+ID4gPiA+ID4gPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPiA+ID4gPiA+DQo+ID4g PiA+ID4gPiBDaGVlcnMsDQo+ID4gPiA+ID4gPiBNZWQNCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4g Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gPiA+ID4gPj4gRGXCoDoga2FuYW1l IG5pc2hpenVrYSBbbWFpbHRvOmthbmFtZUBudHR2Ni5qcF0gRW52b3nDqcKgOiBsdW5kaQ0KPiA+ ID4gPiA+ID4+IDE0IG1haSAyMDE4IDExOjQ5IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9P TE4gQ2PCoDoNCj4gPiA+ID4gPiA+PiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFJlOiBbRG90c10g SS1EIEFjdGlvbjoNCj4gPiA+ID4gPiA+PiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwt MTkudHh0DQo+ID4gPiA+ID4gPj4NCj4gPiA+ID4gPiA+PiBIaSBNZWQsDQo+ID4gPiA+ID4gPj4N Cj4gPiA+ID4gPiA+PiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPiA+ID4gPiA+Pg0KPiA+ID4gPiA+ ID4+IHRoYW5rcywNCj4gPiA+ID4gPiA+PiBLYW5hbWUNCj4gPiA+ID4gPiA+Pg0KPiA+ID4gPiA+ ID4+IE9uIDIwMTgvMDUvMTEgMTg6MzksIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3Jv dGU6DQo+ID4gPiA+ID4gPj4+IFJlLSwNCj4gPiA+ID4gPiA+Pj4NCj4gPiA+ID4gPiA+Pj4gUGxl YXNlIHNlZSBpbmxpbmUuDQo+ID4gPiA+ID4gPj4+DQo+ID4gPiA+ID4gPj4+IENoZWVycywNCj4g PiA+ID4gPiA+Pj4gTWVkDQo+ID4gPiA+ID4gPj4+DQo+ID4gPiA+ID4gPj4+PiAtLS0tLU1lc3Nh Z2UgZCdvcmlnaW5lLS0tLS0NCj4gPiA+ID4gPiA+Pj4+IERlwqA6IGthbmFtZSBuaXNoaXp1a2Eg W21haWx0bzprYW5hbWVAbnR0djYuanBdIEVudm95w6nCoDoNCj4gPiA+ID4gPiA+Pj4+IHZlbmRy ZWRpDQo+ID4gPiA+ID4gPj4+PiAxMSBtYWkgMjAxOCAxMDo1OSDDgMKgOiBCT1VDQURBSVIgTW9o YW1lZCBJTVQvT0xOIENjwqA6DQo+ID4gPiA+ID4gPj4+PiBkb3RzQGlldGYub3JnIE9iamV0wqA6 IFJlOiBbRG90c10gSS1EIEFjdGlvbjoNCj4gPiA+ID4gPiA+Pj4+IGRyYWZ0LWlldGYtZG90cy1z aWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPiA+ID4gPiA+Pj4+DQo+ID4gPiA+ID4gPj4+PiBIaSBN ZWQsDQo+ID4gPiA+ID4gPj4+Pg0KPiA+ID4gPiA+ID4+Pj4gICAgPiBJZiB0aGUgc2VydmVyIGRl Y2lkZXMgbm90IHRvIG1haW50YWluIHRoZSBjb25mbGljdGluZw0KPiA+ID4gPiA+ID4+Pj4gcmVx dWVzdCwgdGhlbg0KPiA+ID4gPiA+ID4+IHRoZQ0KPiA+ID4gPiA+ID4+Pj4gcHJlc2VudCByZXF1 ZXN0IHdpbGwgYmUgcHJvY2Vzc2VkIGFzIG5vcm1hbDogdGhhdCBpcyAyLjAxDQo+ID4gPiA+ID4g Pj4+PiB3aWxsIGJlDQo+ID4gPiA+ID4gcmV0dXJuZWQNCj4gPiA+ID4gPiA+PiB0bw0KPiA+ID4g PiA+ID4+Pj4gYWNrIHN1Y2Nlc3NmdWwgaGFuZGxpbmcuIEEgbm90aWZpY2F0aW9uIHdpbGwgYmUg c2VudCB0byB0aGUNCj4gPiA+ID4gPiA+Pj4+IGNsaWVudCBvd25lcg0KPiA+ID4gPiA+ID4+IG9m DQo+ID4gPiA+ID4gPj4+PiB0aGUgY29uZmxpY3RpbmcgcmVxdWVzdCB0byBub3RpZnkgd2l0aGRy YXdhbCAoc2VjdGlvbiA0LjQuMikuDQo+ID4gPiA+ID4gPj4+PiBJbiB0aGF0IGNhc2UsIHRoZSBz dGF0dXMgY29kZSBpcyAnNycgKEF0dGFjayBtaXRpZ2F0aW9uIGlzDQo+ID4gPiA+ID4gPj4+PiB3 aXRoZHJhd24pDQo+ID4gPiA+ID4gPj4+IFtNZWRdIFllcywgdGhhdCBzdGF0dXMgd2lsbCBiZSBz ZW50IHRvIHRoZSBvd25lciBvZiB0aGUNCj4gPiA+ID4gPiA+Pj4gKGV4aXN0aW5nKQ0KPiA+ID4g PiA+IHJlcXVlc3QuDQo+ID4gPiA+ID4gPj4+DQo+ID4gPiA+ID4gPj4+PiBNeSBvcmlnaW5hbCBx dWVzdGlvbiBpcyB3aGVuIHRoZSBzdGF0dXMgY29kZSAnOCcgKEF0dGFjaw0KPiA+ID4gPiA+ID4+ Pj4gbWl0aWdhdGlvbiBpcw0KPiA+ID4gPiA+ID4+Pj4gcmVqZWN0ZWQpIHdpbGwgYmUgdXNlZC4N Cj4gPiA+ID4gPiA+Pj4gW01lZF0gSSBnb3QgdGhhdC4NCj4gPiA+ID4gPiA+Pj4NCj4gPiA+ID4g PiA+Pj4+IEluIHRoZSB0ZXh0IGluIHRoZSBkcmFmdCwgInRoZSBjb25mbGljdGluZyBtaXRpZ2F0 aW9uDQo+ID4gPiA+ID4gPj4+PiByZXF1ZXN0IiBpcw0KPiA+ID4gPiA+ID4+IGFtYmlndW91cw0K PiA+ID4gPiA+ID4+Pj4gd2hldGhlciBpdCBpcyBhbHJlYWR5IGV4aXN0aW5nIHJlcXVlc3Qgb3Ig dGhlIHJlcXVlc3QgdGhhdA0KPiA+ID4gPiA+ID4+Pj4ganVzdCBoYXMNCj4gPiA+ID4gPiA+PiBh cnJpdmVkLg0KPiA+ID4gPiA+ID4+PiBbTWVkXSBJdCBpcyByZWxhdGVkIHRvIHRoZSBhbHJlYWR5 IGV4aXN0aW5nIHJlcXVlc3QuDQo+ID4gPiA+ID4gPj4+DQo+ID4gPiA+ID4gPj4+PiBTYXksIHRo ZSBleGlzdGluZyByZXF1ZXN0IGlzIChBKSwgdGhlbiBhIG1pdGlnYXRpb24gcmVxdWVzdA0KPiA+ ID4gPiA+ID4+Pj4gKEIpIGFycml2ZWQNCj4gPiA+ID4gPiA+PiB3aGljaA0KPiA+ID4gPiA+ID4+ Pj4gYXJlIGNvbmZsaWN0aW5nIHdpdGggQS4NCj4gPiA+ID4gPiA+Pj4+DQo+ID4gPiA+ID4gPj4+ PiBJZiBCIGlzIHNlbGVjdGVkLg0KPiA+ID4gPiA+ID4+Pj4gKEEpIHdpbGwgZ2V0IG5vdGlmaWNh dGlvbiB3aXRoIHRoZSB3aXRoZHJhd2FsIGNvZGUgJzcnDQo+ID4gPiA+ID4gPj4+PiAoQikgd2ls bCBnZXQgMi4wMQ0KPiA+ID4gPiA+ID4+Pj4NCj4gPiA+ID4gPiA+Pj4gW01lZF0gWWVzLiBUaGUg Y3VycmVudCB0ZXh0IGRvZXMgY2FsbHMgb3V0IHlvdXIgc3RlcCAoMSkgaW4NCj4gNC40LjIuDQo+ ID4gPiA+ID4gPj4+IFlvdXINCj4gPiA+ID4gPiA+PiBzdGVwICgyKSBpcyBub3QgY2FsbGVkIGV4 cGxpY2l0IGluIHRoZSB0ZXh0IGJlY2F1c2UgdGhlcmUgaXMgbm8NCj4gPiA+ID4gPiA+PiBjb25m dXNpb24gYWJvdXQgd2hpY2ggY29kZSB0byByZXR1cm4gd2hlbiBhIHJlcXVlc3QgaXMgYWNjZXB0 ZWQNCj4gPiA+ID4gPiA+PiB0byBiZQ0KPiA+ID4gPiBob25vcmVkLg0KPiA+ID4gPiA+ID4+PiBU aGUgdGV4dCBmb2N1c2VzIG9uIGNhc2VzIHdoaWNoIHJlcXVpcmVzIHNwZWNpZmljIGhhbmRsaW5n Og0KPiA+ID4gPiA+ID4+PiAtIGluYWN0aXZlIHJlcXVlc3QgYmVjYXVzZSBvZiBhIGNvbmZsaWN0 DQo+ID4gPiA+ID4gPj4+IC0gbXVsdGlwbGUgYWN0aXZlIGNvbmZsaWN0aW5nIHJlcXVlc3RzDQo+ ID4gPiA+ID4gPj4+DQo+ID4gPiA+ID4gPj4+PiBlbHNlIElmIEIgaXMgbm90IHNlbGVjdGVkLg0K PiA+ID4gPiA+ID4+Pj4gKEIpIHdpbGwgZ2V0IDQuMDkNCj4gPiA+ID4gPiA+Pj4+DQo+ID4gPiA+ ID4gPj4+IFtNZWRdIEluIHRoaXMgY2FzZSwgdGhlIHJlc291cmNlIGlzIG5vdCBjcmVhdGVkIGFu ZCBhcyBzdWNoDQo+ID4gPiA+ID4gPj4+IGNhc2UNCj4gPiA+ID4gPiByZXR1cm5pbmcNCj4gPiA+ ID4gPiA+PiBub3RpZmljYXRpb24gc3RhdHVzIGNvZGUgb2YgOCBpcyBub3QgcG9zc2libGUgYXMg eW91IHJpZ2h0ZnVsDQo+ID4gPiA+ID4gPj4gcG9pbnRlZA0KPiA+ID4gb3V0Lg0KPiA+ID4gPiA+ ID4+PiBUaGlzIGlzIHdoeSB3ZSBzdWdnZXN0ZWQgdG8gcmV0dXJuIDIuMDEgZm9yIHRoaXMgY2Fz ZSB0b28gc28NCj4gPiA+ID4gPiA+Pj4gdGhhdCBhbg0KPiA+ID4gPiA+IHVwZGF0ZQ0KPiA+ID4g PiA+ID4+IG9mIHRoZSBzdGF0dXMgY2FuIGJlIHNlbnQgdG8gdGhlIGNsaWVudCB1cG9uIGNoYW5n ZS4NCj4gPiA+ID4gPiA+PiBJIGRvbid0IHRoaW5rIGl0IGlzIG5lZWRlZCB0byBvYmxpZ2F0ZSBy ZXR1cm5pbmcgb2YgMi4wMS4NCj4gPiA+ID4gPiA+PiBJZiBpdCBpcyBvYnZpb3VzIHRoYXQgdGhl IERPVFMgc2VydmVyIG5lZWQgbm90IHRvIGNyZWF0ZQ0KPiA+ID4gPiA+ID4+IHJlc291cmNlIG9m IHRoZSBjb25mbGljdGluZyByZXF1ZXN0LCBpdCBtYXkgcmV0dXJuIDQuMDkuDQo+ID4gPiA+ID4g Pj4gU28sIHJldHVybmluZyBvZiA0LjA5IHNob3VsZCBiZSBhbGxvd2VkIGluIHRoaXMgY2FzZS4N Cj4gPiA+ID4gPiA+PiBJdCBzaG91bGQgYmUgbGVmdCBhcyBpbXBsZW1lbnRhdGlvbi0gYW5kIGRl cGxveW1lbnQtc3BlY2lmaWMuDQo+ID4gPiA+ID4gPj4NCj4gPiA+ID4gPiA+Pg0KPiA+ID4gPiA+ ID4gW01lZF0gRG8geW91IG1lYW4gdGhhdCB0aGUgdGV4dCBzaG91bGQgYmUgbW9kaWZpZWQgdG8g YWxsb3cgZm9yDQo+ID4gPiA+ID4gPiBib3RoDQo+ID4gPiA+ID4gPiAyLjAxDQo+ID4gPiA+ID4g b3IgNC4wOSB0byBiZSByZXR1cm5lZCBkZXBlbmRpbmcgb24gc29tZSBsb2NhbCBwb2xpY3k/DQo+ ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gZS5nLiwNCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBP TEQ6DQo+ID4gPiA+ID4gPiAgICAgSWYgdGhlIHJlcXVlc3QgaXMgY29uZmxpY3Rpbmcgd2l0aCBh biBleGlzdGluZyBtaXRpZ2F0aW9uDQo+IHJlcXVlc3QNCj4gPiA+ID4gPiA+ICAgICBmcm9tIGEg ZGlmZmVyZW50IERPVFMgY2xpZW50LCBhbmQgdGhlIERPVFMgc2VydmVyIGRlY2lkZXMgdG8NCj4g PiA+IG1haW50YWluDQo+ID4gPiA+ID4gPiAgICAgdGhlIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24g cmVxdWVzdCwgdGhlIERPVFMgc2VydmVyIHJldHVybnMNCj4gNC4wOQ0KPiA+ID4gPiA+ID4gICAg IChDb25mbGljdCkgW1JGQzgxMzJdIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMgY2xpZW50LiBUaGUN Cj4gcmVzcG9uc2UNCj4gPiA+ID4gPiA+ICAgICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24g Zm9yIGEgRE9UUyBjbGllbnQgdG8gcmVjb2duaXplDQo+ID4gPiA+ID4gPiB0aGUNCj4gPiA+IHNv dXJjZQ0KPiA+ID4gPiA+ID4gICAgIG9mIHRoZSBjb25mbGljdCBhcyBkZXNjcmliZWQgYmVsb3c6 DQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gTkVXOg0KPiA+ID4gPiA+ID4gICAgIElmIHRoZSBy ZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcgbWl0aWdhdGlvbg0KPiByZXF1 ZXN0DQo+ID4gPiA+ID4gPiAgICAgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwgdGhlIERP VFMgc2VydmVyIG1heSByZXR1cm4NCj4gPiA+ID4gPiA+IDIuMDENCj4gPiA+IChDcmVhdGVkKQ0K PiA+ID4gPiA+ID4gICAgIG9yIDQuMDkgKENvbmZsaWN0KSB0byB0aGUgcmVxdWVzdGluZyBET1RT IGNsaWVudC4gVGhlIHJlc3BvbnNlDQo+ID4gPiA+ID4gPiAgICAgaW5jbHVkZXMgZW5vdWdoIGlu Zm9ybWF0aW9uIGZvciBhIERPVFMgY2xpZW50IHRvIHJlY29nbml6ZQ0KPiA+ID4gPiA+ID4gdGhl DQo+ID4gPiBzb3VyY2UNCj4gPiA+ID4gPiA+ICAgICBvZiB0aGUgY29uZmxpY3QgYXMgZGVzY3Jp YmVkIGJlbG93Og0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFllcywgaXQgd29y a3MgZm9yIG1lLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiA+Pj4+IFRpcnUgc2Fp ZDoNCj4gPiA+ID4gPiA+Pj4+ICAgID4gSW4gdGhpcyBjYXNlLCB0aGUgcmVzb3VyY2Ugc2hvdWxk IGJlIGNyZWF0ZWQgYW5kIHRoZQ0KPiA+ID4gPiA+ID4+Pj4gc2VydmVyIHNob3VsZA0KPiA+ID4g PiA+ID4+IHJldHVybg0KPiA+ID4gPiA+ID4+Pj4gc3VjY2VzcyAoMi4wMSBvciAyLjA0KSByZXNw b25zZSBjb2RlIGFsb25nIHdpdGggdGhlIGNvbmZsaWN0LQ0KPiA+ID4gPiA+IGluZm9ybWF0aW9u Lg0KPiA+ID4gPiA+ID4+Pj4gSW4gdGhpcyBzaXR1YXRpb24sIChCKSB3aWxsIGdldCAyLjAxIG9y IDIuMDQgYWxvbmcgd2l0aCB0aGUNCj4gPiA+ID4gPiA+Pj4+IHJlamVjdGVkDQo+ID4gPiA+ID4g Y29kZQ0KPiA+ID4gPiA+ID4+ICc4Jw0KPiA+ID4gPiA+ID4+Pj4gKFdoaWNoIG1pdGlnYXRpb24g cmVxdWVzdCB3aWxsIGJlIHNlbGVjdGVkIGJ5IHRoZSBET1RTIHNlcnZlcg0KPiA+ID4gPiA+ID4+ Pj4gaXMNCj4gPiA+ID4gPiA+Pj4+IGltcGxlbWVudGF0aW9uLSBhbmQgZGVwbG95bWVudC1zcGVj aWZpYy4pDQo+ID4gPiA+ID4gPj4+Pg0KPiA+ID4gPiA+ID4+Pj4gVGhhbmtzLA0KPiA+ID4gPiA+ ID4+Pj4gS2FuYW1lDQo+ID4gPiA+ID4gPj4+Pg0KPiA+ID4gPiA+ID4+Pj4NCj4gPiA+ID4gPiA+ Pj4+IE9uIDIwMTgvMDUvMTEgMTU6MDksIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3Jv dGU6DQo+ID4gPiA+ID4gPj4+Pj4gSGkgS2FuYW1lLA0KPiA+ID4gPiA+ID4+Pj4+DQo+ID4gPiA+ ID4gPj4+Pj4gSWYgdGhlIHNlcnZlciBkZWNpZGVzIG5vdCB0byBtYWludGFpbiB0aGUgY29uZmxp Y3RpbmcNCj4gPiA+ID4gPiA+Pj4+PiByZXF1ZXN0LCB0aGVuIHRoZQ0KPiA+ID4gPiA+ID4+Pj4g cHJlc2VudCByZXF1ZXN0IHdpbGwgYmUgcHJvY2Vzc2VkIGFzIG5vcm1hbDogdGhhdCBpcyAyLjAx DQo+ID4gPiA+ID4gPj4+PiB3aWxsIGJlDQo+ID4gPiA+ID4gcmV0dXJuZWQNCj4gPiA+ID4gPiA+ PiB0bw0KPiA+ID4gPiA+ID4+Pj4gYWNrIHN1Y2Nlc3NmdWwgaGFuZGxpbmcuIEEgbm90aWZpY2F0 aW9uIHdpbGwgYmUgc2VudCB0byB0aGUNCj4gPiA+ID4gPiA+Pj4+IGNsaWVudCBvd25lcg0KPiA+ ID4gPiA+ID4+IG9mDQo+ID4gPiA+ID4gPj4+PiB0aGUgY29uZmxpY3RpbmcgcmVxdWVzdCB0byBu b3RpZnkgd2l0aGRyYXdhbCAoc2VjdGlvbiA0LjQuMikuDQo+ID4gPiA+ID4gPj4+Pj4gVGhlIHRl eHQgZm9jdXNlcyBvbiB0aGUgY2FzZSAiLCBhbmQgdGhlIERPVFMgc2VydmVyIGRlY2lkZXMNCj4g PiA+ID4gPiA+Pj4+PiB0byBtYWludGFpbg0KPiA+ID4gPiA+ID4+IHRoZQ0KPiA+ID4gPiA+ID4+ Pj4gY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0IiBiZWNhdXNlIHRoaXMgaXMgdGhlIG9u ZSB3aGljaA0KPiA+ID4gPiA+ID4+Pj4gcmVxdWlyZXMgYWRkaXRpb25hbCBzcGVjaWZpY2F0aW9u IHZzLiBub3JtYWwgcmVxdWVzdCB0aGF0IGlzDQo+ID4gPiA+ID4gPj4+PiBhY2NlcHRlZCBieSBh DQo+ID4gPiA+ID4gc2VydmVyLg0KPiA+ID4gPiA+ID4+Pj4+IENoZWVycywNCj4gPiA+ID4gPiA+ Pj4+PiBNZWQNCj4gPiA+ID4gPiA+Pj4+Pg0KPiA+ID4gPiA+ID4+Pj4+PiAtLS0tLU1lc3NhZ2Ug ZCdvcmlnaW5lLS0tLS0gRGXCoDoga2FuYW1lIG5pc2hpenVrYQ0KPiA+ID4gPiA+ID4+Pj4+PiBb bWFpbHRvOmthbmFtZUBudHR2Ni5qcF0gRW52b3nDqcKgOg0KPiA+ID4gPiA+ID4+Pj4+PiBtZXJj cmVkaSA5IG1haSAyMDE4IDEwOjQxIMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE4NCj4g PiBDY8KgOg0KPiA+ID4gPiA+ID4+Pj4+PiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFJlOiBbRG90 c10gSS1EIEFjdGlvbjoNCj4gPiA+ID4gPiA+Pj4+Pj4gZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1j aGFubmVsLTE5LnR4dA0KPiA+ID4gPiA+ID4+Pj4+Pg0KPiA+ID4gPiA+ID4+Pj4+PiBIaSBNZWQs DQo+ID4gPiA+ID4gPj4+Pj4+DQo+ID4gPiA+ID4gPj4+Pj4+IEknbSBPSyB3aXRoIHRoaXMgY2hh bmdlLg0KPiA+ID4gPiA+ID4+Pj4+PiBIb3dldmVyLCB0byBiZSBwcmVjaXNlLCBJJ2QgbGlrZSB0 byBzdWdnZXN0IHRvIHN0YXRlIGFib3V0DQo+ID4gPiA+ID4gPj4+Pj4+IHRoZSBjYXNlDQo+ID4g PiA+ID4gdGhlDQo+ID4gPiA+ID4gPj4+PiBET1RTDQo+ID4gPiA+ID4gPj4+Pj4+IHNlcnZlciBk ZWNpZGVzIE5PVCB0byBtYWludGFpbiBpdC4NCj4gPiA+ID4gPiA+Pj4+Pj4NCj4gPiA+ID4gPiA+ Pj4+Pj4gTkVXLTI6DQo+ID4gPiA+ID4gPj4+Pj4+ICAgICDCoMKgIElmIHRoZSByZXF1ZXN0IGlz IGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcNCj4gPiA+ID4gPiA+Pj4+Pj4gbWl0aWdhdGlv bg0KPiA+ID4gPiA+IHJlcXVlc3QNCj4gPiA+ID4gPiA+Pj4+Pj4gICAgIMKgwqAgZnJvbSBhIGRp ZmZlcmVudCBET1RTIGNsaWVudCwgYW5kIHRoZSBET1RTIHNlcnZlcg0KPiA+ID4gPiA+ID4+Pj4+ PiBkZWNpZGVzIHRvDQo+ID4gPiA+ID4gPj4gbWFpbnRhaW4NCj4gPiA+ID4gPiA+Pj4+Pj4gICAg IMKgwqAgdGhlIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdCwgdGhlIERPVFMgc2VydmVy DQo+ID4gPiA+ID4gPj4+Pj4+IHJldHVybnMNCj4gPiA+ID4gPiAyLjAxDQo+ID4gPiA+ID4gPj4+ Pj4+ICAgICDCoMKgIChDcmVhdGVkKSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4NCj4g PiA+ID4gPiA+Pj4+Pj4gICAgIMKgwqAgT3RoZXJ3aXNlLCB0aGUgRE9UUyBzZXJ2ZXIgcmV0dXJu cyA0LjA5IChDb25mbGljdCkNCj4gPiA+IFtSRkM4MTMyXS4NCj4gPiA+ID4gPiA+Pj4+Pj4gICAg IMKgwqAgVGhlIHJlc3BvbnNlIGluY2x1ZGVzIGVub3VnaCBpbmZvcm1hdGlvbiBmb3IgYSBET1RT DQo+ID4gPiA+ID4gPj4+Pj4+IGNsaWVudA0KPiA+ID4gdG8NCj4gPiA+ID4gPiA+Pj4+Pj4gICAg IMKgwqAgcmVjb2duaXplIHRoZSBzb3VyY2Ugb2YgdGhlIGNvbmZsaWN0IGFzIGRlc2NyaWJlZA0K PiBiZWxvdzoNCj4gPiA+ID4gPiA+Pj4+Pj4NCj4gPiA+ID4gPiA+Pj4+Pj4gdGhhbmtzLA0KPiA+ ID4gPiA+ID4+Pj4+PiBLYW5hbWUNCj4gPiA+ID4gPiA+Pj4+Pj4NCj4gPiA+ID4gPiA+Pj4+Pj4g T24gMjAxOC8wNS8wOSAxNDo1MSwgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToN Cj4gPiA+ID4gPiA+Pj4+Pj4+IEhpIEthbmFtZSwNCj4gPiA+ID4gPiA+Pj4+Pj4+DQo+ID4gPiA+ ID4gPj4+Pj4+PiBBZnRlciB0aGlua2luZyBhYm91dCB0aGlzLCBJIGRvIHRoaW5rIHRoYXQgeW91 IGhhdmUgYQ0KPiA+ID4gPiA+ID4+Pj4+Pj4gdmFsaWQgcG9pbnQuIEkNCj4gPiA+ID4gPiA+Pj4+ Pj4gc3VnZ2VzdCB0byBtYWtlIHRvIG1ha2UgdGhpcyBjaGFuZ2UgKG1hcmtlZCB3aXRoIF5eXl4p DQo+ID4gPiA+ID4gPj4+Pj4+PiBPTEQ6DQo+ID4gPiA+ID4gPj4+Pj4+PiAgICAgICAgSWYgdGhl IHJlcXVlc3QgaXMgY29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZw0KPiA+ID4gPiA+ID4+Pj4+ Pj4gbWl0aWdhdGlvbg0KPiA+ID4gPiA+IHJlcXVlc3QNCj4gPiA+ID4gPiA+Pj4+Pj4+ICAgICAg ICBmcm9tIGEgZGlmZmVyZW50IERPVFMgY2xpZW50LCBhbmQgdGhlIERPVFMgc2VydmVyDQo+ID4g PiA+ID4gPj4+Pj4+PiBkZWNpZGVzIHRvDQo+ID4gPiA+ID4gPj4+PiBtYWludGFpbg0KPiA+ID4g PiA+ID4+Pj4+Pj4gICAgICAgIHRoZSBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QsIHRo ZSBET1RTIHNlcnZlcg0KPiA+ID4gPiA+ID4+Pj4+Pj4gcmV0dXJucw0KPiA+ID4gPiA+IDQuMDkN Cj4gPiA+ID4gPiA+Pj4+Pj4+ICAgICAgICAoQ29uZmxpY3QpIFtSRkM4MTMyXSB0byB0aGUgcmVx dWVzdGluZyBET1RTIGNsaWVudC4NCj4gPiA+ID4gPiA+Pj4+Pj4+IFRoZQ0KPiA+ID4gPiA+IHJl c3BvbnNlDQo+ID4gPiA+ID4gPj4+Pj4+PiAgICAgICAgaW5jbHVkZXMgZW5vdWdoIGluZm9ybWF0 aW9uIGZvciBhIERPVFMgY2xpZW50IHRvDQo+ID4gPiA+ID4gPj4+Pj4+PiByZWNvZ25pemUgdGhl DQo+ID4gPiA+ID4gPj4+PiBzb3VyY2UNCj4gPiA+ID4gPiA+Pj4+Pj4+ICAgICAgICBvZiB0aGUg Y29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+ID4gPiA+ID4+Pj4+Pj4NCj4gPiA+ID4g PiA+Pj4+Pj4+IE5FVzoNCj4gPiA+ID4gPiA+Pj4+Pj4+ICAgICAgICBJZiB0aGUgcmVxdWVzdCBp cyBjb25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nDQo+ID4gPiA+ID4gPj4+Pj4+PiBtaXRpZ2F0 aW9uDQo+ID4gPiA+ID4gcmVxdWVzdA0KPiA+ID4gPiA+ID4+Pj4+Pj4gICAgICAgIGZyb20gYSBk aWZmZXJlbnQgRE9UUyBjbGllbnQsIGFuZCB0aGUgRE9UUyBzZXJ2ZXINCj4gPiA+ID4gPiA+Pj4+ Pj4+IGRlY2lkZXMgdG8NCj4gPiA+ID4gPiA+Pj4+IG1haW50YWluDQo+ID4gPiA+ID4gPj4+Pj4+ PiAgICAgICAgdGhlIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdCwgdGhlIERPVFMgc2Vy dmVyDQo+ID4gPiA+ID4gPj4+Pj4+PiByZXR1cm5zDQo+ID4gPiA+ID4gMi4wMQ0KPiA+ID4gPiA+ ID4+Pj4+Pj4NCj4gPiA+ID4gPiBeXl5eDQo+ID4gPiA+ID4gPj4+Pj4+PiAgICAgICAgKENyZWF0 ZWQpIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMgY2xpZW50LiAgVGhlDQo+IHJlc3BvbnNlXg0KPiA+ ID4gPiA+ID4+Pj4+Pj4gICAgICAgIF5eXl5eXl5eDQo+ID4gPiA+ID4gPj4+Pj4+PiAgICAgICAg aW5jbHVkZXMgZW5vdWdoIGluZm9ybWF0aW9uIGZvciBhIERPVFMgY2xpZW50IHRvDQo+ID4gPiA+ ID4gPj4+Pj4+PiByZWNvZ25pemUgdGhlDQo+ID4gPiA+ID4gPj4+PiBzb3VyY2UNCj4gPiA+ID4g PiA+Pj4+Pj4+ICAgICAgICBvZiB0aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+ ID4gPiA+ID4+Pj4+Pj4NCj4gPiA+ID4gPiA+Pj4+Pj4+IENoZWVycywNCj4gPiA+ID4gPiA+Pj4+ Pj4+IE1lZA0KPiA+ID4gPiA+ID4+Pj4+Pj4NCj4gPiA+ID4gPiA+Pj4+Pj4+PiAtLS0tLU1lc3Nh Z2UgZCdvcmlnaW5lLS0tLS0gRGXCoDogRG90cw0KPiA+ID4gPiA+ID4+Pj4+Pj4+IFttYWlsdG86 ZG90cy1ib3VuY2VzQGlldGYub3JnXSBEZSBsYSBwYXJ0IGRlDQo+ID4gPiA+ID4gPj4+Pj4+Pj4g bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSBFbnZvecOpwqA6IGx1bmRpIDcgbWFpIDIwMTgN Cj4gPiA+ID4gMDg6MzgNCj4gPiA+ID4gPiA+Pj4+Pj4+PiDDgMKgOiBrYW5hbWUgbmlzaGl6dWth OyBkb3RzQGlldGYub3JnIE9iamV0wqA6IFJlOiBbRG90c10NCj4gPiA+ID4gPiA+Pj4+Pj4+PiBJ LUQNCj4gPiA+ID4gPiA+Pj4+Pj4+PiBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hh bm5lbC0xOS50eHQNCj4gPiA+ID4gPiA+Pj4+Pj4+Pg0KPiA+ID4gPiA+ID4+Pj4+Pj4+IFJlLSwN Cj4gPiA+ID4gPiA+Pj4+Pj4+Pg0KPiA+ID4gPiA+ID4+Pj4+Pj4+IEFncmVlIHRoYXQgdGhlIGNv ZGVzIGFyZSBub3QgdGhlIHNhbWUsIGJ1dCBhbHRlcm5hdGl2ZXMNCj4gPiA+ID4gPiA+Pj4+Pj4+ PiBvbmVzIGFzDQo+ID4gPiA+ID4gPj4+PiBzdW1tYXJpemVkDQo+ID4gPiA+ID4gPj4+Pj4+Pj4g aGVyZToNCj4gPiA+ID4gPiA+Pj4+Pj4NCj4gPiA+ID4gPg0KPiA+ID4gPg0KPiA+IGh0dHBzOi8v bWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvZG90cy9oQTNNTEtsa1hGaW1wQW41S1NZVGF5 YVZrakEuDQo+ID4gPiA+ID4gPj4+Pj4+Pj4gQ2hlZXJzLA0KPiA+ID4gPiA+ID4+Pj4+Pj4+IE1l ZA0KPiA+ID4gPiA+ID4+Pj4+Pj4+DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+IC0tLS0tTWVzc2FnZSBk J29yaWdpbmUtLS0tLSBEZcKgOiBrYW5hbWUgbmlzaGl6dWthDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+ IFttYWlsdG86a2FuYW1lQG50dHY2LmpwXSBFbnZvecOpwqA6DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+ IGx1bmRpIDcgbWFpIDIwMTggMDg6MjAgw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTjsN Cj4gPiA+ID4gPiA+Pj4+Pj4+Pj4gZG90c0BpZXRmLm9yZyBPYmpldMKgOiBSZTogW0RvdHNdIEkt RCBBY3Rpb246DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hh bm5lbC0NCj4gPiA+ID4gPiAxOS50eHQNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4NCj4gPiA+ID4gPiA+ Pj4+Pj4+Pj4gSGkgTWVkLA0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pg0KPiA+ID4gPiA+ID4+Pj4+Pj4+ PiBJJ3ZlIHJlYWQgdGhlIHRocmVhZC4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4gYW5kIHRoZSBjb2Rl ICc4JyBvZiB0aGUgdGhyZWFkIGlzIGRpZmZlcmVudCBmcm9tIHRoZQ0KPiA+ID4gPiA+ID4+Pj4+ Pj4+PiBjb2RlICc4JyBvZg0KPiA+ID4gPiA+IHRoZQ0KPiA+ID4gPiA+ID4+Pj4+Pj4+IGN1cnJl bnQNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4gZHJhZnQuDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+DQo+ID4g PiA+ID4gPj4+Pj4+Pj4+IHRoZXknZCBiZWVuIGRpc2N1c3NpbmcgdGhlIDcsOCBhbmQgOSBiYXNl ZCBvbiB0aGlzDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+IGRlZmluaXRpb24sDQo+ID4gPiA+ID4gcmln aHQ/DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+DQo+ID4gPiA+ID4gPj4gaHR0cHM6Ly9tYWlsYXJjaGl2 ZS5pZXRmLm9yZy9hcmNoL21zZy9kb3RzLzd6bGp6TjhueWNaWDdFN2doZ2sxDQo+ID4gPiA+ID4g Pj4gdXgzMg0KPiA+ID4gPiA+ID4+IE1rTQ0KPiA+ID4gPiA+ID4+Pj4+Pj4+PiA9PQ0KPiA+ID4g PiA+ID4+Pj4+Pj4+PiA3IHwgRE9UUyBTZXJ2ZXIgaGFzIGRldGVjdGVkIGNvbmZsaWN0aW5nIG1p dGlnYXRpb24NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4gcmVxdWVzdHMgZnJvbQ0KPiA+ID4gPiA+ID4+ Pj4+PiBkaWZmZXJlbnQNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4gRE9UUyBjbGllbnRzLsKgIFRoaXMg bWl0aWdhdGlvbiByZXF1ZXN0IGlzIGN1cnJlbnRseQ0KPiA+ID4gPiA+ID4+Pj4+Pj4+PiBpbmFj dGl2ZSB1bnRpbA0KPiA+ID4gPiA+ID4+IHRoZQ0KPiA+ID4gPiA+ID4+Pj4+Pj4+PiBjb25mbGlj dHMgYXJlIHJlc29sdmVkLiBBbm90aGVyIG1pdGlnYXRpb24gcmVxdWVzdCBpcw0KPiBhY3RpdmUu DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+IDggfCBET1RTIFNlcnZl ciBoYXMgZGV0ZWN0ZWQgY29uZmxpY3RpbmcgbWl0aWdhdGlvbg0KPiA+ID4gPiA+ID4+Pj4+Pj4+ PiByZXF1ZXN0cyBmcm9tDQo+ID4gPiA+ID4gPj4+Pj4+IGRpZmZlcmVudA0KPiA+ID4gPiA+ID4+ Pj4+Pj4+PiBET1RTIGNsaWVudHMuwqAgVGhpcyBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgY3VycmVu dGx5IGFjdGl2ZS4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4gOSB8 IERPVFMgU2VydmVyIGhhcyBkZXRlY3RlZCBjb25mbGljdGluZyBtaXRpZ2F0aW9uDQo+ID4gPiA+ ID4gPj4+Pj4+Pj4+IHJlcXVlc3RzIGZyb20NCj4gPiA+ID4gPiA+Pj4+Pj4gZGlmZmVyZW50DQo+ ID4gPiA+ID4gPj4+Pj4+Pj4+IERPVFMgY2xpZW50cy7CoCBBbGwgY29uZmxpY3RpbmcgbWl0aWdh dGlvbiByZXF1ZXN0cyBhcmUNCj4gPiA+IGluYWN0aXZlLg0KPiA+ID4gPiA+ID4+Pj4+Pj4+PiA9 PQ0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pg0KPiA+ID4gPiA+ID4+Pj4+Pj4+PiBLYW5hbWUNCj4gPiA+ ID4gPiA+Pj4+Pj4+Pj4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4g T24gMjAxOC8wNS8wNyAxNToxMiwgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbQ0KPiA+IHdy b3RlOg0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4gSGkgS2FuYW1lLA0KPiA+ID4gPiA+ID4+Pj4+Pj4+ Pj4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+IFBsZWFzZSBjaGVjaw0KPiA+ID4gPiA+ID4+IGh0dHBz Oi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvZG90cy96X2NaUjlfdTI3M0h6QzlvMEl5 OQ0KPiA+ID4gPiA+ID4+IEZlUVoNCj4gPiA+ID4gPiA+PiAwSm8NCj4gPiA+ID4gPiA+Pj4+Pj4+ PiBhYm91dA0KPiA+ID4gPiA+ID4+Pj4+Pj4+PiB0aGUgcmF0aW9uYWxlIGZvciBhbGxvd2luZyB0 byByZXR1cm4gY29kZSAnOCcgZXZlbiBpbiBhDQo+ID4gPiA+ID4gbm90aWZpY2F0aW9uDQo+ID4g PiA+ID4gPj4+Pj4+Pj4gbWVzc2FnZS4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4gVGhlIGludGVudCB3 YXMgdG8gaGF2ZSBjb2RlICc4JyBhcyBhIHRyYW5zaXRpb24gc3RhdGUuDQo+ID4gPiA+ID4gPj4+ Pj4+Pj4+PiBDaGVlcnMsDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+PiBNZWQNCj4gPiA+ID4gPiA+Pj4+ Pj4+Pj4+DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0t IERlwqA6IGthbmFtZSBuaXNoaXp1a2ENCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+PiBbbWFpbHRvOmth bmFtZUBudHR2Ni5qcF0gRW52b3nDqcKgOiBtZXJjcmVkaSAyIG1haSAyMDE4DQo+ID4gPiA+ID4g Pj4+Pj4+Pj4+Pj4gMDI6NDkgw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTjsgZG90c0Bp ZXRmLm9yZw0KPiA+ID4gPiBPYmpldMKgOg0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+IFJlOiBbRG90 c10gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLQ0KPiA+ID4gPiA+ ID4+IDE5LnR4dA0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+IEhpLA0KPiA+ID4gPiA+ID4+Pj4+Pj4+ Pj4+DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4gSSdkIGxpa2UgdG8gYXNrIG9uZSBjbGFyaWZpY2F0 aW9uIHF1ZXN0aW9uIGFib3V0DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4gc3RhdHVzIGNvZGUNCj4g PiA+IDg6DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+PiAgICAg ICDCoMKgIG/CoCBBIG5vdGlmaWNhdGlvbiBtZXNzYWdlIHdpdGggJ3N0YXR1cycgY29kZQ0KPiA+ ID4gPiA+ID4+Pj4+Pj4+Pj4+IHNldCB0byAnOA0KPiA+ID4gPiA+ID4+IChBdHRhY2sNCj4gPiA+ ID4gPiA+Pj4+Pj4+Pj4+PiAgICAgICDCoMKgwqDCoMKgIG1pdGlnYXRpb24gaXMgcmVqZWN0ZWQp JyBhbmQgJ2NvbmZsaWN0LQ0KPiBzdGF0dXMnDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4gc2V0IHRv DQo+ID4gPiA+ID4gPj4gJzEnDQo+ID4gPiA+ID4gPj4+PiBpcw0KPiA+ID4gPiA+ID4+Pj4+Pj4+ IHNlbnQNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+PiAgICAgICDCoMKgwqDCoMKgIHRvIGEgRE9UUyBj bGllbnQgdG8gaW5kaWNhdGUgdGhhdCB0aGlzDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4gbWl0aWdh dGlvbg0KPiA+ID4gPiA+ID4+IHJlcXVlc3QNCj4gPiA+ID4gPiA+Pj4+IGlzDQo+ID4gPiA+ID4g Pj4+Pj4+Pj4+Pj4gICAgICAgwqDCoMKgwqDCoCByZWplY3RlZCBiZWNhdXNlIGEgY29uZmxpY3Qg aXMgZGV0ZWN0ZWQuDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+ PiBJZiBhIG1pdGlnYXRpb24gcmVxdWVzdCBpcyByZWplY3RlZCBkdWUgdG8gYSBjb25mbGljdCwN Cj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+PiBpdCBpcw0KPiA+ID4gPiA+ID4+IHJlamVjdGVkDQo+ID4g PiA+ID4gPj4+Pj4+IGF0DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4gUFVUKDQuMDkoQ29uZmxpY3Qp KSwgc28gbm8gcmVzb3VyY2Ugd2lsbCBiZSBjcmVhdGVkLg0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+ IFNvIGl0IGxvb2tzIHRoZXJlIGlzIG5vIGNoYW5jZSB0byByZXR1cm4gJzggKEF0dGFjaw0KPiA+ ID4gPiA+ID4+Pj4+Pj4+Pj4+IG1pdGlnYXRpb24gaXMNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4gcmVq ZWN0ZWQpJy4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+PiB0aGFua3MsDQo+ID4gPiA+ID4gPj4+Pj4+ Pj4+Pj4gS2FuYW1lDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+ PiBPbiAyMDE4LzA0LzEwIDIyOjQ3LCBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4g PiA+IHdyb3RlOg0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+PiBSZS0sDQo+ID4gPiA+ID4gPj4+Pj4+ Pj4+Pj4+DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+IFRoaXMgdmVyc2lvbiBhZGRyZXNzZXMgdGhl IGNvbW1lbnRzIHJhaXNlZCBkdXJpbmcgdGhlDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+IFdHTEMs IGluDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+IHBhcnRpY3VsYXI6DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+ Pj4+IC0gKENsYXJpZmljYXRpb24pIEluZGljYXRlIHRoYXQgb25seSBvbmUgaG9wLWxpbWl0IGlz DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+IGluY2x1ZGVkDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+ IC0gU3BlY2lmeSB0aGUgbG9vcCBkaWFnbm9zdGljIHBheWxvYWQNCj4gPiA+ID4gPiA+Pj4+Pj4+ Pj4+Pj4gLSAoQ2xhcmlmaWNhdGlvbikgSW5kaWNhdGUgZXhwbGljaXRseSB0aGF0IEdFVA0KPiA+ ID4gPiA+ID4+Pj4+Pj4+Pj4+PiBtZXNzYWdlcyB3aXRoDQo+ID4gPiA+ID4gJ3NpZCcNCj4gPiA+ ID4gPiA+Pj4+IGFyZQ0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+IGFsbG93ZWQNCj4gPiA+ID4gPiA+ Pj4+Pj4+Pj4+Pj4gLSBVcGRhdGUgdGhlIHJlZGlyZWN0IGJlaGF2aW9yLg0KPiA+ID4gPiA+ID4+ Pj4+Pj4+Pj4+Pg0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+PiBDaGVlcnMsDQo+ID4gPiA+ID4gPj4+ Pj4+Pj4+Pj4+IE1lZA0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pg0KPiA+ID4gPiA+ID4+Pj4+Pj4+ Pj4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tIERlwqA6IERvdHMNCj4gPiA+ID4gPiA+ Pj4+Pj4+Pj4+Pj4+IFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBEZSBsYSBwYXJ0IGRl DQo+ID4gPiA+ID4gaW50ZXJuZXQtDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBkcmFmdHNAaWV0 Zi5vcmcNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IEVudm95w6nCoDogbWFyZGkgMTAgYXZyaWwg MjAxOCAxNTo0MCDDgMKgOg0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gaS1kLWFubm91bmNlQGll dGYub3JnIENjwqA6IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDoNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+ Pj4+IFtEb3RzXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtDQo+ ID4gPiA+ID4gMTkudHh0DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4gPiA+ID4+Pj4+ Pj4+Pj4+Pj4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IEEgTmV3IEludGVybmV0LURyYWZ0IGlz IGF2YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBJbnRl cm5ldC0NCj4gPiA+ID4gPiA+PiBEcmFmdHMNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IGRpcmVj dG9yaWVzLg0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gVGhpcyBkcmFmdCBpcyBhIHdvcmsgaXRl bSBvZiB0aGUgRERvUyBPcGVuIFRocmVhdA0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gU2lnbmFs aW5nIFdHDQo+ID4gPiA+ID4gb2YNCj4gPiA+ID4gPiA+Pj4+IHRoZQ0KPiA+ID4gPiA+ID4+Pj4+ Pj4+Pj4+IElFVEYuDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgIFRpdGxl ICAgICAgICAgICA6IERpc3RyaWJ1dGVkIERlbmlhbC1vZi0NCj4gPiA+IFNlcnZpY2UNCj4gPiA+ ID4gPiBPcGVuDQo+ID4gPiA+ID4gPj4+Pj4+IFRocmVhdA0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+ IFNpZ25hbGluZw0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gKERPVFMpIFNpZ25hbCBDaGFubmVs IFNwZWNpZmljYXRpb24NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgQXV0 aG9ycyAgICAgICAgIDogVGlydW1hbGVzd2FyIFJlZGR5DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+ PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE1vaGFtZWQgQm91Y2FkYWlyDQo+ID4g PiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFByYXNo YW50aCBQYXRpbA0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBBbmRyZXcgTW9ydGVuc2VuDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIE5payBUZWFndWUNCj4gPiA+ID4gPiA+Pj4+Pj4+ Pj4+Pj4+IAlGaWxlbmFtZSAgICAgICAgOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwt DQo+IDE5LnR4dA0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gCVBhZ2VzICAgICAgICAgICA6IDg2 DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAJRGF0ZSAgICAgICAgICAgIDogMjAxOC0wNC0xMA0K PiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IEFic3RyYWN0 Og0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgVGhpcyBkb2N1bWVudCBzcGVjaWZp ZXMgdGhlIERPVFMgc2lnbmFsDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBjaGFubmVsLCBhDQo+ ID4gPiA+ID4gPj4gcHJvdG9jb2wNCj4gPiA+ID4gPiA+Pj4+IGZvcg0KPiA+ID4gPiA+ID4+Pj4+ Pj4+Pj4+Pj4gICAgICAgICAgc2lnbmFsaW5nIHRoZSBuZWVkIGZvciBwcm90ZWN0aW9uIGFnYWlu c3QNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IERpc3RyaWJ1dGVkDQo+ID4gPiA+ID4gPj4+PiBE ZW5pYWwtDQo+ID4gPiA+ID4gPj4+Pj4+IG9mLQ0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAg ICAgICAgU2VydmljZSAoRERvUykgYXR0YWNrcyB0byBhIHNlcnZlciBjYXBhYmxlDQo+ID4gPiA+ ID4gPj4+Pj4+Pj4+Pj4+PiBvZiBlbmFibGluZw0KPiA+ID4gPiA+ID4+Pj4gbmV0d29yaw0KPiA+ ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgdHJhZmZpYyBtaXRpZ2F0aW9uIG9uIGJlaGFs ZiBvZiB0aGUNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IHJlcXVlc3RpbmcNCj4gPiA+IGNsaWVu dC4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAg ICAgICBBIGNvbXBhbmlvbiBkb2N1bWVudCBkZWZpbmVzIHRoZSBET1RTIGRhdGENCj4gPiA+ID4g PiA+Pj4+Pj4+Pj4+Pj4+IGNoYW5uZWwsIGENCj4gPiA+ID4gPiA+Pj4+IHNlcGFyYXRlDQo+ID4g PiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICByZWxpYWJsZSBjb21tdW5pY2F0aW9uIGxheWVy IGZvciBET1RTDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBtYW5hZ2VtZW50IGFuZA0KPiA+ID4g PiA+ID4+Pj4+Pj4+IGNvbmZpZ3VyYXRpb24NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAg ICAgIHB1cnBvc2VzLg0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+ID4gPiA+Pj4+Pj4+ Pj4+Pj4+IEVkaXRvcmlhbCBOb3RlIChUbyBiZSByZW1vdmVkIGJ5IFJGQyBFZGl0b3IpDQo+ID4g PiA+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgUGxl YXNlIHVwZGF0ZSB0aGVzZSBzdGF0ZW1lbnRzIHdpdGggdGhlIFJGQw0KPiA+ID4gPiA+ID4+Pj4+ Pj4+Pj4+Pj4gbnVtYmVyIHRvDQo+ID4gPiA+ID4gYmUNCj4gPiA+ID4gPiA+Pj4+Pj4gYXNzaWdu ZWQNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4gdG8NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAg ICAgIHRoaXMgZG9jdW1lbnQ6DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4gPiA+ID4+ Pj4+Pj4+Pj4+Pj4gICAgICAgICAgbyAgIlRoaXMgdmVyc2lvbiBvZiB0aGlzIFlBTkcgbW9kdWxl IGlzDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBwYXJ0IG9mIFJGQw0KPiA+ID4gPiA+ID4+IFhY WFg7Ig0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgbyAgIlJGQyBYWFhYOiBEaXN0 cmlidXRlZCBEZW5pYWwtb2YtU2VydmljZQ0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gT3Blbg0K PiA+ID4gPiA+IFRocmVhdA0KPiA+ID4gPiA+ID4+Pj4+PiBTaWduYWxpbmcNCj4gPiA+ID4gPiA+ Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgIChET1RTKSBTaWduYWwgQ2hhbm5lbCBTcGVjaWZpY2F0 aW9uIjsNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAg ICAgICAgICBvICAifCBbUkZDWFhYWF0gfCINCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4g PiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBvICByZWZlcmVuY2U6IFJGQyBYWFhYDQo+ID4g PiA+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgUGxl YXNlIHVwZGF0ZSBUQkQgc3RhdGVtZW50cyB3aXRoIHRoZSBwb3J0DQo+ID4gPiA+ID4gPj4+Pj4+ Pj4+Pj4+PiBudW1iZXIgdG8NCj4gPiA+ID4gPiBiZQ0KPiA+ID4gPiA+ID4+Pj4+PiBhc3NpZ25l ZA0KPiA+ID4gPiA+ID4+Pj4+Pj4+IHRvDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAg ICBET1RTIFNpZ25hbCBDaGFubmVsIFByb3RvY29sLg0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4N Cj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIEFsc28sIHBsZWFzZSB1cGRhdGUgdGhl ICJyZXZpc2lvbiIgZGF0ZSBvZg0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gdGhlIFlBTkcNCj4g PiA+ID4gPiA+PiBtb2R1bGUuDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4gPiA+ID4+ Pj4+Pj4+Pj4+Pj4gVGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVzIHBhZ2UgZm9yIHRoaXMgZHJh ZnQgaXM6DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9kcmFmdC1pZXRmLWRvdHMtc2lnDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBuYWwt DQo+ID4gPiA+ID4gY2hhbm5lbC8NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPiA+ID4g Pj4+Pj4+Pj4+Pj4+PiBUaGVyZSBhcmUgYWxzbyBodG1saXplZCB2ZXJzaW9ucyBhdmFpbGFibGUg YXQ6DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwv ZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBoYW5uDQo+ ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiBlbC0xOQ0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gaHR0 cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1pZXRmLWRvdA0KPiA+ID4g PiA+ID4+Pj4+Pj4+Pj4+Pj4gcy1zaQ0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4gZ25hbC0NCj4g PiA+ID4gPiA+Pj4+IGNoYW5uZWwtDQo+ID4gPiA+ID4gPj4+Pj4+Pj4gMTkNCj4gPiA+ID4gPiA+ Pj4+Pj4+Pj4+Pj4+IEEgZGlmZiBmcm9tIHRoZSBwcmV2aW91cyB2ZXJzaW9uIGlzIGF2YWlsYWJs ZSBhdDoNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2Rp ZmY/dXJsMj1kcmFmdC1pZXRmLWRvdHMtc2kNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IGduYWwN Cj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IC0NCj4gPiA+ID4gPiBjaGFubmVsLQ0KPiA+ID4gPiA+ ID4+IDE5DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4g UGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzDQo+ID4gPiA+ ID4gPj4+Pj4+Pj4+Pj4+PiBmcm9tIHRoZSB0aW1lDQo+ID4gPiA+ID4gb2YNCj4gPiA+ID4gPiA+ Pj4+Pj4+Pj4+PiBzdWJtaXNzaW9uDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+Pj4+PiB1bnRpbCB0aGUg aHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0DQo+ID4gPiA+ID4gPj4+ PiB0b29scy5pZXRmLm9yZy4NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IEludGVybmV0LURyYWZ0 cyBhcmUgYWxzbyBhdmFpbGFibGUgYnkgYW5vbnltb3VzIEZUUCBhdDoNCj4gPiA+ID4gPiA+Pj4+ Pj4+Pj4+Pj4+IGZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvDQo+ID4gPiA+ID4g Pj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiBfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+ Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IERvdHNAaWV0Zi5v cmcNCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vZG90cw0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+PiBfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+PiBEb3Rz IG1haWxpbmcgbGlzdA0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4+PiBEb3RzQGlldGYub3JnDQo+ID4g PiA+ID4gPj4+Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v ZG90cw0KPiA+ID4gPiA+ID4+Pj4+Pj4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCj4gPiA+ID4gPiA+Pj4+Pj4+Pj4+IERvdHMgbWFpbGluZyBsaXN0 DQo+ID4gPiA+ID4gPj4+Pj4+Pj4+PiBEb3RzQGlldGYub3JnDQo+ID4gPiA+ID4gPj4+Pj4+Pj4+ PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPiA+ID4gPiA+ Pj4+Pj4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K PiA+ID4gPiA+ID4+Pj4+Pj4+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiA+ID4gPj4+Pj4+Pj4g RG90c0BpZXRmLm9yZw0KPiA+ID4gPiA+ID4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vZG90cw0KPiA+ID4gPiA+ID4+Pj4+Pj4gX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiA+ID4gPiA+Pj4+Pj4+IERvdHMgbWFp bGluZyBsaXN0DQo+ID4gPiA+ID4gPj4+Pj4+PiBEb3RzQGlldGYub3JnDQo+ID4gPiA+ID4gPj4+ Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPiA+ID4g PiA+Pj4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K PiA+ID4gPiA+ID4+Pj4+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiA+ID4gPj4+Pj4gRG90c0Bp ZXRmLm9yZw0KPiA+ID4gPiA+ID4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vZG90cw0KPiA+ID4gPiA+ID4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KPiA+ID4gPiA+ID4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+ID4g PiA+ID4+PiBEb3RzQGlldGYub3JnDQo+ID4gPiA+ID4gPj4+IGh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+ID4gPg0KPiA+ID4gPiBfX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ID4gPiBEb3RzIG1haWxpbmcgbGlz dA0KPiA+ID4gPiBEb3RzQGlldGYub3JnDQo+ID4gPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vZG90cw0K From nobody Wed May 16 00:50:44 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A7F112D77B for ; Wed, 16 May 2018 00:50:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.001 X-Spam-Level: X-Spam-Status: No, score=-0.001 tagged_above=-999 required=5 tests=[SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VNbSw03HCXeg for ; Wed, 16 May 2018 00:50:38 -0700 (PDT) Received: from guri.nttv6.jp (guri.nttv6.jp [IPv6:2402:c800:ff06:136::140]) by ietfa.amsl.com (Postfix) with ESMTP id A72791200A0 for ; Wed, 16 May 2018 00:50:37 -0700 (PDT) Received: from z.nttv6.jp (z.nttv6.jp [192.168.8.15]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id C37EE25F6D2; Wed, 16 May 2018 16:50:36 +0900 (JST) Received: from MacBook-Pro-17.local (fujiko.nttv6.jp [115.69.228.141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id 6F7FF75900A; Wed, 16 May 2018 16:50:36 +0900 (JST) To: mohamed.boucadair@orange.com, "Konda, Tirumaleswar Reddy" Cc: "dots@ietf.org" References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <8ae47725-4db3-e02a-7846-d2f4d5d9b739@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BCA8@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BD67@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BDCD@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: kaname nishizuka Message-ID: <2c400e78-4482-2b61-5289-6b149294b78f@nttv6.jp> Date: Wed, 16 May 2018 16:50:36 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF1BDCD@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 May 2018 07:50:43 -0000 Re, I see, but I didn't feel "For example:" is reflecting my comment. Should we need to use success (2.01 or 2.04) in the first sentence like this?    If the request is conflicting with an existing mitigation request    from a different DOTS client, the DOTS server may return success (2.01 or 2.04)    or  Conflict(4.09) to the requesting DOTS client. regards, Kaname On 2018/05/16 16:33, mohamed.boucadair@orange.com wrote: > Re-, > > "For example" is there to accommodate a comment from Kaname who wanted the behavior to be also implementation/deployment. > > Cheers, > Med > >> -----Message d'origine----- >> De : Konda, Tirumaleswar Reddy [mailto:TirumaleswarReddy_Konda@McAfee.com] >> Envoyé : mercredi 16 mai 2018 09:04 >> À : BOUCADAIR Mohamed IMT/OLN; kaname nishizuka >> Cc : dots@ietf.org >> Objet : RE: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >> >> Hi Med, >> >> Please see inline >> >>> -----Original Message----- >>> From: mohamed.boucadair@orange.com >>> [mailto:mohamed.boucadair@orange.com] >>> Sent: Wednesday, May 16, 2018 12:26 PM >>> To: Konda, Tirumaleswar Reddy ; >>> kaname nishizuka >>> Cc: dots@ietf.org >>> Subject: RE: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>> >>> This email originated from outside of the organization. Do not click links >> or >>> open attachments unless you recognize the sender and know the content is >>> safe. >>> >>> Hi Tiru, >>> >>> Please see inline. >>> >>> Cheers, >>> Med >>> >>>> -----Message d'origine----- >>>> De : Konda, Tirumaleswar Reddy >>>> [mailto:TirumaleswarReddy_Konda@McAfee.com] >>>> Envoyé : mercredi 16 mai 2018 08:11 >>>> À : BOUCADAIR Mohamed IMT/OLN; kaname nishizuka Cc : dots@ietf.org >>>> Objet : RE: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>> >>>> I propose to update the text as follows to make it more clear: >>>> >>>> If the request is conflicting with an existing mitigation request from >>>> a different DOTS client, the DOTS server may either decide to maintain >>>> the conflicting request or reject the conflicting mitigation request. >>>> If the DOTS server decides to maintain the conflicting mitigation >>>> request, >>> [Med] I guess "conflicting mitigation request" points to the new request. >>> >>> the DOTS server returns 2.01 (Created) to >>>> the requesting DOTS client. If the DOTS server decides to reject the >>>> conflicting mitigation request, the DOTS server returns 4.09 >>>> (Conflict) [RFC8132] to the requesting DOTS client >>> [Med] Idem as above. >>> >>> >>>> For both 2.01 (Created) and 4.09 (Conflict) responses, >>> [Med] I like this. >>> >>> the response message >>>> includes enough information for a DOTS client to recognize the source >>>> of the conflict as described below: >>> [Med] What about? >>> >>> NEW: >>> >>> If the request is conflicting with an existing mitigation request >>> from a different DOTS client, the DOTS server may return 2.01 >>> (Created) or 4.09 (Conflict) to the requesting DOTS client. For >>> example: >>> >>> o If the DOTS server decides to maintain the new mitigation request, >>> the DOTS server returns 2.01 (Created) to the requesting DOTS >>> client. >>> >>> o If the DOTS server decides to reject the new mitigation request, >>> the DOTS server returns 4.09 (Conflict) to the requesting DOTS >>> client. >>> >>> For both 2.01 (Created) and 4.09 (Conflict) responses, the response >>> includes enough information for a DOTS client to recognize the source >>> of the conflict as described below: >> Proposed text looks good. Nit: I don't see the need for "For example". >> >> Cheers, >> -Tiru >> >>>> -Tiru >>>> >>>>> -----Original Message----- >>>>> From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of >>>>> mohamed.boucadair@orange.com >>>>> Sent: Wednesday, May 16, 2018 10:52 AM >>>>> To: kaname nishizuka >>>>> Cc: dots@ietf.org >>>>> Subject: Re: [Dots] I-D Action: >>>>> draft-ietf-dots-signal-channel-19.txt >>>>> >>>>> This email originated from outside of the organization. Do not click >>>>> links >>>> or >>>>> open attachments unless you recognize the sender and know the >>>>> content is safe. >>>>> >>>>> Hi Kaname, >>>>> >>>>> Thank you for ACking. I will implement this change. >>>>> >>>>> Cheers, >>>>> Med >>>>> >>>>>> -----Message d'origine----- >>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] Envoyé : mercredi >>>>>> 16 mai 2018 03:16 À : BOUCADAIR Mohamed IMT/OLN Cc : >>> dots@ietf.org >>>>> Objet >>>>>> : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>> >>>>>> Hi Med, >>>>>> >>>>>> Please see inline. >>>>>> >>>>>> thanks, >>>>>> kaname >>>>>> >>>>>> On 2018/05/15 22:26, mohamed.boucadair@orange.com wrote: >>>>>>> Hi Kaname, >>>>>>> >>>>>>> Please see inline. >>>>>>> >>>>>>> Cheers, >>>>>>> Med >>>>>>> >>>>>>>> -----Message d'origine----- >>>>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] Envoyé : lundi >>>>>>>> 14 mai 2018 11:49 À : BOUCADAIR Mohamed IMT/OLN Cc : >>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>>> >>>>>>>> Hi Med, >>>>>>>> >>>>>>>> Please see inline. >>>>>>>> >>>>>>>> thanks, >>>>>>>> Kaname >>>>>>>> >>>>>>>> On 2018/05/11 18:39, mohamed.boucadair@orange.com wrote: >>>>>>>>> Re-, >>>>>>>>> >>>>>>>>> Please see inline. >>>>>>>>> >>>>>>>>> Cheers, >>>>>>>>> Med >>>>>>>>> >>>>>>>>>> -----Message d'origine----- >>>>>>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] Envoyé : >>>>>>>>>> vendredi >>>>>>>>>> 11 mai 2018 10:59 À : BOUCADAIR Mohamed IMT/OLN Cc : >>>>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>>>>> >>>>>>>>>> Hi Med, >>>>>>>>>> >>>>>>>>>> > If the server decides not to maintain the conflicting >>>>>>>>>> request, then >>>>>>>> the >>>>>>>>>> present request will be processed as normal: that is 2.01 >>>>>>>>>> will be >>>>>> returned >>>>>>>> to >>>>>>>>>> ack successful handling. A notification will be sent to the >>>>>>>>>> client owner >>>>>>>> of >>>>>>>>>> the conflicting request to notify withdrawal (section 4.4.2). >>>>>>>>>> In that case, the status code is '7' (Attack mitigation is >>>>>>>>>> withdrawn) >>>>>>>>> [Med] Yes, that status will be sent to the owner of the >>>>>>>>> (existing) >>>>>> request. >>>>>>>>>> My original question is when the status code '8' (Attack >>>>>>>>>> mitigation is >>>>>>>>>> rejected) will be used. >>>>>>>>> [Med] I got that. >>>>>>>>> >>>>>>>>>> In the text in the draft, "the conflicting mitigation >>>>>>>>>> request" is >>>>>>>> ambiguous >>>>>>>>>> whether it is already existing request or the request that >>>>>>>>>> just has >>>>>>>> arrived. >>>>>>>>> [Med] It is related to the already existing request. >>>>>>>>> >>>>>>>>>> Say, the existing request is (A), then a mitigation request >>>>>>>>>> (B) arrived >>>>>>>> which >>>>>>>>>> are conflicting with A. >>>>>>>>>> >>>>>>>>>> If B is selected. >>>>>>>>>> (A) will get notification with the withdrawal code '7' >>>>>>>>>> (B) will get 2.01 >>>>>>>>>> >>>>>>>>> [Med] Yes. The current text does calls out your step (1) in >> 4.4.2. >>>>>>>>> Your >>>>>>>> step (2) is not called explicit in the text because there is no >>>>>>>> confusion about which code to return when a request is accepted >>>>>>>> to be >>>>> honored. >>>>>>>>> The text focuses on cases which requires specific handling: >>>>>>>>> - inactive request because of a conflict >>>>>>>>> - multiple active conflicting requests >>>>>>>>> >>>>>>>>>> else If B is not selected. >>>>>>>>>> (B) will get 4.09 >>>>>>>>>> >>>>>>>>> [Med] In this case, the resource is not created and as such >>>>>>>>> case >>>>>> returning >>>>>>>> notification status code of 8 is not possible as you rightful >>>>>>>> pointed >>>> out. >>>>>>>>> This is why we suggested to return 2.01 for this case too so >>>>>>>>> that an >>>>>> update >>>>>>>> of the status can be sent to the client upon change. >>>>>>>> I don't think it is needed to obligate returning of 2.01. >>>>>>>> If it is obvious that the DOTS server need not to create >>>>>>>> resource of the conflicting request, it may return 4.09. >>>>>>>> So, returning of 4.09 should be allowed in this case. >>>>>>>> It should be left as implementation- and deployment-specific. >>>>>>>> >>>>>>>> >>>>>>> [Med] Do you mean that the text should be modified to allow for >>>>>>> both >>>>>>> 2.01 >>>>>> or 4.09 to be returned depending on some local policy? >>>>>>> e.g., >>>>>>> >>>>>>> OLD: >>>>>>> If the request is conflicting with an existing mitigation >> request >>>>>>> from a different DOTS client, and the DOTS server decides to >>>> maintain >>>>>>> the conflicting mitigation request, the DOTS server returns >> 4.09 >>>>>>> (Conflict) [RFC8132] to the requesting DOTS client. The >> response >>>>>>> includes enough information for a DOTS client to recognize >>>>>>> the >>>> source >>>>>>> of the conflict as described below: >>>>>>> >>>>>>> NEW: >>>>>>> If the request is conflicting with an existing mitigation >> request >>>>>>> from a different DOTS client, the DOTS server may return >>>>>>> 2.01 >>>> (Created) >>>>>>> or 4.09 (Conflict) to the requesting DOTS client. The response >>>>>>> includes enough information for a DOTS client to recognize >>>>>>> the >>>> source >>>>>>> of the conflict as described below: >>>>>>> >>>>>> Yes, it works for me. >>>>>> >>>>>> >>>>>>>>>> Tiru said: >>>>>>>>>> > In this case, the resource should be created and the >>>>>>>>>> server should >>>>>>>> return >>>>>>>>>> success (2.01 or 2.04) response code along with the conflict- >>>>>> information. >>>>>>>>>> In this situation, (B) will get 2.01 or 2.04 along with the >>>>>>>>>> rejected >>>>>> code >>>>>>>> '8' >>>>>>>>>> (Which mitigation request will be selected by the DOTS server >>>>>>>>>> is >>>>>>>>>> implementation- and deployment-specific.) >>>>>>>>>> >>>>>>>>>> Thanks, >>>>>>>>>> Kaname >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> On 2018/05/11 15:09, mohamed.boucadair@orange.com wrote: >>>>>>>>>>> Hi Kaname, >>>>>>>>>>> >>>>>>>>>>> If the server decides not to maintain the conflicting >>>>>>>>>>> request, then the >>>>>>>>>> present request will be processed as normal: that is 2.01 >>>>>>>>>> will be >>>>>> returned >>>>>>>> to >>>>>>>>>> ack successful handling. A notification will be sent to the >>>>>>>>>> client owner >>>>>>>> of >>>>>>>>>> the conflicting request to notify withdrawal (section 4.4.2). >>>>>>>>>>> The text focuses on the case ", and the DOTS server decides >>>>>>>>>>> to maintain >>>>>>>> the >>>>>>>>>> conflicting mitigation request" because this is the one which >>>>>>>>>> requires additional specification vs. normal request that is >>>>>>>>>> accepted by a >>>>>> server. >>>>>>>>>>> Cheers, >>>>>>>>>>> Med >>>>>>>>>>> >>>>>>>>>>>> -----Message d'origine----- De : kaname nishizuka >>>>>>>>>>>> [mailto:kaname@nttv6.jp] Envoyé : >>>>>>>>>>>> mercredi 9 mai 2018 10:41 À : BOUCADAIR Mohamed IMT/OLN >>> Cc : >>>>>>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>>> >>>>>>>>>>>> Hi Med, >>>>>>>>>>>> >>>>>>>>>>>> I'm OK with this change. >>>>>>>>>>>> However, to be precise, I'd like to suggest to state about >>>>>>>>>>>> the case >>>>>> the >>>>>>>>>> DOTS >>>>>>>>>>>> server decides NOT to maintain it. >>>>>>>>>>>> >>>>>>>>>>>> NEW-2: >>>>>>>>>>>>    If the request is conflicting with an existing >>>>>>>>>>>> mitigation >>>>>> request >>>>>>>>>>>>    from a different DOTS client, and the DOTS server >>>>>>>>>>>> decides to >>>>>>>> maintain >>>>>>>>>>>>    the conflicting mitigation request, the DOTS server >>>>>>>>>>>> returns >>>>>> 2.01 >>>>>>>>>>>>    (Created) to the requesting DOTS client. >>>>>>>>>>>>    Otherwise, the DOTS server returns 4.09 (Conflict) >>>> [RFC8132]. >>>>>>>>>>>>    The response includes enough information for a DOTS >>>>>>>>>>>> client >>>> to >>>>>>>>>>>>    recognize the source of the conflict as described >> below: >>>>>>>>>>>> thanks, >>>>>>>>>>>> Kaname >>>>>>>>>>>> >>>>>>>>>>>> On 2018/05/09 14:51, mohamed.boucadair@orange.com wrote: >>>>>>>>>>>>> Hi Kaname, >>>>>>>>>>>>> >>>>>>>>>>>>> After thinking about this, I do think that you have a >>>>>>>>>>>>> valid point. I >>>>>>>>>>>> suggest to make to make this change (marked with ^^^^) >>>>>>>>>>>>> OLD: >>>>>>>>>>>>> If the request is conflicting with an existing >>>>>>>>>>>>> mitigation >>>>>> request >>>>>>>>>>>>> from a different DOTS client, and the DOTS server >>>>>>>>>>>>> decides to >>>>>>>>>> maintain >>>>>>>>>>>>> the conflicting mitigation request, the DOTS server >>>>>>>>>>>>> returns >>>>>> 4.09 >>>>>>>>>>>>> (Conflict) [RFC8132] to the requesting DOTS client. >>>>>>>>>>>>> The >>>>>> response >>>>>>>>>>>>> includes enough information for a DOTS client to >>>>>>>>>>>>> recognize the >>>>>>>>>> source >>>>>>>>>>>>> of the conflict as described below: >>>>>>>>>>>>> >>>>>>>>>>>>> NEW: >>>>>>>>>>>>> If the request is conflicting with an existing >>>>>>>>>>>>> mitigation >>>>>> request >>>>>>>>>>>>> from a different DOTS client, and the DOTS server >>>>>>>>>>>>> decides to >>>>>>>>>> maintain >>>>>>>>>>>>> the conflicting mitigation request, the DOTS server >>>>>>>>>>>>> returns >>>>>> 2.01 >>>>>> ^^^^ >>>>>>>>>>>>> (Created) to the requesting DOTS client. The >> response^ >>>>>>>>>>>>> ^^^^^^^^ >>>>>>>>>>>>> includes enough information for a DOTS client to >>>>>>>>>>>>> recognize the >>>>>>>>>> source >>>>>>>>>>>>> of the conflict as described below: >>>>>>>>>>>>> >>>>>>>>>>>>> Cheers, >>>>>>>>>>>>> Med >>>>>>>>>>>>> >>>>>>>>>>>>>> -----Message d'origine----- De : Dots >>>>>>>>>>>>>> [mailto:dots-bounces@ietf.org] De la part de >>>>>>>>>>>>>> mohamed.boucadair@orange.com Envoyé : lundi 7 mai 2018 >>>>> 08:38 >>>>>>>>>>>>>> À : kaname nishizuka; dots@ietf.org Objet : Re: [Dots] >>>>>>>>>>>>>> I-D >>>>>>>>>>>>>> Action: draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>>>>> >>>>>>>>>>>>>> Re-, >>>>>>>>>>>>>> >>>>>>>>>>>>>> Agree that the codes are not the same, but alternatives >>>>>>>>>>>>>> ones as >>>>>>>>>> summarized >>>>>>>>>>>>>> here: >>> https://mailarchive.ietf.org/arch/msg/dots/hA3MLKlkXFimpAn5KSYTayaVkjA. >>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>> Med >>>>>>>>>>>>>> >>>>>>>>>>>>>>> -----Message d'origine----- De : kaname nishizuka >>>>>>>>>>>>>>> [mailto:kaname@nttv6.jp] Envoyé : >>>>>>>>>>>>>>> lundi 7 mai 2018 08:20 À : BOUCADAIR Mohamed IMT/OLN; >>>>>>>>>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>>>>>>>>> draft-ietf-dots-signal-channel- >>>>>> 19.txt >>>>>>>>>>>>>>> Hi Med, >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> I've read the thread. >>>>>>>>>>>>>>> and the code '8' of the thread is different from the >>>>>>>>>>>>>>> code '8' of >>>>>> the >>>>>>>>>>>>>> current >>>>>>>>>>>>>>> draft. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> they'd been discussing the 7,8 and 9 based on this >>>>>>>>>>>>>>> definition, >>>>>> right? >>>>>>>> https://mailarchive.ietf.org/arch/msg/dots/7zljzN8nycZX7E7ghgk1 >>>>>>>> ux32 >>>>>>>> MkM >>>>>>>>>>>>>>> == >>>>>>>>>>>>>>> 7 | DOTS Server has detected conflicting mitigation >>>>>>>>>>>>>>> requests from >>>>>>>>>>>> different >>>>>>>>>>>>>>> DOTS clients.  This mitigation request is currently >>>>>>>>>>>>>>> inactive until >>>>>>>> the >>>>>>>>>>>>>>> conflicts are resolved. Another mitigation request is >> active. >>>>>>>>>>>>>>> 8 | DOTS Server has detected conflicting mitigation >>>>>>>>>>>>>>> requests from >>>>>>>>>>>> different >>>>>>>>>>>>>>> DOTS clients.  This mitigation request is currently active. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> 9 | DOTS Server has detected conflicting mitigation >>>>>>>>>>>>>>> requests from >>>>>>>>>>>> different >>>>>>>>>>>>>>> DOTS clients.  All conflicting mitigation requests are >>>> inactive. >>>>>>>>>>>>>>> == >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Kaname >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> On 2018/05/07 15:12, mohamed.boucadair@orange.com >>> wrote: >>>>>>>>>>>>>>>> Hi Kaname, >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Please check >>>>>>>> https://mailarchive.ietf.org/arch/msg/dots/z_cZR9_u273HzC9o0Iy9 >>>>>>>> FeQZ >>>>>>>> 0Jo >>>>>>>>>>>>>> about >>>>>>>>>>>>>>> the rationale for allowing to return code '8' even in a >>>>>> notification >>>>>>>>>>>>>> message. >>>>>>>>>>>>>>> The intent was to have code '8' as a transition state. >>>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>>> Med >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> -----Message d'origine----- De : kaname nishizuka >>>>>>>>>>>>>>>>> [mailto:kaname@nttv6.jp] Envoyé : mercredi 2 mai 2018 >>>>>>>>>>>>>>>>> 02:49 À : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org >>>>> Objet : >>>>>>>>>>>>>>>>> Re: [Dots] I-D Action: draft-ietf-dots-signal-channel- >>>>>>>> 19.txt >>>>>>>>>>>>>>>>> Hi, >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> I'd like to ask one clarification question about >>>>>>>>>>>>>>>>> status code >>>> 8: >>>>>>>>>>>>>>>>>    o  A notification message with 'status' code >>>>>>>>>>>>>>>>> set to '8 >>>>>>>> (Attack >>>>>>>>>>>>>>>>>       mitigation is rejected)' and 'conflict- >> status' >>>>>>>>>>>>>>>>> set to >>>>>>>> '1' >>>>>>>>>> is >>>>>>>>>>>>>> sent >>>>>>>>>>>>>>>>>       to a DOTS client to indicate that this >>>>>>>>>>>>>>>>> mitigation >>>>>>>> request >>>>>>>>>> is >>>>>>>>>>>>>>>>>       rejected because a conflict is detected. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> If a mitigation request is rejected due to a conflict, >>>>>>>>>>>>>>>>> it is >>>>>>>> rejected >>>>>>>>>>>> at >>>>>>>>>>>>>>>>> PUT(4.09(Conflict)), so no resource will be created. >>>>>>>>>>>>>>>>> So it looks there is no chance to return '8 (Attack >>>>>>>>>>>>>>>>> mitigation is >>>>>>>>>>>>>>> rejected)'. >>>>>>>>>>>>>>>>> thanks, >>>>>>>>>>>>>>>>> Kaname >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> On 2018/04/10 22:47, mohamed.boucadair@orange.com >>>>> wrote: >>>>>>>>>>>>>>>>>> Re-, >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> This version addresses the comments raised during the >>>>>>>>>>>>>>>>>> WGLC, in >>>>>>>>>>>>>>> particular: >>>>>>>>>>>>>>>>>> - (Clarification) Indicate that only one hop-limit is >>>>>>>>>>>>>>>>>> included >>>>>>>>>>>>>>>>>> - Specify the loop diagnostic payload >>>>>>>>>>>>>>>>>> - (Clarification) Indicate explicitly that GET >>>>>>>>>>>>>>>>>> messages with >>>>>> 'sid' >>>>>>>>>> are >>>>>>>>>>>>>>>>> allowed >>>>>>>>>>>>>>>>>> - Update the redirect behavior. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>>>>> Med >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> -----Message d'origine----- De : Dots >>>>>>>>>>>>>>>>>>> [mailto:dots-bounces@ietf.org] De la part de >>>>>> internet- >>>>>>>>>>>>>>>>>>> drafts@ietf.org >>>>>>>>>>>>>>>>>>> Envoyé : mardi 10 avril 2018 15:40 À : >>>>>>>>>>>>>>>>>>> i-d-announce@ietf.org Cc : dots@ietf.org Objet : >>>>>>>>>>>>>>>>>>> [Dots] I-D Action: draft-ietf-dots-signal-channel- >>>>>> 19.txt >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> A New Internet-Draft is available from the on-line >>>>>>>>>>>>>>>>>>> Internet- >>>>>>>> Drafts >>>>>>>>>>>>>>>>>>> directories. >>>>>>>>>>>>>>>>>>> This draft is a work item of the DDoS Open Threat >>>>>>>>>>>>>>>>>>> Signaling WG >>>>>> of >>>>>>>>>> the >>>>>>>>>>>>>>>>> IETF. >>>>>>>>>>>>>>>>>>> Title : Distributed Denial-of- >>>> Service >>>>>> Open >>>>>>>>>>>> Threat >>>>>>>>>>>>>>>>> Signaling >>>>>>>>>>>>>>>>>>> (DOTS) Signal Channel Specification >>>>>>>>>>>>>>>>>>> Authors : Tirumaleswar Reddy >>>>>>>>>>>>>>>>>>> Mohamed Boucadair >>>>>>>>>>>>>>>>>>> Prashanth Patil >>>>>>>>>>>>>>>>>>> Andrew Mortensen >>>>>>>>>>>>>>>>>>> Nik Teague >>>>>>>>>>>>>>>>>>> Filename : draft-ietf-dots-signal-channel- >> 19.txt >>>>>>>>>>>>>>>>>>> Pages : 86 >>>>>>>>>>>>>>>>>>> Date : 2018-04-10 >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Abstract: >>>>>>>>>>>>>>>>>>> This document specifies the DOTS signal >>>>>>>>>>>>>>>>>>> channel, a >>>>>>>> protocol >>>>>>>>>> for >>>>>>>>>>>>>>>>>>> signaling the need for protection against >>>>>>>>>>>>>>>>>>> Distributed >>>>>>>>>> Denial- >>>>>>>>>>>> of- >>>>>>>>>>>>>>>>>>> Service (DDoS) attacks to a server capable >>>>>>>>>>>>>>>>>>> of enabling >>>>>>>>>> network >>>>>>>>>>>>>>>>>>> traffic mitigation on behalf of the >>>>>>>>>>>>>>>>>>> requesting >>>> client. >>>>>>>>>>>>>>>>>>> A companion document defines the DOTS data >>>>>>>>>>>>>>>>>>> channel, a >>>>>>>>>> separate >>>>>>>>>>>>>>>>>>> reliable communication layer for DOTS >>>>>>>>>>>>>>>>>>> management and >>>>>>>>>>>>>> configuration >>>>>>>>>>>>>>>>>>> purposes. >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Editorial Note (To be removed by RFC Editor) >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Please update these statements with the RFC >>>>>>>>>>>>>>>>>>> number to >>>>>> be >>>>>>>>>>>> assigned >>>>>>>>>>>>>>> to >>>>>>>>>>>>>>>>>>> this document: >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> o "This version of this YANG module is >>>>>>>>>>>>>>>>>>> part of RFC >>>>>>>> XXXX;" >>>>>>>>>>>>>>>>>>> o "RFC XXXX: Distributed Denial-of-Service >>>>>>>>>>>>>>>>>>> Open >>>>>> Threat >>>>>>>>>>>> Signaling >>>>>>>>>>>>>>>>>>> (DOTS) Signal Channel Specification"; >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> o "| [RFCXXXX] |" >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> o reference: RFC XXXX >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Please update TBD statements with the port >>>>>>>>>>>>>>>>>>> number to >>>>>> be >>>>>>>>>>>> assigned >>>>>>>>>>>>>> to >>>>>>>>>>>>>>>>>>> DOTS Signal Channel Protocol. >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Also, please update the "revision" date of >>>>>>>>>>>>>>>>>>> the YANG >>>>>>>> module. >>>>>>>>>>>>>>>>>>> The IETF datatracker status page for this draft is: >>>>>>>>>>>>>>>>>>> https://datatracker.ietf.org/doc/draft-ietf-dots-sig >>>>>>>>>>>>>>>>>>> nal- >>>>>> channel/ >>>>>>>>>>>>>>>>>>> There are also htmlized versions available at: >>>>>>>>>>>>>>>>>>> https://tools.ietf.org/html/draft-ietf-dots-signal-c >>>>>>>>>>>>>>>>>>> hann >>>>>>>>>>>>>>>>>>> el-19 >>>>>>>>>>>>>>>>>>> https://datatracker.ietf.org/doc/html/draft-ietf-dot >>>>>>>>>>>>>>>>>>> s-si >>>>>>>>>>>>>>>>>>> gnal- >>>>>>>>>> channel- >>>>>>>>>>>>>> 19 >>>>>>>>>>>>>>>>>>> A diff from the previous version is available at: >>>>>>>>>>>>>>>>>>> https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-si >>>>>>>>>>>>>>>>>>> gnal >>>>>>>>>>>>>>>>>>> - >>>>>> channel- >>>>>>>> 19 >>>>>>>>>>>>>>>>>>> Please note that it may take a couple of minutes >>>>>>>>>>>>>>>>>>> from the time >>>>>> of >>>>>>>>>>>>>>>>> submission >>>>>>>>>>>>>>>>>>> until the htmlized version and diff are available at >>>>>>>>>> tools.ietf.org. >>>>>>>>>>>>>>>>>>> Internet-Drafts are also available by anonymous FTP at: >>>>>>>>>>>>>>>>>>> ftp://ftp.ietf.org/internet-drafts/ >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>> _______________________________________________ >>>>>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>> _______________________________________________ >>>>>>>>>>> Dots mailing list >>>>>>>>>>> Dots@ietf.org >>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>> _______________________________________________ >>>>>>>>> Dots mailing list >>>>>>>>> Dots@ietf.org >>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>> _______________________________________________ >>>>> Dots mailing list >>>>> Dots@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/dots > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Wed May 16 01:15:49 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C7E412D77B for ; Wed, 16 May 2018 01:15:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.7 X-Spam-Level: X-Spam-Status: No, score=-0.7 tagged_above=-999 required=5 tests=[RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uJ4GkT9LRshj for ; Wed, 16 May 2018 01:15:44 -0700 (PDT) Received: from orange.com (mta136.mail.business.static.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1EC971250B8 for ; Wed, 16 May 2018 01:15:44 -0700 (PDT) Received: from opfednr03.francetelecom.fr (unknown [xx.xx.xx.67]) by opfednr25.francetelecom.fr (ESMTP service) with ESMTP id B4DD01805BC; Wed, 16 May 2018 10:15:41 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.13]) by opfednr03.francetelecom.fr (ESMTP service) with ESMTP id 891781A0071; Wed, 16 May 2018 10:15:41 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM6D.corporate.adroot.infra.ftgroup ([fe80::54f9:a6c3:c013:cbc7%19]) with mapi id 14.03.0389.001; Wed, 16 May 2018 10:15:41 +0200 From: To: kaname nishizuka , "Konda, Tirumaleswar Reddy" CC: "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT7Oqc9uXo/B5hv0GA6PA93di6aaQx/1OA Date: Wed, 16 May 2018 08:15:40 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF1BE20@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <17e67a49-fcbb-2d73-a286-034661d9fade@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF17B30@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <8ae47725-4db3-e02a-7846-d2f4d5d9b739@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BCA8@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BD67@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BDCD@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <2c400e78-4482-2b61-5289-6b149294b78f@nttv6.jp> In-Reply-To: <2c400e78-4482-2b61-5289-6b149294b78f@nttv6.jp> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 May 2018 08:15:47 -0000 UmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4gDQoNCkNoZWVycywNCk1lZA0KDQo+IC0tLS0tTWVz c2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiBEZcKgOiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2VzQGll dGYub3JnXSBEZSBsYSBwYXJ0IGRlIGthbmFtZSBuaXNoaXp1a2ENCj4gRW52b3nDqcKgOiBtZXJj cmVkaSAxNiBtYWkgMjAxOCAwOTo1MQ0KPiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xO OyBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5DQo+IENjwqA6IGRvdHNAaWV0Zi5vcmcNCj4gT2Jq ZXTCoDogUmU6IFtEb3RzXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5u ZWwtMTkudHh0DQo+IA0KPiBSZSwNCj4gDQo+IEkgc2VlLCBidXQgSSBkaWRuJ3QgZmVlbCAiRm9y IGV4YW1wbGU6IiBpcyByZWZsZWN0aW5nIG15IGNvbW1lbnQuDQoNCltNZWRdIEkgd2FzIHJlZmVy cmluZyB0aGlzIHRoaXMgY29tbWVudCB5b3UgbWFkZSAiSXQgc2hvdWxkIGJlIGxlZnQgYXMgaW1w bGVtZW50YXRpb24tIGFuZCBkZXBsb3ltZW50LXNwZWNpZmljIi4NCg0KQW55d2F5LCBsZXQncyBy ZW1vdmUgIkZvciBleGFtcGxlOiIuDQoNCj4gU2hvdWxkIHdlIG5lZWQgdG8gdXNlIHN1Y2Nlc3Mg KDIuMDEgb3IgMi4wNCkgaW4gdGhlIGZpcnN0IHNlbnRlbmNlIGxpa2UgdGhpcz8NCj4gDQo+ICDC oMKgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcgbWl0aWdh dGlvbiByZXF1ZXN0DQo+ICDCoMKgIGZyb20gYSBkaWZmZXJlbnQgRE9UUyBjbGllbnQsIHRoZSBE T1RTIHNlcnZlciBtYXkgcmV0dXJuIHN1Y2Nlc3MgKDIuMDEgb3INCj4gMi4wNCkNCj4gIMKgwqAg b3LCoCBDb25mbGljdCg0LjA5KSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4NCj4gDQoN CltNZWRdIEkgZG9uJ3QgdGhpbmsgc28uIFRoZSB0ZXh0IGlzIGFib3V0IGEgcmVxdWVzdCB3aXRo IGEgbmV3IGN1aWQvbWlkLg0KDQo+IHJlZ2FyZHMsDQo+IEthbmFtZQ0KPiANCj4gDQo+IE9uIDIw MTgvMDUvMTYgMTY6MzMsIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3JvdGU6DQo+ID4g UmUtLA0KPiA+DQo+ID4gIkZvciBleGFtcGxlIiBpcyB0aGVyZSB0byBhY2NvbW1vZGF0ZSBhIGNv bW1lbnQgZnJvbSBLYW5hbWUgd2hvIHdhbnRlZCB0aGUNCj4gYmVoYXZpb3IgdG8gYmUgYWxzbyBp bXBsZW1lbnRhdGlvbi9kZXBsb3ltZW50Lg0KPiA+DQo+ID4gQ2hlZXJzLA0KPiA+IE1lZA0KPiA+ DQo+ID4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+PiBEZcKgOiBLb25kYSwgVGly dW1hbGVzd2FyIFJlZGR5IFttYWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNv bV0NCj4gPj4gRW52b3nDqcKgOiBtZXJjcmVkaSAxNiBtYWkgMjAxOCAwOTowNA0KPiA+PiDDgMKg OiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOyBrYW5hbWUgbmlzaGl6dWthDQo+ID4+IENjwqA6 IGRvdHNAaWV0Zi5vcmcNCj4gPj4gT2JqZXTCoDogUkU6IFtEb3RzXSBJLUQgQWN0aW9uOiBkcmFm dC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4+DQo+ID4+IEhpIE1lZCwNCj4g Pj4NCj4gPj4gUGxlYXNlIHNlZSBpbmxpbmUNCj4gPj4NCj4gPj4+IC0tLS0tT3JpZ2luYWwgTWVz c2FnZS0tLS0tDQo+ID4+PiBGcm9tOiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4+ PiBbbWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb21dDQo+ID4+PiBTZW50OiBXZWRu ZXNkYXksIE1heSAxNiwgMjAxOCAxMjoyNiBQTQ0KPiA+Pj4gVG86IEtvbmRhLCBUaXJ1bWFsZXN3 YXIgUmVkZHkgPFRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20+Ow0KPiA+Pj4ga2Fu YW1lIG5pc2hpenVrYSA8a2FuYW1lQG50dHY2LmpwPg0KPiA+Pj4gQ2M6IGRvdHNAaWV0Zi5vcmcN Cj4gPj4+IFN1YmplY3Q6IFJFOiBbRG90c10gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNp Z25hbC1jaGFubmVsLTE5LnR4dA0KPiA+Pj4NCj4gPj4+IFRoaXMgZW1haWwgb3JpZ2luYXRlZCBm cm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8gbm90IGNsaWNrDQo+IGxpbmtzDQo+ ID4+IG9yDQo+ID4+PiBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBz ZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMNCj4gPj4+IHNhZmUuDQo+ID4+Pg0KPiA+Pj4g SGkgVGlydSwNCj4gPj4+DQo+ID4+PiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPj4+DQo+ID4+PiBD aGVlcnMsDQo+ID4+PiBNZWQNCj4gPj4+DQo+ID4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0t LS0tDQo+ID4+Pj4gRGXCoDogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA+Pj4+IFttYWls dG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbV0NCj4gPj4+PiBFbnZvecOpwqA6 IG1lcmNyZWRpIDE2IG1haSAyMDE4IDA4OjExDQo+ID4+Pj4gw4DCoDogQk9VQ0FEQUlSIE1vaGFt ZWQgSU1UL09MTjsga2FuYW1lIG5pc2hpenVrYSBDY8KgOiBkb3RzQGlldGYub3JnDQo+ID4+Pj4g T2JqZXTCoDogUkU6IFtEb3RzXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNo YW5uZWwtMTkudHh0DQo+ID4+Pj4NCj4gPj4+PiBJIHByb3Bvc2UgdG8gdXBkYXRlIHRoZSB0ZXh0 IGFzIGZvbGxvd3MgdG8gbWFrZSBpdCBtb3JlIGNsZWFyOg0KPiA+Pj4+DQo+ID4+Pj4gSWYgdGhl IHJlcXVlc3QgaXMgY29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZyBtaXRpZ2F0aW9uIHJlcXVl c3QgZnJvbQ0KPiA+Pj4+IGEgZGlmZmVyZW50IERPVFMgY2xpZW50LCB0aGUgRE9UUyBzZXJ2ZXIg bWF5IGVpdGhlciBkZWNpZGUgdG8gbWFpbnRhaW4NCj4gPj4+PiB0aGUgY29uZmxpY3RpbmcgcmVx dWVzdCBvciByZWplY3QgdGhlIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdC4NCj4gPj4+ PiBJZiB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRlcyB0byBtYWludGFpbiB0aGUgY29uZmxpY3Rpbmcg bWl0aWdhdGlvbg0KPiA+Pj4+IHJlcXVlc3QsDQo+ID4+PiBbTWVkXSBJIGd1ZXNzICJjb25mbGlj dGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QiIHBvaW50cyB0byB0aGUgbmV3IHJlcXVlc3QuDQo+ID4+ Pg0KPiA+Pj4gICB0aGUgRE9UUyBzZXJ2ZXIgcmV0dXJucyAyLjAxIChDcmVhdGVkKSB0bw0KPiA+ Pj4+IHRoZSByZXF1ZXN0aW5nIERPVFMgY2xpZW50LiBJZiB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRl cyB0byByZWplY3QgdGhlDQo+ID4+Pj4gY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0 aGUgRE9UUyBzZXJ2ZXIgcmV0dXJucyA0LjA5DQo+ID4+Pj4gKENvbmZsaWN0KSBbUkZDODEzMl0g dG8gdGhlIHJlcXVlc3RpbmcgRE9UUyBjbGllbnQNCj4gPj4+IFtNZWRdIElkZW0gYXMgYWJvdmUu DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+PiBGb3IgYm90aCAyLjAxIChDcmVhdGVkKSBhbmQgNC4wOSAo Q29uZmxpY3QpIHJlc3BvbnNlcywNCj4gPj4+IFtNZWRdIEkgbGlrZSB0aGlzLg0KPiA+Pj4NCj4g Pj4+ICAgdGhlIHJlc3BvbnNlIG1lc3NhZ2UNCj4gPj4+PiBpbmNsdWRlcyBlbm91Z2ggaW5mb3Jt YXRpb24gZm9yIGEgRE9UUyBjbGllbnQgdG8gcmVjb2duaXplIHRoZSBzb3VyY2UNCj4gPj4+PiBv ZiB0aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+Pj4gW01lZF0gV2hhdCBhYm91 dD8NCj4gPj4+DQo+ID4+PiBORVc6DQo+ID4+Pg0KPiA+Pj4gICAgIElmIHRoZSByZXF1ZXN0IGlz IGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0DQo+ID4+PiAg ICAgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwgdGhlIERPVFMgc2VydmVyIG1heSByZXR1 cm4gMi4wMQ0KPiA+Pj4gICAgIChDcmVhdGVkKSBvciA0LjA5IChDb25mbGljdCkgdG8gdGhlIHJl cXVlc3RpbmcgRE9UUyBjbGllbnQuICBGb3INCj4gPj4+ICAgICBleGFtcGxlOg0KPiA+Pj4NCj4g Pj4+ICAgICBvICBJZiB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRlcyB0byBtYWludGFpbiB0aGUgbmV3 IG1pdGlnYXRpb24gcmVxdWVzdCwNCj4gPj4+ICAgICAgICB0aGUgRE9UUyBzZXJ2ZXIgcmV0dXJu cyAyLjAxIChDcmVhdGVkKSB0byB0aGUgcmVxdWVzdGluZyBET1RTDQo+ID4+PiAgICAgICAgY2xp ZW50Lg0KPiA+Pj4NCj4gPj4+ICAgICBvICBJZiB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRlcyB0byBy ZWplY3QgdGhlIG5ldyBtaXRpZ2F0aW9uIHJlcXVlc3QsDQo+ID4+PiAgICAgICAgdGhlIERPVFMg c2VydmVyIHJldHVybnMgNC4wOSAoQ29uZmxpY3QpIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMNCj4g Pj4+ICAgICAgICBjbGllbnQuDQo+ID4+Pg0KPiA+Pj4gICAgIEZvciBib3RoIDIuMDEgKENyZWF0 ZWQpIGFuZCA0LjA5IChDb25mbGljdCkgcmVzcG9uc2VzLCB0aGUgcmVzcG9uc2UNCj4gPj4+ICAg ICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQgdG8gcmVjb2du aXplIHRoZSBzb3VyY2UNCj4gPj4+ICAgICBvZiB0aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJl bG93Og0KPiA+PiBQcm9wb3NlZCB0ZXh0IGxvb2tzIGdvb2QuIE5pdDogSSBkb24ndCBzZWUgdGhl IG5lZWQgZm9yICJGb3IgZXhhbXBsZSIuDQo+ID4+DQo+ID4+IENoZWVycywNCj4gPj4gLVRpcnUN Cj4gPj4NCj4gPj4+PiAtVGlydQ0KPiA+Pj4+DQo+ID4+Pj4+IC0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tDQo+ID4+Pj4+IEZyb206IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmdd IE9uIEJlaGFsZiBPZg0KPiA+Pj4+PiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4+ Pj4+IFNlbnQ6IFdlZG5lc2RheSwgTWF5IDE2LCAyMDE4IDEwOjUyIEFNDQo+ID4+Pj4+IFRvOiBr YW5hbWUgbmlzaGl6dWthIDxrYW5hbWVAbnR0djYuanA+DQo+ID4+Pj4+IENjOiBkb3RzQGlldGYu b3JnDQo+ID4+Pj4+IFN1YmplY3Q6IFJlOiBbRG90c10gSS1EIEFjdGlvbjoNCj4gPj4+Pj4gZHJh ZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0KPiA+Pj4+Pg0KPiA+Pj4+PiBUaGlz IGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5v dCBjbGljaw0KPiA+Pj4+PiBsaW5rcw0KPiA+Pj4+IG9yDQo+ID4+Pj4+IG9wZW4gYXR0YWNobWVu dHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUNCj4gPj4+Pj4g Y29udGVudCBpcyBzYWZlLg0KPiA+Pj4+Pg0KPiA+Pj4+PiBIaSBLYW5hbWUsDQo+ID4+Pj4+DQo+ ID4+Pj4+IFRoYW5rIHlvdSBmb3IgQUNraW5nLiBJIHdpbGwgaW1wbGVtZW50IHRoaXMgY2hhbmdl Lg0KPiA+Pj4+Pg0KPiA+Pj4+PiBDaGVlcnMsDQo+ID4+Pj4+IE1lZA0KPiA+Pj4+Pg0KPiA+Pj4+ Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4+Pj4+PiBEZcKgOiBrYW5hbWUgbmlz aGl6dWthIFttYWlsdG86a2FuYW1lQG50dHY2LmpwXSBFbnZvecOpwqA6IG1lcmNyZWRpDQo+ID4+ Pj4+PiAxNiBtYWkgMjAxOCAwMzoxNiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOIENj wqA6DQo+ID4+PiBkb3RzQGlldGYub3JnDQo+ID4+Pj4+IE9iamV0DQo+ID4+Pj4+PiA6IFJlOiBb RG90c10gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0K PiA+Pj4+Pj4NCj4gPj4+Pj4+IEhpIE1lZCwNCj4gPj4+Pj4+DQo+ID4+Pj4+PiBQbGVhc2Ugc2Vl IGlubGluZS4NCj4gPj4+Pj4+DQo+ID4+Pj4+PiB0aGFua3MsDQo+ID4+Pj4+PiBrYW5hbWUNCj4g Pj4+Pj4+DQo+ID4+Pj4+PiBPbiAyMDE4LzA1LzE1IDIyOjI2LCBtb2hhbWVkLmJvdWNhZGFpckBv cmFuZ2UuY29tIHdyb3RlOg0KPiA+Pj4+Pj4+IEhpIEthbmFtZSwNCj4gPj4+Pj4+Pg0KPiA+Pj4+ Pj4+IFBsZWFzZSBzZWUgaW5saW5lLg0KPiA+Pj4+Pj4+DQo+ID4+Pj4+Pj4gQ2hlZXJzLA0KPiA+ Pj4+Pj4+IE1lZA0KPiA+Pj4+Pj4+DQo+ID4+Pj4+Pj4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUt LS0tLQ0KPiA+Pj4+Pj4+PiBEZcKgOiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50 dHY2LmpwXSBFbnZvecOpwqA6IGx1bmRpDQo+ID4+Pj4+Pj4+IDE0IG1haSAyMDE4IDExOjQ5IMOA wqA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE4gQ2PCoDoNCj4gPj4+Pj4+Pj4gZG90c0BpZXRm Lm9yZyBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBBY3Rpb246DQo+ID4+Pj4+Pj4+IGRyYWZ0LWll dGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4gSGkg TWVkLA0KPiA+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+PiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPj4+Pj4+ Pj4NCj4gPj4+Pj4+Pj4gdGhhbmtzLA0KPiA+Pj4+Pj4+PiBLYW5hbWUNCj4gPj4+Pj4+Pj4NCj4g Pj4+Pj4+Pj4gT24gMjAxOC8wNS8xMSAxODozOSwgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNv bSB3cm90ZToNCj4gPj4+Pj4+Pj4+IFJlLSwNCj4gPj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+PiBQbGVh c2Ugc2VlIGlubGluZS4NCj4gPj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+PiBDaGVlcnMsDQo+ID4+Pj4+ Pj4+PiBNZWQNCj4gPj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2lu ZS0tLS0tDQo+ID4+Pj4+Pj4+Pj4gRGXCoDoga2FuYW1lIG5pc2hpenVrYSBbbWFpbHRvOmthbmFt ZUBudHR2Ni5qcF0gRW52b3nDqcKgOg0KPiA+Pj4+Pj4+Pj4+IHZlbmRyZWRpDQo+ID4+Pj4+Pj4+ Pj4gMTEgbWFpIDIwMTggMTA6NTkgw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTiBDY8Kg Og0KPiA+Pj4+Pj4+Pj4+IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDogUmU6IFtEb3RzXSBJLUQgQWN0 aW9uOg0KPiA+Pj4+Pj4+Pj4+IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQN Cj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IEhpIE1lZCwNCj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4+ICAgICA+IElmIHRoZSBzZXJ2ZXIgZGVjaWRlcyBub3QgdG8gbWFpbnRhaW4gdGhlIGNv bmZsaWN0aW5nDQo+ID4+Pj4+Pj4+Pj4gcmVxdWVzdCwgdGhlbg0KPiA+Pj4+Pj4+PiB0aGUNCj4g Pj4+Pj4+Pj4+PiBwcmVzZW50IHJlcXVlc3Qgd2lsbCBiZSBwcm9jZXNzZWQgYXMgbm9ybWFsOiB0 aGF0IGlzIDIuMDENCj4gPj4+Pj4+Pj4+PiB3aWxsIGJlDQo+ID4+Pj4+PiByZXR1cm5lZA0KPiA+ Pj4+Pj4+PiB0bw0KPiA+Pj4+Pj4+Pj4+IGFjayBzdWNjZXNzZnVsIGhhbmRsaW5nLiBBIG5vdGlm aWNhdGlvbiB3aWxsIGJlIHNlbnQgdG8gdGhlDQo+ID4+Pj4+Pj4+Pj4gY2xpZW50IG93bmVyDQo+ ID4+Pj4+Pj4+IG9mDQo+ID4+Pj4+Pj4+Pj4gdGhlIGNvbmZsaWN0aW5nIHJlcXVlc3QgdG8gbm90 aWZ5IHdpdGhkcmF3YWwgKHNlY3Rpb24gNC40LjIpLg0KPiA+Pj4+Pj4+Pj4+IEluIHRoYXQgY2Fz ZSwgdGhlIHN0YXR1cyBjb2RlIGlzICc3JyAoQXR0YWNrIG1pdGlnYXRpb24gaXMNCj4gPj4+Pj4+ Pj4+PiB3aXRoZHJhd24pDQo+ID4+Pj4+Pj4+PiBbTWVkXSBZZXMsIHRoYXQgc3RhdHVzIHdpbGwg YmUgc2VudCB0byB0aGUgb3duZXIgb2YgdGhlDQo+ID4+Pj4+Pj4+PiAoZXhpc3RpbmcpDQo+ID4+ Pj4+PiByZXF1ZXN0Lg0KPiA+Pj4+Pj4+Pj4+IE15IG9yaWdpbmFsIHF1ZXN0aW9uIGlzIHdoZW4g dGhlIHN0YXR1cyBjb2RlICc4JyAoQXR0YWNrDQo+ID4+Pj4+Pj4+Pj4gbWl0aWdhdGlvbiBpcw0K PiA+Pj4+Pj4+Pj4+IHJlamVjdGVkKSB3aWxsIGJlIHVzZWQuDQo+ID4+Pj4+Pj4+PiBbTWVkXSBJ IGdvdCB0aGF0Lg0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+PiBJbiB0aGUgdGV4dCBpbiB0aGUg ZHJhZnQsICJ0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbg0KPiA+Pj4+Pj4+Pj4+IHJlcXVlc3Qi IGlzDQo+ID4+Pj4+Pj4+IGFtYmlndW91cw0KPiA+Pj4+Pj4+Pj4+IHdoZXRoZXIgaXQgaXMgYWxy ZWFkeSBleGlzdGluZyByZXF1ZXN0IG9yIHRoZSByZXF1ZXN0IHRoYXQNCj4gPj4+Pj4+Pj4+PiBq dXN0IGhhcw0KPiA+Pj4+Pj4+PiBhcnJpdmVkLg0KPiA+Pj4+Pj4+Pj4gW01lZF0gSXQgaXMgcmVs YXRlZCB0byB0aGUgYWxyZWFkeSBleGlzdGluZyByZXF1ZXN0Lg0KPiA+Pj4+Pj4+Pj4NCj4gPj4+ Pj4+Pj4+PiBTYXksIHRoZSBleGlzdGluZyByZXF1ZXN0IGlzIChBKSwgdGhlbiBhIG1pdGlnYXRp b24gcmVxdWVzdA0KPiA+Pj4+Pj4+Pj4+IChCKSBhcnJpdmVkDQo+ID4+Pj4+Pj4+IHdoaWNoDQo+ ID4+Pj4+Pj4+Pj4gYXJlIGNvbmZsaWN0aW5nIHdpdGggQS4NCj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+ Pj4+Pj4+IElmIEIgaXMgc2VsZWN0ZWQuDQo+ID4+Pj4+Pj4+Pj4gKEEpIHdpbGwgZ2V0IG5vdGlm aWNhdGlvbiB3aXRoIHRoZSB3aXRoZHJhd2FsIGNvZGUgJzcnDQo+ID4+Pj4+Pj4+Pj4gKEIpIHdp bGwgZ2V0IDIuMDENCj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gW01lZF0gWWVzLiBUaGUgY3Vy cmVudCB0ZXh0IGRvZXMgY2FsbHMgb3V0IHlvdXIgc3RlcCAoMSkgaW4NCj4gPj4gNC40LjIuDQo+ ID4+Pj4+Pj4+PiBZb3VyDQo+ID4+Pj4+Pj4+IHN0ZXAgKDIpIGlzIG5vdCBjYWxsZWQgZXhwbGlj aXQgaW4gdGhlIHRleHQgYmVjYXVzZSB0aGVyZSBpcyBubw0KPiA+Pj4+Pj4+PiBjb25mdXNpb24g YWJvdXQgd2hpY2ggY29kZSB0byByZXR1cm4gd2hlbiBhIHJlcXVlc3QgaXMgYWNjZXB0ZWQNCj4g Pj4+Pj4+Pj4gdG8gYmUNCj4gPj4+Pj4gaG9ub3JlZC4NCj4gPj4+Pj4+Pj4+IFRoZSB0ZXh0IGZv Y3VzZXMgb24gY2FzZXMgd2hpY2ggcmVxdWlyZXMgc3BlY2lmaWMgaGFuZGxpbmc6DQo+ID4+Pj4+ Pj4+PiAtIGluYWN0aXZlIHJlcXVlc3QgYmVjYXVzZSBvZiBhIGNvbmZsaWN0DQo+ID4+Pj4+Pj4+ PiAtIG11bHRpcGxlIGFjdGl2ZSBjb25mbGljdGluZyByZXF1ZXN0cw0KPiA+Pj4+Pj4+Pj4NCj4g Pj4+Pj4+Pj4+PiBlbHNlIElmIEIgaXMgbm90IHNlbGVjdGVkLg0KPiA+Pj4+Pj4+Pj4+IChCKSB3 aWxsIGdldCA0LjA5DQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+IFtNZWRdIEluIHRoaXMgY2Fz ZSwgdGhlIHJlc291cmNlIGlzIG5vdCBjcmVhdGVkIGFuZCBhcyBzdWNoDQo+ID4+Pj4+Pj4+PiBj YXNlDQo+ID4+Pj4+PiByZXR1cm5pbmcNCj4gPj4+Pj4+Pj4gbm90aWZpY2F0aW9uIHN0YXR1cyBj b2RlIG9mIDggaXMgbm90IHBvc3NpYmxlIGFzIHlvdSByaWdodGZ1bA0KPiA+Pj4+Pj4+PiBwb2lu dGVkDQo+ID4+Pj4gb3V0Lg0KPiA+Pj4+Pj4+Pj4gVGhpcyBpcyB3aHkgd2Ugc3VnZ2VzdGVkIHRv IHJldHVybiAyLjAxIGZvciB0aGlzIGNhc2UgdG9vIHNvDQo+ID4+Pj4+Pj4+PiB0aGF0IGFuDQo+ ID4+Pj4+PiB1cGRhdGUNCj4gPj4+Pj4+Pj4gb2YgdGhlIHN0YXR1cyBjYW4gYmUgc2VudCB0byB0 aGUgY2xpZW50IHVwb24gY2hhbmdlLg0KPiA+Pj4+Pj4+PiBJIGRvbid0IHRoaW5rIGl0IGlzIG5l ZWRlZCB0byBvYmxpZ2F0ZSByZXR1cm5pbmcgb2YgMi4wMS4NCj4gPj4+Pj4+Pj4gSWYgaXQgaXMg b2J2aW91cyB0aGF0IHRoZSBET1RTIHNlcnZlciBuZWVkIG5vdCB0byBjcmVhdGUNCj4gPj4+Pj4+ Pj4gcmVzb3VyY2Ugb2YgdGhlIGNvbmZsaWN0aW5nIHJlcXVlc3QsIGl0IG1heSByZXR1cm4gNC4w OS4NCj4gPj4+Pj4+Pj4gU28sIHJldHVybmluZyBvZiA0LjA5IHNob3VsZCBiZSBhbGxvd2VkIGlu IHRoaXMgY2FzZS4NCj4gPj4+Pj4+Pj4gSXQgc2hvdWxkIGJlIGxlZnQgYXMgaW1wbGVtZW50YXRp b24tIGFuZCBkZXBsb3ltZW50LXNwZWNpZmljLg0KPiA+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pg0KPiA+ Pj4+Pj4+IFtNZWRdIERvIHlvdSBtZWFuIHRoYXQgdGhlIHRleHQgc2hvdWxkIGJlIG1vZGlmaWVk IHRvIGFsbG93IGZvcg0KPiA+Pj4+Pj4+IGJvdGgNCj4gPj4+Pj4+PiAyLjAxDQo+ID4+Pj4+PiBv ciA0LjA5IHRvIGJlIHJldHVybmVkIGRlcGVuZGluZyBvbiBzb21lIGxvY2FsIHBvbGljeT8NCj4g Pj4+Pj4+PiBlLmcuLA0KPiA+Pj4+Pj4+DQo+ID4+Pj4+Pj4gT0xEOg0KPiA+Pj4+Pj4+ICAgICAg SWYgdGhlIHJlcXVlc3QgaXMgY29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZyBtaXRpZ2F0aW9u DQo+ID4+IHJlcXVlc3QNCj4gPj4+Pj4+PiAgICAgIGZyb20gYSBkaWZmZXJlbnQgRE9UUyBjbGll bnQsIGFuZCB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRlcyB0bw0KPiA+Pj4+IG1haW50YWluDQo+ID4+ Pj4+Pj4gICAgICB0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUyBz ZXJ2ZXIgcmV0dXJucw0KPiA+PiA0LjA5DQo+ID4+Pj4+Pj4gICAgICAoQ29uZmxpY3QpIFtSRkM4 MTMyXSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4gVGhlDQo+ID4+IHJlc3BvbnNlDQo+ ID4+Pj4+Pj4gICAgICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGll bnQgdG8gcmVjb2duaXplDQo+ID4+Pj4+Pj4gdGhlDQo+ID4+Pj4gc291cmNlDQo+ID4+Pj4+Pj4g ICAgICBvZiB0aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+Pj4+Pj4+DQo+ID4+ Pj4+Pj4gTkVXOg0KPiA+Pj4+Pj4+ICAgICAgSWYgdGhlIHJlcXVlc3QgaXMgY29uZmxpY3Rpbmcg d2l0aCBhbiBleGlzdGluZyBtaXRpZ2F0aW9uDQo+ID4+IHJlcXVlc3QNCj4gPj4+Pj4+PiAgICAg IGZyb20gYSBkaWZmZXJlbnQgRE9UUyBjbGllbnQsIHRoZSBET1RTIHNlcnZlciBtYXkgcmV0dXJu DQo+ID4+Pj4+Pj4gMi4wMQ0KPiA+Pj4+IChDcmVhdGVkKQ0KPiA+Pj4+Pj4+ICAgICAgb3IgNC4w OSAoQ29uZmxpY3QpIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMgY2xpZW50LiBUaGUgcmVzcG9uc2UN Cj4gPj4+Pj4+PiAgICAgIGluY2x1ZGVzIGVub3VnaCBpbmZvcm1hdGlvbiBmb3IgYSBET1RTIGNs aWVudCB0byByZWNvZ25pemUNCj4gPj4+Pj4+PiB0aGUNCj4gPj4+PiBzb3VyY2UNCj4gPj4+Pj4+ PiAgICAgIG9mIHRoZSBjb25mbGljdCBhcyBkZXNjcmliZWQgYmVsb3c6DQo+ID4+Pj4+Pj4NCj4g Pj4+Pj4+IFllcywgaXQgd29ya3MgZm9yIG1lLg0KPiA+Pj4+Pj4NCj4gPj4+Pj4+DQo+ID4+Pj4+ Pj4+Pj4gVGlydSBzYWlkOg0KPiA+Pj4+Pj4+Pj4+ICAgICA+IEluIHRoaXMgY2FzZSwgdGhlIHJl c291cmNlIHNob3VsZCBiZSBjcmVhdGVkIGFuZCB0aGUNCj4gPj4+Pj4+Pj4+PiBzZXJ2ZXIgc2hv dWxkDQo+ID4+Pj4+Pj4+IHJldHVybg0KPiA+Pj4+Pj4+Pj4+IHN1Y2Nlc3MgKDIuMDEgb3IgMi4w NCkgcmVzcG9uc2UgY29kZSBhbG9uZyB3aXRoIHRoZSBjb25mbGljdC0NCj4gPj4+Pj4+IGluZm9y bWF0aW9uLg0KPiA+Pj4+Pj4+Pj4+IEluIHRoaXMgc2l0dWF0aW9uLCAoQikgd2lsbCBnZXQgMi4w MSBvciAyLjA0IGFsb25nIHdpdGggdGhlDQo+ID4+Pj4+Pj4+Pj4gcmVqZWN0ZWQNCj4gPj4+Pj4+ IGNvZGUNCj4gPj4+Pj4+Pj4gJzgnDQo+ID4+Pj4+Pj4+Pj4gKFdoaWNoIG1pdGlnYXRpb24gcmVx dWVzdCB3aWxsIGJlIHNlbGVjdGVkIGJ5IHRoZSBET1RTIHNlcnZlcg0KPiA+Pj4+Pj4+Pj4+IGlz DQo+ID4+Pj4+Pj4+Pj4gaW1wbGVtZW50YXRpb24tIGFuZCBkZXBsb3ltZW50LXNwZWNpZmljLikN Cj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IFRoYW5rcywNCj4gPj4+Pj4+Pj4+PiBLYW5hbWUN Cj4gPj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gT24gMjAxOC8wNS8xMSAx NTowOSwgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPj4+Pj4+Pj4+Pj4g SGkgS2FuYW1lLA0KPiA+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+PiBJZiB0aGUgc2VydmVyIGRl Y2lkZXMgbm90IHRvIG1haW50YWluIHRoZSBjb25mbGljdGluZw0KPiA+Pj4+Pj4+Pj4+PiByZXF1 ZXN0LCB0aGVuIHRoZQ0KPiA+Pj4+Pj4+Pj4+IHByZXNlbnQgcmVxdWVzdCB3aWxsIGJlIHByb2Nl c3NlZCBhcyBub3JtYWw6IHRoYXQgaXMgMi4wMQ0KPiA+Pj4+Pj4+Pj4+IHdpbGwgYmUNCj4gPj4+ Pj4+IHJldHVybmVkDQo+ID4+Pj4+Pj4+IHRvDQo+ID4+Pj4+Pj4+Pj4gYWNrIHN1Y2Nlc3NmdWwg aGFuZGxpbmcuIEEgbm90aWZpY2F0aW9uIHdpbGwgYmUgc2VudCB0byB0aGUNCj4gPj4+Pj4+Pj4+ PiBjbGllbnQgb3duZXINCj4gPj4+Pj4+Pj4gb2YNCj4gPj4+Pj4+Pj4+PiB0aGUgY29uZmxpY3Rp bmcgcmVxdWVzdCB0byBub3RpZnkgd2l0aGRyYXdhbCAoc2VjdGlvbiA0LjQuMikuDQo+ID4+Pj4+ Pj4+Pj4+IFRoZSB0ZXh0IGZvY3VzZXMgb24gdGhlIGNhc2UgIiwgYW5kIHRoZSBET1RTIHNlcnZl ciBkZWNpZGVzDQo+ID4+Pj4+Pj4+Pj4+IHRvIG1haW50YWluDQo+ID4+Pj4+Pj4+IHRoZQ0KPiA+ Pj4+Pj4+Pj4+IGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdCIgYmVjYXVzZSB0aGlzIGlz IHRoZSBvbmUgd2hpY2gNCj4gPj4+Pj4+Pj4+PiByZXF1aXJlcyBhZGRpdGlvbmFsIHNwZWNpZmlj YXRpb24gdnMuIG5vcm1hbCByZXF1ZXN0IHRoYXQgaXMNCj4gPj4+Pj4+Pj4+PiBhY2NlcHRlZCBi eSBhDQo+ID4+Pj4+PiBzZXJ2ZXIuDQo+ID4+Pj4+Pj4+Pj4+IENoZWVycywNCj4gPj4+Pj4+Pj4+ Pj4gTWVkDQo+ID4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmln aW5lLS0tLS0gRGXCoDoga2FuYW1lIG5pc2hpenVrYQ0KPiA+Pj4+Pj4+Pj4+Pj4gW21haWx0bzpr YW5hbWVAbnR0djYuanBdIEVudm95w6nCoDoNCj4gPj4+Pj4+Pj4+Pj4+IG1lcmNyZWRpIDkgbWFp IDIwMTggMTA6NDEgw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTg0KPiA+Pj4gQ2PCoDoN Cj4gPj4+Pj4+Pj4+Pj4+IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDogUmU6IFtEb3RzXSBJLUQgQWN0 aW9uOg0KPiA+Pj4+Pj4+Pj4+Pj4gZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4 dA0KPiA+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+IEhpIE1lZCwNCj4gPj4+Pj4+Pj4+Pj4+ DQo+ID4+Pj4+Pj4+Pj4+PiBJJ20gT0sgd2l0aCB0aGlzIGNoYW5nZS4NCj4gPj4+Pj4+Pj4+Pj4+ IEhvd2V2ZXIsIHRvIGJlIHByZWNpc2UsIEknZCBsaWtlIHRvIHN1Z2dlc3QgdG8gc3RhdGUgYWJv dXQNCj4gPj4+Pj4+Pj4+Pj4+IHRoZSBjYXNlDQo+ID4+Pj4+PiB0aGUNCj4gPj4+Pj4+Pj4+PiBE T1RTDQo+ID4+Pj4+Pj4+Pj4+PiBzZXJ2ZXIgZGVjaWRlcyBOT1QgdG8gbWFpbnRhaW4gaXQuDQo+ ID4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4gTkVXLTI6DQo+ID4+Pj4+Pj4+Pj4+PiAgICAg IMKgwqAgSWYgdGhlIHJlcXVlc3QgaXMgY29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZw0KPiA+ Pj4+Pj4+Pj4+Pj4gbWl0aWdhdGlvbg0KPiA+Pj4+Pj4gcmVxdWVzdA0KPiA+Pj4+Pj4+Pj4+Pj4g ICAgICDCoMKgIGZyb20gYSBkaWZmZXJlbnQgRE9UUyBjbGllbnQsIGFuZCB0aGUgRE9UUyBzZXJ2 ZXINCj4gPj4+Pj4+Pj4+Pj4+IGRlY2lkZXMgdG8NCj4gPj4+Pj4+Pj4gbWFpbnRhaW4NCj4gPj4+ Pj4+Pj4+Pj4+ICAgICAgwqDCoCB0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0 aGUgRE9UUyBzZXJ2ZXINCj4gPj4+Pj4+Pj4+Pj4+IHJldHVybnMNCj4gPj4+Pj4+IDIuMDENCj4g Pj4+Pj4+Pj4+Pj4+ICAgICAgwqDCoCAoQ3JlYXRlZCkgdG8gdGhlIHJlcXVlc3RpbmcgRE9UUyBj bGllbnQuDQo+ID4+Pj4+Pj4+Pj4+PiAgICAgIMKgwqAgT3RoZXJ3aXNlLCB0aGUgRE9UUyBzZXJ2 ZXIgcmV0dXJucyA0LjA5IChDb25mbGljdCkNCj4gPj4+PiBbUkZDODEzMl0uDQo+ID4+Pj4+Pj4+ Pj4+PiAgICAgIMKgwqAgVGhlIHJlc3BvbnNlIGluY2x1ZGVzIGVub3VnaCBpbmZvcm1hdGlvbiBm b3IgYSBET1RTDQo+ID4+Pj4+Pj4+Pj4+PiBjbGllbnQNCj4gPj4+PiB0bw0KPiA+Pj4+Pj4+Pj4+ Pj4gICAgICDCoMKgIHJlY29nbml6ZSB0aGUgc291cmNlIG9mIHRoZSBjb25mbGljdCBhcyBkZXNj cmliZWQNCj4gPj4gYmVsb3c6DQo+ID4+Pj4+Pj4+Pj4+PiB0aGFua3MsDQo+ID4+Pj4+Pj4+Pj4+ PiBLYW5hbWUNCj4gPj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+PiBPbiAyMDE4LzA1LzA5IDE0 OjUxLCBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIHdyb3RlOg0KPiA+Pj4+Pj4+Pj4+Pj4+ IEhpIEthbmFtZSwNCj4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+IEFmdGVyIHRoaW5r aW5nIGFib3V0IHRoaXMsIEkgZG8gdGhpbmsgdGhhdCB5b3UgaGF2ZSBhDQo+ID4+Pj4+Pj4+Pj4+ Pj4gdmFsaWQgcG9pbnQuIEkNCj4gPj4+Pj4+Pj4+Pj4+IHN1Z2dlc3QgdG8gbWFrZSB0byBtYWtl IHRoaXMgY2hhbmdlIChtYXJrZWQgd2l0aCBeXl5eKQ0KPiA+Pj4+Pj4+Pj4+Pj4+IE9MRDoNCj4g Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGgg YW4gZXhpc3RpbmcNCj4gPj4+Pj4+Pj4+Pj4+PiBtaXRpZ2F0aW9uDQo+ID4+Pj4+PiByZXF1ZXN0 DQo+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICBmcm9tIGEgZGlmZmVyZW50IERPVFMgY2xpZW50LCBh bmQgdGhlIERPVFMgc2VydmVyDQo+ID4+Pj4+Pj4+Pj4+Pj4gZGVjaWRlcyB0bw0KPiA+Pj4+Pj4+ Pj4+IG1haW50YWluDQo+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICB0aGUgY29uZmxpY3RpbmcgbWl0 aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUyBzZXJ2ZXINCj4gPj4+Pj4+Pj4+Pj4+PiByZXR1cm5z DQo+ID4+Pj4+PiA0LjA5DQo+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAoQ29uZmxpY3QpIFtSRkM4 MTMyXSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4NCj4gPj4+Pj4+Pj4+Pj4+PiBUaGUN Cj4gPj4+Pj4+IHJlc3BvbnNlDQo+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICBpbmNsdWRlcyBlbm91 Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQgdG8NCj4gPj4+Pj4+Pj4+Pj4+PiByZWNv Z25pemUgdGhlDQo+ID4+Pj4+Pj4+Pj4gc291cmNlDQo+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICBv ZiB0aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4+ Pj4+Pj4+Pj4+Pj4gTkVXOg0KPiA+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgSWYgdGhlIHJlcXVlc3Qg aXMgY29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZw0KPiA+Pj4+Pj4+Pj4+Pj4+IG1pdGlnYXRp b24NCj4gPj4+Pj4+IHJlcXVlc3QNCj4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgIGZyb20gYSBkaWZm ZXJlbnQgRE9UUyBjbGllbnQsIGFuZCB0aGUgRE9UUyBzZXJ2ZXINCj4gPj4+Pj4+Pj4+Pj4+PiBk ZWNpZGVzIHRvDQo+ID4+Pj4+Pj4+Pj4gbWFpbnRhaW4NCj4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAg IHRoZSBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QsIHRoZSBET1RTIHNlcnZlcg0KPiA+ Pj4+Pj4+Pj4+Pj4+IHJldHVybnMNCj4gPj4+Pj4+IDIuMDENCj4gPj4+Pj4+IF5eXl4NCj4gPj4+ Pj4+Pj4+Pj4+PiAgICAgICAgIChDcmVhdGVkKSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVu dC4gIFRoZQ0KPiA+PiByZXNwb25zZV4NCj4gPj4+Pj4+Pj4+Pj4+PiAgICAgICAgIF5eXl5eXl5e DQo+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9y IGEgRE9UUyBjbGllbnQgdG8NCj4gPj4+Pj4+Pj4+Pj4+PiByZWNvZ25pemUgdGhlDQo+ID4+Pj4+ Pj4+Pj4gc291cmNlDQo+ID4+Pj4+Pj4+Pj4+Pj4gICAgICAgICBvZiB0aGUgY29uZmxpY3QgYXMg ZGVzY3JpYmVkIGJlbG93Og0KPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4gQ2hlZXJz LA0KPiA+Pj4+Pj4+Pj4+Pj4+IE1lZA0KPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+ IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLSBEZcKgOiBEb3RzDQo+ID4+Pj4+Pj4+Pj4+Pj4+ IFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBEZSBsYSBwYXJ0IGRlDQo+ID4+Pj4+Pj4+ Pj4+Pj4+IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gRW52b3nDqcKgOiBsdW5kaSA3IG1h aSAyMDE4DQo+ID4+Pj4+IDA4OjM4DQo+ID4+Pj4+Pj4+Pj4+Pj4+IMOAwqA6IGthbmFtZSBuaXNo aXp1a2E7IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDogUmU6IFtEb3RzXQ0KPiA+Pj4+Pj4+Pj4+Pj4+ PiBJLUQNCj4gPj4+Pj4+Pj4+Pj4+Pj4gQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNo YW5uZWwtMTkudHh0DQo+ID4+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+IFJlLSwNCj4g Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+Pj4gQWdyZWUgdGhhdCB0aGUgY29kZXMgYXJl IG5vdCB0aGUgc2FtZSwgYnV0IGFsdGVybmF0aXZlcw0KPiA+Pj4+Pj4+Pj4+Pj4+PiBvbmVzIGFz DQo+ID4+Pj4+Pj4+Pj4gc3VtbWFyaXplZA0KPiA+Pj4+Pj4+Pj4+Pj4+PiBoZXJlOg0KPiA+Pj4g aHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9kb3RzL2hBM01MS2xrWEZpbXBB bjVLU1lUYXlhVmtqQS4NCj4gPj4+Pj4+Pj4+Pj4+Pj4gQ2hlZXJzLA0KPiA+Pj4+Pj4+Pj4+Pj4+ PiBNZWQNCj4gPj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+IC0tLS0tTWVzc2FnZSBk J29yaWdpbmUtLS0tLSBEZcKgOiBrYW5hbWUgbmlzaGl6dWthDQo+ID4+Pj4+Pj4+Pj4+Pj4+PiBb bWFpbHRvOmthbmFtZUBudHR2Ni5qcF0gRW52b3nDqcKgOg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gbHVu ZGkgNyBtYWkgMjAxOCAwODoyMCDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOw0KPiA+ Pj4+Pj4+Pj4+Pj4+Pj4gZG90c0BpZXRmLm9yZyBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBBY3Rp b246DQo+ID4+Pj4+Pj4+Pj4+Pj4+PiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtDQo+ ID4+Pj4+PiAxOS50eHQNCj4gPj4+Pj4+Pj4+Pj4+Pj4+IEhpIE1lZCwNCj4gPj4+Pj4+Pj4+Pj4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+PiBJJ3ZlIHJlYWQgdGhlIHRocmVhZC4NCj4gPj4+Pj4+Pj4+ Pj4+Pj4+IGFuZCB0aGUgY29kZSAnOCcgb2YgdGhlIHRocmVhZCBpcyBkaWZmZXJlbnQgZnJvbSB0 aGUNCj4gPj4+Pj4+Pj4+Pj4+Pj4+IGNvZGUgJzgnIG9mDQo+ID4+Pj4+PiB0aGUNCj4gPj4+Pj4+ Pj4+Pj4+Pj4gY3VycmVudA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gZHJhZnQuDQo+ID4+Pj4+Pj4+Pj4+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gdGhleSdkIGJlZW4gZGlzY3Vzc2luZyB0aGUgNyw4IGFu ZCA5IGJhc2VkIG9uIHRoaXMNCj4gPj4+Pj4+Pj4+Pj4+Pj4+IGRlZmluaXRpb24sDQo+ID4+Pj4+ PiByaWdodD8NCj4gPj4+Pj4+Pj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21z Zy9kb3RzLzd6bGp6TjhueWNaWDdFN2doZ2sxDQo+ID4+Pj4+Pj4+IHV4MzINCj4gPj4+Pj4+Pj4g TWtNDQo+ID4+Pj4+Pj4+Pj4+Pj4+PiA9PQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gNyB8IERPVFMgU2Vy dmVyIGhhcyBkZXRlY3RlZCBjb25mbGljdGluZyBtaXRpZ2F0aW9uDQo+ID4+Pj4+Pj4+Pj4+Pj4+ PiByZXF1ZXN0cyBmcm9tDQo+ID4+Pj4+Pj4+Pj4+PiBkaWZmZXJlbnQNCj4gPj4+Pj4+Pj4+Pj4+ Pj4+IERPVFMgY2xpZW50cy7CoCBUaGlzIG1pdGlnYXRpb24gcmVxdWVzdCBpcyBjdXJyZW50bHkN Cj4gPj4+Pj4+Pj4+Pj4+Pj4+IGluYWN0aXZlIHVudGlsDQo+ID4+Pj4+Pj4+IHRoZQ0KPiA+Pj4+ Pj4+Pj4+Pj4+Pj4gY29uZmxpY3RzIGFyZSByZXNvbHZlZC4gQW5vdGhlciBtaXRpZ2F0aW9uIHJl cXVlc3QgaXMNCj4gPj4gYWN0aXZlLg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gOCB8IERPVFMgU2VydmVy IGhhcyBkZXRlY3RlZCBjb25mbGljdGluZyBtaXRpZ2F0aW9uDQo+ID4+Pj4+Pj4+Pj4+Pj4+PiBy ZXF1ZXN0cyBmcm9tDQo+ID4+Pj4+Pj4+Pj4+PiBkaWZmZXJlbnQNCj4gPj4+Pj4+Pj4+Pj4+Pj4+ IERPVFMgY2xpZW50cy7CoCBUaGlzIG1pdGlnYXRpb24gcmVxdWVzdCBpcyBjdXJyZW50bHkgYWN0 aXZlLg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+IDkgfCBET1RTIFNlcnZl ciBoYXMgZGV0ZWN0ZWQgY29uZmxpY3RpbmcgbWl0aWdhdGlvbg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4g cmVxdWVzdHMgZnJvbQ0KPiA+Pj4+Pj4+Pj4+Pj4gZGlmZmVyZW50DQo+ID4+Pj4+Pj4+Pj4+Pj4+ PiBET1RTIGNsaWVudHMuwqAgQWxsIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdHMgYXJl DQo+ID4+Pj4gaW5hY3RpdmUuDQo+ID4+Pj4+Pj4+Pj4+Pj4+PiA9PQ0KPiA+Pj4+Pj4+Pj4+Pj4+ Pj4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+IEthbmFtZQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+ Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+PiBPbiAyMDE4LzA1LzA3IDE1OjEyLCBtb2hhbWVk LmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4+PiB3cm90ZToNCj4gPj4+Pj4+Pj4+Pj4+Pj4+PiBI aSBLYW5hbWUsDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+PiBQbGVhc2Ug Y2hlY2sNCj4gPj4+Pj4+Pj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9k b3RzL3pfY1pSOV91MjczSHpDOW8wSXk5DQo+ID4+Pj4+Pj4+IEZlUVoNCj4gPj4+Pj4+Pj4gMEpv DQo+ID4+Pj4+Pj4+Pj4+Pj4+IGFib3V0DQo+ID4+Pj4+Pj4+Pj4+Pj4+PiB0aGUgcmF0aW9uYWxl IGZvciBhbGxvd2luZyB0byByZXR1cm4gY29kZSAnOCcgZXZlbiBpbiBhDQo+ID4+Pj4+PiBub3Rp ZmljYXRpb24NCj4gPj4+Pj4+Pj4+Pj4+Pj4gbWVzc2FnZS4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+IFRo ZSBpbnRlbnQgd2FzIHRvIGhhdmUgY29kZSAnOCcgYXMgYSB0cmFuc2l0aW9uIHN0YXRlLg0KPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+IENoZWVycywNCj4gPj4+Pj4+Pj4+Pj4+Pj4+PiBNZWQNCj4gPj4+Pj4+ Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0t LS0gRGXCoDoga2FuYW1lIG5pc2hpenVrYQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiBbbWFpbHRvOmth bmFtZUBudHR2Ni5qcF0gRW52b3nDqcKgOiBtZXJjcmVkaSAyIG1haSAyMDE4DQo+ID4+Pj4+Pj4+ Pj4+Pj4+Pj4+IDAyOjQ5IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE47IGRvdHNAaWV0 Zi5vcmcNCj4gPj4+Pj4gT2JqZXTCoDoNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gUmU6IFtEb3RzXSBJ LUQgQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtDQo+ID4+Pj4+Pj4+IDE5 LnR4dA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiBIaSwNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+ Pj4+Pj4+Pj4+Pj4+Pj4gSSdkIGxpa2UgdG8gYXNrIG9uZSBjbGFyaWZpY2F0aW9uIHF1ZXN0aW9u IGFib3V0DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IHN0YXR1cyBjb2RlDQo+ID4+Pj4gODoNCj4gPj4+ Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgIMKgwqAgb8KgIEEgbm90aWZpY2F0aW9uIG1lc3NhZ2Ugd2l0 aCAnc3RhdHVzJyBjb2RlDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IHNldCB0byAnOA0KPiA+Pj4+Pj4+ PiAoQXR0YWNrDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICDCoMKgwqDCoMKgIG1pdGlnYXRp b24gaXMgcmVqZWN0ZWQpJyBhbmQgJ2NvbmZsaWN0LQ0KPiA+PiBzdGF0dXMnDQo+ID4+Pj4+Pj4+ Pj4+Pj4+Pj4+IHNldCB0bw0KPiA+Pj4+Pj4+PiAnMScNCj4gPj4+Pj4+Pj4+PiBpcw0KPiA+Pj4+ Pj4+Pj4+Pj4+PiBzZW50DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICDCoMKgwqDCoMKgIHRv IGEgRE9UUyBjbGllbnQgdG8gaW5kaWNhdGUgdGhhdCB0aGlzDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ IG1pdGlnYXRpb24NCj4gPj4+Pj4+Pj4gcmVxdWVzdA0KPiA+Pj4+Pj4+Pj4+IGlzDQo+ID4+Pj4+ Pj4+Pj4+Pj4+Pj4+ICAgICAgICDCoMKgwqDCoMKgIHJlamVjdGVkIGJlY2F1c2UgYSBjb25mbGlj dCBpcyBkZXRlY3RlZC4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4g SWYgYSBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgcmVqZWN0ZWQgZHVlIHRvIGEgY29uZmxpY3QsDQo+ ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IGl0IGlzDQo+ID4+Pj4+Pj4+IHJlamVjdGVkDQo+ID4+Pj4+Pj4+ Pj4+PiBhdA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiBQVVQoNC4wOShDb25mbGljdCkpLCBzbyBubyBy ZXNvdXJjZSB3aWxsIGJlIGNyZWF0ZWQuDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IFNvIGl0IGxvb2tz IHRoZXJlIGlzIG5vIGNoYW5jZSB0byByZXR1cm4gJzggKEF0dGFjaw0KPiA+Pj4+Pj4+Pj4+Pj4+ Pj4+PiBtaXRpZ2F0aW9uIGlzDQo+ID4+Pj4+Pj4+Pj4+Pj4+PiByZWplY3RlZCknLg0KPiA+Pj4+ Pj4+Pj4+Pj4+Pj4+PiB0aGFua3MsDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IEthbmFtZQ0KPiA+Pj4+ Pj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiBPbiAyMDE4LzA0LzEwIDIyOjQ3LCBt b2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4+Pj4+IHdyb3RlOg0KPiA+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4gUmUtLA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+ IFRoaXMgdmVyc2lvbiBhZGRyZXNzZXMgdGhlIGNvbW1lbnRzIHJhaXNlZCBkdXJpbmcgdGhlDQo+ ID4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBXR0xDLCBpbg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gcGFydGljdWxh cjoNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+IC0gKENsYXJpZmljYXRpb24pIEluZGljYXRlIHRoYXQg b25seSBvbmUgaG9wLWxpbWl0IGlzDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBpbmNsdWRlZA0KPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gLSBTcGVjaWZ5IHRoZSBsb29wIGRpYWdub3N0aWMgcGF5bG9hZA0K PiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gLSAoQ2xhcmlmaWNhdGlvbikgSW5kaWNhdGUgZXhwbGljaXRs eSB0aGF0IEdFVA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gbWVzc2FnZXMgd2l0aA0KPiA+Pj4+Pj4g J3NpZCcNCj4gPj4+Pj4+Pj4+PiBhcmUNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gYWxsb3dlZA0KPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gLSBVcGRhdGUgdGhlIHJlZGlyZWN0IGJlaGF2aW9yLg0KPiA+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+IENoZWVycywNCj4gPj4+Pj4+Pj4+ Pj4+Pj4+Pj4+IE1lZA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+ PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0gRGXCoDogRG90cw0KPiA+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4+IFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBEZSBsYSBwYXJ0IGRlDQo+ID4+ Pj4+PiBpbnRlcm5ldC0NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBkcmFmdHNAaWV0Zi5vcmcNCj4g Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBFbnZvecOpwqA6IG1hcmRpIDEwIGF2cmlsIDIwMTggMTU6NDAg w4DCoDoNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBpLWQtYW5ub3VuY2VAaWV0Zi5vcmcgQ2PCoDog ZG90c0BpZXRmLm9yZyBPYmpldMKgOg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFtEb3RzXSBJLUQg QWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtDQo+ID4+Pj4+PiAxOS50eHQN Cj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IEEgTmV3IEludGVy bmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lDQo+ID4+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4gSW50ZXJuZXQtDQo+ID4+Pj4+Pj4+IERyYWZ0cw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ IGRpcmVjdG9yaWVzLg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFRoaXMgZHJhZnQgaXMgYSB3b3Jr IGl0ZW0gb2YgdGhlIEREb1MgT3BlbiBUaHJlYXQNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBTaWdu YWxpbmcgV0cNCj4gPj4+Pj4+IG9mDQo+ID4+Pj4+Pj4+Pj4gdGhlDQo+ID4+Pj4+Pj4+Pj4+Pj4+ Pj4+IElFVEYuDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgVGl0bGUgICAg ICAgICAgIDogRGlzdHJpYnV0ZWQgRGVuaWFsLW9mLQ0KPiA+Pj4+IFNlcnZpY2UNCj4gPj4+Pj4+ IE9wZW4NCj4gPj4+Pj4+Pj4+Pj4+IFRocmVhdA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiBTaWduYWxp bmcNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAoRE9UUykgU2lnbmFsIENoYW5uZWwgU3BlY2lmaWNh dGlvbg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgIEF1dGhvcnMgICAgICAg ICA6IFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIE1vaGFtZWQgQm91Y2FkYWlyDQo+ID4+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUHJhc2hhbnRoIFBhdGlsDQo+ ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQW5k cmV3IE1vcnRlbnNlbg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIE5payBUZWFndWUNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAJRmlsZW5hbWUg ICAgICAgIDogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLQ0KPiA+PiAxOS50eHQNCj4g Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAJUGFnZXMgICAgICAgICAgIDogODYNCj4gPj4+Pj4+Pj4+Pj4+ Pj4+Pj4+PiAJRGF0ZSAgICAgICAgICAgIDogMjAxOC0wNC0xMA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gQWJzdHJhY3Q6DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4gICAgICAgICAgIFRoaXMgZG9jdW1lbnQgc3BlY2lmaWVzIHRoZSBET1RTIHNpZ25hbA0KPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IGNoYW5uZWwsIGENCj4gPj4+Pj4+Pj4gcHJvdG9jb2wNCj4gPj4+ Pj4+Pj4+PiBmb3INCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgc2lnbmFsaW5nIHRo ZSBuZWVkIGZvciBwcm90ZWN0aW9uIGFnYWluc3QNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBEaXN0 cmlidXRlZA0KPiA+Pj4+Pj4+Pj4+IERlbmlhbC0NCj4gPj4+Pj4+Pj4+Pj4+IG9mLQ0KPiA+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICBTZXJ2aWNlIChERG9TKSBhdHRhY2tzIHRvIGEgc2Vy dmVyIGNhcGFibGUNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBvZiBlbmFibGluZw0KPiA+Pj4+Pj4+ Pj4+IG5ldHdvcmsNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgdHJhZmZpYyBtaXRp Z2F0aW9uIG9uIGJlaGFsZiBvZiB0aGUNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiByZXF1ZXN0aW5n DQo+ID4+Pj4gY2xpZW50Lg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICBBIGNvbXBh bmlvbiBkb2N1bWVudCBkZWZpbmVzIHRoZSBET1RTIGRhdGENCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+ PiBjaGFubmVsLCBhDQo+ID4+Pj4+Pj4+Pj4gc2VwYXJhdGUNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+ PiAgICAgICAgICAgcmVsaWFibGUgY29tbXVuaWNhdGlvbiBsYXllciBmb3IgRE9UUw0KPiA+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4+IG1hbmFnZW1lbnQgYW5kDQo+ID4+Pj4+Pj4+Pj4+Pj4+IGNvbmZpZ3Vy YXRpb24NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgcHVycG9zZXMuDQo+ID4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBFZGl0b3JpYWwgTm90ZSAoVG8g YmUgcmVtb3ZlZCBieSBSRkMgRWRpdG9yKQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgIFBsZWFzZSB1cGRhdGUgdGhlc2Ugc3RhdGVtZW50cyB3 aXRoIHRoZSBSRkMNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBudW1iZXIgdG8NCj4gPj4+Pj4+IGJl DQo+ID4+Pj4+Pj4+Pj4+PiBhc3NpZ25lZA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gdG8NCj4gPj4+Pj4+ Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgdGhpcyBkb2N1bWVudDoNCj4gPj4+Pj4+Pj4+Pj4+Pj4+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICBvICAiVGhpcyB2ZXJzaW9uIG9m IHRoaXMgWUFORyBtb2R1bGUgaXMNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBwYXJ0IG9mIFJGQw0K PiA+Pj4+Pj4+PiBYWFhYOyINCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgbyAgIlJG QyBYWFhYOiBEaXN0cmlidXRlZCBEZW5pYWwtb2YtU2VydmljZQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+IE9wZW4NCj4gPj4+Pj4+IFRocmVhdA0KPiA+Pj4+Pj4+Pj4+Pj4gU2lnbmFsaW5nDQo+ID4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgIChET1RTKSBTaWduYWwgQ2hhbm5lbCBTcGVj aWZpY2F0aW9uIjsNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ ICAgICAgICAgICBvICAifCBbUkZDWFhYWF0gfCINCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICBvICByZWZlcmVuY2U6IFJGQyBYWFhYDQo+ID4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgUGxlYXNl IHVwZGF0ZSBUQkQgc3RhdGVtZW50cyB3aXRoIHRoZSBwb3J0DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4gbnVtYmVyIHRvDQo+ID4+Pj4+PiBiZQ0KPiA+Pj4+Pj4+Pj4+Pj4gYXNzaWduZWQNCj4gPj4+ Pj4+Pj4+Pj4+Pj4gdG8NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgRE9UUyBTaWdu YWwgQ2hhbm5lbCBQcm90b2NvbC4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+ICAgICAgICAgICBBbHNvLCBwbGVhc2UgdXBkYXRlIHRoZSAicmV2aXNpb24iIGRh dGUgb2YNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiB0aGUgWUFORw0KPiA+Pj4+Pj4+PiBtb2R1bGUu DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gVGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVzIHBhZ2Ug Zm9yIHRoaXMgZHJhZnQgaXM6DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gaHR0cHM6Ly9kYXRhdHJh Y2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1kb3RzLXNpZw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+IG5hbC0NCj4gPj4+Pj4+IGNoYW5uZWwvDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gVGhlcmUg YXJlIGFsc28gaHRtbGl6ZWQgdmVyc2lvbnMgYXZhaWxhYmxlIGF0Og0KPiA+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4+IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWRvdHMtc2lnbmFs LWMNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBoYW5uDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gZWwt MTkNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9odG1sL2RyYWZ0LWlldGYtZG90DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gcy1zaQ0KPiA+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4+IGduYWwtDQo+ID4+Pj4+Pj4+Pj4gY2hhbm5lbC0NCj4gPj4+Pj4+Pj4+ Pj4+Pj4gMTkNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBBIGRpZmYgZnJvbSB0aGUgcHJldmlvdXMg dmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtZG90cy1zaQ0KPiA+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+IGduYWwNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAtDQo+ID4+Pj4+PiBjaGFubmVs LQ0KPiA+Pj4+Pj4+PiAxOQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFBsZWFzZSBub3RlIHRoYXQg aXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IGZy b20gdGhlIHRpbWUNCj4gPj4+Pj4+IG9mDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IHN1Ym1pc3Npb24N Cj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiB1bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlm ZiBhcmUgYXZhaWxhYmxlIGF0DQo+ID4+Pj4+Pj4+Pj4gdG9vbHMuaWV0Zi5vcmcuDQo+ID4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4gSW50ZXJuZXQtRHJhZnRzIGFyZSBhbHNvIGF2YWlsYWJsZSBieSBhbm9u eW1vdXMgRlRQIGF0Og0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IGZ0cDovL2Z0cC5pZXRmLm9yZy9p bnRlcm5ldC1kcmFmdHMvDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+ Pj4+Pg0KPiA+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+IF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+Pj4+Pj4+ Pj4+Pj4+Pj4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gRG90c0Bp ZXRmLm9yZw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9kb3RzDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4gX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+Pj4+Pj4+Pj4+Pj4+PiBEb3RzIG1haWxp bmcgbGlzdA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+Pj4+Pj4+ Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPj4+Pj4+ Pj4+Pj4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N Cj4gPj4+Pj4+Pj4+Pj4+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPj4+Pj4+Pj4+Pj4+Pj4gRG90 c0BpZXRmLm9yZw0KPiA+Pj4+Pj4+Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2RvdHMNCj4gPj4+Pj4+Pj4+Pj4+PiBfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KPiA+Pj4+Pj4+Pj4+Pj4+IERvdHMgbWFpbGluZyBsaXN0 DQo+ID4+Pj4+Pj4+Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+Pj4+Pj4+Pj4+Pj4+IGh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+Pj4+Pj4+Pj4+PiBfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+Pj4+Pj4+Pj4+PiBE b3RzIG1haWxpbmcgbGlzdA0KPiA+Pj4+Pj4+Pj4+PiBEb3RzQGlldGYub3JnDQo+ID4+Pj4+Pj4+ Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+Pj4+Pj4+ Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+ Pj4+Pj4+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4+Pj4+Pj4+PiBEb3RzQGlldGYub3JnDQo+ID4+ Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPj4+ Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+ Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+Pj4+PiBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPiBfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+IERvdHMgbWFpbGluZyBsaXN0 DQo+ID4gRG90c0BpZXRmLm9yZw0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vZG90cw0KPiANCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NCj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gRG90c0BpZXRmLm9yZw0KPiBodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCg== From nobody Wed May 16 03:23:36 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE17E12D7EA for ; Wed, 16 May 2018 03:23:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9zc328sGbYMp for ; Wed, 16 May 2018 03:23:33 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49D8A12D7E4 for ; Wed, 16 May 2018 03:23:33 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fItak-0000pL-CG for ietf-supjps-dots@ietf.org; Wed, 16 May 2018 11:23:30 +0100 From: "Jon Shallow" To: Date: Wed, 16 May 2018 11:23:30 +0100 Message-ID: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_025E_01D3ED08.5130A4A0" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdPs/+9TEvk/O5CYS8+qOpb9I1vXhA== Content-Language: en-gb Archived-At: Subject: [Dots] DOTS server crash/restart with Observed mitigations/Configuration X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 May 2018 10:23:35 -0000 This is a multipart message in MIME format. ------=_NextPart_000_025E_01D3ED08.5130A4A0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi there, For the signal channel, it is easy to maintain a persistent list of active mitigations. Should the DOTS server (unexpectedly) stop and restart, then it is easy to rebuild the current active mitigations. However, to rebuild the list of active Observations of the current mitigations / configuration changes is considerably more difficult as the DOTS server would also need to maintain a list of client IPs/source ports etc. along with Tokens and Queries and (D)TLS state so that unsolicited Observe responses can continue to be sent back to the clients. I don't really think that this is a practical ask. As the DOTS server restarted, existing (D)TLS sessions used by the DOTS client will fail. So, the heartbeat mechanism will eventually time out and I guess that the DOTS client should detect this and re-do all of the Observe requests (along with making sure that all the active mitigations are as expected). However in Peace time Heartbeats may not being used. However at Mitigation time heartbeats may fail. Would it make sense to add to the signal channel an extra parameter that the DOTS server can send to the client in any response in the form of "last-restarted" : seconds-since-epoch Which the client can use to detected the restart. I appreciate in peace time there may not be any DOTS client requests (or heartbeat) for a long time. I'm open to suggestions. Regards Jon ------=_NextPart_000_025E_01D3ED08.5130A4A0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi = there,

 

For the signal channel, it is easy to maintain a = persistent list of active mitigations.  Should the DOTS server = (unexpectedly) stop and restart, then it is easy to rebuild the current = active mitigations.

 

However, to = rebuild the list of active Observations of the current mitigations / = configuration changes is considerably more difficult as the DOTS server = would also need to maintain a list of client IPs/source ports etc. along = with Tokens and Queries and (D)TLS state so that unsolicited Observe = responses can continue to be sent back to the clients.  I = don’t really think that this is a practical ask.

 

As the DOTS = server restarted, existing (D)TLS sessions used by the DOTS client will = fail.  So, the heartbeat mechanism will eventually time out =  and I guess that the DOTS client should detect this and re-do all = of the Observe requests (along with making sure that all the active = mitigations are as expected).

 

However in = Peace time Heartbeats may not being used.

However at Mitigation time heartbeats may = fail.

 

Would it make sense to add to the signal channel an = extra parameter that the DOTS server can send to the client in any = response in the form of

“last-restarted” : = seconds-since-epoch

Which the client = can use to detected the restart.  I appreciate in peace time there = may not be any DOTS client requests (or heartbeat) for a long = time.

 

I’m open to suggestions.

 

Regards

 

Jon

 

 

 

 

------=_NextPart_000_025E_01D3ED08.5130A4A0-- From nobody Wed May 16 04:55:28 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AA6812D870 for ; Wed, 16 May 2018 04:55:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TNo0hNNacRxa for ; Wed, 16 May 2018 04:55:19 -0700 (PDT) Received: from orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D785912EABB for ; Wed, 16 May 2018 04:55:18 -0700 (PDT) Received: from opfedar07.francetelecom.fr (unknown [xx.xx.xx.9]) by opfedar22.francetelecom.fr (ESMTP service) with ESMTP id 3F26D60771; Wed, 16 May 2018 13:55:17 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.18]) by opfedar07.francetelecom.fr (ESMTP service) with ESMTP id 13D03C0068; Wed, 16 May 2018 13:55:17 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM34.corporate.adroot.infra.ftgroup ([fe80::cba:56d0:a732:ef5a%19]) with mapi id 14.03.0389.001; Wed, 16 May 2018 13:55:16 +0200 From: To: Jon Shallow , "dots@ietf.org" Thread-Topic: [Dots] DOTS server crash/restart with Observed mitigations/Configuration Thread-Index: AdPs/+9TEvk/O5CYS8+qOpb9I1vXhAACuBlA Date: Wed, 16 May 2018 11:55:15 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> In-Reply-To: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93302DF1BF79OPEXCLILMA3corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] DOTS server crash/restart with Observed mitigations/Configuration X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 May 2018 11:55:24 -0000 --_000_787AE7BB302AE849A7480A190F8B93302DF1BF79OPEXCLILMA3corp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Jon, Please see inline. Cheers, Med De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow Envoy=E9 : mercredi 16 mai 2018 12:24 =C0 : dots@ietf.org Objet : [Dots] DOTS server crash/restart with Observed mitigations/Configur= ation Hi there, For the signal channel, it is easy to maintain a persistent list of active = mitigations. Should the DOTS server (unexpectedly) stop and restart, then = it is easy to rebuild the current active mitigations. [Med] The list of active mitigations is the "core" state data to be maintai= ned by a server. If we assume that list can be reliably rebuilt, then there= is no extension needed to the signal channel to handle this failure case. However, to rebuild the list of active Observations of the current mitigati= ons / configuration changes is considerably more difficult as the DOTS serv= er would also need to maintain a list of client IPs/source ports etc. along= with Tokens and Queries and (D)TLS state so that unsolicited Observe respo= nses can continue to be sent back to the clients. I don't really think tha= t this is a practical ask. [Med] First, this can be considered as deployment-specific. As such in some= deployments, there is no need to support automatic means to detect state l= oss at the server side. Second, is it really problematic for the DDoS mitig= ation that list is lost by a server? I guess, the answer is no if we assume= the list of mitigations themselves is maintained. As the DOTS server restarted, existing (D)TLS sessions used by the DOTS cli= ent will fail. So, the heartbeat mechanism will eventually time out and I= guess that the DOTS client should detect this and re-do all of the Observe= requests (along with making sure that all the active mitigations are as ex= pected). [Med] Including clients in networks under active attacks? Isn't this overlo= ading the server while dealing with ongoing attacks? However in Peace time Heartbeats may not being used. However at Mitigation time heartbeats may fail. Would it make sense to add to the signal channel an extra parameter that th= e DOTS server can send to the client in any response in the form of "last-restarted" : seconds-since-epoch Which the client can use to detected the restart. [Med] We used to have an epoch-based approach for a statefull service (see = https://tools.ietf.org/html/rfc6887#section-8.5). The details are not restr= icted to just signalling the epoch value but to the logic to handle it at t= he client side. Further, there are some aspects to be taken into account wh= en configuring redundancy servers when an anycast address is used. If the s= ame initial epoch value is configured, the client may not detect a backup s= erver is used and hence may not reinstall state. A tweak is to configure di= stinct epoch values (e.g., +/- 24h difference between a server redundancy g= roup). The epoch is justified for 6887 because we wanted to recover state loss, wh= ile in the DOTS case we don't have the same model given that, as you rightf= ully said above, the current active mitigations can be rebuilt at the serve= r side without involving clients. I appreciate in peace time there may not be any DOTS client requests (or = heartbeat) for a long time. I'm open to suggestions. Regards Jon --_000_787AE7BB302AE849A7480A190F8B93302DF1BF79OPEXCLILMA3corp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi Jon,

 

Please see inline.

 

Cheers,

Med

 

De : Dots [mailto:dots-bounces@ietf.= org] De la part de Jon Shallow
Envoy=E9 : mercredi 16 mai 2018 12:24
=C0 : dots@ietf.org
Objet : [Dots] DOTS server crash/restart with Observed mitigati= ons/Configuration

 

Hi there,

 

For the signal channel, it is e= asy to maintain a persistent list of active mitigations.  Should the D= OTS server (unexpectedly) stop and restart, then it is easy to rebuild the = current active mitigations.

 

[Med] The list of active mitiga= tions is the “core” state data to be maintained by a server. If= we assume that list can be reliably rebuilt, then there is no extension needed to the signal channel to handle this failure case.

 

However, to rebuild the list of= active Observations of the current mitigations / configuration changes is = considerably more difficult as the DOTS server would also need to maintain = a list of client IPs/source ports etc. along with Tokens and Queries and (D)TLS state so that unsolicited Observe= responses can continue to be sent back to the clients.  I don’t= really think that this is a practical ask.

 

[Med] First, this can be consid= ered as deployment-specific. As such in some deployments, there is no need = to support automatic means to detect state loss at the server side. Second, is it really problematic for the DDoS mitigati= on that list is lost by a server? I guess, the answer is no if we assume th= e list of mitigations themselves is maintained.

 

As the DOTS server restarted, e= xisting (D)TLS sessions used by the DOTS client will fail.  So, the he= artbeat mechanism will eventually time out  and I guess that the DOTS = client should detect this and re-do all of the Observe requests (along with making sure that all the active mitigations a= re as expected).

 

[Med] Including clients in netw= orks under active attacks? Isn’t this overloading the server while de= aling with ongoing attacks?  

 

However in Peace time Heartbeat= s may not being used.

However at Mitigation time hear= tbeats may fail.

 

Would it make sense to add to t= he signal channel an extra parameter that the DOTS server can send to the c= lient in any response in the form of

“last-restarted” : = seconds-since-epoch

Which the client can use to det= ected the restart.

 

[Med] We used to have an epoch-= based approach for a statefull service (see https://tools.i= etf.org/html/rfc6887#section-8.5). The details are not restricted to ju= st signalling the epoch value but to the logic to handle it at the client s= ide. Further, there are some aspects to be taken into account when configuring redundancy servers when an anyca= st address is used. If the same initial epoch value is configured, the clie= nt may not detect a backup server is used and hence may not reinstall state= . A tweak is to configure distinct epoch values (e.g., +/- 24h difference between a server redundancy gro= up).

 

The epoch is justified for 6887= because we wanted to recover state loss, while in the DOTS case we donR= 17;t have the same model given that, as you rightfully said above, the current active mitigations can be rebuilt at the server si= de without involving clients.  

 

  I appreciate in peace ti= me there may not be any DOTS client requests (or heartbeat) for a long time= .

 

I’m open to suggestions.<= o:p>

 

Regards

 

Jon

 

 

 

 

--_000_787AE7BB302AE849A7480A190F8B93302DF1BF79OPEXCLILMA3corp_-- From nobody Wed May 16 05:41:57 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 39703120713 for ; Wed, 16 May 2018 05:41:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id meAZE11WhAjt for ; Wed, 16 May 2018 05:41:52 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F7E0127076 for ; Wed, 16 May 2018 05:41:52 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fIvkc-0000uR-GC; Wed, 16 May 2018 13:41:50 +0100 From: "Jon Shallow" To: , References: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Date: Wed, 16 May 2018 13:41:50 +0100 Message-ID: <02ad01d3ed13$42a0c3b0$c7e24b10$@jpshallow.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_02AE_01D3ED1B.A4652BB0" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIW1wbd0mEd6XcqqteS3FYBOJVHmAGS49n4o5/Vt1A= Content-Language: en-gb Archived-At: Subject: Re: [Dots] DOTS server crash/restart with Observed mitigations/Configuration X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 May 2018 12:41:55 -0000 This is a multipart message in MIME format. ------=_NextPart_000_02AE_01D3ED1B.A4652BB0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Med, =20 See inline. =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of mohamed.boucadair@orange.com Sent: 16 May 2018 12:55 To: Jon Shallow; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed mitigations/Configuration =20 Hi Jon,=20 =20 Please see inline.=20 =20 Cheers, Med =20 De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow Envoy=E9 : mercredi 16 mai 2018 12:24 =C0 : dots@ietf.org Objet : [Dots] DOTS server crash/restart with Observed mitigations/Configuration =20 Hi there, =20 For the signal channel, it is easy to maintain a persistent list of = active mitigations. Should the DOTS server (unexpectedly) stop and restart, = then it is easy to rebuild the current active mitigations. =20 [Med] The list of active mitigations is the =93core=94 state data to be maintained by a server. If we assume that list can be reliably rebuilt, = then there is no extension needed to the signal channel to handle this = failure case. =20 [Jon] Agreed. This was just me building up the background to the = scenario. =20 However, to rebuild the list of active Observations of the current mitigations / configuration changes is considerably more difficult as = the DOTS server would also need to maintain a list of client IPs/source = ports etc. along with Tokens and Queries and (D)TLS state so that unsolicited Observe responses can continue to be sent back to the clients. I = don=92t really think that this is a practical ask. =20 [Med] First, this can be considered as deployment-specific. As such in = some deployments, there is no need to support automatic means to detect state loss at the server side. Second, is it really problematic for the DDoS mitigation that list is lost by a server? I guess, the answer is no if = we assume the list of mitigations themselves is maintained.=20 =20 [Jon] My concern is that the DOTS clients would not see the change in mitigation state, or would not see that there is a new signal channel configuration (if they were being Observed). The DOTS client/server = would be out of sync with what is happening and the DOTS client would not = necessarily know that it has to take some action to get back to the state before the DOTS server outage. =20 As the DOTS server restarted, existing (D)TLS sessions used by the DOTS client will fail. So, the heartbeat mechanism will eventually time out = and I guess that the DOTS client should detect this and re-do all of the = Observe requests (along with making sure that all the active mitigations are as expected). =20 [Med] Including clients in networks under active attacks? Isn=92t this overloading the server while dealing with ongoing attacks? =20 =20 [Jon] Yes, it would =96 hence I did not really want to have to do this whenever a heartbeat failed, but only do it when the DOTS client = =93knows=94 that the server has had an outage. =20 However in Peace time Heartbeats may not being used. However at Mitigation time heartbeats may fail. =20 Would it make sense to add to the signal channel an extra parameter that = the DOTS server can send to the client in any response in the form of=20 =93last-restarted=94 : seconds-since-epoch Which the client can use to detected the restart. =20 [Med] We used to have an epoch-based approach for a statefull service = (see https://tools.ietf.org/html/rfc6887#section-8.5). The details are not restricted to just signalling the epoch value but to the logic to handle = it at the client side. Further, there are some aspects to be taken into = account when configuring redundancy servers when an anycast address is used. If = the same initial epoch value is configured, the client may not detect a = backup server is used and hence may not reinstall state.. A tweak is to = configure distinct epoch values (e.g., +/- 24h difference between a server = redundancy group).=20 =20 The epoch is justified for 6887 because we wanted to recover state loss, while in the DOTS case we don=92t have the same model given that, as you rightfully said above, the current active mitigations can be rebuilt at = the server side without involving clients. =20 =20 [Jon] So this method sets epoch time back to 0 whenever there is a = restart, rather that report on the number of seconds since Jan 1 1970. That I = can handle. However anycast (though redundant servers are currently out of spec) where 2 or more servers restart and update the start time at = exactly the same time is possible, but unlikely. This could be handled by the anycast servers communicating and seeing they both have the same start = time so one backs off (in time terms). =20 [Jon] I=92m just interested in how to recover Observe loss. =20 I appreciate in peace time there may not be any DOTS client requests = (or heartbeat) for a long time.. =20 I=92m open to suggestions. =20 Regards =20 Jon =20 =20 =20 =20 ------=_NextPart_000_02AE_01D3ED1B.A4652BB0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi Med,

 

See = inline.

 

Regards

 

Jon

 

From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of = mohamed.boucadair@orange.com
Sent: 16 May 2018 = 12:55
To: Jon Shallow; dots@ietf.org
Subject: Re: = [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

Hi Jon,

 

Please see inline.

 

Cheers,

Med

 

De : Dots [mailto:dots-bounces@ietf.org] De la part de = Jon Shallow
Envoy=E9 : mercredi 16 mai 2018 = 12:24
=C0 : dots@ietf.org
Objet : [Dots] = DOTS server crash/restart with Observed = mitigations/Configuration

 

Hi there,

 

For the = signal channel, it is easy to maintain a persistent list of active = mitigations.  Should the DOTS server (unexpectedly) stop and = restart, then it is easy to rebuild the current active = mitigations.

 

[Med] = The list of active mitigations is the “core” state data to = be maintained by a server. If we assume that list can be reliably = rebuilt, then there is no extension needed to the signal channel to = handle this failure case.

 

[Jon] Agreed.=A0 This = was just me building up the background to the = scenario.

 

However, to rebuild the list of active Observations of = the current mitigations / configuration changes is considerably more = difficult as the DOTS server would also need to maintain a list of = client IPs/source ports etc. along with Tokens and Queries and (D)TLS = state so that unsolicited Observe responses can continue to be sent back = to the clients.  I don’t really think that this is a = practical ask.

 

[Med] = First, this can be considered as deployment-specific. As such in some = deployments, there is no need to support automatic means to detect state = loss at the server side. Second, is it really problematic for the DDoS = mitigation that list is lost by a server? I guess, the answer is no if = we assume the list of mitigations themselves is maintained. =

 

[Jon] My concern is that = the DOTS clients would not see the change in mitigation state, or would = not see that there is a new signal channel configuration (if they were = being Observed). The DOTS client/server would be out of sync with what = is happening and the DOTS client would not necessarily know that it has = to take some action to get back to the state before the DOTS server = outage.

 

As the DOTS server restarted, existing (D)TLS sessions = used by the DOTS client will fail.  So, the heartbeat mechanism = will eventually time out  and I guess that the DOTS client should = detect this and re-do all of the Observe requests (along with making = sure that all the active mitigations are as expected).

 

[Med] = Including clients in networks under active attacks? Isn’t this = overloading the server while dealing with ongoing attacks? =  

 

[Jon] Yes, it would = – hence I did not really want to have to do this whenever a = heartbeat failed, but only do it when the DOTS client = “knows” that the server has had an = outage.

 

However in Peace time Heartbeats may not being = used.

However at Mitigation time = heartbeats may fail.

 

Would it = make sense to add to the signal channel an extra parameter that the DOTS = server can send to the client in any response in the form of =

“last-restarted” : = seconds-since-epoch

Which the client = can use to detected the restart.

 

[Med] = We used to have an epoch-based approach for a statefull service (see https://tools.ie= tf.org/html/rfc6887#section-8.5). The details are not restricted to = just signalling the epoch value but to the logic to handle it at the = client side. Further, there are some aspects to be taken into account = when configuring redundancy servers when an anycast address is used. If = the same initial epoch value is configured, the client may not detect a = backup server is used and hence may not reinstall state.. A tweak is to = configure distinct epoch values (e.g., +/- 24h difference between a = server redundancy group).

 

The = epoch is justified for 6887 because we wanted to recover state loss, = while in the DOTS case we don’t have the same model given that, as = you rightfully said above, the current active mitigations can be rebuilt = at the server side without involving clients. =  

 

[Jon] So this method = sets epoch time back to 0 whenever there is a restart, rather that = report on the number of seconds since Jan 1 1970. =A0=A0That I can = handle.=A0 However anycast (though redundant servers are currently out = of spec) where 2 or more servers restart and update the start time at = exactly the same time is possible, but unlikely.=A0 This could be = handled by the anycast servers communicating and seeing they both have = the same start time so one backs off (in time = terms).

 

[Jon] I’m just = interested in how to recover Observe loss.

 

  I appreciate in peace time there may not be any = DOTS client requests (or heartbeat) for a long time..

 

I’m = open to suggestions.

 

Regards

 

Jon

 

 

 

 

------=_NextPart_000_02AE_01D3ED1B.A4652BB0-- From nobody Wed May 16 06:45:21 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 17D62126DFF for ; Wed, 16 May 2018 06:45:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6q7CJTymDDT5 for ; Wed, 16 May 2018 06:45:17 -0700 (PDT) Received: from orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 10D991252BA for ; Wed, 16 May 2018 06:45:17 -0700 (PDT) Received: from opfednr04.francetelecom.fr (unknown [xx.xx.xx.68]) by opfednr25.francetelecom.fr (ESMTP service) with ESMTP id 64B4E1800DC; Wed, 16 May 2018 15:45:15 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.27]) by opfednr04.francetelecom.fr (ESMTP service) with ESMTP id 412A54006B; Wed, 16 May 2018 15:45:15 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM7C.corporate.adroot.infra.ftgroup ([fe80::8007:17b:c3b4:d68b%19]) with mapi id 14.03.0389.001; Wed, 16 May 2018 15:45:15 +0200 From: To: Jon Shallow , "dots@ietf.org" Thread-Topic: [Dots] DOTS server crash/restart with Observed mitigations/Configuration Thread-Index: AQIW1wbd0mEd6XcqqteS3FYBOJVHmAGS49n4o5/Vt1CAABp/QA== Date: Wed, 16 May 2018 13:45:14 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF1C138@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <02ad01d3ed13$42a0c3b0$c7e24b10$@jpshallow.com> In-Reply-To: <02ad01d3ed13$42a0c3b0$c7e24b10$@jpshallow.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.6] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93302DF1C138OPEXCLILMA3corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] DOTS server crash/restart with Observed mitigations/Configuration X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 May 2018 13:45:20 -0000 --_000_787AE7BB302AE849A7480A190F8B93302DF1C138OPEXCLILMA3corp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Re-, Please see inline. Cheers, Med De : Jon Shallow [mailto:supjps-ietf@jpshallow.com] Envoy=E9 : mercredi 16 mai 2018 14:42 =C0 : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org Objet : RE: [Dots] DOTS server crash/restart with Observed mitigations/Conf= iguration Hi Med, See inline. Regards Jon From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of mohamed.boucadair@o= range.com Sent: 16 May 2018 12:55 To: Jon Shallow; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed mitigations/Con= figuration Hi Jon, Please see inline. Cheers, Med De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow Envoy=E9 : mercredi 16 mai 2018 12:24 =C0 : dots@ietf.org Objet : [Dots] DOTS server crash/restart with Observed mitigations/Configur= ation Hi there, For the signal channel, it is easy to maintain a persistent list of active = mitigations. Should the DOTS server (unexpectedly) stop and restart, then = it is easy to rebuild the current active mitigations. [Med] The list of active mitigations is the "core" state data to be maintai= ned by a server. If we assume that list can be reliably rebuilt, then there= is no extension needed to the signal channel to handle this failure case. [Jon] Agreed. This was just me building up the background to the scenario. However, to rebuild the list of active Observations of the current mitigati= ons / configuration changes is considerably more difficult as the DOTS serv= er would also need to maintain a list of client IPs/source ports etc. along= with Tokens and Queries and (D)TLS state so that unsolicited Observe respo= nses can continue to be sent back to the clients. I don't really think tha= t this is a practical ask. [Med] First, this can be considered as deployment-specific. As such in some= deployments, there is no need to support automatic means to detect state l= oss at the server side. Second, is it really problematic for the DDoS mitig= ation that list is lost by a server? I guess, the answer is no if we assume= the list of mitigations themselves is maintained. [Jon] My concern is that the DOTS clients would not see the change in mitig= ation state, or would not see that there is a new signal channel configurat= ion (if they were being Observed). The DOTS client/server would be out of s= ync with what is happening and the DOTS client would not necessarily know t= hat it has to take some action to get back to the state before the DOTS ser= ver outage. [Med] The dots client has other means to know the mitigation state. The DOT= S client can observe the status locally (and report it to the server) or se= nd a request to retrieve the status from the server. The out of synch in ob= serve is not that critical for mitigating DDoS attacks. As the DOTS server restarted, existing (D)TLS sessions used by the DOTS cli= ent will fail. So, the heartbeat mechanism will eventually time out and I= guess that the DOTS client should detect this and re-do all of the Observe= requests (along with making sure that all the active mitigations are as ex= pected). [Med] Including clients in networks under active attacks? Isn't this overlo= ading the server while dealing with ongoing attacks? [Jon] Yes, it would - hence I did not really want to have to do this whenev= er a heartbeat failed, but only do it when the DOTS client "knows" that the= server has had an outage. However in Peace time Heartbeats may not being used. However at Mitigation time heartbeats may fail. Would it make sense to add to the signal channel an extra parameter that th= e DOTS server can send to the client in any response in the form of "last-restarted" : seconds-since-epoch Which the client can use to detected the restart. [Med] We used to have an epoch-based approach for a statefull service (see = https://tools.ietf.org/html/rfc6887#section-8.5). The details are not restr= icted to just signalling the epoch value but to the logic to handle it at t= he client side. Further, there are some aspects to be taken into account wh= en configuring redundancy servers when an anycast address is used. If the s= ame initial epoch value is configured, the client may not detect a backup s= erver is used and hence may not reinstall state.. A tweak is to configure d= istinct epoch values (e.g., +/- 24h difference between a server redundancy = group). The epoch is justified for 6887 because we wanted to recover state loss, wh= ile in the DOTS case we don't have the same model given that, as you rightf= ully said above, the current active mitigations can be rebuilt at the serve= r side without involving clients. [Jon] So this method sets epoch time back to 0 whenever there is a restart, [Med] Yes. The epoch is reset each time the state is lost at the server sid= e. rather that report on the number of seconds since Jan 1 1970. That I can = handle. However anycast (though redundant servers are currently out of spe= c) where 2 or more servers restart and update the start time at exactly the= same time is possible, but unlikely. This could be handled by the anycast= servers communicating and seeing they both have the same start time so one= backs off (in time terms). [Jon] I'm just interested in how to recover Observe loss. [Med] I'm not convinced this is really needed given that active mitigations= are not concerned with this failure scenario. I appreciate in peace time there may not be any DOTS client requests (or = heartbeat) for a long time.. I'm open to suggestions. Regards Jon --_000_787AE7BB302AE849A7480A190F8B93302DF1C138OPEXCLILMA3corp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Re-,

 

Please see inline.

 

Cheers,

Med

 

De : Jon Shallow [mailto:supjps-ietf= @jpshallow.com]
Envoy=E9 : mercredi 16 mai 2018 14:42
=C0 : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org
Objet : RE: [Dots] DOTS server crash/restart with Observed miti= gations/Configuration

 

Hi Med,=

&n= bsp;

See inl= ine.

&n= bsp;

Regards=

&n= bsp;

Jon

&n= bsp;

From:= Dots [mailto: dots-bounces@ietf.org] On Behalf Of mohamed.boucadair@orange.com Sent: 16 May 2018 12:55
To: Jon Shallow; dots@ietf.org
Subject: Re: [Dots] DOTS server crash/restart with Observed mitigati= ons/Configuration

 

Hi Jon,

 

Please see inline.

 

Cheers,

Med

 

De : Dots [mailto:dots-bounces@ietf.= org] De la part de Jon Shallow
Envoy=E9 : mercredi 16 mai 2018 12:24
=C0 : dots@ietf.org
Objet : [Dots] DOTS server crash/restart with Observed mitigati= ons/Configuration

 

Hi there,

 

For the signal channel, it is e= asy to maintain a persistent list of active mitigations.  Should the D= OTS server (unexpectedly) stop and restart, then it is easy to rebuild the = current active mitigations.

 

[Med] The list of active mitiga= tions is the “core” state data to be maintained by a server. If= we assume that list can be reliably rebuilt, then there is no extension needed to the signal channel to handle this failure case.

&n= bsp;

[Jon] A= greed.  This was just me building up the background to the scenario.

&n= bsp;

However, to rebuild the list of= active Observations of the current mitigations / configuration changes is = considerably more difficult as the DOTS server would also need to maintain = a list of client IPs/source ports etc. along with Tokens and Queries and (D)TLS state so that unsolicited Observe= responses can continue to be sent back to the clients.  I don’t= really think that this is a practical ask.

 

[Med] First, this can be consid= ered as deployment-specific. As such in some deployments, there is no need = to support automatic means to detect state loss at the server side. Second, is it really problematic for the DDoS mitigati= on that list is lost by a server? I guess, the answer is no if we assume th= e list of mitigations themselves is maintained.

&n= bsp;

[Jon] M= y concern is that the DOTS clients would not see the change in mitigation s= tate, or would not see that there is a new signal channel configuration (if= they were being Observed). The DOTS client/server would be out of sync with what is happening and the DOTS client would not = necessarily know that it has to take some action to get back to the state b= efore the DOTS server outage.

 

[Med] The dots client has other= means to know the mitigation state. The DOTS client can observe the status= locally (and report it to the server) or send a request to retrieve the status from the server. The out of synch in observ= e is not that critical for mitigating DDoS attacks.  

&n= bsp;

As the DOTS server restarted, e= xisting (D)TLS sessions used by the DOTS client will fail.  So, the he= artbeat mechanism will eventually time out  and I guess that the DOTS = client should detect this and re-do all of the Observe requests (along with making sure that all the active mitigations a= re as expected).

 

[Med] Including clients in netw= orks under active attacks? Isn’t this overloading the server while de= aling with ongoing attacks?  

&n= bsp;

[Jon] Y= es, it would – hence I did not really want to have to do this wheneve= r a heartbeat failed, but only do it when the DOTS client “knows̶= 1; that the server has had an outage.

&n= bsp;

However in Peace time Heartbeat= s may not being used.

However at Mitigation time hear= tbeats may fail.

 

Would it make sense to add to t= he signal channel an extra parameter that the DOTS server can send to the c= lient in any response in the form of

“last-restarted” : = seconds-since-epoch

Which the client can use to det= ected the restart.

 

[Med] We used to have an epoch-= based approach for a statefull service (see https://tools.i= etf.org/html/rfc6887#section-8.5). The details are not restricted to ju= st signalling the epoch value but to the logic to handle it at the client s= ide. Further, there are some aspects to be taken into account when configuring redundancy servers when an anyca= st address is used. If the same initial epoch value is configured, the clie= nt may not detect a backup server is used and hence may not reinstall state= .. A tweak is to configure distinct epoch values (e.g., +/- 24h difference between a server redundancy gro= up).

 

The epoch is justified for 6887= because we wanted to recover state loss, while in the DOTS case we donR= 17;t have the same model given that, as you rightfully said above, the current active mitigations can be rebuilt at the server si= de without involving clients.  

 

[Jon] S= o this method sets epoch time back to 0 whenever there is a restart,

[Med] Yes. The epoch is reset e= ach time the state is lost at the server side.

 

rather = that report on the number of seconds since Jan 1 1970.   That I c= an handle.  However anycast (though redundant servers are currently ou= t of spec) where 2 or more servers restart and update the start time at exactly the same time is possible, but unlikely.  T= his could be handled by the anycast servers communicating and seeing they b= oth have the same start time so one backs off (in time terms).

&n= bsp;

[Jon] I= ’m just interested in how to recover Observe loss.<= /p>

[Med] I’m not convinced t= his is really needed given that active mitigations are not concerned with t= his failure scenario.  

&n= bsp;

  I appreciate in peace ti= me there may not be any DOTS client requests (or heartbeat) for a long time= ..

 

I’m open to suggestions.<= o:p>

 

Regards

 

Jon

 

 

 

 

--_000_787AE7BB302AE849A7480A190F8B93302DF1C138OPEXCLILMA3corp_-- From nobody Wed May 16 08:06:06 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E00D9124C27 for ; Wed, 16 May 2018 08:06:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.31 X-Spam-Level: X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mkm-8w_tXCBA for ; Wed, 16 May 2018 08:06:00 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 902961242F7 for ; Wed, 16 May 2018 08:06:00 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1526483162; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:MIME-Version:X-MS-Office365-Filtering-Correlation-Id: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=A 1E3rW7U61HGJmWpSgug85SjQw9gkIzLwXgv18c2h0 I=; b=M40e95Zmk7gG63TCbitLVsg1VzFEXXWcMMSxrJDcsVka WRIB0wXKy1Aeh156HrtuzsjM2zFxX9N1aT5NQDRE9qECL0TWgn J55PYD9WJJYm6BU5WdMya0pPOuJLykaQBvFDZgIeRkSretot0H eNK9IT6VNdCd34OoN7S+4fOGUBw= Received: from DNVEXAPP1N05.corpzone.internalzone.com (unknown [10.44.48.89]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 2fb7_461b_1b8ec767_5034_4a38_abde_6c14e5667d08; Wed, 16 May 2018 10:06:02 -0500 Received: from DNVEXUSR1N10.corpzone.internalzone.com (10.44.48.83) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 May 2018 09:05:18 -0600 Received: from DNVEXUSR1N11.corpzone.internalzone.com (10.44.48.84) by DNVEXUSR1N10.corpzone.internalzone.com (10.44.48.83) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 May 2018 09:05:17 -0600 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXUSR1N11.corpzone.internalzone.com (10.44.48.84) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Wed, 16 May 2018 09:05:17 -0600 Received: from NAM03-BY2-obe.outbound.protection.outlook.com (10.44.176.241) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 May 2018 09:05:16 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB1602.namprd16.prod.outlook.com (10.172.208.144) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.776.11; Wed, 16 May 2018 15:05:15 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8%9]) with mapi id 15.20.0776.010; Wed, 16 May 2018 15:05:15 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , Jon Shallow , "dots@ietf.org" Thread-Topic: [Dots] DOTS server crash/restart with Observed mitigations/Configuration Thread-Index: AdPs/+9TEvk/O5CYS8+qOpb9I1vXhAACuBlAAAIcswAAAjbXAAAByVCQ Date: Wed, 16 May 2018 15:05:14 +0000 Message-ID: References: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <02ad01d3ed13$42a0c3b0$c7e24b10$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1C138@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF1C138@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [122.172.116.209] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB1602; 7:ygGxcijWoqlRBowFTLwXwLZtSWPmLYNxGHvVhZJKU/N7hq833gP0P6EQud31U1IDy2VqxFWM/usMLxLhSGHfFDVR3/jGC5lZvVOpCh0tlBVCnXr4AYmYJKxNtJiDtLGsB2MoT6dxKzvL2b+sPyADYaMyq3OIUaiP3WeRoDYXj0x4QfDI82oYm/APuI0K6UTC5dSUr0Rle6OCsc/KyF8nWXzv/NEcPStQA8X9slQPZhieVcC9UPRoTuqsTXxCtX61 x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB1602; x-ms-traffictypediagnostic: BN6PR16MB1602: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(190756311086443)(158342451672863)(18271650672692)(21748063052155); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(3002001)(3231254)(944501410)(52105095)(10201501046)(149027)(150027)(6041310)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123558120)(20161123560045)(6072148)(201708071742011); SRVR:BN6PR16MB1602; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB1602; x-forefront-prvs: 0674DC6DD3 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(366004)(396003)(346002)(39860400002)(39380400002)(189003)(199004)(32952001)(3846002)(76176011)(59450400001)(6436002)(19609705001)(316002)(72206003)(106356001)(105586002)(99286004)(478600001)(966005)(74316002)(33656002)(606006)(93886005)(53546011)(25786009)(26005)(6506007)(7696005)(9686003)(54896002)(790700001)(110136005)(102836004)(55016002)(236005)(6306002)(2900100001)(6116002)(14454004)(6246003)(3280700002)(8676002)(446003)(476003)(81166006)(81156014)(8936002)(53936002)(2501003)(5890100001)(3660700001)(7736002)(5250100002)(11346002)(486006)(68736007)(2906002)(97736004)(229853002)(66066001)(5660300001)(86362001)(80792005)(186003)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB1602; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: AXCB4px7LKNK9dCXOdCxcNmBGxeBWgEb1zYiRinNyWEZkE7CZEfTfiYuyUo5/nxtm5JnCpxle+AoQrEMtLw8h09Mjk8uH7LkPVYXR6SGP4IZKZEBcKlXuJKyEJGTNAkyC6roJCd3iNhJkaMrC9EyC/7pGZZcTUPQz17MRY0hb9HBpiAvLhllfwcki+EnijhBsRRTNw7Z0EMz4BeekFaf/g== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BN6PR16MB14258C3B7F3C5A876225950CEA920BN6PR16MB1425namp_" MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: d66a516d-3fe2-4b33-6f08-08d5bb3e6e02 X-MS-Exchange-CrossTenant-Network-Message-Id: d66a516d-3fe2-4b33-6f08-08d5bb3e6e02 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 May 2018 15:05:14.9562 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB1602 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6287> : inlines <6639> : streams <1786911> : uri <2642276> Archived-At: Subject: Re: [Dots] DOTS server crash/restart with Observed mitigations/Configuration X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 May 2018 15:06:04 -0000 --_000_BN6PR16MB14258C3B7F3C5A876225950CEA920BN6PR16MB1425namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBkb27igJl0IGdldCB0aGUgcHJvYmxlbS4gSWYgdGhlIHNlcnZlciByZXN0YXJ0cywgKEQpVExT IHN0YXRlIHdpbGwgYmUgbG9zdCBhbmQgc2VydmVyIHdpbGwgcmVqZWN0IGhlYXJ0YmVhdCByZXF1 ZXN0cyBmcm9tIHRoZSBjbGllbnQgKGVpdGhlciBzaWxlbnRseSBvciBzZW5kIGEgZmF0YWwgYWxl cnQgdG8gdGhlIGNsaWVudCkuIERPVFMgY2xpZW50IHdpbGwgaGF2ZSB0byBmb2xsb3cgdGhlIHN0 ZXBzIGluIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWRvdHMtc2lnbmFs LWNoYW5uZWwtMTkjc2VjdGlvbi00LjcgdG8gcmUtZXN0YWJsaXNoIChEKVRMUyBzZXNzaW9uIHdp dGggdGhlIERPVFMgc2VydmVyLg0KDQotVGlydQ0KDQpGcm9tOiBEb3RzIFttYWlsdG86ZG90cy1i b3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNv bQ0KU2VudDogV2VkbmVzZGF5LCBNYXkgMTYsIDIwMTggNzoxNSBQTQ0KVG86IEpvbiBTaGFsbG93 IDxzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tPjsgZG90c0BpZXRmLm9yZw0KU3ViamVjdDogUmU6 IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlv bnMvQ29uZmlndXJhdGlvbg0KDQoNCkNBVVRJT046IEV4dGVybmFsIGVtYWlsLiBEbyBub3QgY2xp Y2sgbGlua3Mgb3Igb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2Vu ZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuDQoNCg0KX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NClJlLSwNCg0KUGxlYXNlIHNlZSBpbmxpbmUuDQoNCkNoZWVycywNCk1l ZA0KDQpEZSA6IEpvbiBTaGFsbG93IFttYWlsdG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbV0N CkVudm95w6kgOiBtZXJjcmVkaSAxNiBtYWkgMjAxOCAxNDo0Mg0Kw4AgOiBCT1VDQURBSVIgTW9o YW1lZCBJTVQvT0xOOyBkb3RzQGlldGYub3JnPG1haWx0bzpkb3RzQGlldGYub3JnPg0KT2JqZXQg OiBSRTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRp Z2F0aW9ucy9Db25maWd1cmF0aW9uDQoNCkhpIE1lZCwNCg0KU2VlIGlubGluZS4NCg0KUmVnYXJk cw0KDQpKb24NCg0KRnJvbTogRG90cyBbbWFpbHRvOiBkb3RzLWJvdW5jZXNAaWV0Zi5vcmc8bWFp bHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZz5dIE9uIEJlaGFsZiBPZiBtb2hhbWVkLmJvdWNhZGFp ckBvcmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPg0KU2VudDog MTYgTWF5IDIwMTggMTI6NTUNClRvOiBKb24gU2hhbGxvdzsgZG90c0BpZXRmLm9yZzxtYWlsdG86 ZG90c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVz dGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24NCg0KSGkgSm9uLA0K DQpQbGVhc2Ugc2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCkRlIDogRG90cyBbbWFpbHRv OmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZSBKb24gU2hhbGxvdw0KRW52b3nD qSA6IG1lcmNyZWRpIDE2IG1haSAyMDE4IDEyOjI0DQrDgCA6IGRvdHNAaWV0Zi5vcmc8bWFpbHRv OmRvdHNAaWV0Zi5vcmc+DQpPYmpldCA6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0 IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0KDQpIaSB0aGVyZSwNCg0K Rm9yIHRoZSBzaWduYWwgY2hhbm5lbCwgaXQgaXMgZWFzeSB0byBtYWludGFpbiBhIHBlcnNpc3Rl bnQgbGlzdCBvZiBhY3RpdmUgbWl0aWdhdGlvbnMuICBTaG91bGQgdGhlIERPVFMgc2VydmVyICh1 bmV4cGVjdGVkbHkpIHN0b3AgYW5kIHJlc3RhcnQsIHRoZW4gaXQgaXMgZWFzeSB0byByZWJ1aWxk IHRoZSBjdXJyZW50IGFjdGl2ZSBtaXRpZ2F0aW9ucy4NCg0KW01lZF0gVGhlIGxpc3Qgb2YgYWN0 aXZlIG1pdGlnYXRpb25zIGlzIHRoZSDigJxjb3Jl4oCdIHN0YXRlIGRhdGEgdG8gYmUgbWFpbnRh aW5lZCBieSBhIHNlcnZlci4gSWYgd2UgYXNzdW1lIHRoYXQgbGlzdCBjYW4gYmUgcmVsaWFibHkg cmVidWlsdCwgdGhlbiB0aGVyZSBpcyBubyBleHRlbnNpb24gbmVlZGVkIHRvIHRoZSBzaWduYWwg Y2hhbm5lbCB0byBoYW5kbGUgdGhpcyBmYWlsdXJlIGNhc2UuDQoNCltKb25dIEFncmVlZC4gIFRo aXMgd2FzIGp1c3QgbWUgYnVpbGRpbmcgdXAgdGhlIGJhY2tncm91bmQgdG8gdGhlIHNjZW5hcmlv Lg0KDQpIb3dldmVyLCB0byByZWJ1aWxkIHRoZSBsaXN0IG9mIGFjdGl2ZSBPYnNlcnZhdGlvbnMg b2YgdGhlIGN1cnJlbnQgbWl0aWdhdGlvbnMgLyBjb25maWd1cmF0aW9uIGNoYW5nZXMgaXMgY29u c2lkZXJhYmx5IG1vcmUgZGlmZmljdWx0IGFzIHRoZSBET1RTIHNlcnZlciB3b3VsZCBhbHNvIG5l ZWQgdG8gbWFpbnRhaW4gYSBsaXN0IG9mIGNsaWVudCBJUHMvc291cmNlIHBvcnRzIGV0Yy4gYWxv bmcgd2l0aCBUb2tlbnMgYW5kIFF1ZXJpZXMgYW5kIChEKVRMUyBzdGF0ZSBzbyB0aGF0IHVuc29s aWNpdGVkIE9ic2VydmUgcmVzcG9uc2VzIGNhbiBjb250aW51ZSB0byBiZSBzZW50IGJhY2sgdG8g dGhlIGNsaWVudHMuICBJIGRvbuKAmXQgcmVhbGx5IHRoaW5rIHRoYXQgdGhpcyBpcyBhIHByYWN0 aWNhbCBhc2suDQoNCltNZWRdIEZpcnN0LCB0aGlzIGNhbiBiZSBjb25zaWRlcmVkIGFzIGRlcGxv eW1lbnQtc3BlY2lmaWMuIEFzIHN1Y2ggaW4gc29tZSBkZXBsb3ltZW50cywgdGhlcmUgaXMgbm8g bmVlZCB0byBzdXBwb3J0IGF1dG9tYXRpYyBtZWFucyB0byBkZXRlY3Qgc3RhdGUgbG9zcyBhdCB0 aGUgc2VydmVyIHNpZGUuIFNlY29uZCwgaXMgaXQgcmVhbGx5IHByb2JsZW1hdGljIGZvciB0aGUg RERvUyBtaXRpZ2F0aW9uIHRoYXQgbGlzdCBpcyBsb3N0IGJ5IGEgc2VydmVyPyBJIGd1ZXNzLCB0 aGUgYW5zd2VyIGlzIG5vIGlmIHdlIGFzc3VtZSB0aGUgbGlzdCBvZiBtaXRpZ2F0aW9ucyB0aGVt c2VsdmVzIGlzIG1haW50YWluZWQuDQoNCltKb25dIE15IGNvbmNlcm4gaXMgdGhhdCB0aGUgRE9U UyBjbGllbnRzIHdvdWxkIG5vdCBzZWUgdGhlIGNoYW5nZSBpbiBtaXRpZ2F0aW9uIHN0YXRlLCBv ciB3b3VsZCBub3Qgc2VlIHRoYXQgdGhlcmUgaXMgYSBuZXcgc2lnbmFsIGNoYW5uZWwgY29uZmln dXJhdGlvbiAoaWYgdGhleSB3ZXJlIGJlaW5nIE9ic2VydmVkKS4gVGhlIERPVFMgY2xpZW50L3Nl cnZlciB3b3VsZCBiZSBvdXQgb2Ygc3luYyB3aXRoIHdoYXQgaXMgaGFwcGVuaW5nIGFuZCB0aGUg RE9UUyBjbGllbnQgd291bGQgbm90IG5lY2Vzc2FyaWx5IGtub3cgdGhhdCBpdCBoYXMgdG8gdGFr ZSBzb21lIGFjdGlvbiB0byBnZXQgYmFjayB0byB0aGUgc3RhdGUgYmVmb3JlIHRoZSBET1RTIHNl cnZlciBvdXRhZ2UuDQoNCltNZWRdIFRoZSBkb3RzIGNsaWVudCBoYXMgb3RoZXIgbWVhbnMgdG8g a25vdyB0aGUgbWl0aWdhdGlvbiBzdGF0ZS4gVGhlIERPVFMgY2xpZW50IGNhbiBvYnNlcnZlIHRo ZSBzdGF0dXMgbG9jYWxseSAoYW5kIHJlcG9ydCBpdCB0byB0aGUgc2VydmVyKSBvciBzZW5kIGEg cmVxdWVzdCB0byByZXRyaWV2ZSB0aGUgc3RhdHVzIGZyb20gdGhlIHNlcnZlci4gVGhlIG91dCBv ZiBzeW5jaCBpbiBvYnNlcnZlIGlzIG5vdCB0aGF0IGNyaXRpY2FsIGZvciBtaXRpZ2F0aW5nIERE b1MgYXR0YWNrcy4NCg0KQXMgdGhlIERPVFMgc2VydmVyIHJlc3RhcnRlZCwgZXhpc3RpbmcgKEQp VExTIHNlc3Npb25zIHVzZWQgYnkgdGhlIERPVFMgY2xpZW50IHdpbGwgZmFpbC4gIFNvLCB0aGUg aGVhcnRiZWF0IG1lY2hhbmlzbSB3aWxsIGV2ZW50dWFsbHkgdGltZSBvdXQgIGFuZCBJIGd1ZXNz IHRoYXQgdGhlIERPVFMgY2xpZW50IHNob3VsZCBkZXRlY3QgdGhpcyBhbmQgcmUtZG8gYWxsIG9m IHRoZSBPYnNlcnZlIHJlcXVlc3RzIChhbG9uZyB3aXRoIG1ha2luZyBzdXJlIHRoYXQgYWxsIHRo ZSBhY3RpdmUgbWl0aWdhdGlvbnMgYXJlIGFzIGV4cGVjdGVkKS4NCg0KW01lZF0gSW5jbHVkaW5n IGNsaWVudHMgaW4gbmV0d29ya3MgdW5kZXIgYWN0aXZlIGF0dGFja3M/IElzbuKAmXQgdGhpcyBv dmVybG9hZGluZyB0aGUgc2VydmVyIHdoaWxlIGRlYWxpbmcgd2l0aCBvbmdvaW5nIGF0dGFja3M/ DQoNCltKb25dIFllcywgaXQgd291bGQg4oCTIGhlbmNlIEkgZGlkIG5vdCByZWFsbHkgd2FudCB0 byBoYXZlIHRvIGRvIHRoaXMgd2hlbmV2ZXIgYSBoZWFydGJlYXQgZmFpbGVkLCBidXQgb25seSBk byBpdCB3aGVuIHRoZSBET1RTIGNsaWVudCDigJxrbm93c+KAnSB0aGF0IHRoZSBzZXJ2ZXIgaGFz IGhhZCBhbiBvdXRhZ2UuDQoNCkhvd2V2ZXIgaW4gUGVhY2UgdGltZSBIZWFydGJlYXRzIG1heSBu b3QgYmVpbmcgdXNlZC4NCkhvd2V2ZXIgYXQgTWl0aWdhdGlvbiB0aW1lIGhlYXJ0YmVhdHMgbWF5 IGZhaWwuDQoNCldvdWxkIGl0IG1ha2Ugc2Vuc2UgdG8gYWRkIHRvIHRoZSBzaWduYWwgY2hhbm5l bCBhbiBleHRyYSBwYXJhbWV0ZXIgdGhhdCB0aGUgRE9UUyBzZXJ2ZXIgY2FuIHNlbmQgdG8gdGhl IGNsaWVudCBpbiBhbnkgcmVzcG9uc2UgaW4gdGhlIGZvcm0gb2YNCuKAnGxhc3QtcmVzdGFydGVk 4oCdIDogc2Vjb25kcy1zaW5jZS1lcG9jaA0KV2hpY2ggdGhlIGNsaWVudCBjYW4gdXNlIHRvIGRl dGVjdGVkIHRoZSByZXN0YXJ0Lg0KDQpbTWVkXSBXZSB1c2VkIHRvIGhhdmUgYW4gZXBvY2gtYmFz ZWQgYXBwcm9hY2ggZm9yIGEgc3RhdGVmdWxsIHNlcnZpY2UgKHNlZSBodHRwczovL3Rvb2xzLmll dGYub3JnL2h0bWwvcmZjNjg4NyNzZWN0aW9uLTguNSkuIFRoZSBkZXRhaWxzIGFyZSBub3QgcmVz dHJpY3RlZCB0byBqdXN0IHNpZ25hbGxpbmcgdGhlIGVwb2NoIHZhbHVlIGJ1dCB0byB0aGUgbG9n aWMgdG8gaGFuZGxlIGl0IGF0IHRoZSBjbGllbnQgc2lkZS4gRnVydGhlciwgdGhlcmUgYXJlIHNv bWUgYXNwZWN0cyB0byBiZSB0YWtlbiBpbnRvIGFjY291bnQgd2hlbiBjb25maWd1cmluZyByZWR1 bmRhbmN5IHNlcnZlcnMgd2hlbiBhbiBhbnljYXN0IGFkZHJlc3MgaXMgdXNlZC4gSWYgdGhlIHNh bWUgaW5pdGlhbCBlcG9jaCB2YWx1ZSBpcyBjb25maWd1cmVkLCB0aGUgY2xpZW50IG1heSBub3Qg ZGV0ZWN0IGEgYmFja3VwIHNlcnZlciBpcyB1c2VkIGFuZCBoZW5jZSBtYXkgbm90IHJlaW5zdGFs bCBzdGF0ZS4uLiBBIHR3ZWFrIGlzIHRvIGNvbmZpZ3VyZSBkaXN0aW5jdCBlcG9jaCB2YWx1ZXMg KGUuZy4sICsvLSAyNGggZGlmZmVyZW5jZSBiZXR3ZWVuIGEgc2VydmVyIHJlZHVuZGFuY3kgZ3Jv dXApLg0KDQpUaGUgZXBvY2ggaXMganVzdGlmaWVkIGZvciA2ODg3IGJlY2F1c2Ugd2Ugd2FudGVk IHRvIHJlY292ZXIgc3RhdGUgbG9zcywgd2hpbGUgaW4gdGhlIERPVFMgY2FzZSB3ZSBkb27igJl0 IGhhdmUgdGhlIHNhbWUgbW9kZWwgZ2l2ZW4gdGhhdCwgYXMgeW91IHJpZ2h0ZnVsbHkgc2FpZCBh Ym92ZSwgdGhlIGN1cnJlbnQgYWN0aXZlIG1pdGlnYXRpb25zIGNhbiBiZSByZWJ1aWx0IGF0IHRo ZSBzZXJ2ZXIgc2lkZSB3aXRob3V0IGludm9sdmluZyBjbGllbnRzLg0KDQpbSm9uXSBTbyB0aGlz IG1ldGhvZCBzZXRzIGVwb2NoIHRpbWUgYmFjayB0byAwIHdoZW5ldmVyIHRoZXJlIGlzIGEgcmVz dGFydCwNCltNZWRdIFllcy4gVGhlIGVwb2NoIGlzIHJlc2V0IGVhY2ggdGltZSB0aGUgc3RhdGUg aXMgbG9zdCBhdCB0aGUgc2VydmVyIHNpZGUuDQoNCnJhdGhlciB0aGF0IHJlcG9ydCBvbiB0aGUg bnVtYmVyIG9mIHNlY29uZHMgc2luY2UgSmFuIDEgMTk3MC4gICBUaGF0IEkgY2FuIGhhbmRsZS4g IEhvd2V2ZXIgYW55Y2FzdCAodGhvdWdoIHJlZHVuZGFudCBzZXJ2ZXJzIGFyZSBjdXJyZW50bHkg b3V0IG9mIHNwZWMpIHdoZXJlIDIgb3IgbW9yZSBzZXJ2ZXJzIHJlc3RhcnQgYW5kIHVwZGF0ZSB0 aGUgc3RhcnQgdGltZSBhdCBleGFjdGx5IHRoZSBzYW1lIHRpbWUgaXMgcG9zc2libGUsIGJ1dCB1 bmxpa2VseS4gIFRoaXMgY291bGQgYmUgaGFuZGxlZCBieSB0aGUgYW55Y2FzdCBzZXJ2ZXJzIGNv bW11bmljYXRpbmcgYW5kIHNlZWluZyB0aGV5IGJvdGggaGF2ZSB0aGUgc2FtZSBzdGFydCB0aW1l IHNvIG9uZSBiYWNrcyBvZmYgKGluIHRpbWUgdGVybXMpLg0KDQpbSm9uXSBJ4oCZbSBqdXN0IGlu dGVyZXN0ZWQgaW4gaG93IHRvIHJlY292ZXIgT2JzZXJ2ZSBsb3NzLg0KW01lZF0gSeKAmW0gbm90 IGNvbnZpbmNlZCB0aGlzIGlzIHJlYWxseSBuZWVkZWQgZ2l2ZW4gdGhhdCBhY3RpdmUgbWl0aWdh dGlvbnMgYXJlIG5vdCBjb25jZXJuZWQgd2l0aCB0aGlzIGZhaWx1cmUgc2NlbmFyaW8uDQoNCiAg SSBhcHByZWNpYXRlIGluIHBlYWNlIHRpbWUgdGhlcmUgbWF5IG5vdCBiZSBhbnkgRE9UUyBjbGll bnQgcmVxdWVzdHMgKG9yIGhlYXJ0YmVhdCkgZm9yIGEgbG9uZyB0aW1lLi4uDQoNCknigJltIG9w ZW4gdG8gc3VnZ2VzdGlvbnMuDQoNClJlZ2FyZHMNCg0KSm9uDQoNCg0KDQoNCg== --_000_BN6PR16MB14258C3B7F3C5A876225950CEA920BN6PR16MB1425namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpEZW5nWGlhbjsNCglwYW5vc2UtMToy IDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OiJcQERlbmdYaWFuIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250 LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDMgNSA0IDQg MiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFs LCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0K CWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJ bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXtt c28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFy Z2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVm dDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglm b250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNw YW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5 OiJDb3VyaWVyIE5ldyI7DQoJY29sb3I6YmxhY2s7DQoJZm9udC13ZWlnaHQ6bm9ybWFsOw0KCWZv bnQtc3R5bGU6bm9ybWFsO30NCnNwYW4uRW1haWxTdHlsZTIwDQoJe21zby1zdHlsZS10eXBlOnBl cnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5 N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgljb2xvcjpibGFjazsNCglmb250LXdlaWdodDpub3Jt YWw7DQoJZm9udC1zdHlsZTpub3JtYWw7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjUNCgl7bXNvLXN0eWxl LXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpl eHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtz aXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2 LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYg Z3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0i MTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86 c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEi IC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBs YW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3Jk U2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0 LWxhbmd1YWdlOlpILUNOIj5JIGRvbuKAmXQgZ2V0IHRoZSBwcm9ibGVtLiBJZiB0aGUgc2VydmVy IHJlc3RhcnRzLCAoRClUTFMgc3RhdGUgd2lsbCBiZSBsb3N0IGFuZCBzZXJ2ZXIgd2lsbCByZWpl Y3QgaGVhcnRiZWF0IHJlcXVlc3RzIGZyb20gdGhlIGNsaWVudCAoZWl0aGVyIHNpbGVudGx5IG9y IHNlbmQgYSBmYXRhbCBhbGVydCB0byB0aGUgY2xpZW50KS4gRE9UUyBjbGllbnQNCiB3aWxsIGhh dmUgdG8gZm9sbG93IHRoZSBzdGVwcyBpbiA8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3Jn L2h0bWwvZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5I3NlY3Rpb24tNC43Ij4NCmh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwt MTkjc2VjdGlvbi00Ljc8L2E+IHRvIHJlLWVzdGFibGlzaCAoRClUTFMgc2Vzc2lvbiB3aXRoIHRo ZSBET1RTIHNlcnZlci4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1m YXJlYXN0LWxhbmd1YWdlOlpILUNOIj4tVGlydTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxhIG5hbWU9Il9NYWlsRW5kQ29tcG9zZSI+PHNwYW4gc3R5bGU9Im1z by1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2E+PC9w Pg0KPHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbEVuZENvbXBvc2UiPjwvc3Bhbj4NCjxk aXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGlu ZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdl OlpILUNOIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdl OlpILUNOIj4gRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFs ZiBPZiA8L2I+bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxicj4NCjxiPlNlbnQ6PC9iPiBX ZWRuZXNkYXksIE1heSAxNiwgMjAxOCA3OjE1IFBNPGJyPg0KPGI+VG86PC9iPiBKb24gU2hhbGxv dyAmbHQ7c3VwanBzLWlldGZAanBzaGFsbG93LmNvbSZndDs7IGRvdHNAaWV0Zi5vcmc8YnI+DQo8 Yj5TdWJqZWN0OjwvYj4gUmU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGgg T2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxkaXY+DQo8dGFibGUgY2xhc3M9Ik1zb05vcm1hbFRhYmxlIiBib3JkZXI9IjEiIGNlbGxz cGFjaW5nPSIzIiBjZWxscGFkZGluZz0iMCIgc3R5bGU9ImJhY2tncm91bmQ6I0YzRkYzMztib3Jk ZXI6c29saWQgIzlCOUE4NyAxLjVwdCI+DQo8dGJvZHk+DQo8dHI+DQo8dGQgc3R5bGU9ImJvcmRl cjpub25lO3BhZGRpbmc6Ljc1cHQgLjc1cHQgLjc1cHQgLjc1cHQiPg0KPHA+PHN0cm9uZz48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjoj OUI4QjNFIj5DQVVUSU9OPC9zcGFuPjwvc3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTom cXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPjo8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Ymxh Y2siPiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4NCiBhdHRhY2ht ZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50 IGlzIHNhZmUuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90 OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L3RkPg0KPC90cj4NCjwvdGJv ZHk+DQo8L3RhYmxlPg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVyIiBzdHls ZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0ibXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6WkgtQ04iPg0KPGhyIHNpemU9IjMiIHdpZHRoPSIxMDAlIiBhbGlnbj0iY2VudGVy Ij4NCjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5SZS0sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPlBsZWFzZSBzZWUgaW5saW5lLg0KPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkNoZWVycyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPk1lZDxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZS IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAw aW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9w OnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFu Z3VhZ2U6RlIiPkRlJm5ic3A7Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21z by1mYXJlYXN0LWxhbmd1YWdlOkZSIj4gSm9uIFNoYWxsb3cgWzxhIGhyZWY9Im1haWx0bzpzdXBq cHMtaWV0ZkBqcHNoYWxsb3cuY29tIj5tYWlsdG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbTwv YT5dDQo8YnI+DQo8Yj5FbnZvecOpJm5ic3A7OjwvYj4gbWVyY3JlZGkgMTYgbWFpIDIwMTggMTQ6 NDI8YnI+DQo8Yj7DgCZuYnNwOzo8L2I+IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE47IDxhIGhy ZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPk9iamV0 Jm5ic3A7OjwvYj4gUkU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2Jz ZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5IaSBNZWQsPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjoj MUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlNlZSBpbmxpbmUuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t R0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5 N0QiPlJlZ2FyZHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHls ZT0iY29sb3I6IzFGNDk3RCI+Sm9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3Vh Z2U6RU4tR0IiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5n dWFnZTpFTi1HQiI+IERvdHMgW21haWx0bzoNCjxhIGhyZWY9Im1haWx0bzpkb3RzLWJvdW5jZXNA aWV0Zi5vcmciPmRvdHMtYm91bmNlc0BpZXRmLm9yZzwvYT5dIDxiPk9uIEJlaGFsZiBPZg0KPC9i PjxhIGhyZWY9Im1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIj5tb2hhbWVkLmJv dWNhZGFpckBvcmFuZ2UuY29tPC9hPjxicj4NCjxiPlNlbnQ6PC9iPiAxNiBNYXkgMjAxOCAxMjo1 NTxicj4NCjxiPlRvOjwvYj4gSm9uIFNoYWxsb3c7IDxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYu b3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0RvdHNdIERP VFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1 cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkhp IEpvbiwNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5QbGVh c2Ugc2VlIGlubGluZS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj5DaGVlcnMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5NZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2 Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0 O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNw YW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rh aG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOkZSIj5EZSZuYnNwOzo8 L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpG UiI+IERvdHMgWzxhIGhyZWY9Im1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmciPm1haWx0bzpk b3RzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XQ0KPGI+RGUgbGEgcGFydCBkZTwvYj4gSm9uIFNoYWxs b3c8YnI+DQo8Yj5FbnZvecOpJm5ic3A7OjwvYj4gbWVyY3JlZGkgMTYgbWFpIDIwMTggMTI6MjQ8 YnI+DQo8Yj7DgCZuYnNwOzo8L2I+IDxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3Rz QGlldGYub3JnPC9hPjxicj4NCjxiPk9iamV0Jm5ic3A7OjwvYj4gW0RvdHNdIERPVFMgc2VydmVy IGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkZSIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+SGkgdGhlcmUsPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdC Ij5Gb3IgdGhlIHNpZ25hbCBjaGFubmVsLCBpdCBpcyBlYXN5IHRvIG1haW50YWluIGEgcGVyc2lz dGVudCBsaXN0IG9mIGFjdGl2ZSBtaXRpZ2F0aW9ucy4mbmJzcDsgU2hvdWxkIHRoZSBET1RTIHNl cnZlciAodW5leHBlY3RlZGx5KSBzdG9wIGFuZCByZXN0YXJ0LCB0aGVuIGl0IGlzIGVhc3kgdG8g cmVidWlsZCB0aGUgY3VycmVudCBhY3RpdmUgbWl0aWdhdGlvbnMuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPltNZWRdIFRoZSBsaXN0IG9mIGFjdGl2 ZSBtaXRpZ2F0aW9ucyBpcyB0aGUg4oCcY29yZeKAnSBzdGF0ZSBkYXRhIHRvIGJlIG1haW50YWlu ZWQgYnkgYSBzZXJ2ZXIuIElmIHdlIGFzc3VtZSB0aGF0IGxpc3QgY2FuIGJlIHJlbGlhYmx5IHJl YnVpbHQsIHRoZW4gdGhlcmUgaXMNCiBubyBleHRlbnNpb24gbmVlZGVkIHRvIHRoZSBzaWduYWwg Y2hhbm5lbCB0byBoYW5kbGUgdGhpcyBmYWlsdXJlIGNhc2UuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjoj MUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25dIEFncmVlZC4m bmJzcDsgVGhpcyB3YXMganVzdCBtZSBidWlsZGluZyB1cCB0aGUgYmFja2dyb3VuZCB0byB0aGUg c2NlbmFyaW8uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+SG93ZXZl ciwgdG8gcmVidWlsZCB0aGUgbGlzdCBvZiBhY3RpdmUgT2JzZXJ2YXRpb25zIG9mIHRoZSBjdXJy ZW50IG1pdGlnYXRpb25zIC8gY29uZmlndXJhdGlvbiBjaGFuZ2VzIGlzIGNvbnNpZGVyYWJseSBt b3JlIGRpZmZpY3VsdCBhcyB0aGUgRE9UUyBzZXJ2ZXIgd291bGQgYWxzbyBuZWVkIHRvIG1haW50 YWluIGEgbGlzdCBvZiBjbGllbnQgSVBzL3NvdXJjZSBwb3J0cyBldGMuDQogYWxvbmcgd2l0aCBU b2tlbnMgYW5kIFF1ZXJpZXMgYW5kIChEKVRMUyBzdGF0ZSBzbyB0aGF0IHVuc29saWNpdGVkIE9i c2VydmUgcmVzcG9uc2VzIGNhbiBjb250aW51ZSB0byBiZSBzZW50IGJhY2sgdG8gdGhlIGNsaWVu dHMuJm5ic3A7IEkgZG9u4oCZdCByZWFsbHkgdGhpbmsgdGhhdCB0aGlzIGlzIGEgcHJhY3RpY2Fs IGFzay48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+ W01lZF0gRmlyc3QsIHRoaXMgY2FuIGJlIGNvbnNpZGVyZWQgYXMgZGVwbG95bWVudC1zcGVjaWZp Yy4gQXMgc3VjaCBpbiBzb21lIGRlcGxveW1lbnRzLCB0aGVyZSBpcyBubyBuZWVkIHRvIHN1cHBv cnQgYXV0b21hdGljIG1lYW5zIHRvIGRldGVjdCBzdGF0ZSBsb3NzDQogYXQgdGhlIHNlcnZlciBz aWRlLiBTZWNvbmQsIGlzIGl0IHJlYWxseSBwcm9ibGVtYXRpYyBmb3IgdGhlIEREb1MgbWl0aWdh dGlvbiB0aGF0IGxpc3QgaXMgbG9zdCBieSBhIHNlcnZlcj8gSSBndWVzcywgdGhlIGFuc3dlciBp cyBubyBpZiB3ZSBhc3N1bWUgdGhlIGxpc3Qgb2YgbWl0aWdhdGlvbnMgdGhlbXNlbHZlcyBpcyBt YWludGFpbmVkLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25dIE15IGNvbmNlcm4gaXMgdGhhdCB0aGUgRE9UUyBjbGll bnRzIHdvdWxkIG5vdCBzZWUgdGhlIGNoYW5nZSBpbiBtaXRpZ2F0aW9uIHN0YXRlLCBvciB3b3Vs ZCBub3Qgc2VlIHRoYXQgdGhlcmUgaXMgYSBuZXcgc2lnbmFsIGNoYW5uZWwgY29uZmlndXJhdGlv biAoaWYgdGhleSB3ZXJlIGJlaW5nIE9ic2VydmVkKS4gVGhlIERPVFMgY2xpZW50L3NlcnZlcg0K IHdvdWxkIGJlIG91dCBvZiBzeW5jIHdpdGggd2hhdCBpcyBoYXBwZW5pbmcgYW5kIHRoZSBET1RT IGNsaWVudCB3b3VsZCBub3QgbmVjZXNzYXJpbHkga25vdyB0aGF0IGl0IGhhcyB0byB0YWtlIHNv bWUgYWN0aW9uIHRvIGdldCBiYWNrIHRvIHRoZSBzdGF0ZSBiZWZvcmUgdGhlIERPVFMgc2VydmVy IG91dGFnZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFj ayI+W01lZF0gVGhlIGRvdHMgY2xpZW50IGhhcyBvdGhlciBtZWFucyB0byBrbm93IHRoZSBtaXRp Z2F0aW9uIHN0YXRlLiBUaGUgRE9UUyBjbGllbnQgY2FuIG9ic2VydmUgdGhlIHN0YXR1cyBsb2Nh bGx5IChhbmQgcmVwb3J0IGl0IHRvIHRoZSBzZXJ2ZXIpIG9yIHNlbmQgYQ0KIHJlcXVlc3QgdG8g cmV0cmlldmUgdGhlIHN0YXR1cyBmcm9tIHRoZSBzZXJ2ZXIuIFRoZSBvdXQgb2Ygc3luY2ggaW4g b2JzZXJ2ZSBpcyBub3QgdGhhdCBjcml0aWNhbCBmb3IgbWl0aWdhdGluZyBERG9TIGF0dGFja3Mu ICZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkFzIHRoZSBE T1RTIHNlcnZlciByZXN0YXJ0ZWQsIGV4aXN0aW5nIChEKVRMUyBzZXNzaW9ucyB1c2VkIGJ5IHRo ZSBET1RTIGNsaWVudCB3aWxsIGZhaWwuJm5ic3A7IFNvLCB0aGUgaGVhcnRiZWF0IG1lY2hhbmlz bSB3aWxsIGV2ZW50dWFsbHkgdGltZSBvdXQgJm5ic3A7YW5kIEkgZ3Vlc3MgdGhhdCB0aGUgRE9U UyBjbGllbnQgc2hvdWxkIGRldGVjdCB0aGlzIGFuZCByZS1kbyBhbGwgb2YgdGhlDQogT2JzZXJ2 ZSByZXF1ZXN0cyAoYWxvbmcgd2l0aCBtYWtpbmcgc3VyZSB0aGF0IGFsbCB0aGUgYWN0aXZlIG1p dGlnYXRpb25zIGFyZSBhcyBleHBlY3RlZCkuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7Y29sb3I6YmxhY2siPltNZWRdIEluY2x1ZGluZyBjbGllbnRzIGluIG5ldHdvcmtz IHVuZGVyIGFjdGl2ZSBhdHRhY2tzPyBJc27igJl0IHRoaXMgb3ZlcmxvYWRpbmcgdGhlIHNlcnZl ciB3aGlsZSBkZWFsaW5nIHdpdGggb25nb2luZyBhdHRhY2tzPyAmbmJzcDs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+W0pvbl0g WWVzLCBpdCB3b3VsZCDigJMgaGVuY2UgSSBkaWQgbm90IHJlYWxseSB3YW50IHRvIGhhdmUgdG8g ZG8gdGhpcyB3aGVuZXZlciBhIGhlYXJ0YmVhdCBmYWlsZWQsIGJ1dCBvbmx5IGRvIGl0IHdoZW4g dGhlIERPVFMgY2xpZW50IOKAnGtub3dz4oCdIHRoYXQgdGhlIHNlcnZlciBoYXMgaGFkIGFuIG91 dGFnZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5Ib3dldmVyIGlu IFBlYWNlIHRpbWUgSGVhcnRiZWF0cyBtYXkgbm90IGJlaW5nIHVzZWQuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkhvd2V2ZXIg YXQgTWl0aWdhdGlvbiB0aW1lIGhlYXJ0YmVhdHMgbWF5IGZhaWwuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdC Ij5Xb3VsZCBpdCBtYWtlIHNlbnNlIHRvIGFkZCB0byB0aGUgc2lnbmFsIGNoYW5uZWwgYW4gZXh0 cmEgcGFyYW1ldGVyIHRoYXQgdGhlIERPVFMgc2VydmVyIGNhbiBzZW5kIHRvIHRoZSBjbGllbnQg aW4gYW55IHJlc3BvbnNlIGluIHRoZSBmb3JtIG9mDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+4oCcbGFzdC1yZXN0YXJ0ZWTi gJ0gOiBzZWNvbmRzLXNpbmNlLWVwb2NoPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPldoaWNoIHRoZSBjbGllbnQgY2FuIHVzZSB0 byBkZXRlY3RlZCB0aGUgcmVzdGFydC48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9v OnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0g V2UgdXNlZCB0byBoYXZlIGFuIGVwb2NoLWJhc2VkIGFwcHJvYWNoIGZvciBhIHN0YXRlZnVsbCBz ZXJ2aWNlIChzZWUNCjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2ODg3 I3NlY3Rpb24tOC41Ij5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjg4NyNzZWN0aW9u LTguNTwvYT4pLiBUaGUgZGV0YWlscyBhcmUgbm90IHJlc3RyaWN0ZWQgdG8ganVzdCBzaWduYWxs aW5nIHRoZSBlcG9jaCB2YWx1ZSBidXQgdG8gdGhlIGxvZ2ljIHRvIGhhbmRsZSBpdCBhdCB0aGUg Y2xpZW50IHNpZGUuIEZ1cnRoZXIsIHRoZXJlIGFyZSBzb21lIGFzcGVjdHMNCiB0byBiZSB0YWtl biBpbnRvIGFjY291bnQgd2hlbiBjb25maWd1cmluZyByZWR1bmRhbmN5IHNlcnZlcnMgd2hlbiBh biBhbnljYXN0IGFkZHJlc3MgaXMgdXNlZC4gSWYgdGhlIHNhbWUgaW5pdGlhbCBlcG9jaCB2YWx1 ZSBpcyBjb25maWd1cmVkLCB0aGUgY2xpZW50IG1heSBub3QgZGV0ZWN0IGEgYmFja3VwIHNlcnZl ciBpcyB1c2VkIGFuZCBoZW5jZSBtYXkgbm90IHJlaW5zdGFsbCBzdGF0ZS4uLiBBIHR3ZWFrIGlz IHRvIGNvbmZpZ3VyZSBkaXN0aW5jdA0KIGVwb2NoIHZhbHVlcyAoZS5nLiwgJiM0MzsvLSAyNGgg ZGlmZmVyZW5jZSBiZXR3ZWVuIGEgc2VydmVyIHJlZHVuZGFuY3kgZ3JvdXApLiA8bzpwPg0KPC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5UaGUgZXBvY2ggaXMg anVzdGlmaWVkIGZvciA2ODg3IGJlY2F1c2Ugd2Ugd2FudGVkIHRvIHJlY292ZXIgc3RhdGUgbG9z cywgd2hpbGUgaW4gdGhlIERPVFMgY2FzZSB3ZSBkb27igJl0IGhhdmUgdGhlIHNhbWUgbW9kZWwg Z2l2ZW4gdGhhdCwgYXMgeW91IHJpZ2h0ZnVsbHkNCiBzYWlkIGFib3ZlLCB0aGUgY3VycmVudCBh Y3RpdmUgbWl0aWdhdGlvbnMgY2FuIGJlIHJlYnVpbHQgYXQgdGhlIHNlcnZlciBzaWRlIHdpdGhv dXQgaW52b2x2aW5nIGNsaWVudHMuICZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25dIFNvIHRoaXMgbWV0aG9kIHNldHMg ZXBvY2ggdGltZSBiYWNrIHRvIDAgd2hlbmV2ZXIgdGhlcmUgaXMgYSByZXN0YXJ0LA0KPC9zcGFu PjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpi bGFjayI+W01lZF0gWWVzLiBUaGUgZXBvY2ggaXMgcmVzZXQgZWFjaCB0aW1lIHRoZSBzdGF0ZSBp cyBsb3N0IGF0IHRoZSBzZXJ2ZXIgc2lkZS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5yYXRoZXIgdGhhdCByZXBvcnQgb24gdGhlIG51 bWJlciBvZiBzZWNvbmRzIHNpbmNlIEphbiAxIDE5NzAuICZuYnNwOyZuYnNwO1RoYXQgSSBjYW4g aGFuZGxlLiZuYnNwOyBIb3dldmVyIGFueWNhc3QgKHRob3VnaCByZWR1bmRhbnQgc2VydmVycyBh cmUgY3VycmVudGx5IG91dCBvZiBzcGVjKSB3aGVyZSAyIG9yIG1vcmUgc2VydmVycyByZXN0YXJ0 IGFuZCB1cGRhdGUNCiB0aGUgc3RhcnQgdGltZSBhdCBleGFjdGx5IHRoZSBzYW1lIHRpbWUgaXMg cG9zc2libGUsIGJ1dCB1bmxpa2VseS4mbmJzcDsgVGhpcyBjb3VsZCBiZSBoYW5kbGVkIGJ5IHRo ZSBhbnljYXN0IHNlcnZlcnMgY29tbXVuaWNhdGluZyBhbmQgc2VlaW5nIHRoZXkgYm90aCBoYXZl IHRoZSBzYW1lIHN0YXJ0IHRpbWUgc28gb25lIGJhY2tzIG9mZiAoaW4gdGltZSB0ZXJtcykuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t R0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5 N0QiPltKb25dIEnigJltIGp1c3QgaW50ZXJlc3RlZCBpbiBob3cgdG8gcmVjb3ZlciBPYnNlcnZl IGxvc3MuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5bTWVkXSBJ4oCZbSBub3QgY29udmluY2VkIHRo aXMgaXMgcmVhbGx5IG5lZWRlZCBnaXZlbiB0aGF0IGFjdGl2ZSBtaXRpZ2F0aW9ucyBhcmUgbm90 IGNvbmNlcm5lZCB3aXRoIHRoaXMgZmFpbHVyZSBzY2VuYXJpby4gJm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxl PSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+Jm5ic3A7IEkgYXBwcmVjaWF0ZSBpbiBwZWFj ZSB0aW1lIHRoZXJlIG1heSBub3QgYmUgYW55IERPVFMgY2xpZW50IHJlcXVlc3RzIChvciBoZWFy dGJlYXQpIGZvciBhIGxvbmcgdGltZS4uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+SeKAmW0gb3BlbiB0 byBzdWdnZXN0aW9ucy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPlJlZ2FyZHM8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t R0IiPkpvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BN6PR16MB14258C3B7F3C5A876225950CEA920BN6PR16MB1425namp_-- From nobody Thu May 17 00:51:37 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 270FF12E9DC for ; Thu, 17 May 2018 00:51:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z32_wvFUPvOP for ; Thu, 17 May 2018 00:51:32 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC74012E9D9 for ; Thu, 17 May 2018 00:51:31 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fJDhA-0001Za-Sf; Thu, 17 May 2018 08:51:29 +0100 From: "Jon Shallow" To: "'Konda, Tirumaleswar Reddy'" , , References: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <02ad01d3ed13$42a0c3b0$c7e24b10$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1C138@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Date: Thu, 17 May 2018 08:51:29 +0100 Message-ID: <039101d3edb3$dd8de830$98a9b890$@jpshallow.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0392_01D3EDBC.3F54C130" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIW1wbd0mEd6XcqqteS3FYBOJVHmAGS49n4AgAfEOkB80nXRAEjJJaOo3hpJuA= Content-Language: en-gb Archived-At: Subject: Re: [Dots] DOTS server crash/restart with Observed mitigations/Configuration X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 May 2018 07:51:35 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0392_01D3EDBC.3F54C130 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Tiru, =20 It is a corner recovery case. The DOTS client can detect that the DOTS = server has gone away (using heartbeats) and re-subscribe to all the = resources that the DOTS client wants to Observe on detection that the = DOTS server is back =20 However, when mitigating, there is a likelihood that heartbeats will = time out and I am not sure that it is wise to = =E2=80=9Cre-subscribe=E2=80=9D when the connections are re-established = as the network path may still be flaky and adding extra traffic may be = problematic. My suggestion of an epoch time being reported by the DOTS = server was a way of determining whether =E2=80=9Cre-subscribe=E2=80=9D = was required or not. =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar Reddy Sent: 16 May 2018 16:05 To: mohamed.boucadair@orange.com; Jon Shallow; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 I don=E2=80=99t get the problem. If the server restarts, (D)TLS state = will be lost and server will reject heartbeat requests from the client = (either silently or send a fatal alert to the client). DOTS client will = have to follow the steps in = https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19#section-4.7= to re-establish (D)TLS session with the DOTS server.=20 =20 -Tiru =20 From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of = mohamed.boucadair@orange.com Sent: Wednesday, May 16, 2018 7:15 PM To: Jon Shallow ; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 CAUTION: External email. Do not click links or open attachments unless = you recognize the sender and know the content is safe. _____ =20 Re-, =20 Please see inline.=20 =20 Cheers, Med =20 De : Jon Shallow [mailto:supjps-ietf@jpshallow.com]=20 Envoy=C3=A9 : mercredi 16 mai 2018 14:42 =C3=80 : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org Objet : RE: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi Med, =20 See inline. =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of = mohamed.boucadair@orange.com Sent: 16 May 2018 12:55 To: Jon Shallow; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi Jon,=20 =20 Please see inline.=20 =20 Cheers, Med =20 De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow Envoy=C3=A9 : mercredi 16 mai 2018 12:24 =C3=80 : dots@ietf.org Objet : [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi there, =20 For the signal channel, it is easy to maintain a persistent list of = active mitigations. Should the DOTS server (unexpectedly) stop and = restart, then it is easy to rebuild the current active mitigations. =20 [Med] The list of active mitigations is the =E2=80=9Ccore=E2=80=9D state = data to be maintained by a server. If we assume that list can be = reliably rebuilt, then there is no extension needed to the signal = channel to handle this failure case. =20 [Jon] Agreed. This was just me building up the background to the = scenario. =20 However, to rebuild the list of active Observations of the current = mitigations / configuration changes is considerably more difficult as = the DOTS server would also need to maintain a list of client IPs/source = ports etc. along with Tokens and Queries and (D)TLS state so that = unsolicited Observe responses can continue to be sent back to the = clients. I don=E2=80=99t really think that this is a practical ask. =20 [Med] First, this can be considered as deployment-specific. As such in = some deployments, there is no need to support automatic means to detect = state loss at the server side. Second, is it really problematic for the = DDoS mitigation that list is lost by a server? I guess, the answer is no = if we assume the list of mitigations themselves is maintained.=20 =20 [Jon] My concern is that the DOTS clients would not see the change in = mitigation state, or would not see that there is a new signal channel = configuration (if they were being Observed). The DOTS client/server = would be out of sync with what is happening and the DOTS client would = not necessarily know that it has to take some action to get back to the = state before the DOTS server outage. =20 [Med] The dots client has other means to know the mitigation state. The = DOTS client can observe the status locally (and report it to the server) = or send a request to retrieve the status from the server. The out of = synch in observe is not that critical for mitigating DDoS attacks. =20 =20 As the DOTS server restarted, existing (D)TLS sessions used by the DOTS = client will fail. So, the heartbeat mechanism will eventually time out = and I guess that the DOTS client should detect this and re-do all of the = Observe requests (along with making sure that all the active mitigations = are as expected). =20 [Med] Including clients in networks under active attacks? Isn=E2=80=99t = this overloading the server while dealing with ongoing attacks? =20 =20 [Jon] Yes, it would =E2=80=93 hence I did not really want to have to do = this whenever a heartbeat failed, but only do it when the DOTS client = =E2=80=9Cknows=E2=80=9D that the server has had an outage. =20 However in Peace time Heartbeats may not being used. However at Mitigation time heartbeats may fail. =20 Would it make sense to add to the signal channel an extra parameter that = the DOTS server can send to the client in any response in the form of=20 =E2=80=9Clast-restarted=E2=80=9D : seconds-since-epoch Which the client can use to detected the restart. =20 [Med] We used to have an epoch-based approach for a statefull service = (see https://tools.ietf.org/html/rfc6887#section-8.5). The details are = not restricted to just signalling the epoch value but to the logic to = handle it at the client side. Further, there are some aspects to be = taken into account when configuring redundancy servers when an anycast = address is used. If the same initial epoch value is configured, the = client may not detect a backup server is used and hence may not = reinstall state... A tweak is to configure distinct epoch values (e.g., = +/- 24h difference between a server redundancy group).=20 =20 The epoch is justified for 6887 because we wanted to recover state loss, = while in the DOTS case we don=E2=80=99t have the same model given that, = as you rightfully said above, the current active mitigations can be = rebuilt at the server side without involving clients. =20 =20 [Jon] So this method sets epoch time back to 0 whenever there is a = restart,=20 [Med] Yes. The epoch is reset each time the state is lost at the server = side.=20 =20 rather that report on the number of seconds since Jan 1 1970. That I = can handle. However anycast (though redundant servers are currently out = of spec) where 2 or more servers restart and update the start time at = exactly the same time is possible, but unlikely. This could be handled = by the anycast servers communicating and seeing they both have the same = start time so one backs off (in time terms). =20 [Jon] I=E2=80=99m just interested in how to recover Observe loss. [Med] I=E2=80=99m not convinced this is really needed given that active = mitigations are not concerned with this failure scenario. =20 =20 I appreciate in peace time there may not be any DOTS client requests = (or heartbeat) for a long time... =20 I=E2=80=99m open to suggestions. =20 Regards =20 Jon =20 =20 =20 =20 ------=_NextPart_000_0392_01D3EDBC.3F54C130 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Hi Tiru,

 

It is a corner recovery = case.=C2=A0 The DOTS client can detect that the DOTS server has gone = away (using heartbeats) and re-subscribe to all the resources that the = DOTS client wants to Observe on detection that the DOTS server is = back

 

However, when = mitigating, there is a likelihood that heartbeats will time out and I am = not sure that it is wise to =E2=80=9Cre-subscribe=E2=80=9D when the = connections are re-established as the network path may still be flaky = and adding extra traffic may be problematic.=C2=A0 My suggestion of an = epoch time being reported by the DOTS server was a way of determining = whether =E2=80=9Cre-subscribe=E2=80=9D was required or = not.

 

Regards

 

Jon

 

From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of = Konda, Tirumaleswar Reddy
Sent: 16 May 2018 = 16:05
To: mohamed.boucadair@orange.com; Jon Shallow; = dots@ietf.org
Subject: Re: [Dots] DOTS server crash/restart = with Observed = mitigations/Configuration

 

I don=E2=80=99t get = the problem. If the server restarts, (D)TLS state will be lost and = server will reject heartbeat requests from the client (either silently = or send a fatal alert to the client). DOTS client will have to follow = the steps in https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19#s= ection-4.7 to re-establish (D)TLS session with the DOTS server. =

 

-Tiru

 

From: Dots = [mailto:dots-bounces@ietf.org] On Behalf Of = mohamed.boucadair@orange.com
Sent: Wednesday, May 16, 2018 = 7:15 PM
To: Jon Shallow <supjps-ietf@jpshallow.com>; = dots@ietf.org
Subject: Re: [Dots] DOTS server crash/restart = with Observed = mitigations/Configuration

 

CAUTION: External email. = Do not click links or open attachments unless you recognize the sender = and know the content is safe.

Re-,

 

Please see inline.

 

Cheers,

Med

 

De : Jon Shallow [mailto:supjps-ietf@jpshallow.co= m]
Envoy=C3=A9 : mercredi 16 mai 2018 = 14:42
=C3=80 : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org
Objet : = RE: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

Hi = Med,

 

See = inline.

 

Regards

 

Jon

 

From: Dots [mailto: dots-bounces@ietf.org] On = Behalf Of mohamed.boucadair@orange.com=
Sent: 16 May 2018 12:55
To: Jon Shallow; dots@ietf.org
Subject: Re: = [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

Hi Jon,

 

Please see inline.

 

Cheers,

Med

 

De : Dots [mailto:dots-bounces@ietf.org] = De la part de Jon Shallow
Envoy=C3=A9 : mercredi = 16 mai 2018 12:24
=C3=80 : dots@ietf.org
Objet : = [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

Hi there,

 

For the = signal channel, it is easy to maintain a persistent list of active = mitigations.  Should the DOTS server (unexpectedly) stop and = restart, then it is easy to rebuild the current active = mitigations.

 

[Med] = The list of active mitigations is the =E2=80=9Ccore=E2=80=9D state data = to be maintained by a server. If we assume that list can be reliably = rebuilt, then there is no extension needed to the signal channel to = handle this failure case.

 

[Jon] Agreed.  This = was just me building up the background to the = scenario.

 

However, to rebuild the list of active Observations of = the current mitigations / configuration changes is considerably more = difficult as the DOTS server would also need to maintain a list of = client IPs/source ports etc. along with Tokens and Queries and (D)TLS = state so that unsolicited Observe responses can continue to be sent back = to the clients.  I don=E2=80=99t really think that this is a = practical ask.

 

[Med] = First, this can be considered as deployment-specific. As such in some = deployments, there is no need to support automatic means to detect state = loss at the server side. Second, is it really problematic for the DDoS = mitigation that list is lost by a server? I guess, the answer is no if = we assume the list of mitigations themselves is maintained. =

 

[Jon] My concern is that = the DOTS clients would not see the change in mitigation state, or would = not see that there is a new signal channel configuration (if they were = being Observed). The DOTS client/server would be out of sync with what = is happening and the DOTS client would not necessarily know that it has = to take some action to get back to the state before the DOTS server = outage.

 

[Med] = The dots client has other means to know the mitigation state. The DOTS = client can observe the status locally (and report it to the server) or = send a request to retrieve the status from the server. The out of synch = in observe is not that critical for mitigating DDoS attacks. =  

 

As the DOTS server restarted, existing (D)TLS sessions = used by the DOTS client will fail.  So, the heartbeat mechanism = will eventually time out  and I guess that the DOTS client should = detect this and re-do all of the Observe requests (along with making = sure that all the active mitigations are as expected).

 

[Med] = Including clients in networks under active attacks? Isn=E2=80=99t this = overloading the server while dealing with ongoing attacks? =  

 

[Jon] Yes, it would = =E2=80=93 hence I did not really want to have to do this whenever a = heartbeat failed, but only do it when the DOTS client = =E2=80=9Cknows=E2=80=9D that the server has had an = outage.

 

However in Peace time Heartbeats may not being = used.

However at Mitigation time = heartbeats may fail.

 

Would it = make sense to add to the signal channel an extra parameter that the DOTS = server can send to the client in any response in the form of =

=E2=80=9Clast-restarted=E2=80=9D : = seconds-since-epoch

Which the client = can use to detected the restart.

 

[Med] = We used to have an epoch-based approach for a statefull service (see https://tools.ie= tf.org/html/rfc6887#section-8.5). The details are not restricted to = just signalling the epoch value but to the logic to handle it at the = client side. Further, there are some aspects to be taken into account = when configuring redundancy servers when an anycast address is used. If = the same initial epoch value is configured, the client may not detect a = backup server is used and hence may not reinstall state... A tweak is to = configure distinct epoch values (e.g., +/- 24h difference between a = server redundancy group).

 

The = epoch is justified for 6887 because we wanted to recover state loss, = while in the DOTS case we don=E2=80=99t have the same model given that, = as you rightfully said above, the current active mitigations can be = rebuilt at the server side without involving clients. =  

 

[Jon] So this method = sets epoch time back to 0 whenever there is a restart,

[Med] = Yes. The epoch is reset each time the state is lost at the server side. =

 

rather that report on the number of seconds = since Jan 1 1970.   That I can handle.  However anycast = (though redundant servers are currently out of spec) where 2 or more = servers restart and update the start time at exactly the same time is = possible, but unlikely.  This could be handled by the anycast = servers communicating and seeing they both have the same start time so = one backs off (in time terms).

 

[Jon] I=E2=80=99m just = interested in how to recover Observe loss.

[Med] I=E2=80=99m not convinced this is really needed = given that active mitigations are not concerned with this failure = scenario.  

 

  I appreciate in peace time there may not be any = DOTS client requests (or heartbeat) for a long time...

 

I=E2=80=99m = open to suggestions.

 

Regards

 

Jon

 

 

 

 

------=_NextPart_000_0392_01D3EDBC.3F54C130-- From nobody Thu May 17 08:04:42 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 153221270A0 for ; Thu, 17 May 2018 08:04:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.309 X-Spam-Level: X-Spam-Status: No, score=-4.309 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id roXUQoExSzzz for ; Thu, 17 May 2018 08:04:27 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EC3D612EAF6 for ; Thu, 17 May 2018 08:04:26 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1526569458; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:MIME-Version:X-MS-Office365-Filtering-Correlation-Id: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=u /iTjcbFv1j6QqaLwrS3AwPqVtXgWLsF8UwvcpQjEl g=; b=MrwB9+ObOZOMR7njBDvY846Sp7H2/DGvGcAJuIu0srx+ c9/SRRUTOs0jd8TayqRwRrz48LLeY9yhqiNhnpIHHjaL8P0SgR bgdaMT6XgnbW7VbDybiljiLKfsW+10FWtK5GokaZB/r1G2kAiK UlqpuQ2PH2zILTWTzBWCCsokmUs= Received: from DNVEXAPP1N06.corpzone.internalzone.com (unknown [10.44.48.90]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 6ba7_202b_7f8d7bc0_aa92_4029_87a5_e8c86da0dea6; Thu, 17 May 2018 10:04:17 -0500 Received: from DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 May 2018 09:02:57 -0600 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Thu, 17 May 2018 09:02:58 -0600 Received: from NAM02-BL2-obe.outbound.protection.outlook.com (10.44.176.242) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 May 2018 09:02:55 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.776.11; Thu, 17 May 2018 15:02:56 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8%9]) with mapi id 15.20.0776.010; Thu, 17 May 2018 15:02:56 +0000 From: "Konda, Tirumaleswar Reddy" To: Jon Shallow , "mohamed.boucadair@orange.com" , "dots@ietf.org" Thread-Topic: [Dots] DOTS server crash/restart with Observed mitigations/Configuration Thread-Index: AdPs/+9TEvk/O5CYS8+qOpb9I1vXhAACuBlAAAIcswAAAjbXAAAByVCQACQmhYAAAPvNsA== Date: Thu, 17 May 2018 15:02:55 +0000 Message-ID: References: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <02ad01d3ed13$42a0c3b0$c7e24b10$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1C138@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <039101d3edb3$dd8de830$98a9b890$@jpshallow.com> In-Reply-To: <039101d3edb3$dd8de830$98a9b890$@jpshallow.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [122.172.116.209] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB1425; 7:klMZwZJplmJdNpAizW++Y964zDgj5vHuVC+w74leo9pohhdOCAt/SOIEGPNTGRZjNNOSBo0rkuO/8tt+VefkAPHxhLTCXa2SVbqc8yqQPDMYkoIH8DLIgWP5hlHM1bhOL8MmUwcnh9zVCS737i4aZgH3VBpoIcHi2T1+3KF5sbhRdpaZC/+Soxyw7Q/Svddv1W7u2rPNLc5GL/wF8OgR69hpFsVoMFTDZ9wtfuK5l+J6ZaCAa/nkez1vz7kHYCd2 x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB1425; x-ms-traffictypediagnostic: BN6PR16MB1425: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(190756311086443)(158342451672863)(18271650672692)(21748063052155)(123452027830198); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(10201501046)(3231254)(944501410)(52105095)(93006095)(93001095)(149027)(150027)(6041310)(20161123560045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123558120)(6072148)(201708071742011)(7699016); SRVR:BN6PR16MB1425; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB1425; x-forefront-prvs: 067553F396 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(366004)(39860400002)(396003)(346002)(376002)(32952001)(189003)(199004)(99286004)(66066001)(55016002)(33656002)(7696005)(2900100001)(229853002)(6436002)(97736004)(106356001)(105586002)(74316002)(19609705001)(68736007)(7736002)(6506007)(26005)(80792005)(81166006)(3846002)(81156014)(186003)(76176011)(5660300001)(110136005)(5890100001)(8936002)(102836004)(59450400001)(53546011)(5250100002)(2906002)(9326002)(316002)(2501003)(53936002)(8676002)(11346002)(3280700002)(3660700001)(93886005)(86362001)(6306002)(9686003)(2201001)(606006)(54896002)(236005)(966005)(6116002)(446003)(476003)(6246003)(478600001)(72206003)(25786009)(486006)(790700001)(14454004)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB1425; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: /ehZhuLa+LndaW+Nk9wdUbsQfAgnEqpMGphpVgTjGC+FYWWDNj4RlyE8lfg0tidjy7AYUqfPBj2o0YbPpgOiLWW+bl0x7kycQ0nILAJFNzDuZBMbjDfm0BzYVcIPB7+m4anUsHzwTGlDvrrR+WkY+iwhCEUAeC9OLXzthtl2dS+jYuMEJFUpTh+le5aeAadIwbdBFrBLm0KnBp0FI8rLAA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BN6PR16MB1425FD80B4F2E66ABE5A790FEA910BN6PR16MB1425namp_" MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: e82fb6fe-5bb9-400e-1042-08d5bc0745aa X-MS-Exchange-CrossTenant-Network-Message-Id: e82fb6fe-5bb9-400e-1042-08d5bc0745aa X-MS-Exchange-CrossTenant-originalarrivaltime: 17 May 2018 15:02:56.0953 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB1425 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6288> : inlines <6641> : streams <1787007> : uri <2642841> Archived-At: Subject: Re: [Dots] DOTS server crash/restart with Observed mitigations/Configuration X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 May 2018 15:04:35 -0000 --_000_BN6PR16MB1425FD80B4F2E66ABE5A790FEA910BN6PR16MB1425namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSm9uLA0KDQpUaGlzIHNjZW5hcmlvIGlzIGFscmVhZHkgZGlzY3Vzc2VkIGluIFNlY3Rpb24g NC43LiBXaGVuIHRoZSBERG9TIG1pdGlnYXRpb24gaXMgaW4gcHJvZ3Jlc3MgYW5kIGFmdGVyIHRo ZSDigJhtaXNzaW5nLWhiLWFsbG93ZWTigJkgdGhyZXNob2xkIGlzIHJlYWNoZWQsIHRoZSBET1RT IGNsaWVudCB3aWxsIGNvbnRpbnVlIHRvIHVzZSB0aGUgZXhpc3RpbmcgKEQpVExTIHNlc3Npb24g dG8gc2VuZCBoZWFydGJlYXQgcmVxdWVzdHMgdG8gdGhlIHNlcnZlciBhbmQgYXQgdGhlIHNhbWUg dGltZSB0cnkgdG8gZXN0YWJsaXNoIGEgbmV3IChEKVRMUyBzZXNzaW9uIHdpdGggRE9UUyBzZXJ2 ZXIuDQpGdXJ0aGVyLCBpZiB0aGUgc2VydmVyIHJlc3RhcnRzLCAoRClUTFMgc3RhdGUgaXMgbG9z dCBvbiB0aGUgc2VydmVyIGFuZCB0aGUgc2VydmVyIGRvZXMgbm90IGhhdmUgdGhlIGNyeXB0b2dy YXBoaWMgc3RhdGUgdG8gc2VuZCDigJhyZS1zdWJzY3JpYmXigJkgb24gdGhlIG9sZCBzZXNzaW9u Lg0KDQotVGlydQ0KDQpGcm9tOiBKb24gU2hhbGxvdyBbbWFpbHRvOnN1cGpwcy1pZXRmQGpwc2hh bGxvdy5jb21dDQpTZW50OiBUaHVyc2RheSwgTWF5IDE3LCAyMDE4IDE6MjEgUE0NClRvOiBLb25k YSwgVGlydW1hbGVzd2FyIFJlZGR5IDxUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29t PjsgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTsgZG90c0BpZXRmLm9yZw0KU3ViamVjdDog UkU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdh dGlvbnMvQ29uZmlndXJhdGlvbg0KDQoNCkNBVVRJT046IEV4dGVybmFsIGVtYWlsLiBEbyBub3Qg Y2xpY2sgbGlua3Mgb3Igb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUg c2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuDQoNCg0KX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCkhpIFRpcnUsDQoNCkl0IGlzIGEgY29ybmVyIHJlY292ZXJ5IGNh c2UuICBUaGUgRE9UUyBjbGllbnQgY2FuIGRldGVjdCB0aGF0IHRoZSBET1RTIHNlcnZlciBoYXMg Z29uZSBhd2F5ICh1c2luZyBoZWFydGJlYXRzKSBhbmQgcmUtc3Vic2NyaWJlIHRvIGFsbCB0aGUg cmVzb3VyY2VzIHRoYXQgdGhlIERPVFMgY2xpZW50IHdhbnRzIHRvIE9ic2VydmUgb24gZGV0ZWN0 aW9uIHRoYXQgdGhlIERPVFMgc2VydmVyIGlzIGJhY2sNCg0KSG93ZXZlciwgd2hlbiBtaXRpZ2F0 aW5nLCB0aGVyZSBpcyBhIGxpa2VsaWhvb2QgdGhhdCBoZWFydGJlYXRzIHdpbGwgdGltZSBvdXQg YW5kIEkgYW0gbm90IHN1cmUgdGhhdCBpdCBpcyB3aXNlIHRvIOKAnHJlLXN1YnNjcmliZeKAnSB3 aGVuIHRoZSBjb25uZWN0aW9ucyBhcmUgcmUtZXN0YWJsaXNoZWQgYXMgdGhlIG5ldHdvcmsgcGF0 aCBtYXkgc3RpbGwgYmUgZmxha3kgYW5kIGFkZGluZyBleHRyYSB0cmFmZmljIG1heSBiZSBwcm9i bGVtYXRpYy4gIE15IHN1Z2dlc3Rpb24gb2YgYW4gZXBvY2ggdGltZSBiZWluZyByZXBvcnRlZCBi eSB0aGUgRE9UUyBzZXJ2ZXIgd2FzIGEgd2F5IG9mIGRldGVybWluaW5nIHdoZXRoZXIg4oCccmUt c3Vic2NyaWJl4oCdIHdhcyByZXF1aXJlZCBvciBub3QuDQoNClJlZ2FyZHMNCg0KSm9uDQoNCkZy b206IERvdHMgW21haWx0bzogZG90cy1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgS29u ZGEsIFRpcnVtYWxlc3dhciBSZWRkeQ0KU2VudDogMTYgTWF5IDIwMTggMTY6MDUNClRvOiBtb2hh bWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tOyBKb24gU2hhbGxvdzsgZG90c0BpZXRmLm9yZw0KU3Vi amVjdDogUmU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQg bWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0KDQpJIGRvbuKAmXQgZ2V0IHRoZSBwcm9ibGVtLiBJ ZiB0aGUgc2VydmVyIHJlc3RhcnRzLCAoRClUTFMgc3RhdGUgd2lsbCBiZSBsb3N0IGFuZCBzZXJ2 ZXIgd2lsbCByZWplY3QgaGVhcnRiZWF0IHJlcXVlc3RzIGZyb20gdGhlIGNsaWVudCAoZWl0aGVy IHNpbGVudGx5IG9yIHNlbmQgYSBmYXRhbCBhbGVydCB0byB0aGUgY2xpZW50KS4gRE9UUyBjbGll bnQgd2lsbCBoYXZlIHRvIGZvbGxvdyB0aGUgc3RlcHMgaW4gaHR0cHM6Ly90b29scy5pZXRmLm9y Zy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOSNzZWN0aW9uLTQuNyB0byBy ZS1lc3RhYmxpc2ggKEQpVExTIHNlc3Npb24gd2l0aCB0aGUgRE9UUyBzZXJ2ZXIuDQoNCi1UaXJ1 DQoNCkZyb206IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBP ZiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQpTZW50OiBXZWRuZXNkYXksIE1heSAxNiwg MjAxOCA3OjE1IFBNDQpUbzogSm9uIFNoYWxsb3cgPHN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb20+ OyBkb3RzQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jl c3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uDQoNCg0KQ0FVVElP TjogRXh0ZXJuYWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0dGFjaG1lbnRz IHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMg c2FmZS4NCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KUmUtLA0KDQpQbGVh c2Ugc2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCkRlIDogSm9uIFNoYWxsb3cgW21haWx0 bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tXQ0KRW52b3nDqSA6IG1lcmNyZWRpIDE2IG1haSAy MDE4IDE0OjQyDQrDgCA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE47IGRvdHNAaWV0Zi5vcmc8 bWFpbHRvOmRvdHNAaWV0Zi5vcmc+DQpPYmpldCA6IFJFOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jh c2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24NCg0KSGkg TWVkLA0KDQpTZWUgaW5saW5lLg0KDQpSZWdhcmRzDQoNCkpvbg0KDQpGcm9tOiBEb3RzIFttYWls dG86IGRvdHMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnPl0g T24gQmVoYWxmIE9mIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208bWFpbHRvOm1vaGFtZWQu Ym91Y2FkYWlyQG9yYW5nZS5jb20+DQpTZW50OiAxNiBNYXkgMjAxOCAxMjo1NQ0KVG86IEpvbiBT aGFsbG93OyBkb3RzQGlldGYub3JnPG1haWx0bzpkb3RzQGlldGYub3JnPg0KU3ViamVjdDogUmU6 IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlv bnMvQ29uZmlndXJhdGlvbg0KDQpIaSBKb24sDQoNClBsZWFzZSBzZWUgaW5saW5lLg0KDQpDaGVl cnMsDQpNZWQNCg0KRGUgOiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBEZSBs YSBwYXJ0IGRlIEpvbiBTaGFsbG93DQpFbnZvecOpIDogbWVyY3JlZGkgMTYgbWFpIDIwMTggMTI6 MjQNCsOAIDogZG90c0BpZXRmLm9yZzxtYWlsdG86ZG90c0BpZXRmLm9yZz4NCk9iamV0IDogW0Rv dHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9D b25maWd1cmF0aW9uDQoNCkhpIHRoZXJlLA0KDQpGb3IgdGhlIHNpZ25hbCBjaGFubmVsLCBpdCBp cyBlYXN5IHRvIG1haW50YWluIGEgcGVyc2lzdGVudCBsaXN0IG9mIGFjdGl2ZSBtaXRpZ2F0aW9u cy4gIFNob3VsZCB0aGUgRE9UUyBzZXJ2ZXIgKHVuZXhwZWN0ZWRseSkgc3RvcCBhbmQgcmVzdGFy dCwgdGhlbiBpdCBpcyBlYXN5IHRvIHJlYnVpbGQgdGhlIGN1cnJlbnQgYWN0aXZlIG1pdGlnYXRp b25zLg0KDQpbTWVkXSBUaGUgbGlzdCBvZiBhY3RpdmUgbWl0aWdhdGlvbnMgaXMgdGhlIOKAnGNv cmXigJ0gc3RhdGUgZGF0YSB0byBiZSBtYWludGFpbmVkIGJ5IGEgc2VydmVyLiBJZiB3ZSBhc3N1 bWUgdGhhdCBsaXN0IGNhbiBiZSByZWxpYWJseSByZWJ1aWx0LCB0aGVuIHRoZXJlIGlzIG5vIGV4 dGVuc2lvbiBuZWVkZWQgdG8gdGhlIHNpZ25hbCBjaGFubmVsIHRvIGhhbmRsZSB0aGlzIGZhaWx1 cmUgY2FzZS4NCg0KW0pvbl0gQWdyZWVkLiAgVGhpcyB3YXMganVzdCBtZSBidWlsZGluZyB1cCB0 aGUgYmFja2dyb3VuZCB0byB0aGUgc2NlbmFyaW8uDQoNCkhvd2V2ZXIsIHRvIHJlYnVpbGQgdGhl IGxpc3Qgb2YgYWN0aXZlIE9ic2VydmF0aW9ucyBvZiB0aGUgY3VycmVudCBtaXRpZ2F0aW9ucyAv IGNvbmZpZ3VyYXRpb24gY2hhbmdlcyBpcyBjb25zaWRlcmFibHkgbW9yZSBkaWZmaWN1bHQgYXMg dGhlIERPVFMgc2VydmVyIHdvdWxkIGFsc28gbmVlZCB0byBtYWludGFpbiBhIGxpc3Qgb2YgY2xp ZW50IElQcy9zb3VyY2UgcG9ydHMgZXRjLiBhbG9uZyB3aXRoIFRva2VucyBhbmQgUXVlcmllcyBh bmQgKEQpVExTIHN0YXRlIHNvIHRoYXQgdW5zb2xpY2l0ZWQgT2JzZXJ2ZSByZXNwb25zZXMgY2Fu IGNvbnRpbnVlIHRvIGJlIHNlbnQgYmFjayB0byB0aGUgY2xpZW50cy4gIEkgZG9u4oCZdCByZWFs bHkgdGhpbmsgdGhhdCB0aGlzIGlzIGEgcHJhY3RpY2FsIGFzay4NCg0KW01lZF0gRmlyc3QsIHRo aXMgY2FuIGJlIGNvbnNpZGVyZWQgYXMgZGVwbG95bWVudC1zcGVjaWZpYy4gQXMgc3VjaCBpbiBz b21lIGRlcGxveW1lbnRzLCB0aGVyZSBpcyBubyBuZWVkIHRvIHN1cHBvcnQgYXV0b21hdGljIG1l YW5zIHRvIGRldGVjdCBzdGF0ZSBsb3NzIGF0IHRoZSBzZXJ2ZXIgc2lkZS4gU2Vjb25kLCBpcyBp dCByZWFsbHkgcHJvYmxlbWF0aWMgZm9yIHRoZSBERG9TIG1pdGlnYXRpb24gdGhhdCBsaXN0IGlz IGxvc3QgYnkgYSBzZXJ2ZXI/IEkgZ3Vlc3MsIHRoZSBhbnN3ZXIgaXMgbm8gaWYgd2UgYXNzdW1l IHRoZSBsaXN0IG9mIG1pdGlnYXRpb25zIHRoZW1zZWx2ZXMgaXMgbWFpbnRhaW5lZC4NCg0KW0pv bl0gTXkgY29uY2VybiBpcyB0aGF0IHRoZSBET1RTIGNsaWVudHMgd291bGQgbm90IHNlZSB0aGUg Y2hhbmdlIGluIG1pdGlnYXRpb24gc3RhdGUsIG9yIHdvdWxkIG5vdCBzZWUgdGhhdCB0aGVyZSBp cyBhIG5ldyBzaWduYWwgY2hhbm5lbCBjb25maWd1cmF0aW9uIChpZiB0aGV5IHdlcmUgYmVpbmcg T2JzZXJ2ZWQpLiBUaGUgRE9UUyBjbGllbnQvc2VydmVyIHdvdWxkIGJlIG91dCBvZiBzeW5jIHdp dGggd2hhdCBpcyBoYXBwZW5pbmcgYW5kIHRoZSBET1RTIGNsaWVudCB3b3VsZCBub3QgbmVjZXNz YXJpbHkga25vdyB0aGF0IGl0IGhhcyB0byB0YWtlIHNvbWUgYWN0aW9uIHRvIGdldCBiYWNrIHRv IHRoZSBzdGF0ZSBiZWZvcmUgdGhlIERPVFMgc2VydmVyIG91dGFnZS4NCg0KW01lZF0gVGhlIGRv dHMgY2xpZW50IGhhcyBvdGhlciBtZWFucyB0byBrbm93IHRoZSBtaXRpZ2F0aW9uIHN0YXRlLiBU aGUgRE9UUyBjbGllbnQgY2FuIG9ic2VydmUgdGhlIHN0YXR1cyBsb2NhbGx5IChhbmQgcmVwb3J0 IGl0IHRvIHRoZSBzZXJ2ZXIpIG9yIHNlbmQgYSByZXF1ZXN0IHRvIHJldHJpZXZlIHRoZSBzdGF0 dXMgZnJvbSB0aGUgc2VydmVyLiBUaGUgb3V0IG9mIHN5bmNoIGluIG9ic2VydmUgaXMgbm90IHRo YXQgY3JpdGljYWwgZm9yIG1pdGlnYXRpbmcgRERvUyBhdHRhY2tzLg0KDQpBcyB0aGUgRE9UUyBz ZXJ2ZXIgcmVzdGFydGVkLCBleGlzdGluZyAoRClUTFMgc2Vzc2lvbnMgdXNlZCBieSB0aGUgRE9U UyBjbGllbnQgd2lsbCBmYWlsLiAgU28sIHRoZSBoZWFydGJlYXQgbWVjaGFuaXNtIHdpbGwgZXZl bnR1YWxseSB0aW1lIG91dCAgYW5kIEkgZ3Vlc3MgdGhhdCB0aGUgRE9UUyBjbGllbnQgc2hvdWxk IGRldGVjdCB0aGlzIGFuZCByZS1kbyBhbGwgb2YgdGhlIE9ic2VydmUgcmVxdWVzdHMgKGFsb25n IHdpdGggbWFraW5nIHN1cmUgdGhhdCBhbGwgdGhlIGFjdGl2ZSBtaXRpZ2F0aW9ucyBhcmUgYXMg ZXhwZWN0ZWQpLg0KDQpbTWVkXSBJbmNsdWRpbmcgY2xpZW50cyBpbiBuZXR3b3JrcyB1bmRlciBh Y3RpdmUgYXR0YWNrcz8gSXNu4oCZdCB0aGlzIG92ZXJsb2FkaW5nIHRoZSBzZXJ2ZXIgd2hpbGUg ZGVhbGluZyB3aXRoIG9uZ29pbmcgYXR0YWNrcz8NCg0KW0pvbl0gWWVzLCBpdCB3b3VsZCDigJMg aGVuY2UgSSBkaWQgbm90IHJlYWxseSB3YW50IHRvIGhhdmUgdG8gZG8gdGhpcyB3aGVuZXZlciBh IGhlYXJ0YmVhdCBmYWlsZWQsIGJ1dCBvbmx5IGRvIGl0IHdoZW4gdGhlIERPVFMgY2xpZW50IOKA nGtub3dz4oCdIHRoYXQgdGhlIHNlcnZlciBoYXMgaGFkIGFuIG91dGFnZS4NCg0KSG93ZXZlciBp biBQZWFjZSB0aW1lIEhlYXJ0YmVhdHMgbWF5IG5vdCBiZWluZyB1c2VkLg0KSG93ZXZlciBhdCBN aXRpZ2F0aW9uIHRpbWUgaGVhcnRiZWF0cyBtYXkgZmFpbC4NCg0KV291bGQgaXQgbWFrZSBzZW5z ZSB0byBhZGQgdG8gdGhlIHNpZ25hbCBjaGFubmVsIGFuIGV4dHJhIHBhcmFtZXRlciB0aGF0IHRo ZSBET1RTIHNlcnZlciBjYW4gc2VuZCB0byB0aGUgY2xpZW50IGluIGFueSByZXNwb25zZSBpbiB0 aGUgZm9ybSBvZg0K4oCcbGFzdC1yZXN0YXJ0ZWTigJ0gOiBzZWNvbmRzLXNpbmNlLWVwb2NoDQpX aGljaCB0aGUgY2xpZW50IGNhbiB1c2UgdG8gZGV0ZWN0ZWQgdGhlIHJlc3RhcnQuDQoNCltNZWRd IFdlIHVzZWQgdG8gaGF2ZSBhbiBlcG9jaC1iYXNlZCBhcHByb2FjaCBmb3IgYSBzdGF0ZWZ1bGwg c2VydmljZSAoc2VlIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2ODg3I3NlY3Rpb24t OC41KS4gVGhlIGRldGFpbHMgYXJlIG5vdCByZXN0cmljdGVkIHRvIGp1c3Qgc2lnbmFsbGluZyB0 aGUgZXBvY2ggdmFsdWUgYnV0IHRvIHRoZSBsb2dpYyB0byBoYW5kbGUgaXQgYXQgdGhlIGNsaWVu dCBzaWRlLiBGdXJ0aGVyLCB0aGVyZSBhcmUgc29tZSBhc3BlY3RzIHRvIGJlIHRha2VuIGludG8g YWNjb3VudCB3aGVuIGNvbmZpZ3VyaW5nIHJlZHVuZGFuY3kgc2VydmVycyB3aGVuIGFuIGFueWNh c3QgYWRkcmVzcyBpcyB1c2VkLiBJZiB0aGUgc2FtZSBpbml0aWFsIGVwb2NoIHZhbHVlIGlzIGNv bmZpZ3VyZWQsIHRoZSBjbGllbnQgbWF5IG5vdCBkZXRlY3QgYSBiYWNrdXAgc2VydmVyIGlzIHVz ZWQgYW5kIGhlbmNlIG1heSBub3QgcmVpbnN0YWxsIHN0YXRlLi4uIEEgdHdlYWsgaXMgdG8gY29u ZmlndXJlIGRpc3RpbmN0IGVwb2NoIHZhbHVlcyAoZS5nLiwgKy8tIDI0aCBkaWZmZXJlbmNlIGJl dHdlZW4gYSBzZXJ2ZXIgcmVkdW5kYW5jeSBncm91cCkuDQoNClRoZSBlcG9jaCBpcyBqdXN0aWZp ZWQgZm9yIDY4ODcgYmVjYXVzZSB3ZSB3YW50ZWQgdG8gcmVjb3ZlciBzdGF0ZSBsb3NzLCB3aGls ZSBpbiB0aGUgRE9UUyBjYXNlIHdlIGRvbuKAmXQgaGF2ZSB0aGUgc2FtZSBtb2RlbCBnaXZlbiB0 aGF0LCBhcyB5b3UgcmlnaHRmdWxseSBzYWlkIGFib3ZlLCB0aGUgY3VycmVudCBhY3RpdmUgbWl0 aWdhdGlvbnMgY2FuIGJlIHJlYnVpbHQgYXQgdGhlIHNlcnZlciBzaWRlIHdpdGhvdXQgaW52b2x2 aW5nIGNsaWVudHMuDQoNCltKb25dIFNvIHRoaXMgbWV0aG9kIHNldHMgZXBvY2ggdGltZSBiYWNr IHRvIDAgd2hlbmV2ZXIgdGhlcmUgaXMgYSByZXN0YXJ0LA0KW01lZF0gWWVzLiBUaGUgZXBvY2gg aXMgcmVzZXQgZWFjaCB0aW1lIHRoZSBzdGF0ZSBpcyBsb3N0IGF0IHRoZSBzZXJ2ZXIgc2lkZS4N Cg0KcmF0aGVyIHRoYXQgcmVwb3J0IG9uIHRoZSBudW1iZXIgb2Ygc2Vjb25kcyBzaW5jZSBKYW4g MSAxOTcwLiAgIFRoYXQgSSBjYW4gaGFuZGxlLiAgSG93ZXZlciBhbnljYXN0ICh0aG91Z2ggcmVk dW5kYW50IHNlcnZlcnMgYXJlIGN1cnJlbnRseSBvdXQgb2Ygc3BlYykgd2hlcmUgMiBvciBtb3Jl IHNlcnZlcnMgcmVzdGFydCBhbmQgdXBkYXRlIHRoZSBzdGFydCB0aW1lIGF0IGV4YWN0bHkgdGhl IHNhbWUgdGltZSBpcyBwb3NzaWJsZSwgYnV0IHVubGlrZWx5LiAgVGhpcyBjb3VsZCBiZSBoYW5k bGVkIGJ5IHRoZSBhbnljYXN0IHNlcnZlcnMgY29tbXVuaWNhdGluZyBhbmQgc2VlaW5nIHRoZXkg Ym90aCBoYXZlIHRoZSBzYW1lIHN0YXJ0IHRpbWUgc28gb25lIGJhY2tzIG9mZiAoaW4gdGltZSB0 ZXJtcykuDQoNCltKb25dIEnigJltIGp1c3QgaW50ZXJlc3RlZCBpbiBob3cgdG8gcmVjb3ZlciBP YnNlcnZlIGxvc3MuDQpbTWVkXSBJ4oCZbSBub3QgY29udmluY2VkIHRoaXMgaXMgcmVhbGx5IG5l ZWRlZCBnaXZlbiB0aGF0IGFjdGl2ZSBtaXRpZ2F0aW9ucyBhcmUgbm90IGNvbmNlcm5lZCB3aXRo IHRoaXMgZmFpbHVyZSBzY2VuYXJpby4NCg0KICBJIGFwcHJlY2lhdGUgaW4gcGVhY2UgdGltZSB0 aGVyZSBtYXkgbm90IGJlIGFueSBET1RTIGNsaWVudCByZXF1ZXN0cyAob3IgaGVhcnRiZWF0KSBm b3IgYSBsb25nIHRpbWUuLi4NCg0KSeKAmW0gb3BlbiB0byBzdWdnZXN0aW9ucy4NCg0KUmVnYXJk cw0KDQpKb24NCg0KDQoNCg0K --_000_BN6PR16MB1425FD80B4F2E66ABE5A790FEA910BN6PR16MB1425namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpEZW5nWGlhbjsNCglwYW5vc2UtMToy IDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OiJcQERlbmdYaWFuIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250 LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDMgNSA0IDQg MiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFs LCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0K CWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJ bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXtt c28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1t YXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9u dC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlw ZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciOw0KCWNvbG9yOmJsYWNrOw0K CWZvbnQtd2VpZ2h0Om5vcm1hbDsNCglmb250LXN0eWxlOm5vcm1hbDt9DQpzcGFuLkVtYWlsU3R5 bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTIyDQoJe21zby1z dHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJY29sb3I6 YmxhY2s7DQoJZm9udC13ZWlnaHQ6bm9ybWFsOw0KCWZvbnQtc3R5bGU6bm9ybWFsO30NCnNwYW4u RW1haWxTdHlsZTIzDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxl MjQNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyNg0KCXttc28tc3R5 bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJp ZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBl OmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJ e3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpk aXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtp ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4 PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8 bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0i MSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5 IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9Ildv cmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVh c3QtbGFuZ3VhZ2U6WkgtQ04iPkhpIEpvbiw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+VGhpcyBzY2VuYXJpbyBpcyBhbHJlYWR5 IGRpc2N1c3NlZCBpbg0KPC9zcGFuPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpa SC1DTiI+U2VjdGlvbiA0LjcuIFdoZW4gdGhlIEREb1MgbWl0aWdhdGlvbiBpcyBpbiBwcm9ncmVz cyBhbmQgYWZ0ZXIgdGhlIOKAmG1pc3NpbmctaGItYWxsb3dlZOKAmSB0aHJlc2hvbGQgaXMgcmVh Y2hlZCwgdGhlIERPVFMgY2xpZW50IHdpbGwgY29udGludWUgdG8gdXNlIHRoZSBleGlzdGluZyAo RClUTFMgc2Vzc2lvbiB0byBzZW5kIGhlYXJ0YmVhdCByZXF1ZXN0cyB0byB0aGUNCiBzZXJ2ZXIg YW5kIGF0IHRoZSBzYW1lIHRpbWUgdHJ5IHRvIGVzdGFibGlzaCBhIG5ldyAoRClUTFMgc2Vzc2lv biB3aXRoIERPVFMgc2VydmVyLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5GdXJ0aGVy LCBpZiB0aGUgc2VydmVyIHJlc3RhcnRzLCAoRClUTFMgc3RhdGUgaXMgbG9zdCBvbiB0aGUgc2Vy dmVyIGFuZCB0aGUgc2VydmVyIGRvZXMgbm90IGhhdmUgdGhlIGNyeXB0b2dyYXBoaWMgc3RhdGUg dG8gc2VuZCDigJhyZS1zdWJzY3JpYmXigJkgb24gdGhlIG9sZCBzZXNzaW9uLg0KPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJl YXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPi1U aXJ1PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGEgbmFtZT0i X01haWxFbmRDb21wb3NlIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04i PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvYT48L3A+DQo8c3BhbiBzdHlsZT0ibXNvLWJvb2tt YXJrOl9NYWlsRW5kQ29tcG9zZSI+PC9zcGFuPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4w cHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48 c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkZyb206PC9zcGFuPjwvYj48 c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPiBKb24gU2hhbGxvdyBbbWFp bHRvOnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb21dDQo8YnI+DQo8Yj5TZW50OjwvYj4gVGh1cnNk YXksIE1heSAxNywgMjAxOCAxOjIxIFBNPGJyPg0KPGI+VG86PC9iPiBLb25kYSwgVGlydW1hbGVz d2FyIFJlZGR5ICZsdDtUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tJmd0OzsgbW9o YW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTsgZG90c0BpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6 PC9iPiBSRTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBt aXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4N Cjx0YWJsZSBjbGFzcz0iTXNvTm9ybWFsVGFibGUiIGJvcmRlcj0iMSIgY2VsbHNwYWNpbmc9IjMi IGNlbGxwYWRkaW5nPSIwIiBzdHlsZT0iYmFja2dyb3VuZDojRjNGRjMzO2JvcmRlcjpzb2xpZCAj OUI5QTg3IDEuNXB0Ij4NCjx0Ym9keT4NCjx0cj4NCjx0ZCBzdHlsZT0iYm9yZGVyOm5vbmU7cGFk ZGluZzouNzVwdCAuNzVwdCAuNzVwdCAuNzVwdCI+DQo8cD48c3Ryb25nPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPkNB VVRJT048L3NwYW4+PC9zdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzlCOEIzRSI+Ojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+IEV4dGVy bmFsIGVtYWlsLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3Blbg0KIGF0dGFjaG1lbnRzIHVubGVz cyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS48 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2Vy aWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFi bGU+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFs aWduOmNlbnRlciI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFn ZTpaSC1DTiI+DQo8aHIgc2l6ZT0iMyIgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9z cGFuPjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhpIFRpcnUsPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkl0IGlzIGEgY29ybmVyIHJl Y292ZXJ5IGNhc2UuJm5ic3A7IFRoZSBET1RTIGNsaWVudCBjYW4gZGV0ZWN0IHRoYXQgdGhlIERP VFMgc2VydmVyIGhhcyBnb25lIGF3YXkgKHVzaW5nIGhlYXJ0YmVhdHMpIGFuZCByZS1zdWJzY3Jp YmUgdG8gYWxsIHRoZSByZXNvdXJjZXMgdGhhdCB0aGUgRE9UUyBjbGllbnQgd2FudHMgdG8gT2Jz ZXJ2ZSBvbiBkZXRlY3Rpb24NCiB0aGF0IHRoZSBET1RTIHNlcnZlciBpcyBiYWNrPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhv d2V2ZXIsIHdoZW4gbWl0aWdhdGluZywgdGhlcmUgaXMgYSBsaWtlbGlob29kIHRoYXQgaGVhcnRi ZWF0cyB3aWxsIHRpbWUgb3V0IGFuZCBJIGFtIG5vdCBzdXJlIHRoYXQgaXQgaXMgd2lzZSB0byDi gJxyZS1zdWJzY3JpYmXigJ0gd2hlbiB0aGUgY29ubmVjdGlvbnMgYXJlIHJlLWVzdGFibGlzaGVk IGFzIHRoZSBuZXR3b3JrIHBhdGggbWF5IHN0aWxsDQogYmUgZmxha3kgYW5kIGFkZGluZyBleHRy YSB0cmFmZmljIG1heSBiZSBwcm9ibGVtYXRpYy4mbmJzcDsgTXkgc3VnZ2VzdGlvbiBvZiBhbiBl cG9jaCB0aW1lIGJlaW5nIHJlcG9ydGVkIGJ5IHRoZSBET1RTIHNlcnZlciB3YXMgYSB3YXkgb2Yg ZGV0ZXJtaW5pbmcgd2hldGhlciDigJxyZS1zdWJzY3JpYmXigJ0gd2FzIHJlcXVpcmVkIG9yIG5v dC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+UmVnYXJkczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0Ii IHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Kb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBp biI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1s YW5ndWFnZTpFTi1HQiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0 LWxhbmd1YWdlOkVOLUdCIj4gRG90cyBbbWFpbHRvOiBkb3RzLWJvdW5jZXNAaWV0Zi5vcmddDQo8 Yj5PbiBCZWhhbGYgT2YgPC9iPktvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHk8YnI+DQo8Yj5TZW50 OjwvYj4gMTYgTWF5IDIwMTggMTY6MDU8YnI+DQo8Yj5Ubzo8L2I+IG1vaGFtZWQuYm91Y2FkYWly QG9yYW5nZS5jb207IEpvbiBTaGFsbG93OyBkb3RzQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8 L2I+IFJlOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1p dGlnYXRpb25zL0NvbmZpZ3VyYXRpb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28t ZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+SSBkb27igJl0IGdldCB0aGUgcHJvYmxlbS4gSWYgdGhl IHNlcnZlciByZXN0YXJ0cywgKEQpVExTIHN0YXRlIHdpbGwgYmUgbG9zdCBhbmQgc2VydmVyIHdp bGwgcmVqZWN0IGhlYXJ0YmVhdCByZXF1ZXN0cyBmcm9tIHRoZSBjbGllbnQgKGVpdGhlciBzaWxl bnRseSBvciBzZW5kIGEgZmF0YWwgYWxlcnQgdG8gdGhlIGNsaWVudCkuIERPVFMgY2xpZW50DQog d2lsbCBoYXZlIHRvIGZvbGxvdyB0aGUgc3RlcHMgaW4gPGEgaHJlZj0iaHR0cHM6Ly90b29scy5p ZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOSNzZWN0aW9uLTQu NyI+DQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1j aGFubmVsLTE5I3NlY3Rpb24tNC43PC9hPiB0byByZS1lc3RhYmxpc2ggKEQpVExTIHNlc3Npb24g d2l0aCB0aGUgRE9UUyBzZXJ2ZXIuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+LVRpcnU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6 WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBw dCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFF MUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5Gcm9tOjwvc3Bh bj48L2I+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4gRG90cyBbbWFp bHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFsZiBPZiA8L2I+bW9oYW1lZC5i b3VjYWRhaXJAb3JhbmdlLmNvbTxicj4NCjxiPlNlbnQ6PC9iPiBXZWRuZXNkYXksIE1heSAxNiwg MjAxOCA3OjE1IFBNPGJyPg0KPGI+VG86PC9iPiBKb24gU2hhbGxvdyAmbHQ7c3VwanBzLWlldGZA anBzaGFsbG93LmNvbSZndDs7IGRvdHNAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6 IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlv bnMvQ29uZmlndXJhdGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8dGFibGUg Y2xhc3M9Ik1zb05vcm1hbFRhYmxlIiBib3JkZXI9IjEiIGNlbGxzcGFjaW5nPSIzIiBjZWxscGFk ZGluZz0iMCIgc3R5bGU9ImJhY2tncm91bmQ6I0YzRkYzMztib3JkZXI6c29saWQgIzlCOUE4NyAx LjVwdCI+DQo8dGJvZHk+DQo8dHI+DQo8dGQgc3R5bGU9ImJvcmRlcjpub25lO3BhZGRpbmc6Ljc1 cHQgLjc1cHQgLjc1cHQgLjc1cHQiPg0KPHA+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojOUI4QjNFIj5DQVVUSU9OPC9z cGFuPjwvc3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPjo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiBFeHRlcm5hbCBlbWFp bC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4NCiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJl Y29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuPC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L3RkPg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPGRp diBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVyIiBzdHlsZT0idGV4dC1hbGlnbjpjZW50 ZXIiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPg0K PGhyIHNpemU9IjMiIHdpZHRoPSIxMDAlIiBhbGlnbj0iY2VudGVyIj4NCjwvc3Bhbj48L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj5SZS0sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlBs ZWFzZSBzZWUgaW5saW5lLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 YmxhY2siPkNoZWVycyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPk1lZDxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4w cHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48 c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGFob21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPkRlJm5ic3A7 Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdl OkZSIj4gSm9uIFNoYWxsb3cgWzxhIGhyZWY9Im1haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cu Y29tIj5tYWlsdG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbTwvYT5dDQo8YnI+DQo8Yj5FbnZv ecOpJm5ic3A7OjwvYj4gbWVyY3JlZGkgMTYgbWFpIDIwMTggMTQ6NDI8YnI+DQo8Yj7DgCZuYnNw Ozo8L2I+IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE47IDxhIGhyZWY9Im1haWx0bzpkb3RzQGll dGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPk9iamV0Jm5ic3A7OjwvYj4gUkU6IFtE b3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMv Q29uZmlndXJhdGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xv cjojMUY0OTdEIj5IaSBNZWQsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlNlZSBpbmxpbmUuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjoj MUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlJlZ2FyZHM8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIg c3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ Sm9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVD NERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFo b21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPkZyb206PC9z cGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtU YWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+IERvdHMg W21haWx0bzoNCjxhIGhyZWY9Im1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmciPmRvdHMtYm91 bmNlc0BpZXRmLm9yZzwvYT5dIDxiPk9uIEJlaGFsZiBPZg0KPC9iPjxhIGhyZWY9Im1haWx0bzpt b2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29t PC9hPjxicj4NCjxiPlNlbnQ6PC9iPiAxNiBNYXkgMjAxOCAxMjo1NTxicj4NCjxiPlRvOjwvYj4g Sm9uIFNoYWxsb3c7IDxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3Jn PC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jl c3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkhpIEpvbiwNCjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5QbGVhc2Ugc2VlIGlubGluZS4NCjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZS IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5DaGVlcnMsPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O2NvbG9yOmJsYWNrIj5NZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUg MS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGlu IDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gbGFuZz0iRlIiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNl cmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOkZSIj5EZSZuYnNwOzo8L3NwYW4+PC9iPjxzcGFuIGxh bmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEm cXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpGUiI+IERvdHMgWzxhIGhyZWY9 Im1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmciPm1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5v cmc8L2E+XQ0KPGI+RGUgbGEgcGFydCBkZTwvYj4gSm9uIFNoYWxsb3c8YnI+DQo8Yj5FbnZvecOp Jm5ic3A7OjwvYj4gbWVyY3JlZGkgMTYgbWFpIDIwMTggMTI6MjQ8YnI+DQo8Yj7DgCZuYnNwOzo8 L2I+IDxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4N CjxiPk9iamV0Jm5ic3A7OjwvYj4gW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0 aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiI+SGkgdGhlcmUsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5Gb3IgdGhlIHNpZ25hbCBj aGFubmVsLCBpdCBpcyBlYXN5IHRvIG1haW50YWluIGEgcGVyc2lzdGVudCBsaXN0IG9mIGFjdGl2 ZSBtaXRpZ2F0aW9ucy4mbmJzcDsgU2hvdWxkIHRoZSBET1RTIHNlcnZlciAodW5leHBlY3RlZGx5 KSBzdG9wIGFuZCByZXN0YXJ0LCB0aGVuIGl0IGlzIGVhc3kgdG8gcmVidWlsZCB0aGUgY3VycmVu dCBhY3RpdmUgbWl0aWdhdGlvbnMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPltNZWRdIFRoZSBsaXN0IG9mIGFjdGl2ZSBtaXRpZ2F0aW9ucyBpcyB0 aGUg4oCcY29yZeKAnSBzdGF0ZSBkYXRhIHRvIGJlIG1haW50YWluZWQgYnkgYSBzZXJ2ZXIuIElm IHdlIGFzc3VtZSB0aGF0IGxpc3QgY2FuIGJlIHJlbGlhYmx5IHJlYnVpbHQsIHRoZW4gdGhlcmUg aXMNCiBubyBleHRlbnNpb24gbmVlZGVkIHRvIHRoZSBzaWduYWwgY2hhbm5lbCB0byBoYW5kbGUg dGhpcyBmYWlsdXJlIGNhc2UuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25dIEFncmVlZC4mbmJzcDsgVGhpcyB3YXMganVz dCBtZSBidWlsZGluZyB1cCB0aGUgYmFja2dyb3VuZCB0byB0aGUgc2NlbmFyaW8uPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+SG93ZXZlciwgdG8gcmVidWlsZCB0aGUg bGlzdCBvZiBhY3RpdmUgT2JzZXJ2YXRpb25zIG9mIHRoZSBjdXJyZW50IG1pdGlnYXRpb25zIC8g Y29uZmlndXJhdGlvbiBjaGFuZ2VzIGlzIGNvbnNpZGVyYWJseSBtb3JlIGRpZmZpY3VsdCBhcyB0 aGUgRE9UUyBzZXJ2ZXIgd291bGQgYWxzbyBuZWVkIHRvIG1haW50YWluIGEgbGlzdCBvZiBjbGll bnQgSVBzL3NvdXJjZSBwb3J0cyBldGMuDQogYWxvbmcgd2l0aCBUb2tlbnMgYW5kIFF1ZXJpZXMg YW5kIChEKVRMUyBzdGF0ZSBzbyB0aGF0IHVuc29saWNpdGVkIE9ic2VydmUgcmVzcG9uc2VzIGNh biBjb250aW51ZSB0byBiZSBzZW50IGJhY2sgdG8gdGhlIGNsaWVudHMuJm5ic3A7IEkgZG9u4oCZ dCByZWFsbHkgdGhpbmsgdGhhdCB0aGlzIGlzIGEgcHJhY3RpY2FsIGFzay48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gRmlyc3QsIHRoaXMg Y2FuIGJlIGNvbnNpZGVyZWQgYXMgZGVwbG95bWVudC1zcGVjaWZpYy4gQXMgc3VjaCBpbiBzb21l IGRlcGxveW1lbnRzLCB0aGVyZSBpcyBubyBuZWVkIHRvIHN1cHBvcnQgYXV0b21hdGljIG1lYW5z IHRvIGRldGVjdCBzdGF0ZSBsb3NzDQogYXQgdGhlIHNlcnZlciBzaWRlLiBTZWNvbmQsIGlzIGl0 IHJlYWxseSBwcm9ibGVtYXRpYyBmb3IgdGhlIEREb1MgbWl0aWdhdGlvbiB0aGF0IGxpc3QgaXMg bG9zdCBieSBhIHNlcnZlcj8gSSBndWVzcywgdGhlIGFuc3dlciBpcyBubyBpZiB3ZSBhc3N1bWUg dGhlIGxpc3Qgb2YgbWl0aWdhdGlvbnMgdGhlbXNlbHZlcyBpcyBtYWludGFpbmVkLg0KPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0Ii IHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi PltKb25dIE15IGNvbmNlcm4gaXMgdGhhdCB0aGUgRE9UUyBjbGllbnRzIHdvdWxkIG5vdCBzZWUg dGhlIGNoYW5nZSBpbiBtaXRpZ2F0aW9uIHN0YXRlLCBvciB3b3VsZCBub3Qgc2VlIHRoYXQgdGhl cmUgaXMgYSBuZXcgc2lnbmFsIGNoYW5uZWwgY29uZmlndXJhdGlvbiAoaWYgdGhleSB3ZXJlIGJl aW5nIE9ic2VydmVkKS4gVGhlIERPVFMgY2xpZW50L3NlcnZlcg0KIHdvdWxkIGJlIG91dCBvZiBz eW5jIHdpdGggd2hhdCBpcyBoYXBwZW5pbmcgYW5kIHRoZSBET1RTIGNsaWVudCB3b3VsZCBub3Qg bmVjZXNzYXJpbHkga25vdyB0aGF0IGl0IGhhcyB0byB0YWtlIHNvbWUgYWN0aW9uIHRvIGdldCBi YWNrIHRvIHRoZSBzdGF0ZSBiZWZvcmUgdGhlIERPVFMgc2VydmVyIG91dGFnZS48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gVGhlIGRvdHMg Y2xpZW50IGhhcyBvdGhlciBtZWFucyB0byBrbm93IHRoZSBtaXRpZ2F0aW9uIHN0YXRlLiBUaGUg RE9UUyBjbGllbnQgY2FuIG9ic2VydmUgdGhlIHN0YXR1cyBsb2NhbGx5IChhbmQgcmVwb3J0IGl0 IHRvIHRoZSBzZXJ2ZXIpIG9yIHNlbmQgYQ0KIHJlcXVlc3QgdG8gcmV0cmlldmUgdGhlIHN0YXR1 cyBmcm9tIHRoZSBzZXJ2ZXIuIFRoZSBvdXQgb2Ygc3luY2ggaW4gb2JzZXJ2ZSBpcyBub3QgdGhh dCBjcml0aWNhbCBmb3IgbWl0aWdhdGluZyBERG9TIGF0dGFja3MuICZuYnNwOzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHls ZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkFzIHRoZSBET1RTIHNlcnZlciByZXN0YXJ0 ZWQsIGV4aXN0aW5nIChEKVRMUyBzZXNzaW9ucyB1c2VkIGJ5IHRoZSBET1RTIGNsaWVudCB3aWxs IGZhaWwuJm5ic3A7IFNvLCB0aGUgaGVhcnRiZWF0IG1lY2hhbmlzbSB3aWxsIGV2ZW50dWFsbHkg dGltZSBvdXQgJm5ic3A7YW5kIEkgZ3Vlc3MgdGhhdCB0aGUgRE9UUyBjbGllbnQgc2hvdWxkIGRl dGVjdCB0aGlzIGFuZCByZS1kbyBhbGwgb2YgdGhlDQogT2JzZXJ2ZSByZXF1ZXN0cyAoYWxvbmcg d2l0aCBtYWtpbmcgc3VyZSB0aGF0IGFsbCB0aGUgYWN0aXZlIG1pdGlnYXRpb25zIGFyZSBhcyBl eHBlY3RlZCkuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6Ymxh Y2siPltNZWRdIEluY2x1ZGluZyBjbGllbnRzIGluIG5ldHdvcmtzIHVuZGVyIGFjdGl2ZSBhdHRh Y2tzPyBJc27igJl0IHRoaXMgb3ZlcmxvYWRpbmcgdGhlIHNlcnZlciB3aGlsZSBkZWFsaW5nIHdp dGggb25nb2luZyBhdHRhY2tzPyAmbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+W0pvbl0gWWVzLCBpdCB3b3VsZCDigJMg aGVuY2UgSSBkaWQgbm90IHJlYWxseSB3YW50IHRvIGhhdmUgdG8gZG8gdGhpcyB3aGVuZXZlciBh IGhlYXJ0YmVhdCBmYWlsZWQsIGJ1dCBvbmx5IGRvIGl0IHdoZW4gdGhlIERPVFMgY2xpZW50IOKA nGtub3dz4oCdIHRoYXQgdGhlIHNlcnZlciBoYXMgaGFkIGFuIG91dGFnZS48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5Ib3dldmVyIGluIFBlYWNlIHRpbWUgSGVhcnRi ZWF0cyBtYXkgbm90IGJlaW5nIHVzZWQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkhvd2V2ZXIgYXQgTWl0aWdhdGlvbiB0aW1l IGhlYXJ0YmVhdHMgbWF5IGZhaWwuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5Xb3VsZCBpdCBtYWtlIHNl bnNlIHRvIGFkZCB0byB0aGUgc2lnbmFsIGNoYW5uZWwgYW4gZXh0cmEgcGFyYW1ldGVyIHRoYXQg dGhlIERPVFMgc2VydmVyIGNhbiBzZW5kIHRvIHRoZSBjbGllbnQgaW4gYW55IHJlc3BvbnNlIGlu IHRoZSBmb3JtIG9mDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiI+4oCcbGFzdC1yZXN0YXJ0ZWTigJ0gOiBzZWNvbmRzLXNpbmNl LWVwb2NoPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tR0IiPldoaWNoIHRoZSBjbGllbnQgY2FuIHVzZSB0byBkZXRlY3RlZCB0aGUgcmVz dGFydC48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6Ymxh Y2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gV2UgdXNlZCB0byBoYXZlIGFu IGVwb2NoLWJhc2VkIGFwcHJvYWNoIGZvciBhIHN0YXRlZnVsbCBzZXJ2aWNlIChzZWUNCjxhIGhy ZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2ODg3I3NlY3Rpb24tOC41Ij5odHRw czovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjg4NyNzZWN0aW9uLTguNTwvYT4pLiBUaGUgZGV0 YWlscyBhcmUgbm90IHJlc3RyaWN0ZWQgdG8ganVzdCBzaWduYWxsaW5nIHRoZSBlcG9jaCB2YWx1 ZSBidXQgdG8gdGhlIGxvZ2ljIHRvIGhhbmRsZSBpdCBhdCB0aGUgY2xpZW50IHNpZGUuIEZ1cnRo ZXIsIHRoZXJlIGFyZSBzb21lIGFzcGVjdHMNCiB0byBiZSB0YWtlbiBpbnRvIGFjY291bnQgd2hl biBjb25maWd1cmluZyByZWR1bmRhbmN5IHNlcnZlcnMgd2hlbiBhbiBhbnljYXN0IGFkZHJlc3Mg aXMgdXNlZC4gSWYgdGhlIHNhbWUgaW5pdGlhbCBlcG9jaCB2YWx1ZSBpcyBjb25maWd1cmVkLCB0 aGUgY2xpZW50IG1heSBub3QgZGV0ZWN0IGEgYmFja3VwIHNlcnZlciBpcyB1c2VkIGFuZCBoZW5j ZSBtYXkgbm90IHJlaW5zdGFsbCBzdGF0ZS4uLiBBIHR3ZWFrIGlzIHRvIGNvbmZpZ3VyZSBkaXN0 aW5jdA0KIGVwb2NoIHZhbHVlcyAoZS5nLiwgJiM0MzsvLSAyNGggZGlmZmVyZW5jZSBiZXR3ZWVu IGEgc2VydmVyIHJlZHVuZGFuY3kgZ3JvdXApLiA8bzpwPg0KPC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5UaGUgZXBvY2ggaXMganVzdGlmaWVkIGZvciA2ODg3 IGJlY2F1c2Ugd2Ugd2FudGVkIHRvIHJlY292ZXIgc3RhdGUgbG9zcywgd2hpbGUgaW4gdGhlIERP VFMgY2FzZSB3ZSBkb27igJl0IGhhdmUgdGhlIHNhbWUgbW9kZWwgZ2l2ZW4gdGhhdCwgYXMgeW91 IHJpZ2h0ZnVsbHkNCiBzYWlkIGFib3ZlLCB0aGUgY3VycmVudCBhY3RpdmUgbWl0aWdhdGlvbnMg Y2FuIGJlIHJlYnVpbHQgYXQgdGhlIHNlcnZlciBzaWRlIHdpdGhvdXQgaW52b2x2aW5nIGNsaWVu dHMuICZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNv bG9yOiMxRjQ5N0QiPltKb25dIFNvIHRoaXMgbWV0aG9kIHNldHMgZXBvY2ggdGltZSBiYWNrIHRv IDAgd2hlbmV2ZXIgdGhlcmUgaXMgYSByZXN0YXJ0LA0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLUdC IiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gWWVzLiBU aGUgZXBvY2ggaXMgcmVzZXQgZWFjaCB0aW1lIHRoZSBzdGF0ZSBpcyBsb3N0IGF0IHRoZSBzZXJ2 ZXIgc2lkZS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xv cjojMUY0OTdEIj5yYXRoZXIgdGhhdCByZXBvcnQgb24gdGhlIG51bWJlciBvZiBzZWNvbmRzIHNp bmNlIEphbiAxIDE5NzAuICZuYnNwOyZuYnNwO1RoYXQgSSBjYW4gaGFuZGxlLiZuYnNwOyBIb3dl dmVyIGFueWNhc3QgKHRob3VnaCByZWR1bmRhbnQgc2VydmVycyBhcmUgY3VycmVudGx5IG91dCBv ZiBzcGVjKSB3aGVyZSAyIG9yIG1vcmUgc2VydmVycyByZXN0YXJ0IGFuZCB1cGRhdGUNCiB0aGUg c3RhcnQgdGltZSBhdCBleGFjdGx5IHRoZSBzYW1lIHRpbWUgaXMgcG9zc2libGUsIGJ1dCB1bmxp a2VseS4mbmJzcDsgVGhpcyBjb3VsZCBiZSBoYW5kbGVkIGJ5IHRoZSBhbnljYXN0IHNlcnZlcnMg Y29tbXVuaWNhdGluZyBhbmQgc2VlaW5nIHRoZXkgYm90aCBoYXZlIHRoZSBzYW1lIHN0YXJ0IHRp bWUgc28gb25lIGJhY2tzIG9mZiAoaW4gdGltZSB0ZXJtcykuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjoj MUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25dIEnigJltIGp1 c3QgaW50ZXJlc3RlZCBpbiBob3cgdG8gcmVjb3ZlciBPYnNlcnZlIGxvc3MuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOmJsYWNrIj5bTWVkXSBJ4oCZbSBub3QgY29udmluY2VkIHRoaXMgaXMgcmVhbGx5IG5lZWRl ZCBnaXZlbiB0aGF0IGFjdGl2ZSBtaXRpZ2F0aW9ucyBhcmUgbm90IGNvbmNlcm5lZCB3aXRoIHRo aXMgZmFpbHVyZSBzY2VuYXJpby4gJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiI+Jm5ic3A7IEkgYXBwcmVjaWF0ZSBpbiBwZWFjZSB0aW1lIHRoZXJlIG1heSBu b3QgYmUgYW55IERPVFMgY2xpZW50IHJlcXVlc3RzIChvciBoZWFydGJlYXQpIGZvciBhIGxvbmcg dGltZS4uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+SeKAmW0gb3BlbiB0byBzdWdnZXN0aW9ucy48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiPlJlZ2FyZHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkpvbjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0K PC9odG1sPg0K --_000_BN6PR16MB1425FD80B4F2E66ABE5A790FEA910BN6PR16MB1425namp_-- From nobody Thu May 17 08:24:20 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B3F712EB0B for ; Thu, 17 May 2018 08:24:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0swU4ec9-5Y3 for ; Thu, 17 May 2018 08:24:14 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9340512DA16 for ; Thu, 17 May 2018 08:24:13 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fJKlG-0001pS-Nt; Thu, 17 May 2018 16:24:10 +0100 From: "Jon Shallow" To: "'Konda, Tirumaleswar Reddy'" , , References: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <02ad01d3ed13$42a0c3b0$c7e24b10$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1C138@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <039101d3edb3$dd8de830$98a9b890$@jpshallow.com> In-Reply-To: Date: Thu, 17 May 2018 16:24:11 +0100 Message-ID: <082d01d3edf3$1b1df3e0$5159dba0$@jpshallow.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_082E_01D3EDFB.7CE4A5D0" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIW1wbd0mEd6XcqqteS3FYBOJVHmAGS49n4AgAfEOkB80nXRAEjJJaOAglYmHgBM8wmLaNfAO7A Content-Language: en-gb Archived-At: Subject: Re: [Dots] DOTS server crash/restart with Observed mitigations/Configuration X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 May 2018 15:24:17 -0000 This is a multipart message in MIME format. ------=_NextPart_000_082E_01D3EDFB.7CE4A5D0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Tiru, =20 See inline [Jon1] =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar Reddy Sent: 17 May 2018 16:03 To: Jon Shallow; mohamed.boucadair@orange.com; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi Jon, =20 This scenario is already discussed in Section 4.7. When the DDoS = mitigation is in progress and after the = =E2=80=98missing-hb-allowed=E2=80=99 threshold is reached, the DOTS = client will continue to use the existing (D)TLS session to send = heartbeat requests to the server and at the same time try to establish a = new (D)TLS session with DOTS server.=20 [Jon1] I fully understand that Further, if the server restarts, (D)TLS state is lost on the server and = the server does not have the cryptographic state to send = =E2=80=98re-subscribe=E2=80=99 on the old session.=20 [Jon1] Agreed the DOTS server cannot sent anything that is unsolicited = due to loss of cryptographic state. However, if the DOTS server can = send back in a response to a client request something that states = =E2=80=9CI restarted recently @ such a time=E2=80=9D, the client will = know whether the missing heartbeats were down to just a flaky network, = or the missing heartbeats were due to a server restart, and so = re-subscribe needed for all the resources that the client wants to = monitor. I do not want the DOTS client to keep on doing re-subscribe = compounding the network flakiness when under attack. ~Jon1 =20 -Tiru =20 From: Jon Shallow [mailto:supjps-ietf@jpshallow.com]=20 Sent: Thursday, May 17, 2018 1:21 PM To: Konda, Tirumaleswar Reddy ; = mohamed.boucadair@orange.com; dots@ietf.org Subject: RE: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 CAUTION: External email. Do not click links or open attachments unless = you recognize the sender and know the content is safe. _____ =20 Hi Tiru, =20 It is a corner recovery case. The DOTS client can detect that the DOTS = server has gone away (using heartbeats) and re-subscribe to all the = resources that the DOTS client wants to Observe on detection that the = DOTS server is back =20 However, when mitigating, there is a likelihood that heartbeats will = time out and I am not sure that it is wise to = =E2=80=9Cre-subscribe=E2=80=9D when the connections are re-established = as the network path may still be flaky and adding extra traffic may be = problematic. My suggestion of an epoch time being reported by the DOTS = server was a way of determining whether =E2=80=9Cre-subscribe=E2=80=9D = was required or not. =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar Reddy Sent: 16 May 2018 16:05 To: mohamed.boucadair@orange.com; Jon Shallow; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 I don=E2=80=99t get the problem. If the server restarts, (D)TLS state = will be lost and server will reject heartbeat requests from the client = (either silently or send a fatal alert to the client). DOTS client will = have to follow the steps in = https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19#section-4.7= to re-establish (D)TLS session with the DOTS server.=20 =20 -Tiru =20 From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of = mohamed.boucadair@orange.com Sent: Wednesday, May 16, 2018 7:15 PM To: Jon Shallow ; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 CAUTION: External email. Do not click links or open attachments unless = you recognize the sender and know the content is safe. _____ =20 Re-, =20 Please see inline.=20 =20 Cheers, Med =20 De : Jon Shallow [mailto:supjps-ietf@jpshallow.com]=20 Envoy=C3=A9 : mercredi 16 mai 2018 14:42 =C3=80 : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org Objet : RE: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi Med, =20 See inline. =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of = mohamed.boucadair@orange.com Sent: 16 May 2018 12:55 To: Jon Shallow; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi Jon,=20 =20 Please see inline.=20 =20 Cheers, Med =20 De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow Envoy=C3=A9 : mercredi 16 mai 2018 12:24 =C3=80 : dots@ietf.org Objet : [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi there, =20 For the signal channel, it is easy to maintain a persistent list of = active mitigations. Should the DOTS server (unexpectedly) stop and = restart, then it is easy to rebuild the current active mitigations. =20 [Med] The list of active mitigations is the =E2=80=9Ccore=E2=80=9D state = data to be maintained by a server. If we assume that list can be = reliably rebuilt, then there is no extension needed to the signal = channel to handle this failure case. =20 [Jon] Agreed. This was just me building up the background to the = scenario. =20 However, to rebuild the list of active Observations of the current = mitigations / configuration changes is considerably more difficult as = the DOTS server would also need to maintain a list of client IPs/source = ports etc. along with Tokens and Queries and (D)TLS state so that = unsolicited Observe responses can continue to be sent back to the = clients. I don=E2=80=99t really think that this is a practical ask. =20 [Med] First, this can be considered as deployment-specific. As such in = some deployments, there is no need to support automatic means to detect = state loss at the server side. Second, is it really problematic for the = DDoS mitigation that list is lost by a server? I guess, the answer is no = if we assume the list of mitigations themselves is maintained.=20 =20 [Jon] My concern is that the DOTS clients would not see the change in = mitigation state, or would not see that there is a new signal channel = configuration (if they were being Observed). The DOTS client/server = would be out of sync with what is happening and the DOTS client would = not necessarily know that it has to take some action to get back to the = state before the DOTS server outage. =20 [Med] The dots client has other means to know the mitigation state. The = DOTS client can observe the status locally (and report it to the server) = or send a request to retrieve the status from the server. The out of = synch in observe is not that critical for mitigating DDoS attacks. =20 =20 As the DOTS server restarted, existing (D)TLS sessions used by the DOTS = client will fail. So, the heartbeat mechanism will eventually time out = and I guess that the DOTS client should detect this and re-do all of the = Observe requests (along with making sure that all the active mitigations = are as expected). =20 [Med] Including clients in networks under active attacks? Isn=E2=80=99t = this overloading the server while dealing with ongoing attacks? =20 =20 [Jon] Yes, it would =E2=80=93 hence I did not really want to have to do = this whenever a heartbeat failed, but only do it when the DOTS client = =E2=80=9Cknows=E2=80=9D that the server has had an outage. =20 However in Peace time Heartbeats may not being used. However at Mitigation time heartbeats may fail. =20 Would it make sense to add to the signal channel an extra parameter that = the DOTS server can send to the client in any response in the form of=20 =E2=80=9Clast-restarted=E2=80=9D : seconds-since-epoch Which the client can use to detected the restart. =20 [Med] We used to have an epoch-based approach for a statefull service = (see https://tools.ietf.org/html/rfc6887#section-8.5). The details are = not restricted to just signalling the epoch value but to the logic to = handle it at the client side. Further, there are some aspects to be = taken into account when configuring redundancy servers when an anycast = address is used. If the same initial epoch value is configured, the = client may not detect a backup server is used and hence may not = reinstall state... A tweak is to configure distinct epoch values (e.g., = +/- 24h difference between a server redundancy group).=20 =20 The epoch is justified for 6887 because we wanted to recover state loss, = while in the DOTS case we don=E2=80=99t have the same model given that, = as you rightfully said above, the current active mitigations can be = rebuilt at the server side without involving clients. =20 =20 [Jon] So this method sets epoch time back to 0 whenever there is a = restart,=20 [Med] Yes. The epoch is reset each time the state is lost at the server = side.=20 =20 rather that report on the number of seconds since Jan 1 1970. That I = can handle. However anycast (though redundant servers are currently out = of spec) where 2 or more servers restart and update the start time at = exactly the same time is possible, but unlikely. This could be handled = by the anycast servers communicating and seeing they both have the same = start time so one backs off (in time terms). =20 [Jon] I=E2=80=99m just interested in how to recover Observe loss. [Med] I=E2=80=99m not convinced this is really needed given that active = mitigations are not concerned with this failure scenario. =20 =20 I appreciate in peace time there may not be any DOTS client requests = (or heartbeat) for a long time... =20 I=E2=80=99m open to suggestions. =20 Regards =20 Jon =20 =20 =20 =20 ------=_NextPart_000_082E_01D3EDFB.7CE4A5D0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Hi Tiru,

 

See inline = [Jon1]

 

Regards

 

Jon

 

From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of = Konda, Tirumaleswar Reddy
Sent: 17 May 2018 = 16:03
To: Jon Shallow; mohamed.boucadair@orange.com; = dots@ietf.org
Subject: Re: [Dots] DOTS server crash/restart = with Observed = mitigations/Configuration

 

Hi = Jon,

 

This scenario is already discussed = in Section 4.7. When the DDoS mitigation is in progress and after the = =E2=80=98missing-hb-allowed=E2=80=99 threshold is reached, the DOTS = client will continue to use the existing (D)TLS session to send = heartbeat requests to the server and at the same time try to establish a = new (D)TLS session with DOTS server.

[Jon1] I fully = understand that

Further, if the server = restarts, (D)TLS state is lost on the server and the server does not = have the cryptographic state to send =E2=80=98re-subscribe=E2=80=99 on = the old session.

[Jon1] = Agreed the DOTS server cannot sent anything that is unsolicited due to = loss of cryptographic state.=C2=A0 However, if the DOTS server can send = back in a response to a client request something that states =E2=80=9CI = restarted recently @ such a time=E2=80=9D, the client will know whether = the missing heartbeats were down to just a flaky network, or the missing = heartbeats were due to a server restart, and so re-subscribe needed for = all the resources that the client wants to monitor.=C2=A0 I do not want = the DOTS client to keep on doing re-subscribe compounding the network = flakiness when under attack.

~Jon1

 

-Tiru

 

From: Jon Shallow = [mailto:supjps-ietf@jpshallow.com]
Sent: Thursday, May 17, = 2018 1:21 PM
To: Konda, Tirumaleswar Reddy = <TirumaleswarReddy_Konda@McAfee.com>; = mohamed.boucadair@orange.com; dots@ietf.org
Subject: RE: = [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

CAUTION: External email. = Do not click links or open attachments unless you recognize the sender = and know the content is safe.

Hi Tiru,

 

It is a corner recovery = case.  The DOTS client can detect that the DOTS server has gone = away (using heartbeats) and re-subscribe to all the resources that the = DOTS client wants to Observe on detection that the DOTS server is = back

 

However, when = mitigating, there is a likelihood that heartbeats will time out and I am = not sure that it is wise to =E2=80=9Cre-subscribe=E2=80=9D when the = connections are re-established as the network path may still be flaky = and adding extra traffic may be problematic.  My suggestion of an = epoch time being reported by the DOTS server was a way of determining = whether =E2=80=9Cre-subscribe=E2=80=9D was required or = not.

 

Regards

 

Jon

 

From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of = Konda, Tirumaleswar Reddy
Sent: 16 May 2018 = 16:05
To: mohamed.boucadair@orange.com; Jon Shallow; = dots@ietf.org
Subject: Re: [Dots] DOTS server crash/restart = with Observed = mitigations/Configuration

 

I don=E2=80=99t get = the problem. If the server restarts, (D)TLS state will be lost and = server will reject heartbeat requests from the client (either silently = or send a fatal alert to the client). DOTS client will have to follow = the steps in https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19#s= ection-4.7 to re-establish (D)TLS session with the DOTS server. =

 

-Tiru

 

From: Dots = [mailto:dots-bounces@ietf.org] On Behalf Of = mohamed.boucadair@orange.com
Sent: Wednesday, May 16, 2018 = 7:15 PM
To: Jon Shallow <supjps-ietf@jpshallow.com>; = dots@ietf.org
Subject: Re: [Dots] DOTS server crash/restart = with Observed = mitigations/Configuration

 

CAUTION: External email. = Do not click links or open attachments unless you recognize the sender = and know the content is safe.

Re-,

 

Please see inline.

 

Cheers,

Med

 

De : Jon Shallow [mailto:supjps-ietf@jpshallow.co= m]
Envoy=C3=A9 : mercredi 16 mai 2018 = 14:42
=C3=80 : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org
Objet : = RE: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

Hi = Med,

 

See = inline.

 

Regards

 

Jon

 

From: Dots [mailto: dots-bounces@ietf.org] On = Behalf Of mohamed.boucadair@orange.com=
Sent: 16 May 2018 12:55
To: Jon Shallow; dots@ietf.org
Subject: Re: = [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

Hi Jon,

 

Please see inline.

 

Cheers,

Med

 

De : Dots [mailto:dots-bounces@ietf.org] = De la part de Jon Shallow
Envoy=C3=A9 : mercredi = 16 mai 2018 12:24
=C3=80 : dots@ietf.org
Objet : = [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

Hi there,

 

For the = signal channel, it is easy to maintain a persistent list of active = mitigations.  Should the DOTS server (unexpectedly) stop and = restart, then it is easy to rebuild the current active = mitigations.

 

[Med] = The list of active mitigations is the =E2=80=9Ccore=E2=80=9D state data = to be maintained by a server. If we assume that list can be reliably = rebuilt, then there is no extension needed to the signal channel to = handle this failure case.

 

[Jon] Agreed.  This = was just me building up the background to the = scenario.

 

However, to rebuild the list of active Observations of = the current mitigations / configuration changes is considerably more = difficult as the DOTS server would also need to maintain a list of = client IPs/source ports etc. along with Tokens and Queries and (D)TLS = state so that unsolicited Observe responses can continue to be sent back = to the clients.  I don=E2=80=99t really think that this is a = practical ask.

 

[Med] = First, this can be considered as deployment-specific. As such in some = deployments, there is no need to support automatic means to detect state = loss at the server side. Second, is it really problematic for the DDoS = mitigation that list is lost by a server? I guess, the answer is no if = we assume the list of mitigations themselves is maintained. =

 

[Jon] My concern is that = the DOTS clients would not see the change in mitigation state, or would = not see that there is a new signal channel configuration (if they were = being Observed). The DOTS client/server would be out of sync with what = is happening and the DOTS client would not necessarily know that it has = to take some action to get back to the state before the DOTS server = outage.

 

[Med] = The dots client has other means to know the mitigation state. The DOTS = client can observe the status locally (and report it to the server) or = send a request to retrieve the status from the server. The out of synch = in observe is not that critical for mitigating DDoS attacks. =  

 

As the DOTS server restarted, existing (D)TLS sessions = used by the DOTS client will fail.  So, the heartbeat mechanism = will eventually time out  and I guess that the DOTS client should = detect this and re-do all of the Observe requests (along with making = sure that all the active mitigations are as expected).

 

[Med] = Including clients in networks under active attacks? Isn=E2=80=99t this = overloading the server while dealing with ongoing attacks? =  

 

[Jon] Yes, it would = =E2=80=93 hence I did not really want to have to do this whenever a = heartbeat failed, but only do it when the DOTS client = =E2=80=9Cknows=E2=80=9D that the server has had an = outage.

 

However in Peace time Heartbeats may not being = used.

However at Mitigation time = heartbeats may fail.

 

Would it = make sense to add to the signal channel an extra parameter that the DOTS = server can send to the client in any response in the form of =

=E2=80=9Clast-restarted=E2=80=9D : = seconds-since-epoch

Which the client = can use to detected the restart.

 

[Med] = We used to have an epoch-based approach for a statefull service (see https://tools.ie= tf.org/html/rfc6887#section-8.5). The details are not restricted to = just signalling the epoch value but to the logic to handle it at the = client side. Further, there are some aspects to be taken into account = when configuring redundancy servers when an anycast address is used. If = the same initial epoch value is configured, the client may not detect a = backup server is used and hence may not reinstall state... A tweak is to = configure distinct epoch values (e.g., +/- 24h difference between a = server redundancy group).

 

The = epoch is justified for 6887 because we wanted to recover state loss, = while in the DOTS case we don=E2=80=99t have the same model given that, = as you rightfully said above, the current active mitigations can be = rebuilt at the server side without involving clients. =  

 

[Jon] So this method = sets epoch time back to 0 whenever there is a restart,

[Med] = Yes. The epoch is reset each time the state is lost at the server side. =

 

rather that report on the number of seconds = since Jan 1 1970.   That I can handle.  However anycast = (though redundant servers are currently out of spec) where 2 or more = servers restart and update the start time at exactly the same time is = possible, but unlikely.  This could be handled by the anycast = servers communicating and seeing they both have the same start time so = one backs off (in time terms).

 

[Jon] I=E2=80=99m just = interested in how to recover Observe loss.

[Med] I=E2=80=99m not convinced this is really needed = given that active mitigations are not concerned with this failure = scenario.  

 

  I appreciate in peace time there may not be any = DOTS client requests (or heartbeat) for a long time...

 

I=E2=80=99m = open to suggestions.

 

Regards

 

Jon

 

 

 

 

------=_NextPart_000_082E_01D3EDFB.7CE4A5D0-- From nobody Thu May 17 09:06:12 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19CCC1241F3 for ; Thu, 17 May 2018 09:06:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.309 X-Spam-Level: X-Spam-Status: No, score=-4.309 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hBIiXgBKl0tK for ; Thu, 17 May 2018 09:06:05 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7FC941205F0 for ; Thu, 17 May 2018 09:06:05 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1526573153; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:MIME-Version:X-MS-Office365-Filtering-Correlation-Id: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=f lcQE02KOTPDqIvkuXrOM1BglKZl8Ge7CQ/lKRUOi/ g=; b=jpKZ4lnf/8sYZHRztDBmv/ZhCi9SWF7aUCLKfc8YcNlW CYY02/gkycZvRNdgVPCDjWkE/zyGbCwdTw/VSa8wAXXvTC1o/b YB7FeJdl3mrN9hXScWXh04G9lxZCXRfpt0sqCIWl17FsNbshcx F8H2+wrGzsgCo+K85yMDUbt9lRU= Received: from DNVEXAPP1N06.corpzone.internalzone.com (unknown [10.44.48.90]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 6ba7_6cda_e828416e_7b69_4867_a8d7_076ce3561e6f; Thu, 17 May 2018 11:05:52 -0500 Received: from DNVEXUSR1N12.corpzone.internalzone.com (10.44.48.85) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 May 2018 10:05:15 -0600 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXUSR1N12.corpzone.internalzone.com (10.44.48.85) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Thu, 17 May 2018 10:05:16 -0600 Received: from NAM03-BY2-obe.outbound.protection.outlook.com (10.44.176.241) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 May 2018 10:05:12 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB1779.namprd16.prod.outlook.com (10.172.28.143) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.776.11; Thu, 17 May 2018 16:05:12 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8%9]) with mapi id 15.20.0776.010; Thu, 17 May 2018 16:05:11 +0000 From: "Konda, Tirumaleswar Reddy" To: Jon Shallow , "mohamed.boucadair@orange.com" , "dots@ietf.org" Thread-Topic: [Dots] DOTS server crash/restart with Observed mitigations/Configuration Thread-Index: AdPs/+9TEvk/O5CYS8+qOpb9I1vXhAACuBlAAAIcswAAAjbXAAAByVCQACQmhYAAAPvNsAAO06eAAADXUFA= Date: Thu, 17 May 2018 16:05:11 +0000 Message-ID: References: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <02ad01d3ed13$42a0c3b0$c7e24b10$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1C138@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <039101d3edb3$dd8de830$98a9b890$@jpshallow.com> <082d01d3edf3$1b1df3e0$5159dba0$@jpshallow.com> In-Reply-To: <082d01d3edf3$1b1df3e0$5159dba0$@jpshallow.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [122.172.116.209] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB1779; 7:UchyZPYHvn2b006xx2148N6K78d6rdnLzok/+4C8MzhQiOa3MfB6u3GcjGx7WEvVGmjSsCdphA+UbBtCS4jRgcoCFL21A4Qe0ZA9AJO41TG6kBL+Iu7bwDWif4X0ecSmY++Hmjm/WTrBcL/1dvOXGc0v0xj4s4JKU3G2fnNhdvz/C6oL3ryOjo483FWk2J3T1QK83bjtj0v/KZMEjHgKDcr1DxXFU45dHksMBpqaOwMtTlx6XmKzh9w5tWFEQOLc x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB1779; x-ms-traffictypediagnostic: BN6PR16MB1779: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(190756311086443)(158342451672863)(18271650672692)(21748063052155)(123452027830198); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(10201501046)(3002001)(93006095)(93001095)(3231254)(944501410)(52105095)(149027)(150027)(6041310)(20161123560045)(20161123558120)(20161123564045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011)(7699016); SRVR:BN6PR16MB1779; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB1779; x-forefront-prvs: 067553F396 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(366004)(376002)(346002)(39380400002)(396003)(189003)(199004)(32952001)(55016002)(6246003)(6306002)(54896002)(2201001)(80792005)(478600001)(86362001)(966005)(74316002)(2900100001)(19609705001)(97736004)(59450400001)(9686003)(6506007)(236005)(8676002)(53546011)(606006)(93886005)(110136005)(72206003)(790700001)(2906002)(6436002)(316002)(6116002)(53936002)(3846002)(229853002)(106356001)(105586002)(53946003)(5660300001)(3280700002)(8936002)(186003)(5890100001)(66066001)(99286004)(25786009)(2501003)(14454004)(7736002)(3660700001)(7696005)(5250100002)(102836004)(11346002)(26005)(68736007)(476003)(486006)(76176011)(446003)(33656002)(81166006)(81156014)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB1779; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: PX3voDBoszkx82njEDr3d1nPrgTgAIVZAgBPLVhl2Z6oBQMb7tuJXmdGzsan679l6w8O4lPhyaLm+9/6+ZySsrTqnpTALvz2xoiW+EE9+nwp9dYvzzZbKFKybXUIVHxAAFIgdvPrfHhjf30Nj+qP6HiDnfPQE0tDxIcq8ohZjC+6yLBRSb/P1Drg2i9vSZW3mBGeFxO2QR58nrVqpUMf/A== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BN6PR16MB1425C81FAB6CB8E153B5E589EA910BN6PR16MB1425namp_" MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: 484428ae-6406-4212-6266-08d5bc0ff856 X-MS-Exchange-CrossTenant-Network-Message-Id: 484428ae-6406-4212-6266-08d5bc0ff856 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 May 2018 16:05:11.7860 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB1779 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6288> : inlines <6641> : streams <1787011> : uri <2642861> Archived-At: Subject: Re: [Dots] DOTS server crash/restart with Observed mitigations/Configuration X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 May 2018 16:06:10 -0000 --_000_BN6PR16MB1425C81FAB6CB8E153B5E589EA910BN6PR16MB1425namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 W0pvbjFdIEFncmVlZCB0aGUgRE9UUyBzZXJ2ZXIgY2Fubm90IHNlbnQgYW55dGhpbmcgdGhhdCBp cyB1bnNvbGljaXRlZCBkdWUgdG8gbG9zcyBvZiBjcnlwdG9ncmFwaGljIHN0YXRlLiAgSG93ZXZl ciwgaWYgdGhlIERPVFMgc2VydmVyIGNhbiBzZW5kIGJhY2sgaW4gYSByZXNwb25zZSB0byBhIGNs aWVudCByZXF1ZXN0IHNvbWV0aGluZyB0aGF0IHN0YXRlcyDigJxJIHJlc3RhcnRlZCByZWNlbnRs eSBAIHN1Y2ggYSB0aW1l4oCdLCB0aGUgY2xpZW50IHdpbGwga25vdyB3aGV0aGVyIHRoZSBtaXNz aW5nIGhlYXJ0YmVhdHMgd2VyZSBkb3duIHRvIGp1c3QgYSBmbGFreSBuZXR3b3JrLCBvciB0aGUg bWlzc2luZyBoZWFydGJlYXRzIHdlcmUgZHVlIHRvIGEgc2VydmVyIHJlc3RhcnQsIGFuZCBzbyBy ZS1zdWJzY3JpYmUgbmVlZGVkIGZvciBhbGwgdGhlIHJlc291cmNlcyB0aGF0IHRoZSBjbGllbnQg d2FudHMgdG8gbW9uaXRvci4gIEkgZG8gbm90IHdhbnQgdGhlIERPVFMgY2xpZW50IHRvIGtlZXAg b24gZG9pbmcgcmUtc3Vic2NyaWJlIGNvbXBvdW5kaW5nIHRoZSBuZXR3b3JrIGZsYWtpbmVzcyB3 aGVuIHVuZGVyIGF0dGFjay4NCg0KW1JdIFRoZSBmaXJzdCB0d28gc2VudGVuY2VzIGNvbnRyYWRp Y3QgZWFjaCBvdGhlci4gSG93IGNhbiB0aGUgc2VydmVyIHNlbmQgYW55IGRhdGEgb24gdGhlIG9s ZCBzZXNzaW9uID8NCkFuZCBJIGRvbuKAmXQgdW5kZXJzdGFuZCB0aGUgdmFsdWUgb2Ygc2VuZGlu ZyDigJxJIHJlc3RhcnRlZCByZWNlbnRseSBAc3VjaCBhIHRpbWXigJ0gaW4gdGhlIG5ldyAoRClU TFMgc2Vzc2lvbi4sIHRoZSBjbGllbnQgYW55d2F5cyBoYXMgdG8gcmVzZW5kIHRoZSBsaXN0IG9m IGFjdGl2ZSBtaXRpZ2F0aW9ucyBpdCB3aXNoZXMgdG8gb2JzZXJ2ZSBpbiB0aGUgbmV3IHNlc3Np b24gKGlycmVzcGVjdGl2ZSBvZiB0aGUgcmVhc29uIHRoZSBzZXNzaW9uIGlzIGRpc2Nvbm5lY3Rl ZCkuIEEgc2Vzc2lvbiBjb3VsZCBiZSBkaXNjb25uZWN0ZWQgYmVjYXVzZSBvZiB2YXJpb3VzIG90 aGVyIHJlYXNvbnMgKGUuZy4gTkFUIHJlbG9hZCkuDQoNCi1UaXJ1DQoNCkZyb206IEpvbiBTaGFs bG93IFttYWlsdG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbV0NClNlbnQ6IFRodXJzZGF5LCBN YXkgMTcsIDIwMTggODo1NCBQTQ0KVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgPFRpcnVt YWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20+OyBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2Uu Y29tOyBkb3RzQGlldGYub3JnDQpTdWJqZWN0OiBSRTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNo L3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uDQoNCg0KQ0FV VElPTjogRXh0ZXJuYWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0dGFjaG1l bnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQg aXMgc2FmZS4NCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KSGkgVGlydSwN Cg0KU2VlIGlubGluZSBbSm9uMV0NCg0KUmVnYXJkcw0KDQpKb24NCg0KRnJvbTogRG90cyBbbWFp bHRvOiBkb3RzLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZz5d IE9uIEJlaGFsZiBPZiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5DQpTZW50OiAxNyBNYXkgMjAx OCAxNjowMw0KVG86IEpvbiBTaGFsbG93OyBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPG1h aWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPjsgZG90c0BpZXRmLm9yZzxtYWlsdG86 ZG90c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVz dGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24NCg0KSGkgSm9uLA0K DQpUaGlzIHNjZW5hcmlvIGlzIGFscmVhZHkgZGlzY3Vzc2VkIGluIFNlY3Rpb24gNC43LiBXaGVu IHRoZSBERG9TIG1pdGlnYXRpb24gaXMgaW4gcHJvZ3Jlc3MgYW5kIGFmdGVyIHRoZSDigJhtaXNz aW5nLWhiLWFsbG93ZWTigJkgdGhyZXNob2xkIGlzIHJlYWNoZWQsIHRoZSBET1RTIGNsaWVudCB3 aWxsIGNvbnRpbnVlIHRvIHVzZSB0aGUgZXhpc3RpbmcgKEQpVExTIHNlc3Npb24gdG8gc2VuZCBo ZWFydGJlYXQgcmVxdWVzdHMgdG8gdGhlIHNlcnZlciBhbmQgYXQgdGhlIHNhbWUgdGltZSB0cnkg dG8gZXN0YWJsaXNoIGEgbmV3IChEKVRMUyBzZXNzaW9uIHdpdGggRE9UUyBzZXJ2ZXIuDQpbSm9u MV0gSSBmdWxseSB1bmRlcnN0YW5kIHRoYXQNCkZ1cnRoZXIsIGlmIHRoZSBzZXJ2ZXIgcmVzdGFy dHMsIChEKVRMUyBzdGF0ZSBpcyBsb3N0IG9uIHRoZSBzZXJ2ZXIgYW5kIHRoZSBzZXJ2ZXIgZG9l cyBub3QgaGF2ZSB0aGUgY3J5cHRvZ3JhcGhpYyBzdGF0ZSB0byBzZW5kIOKAmHJlLXN1YnNjcmli ZeKAmSBvbiB0aGUgb2xkIHNlc3Npb24uDQpbSm9uMV0gQWdyZWVkIHRoZSBET1RTIHNlcnZlciBj YW5ub3Qgc2VudCBhbnl0aGluZyB0aGF0IGlzIHVuc29saWNpdGVkIGR1ZSB0byBsb3NzIG9mIGNy eXB0b2dyYXBoaWMgc3RhdGUuICBIb3dldmVyLCBpZiB0aGUgRE9UUyBzZXJ2ZXIgY2FuIHNlbmQg YmFjayBpbiBhIHJlc3BvbnNlIHRvIGEgY2xpZW50IHJlcXVlc3Qgc29tZXRoaW5nIHRoYXQgc3Rh dGVzIOKAnEkgcmVzdGFydGVkIHJlY2VudGx5IEAgc3VjaCBhIHRpbWXigJ0sIHRoZSBjbGllbnQg d2lsbCBrbm93IHdoZXRoZXIgdGhlIG1pc3NpbmcgaGVhcnRiZWF0cyB3ZXJlIGRvd24gdG8ganVz dCBhIGZsYWt5IG5ldHdvcmssIG9yIHRoZSBtaXNzaW5nIGhlYXJ0YmVhdHMgd2VyZSBkdWUgdG8g YSBzZXJ2ZXIgcmVzdGFydCwgYW5kIHNvIHJlLXN1YnNjcmliZSBuZWVkZWQgZm9yIGFsbCB0aGUg cmVzb3VyY2VzIHRoYXQgdGhlIGNsaWVudCB3YW50cyB0byBtb25pdG9yLiAgSSBkbyBub3Qgd2Fu dCB0aGUgRE9UUyBjbGllbnQgdG8ga2VlcCBvbiBkb2luZyByZS1zdWJzY3JpYmUgY29tcG91bmRp bmcgdGhlIG5ldHdvcmsgZmxha2luZXNzIHdoZW4gdW5kZXIgYXR0YWNrLg0KfkpvbjENCg0KLVRp cnUNCg0KRnJvbTogSm9uIFNoYWxsb3cgW21haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29t XQ0KU2VudDogVGh1cnNkYXksIE1heSAxNywgMjAxOCAxOjIxIFBNDQpUbzogS29uZGEsIFRpcnVt YWxlc3dhciBSZWRkeSA8VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbTxtYWlsdG86 VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbT4+OyBtb2hhbWVkLmJvdWNhZGFpckBv cmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPjsgZG90c0BpZXRm Lm9yZzxtYWlsdG86ZG90c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJFOiBbRG90c10gRE9UUyBzZXJ2 ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24N Cg0KDQpDQVVUSU9OOiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4g YXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUg Y29udGVudCBpcyBzYWZlLg0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpI aSBUaXJ1LA0KDQpJdCBpcyBhIGNvcm5lciByZWNvdmVyeSBjYXNlLiAgVGhlIERPVFMgY2xpZW50 IGNhbiBkZXRlY3QgdGhhdCB0aGUgRE9UUyBzZXJ2ZXIgaGFzIGdvbmUgYXdheSAodXNpbmcgaGVh cnRiZWF0cykgYW5kIHJlLXN1YnNjcmliZSB0byBhbGwgdGhlIHJlc291cmNlcyB0aGF0IHRoZSBE T1RTIGNsaWVudCB3YW50cyB0byBPYnNlcnZlIG9uIGRldGVjdGlvbiB0aGF0IHRoZSBET1RTIHNl cnZlciBpcyBiYWNrDQoNCkhvd2V2ZXIsIHdoZW4gbWl0aWdhdGluZywgdGhlcmUgaXMgYSBsaWtl bGlob29kIHRoYXQgaGVhcnRiZWF0cyB3aWxsIHRpbWUgb3V0IGFuZCBJIGFtIG5vdCBzdXJlIHRo YXQgaXQgaXMgd2lzZSB0byDigJxyZS1zdWJzY3JpYmXigJ0gd2hlbiB0aGUgY29ubmVjdGlvbnMg YXJlIHJlLWVzdGFibGlzaGVkIGFzIHRoZSBuZXR3b3JrIHBhdGggbWF5IHN0aWxsIGJlIGZsYWt5 IGFuZCBhZGRpbmcgZXh0cmEgdHJhZmZpYyBtYXkgYmUgcHJvYmxlbWF0aWMuICBNeSBzdWdnZXN0 aW9uIG9mIGFuIGVwb2NoIHRpbWUgYmVpbmcgcmVwb3J0ZWQgYnkgdGhlIERPVFMgc2VydmVyIHdh cyBhIHdheSBvZiBkZXRlcm1pbmluZyB3aGV0aGVyIOKAnHJlLXN1YnNjcmliZeKAnSB3YXMgcmVx dWlyZWQgb3Igbm90Lg0KDQpSZWdhcmRzDQoNCkpvbg0KDQpGcm9tOiBEb3RzIFttYWlsdG86IGRv dHMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnPl0gT24gQmVo YWxmIE9mIEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkNClNlbnQ6IDE2IE1heSAyMDE4IDE2OjA1 DQpUbzogbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86bW9oYW1lZC5ib3VjYWRh aXJAb3JhbmdlLmNvbT47IEpvbiBTaGFsbG93OyBkb3RzQGlldGYub3JnPG1haWx0bzpkb3RzQGll dGYub3JnPg0KU3ViamVjdDogUmU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdp dGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0KDQpJIGRvbuKAmXQgZ2V0IHRo ZSBwcm9ibGVtLiBJZiB0aGUgc2VydmVyIHJlc3RhcnRzLCAoRClUTFMgc3RhdGUgd2lsbCBiZSBs b3N0IGFuZCBzZXJ2ZXIgd2lsbCByZWplY3QgaGVhcnRiZWF0IHJlcXVlc3RzIGZyb20gdGhlIGNs aWVudCAoZWl0aGVyIHNpbGVudGx5IG9yIHNlbmQgYSBmYXRhbCBhbGVydCB0byB0aGUgY2xpZW50 KS4gRE9UUyBjbGllbnQgd2lsbCBoYXZlIHRvIGZvbGxvdyB0aGUgc3RlcHMgaW4gaHR0cHM6Ly90 b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOSNzZWN0 aW9uLTQuNyB0byByZS1lc3RhYmxpc2ggKEQpVExTIHNlc3Npb24gd2l0aCB0aGUgRE9UUyBzZXJ2 ZXIuDQoNCi1UaXJ1DQoNCkZyb206IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmdd IE9uIEJlaGFsZiBPZiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPG1haWx0bzptb2hhbWVk LmJvdWNhZGFpckBvcmFuZ2UuY29tPg0KU2VudDogV2VkbmVzZGF5LCBNYXkgMTYsIDIwMTggNzox NSBQTQ0KVG86IEpvbiBTaGFsbG93IDxzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tPG1haWx0bzpz dXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tPj47IGRvdHNAaWV0Zi5vcmc8bWFpbHRvOmRvdHNAaWV0 Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0 aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uDQoNCg0KQ0FVVElPTjogRXh0ZXJu YWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5 b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS4NCg0K DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KUmUtLA0KDQpQbGVhc2Ugc2VlIGlu bGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCkRlIDogSm9uIFNoYWxsb3cgW21haWx0bzpzdXBqcHMt aWV0ZkBqcHNoYWxsb3cuY29tXQ0KRW52b3nDqSA6IG1lcmNyZWRpIDE2IG1haSAyMDE4IDE0OjQy DQrDgCA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE47IGRvdHNAaWV0Zi5vcmc8bWFpbHRvOmRv dHNAaWV0Zi5vcmc+DQpPYmpldCA6IFJFOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFy dCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24NCg0KSGkgTWVkLA0KDQpT ZWUgaW5saW5lLg0KDQpSZWdhcmRzDQoNCkpvbg0KDQpGcm9tOiBEb3RzIFttYWlsdG86IGRvdHMt Ym91bmNlc0BpZXRmLm9yZzxtYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnPl0gT24gQmVoYWxm IE9mIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208bWFpbHRvOm1vaGFtZWQuYm91Y2FkYWly QG9yYW5nZS5jb20+DQpTZW50OiAxNiBNYXkgMjAxOCAxMjo1NQ0KVG86IEpvbiBTaGFsbG93OyBk b3RzQGlldGYub3JnPG1haWx0bzpkb3RzQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtEb3RzXSBE T1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmln dXJhdGlvbg0KDQpIaSBKb24sDQoNClBsZWFzZSBzZWUgaW5saW5lLg0KDQpDaGVlcnMsDQpNZWQN Cg0KRGUgOiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBEZSBsYSBwYXJ0IGRl IEpvbiBTaGFsbG93DQpFbnZvecOpIDogbWVyY3JlZGkgMTYgbWFpIDIwMTggMTI6MjQNCsOAIDog ZG90c0BpZXRmLm9yZzxtYWlsdG86ZG90c0BpZXRmLm9yZz4NCk9iamV0IDogW0RvdHNdIERPVFMg c2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0 aW9uDQoNCkhpIHRoZXJlLA0KDQpGb3IgdGhlIHNpZ25hbCBjaGFubmVsLCBpdCBpcyBlYXN5IHRv IG1haW50YWluIGEgcGVyc2lzdGVudCBsaXN0IG9mIGFjdGl2ZSBtaXRpZ2F0aW9ucy4gIFNob3Vs ZCB0aGUgRE9UUyBzZXJ2ZXIgKHVuZXhwZWN0ZWRseSkgc3RvcCBhbmQgcmVzdGFydCwgdGhlbiBp dCBpcyBlYXN5IHRvIHJlYnVpbGQgdGhlIGN1cnJlbnQgYWN0aXZlIG1pdGlnYXRpb25zLg0KDQpb TWVkXSBUaGUgbGlzdCBvZiBhY3RpdmUgbWl0aWdhdGlvbnMgaXMgdGhlIOKAnGNvcmXigJ0gc3Rh dGUgZGF0YSB0byBiZSBtYWludGFpbmVkIGJ5IGEgc2VydmVyLiBJZiB3ZSBhc3N1bWUgdGhhdCBs aXN0IGNhbiBiZSByZWxpYWJseSByZWJ1aWx0LCB0aGVuIHRoZXJlIGlzIG5vIGV4dGVuc2lvbiBu ZWVkZWQgdG8gdGhlIHNpZ25hbCBjaGFubmVsIHRvIGhhbmRsZSB0aGlzIGZhaWx1cmUgY2FzZS4N Cg0KW0pvbl0gQWdyZWVkLiAgVGhpcyB3YXMganVzdCBtZSBidWlsZGluZyB1cCB0aGUgYmFja2dy b3VuZCB0byB0aGUgc2NlbmFyaW8uDQoNCkhvd2V2ZXIsIHRvIHJlYnVpbGQgdGhlIGxpc3Qgb2Yg YWN0aXZlIE9ic2VydmF0aW9ucyBvZiB0aGUgY3VycmVudCBtaXRpZ2F0aW9ucyAvIGNvbmZpZ3Vy YXRpb24gY2hhbmdlcyBpcyBjb25zaWRlcmFibHkgbW9yZSBkaWZmaWN1bHQgYXMgdGhlIERPVFMg c2VydmVyIHdvdWxkIGFsc28gbmVlZCB0byBtYWludGFpbiBhIGxpc3Qgb2YgY2xpZW50IElQcy9z b3VyY2UgcG9ydHMgZXRjLiBhbG9uZyB3aXRoIFRva2VucyBhbmQgUXVlcmllcyBhbmQgKEQpVExT IHN0YXRlIHNvIHRoYXQgdW5zb2xpY2l0ZWQgT2JzZXJ2ZSByZXNwb25zZXMgY2FuIGNvbnRpbnVl IHRvIGJlIHNlbnQgYmFjayB0byB0aGUgY2xpZW50cy4gIEkgZG9u4oCZdCByZWFsbHkgdGhpbmsg dGhhdCB0aGlzIGlzIGEgcHJhY3RpY2FsIGFzay4NCg0KW01lZF0gRmlyc3QsIHRoaXMgY2FuIGJl IGNvbnNpZGVyZWQgYXMgZGVwbG95bWVudC1zcGVjaWZpYy4gQXMgc3VjaCBpbiBzb21lIGRlcGxv eW1lbnRzLCB0aGVyZSBpcyBubyBuZWVkIHRvIHN1cHBvcnQgYXV0b21hdGljIG1lYW5zIHRvIGRl dGVjdCBzdGF0ZSBsb3NzIGF0IHRoZSBzZXJ2ZXIgc2lkZS4gU2Vjb25kLCBpcyBpdCByZWFsbHkg cHJvYmxlbWF0aWMgZm9yIHRoZSBERG9TIG1pdGlnYXRpb24gdGhhdCBsaXN0IGlzIGxvc3QgYnkg YSBzZXJ2ZXI/IEkgZ3Vlc3MsIHRoZSBhbnN3ZXIgaXMgbm8gaWYgd2UgYXNzdW1lIHRoZSBsaXN0 IG9mIG1pdGlnYXRpb25zIHRoZW1zZWx2ZXMgaXMgbWFpbnRhaW5lZC4NCg0KW0pvbl0gTXkgY29u Y2VybiBpcyB0aGF0IHRoZSBET1RTIGNsaWVudHMgd291bGQgbm90IHNlZSB0aGUgY2hhbmdlIGlu IG1pdGlnYXRpb24gc3RhdGUsIG9yIHdvdWxkIG5vdCBzZWUgdGhhdCB0aGVyZSBpcyBhIG5ldyBz aWduYWwgY2hhbm5lbCBjb25maWd1cmF0aW9uIChpZiB0aGV5IHdlcmUgYmVpbmcgT2JzZXJ2ZWQp LiBUaGUgRE9UUyBjbGllbnQvc2VydmVyIHdvdWxkIGJlIG91dCBvZiBzeW5jIHdpdGggd2hhdCBp cyBoYXBwZW5pbmcgYW5kIHRoZSBET1RTIGNsaWVudCB3b3VsZCBub3QgbmVjZXNzYXJpbHkga25v dyB0aGF0IGl0IGhhcyB0byB0YWtlIHNvbWUgYWN0aW9uIHRvIGdldCBiYWNrIHRvIHRoZSBzdGF0 ZSBiZWZvcmUgdGhlIERPVFMgc2VydmVyIG91dGFnZS4NCg0KW01lZF0gVGhlIGRvdHMgY2xpZW50 IGhhcyBvdGhlciBtZWFucyB0byBrbm93IHRoZSBtaXRpZ2F0aW9uIHN0YXRlLiBUaGUgRE9UUyBj bGllbnQgY2FuIG9ic2VydmUgdGhlIHN0YXR1cyBsb2NhbGx5IChhbmQgcmVwb3J0IGl0IHRvIHRo ZSBzZXJ2ZXIpIG9yIHNlbmQgYSByZXF1ZXN0IHRvIHJldHJpZXZlIHRoZSBzdGF0dXMgZnJvbSB0 aGUgc2VydmVyLiBUaGUgb3V0IG9mIHN5bmNoIGluIG9ic2VydmUgaXMgbm90IHRoYXQgY3JpdGlj YWwgZm9yIG1pdGlnYXRpbmcgRERvUyBhdHRhY2tzLg0KDQpBcyB0aGUgRE9UUyBzZXJ2ZXIgcmVz dGFydGVkLCBleGlzdGluZyAoRClUTFMgc2Vzc2lvbnMgdXNlZCBieSB0aGUgRE9UUyBjbGllbnQg d2lsbCBmYWlsLiAgU28sIHRoZSBoZWFydGJlYXQgbWVjaGFuaXNtIHdpbGwgZXZlbnR1YWxseSB0 aW1lIG91dCAgYW5kIEkgZ3Vlc3MgdGhhdCB0aGUgRE9UUyBjbGllbnQgc2hvdWxkIGRldGVjdCB0 aGlzIGFuZCByZS1kbyBhbGwgb2YgdGhlIE9ic2VydmUgcmVxdWVzdHMgKGFsb25nIHdpdGggbWFr aW5nIHN1cmUgdGhhdCBhbGwgdGhlIGFjdGl2ZSBtaXRpZ2F0aW9ucyBhcmUgYXMgZXhwZWN0ZWQp Lg0KDQpbTWVkXSBJbmNsdWRpbmcgY2xpZW50cyBpbiBuZXR3b3JrcyB1bmRlciBhY3RpdmUgYXR0 YWNrcz8gSXNu4oCZdCB0aGlzIG92ZXJsb2FkaW5nIHRoZSBzZXJ2ZXIgd2hpbGUgZGVhbGluZyB3 aXRoIG9uZ29pbmcgYXR0YWNrcz8NCg0KW0pvbl0gWWVzLCBpdCB3b3VsZCDigJMgaGVuY2UgSSBk aWQgbm90IHJlYWxseSB3YW50IHRvIGhhdmUgdG8gZG8gdGhpcyB3aGVuZXZlciBhIGhlYXJ0YmVh dCBmYWlsZWQsIGJ1dCBvbmx5IGRvIGl0IHdoZW4gdGhlIERPVFMgY2xpZW50IOKAnGtub3dz4oCd IHRoYXQgdGhlIHNlcnZlciBoYXMgaGFkIGFuIG91dGFnZS4NCg0KSG93ZXZlciBpbiBQZWFjZSB0 aW1lIEhlYXJ0YmVhdHMgbWF5IG5vdCBiZWluZyB1c2VkLg0KSG93ZXZlciBhdCBNaXRpZ2F0aW9u IHRpbWUgaGVhcnRiZWF0cyBtYXkgZmFpbC4NCg0KV291bGQgaXQgbWFrZSBzZW5zZSB0byBhZGQg dG8gdGhlIHNpZ25hbCBjaGFubmVsIGFuIGV4dHJhIHBhcmFtZXRlciB0aGF0IHRoZSBET1RTIHNl cnZlciBjYW4gc2VuZCB0byB0aGUgY2xpZW50IGluIGFueSByZXNwb25zZSBpbiB0aGUgZm9ybSBv Zg0K4oCcbGFzdC1yZXN0YXJ0ZWTigJ0gOiBzZWNvbmRzLXNpbmNlLWVwb2NoDQpXaGljaCB0aGUg Y2xpZW50IGNhbiB1c2UgdG8gZGV0ZWN0ZWQgdGhlIHJlc3RhcnQuDQoNCltNZWRdIFdlIHVzZWQg dG8gaGF2ZSBhbiBlcG9jaC1iYXNlZCBhcHByb2FjaCBmb3IgYSBzdGF0ZWZ1bGwgc2VydmljZSAo c2VlIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2ODg3I3NlY3Rpb24tOC41KS4gVGhl IGRldGFpbHMgYXJlIG5vdCByZXN0cmljdGVkIHRvIGp1c3Qgc2lnbmFsbGluZyB0aGUgZXBvY2gg dmFsdWUgYnV0IHRvIHRoZSBsb2dpYyB0byBoYW5kbGUgaXQgYXQgdGhlIGNsaWVudCBzaWRlLiBG dXJ0aGVyLCB0aGVyZSBhcmUgc29tZSBhc3BlY3RzIHRvIGJlIHRha2VuIGludG8gYWNjb3VudCB3 aGVuIGNvbmZpZ3VyaW5nIHJlZHVuZGFuY3kgc2VydmVycyB3aGVuIGFuIGFueWNhc3QgYWRkcmVz cyBpcyB1c2VkLiBJZiB0aGUgc2FtZSBpbml0aWFsIGVwb2NoIHZhbHVlIGlzIGNvbmZpZ3VyZWQs IHRoZSBjbGllbnQgbWF5IG5vdCBkZXRlY3QgYSBiYWNrdXAgc2VydmVyIGlzIHVzZWQgYW5kIGhl bmNlIG1heSBub3QgcmVpbnN0YWxsIHN0YXRlLi4uIEEgdHdlYWsgaXMgdG8gY29uZmlndXJlIGRp c3RpbmN0IGVwb2NoIHZhbHVlcyAoZS5nLiwgKy8tIDI0aCBkaWZmZXJlbmNlIGJldHdlZW4gYSBz ZXJ2ZXIgcmVkdW5kYW5jeSBncm91cCkuDQoNClRoZSBlcG9jaCBpcyBqdXN0aWZpZWQgZm9yIDY4 ODcgYmVjYXVzZSB3ZSB3YW50ZWQgdG8gcmVjb3ZlciBzdGF0ZSBsb3NzLCB3aGlsZSBpbiB0aGUg RE9UUyBjYXNlIHdlIGRvbuKAmXQgaGF2ZSB0aGUgc2FtZSBtb2RlbCBnaXZlbiB0aGF0LCBhcyB5 b3UgcmlnaHRmdWxseSBzYWlkIGFib3ZlLCB0aGUgY3VycmVudCBhY3RpdmUgbWl0aWdhdGlvbnMg Y2FuIGJlIHJlYnVpbHQgYXQgdGhlIHNlcnZlciBzaWRlIHdpdGhvdXQgaW52b2x2aW5nIGNsaWVu dHMuDQoNCltKb25dIFNvIHRoaXMgbWV0aG9kIHNldHMgZXBvY2ggdGltZSBiYWNrIHRvIDAgd2hl bmV2ZXIgdGhlcmUgaXMgYSByZXN0YXJ0LA0KW01lZF0gWWVzLiBUaGUgZXBvY2ggaXMgcmVzZXQg ZWFjaCB0aW1lIHRoZSBzdGF0ZSBpcyBsb3N0IGF0IHRoZSBzZXJ2ZXIgc2lkZS4NCg0KcmF0aGVy IHRoYXQgcmVwb3J0IG9uIHRoZSBudW1iZXIgb2Ygc2Vjb25kcyBzaW5jZSBKYW4gMSAxOTcwLiAg IFRoYXQgSSBjYW4gaGFuZGxlLiAgSG93ZXZlciBhbnljYXN0ICh0aG91Z2ggcmVkdW5kYW50IHNl cnZlcnMgYXJlIGN1cnJlbnRseSBvdXQgb2Ygc3BlYykgd2hlcmUgMiBvciBtb3JlIHNlcnZlcnMg cmVzdGFydCBhbmQgdXBkYXRlIHRoZSBzdGFydCB0aW1lIGF0IGV4YWN0bHkgdGhlIHNhbWUgdGlt ZSBpcyBwb3NzaWJsZSwgYnV0IHVubGlrZWx5LiAgVGhpcyBjb3VsZCBiZSBoYW5kbGVkIGJ5IHRo ZSBhbnljYXN0IHNlcnZlcnMgY29tbXVuaWNhdGluZyBhbmQgc2VlaW5nIHRoZXkgYm90aCBoYXZl IHRoZSBzYW1lIHN0YXJ0IHRpbWUgc28gb25lIGJhY2tzIG9mZiAoaW4gdGltZSB0ZXJtcykuDQoN CltKb25dIEnigJltIGp1c3QgaW50ZXJlc3RlZCBpbiBob3cgdG8gcmVjb3ZlciBPYnNlcnZlIGxv c3MuDQpbTWVkXSBJ4oCZbSBub3QgY29udmluY2VkIHRoaXMgaXMgcmVhbGx5IG5lZWRlZCBnaXZl biB0aGF0IGFjdGl2ZSBtaXRpZ2F0aW9ucyBhcmUgbm90IGNvbmNlcm5lZCB3aXRoIHRoaXMgZmFp bHVyZSBzY2VuYXJpby4NCg0KICBJIGFwcHJlY2lhdGUgaW4gcGVhY2UgdGltZSB0aGVyZSBtYXkg bm90IGJlIGFueSBET1RTIGNsaWVudCByZXF1ZXN0cyAob3IgaGVhcnRiZWF0KSBmb3IgYSBsb25n IHRpbWUuLi4NCg0KSeKAmW0gb3BlbiB0byBzdWdnZXN0aW9ucy4NCg0KUmVnYXJkcw0KDQpKb24N Cg0KDQoNCg0K --_000_BN6PR16MB1425C81FAB6CB8E153B5E589EA910BN6PR16MB1425namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpEZW5nWGlhbjsNCglwYW5vc2UtMToy IDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OiJcQERlbmdYaWFuIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250 LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDMgNSA0IDQg MiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFs LCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0K CWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJ bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXtt c28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1t YXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9u dC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlw ZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciOw0KCWNvbG9yOmJsYWNrOw0K CWZvbnQtd2VpZ2h0Om5vcm1hbDsNCglmb250LXN0eWxlOm5vcm1hbDt9DQpzcGFuLkVtYWlsU3R5 bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTIyDQoJe21zby1z dHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJY29sb3I6 YmxhY2s7DQoJZm9udC13ZWlnaHQ6bm9ybWFsOw0KCWZvbnQtc3R5bGU6bm9ybWFsO30NCnNwYW4u RW1haWxTdHlsZTIzDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxl MjQNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyNQ0KCXttc28tc3R5 bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCglj b2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTI2DQoJe21zby1zdHlsZS10eXBlOnBl cnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5 N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7 DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9 DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNp emU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCglt YXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdl OldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86 c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2Vu ZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVk aXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+ PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1 ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3Vh Z2U6WkgtQ04iPltKb24xXSBBZ3JlZWQgdGhlIERPVFMgc2VydmVyIGNhbm5vdCBzZW50IGFueXRo aW5nIHRoYXQgaXMgdW5zb2xpY2l0ZWQgZHVlIHRvIGxvc3Mgb2YgY3J5cHRvZ3JhcGhpYyBzdGF0 ZS4mbmJzcDsgSG93ZXZlciwgaWYgdGhlIERPVFMgc2VydmVyIGNhbiBzZW5kIGJhY2sgaW4gYSBy ZXNwb25zZSB0byBhIGNsaWVudCByZXF1ZXN0DQogc29tZXRoaW5nIHRoYXQgc3RhdGVzIOKAnEkg cmVzdGFydGVkIHJlY2VudGx5IEAgc3VjaCBhIHRpbWXigJ0sIHRoZSBjbGllbnQgd2lsbCBrbm93 IHdoZXRoZXIgdGhlIG1pc3NpbmcgaGVhcnRiZWF0cyB3ZXJlIGRvd24gdG8ganVzdCBhIGZsYWt5 IG5ldHdvcmssIG9yIHRoZSBtaXNzaW5nIGhlYXJ0YmVhdHMgd2VyZSBkdWUgdG8gYSBzZXJ2ZXIg cmVzdGFydCwgYW5kIHNvIHJlLXN1YnNjcmliZSBuZWVkZWQgZm9yIGFsbCB0aGUgcmVzb3VyY2Vz IHRoYXQNCiB0aGUgY2xpZW50IHdhbnRzIHRvIG1vbml0b3IuJm5ic3A7IEkgZG8gbm90IHdhbnQg dGhlIERPVFMgY2xpZW50IHRvIGtlZXAgb24gZG9pbmcgcmUtc3Vic2NyaWJlIGNvbXBvdW5kaW5n IHRoZSBuZXR3b3JrIGZsYWtpbmVzcyB3aGVuIHVuZGVyIGF0dGFjay48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFu Z3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+W1JdIFRoZSBm aXJzdCB0d28gc2VudGVuY2VzIGNvbnRyYWRpY3QgZWFjaCBvdGhlci4gSG93IGNhbiB0aGUgc2Vy dmVyIHNlbmQgYW55IGRhdGEgb24gdGhlIG9sZCBzZXNzaW9uID8NCjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5n dWFnZTpaSC1DTiI+QW5kIEkgZG9u4oCZdCB1bmRlcnN0YW5kIHRoZSB2YWx1ZSBvZiBzZW5kaW5n IOKAnEkgcmVzdGFydGVkIHJlY2VudGx5IEBzdWNoIGEgdGltZeKAnSBpbiB0aGUgbmV3IChEKVRM UyBzZXNzaW9uLiwgdGhlIGNsaWVudCBhbnl3YXlzIGhhcyB0byByZXNlbmQgdGhlIGxpc3Qgb2Yg YWN0aXZlIG1pdGlnYXRpb25zIGl0IHdpc2hlcyB0byBvYnNlcnZlIGluDQogdGhlIG5ldyBzZXNz aW9uIChpcnJlc3BlY3RpdmUgb2YgdGhlIHJlYXNvbiB0aGUgc2Vzc2lvbiBpcyBkaXNjb25uZWN0 ZWQpLiA8YSBuYW1lPSJfTWFpbEVuZENvbXBvc2UiPg0KQSBzZXNzaW9uIGNvdWxkIGJlIGRpc2Nv bm5lY3RlZCBiZWNhdXNlIG9mIHZhcmlvdXMgb3RoZXIgcmVhc29ucyAoZS5nLiBOQVQgcmVsb2Fk KS4NCjxvOnA+PC9vOnA+PC9hPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWlsRW5kQ29tcG9zZSI+PHNwYW4gc3R5bGU9Im1zby1m YXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbEVu ZENvbXBvc2UiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+LVRpcnU8 bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9Im1zby1ib29rbWFyazpfTWFpbEVuZENvbXBvc2UiPjxzcGFuIHN0eWxlPSJtc28tZmFy ZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9zcGFuPjwvcD4N CjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxFbmRDb21wb3NlIj48L3NwYW4+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6 MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpa SC1DTiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpa SC1DTiI+IEpvbiBTaGFsbG93IFttYWlsdG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbV0NCjxi cj4NCjxiPlNlbnQ6PC9iPiBUaHVyc2RheSwgTWF5IDE3LCAyMDE4IDg6NTQgUE08YnI+DQo8Yj5U bzo8L2I+IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgJmx0O1RpcnVtYWxlc3dhclJlZGR5X0tv bmRhQE1jQWZlZS5jb20mZ3Q7OyBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tOyBkb3RzQGll dGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJFOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gv cmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb248bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHRhYmxlIGNsYXNzPSJNc29Ob3JtYWxUYWJsZSIgYm9y ZGVyPSIxIiBjZWxsc3BhY2luZz0iMyIgY2VsbHBhZGRpbmc9IjAiIHN0eWxlPSJiYWNrZ3JvdW5k OiNGM0ZGMzM7Ym9yZGVyOnNvbGlkICM5QjlBODcgMS41cHQiPg0KPHRib2R5Pg0KPHRyPg0KPHRk IHN0eWxlPSJib3JkZXI6bm9uZTtwYWRkaW5nOi43NXB0IC43NXB0IC43NXB0IC43NXB0Ij4NCjxw PjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzlCOEIzRSI+Q0FVVElPTjwvc3Bhbj48L3N0cm9uZz48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojOUI4QjNFIj46 PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOmJsYWNrIj4gRXh0ZXJuYWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBv cGVuDQogYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25v dyB0aGUgY29udGVudCBpcyBzYWZlLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1 b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC90ZD4N CjwvdHI+DQo8L3Rib2R5Pg0KPC90YWJsZT4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249 ImNlbnRlciIgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4NCjxociBzaXplPSIzIiB3aWR0aD0iMTAw JSIgYWxpZ249ImNlbnRlciI+DQo8L3NwYW4+PC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SGkgVGlydSw8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+U2VlIGlubGluZSBbSm9uMV08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+UmVnYXJkczxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Kb248bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFk ZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fu cy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90Oyxz YW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj4gRG90cyBbbWFpbHRvOg0KPGEg aHJlZj0ibWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZyI+ZG90cy1ib3VuY2VzQGlldGYub3Jn PC9hPl0gPGI+T24gQmVoYWxmIE9mDQo8L2I+S29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeTxicj4N CjxiPlNlbnQ6PC9iPiAxNyBNYXkgMjAxOCAxNjowMzxicj4NCjxiPlRvOjwvYj4gSm9uIFNoYWxs b3c7IDxhIGhyZWY9Im1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIj5tb2hhbWVk LmJvdWNhZGFpckBvcmFuZ2UuY29tPC9hPjsNCjxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3Jn Ij5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0RvdHNdIERPVFMg c2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0 aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6Wkgt Q04iPkhpIEpvbiw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFz dC1sYW5ndWFnZTpaSC1DTiI+VGhpcyBzY2VuYXJpbyBpcyBhbHJlYWR5IGRpc2N1c3NlZCBpbiBT ZWN0aW9uIDQuNy4gV2hlbiB0aGUgRERvUyBtaXRpZ2F0aW9uIGlzIGluIHByb2dyZXNzIGFuZCBh ZnRlciB0aGUg4oCYbWlzc2luZy1oYi1hbGxvd2Vk4oCZIHRocmVzaG9sZCBpcyByZWFjaGVkLCB0 aGUgRE9UUyBjbGllbnQgd2lsbCBjb250aW51ZSB0byB1c2UgdGhlIGV4aXN0aW5nDQogKEQpVExT IHNlc3Npb24gdG8gc2VuZCBoZWFydGJlYXQgcmVxdWVzdHMgdG8gdGhlIHNlcnZlciBhbmQgYXQg dGhlIHNhbWUgdGltZSB0cnkgdG8gZXN0YWJsaXNoIGEgbmV3IChEKVRMUyBzZXNzaW9uIHdpdGgg RE9UUyBzZXJ2ZXIuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+ W0pvbjFdIEkgZnVsbHkgdW5kZXJzdGFuZCB0aGF0PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNO Ij5GdXJ0aGVyLCBpZiB0aGUgc2VydmVyIHJlc3RhcnRzLCAoRClUTFMgc3RhdGUgaXMgbG9zdCBv biB0aGUgc2VydmVyIGFuZCB0aGUgc2VydmVyIGRvZXMgbm90IGhhdmUgdGhlIGNyeXB0b2dyYXBo aWMgc3RhdGUgdG8gc2VuZCDigJhyZS1zdWJzY3JpYmXigJkgb24gdGhlIG9sZCBzZXNzaW9uLg0K PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPltKb24xXSBBZ3JlZWQg dGhlIERPVFMgc2VydmVyIGNhbm5vdCBzZW50IGFueXRoaW5nIHRoYXQgaXMgdW5zb2xpY2l0ZWQg ZHVlIHRvIGxvc3Mgb2YgY3J5cHRvZ3JhcGhpYyBzdGF0ZS4mbmJzcDsgSG93ZXZlciwgaWYgdGhl IERPVFMgc2VydmVyIGNhbiBzZW5kIGJhY2sgaW4gYSByZXNwb25zZSB0byBhIGNsaWVudCByZXF1 ZXN0DQogc29tZXRoaW5nIHRoYXQgc3RhdGVzIOKAnEkgcmVzdGFydGVkIHJlY2VudGx5IEAgc3Vj aCBhIHRpbWXigJ0sIHRoZSBjbGllbnQgd2lsbCBrbm93IHdoZXRoZXIgdGhlIG1pc3NpbmcgaGVh cnRiZWF0cyB3ZXJlIGRvd24gdG8ganVzdCBhIGZsYWt5IG5ldHdvcmssIG9yIHRoZSBtaXNzaW5n IGhlYXJ0YmVhdHMgd2VyZSBkdWUgdG8gYSBzZXJ2ZXIgcmVzdGFydCwgYW5kIHNvIHJlLXN1YnNj cmliZSBuZWVkZWQgZm9yIGFsbCB0aGUgcmVzb3VyY2VzIHRoYXQNCiB0aGUgY2xpZW50IHdhbnRz IHRvIG1vbml0b3IuJm5ic3A7IEkgZG8gbm90IHdhbnQgdGhlIERPVFMgY2xpZW50IHRvIGtlZXAg b24gZG9pbmcgcmUtc3Vic2NyaWJlIGNvbXBvdW5kaW5nIHRoZSBuZXR3b3JrIGZsYWtpbmVzcyB3 aGVuIHVuZGVyIGF0dGFjay48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1D TiI+fkpvbjE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1s YW5ndWFnZTpaSC1DTiI+LVRpcnU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0 OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRp diBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRp bmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5 bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5 bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4gSm9uIFNoYWxsb3cgWzxhIGhyZWY9Im1h aWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tIj5tYWlsdG86c3VwanBzLWlldGZAanBzaGFs bG93LmNvbTwvYT5dDQo8YnI+DQo8Yj5TZW50OjwvYj4gVGh1cnNkYXksIE1heSAxNywgMjAxOCAx OjIxIFBNPGJyPg0KPGI+VG86PC9iPiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5ICZsdDs8YSBo cmVmPSJtYWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbSI+VGlydW1hbGVz d2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbTwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOm1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iPm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208L2E+ OyA8YSBocmVmPSJtYWlsdG86ZG90c0BpZXRmLm9yZyI+DQpkb3RzQGlldGYub3JnPC9hPjxicj4N CjxiPlN1YmplY3Q6PC9iPiBSRTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0 aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPGRpdj4NCjx0YWJsZSBjbGFzcz0iTXNvTm9ybWFsVGFibGUiIGJvcmRlcj0iMSIgY2Vs bHNwYWNpbmc9IjMiIGNlbGxwYWRkaW5nPSIwIiBzdHlsZT0iYmFja2dyb3VuZDojRjNGRjMzO2Jv cmRlcjpzb2xpZCAjOUI5QTg3IDEuNXB0Ij4NCjx0Ym9keT4NCjx0cj4NCjx0ZCBzdHlsZT0iYm9y ZGVyOm5vbmU7cGFkZGluZzouNzVwdCAuNzVwdCAuNzVwdCAuNzVwdCI+DQo8cD48c3Ryb25nPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiM5QjhCM0UiPkNBVVRJT048L3NwYW4+PC9zdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzlCOEIzRSI+Ojwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpi bGFjayI+IEV4dGVybmFsIGVtYWlsLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3Blbg0KIGF0dGFj aG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRl bnQgaXMgc2FmZS48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1 b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvdGQ+DQo8L3RyPg0KPC90 Ym9keT4NCjwvdGFibGU+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0 eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJtc28tZmFy ZWFzdC1sYW5ndWFnZTpaSC1DTiI+DQo8aHIgc2l6ZT0iMyIgd2lkdGg9IjEwMCUiIGFsaWduPSJj ZW50ZXIiPg0KPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhpIFRpcnUsPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxl PSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkl0IGlz IGEgY29ybmVyIHJlY292ZXJ5IGNhc2UuJm5ic3A7IFRoZSBET1RTIGNsaWVudCBjYW4gZGV0ZWN0 IHRoYXQgdGhlIERPVFMgc2VydmVyIGhhcyBnb25lIGF3YXkgKHVzaW5nIGhlYXJ0YmVhdHMpIGFu ZCByZS1zdWJzY3JpYmUgdG8gYWxsIHRoZSByZXNvdXJjZXMgdGhhdCB0aGUgRE9UUyBjbGllbnQg d2FudHMgdG8gT2JzZXJ2ZSBvbiBkZXRlY3Rpb24NCiB0aGF0IHRoZSBET1RTIHNlcnZlciBpcyBi YWNrPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9y OiMxRjQ5N0QiPkhvd2V2ZXIsIHdoZW4gbWl0aWdhdGluZywgdGhlcmUgaXMgYSBsaWtlbGlob29k IHRoYXQgaGVhcnRiZWF0cyB3aWxsIHRpbWUgb3V0IGFuZCBJIGFtIG5vdCBzdXJlIHRoYXQgaXQg aXMgd2lzZSB0byDigJxyZS1zdWJzY3JpYmXigJ0gd2hlbiB0aGUgY29ubmVjdGlvbnMgYXJlIHJl LWVzdGFibGlzaGVkIGFzIHRoZSBuZXR3b3JrIHBhdGggbWF5IHN0aWxsDQogYmUgZmxha3kgYW5k IGFkZGluZyBleHRyYSB0cmFmZmljIG1heSBiZSBwcm9ibGVtYXRpYy4mbmJzcDsgTXkgc3VnZ2Vz dGlvbiBvZiBhbiBlcG9jaCB0aW1lIGJlaW5nIHJlcG9ydGVkIGJ5IHRoZSBET1RTIHNlcnZlciB3 YXMgYSB3YXkgb2YgZGV0ZXJtaW5pbmcgd2hldGhlciDigJxyZS1zdWJzY3JpYmXigJ0gd2FzIHJl cXVpcmVkIG9yIG5vdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBz dHlsZT0iY29sb3I6IzFGNDk3RCI+UmVnYXJkczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Kb248bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9y OiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxl PSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBw dCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjtt c28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlm O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj4gRG90cyBbbWFpbHRvOg0KPGEgaHJlZj0ibWFp bHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZyI+ZG90cy1ib3VuY2VzQGlldGYub3JnPC9hPl0gPGI+ T24gQmVoYWxmIE9mDQo8L2I+S29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeTxicj4NCjxiPlNlbnQ6 PC9iPiAxNiBNYXkgMjAxOCAxNjowNTxicj4NCjxiPlRvOjwvYj4gPGEgaHJlZj0ibWFpbHRvOm1v aGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iPm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208 L2E+OyBKb24gU2hhbGxvdzsNCjxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGll dGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNy YXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkkgZG9u 4oCZdCBnZXQgdGhlIHByb2JsZW0uIElmIHRoZSBzZXJ2ZXIgcmVzdGFydHMsIChEKVRMUyBzdGF0 ZSB3aWxsIGJlIGxvc3QgYW5kIHNlcnZlciB3aWxsIHJlamVjdCBoZWFydGJlYXQgcmVxdWVzdHMg ZnJvbSB0aGUgY2xpZW50IChlaXRoZXIgc2lsZW50bHkgb3Igc2VuZCBhIGZhdGFsIGFsZXJ0IHRv IHRoZSBjbGllbnQpLiBET1RTIGNsaWVudA0KIHdpbGwgaGF2ZSB0byBmb2xsb3cgdGhlIHN0ZXBz IGluIDxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWRvdHMt c2lnbmFsLWNoYW5uZWwtMTkjc2VjdGlvbi00LjciPg0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9o dG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOSNzZWN0aW9uLTQuNzwvYT4gdG8g cmUtZXN0YWJsaXNoIChEKVRMUyBzZXNzaW9uIHdpdGggdGhlIERPVFMgc2VydmVyLg0KPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1m YXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04i Pi1UaXJ1PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEu NXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAw aW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFz dC1sYW5ndWFnZTpaSC1DTiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFz dC1sYW5ndWFnZTpaSC1DTiI+IERvdHMgWzxhIGhyZWY9Im1haWx0bzpkb3RzLWJvdW5jZXNAaWV0 Zi5vcmciPm1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XQ0KPGI+T24gQmVoYWxmIE9m IDwvYj48YSBocmVmPSJtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSI+bW9oYW1l ZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT48YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBN YXkgMTYsIDIwMTggNzoxNSBQTTxicj4NCjxiPlRvOjwvYj4gSm9uIFNoYWxsb3cgJmx0OzxhIGhy ZWY9Im1haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tIj5zdXBqcHMtaWV0ZkBqcHNoYWxs b3cuY29tPC9hPiZndDs7DQo8YSBocmVmPSJtYWlsdG86ZG90c0BpZXRmLm9yZyI+ZG90c0BpZXRm Lm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFz aC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8dGFibGUgY2xhc3M9Ik1zb05vcm1hbFRhYmxlIiBi b3JkZXI9IjEiIGNlbGxzcGFjaW5nPSIzIiBjZWxscGFkZGluZz0iMCIgc3R5bGU9ImJhY2tncm91 bmQ6I0YzRkYzMztib3JkZXI6c29saWQgIzlCOUE4NyAxLjVwdCI+DQo8dGJvZHk+DQo8dHI+DQo8 dGQgc3R5bGU9ImJvcmRlcjpub25lO3BhZGRpbmc6Ljc1cHQgLjc1cHQgLjc1cHQgLjc1cHQiPg0K PHA+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojOUI4QjNFIj5DQVVUSU9OPC9zcGFuPjwvc3Ryb25nPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0Ui Pjo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6YmxhY2siPiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90IGNsaWNrIGxpbmtzIG9y IG9wZW4NCiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBr bm93IHRoZSBjb250ZW50IGlzIHNhZmUuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTom cXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L3Rk Pg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIiBhbGln bj0iY2VudGVyIiBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIGxhbmc9IkZSIiBzdHls ZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPg0KPGhyIHNpemU9IjMiIHdpZHRoPSIxMDAl IiBhbGlnbj0iY2VudGVyIj4NCjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5SZS0sPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlBsZWFzZSBzZWUgaW5saW5lLg0KPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkNoZWVycyw8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6YmxhY2siPk1lZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVw dDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGlu IDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWY7 bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPkRlJm5ic3A7Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0i RlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90 OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOkZSIj4gSm9uIFNoYWxsb3cgWzxhIGhy ZWY9Im1haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tIj5tYWlsdG86c3VwanBzLWlldGZA anBzaGFsbG93LmNvbTwvYT5dDQo8YnI+DQo8Yj5FbnZvecOpJm5ic3A7OjwvYj4gbWVyY3JlZGkg MTYgbWFpIDIwMTggMTQ6NDI8YnI+DQo8Yj7DgCZuYnNwOzo8L2I+IEJPVUNBREFJUiBNb2hhbWVk IElNVC9PTE47IDxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9h Pjxicj4NCjxiPk9iamV0Jm5ic3A7OjwvYj4gUkU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9y ZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJGUiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5IaSBNZWQsPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0Ii IHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi PlNlZSBpbmxpbmUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9ImNvbG9yOiMxRjQ5N0QiPlJlZ2FyZHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Sm9uPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjoj MUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQg MGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNv LWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjtt c28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+IERvdHMgW21haWx0bzoNCjxhIGhyZWY9Im1haWx0 bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmciPmRvdHMtYm91bmNlc0BpZXRmLm9yZzwvYT5dIDxiPk9u IEJlaGFsZiBPZg0KPC9iPjxhIGhyZWY9Im1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2Uu Y29tIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPC9hPjxicj4NCjxiPlNlbnQ6PC9iPiAx NiBNYXkgMjAxOCAxMjo1NTxicj4NCjxiPlRvOjwvYj4gSm9uIFNoYWxsb3c7IDxhIGhyZWY9Im1h aWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9i PiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRp Z2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 Y29sb3I6YmxhY2siPkhpIEpvbiwNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOmJsYWNrIj5QbGVhc2Ugc2VlIGlubGluZS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj5DaGVlcnMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5NZWQ8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBp biA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xp ZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PGI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdl OkZSIj5EZSZuYnNwOzo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28tZmFy ZWFzdC1sYW5ndWFnZTpGUiI+IERvdHMgWzxhIGhyZWY9Im1haWx0bzpkb3RzLWJvdW5jZXNAaWV0 Zi5vcmciPm1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XQ0KPGI+RGUgbGEgcGFydCBk ZTwvYj4gSm9uIFNoYWxsb3c8YnI+DQo8Yj5FbnZvecOpJm5ic3A7OjwvYj4gbWVyY3JlZGkgMTYg bWFpIDIwMTggMTI6MjQ8YnI+DQo8Yj7DgCZuYnNwOzo8L2I+IDxhIGhyZWY9Im1haWx0bzpkb3Rz QGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPk9iamV0Jm5ic3A7OjwvYj4gW0Rv dHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9D b25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+SGkgdGhlcmUsPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t R0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIj5Gb3IgdGhlIHNpZ25hbCBjaGFubmVsLCBpdCBpcyBlYXN5IHRvIG1h aW50YWluIGEgcGVyc2lzdGVudCBsaXN0IG9mIGFjdGl2ZSBtaXRpZ2F0aW9ucy4mbmJzcDsgU2hv dWxkIHRoZSBET1RTIHNlcnZlciAodW5leHBlY3RlZGx5KSBzdG9wIGFuZCByZXN0YXJ0LCB0aGVu IGl0IGlzIGVhc3kgdG8gcmVidWlsZCB0aGUgY3VycmVudCBhY3RpdmUgbWl0aWdhdGlvbnMuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t R0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPltNZWRdIFRo ZSBsaXN0IG9mIGFjdGl2ZSBtaXRpZ2F0aW9ucyBpcyB0aGUg4oCcY29yZeKAnSBzdGF0ZSBkYXRh IHRvIGJlIG1haW50YWluZWQgYnkgYSBzZXJ2ZXIuIElmIHdlIGFzc3VtZSB0aGF0IGxpc3QgY2Fu IGJlIHJlbGlhYmx5IHJlYnVpbHQsIHRoZW4gdGhlcmUgaXMNCiBubyBleHRlbnNpb24gbmVlZGVk IHRvIHRoZSBzaWduYWwgY2hhbm5lbCB0byBoYW5kbGUgdGhpcyBmYWlsdXJlIGNhc2UuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0Ii IHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi PltKb25dIEFncmVlZC4mbmJzcDsgVGhpcyB3YXMganVzdCBtZSBidWlsZGluZyB1cCB0aGUgYmFj a2dyb3VuZCB0byB0aGUgc2NlbmFyaW8uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiI+SG93ZXZlciwgdG8gcmVidWlsZCB0aGUgbGlzdCBvZiBhY3RpdmUgT2JzZXJ2YXRp b25zIG9mIHRoZSBjdXJyZW50IG1pdGlnYXRpb25zIC8gY29uZmlndXJhdGlvbiBjaGFuZ2VzIGlz IGNvbnNpZGVyYWJseSBtb3JlIGRpZmZpY3VsdCBhcyB0aGUgRE9UUyBzZXJ2ZXIgd291bGQgYWxz byBuZWVkIHRvIG1haW50YWluIGEgbGlzdCBvZiBjbGllbnQgSVBzL3NvdXJjZSBwb3J0cyBldGMu DQogYWxvbmcgd2l0aCBUb2tlbnMgYW5kIFF1ZXJpZXMgYW5kIChEKVRMUyBzdGF0ZSBzbyB0aGF0 IHVuc29saWNpdGVkIE9ic2VydmUgcmVzcG9uc2VzIGNhbiBjb250aW51ZSB0byBiZSBzZW50IGJh Y2sgdG8gdGhlIGNsaWVudHMuJm5ic3A7IEkgZG9u4oCZdCByZWFsbHkgdGhpbmsgdGhhdCB0aGlz IGlzIGEgcHJhY3RpY2FsIGFzay48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjpibGFjayI+W01lZF0gRmlyc3QsIHRoaXMgY2FuIGJlIGNvbnNpZGVyZWQgYXMgZGVw bG95bWVudC1zcGVjaWZpYy4gQXMgc3VjaCBpbiBzb21lIGRlcGxveW1lbnRzLCB0aGVyZSBpcyBu byBuZWVkIHRvIHN1cHBvcnQgYXV0b21hdGljIG1lYW5zIHRvIGRldGVjdCBzdGF0ZSBsb3NzDQog YXQgdGhlIHNlcnZlciBzaWRlLiBTZWNvbmQsIGlzIGl0IHJlYWxseSBwcm9ibGVtYXRpYyBmb3Ig dGhlIEREb1MgbWl0aWdhdGlvbiB0aGF0IGxpc3QgaXMgbG9zdCBieSBhIHNlcnZlcj8gSSBndWVz cywgdGhlIGFuc3dlciBpcyBubyBpZiB3ZSBhc3N1bWUgdGhlIGxpc3Qgb2YgbWl0aWdhdGlvbnMg dGhlbXNlbHZlcyBpcyBtYWludGFpbmVkLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25dIE15IGNvbmNlcm4gaXMgdGhh dCB0aGUgRE9UUyBjbGllbnRzIHdvdWxkIG5vdCBzZWUgdGhlIGNoYW5nZSBpbiBtaXRpZ2F0aW9u IHN0YXRlLCBvciB3b3VsZCBub3Qgc2VlIHRoYXQgdGhlcmUgaXMgYSBuZXcgc2lnbmFsIGNoYW5u ZWwgY29uZmlndXJhdGlvbiAoaWYgdGhleSB3ZXJlIGJlaW5nIE9ic2VydmVkKS4gVGhlIERPVFMg Y2xpZW50L3NlcnZlcg0KIHdvdWxkIGJlIG91dCBvZiBzeW5jIHdpdGggd2hhdCBpcyBoYXBwZW5p bmcgYW5kIHRoZSBET1RTIGNsaWVudCB3b3VsZCBub3QgbmVjZXNzYXJpbHkga25vdyB0aGF0IGl0 IGhhcyB0byB0YWtlIHNvbWUgYWN0aW9uIHRvIGdldCBiYWNrIHRvIHRoZSBzdGF0ZSBiZWZvcmUg dGhlIERPVFMgc2VydmVyIG91dGFnZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdC IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjpibGFjayI+W01lZF0gVGhlIGRvdHMgY2xpZW50IGhhcyBvdGhlciBtZWFucyB0 byBrbm93IHRoZSBtaXRpZ2F0aW9uIHN0YXRlLiBUaGUgRE9UUyBjbGllbnQgY2FuIG9ic2VydmUg dGhlIHN0YXR1cyBsb2NhbGx5IChhbmQgcmVwb3J0IGl0IHRvIHRoZSBzZXJ2ZXIpIG9yIHNlbmQg YQ0KIHJlcXVlc3QgdG8gcmV0cmlldmUgdGhlIHN0YXR1cyBmcm9tIHRoZSBzZXJ2ZXIuIFRoZSBv dXQgb2Ygc3luY2ggaW4gb2JzZXJ2ZSBpcyBub3QgdGhhdCBjcml0aWNhbCBmb3IgbWl0aWdhdGlu ZyBERG9TIGF0dGFja3MuICZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiPkFzIHRoZSBET1RTIHNlcnZlciByZXN0YXJ0ZWQsIGV4aXN0aW5nIChEKVRMUyBzZXNz aW9ucyB1c2VkIGJ5IHRoZSBET1RTIGNsaWVudCB3aWxsIGZhaWwuJm5ic3A7IFNvLCB0aGUgaGVh cnRiZWF0IG1lY2hhbmlzbSB3aWxsIGV2ZW50dWFsbHkgdGltZSBvdXQgJm5ic3A7YW5kIEkgZ3Vl c3MgdGhhdCB0aGUgRE9UUyBjbGllbnQgc2hvdWxkIGRldGVjdCB0aGlzIGFuZCByZS1kbyBhbGwg b2YgdGhlDQogT2JzZXJ2ZSByZXF1ZXN0cyAoYWxvbmcgd2l0aCBtYWtpbmcgc3VyZSB0aGF0IGFs bCB0aGUgYWN0aXZlIG1pdGlnYXRpb25zIGFyZSBhcyBleHBlY3RlZCkuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9y OmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPltNZWRdIEluY2x1ZGluZyBjbGll bnRzIGluIG5ldHdvcmtzIHVuZGVyIGFjdGl2ZSBhdHRhY2tzPyBJc27igJl0IHRoaXMgb3Zlcmxv YWRpbmcgdGhlIHNlcnZlciB3aGlsZSBkZWFsaW5nIHdpdGggb25nb2luZyBhdHRhY2tzPyAmbmJz cDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+W0pvbl0gWWVzLCBpdCB3b3VsZCDigJMgaGVuY2UgSSBkaWQgbm90IHJlYWxseSB3 YW50IHRvIGhhdmUgdG8gZG8gdGhpcyB3aGVuZXZlciBhIGhlYXJ0YmVhdCBmYWlsZWQsIGJ1dCBv bmx5IGRvIGl0IHdoZW4gdGhlIERPVFMgY2xpZW50IOKAnGtub3dz4oCdIHRoYXQgdGhlIHNlcnZl ciBoYXMgaGFkIGFuIG91dGFnZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LUdCIj5Ib3dldmVyIGluIFBlYWNlIHRpbWUgSGVhcnRiZWF0cyBtYXkgbm90IGJlaW5nIHVzZWQu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiPkhvd2V2ZXIgYXQgTWl0aWdhdGlvbiB0aW1lIGhlYXJ0YmVhdHMgbWF5IGZhaWwuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t R0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIj5Xb3VsZCBpdCBtYWtlIHNlbnNlIHRvIGFkZCB0byB0aGUgc2lnbmFs IGNoYW5uZWwgYW4gZXh0cmEgcGFyYW1ldGVyIHRoYXQgdGhlIERPVFMgc2VydmVyIGNhbiBzZW5k IHRvIHRoZSBjbGllbnQgaW4gYW55IHJlc3BvbnNlIGluIHRoZSBmb3JtIG9mDQo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+4oCc bGFzdC1yZXN0YXJ0ZWTigJ0gOiBzZWNvbmRzLXNpbmNlLWVwb2NoPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPldoaWNoIHRoZSBj bGllbnQgY2FuIHVzZSB0byBkZXRlY3RlZCB0aGUgcmVzdGFydC48c3BhbiBzdHlsZT0iY29sb3I6 YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjpibGFjayI+W01lZF0gV2UgdXNlZCB0byBoYXZlIGFuIGVwb2NoLWJhc2VkIGFwcHJvYWNoIGZv ciBhIHN0YXRlZnVsbCBzZXJ2aWNlIChzZWUNCjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvaHRtbC9yZmM2ODg3I3NlY3Rpb24tOC41Ij5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwv cmZjNjg4NyNzZWN0aW9uLTguNTwvYT4pLiBUaGUgZGV0YWlscyBhcmUgbm90IHJlc3RyaWN0ZWQg dG8ganVzdCBzaWduYWxsaW5nIHRoZSBlcG9jaCB2YWx1ZSBidXQgdG8gdGhlIGxvZ2ljIHRvIGhh bmRsZSBpdCBhdCB0aGUgY2xpZW50IHNpZGUuIEZ1cnRoZXIsIHRoZXJlIGFyZSBzb21lIGFzcGVj dHMNCiB0byBiZSB0YWtlbiBpbnRvIGFjY291bnQgd2hlbiBjb25maWd1cmluZyByZWR1bmRhbmN5 IHNlcnZlcnMgd2hlbiBhbiBhbnljYXN0IGFkZHJlc3MgaXMgdXNlZC4gSWYgdGhlIHNhbWUgaW5p dGlhbCBlcG9jaCB2YWx1ZSBpcyBjb25maWd1cmVkLCB0aGUgY2xpZW50IG1heSBub3QgZGV0ZWN0 IGEgYmFja3VwIHNlcnZlciBpcyB1c2VkIGFuZCBoZW5jZSBtYXkgbm90IHJlaW5zdGFsbCBzdGF0 ZS4uLiBBIHR3ZWFrIGlzIHRvIGNvbmZpZ3VyZSBkaXN0aW5jdA0KIGVwb2NoIHZhbHVlcyAoZS5n LiwgJiM0MzsvLSAyNGggZGlmZmVyZW5jZSBiZXR3ZWVuIGEgc2VydmVyIHJlZHVuZGFuY3kgZ3Jv dXApLiA8bzpwPg0KPC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNr Ij5UaGUgZXBvY2ggaXMganVzdGlmaWVkIGZvciA2ODg3IGJlY2F1c2Ugd2Ugd2FudGVkIHRvIHJl Y292ZXIgc3RhdGUgbG9zcywgd2hpbGUgaW4gdGhlIERPVFMgY2FzZSB3ZSBkb27igJl0IGhhdmUg dGhlIHNhbWUgbW9kZWwgZ2l2ZW4gdGhhdCwgYXMgeW91IHJpZ2h0ZnVsbHkNCiBzYWlkIGFib3Zl LCB0aGUgY3VycmVudCBhY3RpdmUgbWl0aWdhdGlvbnMgY2FuIGJlIHJlYnVpbHQgYXQgdGhlIHNl cnZlciBzaWRlIHdpdGhvdXQgaW52b2x2aW5nIGNsaWVudHMuICZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25dIFNvIHRo aXMgbWV0aG9kIHNldHMgZXBvY2ggdGltZSBiYWNrIHRvIDAgd2hlbmV2ZXIgdGhlcmUgaXMgYSBy ZXN0YXJ0LA0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6YmxhY2siPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gWWVzLiBUaGUgZXBvY2ggaXMgcmVzZXQgZWFjaCB0 aW1lIHRoZSBzdGF0ZSBpcyBsb3N0IGF0IHRoZSBzZXJ2ZXIgc2lkZS4NCjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5yYXRoZXIgdGhhdCBy ZXBvcnQgb24gdGhlIG51bWJlciBvZiBzZWNvbmRzIHNpbmNlIEphbiAxIDE5NzAuICZuYnNwOyZu YnNwO1RoYXQgSSBjYW4gaGFuZGxlLiZuYnNwOyBIb3dldmVyIGFueWNhc3QgKHRob3VnaCByZWR1 bmRhbnQgc2VydmVycyBhcmUgY3VycmVudGx5IG91dCBvZiBzcGVjKSB3aGVyZSAyIG9yIG1vcmUg c2VydmVycyByZXN0YXJ0IGFuZCB1cGRhdGUNCiB0aGUgc3RhcnQgdGltZSBhdCBleGFjdGx5IHRo ZSBzYW1lIHRpbWUgaXMgcG9zc2libGUsIGJ1dCB1bmxpa2VseS4mbmJzcDsgVGhpcyBjb3VsZCBi ZSBoYW5kbGVkIGJ5IHRoZSBhbnljYXN0IHNlcnZlcnMgY29tbXVuaWNhdGluZyBhbmQgc2VlaW5n IHRoZXkgYm90aCBoYXZlIHRoZSBzYW1lIHN0YXJ0IHRpbWUgc28gb25lIGJhY2tzIG9mZiAoaW4g dGltZSB0ZXJtcykuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25dIEnigJltIGp1c3QgaW50ZXJlc3RlZCBpbiBob3cgdG8g cmVjb3ZlciBPYnNlcnZlIGxvc3MuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5bTWVkXSBJ4oCZbSBu b3QgY29udmluY2VkIHRoaXMgaXMgcmVhbGx5IG5lZWRlZCBnaXZlbiB0aGF0IGFjdGl2ZSBtaXRp Z2F0aW9ucyBhcmUgbm90IGNvbmNlcm5lZCB3aXRoIHRoaXMgZmFpbHVyZSBzY2VuYXJpby4gJm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+Jm5ic3A7IEkgYXBw cmVjaWF0ZSBpbiBwZWFjZSB0aW1lIHRoZXJlIG1heSBub3QgYmUgYW55IERPVFMgY2xpZW50IHJl cXVlc3RzIChvciBoZWFydGJlYXQpIGZvciBhIGxvbmcgdGltZS4uLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiI+SeKAmW0gb3BlbiB0byBzdWdnZXN0aW9ucy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPlJlZ2FyZHM8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tR0IiPkpvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_BN6PR16MB1425C81FAB6CB8E153B5E589EA910BN6PR16MB1425namp_-- From nobody Thu May 17 19:35:50 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0903D126D45 for ; Thu, 17 May 2018 19:35:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MzMtm5Zph1gm for ; Thu, 17 May 2018 19:35:45 -0700 (PDT) Received: from guri.nttv6.jp (guri.nttv6.jp [IPv6:2402:c800:ff06:136::140]) by ietfa.amsl.com (Postfix) with ESMTP id 7D895126BF3 for ; Thu, 17 May 2018 19:35:44 -0700 (PDT) Received: from z.nttv6.jp (z.nttv6.jp [192.168.8.15]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id 44FBA25F6D6; Fri, 18 May 2018 11:35:43 +0900 (JST) Received: from MacBook-Pro-17.local (fujiko.nttv6.jp [115.69.228.141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id 14131759052; Fri, 18 May 2018 11:35:43 +0900 (JST) To: mohamed.boucadair@orange.com, "Konda, Tirumaleswar Reddy" Cc: "dots@ietf.org" References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <8ae47725-4db3-e02a-7846-d2f4d5d9b739@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BCA8@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BD67@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BDCD@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <2c400e78-4482-2b61-5289-6b149294b78f@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BE20@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: kaname nishizuka Message-ID: <3327b0b6-bbb4-429c-b2c2-6a63c3cd27be@nttv6.jp> Date: Fri, 18 May 2018 11:35:42 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF1BE20@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 May 2018 02:35:49 -0000 Re-, Please see inline. thanks, Kaname On 2018/05/16 17:15, mohamed.boucadair@orange.com wrote: > Re-, > > Please see inline. > > Cheers, > Med > >> -----Message d'origine----- >> De : Dots [mailto:dots-bounces@ietf.org] De la part de kaname nishizuka >> Envoyé : mercredi 16 mai 2018 09:51 >> À : BOUCADAIR Mohamed IMT/OLN; Konda, Tirumaleswar Reddy >> Cc : dots@ietf.org >> Objet : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >> >> Re, >> >> I see, but I didn't feel "For example:" is reflecting my comment. > [Med] I was referring this this comment you made "It should be left as implementation- and deployment-specific". > > Anyway, let's remove "For example:". > >> Should we need to use success (2.01 or 2.04) in the first sentence like this? >> >>    If the request is conflicting with an existing mitigation request >>    from a different DOTS client, the DOTS server may return success (2.01 or >> 2.04) >>    or  Conflict(4.09) to the requesting DOTS client. >> > [Med] I don't think so. The text is about a request with a new cuid/mid. > [kaname] OK, the text is about a request with a new cuid/mid. However, I'd like to point it out that the checking of conflict should be done at the arrival of a new PUT request with both a new cuid/mid case and the same mid(update of the mitigation request) case. >> regards, >> Kaname >> >> >> On 2018/05/16 16:33, mohamed.boucadair@orange.com wrote: >>> Re-, >>> >>> "For example" is there to accommodate a comment from Kaname who wanted the >> behavior to be also implementation/deployment. >>> Cheers, >>> Med >>> >>>> -----Message d'origine----- >>>> De : Konda, Tirumaleswar Reddy [mailto:TirumaleswarReddy_Konda@McAfee.com] >>>> Envoyé : mercredi 16 mai 2018 09:04 >>>> À : BOUCADAIR Mohamed IMT/OLN; kaname nishizuka >>>> Cc : dots@ietf.org >>>> Objet : RE: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>> >>>> Hi Med, >>>> >>>> Please see inline >>>> >>>>> -----Original Message----- >>>>> From: mohamed.boucadair@orange.com >>>>> [mailto:mohamed.boucadair@orange.com] >>>>> Sent: Wednesday, May 16, 2018 12:26 PM >>>>> To: Konda, Tirumaleswar Reddy ; >>>>> kaname nishizuka >>>>> Cc: dots@ietf.org >>>>> Subject: RE: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>> >>>>> This email originated from outside of the organization. Do not click >> links >>>> or >>>>> open attachments unless you recognize the sender and know the content is >>>>> safe. >>>>> >>>>> Hi Tiru, >>>>> >>>>> Please see inline. >>>>> >>>>> Cheers, >>>>> Med >>>>> >>>>>> -----Message d'origine----- >>>>>> De : Konda, Tirumaleswar Reddy >>>>>> [mailto:TirumaleswarReddy_Konda@McAfee.com] >>>>>> Envoyé : mercredi 16 mai 2018 08:11 >>>>>> À : BOUCADAIR Mohamed IMT/OLN; kaname nishizuka Cc : dots@ietf.org >>>>>> Objet : RE: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>> >>>>>> I propose to update the text as follows to make it more clear: >>>>>> >>>>>> If the request is conflicting with an existing mitigation request from >>>>>> a different DOTS client, the DOTS server may either decide to maintain >>>>>> the conflicting request or reject the conflicting mitigation request. >>>>>> If the DOTS server decides to maintain the conflicting mitigation >>>>>> request, >>>>> [Med] I guess "conflicting mitigation request" points to the new request. >>>>> >>>>> the DOTS server returns 2.01 (Created) to >>>>>> the requesting DOTS client. If the DOTS server decides to reject the >>>>>> conflicting mitigation request, the DOTS server returns 4.09 >>>>>> (Conflict) [RFC8132] to the requesting DOTS client >>>>> [Med] Idem as above. >>>>> >>>>> >>>>>> For both 2.01 (Created) and 4.09 (Conflict) responses, >>>>> [Med] I like this. >>>>> >>>>> the response message >>>>>> includes enough information for a DOTS client to recognize the source >>>>>> of the conflict as described below: >>>>> [Med] What about? >>>>> >>>>> NEW: >>>>> >>>>> If the request is conflicting with an existing mitigation request >>>>> from a different DOTS client, the DOTS server may return 2.01 >>>>> (Created) or 4.09 (Conflict) to the requesting DOTS client. For >>>>> example: >>>>> >>>>> o If the DOTS server decides to maintain the new mitigation request, >>>>> the DOTS server returns 2.01 (Created) to the requesting DOTS >>>>> client. >>>>> >>>>> o If the DOTS server decides to reject the new mitigation request, >>>>> the DOTS server returns 4.09 (Conflict) to the requesting DOTS >>>>> client. >>>>> >>>>> For both 2.01 (Created) and 4.09 (Conflict) responses, the response >>>>> includes enough information for a DOTS client to recognize the source >>>>> of the conflict as described below: >>>> Proposed text looks good. Nit: I don't see the need for "For example". >>>> >>>> Cheers, >>>> -Tiru >>>> >>>>>> -Tiru >>>>>> >>>>>>> -----Original Message----- >>>>>>> From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of >>>>>>> mohamed.boucadair@orange.com >>>>>>> Sent: Wednesday, May 16, 2018 10:52 AM >>>>>>> To: kaname nishizuka >>>>>>> Cc: dots@ietf.org >>>>>>> Subject: Re: [Dots] I-D Action: >>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>> >>>>>>> This email originated from outside of the organization. Do not click >>>>>>> links >>>>>> or >>>>>>> open attachments unless you recognize the sender and know the >>>>>>> content is safe. >>>>>>> >>>>>>> Hi Kaname, >>>>>>> >>>>>>> Thank you for ACking. I will implement this change. >>>>>>> >>>>>>> Cheers, >>>>>>> Med >>>>>>> >>>>>>>> -----Message d'origine----- >>>>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] Envoyé : mercredi >>>>>>>> 16 mai 2018 03:16 À : BOUCADAIR Mohamed IMT/OLN Cc : >>>>> dots@ietf.org >>>>>>> Objet >>>>>>>> : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>>>> >>>>>>>> Hi Med, >>>>>>>> >>>>>>>> Please see inline. >>>>>>>> >>>>>>>> thanks, >>>>>>>> kaname >>>>>>>> >>>>>>>> On 2018/05/15 22:26, mohamed.boucadair@orange.com wrote: >>>>>>>>> Hi Kaname, >>>>>>>>> >>>>>>>>> Please see inline. >>>>>>>>> >>>>>>>>> Cheers, >>>>>>>>> Med >>>>>>>>> >>>>>>>>>> -----Message d'origine----- >>>>>>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] Envoyé : lundi >>>>>>>>>> 14 mai 2018 11:49 À : BOUCADAIR Mohamed IMT/OLN Cc : >>>>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>>>>> >>>>>>>>>> Hi Med, >>>>>>>>>> >>>>>>>>>> Please see inline. >>>>>>>>>> >>>>>>>>>> thanks, >>>>>>>>>> Kaname >>>>>>>>>> >>>>>>>>>> On 2018/05/11 18:39, mohamed.boucadair@orange.com wrote: >>>>>>>>>>> Re-, >>>>>>>>>>> >>>>>>>>>>> Please see inline. >>>>>>>>>>> >>>>>>>>>>> Cheers, >>>>>>>>>>> Med >>>>>>>>>>> >>>>>>>>>>>> -----Message d'origine----- >>>>>>>>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] Envoyé : >>>>>>>>>>>> vendredi >>>>>>>>>>>> 11 mai 2018 10:59 À : BOUCADAIR Mohamed IMT/OLN Cc : >>>>>>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>>> >>>>>>>>>>>> Hi Med, >>>>>>>>>>>> >>>>>>>>>>>> > If the server decides not to maintain the conflicting >>>>>>>>>>>> request, then >>>>>>>>>> the >>>>>>>>>>>> present request will be processed as normal: that is 2.01 >>>>>>>>>>>> will be >>>>>>>> returned >>>>>>>>>> to >>>>>>>>>>>> ack successful handling. A notification will be sent to the >>>>>>>>>>>> client owner >>>>>>>>>> of >>>>>>>>>>>> the conflicting request to notify withdrawal (section 4.4.2). >>>>>>>>>>>> In that case, the status code is '7' (Attack mitigation is >>>>>>>>>>>> withdrawn) >>>>>>>>>>> [Med] Yes, that status will be sent to the owner of the >>>>>>>>>>> (existing) >>>>>>>> request. >>>>>>>>>>>> My original question is when the status code '8' (Attack >>>>>>>>>>>> mitigation is >>>>>>>>>>>> rejected) will be used. >>>>>>>>>>> [Med] I got that. >>>>>>>>>>> >>>>>>>>>>>> In the text in the draft, "the conflicting mitigation >>>>>>>>>>>> request" is >>>>>>>>>> ambiguous >>>>>>>>>>>> whether it is already existing request or the request that >>>>>>>>>>>> just has >>>>>>>>>> arrived. >>>>>>>>>>> [Med] It is related to the already existing request. >>>>>>>>>>> >>>>>>>>>>>> Say, the existing request is (A), then a mitigation request >>>>>>>>>>>> (B) arrived >>>>>>>>>> which >>>>>>>>>>>> are conflicting with A. >>>>>>>>>>>> >>>>>>>>>>>> If B is selected. >>>>>>>>>>>> (A) will get notification with the withdrawal code '7' >>>>>>>>>>>> (B) will get 2.01 >>>>>>>>>>>> >>>>>>>>>>> [Med] Yes. The current text does calls out your step (1) in >>>> 4.4.2. >>>>>>>>>>> Your >>>>>>>>>> step (2) is not called explicit in the text because there is no >>>>>>>>>> confusion about which code to return when a request is accepted >>>>>>>>>> to be >>>>>>> honored. >>>>>>>>>>> The text focuses on cases which requires specific handling: >>>>>>>>>>> - inactive request because of a conflict >>>>>>>>>>> - multiple active conflicting requests >>>>>>>>>>> >>>>>>>>>>>> else If B is not selected. >>>>>>>>>>>> (B) will get 4.09 >>>>>>>>>>>> >>>>>>>>>>> [Med] In this case, the resource is not created and as such >>>>>>>>>>> case >>>>>>>> returning >>>>>>>>>> notification status code of 8 is not possible as you rightful >>>>>>>>>> pointed >>>>>> out. >>>>>>>>>>> This is why we suggested to return 2.01 for this case too so >>>>>>>>>>> that an >>>>>>>> update >>>>>>>>>> of the status can be sent to the client upon change. >>>>>>>>>> I don't think it is needed to obligate returning of 2.01. >>>>>>>>>> If it is obvious that the DOTS server need not to create >>>>>>>>>> resource of the conflicting request, it may return 4.09. >>>>>>>>>> So, returning of 4.09 should be allowed in this case. >>>>>>>>>> It should be left as implementation- and deployment-specific. >>>>>>>>>> >>>>>>>>>> >>>>>>>>> [Med] Do you mean that the text should be modified to allow for >>>>>>>>> both >>>>>>>>> 2.01 >>>>>>>> or 4.09 to be returned depending on some local policy? >>>>>>>>> e.g., >>>>>>>>> >>>>>>>>> OLD: >>>>>>>>> If the request is conflicting with an existing mitigation >>>> request >>>>>>>>> from a different DOTS client, and the DOTS server decides to >>>>>> maintain >>>>>>>>> the conflicting mitigation request, the DOTS server returns >>>> 4.09 >>>>>>>>> (Conflict) [RFC8132] to the requesting DOTS client. The >>>> response >>>>>>>>> includes enough information for a DOTS client to recognize >>>>>>>>> the >>>>>> source >>>>>>>>> of the conflict as described below: >>>>>>>>> >>>>>>>>> NEW: >>>>>>>>> If the request is conflicting with an existing mitigation >>>> request >>>>>>>>> from a different DOTS client, the DOTS server may return >>>>>>>>> 2.01 >>>>>> (Created) >>>>>>>>> or 4.09 (Conflict) to the requesting DOTS client. The response >>>>>>>>> includes enough information for a DOTS client to recognize >>>>>>>>> the >>>>>> source >>>>>>>>> of the conflict as described below: >>>>>>>>> >>>>>>>> Yes, it works for me. >>>>>>>> >>>>>>>> >>>>>>>>>>>> Tiru said: >>>>>>>>>>>> > In this case, the resource should be created and the >>>>>>>>>>>> server should >>>>>>>>>> return >>>>>>>>>>>> success (2.01 or 2.04) response code along with the conflict- >>>>>>>> information. >>>>>>>>>>>> In this situation, (B) will get 2.01 or 2.04 along with the >>>>>>>>>>>> rejected >>>>>>>> code >>>>>>>>>> '8' >>>>>>>>>>>> (Which mitigation request will be selected by the DOTS server >>>>>>>>>>>> is >>>>>>>>>>>> implementation- and deployment-specific.) >>>>>>>>>>>> >>>>>>>>>>>> Thanks, >>>>>>>>>>>> Kaname >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> On 2018/05/11 15:09, mohamed.boucadair@orange.com wrote: >>>>>>>>>>>>> Hi Kaname, >>>>>>>>>>>>> >>>>>>>>>>>>> If the server decides not to maintain the conflicting >>>>>>>>>>>>> request, then the >>>>>>>>>>>> present request will be processed as normal: that is 2.01 >>>>>>>>>>>> will be >>>>>>>> returned >>>>>>>>>> to >>>>>>>>>>>> ack successful handling. A notification will be sent to the >>>>>>>>>>>> client owner >>>>>>>>>> of >>>>>>>>>>>> the conflicting request to notify withdrawal (section 4.4.2). >>>>>>>>>>>>> The text focuses on the case ", and the DOTS server decides >>>>>>>>>>>>> to maintain >>>>>>>>>> the >>>>>>>>>>>> conflicting mitigation request" because this is the one which >>>>>>>>>>>> requires additional specification vs. normal request that is >>>>>>>>>>>> accepted by a >>>>>>>> server. >>>>>>>>>>>>> Cheers, >>>>>>>>>>>>> Med >>>>>>>>>>>>> >>>>>>>>>>>>>> -----Message d'origine----- De : kaname nishizuka >>>>>>>>>>>>>> [mailto:kaname@nttv6.jp] Envoyé : >>>>>>>>>>>>>> mercredi 9 mai 2018 10:41 À : BOUCADAIR Mohamed IMT/OLN >>>>> Cc : >>>>>>>>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>>>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>>>>> >>>>>>>>>>>>>> Hi Med, >>>>>>>>>>>>>> >>>>>>>>>>>>>> I'm OK with this change. >>>>>>>>>>>>>> However, to be precise, I'd like to suggest to state about >>>>>>>>>>>>>> the case >>>>>>>> the >>>>>>>>>>>> DOTS >>>>>>>>>>>>>> server decides NOT to maintain it. >>>>>>>>>>>>>> >>>>>>>>>>>>>> NEW-2: >>>>>>>>>>>>>>    If the request is conflicting with an existing >>>>>>>>>>>>>> mitigation >>>>>>>> request >>>>>>>>>>>>>>    from a different DOTS client, and the DOTS server >>>>>>>>>>>>>> decides to >>>>>>>>>> maintain >>>>>>>>>>>>>>    the conflicting mitigation request, the DOTS server >>>>>>>>>>>>>> returns >>>>>>>> 2.01 >>>>>>>>>>>>>>    (Created) to the requesting DOTS client. >>>>>>>>>>>>>>    Otherwise, the DOTS server returns 4.09 (Conflict) >>>>>> [RFC8132]. >>>>>>>>>>>>>>    The response includes enough information for a DOTS >>>>>>>>>>>>>> client >>>>>> to >>>>>>>>>>>>>>    recognize the source of the conflict as described >>>> below: >>>>>>>>>>>>>> thanks, >>>>>>>>>>>>>> Kaname >>>>>>>>>>>>>> >>>>>>>>>>>>>> On 2018/05/09 14:51, mohamed.boucadair@orange.com wrote: >>>>>>>>>>>>>>> Hi Kaname, >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> After thinking about this, I do think that you have a >>>>>>>>>>>>>>> valid point. I >>>>>>>>>>>>>> suggest to make to make this change (marked with ^^^^) >>>>>>>>>>>>>>> OLD: >>>>>>>>>>>>>>> If the request is conflicting with an existing >>>>>>>>>>>>>>> mitigation >>>>>>>> request >>>>>>>>>>>>>>> from a different DOTS client, and the DOTS server >>>>>>>>>>>>>>> decides to >>>>>>>>>>>> maintain >>>>>>>>>>>>>>> the conflicting mitigation request, the DOTS server >>>>>>>>>>>>>>> returns >>>>>>>> 4.09 >>>>>>>>>>>>>>> (Conflict) [RFC8132] to the requesting DOTS client. >>>>>>>>>>>>>>> The >>>>>>>> response >>>>>>>>>>>>>>> includes enough information for a DOTS client to >>>>>>>>>>>>>>> recognize the >>>>>>>>>>>> source >>>>>>>>>>>>>>> of the conflict as described below: >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> NEW: >>>>>>>>>>>>>>> If the request is conflicting with an existing >>>>>>>>>>>>>>> mitigation >>>>>>>> request >>>>>>>>>>>>>>> from a different DOTS client, and the DOTS server >>>>>>>>>>>>>>> decides to >>>>>>>>>>>> maintain >>>>>>>>>>>>>>> the conflicting mitigation request, the DOTS server >>>>>>>>>>>>>>> returns >>>>>>>> 2.01 >>>>>>>> ^^^^ >>>>>>>>>>>>>>> (Created) to the requesting DOTS client. The >>>> response^ >>>>>>>>>>>>>>> ^^^^^^^^ >>>>>>>>>>>>>>> includes enough information for a DOTS client to >>>>>>>>>>>>>>> recognize the >>>>>>>>>>>> source >>>>>>>>>>>>>>> of the conflict as described below: >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>> Med >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> -----Message d'origine----- De : Dots >>>>>>>>>>>>>>>> [mailto:dots-bounces@ietf.org] De la part de >>>>>>>>>>>>>>>> mohamed.boucadair@orange.com Envoyé : lundi 7 mai 2018 >>>>>>> 08:38 >>>>>>>>>>>>>>>> À : kaname nishizuka; dots@ietf.org Objet : Re: [Dots] >>>>>>>>>>>>>>>> I-D >>>>>>>>>>>>>>>> Action: draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Re-, >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Agree that the codes are not the same, but alternatives >>>>>>>>>>>>>>>> ones as >>>>>>>>>>>> summarized >>>>>>>>>>>>>>>> here: >>>>> https://mailarchive.ietf.org/arch/msg/dots/hA3MLKlkXFimpAn5KSYTayaVkjA. >>>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>>> Med >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> -----Message d'origine----- De : kaname nishizuka >>>>>>>>>>>>>>>>> [mailto:kaname@nttv6.jp] Envoyé : >>>>>>>>>>>>>>>>> lundi 7 mai 2018 08:20 À : BOUCADAIR Mohamed IMT/OLN; >>>>>>>>>>>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>>>>>>>>>>> draft-ietf-dots-signal-channel- >>>>>>>> 19.txt >>>>>>>>>>>>>>>>> Hi Med, >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> I've read the thread. >>>>>>>>>>>>>>>>> and the code '8' of the thread is different from the >>>>>>>>>>>>>>>>> code '8' of >>>>>>>> the >>>>>>>>>>>>>>>> current >>>>>>>>>>>>>>>>> draft. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> they'd been discussing the 7,8 and 9 based on this >>>>>>>>>>>>>>>>> definition, >>>>>>>> right? >>>>>>>>>> https://mailarchive.ietf.org/arch/msg/dots/7zljzN8nycZX7E7ghgk1 >>>>>>>>>> ux32 >>>>>>>>>> MkM >>>>>>>>>>>>>>>>> == >>>>>>>>>>>>>>>>> 7 | DOTS Server has detected conflicting mitigation >>>>>>>>>>>>>>>>> requests from >>>>>>>>>>>>>> different >>>>>>>>>>>>>>>>> DOTS clients.  This mitigation request is currently >>>>>>>>>>>>>>>>> inactive until >>>>>>>>>> the >>>>>>>>>>>>>>>>> conflicts are resolved. Another mitigation request is >>>> active. >>>>>>>>>>>>>>>>> 8 | DOTS Server has detected conflicting mitigation >>>>>>>>>>>>>>>>> requests from >>>>>>>>>>>>>> different >>>>>>>>>>>>>>>>> DOTS clients.  This mitigation request is currently active. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> 9 | DOTS Server has detected conflicting mitigation >>>>>>>>>>>>>>>>> requests from >>>>>>>>>>>>>> different >>>>>>>>>>>>>>>>> DOTS clients.  All conflicting mitigation requests are >>>>>> inactive. >>>>>>>>>>>>>>>>> == >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Kaname >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> On 2018/05/07 15:12, mohamed.boucadair@orange.com >>>>> wrote: >>>>>>>>>>>>>>>>>> Hi Kaname, >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Please check >>>>>>>>>> https://mailarchive.ietf.org/arch/msg/dots/z_cZR9_u273HzC9o0Iy9 >>>>>>>>>> FeQZ >>>>>>>>>> 0Jo >>>>>>>>>>>>>>>> about >>>>>>>>>>>>>>>>> the rationale for allowing to return code '8' even in a >>>>>>>> notification >>>>>>>>>>>>>>>> message. >>>>>>>>>>>>>>>>> The intent was to have code '8' as a transition state. >>>>>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>>>>> Med >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> -----Message d'origine----- De : kaname nishizuka >>>>>>>>>>>>>>>>>>> [mailto:kaname@nttv6.jp] Envoyé : mercredi 2 mai 2018 >>>>>>>>>>>>>>>>>>> 02:49 À : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org >>>>>>> Objet : >>>>>>>>>>>>>>>>>>> Re: [Dots] I-D Action: draft-ietf-dots-signal-channel- >>>>>>>>>> 19.txt >>>>>>>>>>>>>>>>>>> Hi, >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> I'd like to ask one clarification question about >>>>>>>>>>>>>>>>>>> status code >>>>>> 8: >>>>>>>>>>>>>>>>>>>    o  A notification message with 'status' code >>>>>>>>>>>>>>>>>>> set to '8 >>>>>>>>>> (Attack >>>>>>>>>>>>>>>>>>>       mitigation is rejected)' and 'conflict- >>>> status' >>>>>>>>>>>>>>>>>>> set to >>>>>>>>>> '1' >>>>>>>>>>>> is >>>>>>>>>>>>>>>> sent >>>>>>>>>>>>>>>>>>>       to a DOTS client to indicate that this >>>>>>>>>>>>>>>>>>> mitigation >>>>>>>>>> request >>>>>>>>>>>> is >>>>>>>>>>>>>>>>>>>       rejected because a conflict is detected. >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> If a mitigation request is rejected due to a conflict, >>>>>>>>>>>>>>>>>>> it is >>>>>>>>>> rejected >>>>>>>>>>>>>> at >>>>>>>>>>>>>>>>>>> PUT(4.09(Conflict)), so no resource will be created. >>>>>>>>>>>>>>>>>>> So it looks there is no chance to return '8 (Attack >>>>>>>>>>>>>>>>>>> mitigation is >>>>>>>>>>>>>>>>> rejected)'. >>>>>>>>>>>>>>>>>>> thanks, >>>>>>>>>>>>>>>>>>> Kaname >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> On 2018/04/10 22:47, mohamed.boucadair@orange.com >>>>>>> wrote: >>>>>>>>>>>>>>>>>>>> Re-, >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> This version addresses the comments raised during the >>>>>>>>>>>>>>>>>>>> WGLC, in >>>>>>>>>>>>>>>>> particular: >>>>>>>>>>>>>>>>>>>> - (Clarification) Indicate that only one hop-limit is >>>>>>>>>>>>>>>>>>>> included >>>>>>>>>>>>>>>>>>>> - Specify the loop diagnostic payload >>>>>>>>>>>>>>>>>>>> - (Clarification) Indicate explicitly that GET >>>>>>>>>>>>>>>>>>>> messages with >>>>>>>> 'sid' >>>>>>>>>>>> are >>>>>>>>>>>>>>>>>>> allowed >>>>>>>>>>>>>>>>>>>> - Update the redirect behavior. >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>>>>>>> Med >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> -----Message d'origine----- De : Dots >>>>>>>>>>>>>>>>>>>>> [mailto:dots-bounces@ietf.org] De la part de >>>>>>>> internet- >>>>>>>>>>>>>>>>>>>>> drafts@ietf.org >>>>>>>>>>>>>>>>>>>>> Envoyé : mardi 10 avril 2018 15:40 À : >>>>>>>>>>>>>>>>>>>>> i-d-announce@ietf.org Cc : dots@ietf.org Objet : >>>>>>>>>>>>>>>>>>>>> [Dots] I-D Action: draft-ietf-dots-signal-channel- >>>>>>>> 19.txt >>>>>>>>>>>>>>>>>>>>> A New Internet-Draft is available from the on-line >>>>>>>>>>>>>>>>>>>>> Internet- >>>>>>>>>> Drafts >>>>>>>>>>>>>>>>>>>>> directories. >>>>>>>>>>>>>>>>>>>>> This draft is a work item of the DDoS Open Threat >>>>>>>>>>>>>>>>>>>>> Signaling WG >>>>>>>> of >>>>>>>>>>>> the >>>>>>>>>>>>>>>>>>> IETF. >>>>>>>>>>>>>>>>>>>>> Title : Distributed Denial-of- >>>>>> Service >>>>>>>> Open >>>>>>>>>>>>>> Threat >>>>>>>>>>>>>>>>>>> Signaling >>>>>>>>>>>>>>>>>>>>> (DOTS) Signal Channel Specification >>>>>>>>>>>>>>>>>>>>> Authors : Tirumaleswar Reddy >>>>>>>>>>>>>>>>>>>>> Mohamed Boucadair >>>>>>>>>>>>>>>>>>>>> Prashanth Patil >>>>>>>>>>>>>>>>>>>>> Andrew Mortensen >>>>>>>>>>>>>>>>>>>>> Nik Teague >>>>>>>>>>>>>>>>>>>>> Filename : draft-ietf-dots-signal-channel- >>>> 19.txt >>>>>>>>>>>>>>>>>>>>> Pages : 86 >>>>>>>>>>>>>>>>>>>>> Date : 2018-04-10 >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Abstract: >>>>>>>>>>>>>>>>>>>>> This document specifies the DOTS signal >>>>>>>>>>>>>>>>>>>>> channel, a >>>>>>>>>> protocol >>>>>>>>>>>> for >>>>>>>>>>>>>>>>>>>>> signaling the need for protection against >>>>>>>>>>>>>>>>>>>>> Distributed >>>>>>>>>>>> Denial- >>>>>>>>>>>>>> of- >>>>>>>>>>>>>>>>>>>>> Service (DDoS) attacks to a server capable >>>>>>>>>>>>>>>>>>>>> of enabling >>>>>>>>>>>> network >>>>>>>>>>>>>>>>>>>>> traffic mitigation on behalf of the >>>>>>>>>>>>>>>>>>>>> requesting >>>>>> client. >>>>>>>>>>>>>>>>>>>>> A companion document defines the DOTS data >>>>>>>>>>>>>>>>>>>>> channel, a >>>>>>>>>>>> separate >>>>>>>>>>>>>>>>>>>>> reliable communication layer for DOTS >>>>>>>>>>>>>>>>>>>>> management and >>>>>>>>>>>>>>>> configuration >>>>>>>>>>>>>>>>>>>>> purposes. >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Editorial Note (To be removed by RFC Editor) >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Please update these statements with the RFC >>>>>>>>>>>>>>>>>>>>> number to >>>>>>>> be >>>>>>>>>>>>>> assigned >>>>>>>>>>>>>>>>> to >>>>>>>>>>>>>>>>>>>>> this document: >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> o "This version of this YANG module is >>>>>>>>>>>>>>>>>>>>> part of RFC >>>>>>>>>> XXXX;" >>>>>>>>>>>>>>>>>>>>> o "RFC XXXX: Distributed Denial-of-Service >>>>>>>>>>>>>>>>>>>>> Open >>>>>>>> Threat >>>>>>>>>>>>>> Signaling >>>>>>>>>>>>>>>>>>>>> (DOTS) Signal Channel Specification"; >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> o "| [RFCXXXX] |" >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> o reference: RFC XXXX >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Please update TBD statements with the port >>>>>>>>>>>>>>>>>>>>> number to >>>>>>>> be >>>>>>>>>>>>>> assigned >>>>>>>>>>>>>>>> to >>>>>>>>>>>>>>>>>>>>> DOTS Signal Channel Protocol. >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Also, please update the "revision" date of >>>>>>>>>>>>>>>>>>>>> the YANG >>>>>>>>>> module. >>>>>>>>>>>>>>>>>>>>> The IETF datatracker status page for this draft is: >>>>>>>>>>>>>>>>>>>>> https://datatracker.ietf.org/doc/draft-ietf-dots-sig >>>>>>>>>>>>>>>>>>>>> nal- >>>>>>>> channel/ >>>>>>>>>>>>>>>>>>>>> There are also htmlized versions available at: >>>>>>>>>>>>>>>>>>>>> https://tools.ietf.org/html/draft-ietf-dots-signal-c >>>>>>>>>>>>>>>>>>>>> hann >>>>>>>>>>>>>>>>>>>>> el-19 >>>>>>>>>>>>>>>>>>>>> https://datatracker.ietf.org/doc/html/draft-ietf-dot >>>>>>>>>>>>>>>>>>>>> s-si >>>>>>>>>>>>>>>>>>>>> gnal- >>>>>>>>>>>> channel- >>>>>>>>>>>>>>>> 19 >>>>>>>>>>>>>>>>>>>>> A diff from the previous version is available at: >>>>>>>>>>>>>>>>>>>>> https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-si >>>>>>>>>>>>>>>>>>>>> gnal >>>>>>>>>>>>>>>>>>>>> - >>>>>>>> channel- >>>>>>>>>> 19 >>>>>>>>>>>>>>>>>>>>> Please note that it may take a couple of minutes >>>>>>>>>>>>>>>>>>>>> from the time >>>>>>>> of >>>>>>>>>>>>>>>>>>> submission >>>>>>>>>>>>>>>>>>>>> until the htmlized version and diff are available at >>>>>>>>>>>> tools.ietf.org. >>>>>>>>>>>>>>>>>>>>> Internet-Drafts are also available by anonymous FTP at: >>>>>>>>>>>>>>>>>>>>> ftp://ftp.ietf.org/internet-drafts/ >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>> _______________________________________________ >>>>>>>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>> _______________________________________________ >>>>>>>>>>> Dots mailing list >>>>>>>>>>> Dots@ietf.org >>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>> _______________________________________________ >>>>>>> Dots mailing list >>>>>>> Dots@ietf.org >>>>>>> https://www.ietf.org/mailman/listinfo/dots >>> _______________________________________________ >>> Dots mailing list >>> Dots@ietf.org >>> https://www.ietf.org/mailman/listinfo/dots >> _______________________________________________ >> Dots mailing list >> Dots@ietf.org >> https://www.ietf.org/mailman/listinfo/dots > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu May 17 23:26:22 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A08271271DF for ; Thu, 17 May 2018 23:26:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.311 X-Spam-Level: X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0KeNScoGql6v for ; Thu, 17 May 2018 23:26:17 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3C1A12711A for ; Thu, 17 May 2018 23:26:16 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1526624778; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Office365-Filtering-Correlation-Id:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=p 32aIv2wyEBCFQNeTExa3IHpAsvrDX6g29QXm60YXQ A=; b=eWEMwtkhrzqM3oCpv7Ph+Yd//aJmwVFpZbDQlalpYaUq KavLf/ltN3b8yS8rk67UzprtS799VoeRQ9tR0q/QtSLJ1RjHjs e12wJN5qmCfsjFU4FwOnot/eLvvMB47AxlWOMoLzLubLMTOnyb R1UQinu3FB1rh0hRkCADN+v9Xp4= Received: from DNVEXAPP1N06.corpzone.internalzone.com (unknown [10.44.48.90]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 2922_209e_b371c374_db27_42d0_a6e7_c4ed55612305; Fri, 18 May 2018 01:26:17 -0500 Received: from DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 May 2018 00:24:11 -0600 Received: from DNVEXUSR1N12.corpzone.internalzone.com (10.44.48.85) by DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 May 2018 00:24:10 -0600 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXUSR1N12.corpzone.internalzone.com (10.44.48.85) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Fri, 18 May 2018 00:24:10 -0600 Received: from NAM03-BY2-obe.outbound.protection.outlook.com (10.44.176.243) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 May 2018 00:24:08 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB1826.namprd16.prod.outlook.com (10.172.29.9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.776.11; Fri, 18 May 2018 06:24:08 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8%9]) with mapi id 15.20.0776.010; Fri, 18 May 2018 06:24:08 +0000 From: "Konda, Tirumaleswar Reddy" To: kaname nishizuka , "mohamed.boucadair@orange.com" CC: "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT0NF/5sqjFXD5eEKW2iVIpIKRtqP6A2IAgCG5zoCACDXkgIAAAhwAgAAFAwCAAxeuAIAAL3EAgAL6OICAAC9rAIAAC0wAgAS5xwCAAc8UgIAAxkKAgABEsoCAAAn6UIAACZ8QgAAHNfCAAAi+0IAABecAgAAHAQCAAsWtAIAAPxQA Date: Fri, 18 May 2018 06:24:07 +0000 Message-ID: References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <8ae47725-4db3-e02a-7846-d2f4d5d9b739@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BCA8@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BD67@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BDCD@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <2c400e78-4482-2b61-5289-6b149294b78f@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BE20@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <3327b0b6-bbb4-429c-b2c2-6a63c3cd27be@nttv6.jp> In-Reply-To: <3327b0b6-bbb4-429c-b2c2-6a63c3cd27be@nttv6.jp> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB1826; 7:7bTL0jWyRzz3tXuEFiHl+yUs6zTZrQ/WVYAIHj7ENZ7pl8ZQkwe/VHkgoif2kHYHK9T7+exomVNUW7XWubQBFdBruzbu4+0XRmOv2LwaehXZitPx+/vNSlrNCFs0aSsiKScy6BfY/zGkohE+EUPN7kOpWisU2yQhto64Kncf1svmKaSFUmHwZjyh48swHr+vkPRaNoXthBK9iN6LvHkmsX0fU8vqQufAwnFePburP0RORkf+kkwz7wSVl9N2BW7o x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB1826; x-ms-traffictypediagnostic: BN6PR16MB1826: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(120809045254105)(18271650672692)(123452027830198); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3231254)(944501410)(52105095)(3002001)(93006095)(93001095)(10201501046)(149027)(150027)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123560045)(20161123558120)(6072148)(201708071742011)(7699016); SRVR:BN6PR16MB1826; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB1826; x-forefront-prvs: 0676F530A9 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(39860400002)(346002)(376002)(396003)(366004)(13464003)(52314003)(32952001)(377424004)(199004)(189003)(55784002)(575784001)(966005)(86362001)(4326008)(68736007)(53946003)(486006)(316002)(8676002)(5660300001)(99286004)(16200700003)(93886005)(72206003)(2906002)(81156014)(76176011)(106356001)(476003)(9686003)(81166006)(105586002)(478600001)(7696005)(110136005)(8936002)(345774005)(6306002)(59450400001)(14454004)(2900100001)(6506007)(66066001)(6246003)(53546011)(11346002)(5250100002)(97736004)(7736002)(2501003)(5890100001)(102836004)(186003)(25786009)(80792005)(3846002)(53936002)(6436002)(55016002)(33656002)(6116002)(74316002)(3280700002)(229853002)(446003)(26005)(3660700001)(305945005)(85282002)(559001)(579004)(569006); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB1826; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: HuWDnj9RsNL+c/BEgnJUtC2ET0B29k274CnNJMkzUdgKj39S+8N61+tSkcTUNfT7iD4j7I/qWM/1/3ubJkBhCk2jBcSceIxN86akl12qvlqxTVLqFVCFQuwTC8rJm+F4KU+st3EXQS2GNTGmIf6dKTCnXILmYpote0Mr05iTWMx3nwEJ/hIuUD2jXc4i1+xIcmmPp9FMkQPy0uPcbD7C1w== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: ffca2f1d-c5b3-42ec-43f5-08d5bc87f647 X-MS-Exchange-CrossTenant-Network-Message-Id: ffca2f1d-c5b3-42ec-43f5-08d5bc87f647 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 May 2018 06:24:07.9859 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB1826 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6288> : inlines <6643> : streams <1787068> : uri <2643187> Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 May 2018 06:26:21 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBrYW5hbWUgbmlzaGl6dWthIFtt YWlsdG86a2FuYW1lQG50dHY2LmpwXQ0KPiBTZW50OiBGcmlkYXksIE1heSAxOCwgMjAxOCA4OjA2 IEFNDQo+IFRvOiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tOyBLb25kYSwgVGlydW1hbGVz d2FyIFJlZGR5DQo+IDxUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tPg0KPiBDYzog ZG90c0BpZXRmLm9yZw0KPiBTdWJqZWN0OiBSZTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWll dGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gDQo+IFRoaXMgZW1haWwgb3JpZ2luYXRl ZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8gbm90IGNsaWNrIGxpbmtzIG9y DQo+IG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQg a25vdyB0aGUgY29udGVudCBpcw0KPiBzYWZlLg0KPiANCj4gUmUtLA0KPiANCj4gUGxlYXNlIHNl ZSBpbmxpbmUuDQo+IA0KPiB0aGFua3MsDQo+IEthbmFtZQ0KPiANCj4gDQo+IE9uIDIwMTgvMDUv MTYgMTc6MTUsIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3JvdGU6DQo+ID4gUmUtLA0K PiA+DQo+ID4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+ID4NCj4gPiBDaGVlcnMsDQo+ID4gTWVkDQo+ ID4NCj4gPj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4+IERlwqA6IERvdHMgW21h aWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIERlIGxhIHBhcnQgZGUga2FuYW1lDQo+ID4+IG5p c2hpenVrYSBFbnZvecOpwqA6IG1lcmNyZWRpIDE2IG1haSAyMDE4IDA5OjUxIMOAwqA6IEJPVUNB REFJUiBNb2hhbWVkDQo+ID4+IElNVC9PTE47IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgQ2PC oDogZG90c0BpZXRmLm9yZyBPYmpldMKgOiBSZToNCj4gPj4gW0RvdHNdIEktRCBBY3Rpb246IGRy YWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPj4NCj4gPj4gUmUsDQo+ID4+ DQo+ID4+IEkgc2VlLCBidXQgSSBkaWRuJ3QgZmVlbCAiRm9yIGV4YW1wbGU6IiBpcyByZWZsZWN0 aW5nIG15IGNvbW1lbnQuDQo+ID4gW01lZF0gSSB3YXMgcmVmZXJyaW5nIHRoaXMgdGhpcyBjb21t ZW50IHlvdSBtYWRlICJJdCBzaG91bGQgYmUgbGVmdCBhcw0KPiBpbXBsZW1lbnRhdGlvbi0gYW5k IGRlcGxveW1lbnQtc3BlY2lmaWMiLg0KPiA+DQo+ID4gQW55d2F5LCBsZXQncyByZW1vdmUgIkZv ciBleGFtcGxlOiIuDQo+ID4NCj4gPj4gU2hvdWxkIHdlIG5lZWQgdG8gdXNlIHN1Y2Nlc3MgKDIu MDEgb3IgMi4wNCkgaW4gdGhlIGZpcnN0IHNlbnRlbmNlIGxpa2UgdGhpcz8NCj4gPj4NCj4gPj4g ICDCoMKgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcgbWl0 aWdhdGlvbiByZXF1ZXN0DQo+ID4+ICAgwqDCoCBmcm9tIGEgZGlmZmVyZW50IERPVFMgY2xpZW50 LCB0aGUgRE9UUyBzZXJ2ZXIgbWF5IHJldHVybiBzdWNjZXNzDQo+ID4+ICgyLjAxIG9yDQo+ID4+ IDIuMDQpDQo+ID4+ICAgwqDCoCBvcsKgIENvbmZsaWN0KDQuMDkpIHRvIHRoZSByZXF1ZXN0aW5n IERPVFMgY2xpZW50Lg0KPiA+Pg0KPiA+IFtNZWRdIEkgZG9uJ3QgdGhpbmsgc28uIFRoZSB0ZXh0 IGlzIGFib3V0IGEgcmVxdWVzdCB3aXRoIGEgbmV3IGN1aWQvbWlkLg0KPiA+DQo+IFtrYW5hbWVd IE9LLCB0aGUgdGV4dCBpcyBhYm91dCBhIHJlcXVlc3Qgd2l0aCBhIG5ldyBjdWlkL21pZC4NCj4g SG93ZXZlciwgSSdkIGxpa2UgdG8gcG9pbnQgaXQgb3V0IHRoYXQgdGhlIGNoZWNraW5nIG9mIGNv bmZsaWN0IHNob3VsZCBiZSBkb25lDQo+IGF0IHRoZSBhcnJpdmFsIG9mIGEgbmV3IFBVVCByZXF1 ZXN0IHdpdGggYm90aCBhIG5ldyBjdWlkL21pZCBjYXNlIGFuZCB0aGUNCj4gc2FtZSBtaWQodXBk YXRlIG9mIHRoZSBtaXRpZ2F0aW9uIHJlcXVlc3QpIGNhc2UuDQoNCjIuMDQgaXMgZGlzY3Vzc2Vk IGJlZm9yZSB0aGUgdGV4dCBleHBsYWluaW5nIGNvbmZsaWN0cyB3aXRoIGFuIGV4aXN0aW5nIG1p dGlnYXRpb24gcmVxdWVzdCBmcm9tIGEgZGlmZmVyZW50IGNsaWVudC4NCjxzbmlwIGZyb20gU2Vj dGlvbiA0LjQuMT4NCiAgIElmIHRoZSBET1RTIHNlcnZlciBmaW5kcyB0aGUgJ21pZCcgcGFyYW1l dGVyIHZhbHVlIGNvbnZleWVkIGluIHRoZQ0KICAgUFVUIHJlcXVlc3QgaW4gaXRzIGNvbmZpZ3Vy YXRpb24gZGF0YSBib3VuZCB0byB0aGF0IERPVFMgY2xpZW50LCBpdA0KICAgTUFZIHVwZGF0ZSB0 aGUgbWl0aWdhdGlvbiByZXF1ZXN0LCBhbmQgYSAyLjA0IChDaGFuZ2VkKSByZXNwb25zZSBpcw0K ICAgcmV0dXJuZWQgdG8gaW5kaWNhdGUgYSBzdWNjZXNzZnVsIHVwZGF0ZSBvZiB0aGUgbWl0aWdh dGlvbiByZXF1ZXN0Lg0KPC9zbmlwPg0KDQotVGlydQ0KDQo+IA0KPiANCj4gDQo+IA0KPiA+PiBy ZWdhcmRzLA0KPiA+PiBLYW5hbWUNCj4gPj4NCj4gPj4NCj4gPj4gT24gMjAxOC8wNS8xNiAxNjoz MywgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPj4+IFJlLSwNCj4gPj4+ DQo+ID4+PiAiRm9yIGV4YW1wbGUiIGlzIHRoZXJlIHRvIGFjY29tbW9kYXRlIGEgY29tbWVudCBm cm9tIEthbmFtZSB3aG8NCj4gPj4+IHdhbnRlZCB0aGUNCj4gPj4gYmVoYXZpb3IgdG8gYmUgYWxz byBpbXBsZW1lbnRhdGlvbi9kZXBsb3ltZW50Lg0KPiA+Pj4gQ2hlZXJzLA0KPiA+Pj4gTWVkDQo+ ID4+Pg0KPiA+Pj4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+Pj4+IERlwqA6IEtv bmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4gPj4+PiBbbWFpbHRvOlRpcnVtYWxlc3dhclJlZGR5 X0tvbmRhQE1jQWZlZS5jb21dDQo+ID4+Pj4gRW52b3nDqcKgOiBtZXJjcmVkaSAxNiBtYWkgMjAx OCAwOTowNCDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZA0KPiBJTVQvT0xOOw0KPiA+Pj4+IGthbmFt ZSBuaXNoaXp1a2EgQ2PCoDogZG90c0BpZXRmLm9yZyBPYmpldMKgOiBSRTogW0RvdHNdIEktRCBB Y3Rpb246DQo+ID4+Pj4gZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0KPiA+ Pj4+DQo+ID4+Pj4gSGkgTWVkLA0KPiA+Pj4+DQo+ID4+Pj4gUGxlYXNlIHNlZSBpbmxpbmUNCj4g Pj4+Pg0KPiA+Pj4+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+Pj4+PiBGcm9tOiBt b2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4+Pj4+IFttYWlsdG86bW9oYW1lZC5ib3Vj YWRhaXJAb3JhbmdlLmNvbV0NCj4gPj4+Pj4gU2VudDogV2VkbmVzZGF5LCBNYXkgMTYsIDIwMTgg MTI6MjYgUE0NCj4gPj4+Pj4gVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4gPj4+Pj4g PFRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20+Ow0KPiA+Pj4+PiBrYW5hbWUgbmlz aGl6dWthIDxrYW5hbWVAbnR0djYuanA+DQo+ID4+Pj4+IENjOiBkb3RzQGlldGYub3JnDQo+ID4+ Pj4+IFN1YmplY3Q6IFJFOiBbRG90c10gSS1EIEFjdGlvbjoNCj4gPj4+Pj4gZHJhZnQtaWV0Zi1k b3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0KPiA+Pj4+Pg0KPiA+Pj4+PiBUaGlzIGVtYWlsIG9y aWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdA0KPiA+Pj4+ PiBjbGljaw0KPiA+PiBsaW5rcw0KPiA+Pj4+IG9yDQo+ID4+Pj4+IG9wZW4gYXR0YWNobWVudHMg dW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUNCj4gPj4+Pj4gY29u dGVudCBpcyBzYWZlLg0KPiA+Pj4+Pg0KPiA+Pj4+PiBIaSBUaXJ1LA0KPiA+Pj4+Pg0KPiA+Pj4+ PiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPj4+Pj4NCj4gPj4+Pj4gQ2hlZXJzLA0KPiA+Pj4+PiBN ZWQNCj4gPj4+Pj4NCj4gPj4+Pj4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+Pj4+ Pj4gRGXCoDogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA+Pj4+Pj4gW21haWx0bzpUaXJ1 bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tXQ0KPiA+Pj4+Pj4gRW52b3nDqcKgOiBtZXJj cmVkaSAxNiBtYWkgMjAxOCAwODoxMSDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZA0KPiA+Pj4+Pj4g SU1UL09MTjsga2FuYW1lIG5pc2hpenVrYSBDY8KgOiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFJF OiBbRG90c10NCj4gPj4+Pj4+IEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hh bm5lbC0xOS50eHQNCj4gPj4+Pj4+DQo+ID4+Pj4+PiBJIHByb3Bvc2UgdG8gdXBkYXRlIHRoZSB0 ZXh0IGFzIGZvbGxvd3MgdG8gbWFrZSBpdCBtb3JlIGNsZWFyOg0KPiA+Pj4+Pj4NCj4gPj4+Pj4+ IElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcgbWl0aWdhdGlv biByZXF1ZXN0DQo+ID4+Pj4+PiBmcm9tIGEgZGlmZmVyZW50IERPVFMgY2xpZW50LCB0aGUgRE9U UyBzZXJ2ZXIgbWF5IGVpdGhlciBkZWNpZGUNCj4gPj4+Pj4+IHRvIG1haW50YWluIHRoZSBjb25m bGljdGluZyByZXF1ZXN0IG9yIHJlamVjdCB0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbg0KPiBy ZXF1ZXN0Lg0KPiA+Pj4+Pj4gSWYgdGhlIERPVFMgc2VydmVyIGRlY2lkZXMgdG8gbWFpbnRhaW4g dGhlIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24NCj4gPj4+Pj4+IHJlcXVlc3QsDQo+ID4+Pj4+IFtN ZWRdIEkgZ3Vlc3MgImNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdCIgcG9pbnRzIHRvIHRo ZSBuZXcNCj4gcmVxdWVzdC4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgdGhlIERPVFMgc2VydmVyIHJl dHVybnMgMi4wMSAoQ3JlYXRlZCkgdG8NCj4gPj4+Pj4+IHRoZSByZXF1ZXN0aW5nIERPVFMgY2xp ZW50LiBJZiB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRlcyB0byByZWplY3QNCj4gPj4+Pj4+IHRoZSBj b25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QsIHRoZSBET1RTIHNlcnZlciByZXR1cm5zIDQu MDkNCj4gPj4+Pj4+IChDb25mbGljdCkgW1JGQzgxMzJdIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMg Y2xpZW50DQo+ID4+Pj4+IFtNZWRdIElkZW0gYXMgYWJvdmUuDQo+ID4+Pj4+DQo+ID4+Pj4+DQo+ ID4+Pj4+PiBGb3IgYm90aCAyLjAxIChDcmVhdGVkKSBhbmQgNC4wOSAoQ29uZmxpY3QpIHJlc3Bv bnNlcywNCj4gPj4+Pj4gW01lZF0gSSBsaWtlIHRoaXMuDQo+ID4+Pj4+DQo+ID4+Pj4+ICAgIHRo ZSByZXNwb25zZSBtZXNzYWdlDQo+ID4+Pj4+PiBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24g Zm9yIGEgRE9UUyBjbGllbnQgdG8gcmVjb2duaXplIHRoZQ0KPiA+Pj4+Pj4gc291cmNlIG9mIHRo ZSBjb25mbGljdCBhcyBkZXNjcmliZWQgYmVsb3c6DQo+ID4+Pj4+IFtNZWRdIFdoYXQgYWJvdXQ/ DQo+ID4+Pj4+DQo+ID4+Pj4+IE5FVzoNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgICBJZiB0aGUgcmVx dWVzdCBpcyBjb25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdA0K PiA+Pj4+PiAgICAgIGZyb20gYSBkaWZmZXJlbnQgRE9UUyBjbGllbnQsIHRoZSBET1RTIHNlcnZl ciBtYXkgcmV0dXJuIDIuMDENCj4gPj4+Pj4gICAgICAoQ3JlYXRlZCkgb3IgNC4wOSAoQ29uZmxp Y3QpIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMgY2xpZW50LiAgRm9yDQo+ID4+Pj4+ICAgICAgZXhh bXBsZToNCj4gPj4+Pj4NCj4gPj4+Pj4gICAgICBvICBJZiB0aGUgRE9UUyBzZXJ2ZXIgZGVjaWRl cyB0byBtYWludGFpbiB0aGUgbmV3IG1pdGlnYXRpb24NCj4gcmVxdWVzdCwNCj4gPj4+Pj4gICAg ICAgICB0aGUgRE9UUyBzZXJ2ZXIgcmV0dXJucyAyLjAxIChDcmVhdGVkKSB0byB0aGUgcmVxdWVz dGluZyBET1RTDQo+ID4+Pj4+ICAgICAgICAgY2xpZW50Lg0KPiA+Pj4+Pg0KPiA+Pj4+PiAgICAg IG8gIElmIHRoZSBET1RTIHNlcnZlciBkZWNpZGVzIHRvIHJlamVjdCB0aGUgbmV3IG1pdGlnYXRp b24gcmVxdWVzdCwNCj4gPj4+Pj4gICAgICAgICB0aGUgRE9UUyBzZXJ2ZXIgcmV0dXJucyA0LjA5 IChDb25mbGljdCkgdG8gdGhlIHJlcXVlc3RpbmcgRE9UUw0KPiA+Pj4+PiAgICAgICAgIGNsaWVu dC4NCj4gPj4+Pj4NCj4gPj4+Pj4gICAgICBGb3IgYm90aCAyLjAxIChDcmVhdGVkKSBhbmQgNC4w OSAoQ29uZmxpY3QpIHJlc3BvbnNlcywgdGhlIHJlc3BvbnNlDQo+ID4+Pj4+ICAgICAgaW5jbHVk ZXMgZW5vdWdoIGluZm9ybWF0aW9uIGZvciBhIERPVFMgY2xpZW50IHRvIHJlY29nbml6ZSB0aGUN Cj4gc291cmNlDQo+ID4+Pj4+ICAgICAgb2YgdGhlIGNvbmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxv dzoNCj4gPj4+PiBQcm9wb3NlZCB0ZXh0IGxvb2tzIGdvb2QuIE5pdDogSSBkb24ndCBzZWUgdGhl IG5lZWQgZm9yICJGb3IgZXhhbXBsZSIuDQo+ID4+Pj4NCj4gPj4+PiBDaGVlcnMsDQo+ID4+Pj4g LVRpcnUNCj4gPj4+Pg0KPiA+Pj4+Pj4gLVRpcnUNCj4gPj4+Pj4+DQo+ID4+Pj4+Pj4gLS0tLS1P cmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPj4+Pj4+PiBGcm9tOiBEb3RzIFttYWlsdG86ZG90cy1i b3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YNCj4gPj4+Pj4+PiBtb2hhbWVkLmJvdWNhZGFp ckBvcmFuZ2UuY29tDQo+ID4+Pj4+Pj4gU2VudDogV2VkbmVzZGF5LCBNYXkgMTYsIDIwMTggMTA6 NTIgQU0NCj4gPj4+Pj4+PiBUbzoga2FuYW1lIG5pc2hpenVrYSA8a2FuYW1lQG50dHY2LmpwPg0K PiA+Pj4+Pj4+IENjOiBkb3RzQGlldGYub3JnDQo+ID4+Pj4+Pj4gU3ViamVjdDogUmU6IFtEb3Rz XSBJLUQgQWN0aW9uOg0KPiA+Pj4+Pj4+IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0x OS50eHQNCj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+IFRoaXMgZW1haWwgb3JpZ2luYXRlZCBmcm9tIG91 dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8gbm90DQo+ID4+Pj4+Pj4gY2xpY2sgbGlua3MN Cj4gPj4+Pj4+IG9yDQo+ID4+Pj4+Pj4gb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29n bml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZQ0KPiA+Pj4+Pj4+IGNvbnRlbnQgaXMgc2FmZS4N Cj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+IEhpIEthbmFtZSwNCj4gPj4+Pj4+Pg0KPiA+Pj4+Pj4+IFRo YW5rIHlvdSBmb3IgQUNraW5nLiBJIHdpbGwgaW1wbGVtZW50IHRoaXMgY2hhbmdlLg0KPiA+Pj4+ Pj4+DQo+ID4+Pj4+Pj4gQ2hlZXJzLA0KPiA+Pj4+Pj4+IE1lZA0KPiA+Pj4+Pj4+DQo+ID4+Pj4+ Pj4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+Pj4+Pj4+PiBEZcKgOiBrYW5hbWUg bmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50dHY2LmpwXSBFbnZvecOpwqA6DQo+ID4+Pj4+Pj4+ IG1lcmNyZWRpDQo+ID4+Pj4+Pj4+IDE2IG1haSAyMDE4IDAzOjE2IMOAwqA6IEJPVUNBREFJUiBN b2hhbWVkIElNVC9PTE4gQ2PCoDoNCj4gPj4+Pj4gZG90c0BpZXRmLm9yZw0KPiA+Pj4+Pj4+IE9i amV0DQo+ID4+Pj4+Pj4+IDogUmU6IFtEb3RzXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMt c2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+IEhpIE1lZCwNCj4g Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+ID4+Pj4+Pj4+DQo+ID4+ Pj4+Pj4+IHRoYW5rcywNCj4gPj4+Pj4+Pj4ga2FuYW1lDQo+ID4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+ IE9uIDIwMTgvMDUvMTUgMjI6MjYsIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3JvdGU6 DQo+ID4+Pj4+Pj4+PiBIaSBLYW5hbWUsDQo+ID4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gUGxlYXNl IHNlZSBpbmxpbmUuDQo+ID4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4gQ2hlZXJzLA0KPiA+Pj4+Pj4+ Pj4gTWVkDQo+ID4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUt LS0tLQ0KPiA+Pj4+Pj4+Pj4+IERlwqA6IGthbmFtZSBuaXNoaXp1a2EgW21haWx0bzprYW5hbWVA bnR0djYuanBdIEVudm95w6nCoDogbHVuZGkNCj4gPj4+Pj4+Pj4+PiAxNCBtYWkgMjAxOCAxMTo0 OSDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOIENjwqA6DQo+ID4+Pj4+Pj4+Pj4gZG90 c0BpZXRmLm9yZyBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBBY3Rpb246DQo+ID4+Pj4+Pj4+Pj4g ZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0KPiA+Pj4+Pj4+Pj4+DQo+ID4+ Pj4+Pj4+Pj4gSGkgTWVkLA0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4gUGxlYXNlIHNlZSBp bmxpbmUuDQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+PiB0aGFua3MsDQo+ID4+Pj4+Pj4+Pj4g S2FuYW1lDQo+ID4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+PiBPbiAyMDE4LzA1LzExIDE4OjM5LCBt b2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIHdyb3RlOg0KPiA+Pj4+Pj4+Pj4+PiBSZS0sDQo+ ID4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+IFBsZWFzZSBzZWUgaW5saW5lLg0KPiA+Pj4+Pj4+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4+PiBDaGVlcnMsDQo+ID4+Pj4+Pj4+Pj4+IE1lZA0KPiA+Pj4+Pj4+ Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tIERlwqA6IGth bmFtZSBuaXNoaXp1a2ENCj4gPj4+Pj4+Pj4+Pj4+IFttYWlsdG86a2FuYW1lQG50dHY2LmpwXSBF bnZvecOpwqA6DQo+ID4+Pj4+Pj4+Pj4+PiB2ZW5kcmVkaQ0KPiA+Pj4+Pj4+Pj4+Pj4gMTEgbWFp IDIwMTggMTA6NTkgw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTiBDY8KgOg0KPiA+Pj4+ Pj4+Pj4+Pj4gZG90c0BpZXRmLm9yZyBPYmpldMKgOiBSZTogW0RvdHNdIEktRCBBY3Rpb246DQo+ ID4+Pj4+Pj4+Pj4+PiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4+ Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4gSGkgTWVkLA0KPiA+Pj4+Pj4+Pj4+Pj4NCj4gPj4+ Pj4+Pj4+Pj4+ICAgICAgPiBJZiB0aGUgc2VydmVyIGRlY2lkZXMgbm90IHRvIG1haW50YWluIHRo ZQ0KPiA+Pj4+Pj4+Pj4+Pj4gY29uZmxpY3RpbmcgcmVxdWVzdCwgdGhlbg0KPiA+Pj4+Pj4+Pj4+ IHRoZQ0KPiA+Pj4+Pj4+Pj4+Pj4gcHJlc2VudCByZXF1ZXN0IHdpbGwgYmUgcHJvY2Vzc2VkIGFz IG5vcm1hbDogdGhhdCBpcyAyLjAxDQo+ID4+Pj4+Pj4+Pj4+PiB3aWxsIGJlDQo+ID4+Pj4+Pj4+ IHJldHVybmVkDQo+ID4+Pj4+Pj4+Pj4gdG8NCj4gPj4+Pj4+Pj4+Pj4+IGFjayBzdWNjZXNzZnVs IGhhbmRsaW5nLiBBIG5vdGlmaWNhdGlvbiB3aWxsIGJlIHNlbnQgdG8gdGhlDQo+ID4+Pj4+Pj4+ Pj4+PiBjbGllbnQgb3duZXINCj4gPj4+Pj4+Pj4+PiBvZg0KPiA+Pj4+Pj4+Pj4+Pj4gdGhlIGNv bmZsaWN0aW5nIHJlcXVlc3QgdG8gbm90aWZ5IHdpdGhkcmF3YWwgKHNlY3Rpb24gNC40LjIpLg0K PiA+Pj4+Pj4+Pj4+Pj4gSW4gdGhhdCBjYXNlLCB0aGUgc3RhdHVzIGNvZGUgaXMgJzcnIChBdHRh Y2sgbWl0aWdhdGlvbiBpcw0KPiA+Pj4+Pj4+Pj4+Pj4gd2l0aGRyYXduKQ0KPiA+Pj4+Pj4+Pj4+ PiBbTWVkXSBZZXMsIHRoYXQgc3RhdHVzIHdpbGwgYmUgc2VudCB0byB0aGUgb3duZXIgb2YgdGhl DQo+ID4+Pj4+Pj4+Pj4+IChleGlzdGluZykNCj4gPj4+Pj4+Pj4gcmVxdWVzdC4NCj4gPj4+Pj4+ Pj4+Pj4+IE15IG9yaWdpbmFsIHF1ZXN0aW9uIGlzIHdoZW4gdGhlIHN0YXR1cyBjb2RlICc4JyAo QXR0YWNrDQo+ID4+Pj4+Pj4+Pj4+PiBtaXRpZ2F0aW9uIGlzDQo+ID4+Pj4+Pj4+Pj4+PiByZWpl Y3RlZCkgd2lsbCBiZSB1c2VkLg0KPiA+Pj4+Pj4+Pj4+PiBbTWVkXSBJIGdvdCB0aGF0Lg0KPiA+ Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4gSW4gdGhlIHRleHQgaW4gdGhlIGRyYWZ0LCAidGhl IGNvbmZsaWN0aW5nIG1pdGlnYXRpb24NCj4gPj4+Pj4+Pj4+Pj4+IHJlcXVlc3QiIGlzDQo+ID4+ Pj4+Pj4+Pj4gYW1iaWd1b3VzDQo+ID4+Pj4+Pj4+Pj4+PiB3aGV0aGVyIGl0IGlzIGFscmVhZHkg ZXhpc3RpbmcgcmVxdWVzdCBvciB0aGUgcmVxdWVzdCB0aGF0DQo+ID4+Pj4+Pj4+Pj4+PiBqdXN0 IGhhcw0KPiA+Pj4+Pj4+Pj4+IGFycml2ZWQuDQo+ID4+Pj4+Pj4+Pj4+IFtNZWRdIEl0IGlzIHJl bGF0ZWQgdG8gdGhlIGFscmVhZHkgZXhpc3RpbmcgcmVxdWVzdC4NCj4gPj4+Pj4+Pj4+Pj4NCj4g Pj4+Pj4+Pj4+Pj4+IFNheSwgdGhlIGV4aXN0aW5nIHJlcXVlc3QgaXMgKEEpLCB0aGVuIGEgbWl0 aWdhdGlvbiByZXF1ZXN0DQo+ID4+Pj4+Pj4+Pj4+PiAoQikgYXJyaXZlZA0KPiA+Pj4+Pj4+Pj4+ IHdoaWNoDQo+ID4+Pj4+Pj4+Pj4+PiBhcmUgY29uZmxpY3Rpbmcgd2l0aCBBLg0KPiA+Pj4+Pj4+ Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+IElmIEIgaXMgc2VsZWN0ZWQuDQo+ID4+Pj4+Pj4+Pj4+PiAo QSkgd2lsbCBnZXQgbm90aWZpY2F0aW9uIHdpdGggdGhlIHdpdGhkcmF3YWwgY29kZSAnNycNCj4g Pj4+Pj4+Pj4+Pj4+IChCKSB3aWxsIGdldCAyLjAxDQo+ID4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+ Pj4+PiBbTWVkXSBZZXMuIFRoZSBjdXJyZW50IHRleHQgZG9lcyBjYWxscyBvdXQgeW91ciBzdGVw ICgxKSBpbg0KPiA+Pj4+IDQuNC4yLg0KPiA+Pj4+Pj4+Pj4+PiBZb3VyDQo+ID4+Pj4+Pj4+Pj4g c3RlcCAoMikgaXMgbm90IGNhbGxlZCBleHBsaWNpdCBpbiB0aGUgdGV4dCBiZWNhdXNlIHRoZXJl IGlzDQo+ID4+Pj4+Pj4+Pj4gbm8gY29uZnVzaW9uIGFib3V0IHdoaWNoIGNvZGUgdG8gcmV0dXJu IHdoZW4gYSByZXF1ZXN0IGlzDQo+ID4+Pj4+Pj4+Pj4gYWNjZXB0ZWQgdG8gYmUNCj4gPj4+Pj4+ PiBob25vcmVkLg0KPiA+Pj4+Pj4+Pj4+PiBUaGUgdGV4dCBmb2N1c2VzIG9uIGNhc2VzIHdoaWNo IHJlcXVpcmVzIHNwZWNpZmljIGhhbmRsaW5nOg0KPiA+Pj4+Pj4+Pj4+PiAtIGluYWN0aXZlIHJl cXVlc3QgYmVjYXVzZSBvZiBhIGNvbmZsaWN0DQo+ID4+Pj4+Pj4+Pj4+IC0gbXVsdGlwbGUgYWN0 aXZlIGNvbmZsaWN0aW5nIHJlcXVlc3RzDQo+ID4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+PiBl bHNlIElmIEIgaXMgbm90IHNlbGVjdGVkLg0KPiA+Pj4+Pj4+Pj4+Pj4gKEIpIHdpbGwgZ2V0IDQu MDkNCj4gPj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+IFtNZWRdIEluIHRoaXMgY2FzZSwgdGhl IHJlc291cmNlIGlzIG5vdCBjcmVhdGVkIGFuZCBhcyBzdWNoDQo+ID4+Pj4+Pj4+Pj4+IGNhc2UN Cj4gPj4+Pj4+Pj4gcmV0dXJuaW5nDQo+ID4+Pj4+Pj4+Pj4gbm90aWZpY2F0aW9uIHN0YXR1cyBj b2RlIG9mIDggaXMgbm90IHBvc3NpYmxlIGFzIHlvdSByaWdodGZ1bA0KPiA+Pj4+Pj4+Pj4+IHBv aW50ZWQNCj4gPj4+Pj4+IG91dC4NCj4gPj4+Pj4+Pj4+Pj4gVGhpcyBpcyB3aHkgd2Ugc3VnZ2Vz dGVkIHRvIHJldHVybiAyLjAxIGZvciB0aGlzIGNhc2UgdG9vIHNvDQo+ID4+Pj4+Pj4+Pj4+IHRo YXQgYW4NCj4gPj4+Pj4+Pj4gdXBkYXRlDQo+ID4+Pj4+Pj4+Pj4gb2YgdGhlIHN0YXR1cyBjYW4g YmUgc2VudCB0byB0aGUgY2xpZW50IHVwb24gY2hhbmdlLg0KPiA+Pj4+Pj4+Pj4+IEkgZG9uJ3Qg dGhpbmsgaXQgaXMgbmVlZGVkIHRvIG9ibGlnYXRlIHJldHVybmluZyBvZiAyLjAxLg0KPiA+Pj4+ Pj4+Pj4+IElmIGl0IGlzIG9idmlvdXMgdGhhdCB0aGUgRE9UUyBzZXJ2ZXIgbmVlZCBub3QgdG8g Y3JlYXRlDQo+ID4+Pj4+Pj4+Pj4gcmVzb3VyY2Ugb2YgdGhlIGNvbmZsaWN0aW5nIHJlcXVlc3Qs IGl0IG1heSByZXR1cm4gNC4wOS4NCj4gPj4+Pj4+Pj4+PiBTbywgcmV0dXJuaW5nIG9mIDQuMDkg c2hvdWxkIGJlIGFsbG93ZWQgaW4gdGhpcyBjYXNlLg0KPiA+Pj4+Pj4+Pj4+IEl0IHNob3VsZCBi ZSBsZWZ0IGFzIGltcGxlbWVudGF0aW9uLSBhbmQgZGVwbG95bWVudC1zcGVjaWZpYy4NCj4gPj4+ Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+PiBbTWVkXSBEbyB5b3UgbWVhbiB0aGF0 IHRoZSB0ZXh0IHNob3VsZCBiZSBtb2RpZmllZCB0byBhbGxvdw0KPiA+Pj4+Pj4+Pj4gZm9yIGJv dGgNCj4gPj4+Pj4+Pj4+IDIuMDENCj4gPj4+Pj4+Pj4gb3IgNC4wOSB0byBiZSByZXR1cm5lZCBk ZXBlbmRpbmcgb24gc29tZSBsb2NhbCBwb2xpY3k/DQo+ID4+Pj4+Pj4+PiBlLmcuLA0KPiA+Pj4+ Pj4+Pj4NCj4gPj4+Pj4+Pj4+IE9MRDoNCj4gPj4+Pj4+Pj4+ICAgICAgIElmIHRoZSByZXF1ZXN0 IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcNCj4gPj4+Pj4+Pj4+IG1pdGlnYXRpb24N Cj4gPj4+PiByZXF1ZXN0DQo+ID4+Pj4+Pj4+PiAgICAgICBmcm9tIGEgZGlmZmVyZW50IERPVFMg Y2xpZW50LCBhbmQgdGhlIERPVFMgc2VydmVyDQo+ID4+Pj4+Pj4+PiBkZWNpZGVzIHRvDQo+ID4+ Pj4+PiBtYWludGFpbg0KPiA+Pj4+Pj4+Pj4gICAgICAgdGhlIGNvbmZsaWN0aW5nIG1pdGlnYXRp b24gcmVxdWVzdCwgdGhlIERPVFMgc2VydmVyDQo+ID4+Pj4+Pj4+PiByZXR1cm5zDQo+ID4+Pj4g NC4wOQ0KPiA+Pj4+Pj4+Pj4gICAgICAgKENvbmZsaWN0KSBbUkZDODEzMl0gdG8gdGhlIHJlcXVl c3RpbmcgRE9UUyBjbGllbnQuIFRoZQ0KPiA+Pj4+IHJlc3BvbnNlDQo+ID4+Pj4+Pj4+PiAgICAg ICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQgdG8NCj4gPj4+ Pj4+Pj4+IHJlY29nbml6ZSB0aGUNCj4gPj4+Pj4+IHNvdXJjZQ0KPiA+Pj4+Pj4+Pj4gICAgICAg b2YgdGhlIGNvbmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxvdzoNCj4gPj4+Pj4+Pj4+DQo+ID4+Pj4+ Pj4+PiBORVc6DQo+ID4+Pj4+Pj4+PiAgICAgICBJZiB0aGUgcmVxdWVzdCBpcyBjb25mbGljdGlu ZyB3aXRoIGFuIGV4aXN0aW5nDQo+ID4+Pj4+Pj4+PiBtaXRpZ2F0aW9uDQo+ID4+Pj4gcmVxdWVz dA0KPiA+Pj4+Pj4+Pj4gICAgICAgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwgdGhlIERP VFMgc2VydmVyIG1heSByZXR1cm4NCj4gPj4+Pj4+Pj4+IDIuMDENCj4gPj4+Pj4+IChDcmVhdGVk KQ0KPiA+Pj4+Pj4+Pj4gICAgICAgb3IgNC4wOSAoQ29uZmxpY3QpIHRvIHRoZSByZXF1ZXN0aW5n IERPVFMgY2xpZW50LiBUaGUgcmVzcG9uc2UNCj4gPj4+Pj4+Pj4+ICAgICAgIGluY2x1ZGVzIGVu b3VnaCBpbmZvcm1hdGlvbiBmb3IgYSBET1RTIGNsaWVudCB0bw0KPiA+Pj4+Pj4+Pj4gcmVjb2du aXplIHRoZQ0KPiA+Pj4+Pj4gc291cmNlDQo+ID4+Pj4+Pj4+PiAgICAgICBvZiB0aGUgY29uZmxp Y3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4gWWVzLCBpdCB3 b3JrcyBmb3IgbWUuDQo+ID4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+PiBUaXJ1 IHNhaWQ6DQo+ID4+Pj4+Pj4+Pj4+PiAgICAgID4gSW4gdGhpcyBjYXNlLCB0aGUgcmVzb3VyY2Ug c2hvdWxkIGJlIGNyZWF0ZWQgYW5kIHRoZQ0KPiA+Pj4+Pj4+Pj4+Pj4gc2VydmVyIHNob3VsZA0K PiA+Pj4+Pj4+Pj4+IHJldHVybg0KPiA+Pj4+Pj4+Pj4+Pj4gc3VjY2VzcyAoMi4wMSBvciAyLjA0 KSByZXNwb25zZSBjb2RlIGFsb25nIHdpdGggdGhlDQo+ID4+Pj4+Pj4+Pj4+PiBjb25mbGljdC0N Cj4gPj4+Pj4+Pj4gaW5mb3JtYXRpb24uDQo+ID4+Pj4+Pj4+Pj4+PiBJbiB0aGlzIHNpdHVhdGlv biwgKEIpIHdpbGwgZ2V0IDIuMDEgb3IgMi4wNCBhbG9uZyB3aXRoIHRoZQ0KPiA+Pj4+Pj4+Pj4+ Pj4gcmVqZWN0ZWQNCj4gPj4+Pj4+Pj4gY29kZQ0KPiA+Pj4+Pj4+Pj4+ICc4Jw0KPiA+Pj4+Pj4+ Pj4+Pj4gKFdoaWNoIG1pdGlnYXRpb24gcmVxdWVzdCB3aWxsIGJlIHNlbGVjdGVkIGJ5IHRoZSBE T1RTDQo+ID4+Pj4+Pj4+Pj4+PiBzZXJ2ZXIgaXMNCj4gPj4+Pj4+Pj4+Pj4+IGltcGxlbWVudGF0 aW9uLSBhbmQgZGVwbG95bWVudC1zcGVjaWZpYy4pDQo+ID4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+ Pj4+Pj4gVGhhbmtzLA0KPiA+Pj4+Pj4+Pj4+Pj4gS2FuYW1lDQo+ID4+Pj4+Pj4+Pj4+Pg0KPiA+ Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+IE9uIDIwMTgvMDUvMTEgMTU6MDksIG1vaGFtZWQu Ym91Y2FkYWlyQG9yYW5nZS5jb20NCj4gd3JvdGU6DQo+ID4+Pj4+Pj4+Pj4+Pj4gSGkgS2FuYW1l LA0KPiA+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4gSWYgdGhlIHNlcnZlciBkZWNpZGVz IG5vdCB0byBtYWludGFpbiB0aGUgY29uZmxpY3RpbmcNCj4gPj4+Pj4+Pj4+Pj4+PiByZXF1ZXN0 LCB0aGVuIHRoZQ0KPiA+Pj4+Pj4+Pj4+Pj4gcHJlc2VudCByZXF1ZXN0IHdpbGwgYmUgcHJvY2Vz c2VkIGFzIG5vcm1hbDogdGhhdCBpcyAyLjAxDQo+ID4+Pj4+Pj4+Pj4+PiB3aWxsIGJlDQo+ID4+ Pj4+Pj4+IHJldHVybmVkDQo+ID4+Pj4+Pj4+Pj4gdG8NCj4gPj4+Pj4+Pj4+Pj4+IGFjayBzdWNj ZXNzZnVsIGhhbmRsaW5nLiBBIG5vdGlmaWNhdGlvbiB3aWxsIGJlIHNlbnQgdG8gdGhlDQo+ID4+ Pj4+Pj4+Pj4+PiBjbGllbnQgb3duZXINCj4gPj4+Pj4+Pj4+PiBvZg0KPiA+Pj4+Pj4+Pj4+Pj4g dGhlIGNvbmZsaWN0aW5nIHJlcXVlc3QgdG8gbm90aWZ5IHdpdGhkcmF3YWwgKHNlY3Rpb24gNC40 LjIpLg0KPiA+Pj4+Pj4+Pj4+Pj4+IFRoZSB0ZXh0IGZvY3VzZXMgb24gdGhlIGNhc2UgIiwgYW5k IHRoZSBET1RTIHNlcnZlcg0KPiA+Pj4+Pj4+Pj4+Pj4+IGRlY2lkZXMgdG8gbWFpbnRhaW4NCj4g Pj4+Pj4+Pj4+PiB0aGUNCj4gPj4+Pj4+Pj4+Pj4+IGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVx dWVzdCIgYmVjYXVzZSB0aGlzIGlzIHRoZSBvbmUNCj4gPj4+Pj4+Pj4+Pj4+IHdoaWNoIHJlcXVp cmVzIGFkZGl0aW9uYWwgc3BlY2lmaWNhdGlvbiB2cy4gbm9ybWFsIHJlcXVlc3QNCj4gPj4+Pj4+ Pj4+Pj4+IHRoYXQgaXMgYWNjZXB0ZWQgYnkgYQ0KPiA+Pj4+Pj4+PiBzZXJ2ZXIuDQo+ID4+Pj4+ Pj4+Pj4+Pj4gQ2hlZXJzLA0KPiA+Pj4+Pj4+Pj4+Pj4+IE1lZA0KPiA+Pj4+Pj4+Pj4+Pj4+DQo+ ID4+Pj4+Pj4+Pj4+Pj4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLSBEZcKgOiBrYW5hbWUg bmlzaGl6dWthDQo+ID4+Pj4+Pj4+Pj4+Pj4+IFttYWlsdG86a2FuYW1lQG50dHY2LmpwXSBFbnZv ecOpwqA6DQo+ID4+Pj4+Pj4+Pj4+Pj4+IG1lcmNyZWRpIDkgbWFpIDIwMTggMTA6NDEgw4DCoDog Qk9VQ0FEQUlSIE1vaGFtZWQNCj4gSU1UL09MTg0KPiA+Pj4+PiBDY8KgOg0KPiA+Pj4+Pj4+Pj4+ Pj4+PiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFJlOiBbRG90c10gSS1EIEFjdGlvbjoNCj4gPj4+ Pj4+Pj4+Pj4+Pj4gZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0KPiA+Pj4+ Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+PiBIaSBNZWQsDQo+ID4+Pj4+Pj4+Pj4+Pj4+DQo+ ID4+Pj4+Pj4+Pj4+Pj4+IEknbSBPSyB3aXRoIHRoaXMgY2hhbmdlLg0KPiA+Pj4+Pj4+Pj4+Pj4+ PiBIb3dldmVyLCB0byBiZSBwcmVjaXNlLCBJJ2QgbGlrZSB0byBzdWdnZXN0IHRvIHN0YXRlDQo+ ID4+Pj4+Pj4+Pj4+Pj4+IGFib3V0IHRoZSBjYXNlDQo+ID4+Pj4+Pj4+IHRoZQ0KPiA+Pj4+Pj4+ Pj4+Pj4gRE9UUw0KPiA+Pj4+Pj4+Pj4+Pj4+PiBzZXJ2ZXIgZGVjaWRlcyBOT1QgdG8gbWFpbnRh aW4gaXQuDQo+ID4+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+IE5FVy0yOg0KPiA+Pj4+ Pj4+Pj4+Pj4+PiAgICAgICDCoMKgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGgg YW4gZXhpc3RpbmcNCj4gPj4+Pj4+Pj4+Pj4+Pj4gbWl0aWdhdGlvbg0KPiA+Pj4+Pj4+PiByZXF1 ZXN0DQo+ID4+Pj4+Pj4+Pj4+Pj4+ICAgICAgIMKgwqAgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNs aWVudCwgYW5kIHRoZSBET1RTDQo+ID4+Pj4+Pj4+Pj4+Pj4+IHNlcnZlciBkZWNpZGVzIHRvDQo+ ID4+Pj4+Pj4+Pj4gbWFpbnRhaW4NCj4gPj4+Pj4+Pj4+Pj4+Pj4gICAgICAgwqDCoCB0aGUgY29u ZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUw0KPiA+Pj4+Pj4+Pj4+Pj4+PiBz ZXJ2ZXIgcmV0dXJucw0KPiA+Pj4+Pj4+PiAyLjAxDQo+ID4+Pj4+Pj4+Pj4+Pj4+ICAgICAgIMKg wqAgKENyZWF0ZWQpIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMgY2xpZW50Lg0KPiA+Pj4+Pj4+Pj4+ Pj4+PiAgICAgICDCoMKgIE90aGVyd2lzZSwgdGhlIERPVFMgc2VydmVyIHJldHVybnMgNC4wOQ0K PiA+Pj4+Pj4+Pj4+Pj4+PiAoQ29uZmxpY3QpDQo+ID4+Pj4+PiBbUkZDODEzMl0uDQo+ID4+Pj4+ Pj4+Pj4+Pj4+ICAgICAgIMKgwqAgVGhlIHJlc3BvbnNlIGluY2x1ZGVzIGVub3VnaCBpbmZvcm1h dGlvbiBmb3IgYQ0KPiA+Pj4+Pj4+Pj4+Pj4+PiBET1RTIGNsaWVudA0KPiA+Pj4+Pj4gdG8NCj4g Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgwqDCoCByZWNvZ25pemUgdGhlIHNvdXJjZSBvZiB0aGUgY29u ZmxpY3QgYXMNCj4gPj4+Pj4+Pj4+Pj4+Pj4gZGVzY3JpYmVkDQo+ID4+Pj4gYmVsb3c6DQo+ID4+ Pj4+Pj4+Pj4+Pj4+IHRoYW5rcywNCj4gPj4+Pj4+Pj4+Pj4+Pj4gS2FuYW1lDQo+ID4+Pj4+Pj4+ Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+IE9uIDIwMTgvMDUvMDkgMTQ6NTEsIG1vaGFtZWQuYm91 Y2FkYWlyQG9yYW5nZS5jb20NCj4gd3JvdGU6DQo+ID4+Pj4+Pj4+Pj4+Pj4+PiBIaSBLYW5hbWUs DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gQWZ0ZXIgdGhpbmtpbmcgYWJv dXQgdGhpcywgSSBkbyB0aGluayB0aGF0IHlvdSBoYXZlIGENCj4gPj4+Pj4+Pj4+Pj4+Pj4+IHZh bGlkIHBvaW50LiBJDQo+ID4+Pj4+Pj4+Pj4+Pj4+IHN1Z2dlc3QgdG8gbWFrZSB0byBtYWtlIHRo aXMgY2hhbmdlIChtYXJrZWQgd2l0aCBeXl5eKQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gT0xEOg0KPiA+ Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgSWYgdGhlIHJlcXVlc3QgaXMgY29uZmxpY3Rpbmcgd2l0 aCBhbiBleGlzdGluZw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gbWl0aWdhdGlvbg0KPiA+Pj4+Pj4+PiBy ZXF1ZXN0DQo+ID4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBmcm9tIGEgZGlmZmVyZW50IERPVFMg Y2xpZW50LCBhbmQgdGhlIERPVFMNCj4gPj4+Pj4+Pj4+Pj4+Pj4+IHNlcnZlciBkZWNpZGVzIHRv DQo+ID4+Pj4+Pj4+Pj4+PiBtYWludGFpbg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgdGhl IGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdCwgdGhlIERPVFMNCj4gPj4+Pj4+Pj4+Pj4+ Pj4+IHNlcnZlciByZXR1cm5zDQo+ID4+Pj4+Pj4+IDQuMDkNCj4gPj4+Pj4+Pj4+Pj4+Pj4+ICAg ICAgICAgIChDb25mbGljdCkgW1JGQzgxMzJdIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMgY2xpZW50 Lg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gVGhlDQo+ID4+Pj4+Pj4+IHJlc3BvbnNlDQo+ID4+Pj4+Pj4+ Pj4+Pj4+PiAgICAgICAgICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBj bGllbnQNCj4gPj4+Pj4+Pj4+Pj4+Pj4+IHRvIHJlY29nbml6ZSB0aGUNCj4gPj4+Pj4+Pj4+Pj4+ IHNvdXJjZQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgb2YgdGhlIGNvbmZsaWN0IGFzIGRl c2NyaWJlZCBiZWxvdzoNCj4gPj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+PiBORVc6 DQo+ID4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBJZiB0aGUgcmVxdWVzdCBpcyBjb25mbGljdGlu ZyB3aXRoIGFuIGV4aXN0aW5nDQo+ID4+Pj4+Pj4+Pj4+Pj4+PiBtaXRpZ2F0aW9uDQo+ID4+Pj4+ Pj4+IHJlcXVlc3QNCj4gPj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIGZyb20gYSBkaWZmZXJlbnQg RE9UUyBjbGllbnQsIGFuZCB0aGUgRE9UUw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gc2VydmVyIGRlY2lk ZXMgdG8NCj4gPj4+Pj4+Pj4+Pj4+IG1haW50YWluDQo+ID4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAg ICB0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUw0KPiA+Pj4+Pj4+ Pj4+Pj4+Pj4gc2VydmVyIHJldHVybnMNCj4gPj4+Pj4+Pj4gMi4wMQ0KPiA+Pj4+Pj4+PiBeXl5e DQo+ID4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAoQ3JlYXRlZCkgdG8gdGhlIHJlcXVlc3Rpbmcg RE9UUyBjbGllbnQuICBUaGUNCj4gPj4+PiByZXNwb25zZV4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+ICAg ICAgICAgIF5eXl5eXl5eDQo+ID4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBpbmNsdWRlcyBlbm91 Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQNCj4gPj4+Pj4+Pj4+Pj4+Pj4+IHRvIHJl Y29nbml6ZSB0aGUNCj4gPj4+Pj4+Pj4+Pj4+IHNvdXJjZQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gICAg ICAgICAgb2YgdGhlIGNvbmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxvdzoNCj4gPj4+Pj4+Pj4+Pj4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+PiBDaGVlcnMsDQo+ID4+Pj4+Pj4+Pj4+Pj4+PiBNZWQNCj4g Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2lu ZS0tLS0tIERlwqA6IERvdHMNCj4gPj4+Pj4+Pj4+Pj4+Pj4+PiBbbWFpbHRvOmRvdHMtYm91bmNl c0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+IG1vaGFtZWQuYm91 Y2FkYWlyQG9yYW5nZS5jb20gRW52b3nDqcKgOiBsdW5kaSA3IG1haQ0KPiAyMDE4DQo+ID4+Pj4+ Pj4gMDg6MzgNCj4gPj4+Pj4+Pj4+Pj4+Pj4+PiDDgMKgOiBrYW5hbWUgbmlzaGl6dWthOyBkb3Rz QGlldGYub3JnIE9iamV0wqA6IFJlOiBbRG90c10NCj4gPj4+Pj4+Pj4+Pj4+Pj4+PiBJLUQNCj4g Pj4+Pj4+Pj4+Pj4+Pj4+PiBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0x OS50eHQNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+IFJlLSwNCj4gPj4+ Pj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+IEFncmVlIHRoYXQgdGhlIGNvZGVzIGFy ZSBub3QgdGhlIHNhbWUsIGJ1dCBhbHRlcm5hdGl2ZXMNCj4gPj4+Pj4+Pj4+Pj4+Pj4+PiBvbmVz IGFzDQo+ID4+Pj4+Pj4+Pj4+PiBzdW1tYXJpemVkDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4gaGVyZToN Cj4gPj4+Pj4NCj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9kb3RzL2hB M01MS2xrWEZpbXBBbjVLU1lUYXlhVmtqQS4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+PiBDaGVlcnMsDQo+ ID4+Pj4+Pj4+Pj4+Pj4+Pj4gTWVkDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+ Pj4+Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tIERlwqA6IGthbmFtZSBuaXNoaXp1a2EN Cj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gW21haWx0bzprYW5hbWVAbnR0djYuanBdIEVudm95w6nCoDoN Cj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gbHVuZGkgNyBtYWkgMjAxOCAwODoyMCDDgMKgOiBCT1VDQURB SVIgTW9oYW1lZA0KPiBJTVQvT0xOOw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiBkb3RzQGlldGYub3Jn IE9iamV0wqA6IFJlOiBbRG90c10gSS1EIEFjdGlvbjoNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gZHJh ZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLQ0KPiA+Pj4+Pj4+PiAxOS50eHQNCj4gPj4+Pj4+ Pj4+Pj4+Pj4+Pj4gSGkgTWVkLA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+ Pj4+PiBJJ3ZlIHJlYWQgdGhlIHRocmVhZC4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gYW5kIHRoZSBj b2RlICc4JyBvZiB0aGUgdGhyZWFkIGlzIGRpZmZlcmVudCBmcm9tIHRoZQ0KPiA+Pj4+Pj4+Pj4+ Pj4+Pj4+PiBjb2RlICc4JyBvZg0KPiA+Pj4+Pj4+PiB0aGUNCj4gPj4+Pj4+Pj4+Pj4+Pj4+PiBj dXJyZW50DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IGRyYWZ0Lg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0K PiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiB0aGV5J2QgYmVlbiBkaXNjdXNzaW5nIHRoZSA3LDggYW5kIDkg YmFzZWQgb24gdGhpcw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiBkZWZpbml0aW9uLA0KPiA+Pj4+Pj4+ PiByaWdodD8NCj4gPj4+Pj4+Pj4+PiBodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gv bXNnL2RvdHMvN3psanpOOG55Y1pYN0U3Z2hnDQo+ID4+Pj4+Pj4+Pj4gazENCj4gPj4+Pj4+Pj4+ PiB1eDMyDQo+ID4+Pj4+Pj4+Pj4gTWtNDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ID09DQo+ID4+Pj4+ Pj4+Pj4+Pj4+Pj4+IDcgfCBET1RTIFNlcnZlciBoYXMgZGV0ZWN0ZWQgY29uZmxpY3RpbmcgbWl0 aWdhdGlvbg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiByZXF1ZXN0cyBmcm9tDQo+ID4+Pj4+Pj4+Pj4+ Pj4+IGRpZmZlcmVudA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiBET1RTIGNsaWVudHMuwqAgVGhpcyBt aXRpZ2F0aW9uIHJlcXVlc3QgaXMgY3VycmVudGx5DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IGluYWN0 aXZlIHVudGlsDQo+ID4+Pj4+Pj4+Pj4gdGhlDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IGNvbmZsaWN0 cyBhcmUgcmVzb2x2ZWQuIEFub3RoZXIgbWl0aWdhdGlvbiByZXF1ZXN0IGlzDQo+ID4+Pj4gYWN0 aXZlLg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiA4IHwgRE9UUyBTZXJ2ZXIgaGFzIGRldGVjdGVkIGNv bmZsaWN0aW5nIG1pdGlnYXRpb24NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gcmVxdWVzdHMgZnJvbQ0K PiA+Pj4+Pj4+Pj4+Pj4+PiBkaWZmZXJlbnQNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gRE9UUyBjbGll bnRzLsKgIFRoaXMgbWl0aWdhdGlvbiByZXF1ZXN0IGlzIGN1cnJlbnRseSBhY3RpdmUuDQo+ID4+ Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IDkgfCBET1RTIFNlcnZlciBoYXMg ZGV0ZWN0ZWQgY29uZmxpY3RpbmcgbWl0aWdhdGlvbg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiByZXF1 ZXN0cyBmcm9tDQo+ID4+Pj4+Pj4+Pj4+Pj4+IGRpZmZlcmVudA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+ PiBET1RTIGNsaWVudHMuwqAgQWxsIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVzdHMgYXJl DQo+ID4+Pj4+PiBpbmFjdGl2ZS4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gPT0NCj4gPj4+Pj4+Pj4+ Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gS2FuYW1lDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IE9uIDIwMTgvMDUvMDcg MTU6MTIsDQo+IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gPj4+Pj4gd3JvdGU6DQo+ ID4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBIaSBLYW5hbWUsDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gUGxlYXNlIGNoZWNrDQo+ID4+Pj4+Pj4+Pj4gaHR0cHM6Ly9tYWls YXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9kb3RzL3pfY1pSOV91MjczSHpDOW8wSQ0KPiA+Pj4+ Pj4+Pj4+IHk5DQo+ID4+Pj4+Pj4+Pj4gRmVRWg0KPiA+Pj4+Pj4+Pj4+IDBKbw0KPiA+Pj4+Pj4+ Pj4+Pj4+Pj4+IGFib3V0DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IHRoZSByYXRpb25hbGUgZm9yIGFs bG93aW5nIHRvIHJldHVybiBjb2RlICc4JyBldmVuIGluDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IGEN Cj4gPj4+Pj4+Pj4gbm90aWZpY2F0aW9uDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4gbWVzc2FnZS4NCj4g Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gVGhlIGludGVudCB3YXMgdG8gaGF2ZSBjb2RlICc4JyBhcyBhIHRy YW5zaXRpb24gc3RhdGUuDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBDaGVlcnMsDQo+ID4+Pj4+Pj4+ Pj4+Pj4+Pj4+PiBNZWQNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tIERlwqA6IGthbmFtZSBuaXNoaXp1a2ENCj4g Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBbbWFpbHRvOmthbmFtZUBudHR2Ni5qcF0gRW52b3nDqcKgOiBt ZXJjcmVkaSAyIG1haQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IDIwMTgNCj4gPj4+Pj4+Pj4+Pj4+ Pj4+Pj4+PiAwMjo0OSDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOw0KPiBkb3RzQGll dGYub3JnDQo+ID4+Pj4+Pj4gT2JqZXTCoDoNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBSZTogW0Rv dHNdIEktRCBBY3Rpb246DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gZHJhZnQtaWV0Zi1kb3RzLXNp Z25hbC1jaGFubmVsLQ0KPiA+Pj4+Pj4+Pj4+IDE5LnR4dA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ IEhpLA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gSSdkIGxp a2UgdG8gYXNrIG9uZSBjbGFyaWZpY2F0aW9uIHF1ZXN0aW9uIGFib3V0DQo+ID4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4gc3RhdHVzIGNvZGUNCj4gPj4+Pj4+IDg6DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4g ICAgICAgICDCoMKgIG/CoCBBIG5vdGlmaWNhdGlvbiBtZXNzYWdlIHdpdGggJ3N0YXR1cycNCj4g Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBjb2RlIHNldCB0byAnOA0KPiA+Pj4+Pj4+Pj4+IChBdHRhY2sN Cj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgIMKgwqDCoMKgwqAgbWl0aWdhdGlvbiBpcyBy ZWplY3RlZCknIGFuZA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICdjb25mbGljdC0NCj4gPj4+PiBz dGF0dXMnDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gc2V0IHRvDQo+ID4+Pj4+Pj4+Pj4gJzEnDQo+ ID4+Pj4+Pj4+Pj4+PiBpcw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+IHNlbnQNCj4gPj4+Pj4+Pj4+Pj4+ Pj4+Pj4+PiAgICAgICAgIMKgwqDCoMKgwqAgdG8gYSBET1RTIGNsaWVudCB0byBpbmRpY2F0ZSB0 aGF0IHRoaXMNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBtaXRpZ2F0aW9uDQo+ID4+Pj4+Pj4+Pj4g cmVxdWVzdA0KPiA+Pj4+Pj4+Pj4+Pj4gaXMNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAg IMKgwqDCoMKgwqAgcmVqZWN0ZWQgYmVjYXVzZSBhIGNvbmZsaWN0IGlzIGRldGVjdGVkLg0KPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gSWYgYSBtaXRpZ2F0aW9u IHJlcXVlc3QgaXMgcmVqZWN0ZWQgZHVlIHRvIGENCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBjb25m bGljdCwgaXQgaXMNCj4gPj4+Pj4+Pj4+PiByZWplY3RlZA0KPiA+Pj4+Pj4+Pj4+Pj4+PiBhdA0K PiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFBVVCg0LjA5KENvbmZsaWN0KSksIHNvIG5vIHJlc291cmNl IHdpbGwgYmUgY3JlYXRlZC4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBTbyBpdCBsb29rcyB0aGVy ZSBpcyBubyBjaGFuY2UgdG8gcmV0dXJuICc4IChBdHRhY2sNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+ PiBtaXRpZ2F0aW9uIGlzDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IHJlamVjdGVkKScuDQo+ID4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4gdGhhbmtzLA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IEthbmFtZQ0KPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gT24gMjAxOC8wNC8xMCAy Mjo0NywNCj4gbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbQ0KPiA+Pj4+Pj4+IHdyb3RlOg0K PiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBSZS0sDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFRoaXMgdmVyc2lvbiBhZGRyZXNzZXMgdGhlIGNvbW1lbnRzIHJh aXNlZCBkdXJpbmcNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gdGhlIFdHTEMsIGluDQo+ID4+Pj4+ Pj4+Pj4+Pj4+Pj4+IHBhcnRpY3VsYXI6DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IC0gKENsYXJp ZmljYXRpb24pIEluZGljYXRlIHRoYXQgb25seSBvbmUgaG9wLWxpbWl0DQo+ID4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+IGlzIGluY2x1ZGVkDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IC0gU3BlY2lmeSB0 aGUgbG9vcCBkaWFnbm9zdGljIHBheWxvYWQNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gLSAoQ2xh cmlmaWNhdGlvbikgSW5kaWNhdGUgZXhwbGljaXRseSB0aGF0IEdFVA0KPiA+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4+PiBtZXNzYWdlcyB3aXRoDQo+ID4+Pj4+Pj4+ICdzaWQnDQo+ID4+Pj4+Pj4+Pj4+PiBh cmUNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBhbGxvd2VkDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ IC0gVXBkYXRlIHRoZSByZWRpcmVjdCBiZWhhdmlvci4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4N Cj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gQ2hlZXJzLA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBN ZWQNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IC0tLS0t TWVzc2FnZSBkJ29yaWdpbmUtLS0tLSBEZcKgOiBEb3RzDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ PiBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZQ0KPiA+Pj4+Pj4+ PiBpbnRlcm5ldC0NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IGRyYWZ0c0BpZXRmLm9yZw0KPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gRW52b3nDqcKgOiBtYXJkaSAxMCBhdnJpbCAyMDE4IDE1OjQw IMOAwqA6DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBpLWQtYW5ub3VuY2VAaWV0Zi5vcmcgQ2PC oDogZG90c0BpZXRmLm9yZyBPYmpldMKgOg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gW0RvdHNd IEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0NCj4gPj4+Pj4+Pj4g MTkudHh0DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBBIE5ldyBJbnRlcm5ldC1EcmFmdCBpcyBh dmFpbGFibGUgZnJvbSB0aGUgb24tbGluZQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gSW50ZXJu ZXQtDQo+ID4+Pj4+Pj4+Pj4gRHJhZnRzDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBkaXJlY3Rv cmllcy4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFRoaXMgZHJhZnQgaXMgYSB3b3JrIGl0ZW0g b2YgdGhlIEREb1MgT3BlbiBUaHJlYXQNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFNpZ25hbGlu ZyBXRw0KPiA+Pj4+Pj4+PiBvZg0KPiA+Pj4+Pj4+Pj4+Pj4gdGhlDQo+ID4+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4gSUVURi4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgICBUaXRs ZSAgICAgICAgICAgOiBEaXN0cmlidXRlZCBEZW5pYWwtb2YtDQo+ID4+Pj4+PiBTZXJ2aWNlDQo+ ID4+Pj4+Pj4+IE9wZW4NCj4gPj4+Pj4+Pj4+Pj4+Pj4gVGhyZWF0DQo+ID4+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4gU2lnbmFsaW5nDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAoRE9UUykgU2lnbmFsIENo YW5uZWwgU3BlY2lmaWNhdGlvbg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAg ICAgIEF1dGhvcnMgICAgICAgICA6IFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE1vaGFtZWQgQm91Y2Fk YWlyDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgUHJhc2hhbnRoIFBhdGlsDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgQW5kcmV3IE1vcnRlbnNlbg0KPiA+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE5payBUZWFndWUNCj4g Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IAlGaWxlbmFtZSAgICAgICAgOiBkcmFmdC1pZXRmLWRvdHMt c2lnbmFsLWNoYW5uZWwtDQo+ID4+Pj4gMTkudHh0DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAJ UGFnZXMgICAgICAgICAgIDogODYNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IAlEYXRlICAgICAg ICAgICAgOiAyMDE4LTA0LTEwDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4gQWJzdHJhY3Q6DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAg IFRoaXMgZG9jdW1lbnQgc3BlY2lmaWVzIHRoZSBET1RTIHNpZ25hbA0KPiA+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4gY2hhbm5lbCwgYQ0KPiA+Pj4+Pj4+Pj4+IHByb3RvY29sDQo+ID4+Pj4+Pj4+Pj4+ PiBmb3INCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgc2lnbmFsaW5nIHRoZSBu ZWVkIGZvciBwcm90ZWN0aW9uDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBhZ2FpbnN0IERpc3Ry aWJ1dGVkDQo+ID4+Pj4+Pj4+Pj4+PiBEZW5pYWwtDQo+ID4+Pj4+Pj4+Pj4+Pj4+IG9mLQ0KPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICBTZXJ2aWNlIChERG9TKSBhdHRhY2tzIHRv IGEgc2VydmVyDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBjYXBhYmxlIG9mIGVuYWJsaW5nDQo+ ID4+Pj4+Pj4+Pj4+PiBuZXR3b3JrDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAg IHRyYWZmaWMgbWl0aWdhdGlvbiBvbiBiZWhhbGYgb2YgdGhlDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+PiByZXF1ZXN0aW5nDQo+ID4+Pj4+PiBjbGllbnQuDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ PiAgICAgICAgICAgIEEgY29tcGFuaW9uIGRvY3VtZW50IGRlZmluZXMgdGhlIERPVFMNCj4gPj4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IGRhdGEgY2hhbm5lbCwgYQ0KPiA+Pj4+Pj4+Pj4+Pj4gc2VwYXJh dGUNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgcmVsaWFibGUgY29tbXVuaWNh dGlvbiBsYXllciBmb3IgRE9UUw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gbWFuYWdlbWVudCBh bmQNCj4gPj4+Pj4+Pj4+Pj4+Pj4+PiBjb25maWd1cmF0aW9uDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+PiAgICAgICAgICAgIHB1cnBvc2VzLg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IEVkaXRvcmlhbCBOb3RlIChUbyBiZSByZW1vdmVkIGJ5IFJGQyBF ZGl0b3IpDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4g ICAgICAgICAgICBQbGVhc2UgdXBkYXRlIHRoZXNlIHN0YXRlbWVudHMgd2l0aCB0aGUNCj4gPj4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFJGQyBudW1iZXIgdG8NCj4gPj4+Pj4+Pj4gYmUNCj4gPj4+Pj4+ Pj4+Pj4+Pj4gYXNzaWduZWQNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gdG8NCj4gPj4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+ICAgICAgICAgICAgdGhpcyBkb2N1bWVudDoNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgIG8gICJUaGlzIHZlcnNpb24g b2YgdGhpcyBZQU5HIG1vZHVsZSBpcw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gcGFydCBvZiBS RkMNCj4gPj4+Pj4+Pj4+PiBYWFhYOyINCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAg ICAgbyAgIlJGQyBYWFhYOiBEaXN0cmlidXRlZA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gRGVu aWFsLW9mLVNlcnZpY2UgT3Blbg0KPiA+Pj4+Pj4+PiBUaHJlYXQNCj4gPj4+Pj4+Pj4+Pj4+Pj4g U2lnbmFsaW5nDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgIChET1RTKSBT aWduYWwgQ2hhbm5lbA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gU3BlY2lmaWNhdGlvbiI7DQo+ ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAg ICBvICAifCBbUkZDWFhYWF0gfCINCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgIG8gIHJlZmVyZW5jZTogUkZDIFhYWFgNCj4gPj4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgIFBsZWFz ZSB1cGRhdGUgVEJEIHN0YXRlbWVudHMgd2l0aCB0aGUNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ IHBvcnQgbnVtYmVyIHRvDQo+ID4+Pj4+Pj4+IGJlDQo+ID4+Pj4+Pj4+Pj4+Pj4+IGFzc2lnbmVk DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4gdG8NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAg ICAgRE9UUyBTaWduYWwgQ2hhbm5lbCBQcm90b2NvbC4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgIEFsc28sIHBsZWFzZSB1cGRhdGUg dGhlICJyZXZpc2lvbiIgZGF0ZQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gb2YgdGhlIFlBTkcN Cj4gPj4+Pj4+Pj4+PiBtb2R1bGUuDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBUaGUgSUVURiBk YXRhdHJhY2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczoNCj4gPj4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtZG90 cy1zDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBpZw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4g bmFsLQ0KPiA+Pj4+Pj4+PiBjaGFubmVsLw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gVGhlcmUg YXJlIGFsc28gaHRtbGl6ZWQgdmVyc2lvbnMgYXZhaWxhYmxlIGF0Og0KPiA+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWdu YWwNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IC1jDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBo YW5uDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBlbC0xOQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1pZXRmLWQNCj4g Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IG90DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBzLXNpDQo+ ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBnbmFsLQ0KPiA+Pj4+Pj4+Pj4+Pj4gY2hhbm5lbC0NCj4g Pj4+Pj4+Pj4+Pj4+Pj4+PiAxOQ0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gQSBkaWZmIGZyb20g dGhlIHByZXZpb3VzIHZlcnNpb24gaXMgYXZhaWxhYmxlIGF0Og0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtZG90cy0N Cj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IHNpDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBnbmFs DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAtDQo+ID4+Pj4+Pj4+IGNoYW5uZWwtDQo+ID4+Pj4+ Pj4+Pj4gMTkNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5 IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gZnJvbSB0 aGUgdGltZQ0KPiA+Pj4+Pj4+PiBvZg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IHN1Ym1pc3Npb24N Cj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IHVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBk aWZmIGFyZSBhdmFpbGFibGUNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IGF0DQo+ID4+Pj4+Pj4+ Pj4+PiB0b29scy5pZXRmLm9yZy4NCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IEludGVybmV0LURy YWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUgYnkgYW5vbnltb3VzDQo+IEZUUCBhdDoNCj4gPj4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4+IGZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvDQo+ID4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPj4+Pj4gX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBE b3RzQGlldGYub3JnDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gRG90c0Bp ZXRmLm9yZw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL2RvdHMNCj4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+IF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBE b3RzIG1haWxpbmcgbGlzdA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9k b3RzDQo+ID4+Pj4+Pj4+Pj4+Pj4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCj4gPj4+Pj4+Pj4+Pj4+Pj4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+Pj4+Pj4+Pj4+PiBodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPj4+Pj4+Pj4+Pj4+Pj4+IF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+Pj4+Pj4+ Pj4+Pj4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gRG90c0BpZXRmLm9y Zw0KPiA+Pj4+Pj4+Pj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9kb3RzDQo+ID4+Pj4+Pj4+Pj4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCj4gPj4+Pj4+Pj4+Pj4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+Pj4+ Pj4+Pj4+Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPj4+Pj4+Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPj4+Pj4+Pj4+Pj4gX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+Pj4+Pj4+Pj4gRG90cyBtYWls aW5nIGxpc3QNCj4gPj4+Pj4+Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+Pj4+Pj4+Pj4+PiBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPj4+Pj4+PiBfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+Pj4+Pj4+IERvdHMg bWFpbGluZyBsaXN0DQo+ID4+Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+Pj4+Pj4+IGh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+Pj4gX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4+IERvdHMgbWFpbGluZyBsaXN0 DQo+ID4+PiBEb3RzQGlldGYub3JnDQo+ID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2RvdHMNCj4gPj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCj4gPj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPj4gRG90c0BpZXRmLm9yZw0K PiA+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPiBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+IERvdHMgbWFp bGluZyBsaXN0DQo+ID4gRG90c0BpZXRmLm9yZw0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vZG90cw0KDQo= From nobody Fri May 18 00:14:57 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6ACBE127369 for ; Fri, 18 May 2018 00:14:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.31 X-Spam-Level: X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nlxGp6W3ZJ3r for ; Fri, 18 May 2018 00:14:53 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4518127275 for ; Fri, 18 May 2018 00:14:52 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1526627694; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:MIME-Version:X-MS-Office365-Filtering-Correlation-Id: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=g koP1jUr0efjNp1jw+CCJKGxH22Lx0Zpcb+d3y3EyG s=; b=Et7c+3H+mZH6yWFtvlDA+khrWccTH6oYc4PK7nG+lIjw KonR1KdGhqhkxCnhr1+Rj0PKAA1FZ149O6sss8wCzJvUn+xrWT AMDu4a6KK2SAhmkDh4gOQzcpg8t7R8vAXQAcHzuXlndFybF69O vdwXPPsW7dehNIB/m0N33J2KB5U= Received: from DNVEXAPP1N06.corpzone.internalzone.com (unknown [10.44.48.90]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 291a_8551_5b909d23_4fd5_408c_97f8_8dd02f41fc2b; Fri, 18 May 2018 02:14:54 -0500 Received: from DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 May 2018 01:13:32 -0600 Received: from DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) by DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 May 2018 01:13:32 -0600 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Fri, 18 May 2018 01:13:32 -0600 Received: from NAM01-BY2-obe.outbound.protection.outlook.com (10.44.176.243) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 May 2018 01:13:31 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB1508.namprd16.prod.outlook.com (10.172.208.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.776.11; Fri, 18 May 2018 07:13:30 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8%9]) with mapi id 15.20.0776.010; Fri, 18 May 2018 07:13:30 +0000 From: "Konda, Tirumaleswar Reddy" To: Jon Shallow , "mohamed.boucadair@orange.com" , "dots@ietf.org" Thread-Topic: [Dots] Data Channel Fragment handling nits Thread-Index: AdPsStPjVXG7Yx+4T/K9n2ITS/OGmQAAw5HAAAGFJYAAAL69gAABMl6AAIb6xmA= Date: Fri, 18 May 2018 07:13:29 +0000 Message-ID: References: <017601d3ec4a$d50620c0$7f126240$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1B46E@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <01a401d3ec53$f6ff6610$e4fe3230$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1B505@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <01cc01d3ec5b$bbac0bb0$33042310$@jpshallow.com> In-Reply-To: <01cc01d3ec5b$bbac0bb0$33042310$@jpshallow.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB1508; 7:jL4DaqvMhLjFpQ+0D7ZR53Ah9nUpxdXf0HM8tBN/Y44DUY0fyiRvJO3fQLyd01p+ZxJ0K79pOQ/O/C3bIvkUjscbWJb9ZYKZOERtNRm6n1gh8AGqJXrTqbaVTTL503XJx9Qox6fsqOvXgEfA+6Legm2UAiGWumVazJns2JT01Mq+KcIK4ELQHJZhkVmYJzY2CtgzX6ndWERQejVGpn++6oXbfPxWCtNm2ldcGmr7LOoJaFlqv6b7SGqEET+5TeeA x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB1508; x-ms-traffictypediagnostic: BN6PR16MB1508: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(158342451672863)(18271650672692)(21748063052155); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(10201501046)(3231254)(944501410)(52105095)(93006095)(93001095)(149027)(150027)(6041310)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(20161123564045)(6072148)(201708071742011)(7699016); SRVR:BN6PR16MB1508; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB1508; x-forefront-prvs: 0676F530A9 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(376002)(396003)(39860400002)(366004)(346002)(189003)(199004)(32952001)(316002)(102836004)(74316002)(68736007)(186003)(76176011)(6506007)(53936002)(53546011)(6246003)(93886005)(6306002)(54896002)(790700001)(3846002)(55016002)(6116002)(2900100001)(72206003)(9686003)(236005)(7696005)(110136005)(2906002)(81156014)(8676002)(8936002)(7736002)(26005)(5660300001)(99286004)(81166006)(2201001)(486006)(6436002)(3660700001)(80792005)(5890100001)(2501003)(229853002)(11346002)(19609705001)(97736004)(66066001)(446003)(25786009)(33656002)(105586002)(3280700002)(86362001)(478600001)(106356001)(5250100002)(14454004)(476003)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB1508; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: sT8QGp+j5aIgNyjXvznT85WCqaJcx+Hi04aqLjiS1mZEKJAOBCX6qoukC7LzOdwODe/FlJF2xdtd6yRasvmjwbP/ez62+oQL/08QXChNDDFhC5Pq9KS73gzshe8RGooX0OxJFaRv3LQXC/CCaoWmyBlkv/Jj/Vh/FW60J7neFatIYeKHgVcZng1zQX8OhOQOUuZotT2xpBiN4rnr3SH8xA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BN6PR16MB14255643FCDD18BBCFC78391EA900BN6PR16MB1425namp_" MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: e29e15de-bbaf-4530-b215-08d5bc8edbb9 X-MS-Exchange-CrossTenant-Network-Message-Id: e29e15de-bbaf-4530-b215-08d5bc8edbb9 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 May 2018 07:13:29.9769 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB1508 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6288> : inlines <6643> : streams <1787071> : uri <2643202> Archived-At: Subject: Re: [Dots] Data Channel Fragment handling nits X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 May 2018 07:14:55 -0000 --_000_BN6PR16MB14255643FCDD18BBCFC78391EA900BN6PR16MB1425namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RnJvbTogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEpv biBTaGFsbG93DQpTZW50OiBUdWVzZGF5LCBNYXkgMTUsIDIwMTggODoxOCBQTQ0KVG86IG1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb207IGRvdHNAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbRG90 c10gRGF0YSBDaGFubmVsIEZyYWdtZW50IGhhbmRsaW5nIG5pdHMNCg0KDQpDQVVUSU9OOiBFeHRl cm5hbCBlbWFpbC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4gYXR0YWNobWVudHMgdW5sZXNz IHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLg0K DQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpIaSB0aGVyZQ0KDQpTZWUgaW5s aW5lIFtKb24xXQ0KDQpSZWdhcmRzDQoNCkpvbg0KDQpEZSA6IERvdHMgW21haWx0bzpkb3RzLWJv dW5jZXNAaWV0Zi5vcmddIERlIGxhIHBhcnQgZGUgSm9uIFNoYWxsb3cNCkVudm95w6kgOiBtYXJk aSAxNSBtYWkgMjAxOCAxNDo0Nw0Kw4AgOiBkb3RzQGlldGYub3JnPG1haWx0bzpkb3RzQGlldGYu b3JnPg0KT2JqZXQgOiBbRG90c10gRGF0YSBDaGFubmVsIEZyYWdtZW50IGhhbmRsaW5nIG5pdHMN Cg0KSGkgdGhlcmUsDQoNCkkgYW0gYmVnaW5uaW5nIHRvIHdpdGggdGhhdCBJIGhhZCBub3QgcmFp c2VkIGhvdyB0byBoYW5kbGUgZnJhZ21lbnRzLCBidXQgaXQgd2FzIGtleWVkIG9mZiBteSBuYWl2 ZSBpbnRlcnByZXRhdGlvbiBvZiB0aGUgaGFuZGxpbmcgb2YgSVB2NiBwcm90b2NvbHMgYnkgbmV0 bW9kLWFjbCENCg0KTWFraW5nIHRoaXMgY2hhbmdlcyBoYXMgcmFpc2VkIHNvbWUgaW5jb25zaXN0 ZW5jaWVzIGluIHRoZSBkcmFmdCBkYXRhIGNoYW5uZWwgZG9jdW1lbnQuDQpTZWFyY2hpbmcgb24g ZnJhZ21lbnQgcmV2ZWFscyB2NC1mcmFnbWVudCBhbmQgdjYtZnJhZ21lbnQgd2hpY2ggYXJlIG5v IGxvbmdlciB1c2VkLg0KDQoNCltNZWRdIEhtbS4gVGhlc2UgYXJlIHJlbGF0ZWQgdG8gdGhlIGNh cGFiaWxpdGllcyBvZiBhIERPVFMgc2VydmVyIHRvIGVuZm9yY2UgZnJhZ21lbnQtYmFzZWQgZmls dGVyaW5nLiBTZWUgRmlndXJlIDIzIGZvciBhbiBleGFtcGxlLg0KDQpbSm9uXSBJIGFncmVlIOKA kyBIbW0uDQoNCltNZWRdIENvb2wuDQoNCg0KDQogIEhvd2V2ZXIgdGhlIHY0LWZyYWdtZW50IGlz IGFsbHVkaW5nIHRvIOKAnGZsYWdz4oCdIGJlaW5nIHN1cHBvcnRlZCBhbmQgdjYtZnJhZ21lbnQg dG8g4oCcZnJhZ21lbnTigJ0gYmVpbmcgc3VwcG9ydGVkIOKAkyBub3QgdGhhdCBpbnR1aXRpdmUh ICBUaGV5IHJlYWxseSBzaG91bGQgYmUgYW4gaWRlbnRpY2FsIG5hbWUgbWF0Y2guICBUaGVyZSBp cyBhIHBhcnQgb2YgbWUgdGhhdCB3b3VsZCBsaWtlIHRvIGdvIGJhY2sgdG8gYXMgaXQgd2FzIG5v dyB0aGF0IHdlIGtub3cgdGhhdCB3ZSBoYXZlIHRvIHN1cHBvcnQg4oCcZnJhZ21lbnTigJ0gZm9y IElQdjYgbm8gbWF0dGVyIHdoYXQ7IHVubGVzcyBuZXRtb2QtYWNsIGNvbWVzIHVwIHdpdGggc29t ZXRoaW5nIHNlbnNpYmxlICh1bmxpa2VseSkuICBJZiB3ZSBkbyBnbyBiYWNrLCB0aGVuIGRvIHdl IGFjdHVhbGx5IG5lZWQgYm90aCB2NC1mcmFnbWVudCBhbmQgdjYtZnJhZ21lbnQgYW5kIGp1c3Qg dXNlIGZyYWdtZW50IChpbiB0aGUgc2FtZSB3YXkgdGhhdCBsZW5ndGggaXMgY29tbW9uKT8NCg0K DQoNCltNZWRdIFRoZSB1c2Ugb2YgdGhlIHNhbWUgbmFtZSBhcyBwYXJ0IG9mIHRoZSBjYXBhYmls aXRpZXMgaXMgcG9zc2libGUgb25seSBpZiB3ZSBoYXZlIGRpc3RpbmN0IGNvbnRhaW5lcnM7IGVh Y2ggZm9yIGFkZHJlc3MgZmFtaWx5IChJUHY0LCBJUHY2KS4gSW4gdGhlIGN1cnJlbnQgdmVyc2lv biwgd2UgdHJpZWQgdG8gaGF2ZSBzb21ldGhpbmcgY29tcGFjdDoNCg0KDQogICAgICAgImZyYWdt ZW50IjogWyJ2NC1mcmFnbWVudCIsICJ2Ni1mcmFnbWVudCJdDQoNCg0KV2UgbWF5IGluY2x1ZGUg YSBmcmFnbWVudCBsZWFmIGFzIHBhcnQgb2YgaXB2NCBhbmQgaXB2NiBjb250YWluZXJzIGFuZCB0 aGVuIHVzZSB0aGUgc2FtZSBuYW1lLiBUaGVuLCBpdCB3aWxsIGxvb2sgbGlrZToNCg0KDQogICAg ICAgImlwdjQiOiB7DQogICAgICAgICAibGVuZ3RoIjogInRydWUiLA0KICAgICAgICAgInByb3Rv Y29sIjogInRydWUiLA0KICAgICAgICAgImRlc3RpbmF0aW9uLXByZWZpeCI6ICJ0cnVlIiwNCiAg ICAgICAgICJzb3VyY2UtcHJlZml4IjogInRydWUiLA0KICAgICAgICAgImZyYWdtZW50IjogInRy dWUiDQogICAgICAgfSwNCiAgICAgICAiaXB2NiI6IHsNCiAgICAgICAgICJsZW5ndGgiOiAidHJ1 ZSIsDQogICAgICAgICAicHJvdG9jb2wiOiAidHJ1ZSIsDQogICAgICAgICAiZGVzdGluYXRpb24t cHJlZml4IjogInRydWUiLA0KICAgICAgICAgInNvdXJjZS1wcmVmaXgiOiAidHJ1ZSIsDQogICAg ICAgICAiZnJhZ21lbnQiOiAidHJ1ZSINCiAgICAgICB9LA0KDQoNCg0KW0pvbjFdIFdvcmtzIGZv ciBtZQ0KDQoNCg0KW1RSXSBMb29rcyBnb29kIHRvIG1lIC4NCg0KDQoNCkNoZWVycywNCg0KLVRp cnUNCg0KDQoNCn5Kb24xDQoNCn5Kb24NCg0KVGhlIFlBTkcgYml0cyB0eXBlIGNvbnZlcnNpb25z IHRvIEpTT04gaW4gdGhlIEFwcGVuZGl4IEEgYXJlIHdyb25nIOKAkyBJIGluaXRpYXRlZCB0aGlz IGVycm9yLg0KW01lZF0gR29vZCBjYXRjaC4gRml4ZWQuDQoNCiAgICAgICAgICAgICAgICAgICAg ICJmbGFncyI6IHsNCiAgICAgICAgICAgICAgICAgICAgICAgIm1vcmUiOiAxDQogICAgICAgICAg ICAgICAgICAgICB9DQpTaG91bGQgYmUNCiAgICAgICAgICAgICAgICAgICAgICJmbGFncyI6IHsg 4oCcbW9yZeKAnX0NCg0KQW5kDQogICAgICAgICAgICAgICAgICAgICAiZmxhZ3MiOiB7DQogICAg ICAgICAgICAgICAgICAgICAgICJtb3JlIjogMA0KICAgICAgICAgICAgICAgICAgICAgfQ0KU2hv dWxkIGJlDQogICAgICAgICAgICAgICAgICAgICAiZmxhZ3MiOiB7IOKAnOKAnX0NCg0KDQpSZWdh cmRzDQoNCkpvbg0K --_000_BN6PR16MB14255643FCDD18BBCFC78391EA900BN6PR16MB1425namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpEZW5nWGlhbjsNCglwYW5vc2UtMToy IDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30NCkBmb250LWZh Y2UNCgl7Zm9udC1mYW1pbHk6IlxARGVuZ1hpYW4iOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEg MSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3NlLTE6MiAx MSA2IDQgMyA1IDQgNCAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjsNCgltc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUzt9DQphOmxpbmssIHNwYW4u TXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0Zv bGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwcmUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1z by1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltYXJnaW46MGluOw0KCW1h cmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCnAuTXNv QWNldGF0ZSwgbGkuTXNvQWNldGF0ZSwgZGl2Lk1zb0FjZXRhdGUNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJCYWxsb29uIFRleHQgQ2hhciI7DQoJbWFyZ2luOjBp bjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjguMHB0Ow0KCWZvbnQtZmFt aWx5OiJUYWhvbWEiLHNhbnMtc2VyaWY7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0K c3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVmb3Jt YXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJI VE1MIFByZWZvcm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7DQoJbXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6RU4tVVM7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9y bWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCglt YXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsc2Fucy1zZXJpZjt9DQpzcGFuLkJhbGxvb25UZXh0Q2hhcg0KCXttc28tc3R5bGUtbmFtZToi QmFsbG9vbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUt bGluazoiQmFsbG9vbiBUZXh0IjsNCglmb250LWZhbWlseToiVGFob21hIixzYW5zLXNlcmlmOw0K CW1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCnNwYW4uUHJmb3JtYXRIVE1MQ2FyDQoJe21z by1zdHlsZS1uYW1lOiJQcsOpZm9ybWF0w6kgSFRNTCBDYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgltc28tc3R5bGUtbGluazoiUHLDqWZvcm1hdMOpIEhUTUwiOw0KCWZvbnQtZmFtaWx5 OiJDb3VyaWVyIE5ldyI7fQ0KcC5QcmZvcm1hdEhUTUwsIGxpLlByZm9ybWF0SFRNTCwgZGl2LlBy Zm9ybWF0SFRNTA0KCXttc28tc3R5bGUtbmFtZToiUHLDqWZvcm1hdMOpIEhUTUwiOw0KCW1zby1z dHlsZS1saW5rOiJQcsOpZm9ybWF0w6kgSFRNTCBDYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2lu LWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGli cmkiLHNhbnMtc2VyaWY7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0Kc3Bhbi5UZXh0 ZWRlYnVsbGVzQ2FyDQoJe21zby1zdHlsZS1uYW1lOiJUZXh0ZSBkZSBidWxsZXMgQ2FyIjsNCglt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IlRleHRlIGRlIGJ1bGxlcyI7 DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsc2Fucy1zZXJpZjsNCgltc28tZmFyZWFzdC1sYW5ndWFn ZTpFTi1VUzt9DQpwLlRleHRlZGVidWxsZXMsIGxpLlRleHRlZGVidWxsZXMsIGRpdi5UZXh0ZWRl YnVsbGVzDQoJe21zby1zdHlsZS1uYW1lOiJUZXh0ZSBkZSBidWxsZXMiOw0KCW1zby1zdHlsZS1s aW5rOiJUZXh0ZSBkZSBidWxsZXMgQ2FyIjsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206 LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCnNwYW4uRW1haWxTdHlsZTI2 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjcNCgl7bXNvLXN0 eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgljb2xvcjpi bGFjazsNCglmb250LXdlaWdodDpub3JtYWw7DQoJZm9udC1zdHlsZTpub3JtYWw7fQ0Kc3Bhbi5F bWFpbFN0eWxlMjgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyOQ0K CXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciOw0K CWNvbG9yOmJsYWNrOw0KCWZvbnQtd2VpZ2h0Om5vcm1hbDsNCglmb250LXN0eWxlOm5vcm1hbDt9 DQpzcGFuLkVtYWlsU3R5bGUzMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxT dHlsZTMzDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQN Cgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFn ZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGlu IDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0K LS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpl eHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0 ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6 ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0t Pg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUi Pg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxz cGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+RnJvbTo8L3NwYW4+PC9iPjxz cGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+IERvdHMgW21haWx0bzpkb3Rz LWJvdW5jZXNAaWV0Zi5vcmddDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPkpvbiBTaGFsbG93PGJyPg0K PGI+U2VudDo8L2I+IFR1ZXNkYXksIE1heSAxNSwgMjAxOCA4OjE4IFBNPGJyPg0KPGI+VG86PC9i PiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tOyBkb3RzQGlldGYub3JnPGJyPg0KPGI+U3Vi amVjdDo8L2I+IFJlOiBbRG90c10gRGF0YSBDaGFubmVsIEZyYWdtZW50IGhhbmRsaW5nIG5pdHM8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxkaXY+DQo8dGFibGUgY2xhc3M9Ik1zb05vcm1hbFRhYmxlIiBib3JkZXI9IjEi IGNlbGxzcGFjaW5nPSIzIiBjZWxscGFkZGluZz0iMCIgc3R5bGU9ImJhY2tncm91bmQ6I0YzRkYz Mztib3JkZXI6c29saWQgIzlCOUE4NyAxLjVwdCI+DQo8dGJvZHk+DQo8dHI+DQo8dGQgc3R5bGU9 ImJvcmRlcjpub25lO3BhZGRpbmc6Ljc1cHQgLjc1cHQgLjc1cHQgLjc1cHQiPg0KPHA+PHN0cm9u Zz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojOUI4QjNFIj5DQVVUSU9OPC9zcGFuPjwvc3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPjo8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6YmxhY2siPiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4NCiBh dHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBj b250ZW50IGlzIHNhZmUuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlh bCZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L3RkPg0KPC90cj4N CjwvdGJvZHk+DQo8L3RhYmxlPg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVy IiBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0ibXNv LWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPg0KPGhyIHNpemU9IjMiIHdpZHRoPSIxMDAlIiBhbGln bj0iY2VudGVyIj4NCjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5IaSB0aGVyZTxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBz dHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5T ZWUgaW5saW5lIFtKb24xXTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0Ii IHN0eWxlPSJjb2xvcjojMUY0OTdEIj5SZWdhcmRzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkpvbjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41 cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAw aW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9w OnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFu Z3VhZ2U6RlIiPkRlJm5ic3A7Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21z by1mYXJlYXN0LWxhbmd1YWdlOkZSIj4gRG90cyBbPGEgaHJlZj0ibWFpbHRvOmRvdHMtYm91bmNl c0BpZXRmLm9yZyI+bWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZzwvYT5dDQo8Yj5EZSBsYSBw YXJ0IGRlPC9iPiBKb24gU2hhbGxvdzxicj4NCjxiPkVudm95w6kmbmJzcDs6PC9iPiBtYXJkaSAx NSBtYWkgMjAxOCAxNDo0Nzxicj4NCjxiPsOAJm5ic3A7OjwvYj4gPGEgaHJlZj0ibWFpbHRvOmRv dHNAaWV0Zi5vcmciPmRvdHNAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+T2JqZXQmbmJzcDs6PC9iPiBb RG90c10gRGF0YSBDaGFubmVsIEZyYWdtZW50IGhhbmRsaW5nIG5pdHM8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RlIiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIj5IaSB0aGVyZSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkkgYW0gYmVnaW5u aW5nIHRvIHdpdGggdGhhdCBJIGhhZCBub3QgcmFpc2VkIGhvdyB0byBoYW5kbGUgZnJhZ21lbnRz LCBidXQgaXQgd2FzIGtleWVkIG9mZiBteSBuYWl2ZSBpbnRlcnByZXRhdGlvbiBvZiB0aGUgaGFu ZGxpbmcgb2YgSVB2NiBwcm90b2NvbHMgYnkgbmV0bW9kLWFjbCE8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0Ii Pk1ha2luZyB0aGlzIGNoYW5nZXMgaGFzIHJhaXNlZCBzb21lIGluY29uc2lzdGVuY2llcyBpbiB0 aGUgZHJhZnQgZGF0YSBjaGFubmVsIGRvY3VtZW50LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5TZWFyY2hpbmcgb24gZnJhZ21l bnQgcmV2ZWFscyB2NC1mcmFnbWVudCBhbmQgdjYtZnJhZ21lbnQgd2hpY2ggYXJlIG5vIGxvbmdl ciB1c2VkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHByZT48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2s7bXNvLWZhcmVhc3QtbGFu Z3VhZ2U6RlIiPltNZWRdIEhtbS4gVGhlc2UgYXJlIHJlbGF0ZWQgdG8gdGhlIGNhcGFiaWxpdGll cyBvZiBhIERPVFMgc2VydmVyIHRvIGVuZm9yY2UgZnJhZ21lbnQtYmFzZWQgZmlsdGVyaW5nLiBT ZWUgPC9zcGFuPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpGUiI+Rmln dXJlIDIzIGZvciBhbiBleGFtcGxlLiA8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNw YW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPltKb25dIEkg YWdyZWUg4oCTIEhtbS48L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrO21zby1mYXJlYXN0 LWxhbmd1YWdlOkZSIj48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6YmxhY2s7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPltNZWRdIENvb2wuPG86cD48L286cD48 L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrO21zby1mYXJlYXN0LWxhbmd1 YWdlOkZSIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9 ImNvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPiZuYnNwOyBIb3dldmVyIHRo ZSB2NC1mcmFnbWVudCBpcyBhbGx1ZGluZyB0byDigJxmbGFnc+KAnSBiZWluZyBzdXBwb3J0ZWQg YW5kIHY2LWZyYWdtZW50IHRvIOKAnGZyYWdtZW504oCdIGJlaW5nIHN1cHBvcnRlZCDigJMgbm90 IHRoYXQgaW50dWl0aXZlISZuYnNwOyBUaGV5IHJlYWxseSBzaG91bGQgYmUgYW4gaWRlbnRpY2Fs IG5hbWUgbWF0Y2guJm5ic3A7IFRoZXJlIGlzIGEgcGFydCBvZiBtZSB0aGF0IHdvdWxkIGxpa2Ug dG8gZ28gYmFjayB0byBhcyBpdCB3YXMgbm93IHRoYXQgd2Uga25vdyB0aGF0IHdlIGhhdmUgdG8g c3VwcG9ydCDigJxmcmFnbWVudOKAnSBmb3IgSVB2NiBubyBtYXR0ZXIgd2hhdDsgdW5sZXNzIG5l dG1vZC1hY2wgY29tZXMgdXAgd2l0aCBzb21ldGhpbmcgc2Vuc2libGUgKHVubGlrZWx5KS4mbmJz cDsgSWYgd2UgZG8gZ28gYmFjaywgdGhlbiBkbyB3ZSBhY3R1YWxseSBuZWVkIGJvdGggdjQtZnJh Z21lbnQgYW5kIHY2LWZyYWdtZW50IGFuZCBqdXN0IHVzZSBmcmFnbWVudCAoaW4gdGhlIHNhbWUg d2F5IHRoYXQgbGVuZ3RoIGlzIGNvbW1vbik/PG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJl PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O2NvbG9yOmJsYWNrO21zby1mYXJlYXN0LWxhbmd1YWdlOkZSIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2s7bXNvLWZhcmVh c3QtbGFuZ3VhZ2U6RlIiPltNZWRdIFRoZSB1c2Ugb2YgdGhlIHNhbWUgbmFtZSBhcyBwYXJ0IG9m IHRoZSBjYXBhYmlsaXRpZXMgaXMgcG9zc2libGUgb25seSBpZiB3ZSBoYXZlIGRpc3RpbmN0IGNv bnRhaW5lcnM7IGVhY2ggZm9yIGFkZHJlc3MgZmFtaWx5IChJUHY0LCBJUHY2KS4gSW4gdGhlIGN1 cnJlbnQgdmVyc2lvbiwgd2UgdHJpZWQgdG8gaGF2ZSBzb21ldGhpbmcgY29tcGFjdDogPG86cD48 L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrO21zby1mYXJlYXN0 LWxhbmd1YWdlOkZSIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O21zby1mYXJlYXN0LWxhbmd1YWdlOkZSIj4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7bXNvLWZh cmVhc3QtbGFuZ3VhZ2U6RlIiPiZxdW90O2ZyYWdtZW50JnF1b3Q7OiBbJnF1b3Q7djQtZnJhZ21l bnQmcXVvdDssICZxdW90O3Y2LWZyYWdtZW50JnF1b3Q7XTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Ozttc28tZmFyZWFzdC1sYW5n dWFnZTpGUiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHByZT48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Ozttc28t ZmFyZWFzdC1sYW5ndWFnZTpGUiI+V2UgbWF5IGluY2x1ZGUgYSBmcmFnbWVudCBsZWFmIGFzIHBh cnQgb2YgaXB2NCBhbmQgaXB2NiBjb250YWluZXJzIGFuZCB0aGVuIHVzZSB0aGUgc2FtZSBuYW1l LiBUaGVuLCBpdCB3aWxsIGxvb2sgbGlrZTogPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJl PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O21zby1mYXJlYXN0LWxhbmd1YWdlOkZSIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O21zby1mYXJlYXN0LWxhbmd1 YWdlOkZSIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7aXB2NCZx dW90OzogezxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7O21zby1mYXJlYXN0LWxhbmd1YWdlOkZSIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7bGVuZ3RoJnF1b3Q7OiAmcXVvdDt0cnVlJnF1b3Q7 LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O21z by1mYXJlYXN0LWxhbmd1YWdlOkZSIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgJnF1b3Q7cHJvdG9jb2wmcXVvdDs6ICZxdW90O3RydWUmcXVvdDssPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7bXNvLWZh cmVhc3QtbGFuZ3VhZ2U6RlIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyAmcXVvdDtkZXN0aW5hdGlvbi1wcmVmaXgmcXVvdDs6ICZxdW90O3RydWUmcXVv dDssPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtzb3VyY2UtcHJlZml4JnF1b3Q7OiAmcXVvdDt0cnVlJnF1 b3Q7LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O21zby1mYXJlYXN0LWxhbmd1YWdlOkZSIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7ZnJhZ21lbnQmcXVvdDs6ICZxdW90O3RydWUmcXVvdDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Ozttc28t ZmFyZWFzdC1sYW5ndWFnZTpGUiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IH0sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyAmcXVvdDtpcHY2JnF1b3Q7OiB7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDs7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtsZW5ndGgmcXVvdDs6 ICZxdW90O3RydWUmcXVvdDssPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtwcm90b2NvbCZxdW90OzogJnF1 b3Q7dHJ1ZSZxdW90Oyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpGUiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O2Rlc3RpbmF0aW9uLXByZWZpeCZxdW90 OzogJnF1b3Q7dHJ1ZSZxdW90Oyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpGUiI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O3NvdXJjZS1wcmVmaXgmcXVv dDs6ICZxdW90O3RydWUmcXVvdDssPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDs7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtmcmFnbWVudCZxdW90Ozog JnF1b3Q7dHJ1ZSZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7O21zby1mYXJlYXN0LWxhbmd1YWdlOkZSIj4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cHJlPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O21zby1mYXJlYXN0LWxhbmd1YWdlOkZSIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3ByZT4N CjxwcmU+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpGUiI+W0pv bjFdIFdvcmtzIGZvciBtZTxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBzdHls ZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcHJl Pg0KPHByZT48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPltUUl0gTG9va3Mg Z29vZCB0byBtZSAuPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJt c28tZmFyZWFzdC1sYW5ndWFnZTpGUiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wcmU+DQo8 cHJlPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpGUiI+Q2hlZXJzLDxvOnA+PC9v OnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6 RlIiPi1UaXJ1PG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJtc28t ZmFyZWFzdC1sYW5ndWFnZTpGUiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wcmU+DQo8cHJl PjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOkZSIj5+Sm9u MTxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3 RDttc28tZmFyZWFzdC1sYW5ndWFnZTpGUiI+fkpvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5UaGUg WUFORyBiaXRzIHR5cGUgY29udmVyc2lvbnMgdG8gSlNPTiBpbiB0aGUgQXBwZW5kaXggQSBhcmUg d3Jvbmcg4oCTIEkgaW5pdGlhdGVkIHRoaXMgZXJyb3IuPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5b TWVkXSBHb29kIGNhdGNoLiBGaXhlZC4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90 O2ZsYWdzJnF1b3Q7OiB7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tR0IiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmcXVvdDttb3JlJnF1b3Q7 OiAxPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tR0IiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyB9PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPlNob3VsZCBiZSA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JnF1 b3Q7ZmxhZ3MmcXVvdDs6IHsg4oCcbW9yZeKAnX08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkFuZDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdC Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgJnF1b3Q7ZmxhZ3MmcXVvdDs6IHs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZx dW90O21vcmUmcXVvdDs6IDA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IH08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+U2hvdWxkIGJlIDxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmcXVvdDtmbGFncyZxdW90OzogeyDigJzigJ19PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdC Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiI+UmVnYXJkczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+Sm9uPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_BN6PR16MB14255643FCDD18BBCFC78391EA900BN6PR16MB1425namp_-- From nobody Fri May 18 01:25:04 2018 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EA04C1274D2; Fri, 18 May 2018 01:25:03 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dots@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.80.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152663190392.1506.3190249310018863262@ietfa.amsl.com> Date: Fri, 18 May 2018 01:25:03 -0700 Archived-At: Subject: [Dots] I-D Action: draft-ietf-dots-data-channel-16.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 May 2018 08:25:04 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling WG of the IETF. Title : Distributed Denial-of-Service Open Threat Signaling (DOTS) Data Channel Specification Authors : Tirumaleswar Reddy Mohamed Boucadair Kaname Nishizuka Liang Xia Prashanth Patil Andrew Mortensen Nik Teague Filename : draft-ietf-dots-data-channel-16.txt Pages : 59 Date : 2018-05-18 Abstract: The document specifies a Distributed Denial-of-Service Open Threat Signaling (DOTS) data channel used for bulk exchange of data that cannot easily or appropriately communicated through the DOTS signal channel under attack conditions. This is a companion document to the DOTS signal channel specification. Editorial Note (To be removed by RFC Editor) Please update these statements with the RFC number to be assigned to this document: o "This version of this YANG module is part of RFC XXXX;" o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling (DOTS) Data Channel Specification"; o reference: RFC XXXX Please update these statements with the RFC number to be assigned to the following documents: o "RFC YYYY: Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification" (used to be [I-D.ietf-dots-signal-channel]) o "RFC ZZZZ: Network Access Control List (ACL) YANG Data Model" (used to be [I-D.ietf-netmod-acl-model]) Please update the "revision" date of the YANG module. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-data-channel/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dots-data-channel-16 https://datatracker.ietf.org/doc/html/draft-ietf-dots-data-channel-16 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-data-channel-16 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri May 18 01:30:03 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D86F124217 for ; Fri, 18 May 2018 01:30:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Oj_EbBXGTHwo for ; Fri, 18 May 2018 01:30:00 -0700 (PDT) Received: from orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8125A127275 for ; Fri, 18 May 2018 01:30:00 -0700 (PDT) Received: from opfednr07.francetelecom.fr (unknown [xx.xx.xx.71]) by opfednr25.francetelecom.fr (ESMTP service) with ESMTP id 09FF518055C for ; Fri, 18 May 2018 10:29:59 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.21]) by opfednr07.francetelecom.fr (ESMTP service) with ESMTP id E33CC1C005D for ; Fri, 18 May 2018 10:29:58 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM6C.corporate.adroot.infra.ftgroup ([fe80::d9f5:9741:7525:a199%18]) with mapi id 14.03.0389.001; Fri, 18 May 2018 10:29:58 +0200 From: To: "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-data-channel-16.txt Thread-Index: AQHT7oG7JD+L7He8y0WF9dhwuwoM+qQ1Jq3w Date: Fri, 18 May 2018 08:29:58 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF1D15D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <152663190392.1506.3190249310018863262@ietfa.amsl.com> In-Reply-To: <152663190392.1506.3190249310018863262@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.2] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-data-channel-16.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 May 2018 08:30:03 -0000 Hi all,=20 This version integrates the comments raised during the last month:=20 - fix some nits in the examples - add a sentence to make clear which information is included in a put refre= sh request - use the same name for reporting fragment capabilities for both IPv4 and I= Pv6.=20 Cheers, Med > -----Message d'origine----- > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de internet- > drafts@ietf.org > Envoy=E9=A0: vendredi 18 mai 2018 10:25 > =C0=A0: i-d-announce@ietf.org > Cc=A0: dots@ietf.org > Objet=A0: [Dots] I-D Action: draft-ietf-dots-data-channel-16.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the DDoS Open Threat Signaling WG of the IET= F. >=20 > Title : Distributed Denial-of-Service Open Threat Signa= ling > (DOTS) Data Channel Specification > Authors : Tirumaleswar Reddy > Mohamed Boucadair > Kaname Nishizuka > Liang Xia > Prashanth Patil > Andrew Mortensen > Nik Teague > Filename : draft-ietf-dots-data-channel-16.txt > Pages : 59 > Date : 2018-05-18 >=20 > Abstract: > The document specifies a Distributed Denial-of-Service Open Threat > Signaling (DOTS) data channel used for bulk exchange of data that > cannot easily or appropriately communicated through the DOTS signal > channel under attack conditions. >=20 > This is a companion document to the DOTS signal channel > specification. >=20 > Editorial Note (To be removed by RFC Editor) >=20 > Please update these statements with the RFC number to be assigned to > this document: >=20 > o "This version of this YANG module is part of RFC XXXX;" >=20 > o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling > (DOTS) Data Channel Specification"; >=20 > o reference: RFC XXXX >=20 > Please update these statements with the RFC number to be assigned to > the following documents: >=20 > o "RFC YYYY: Distributed Denial-of-Service Open Threat Signaling > (DOTS) Signal Channel Specification" (used to be > [I-D.ietf-dots-signal-channel]) >=20 > o "RFC ZZZZ: Network Access Control List (ACL) YANG Data Model" > (used to be [I-D.ietf-netmod-acl-model]) >=20 > Please update the "revision" date of the YANG module. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-dots-data-channel/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-dots-data-channel-16 > https://datatracker.ietf.org/doc/html/draft-ietf-dots-data-channel-16 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-dots-data-channel-16 >=20 >=20 > Please note that it may take a couple of minutes from the time of submiss= ion > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Fri May 18 01:46:20 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BCF7127735 for ; Fri, 18 May 2018 01:46:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yGBeaKbK8xfC for ; Fri, 18 May 2018 01:46:13 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95697124D6C for ; Fri, 18 May 2018 01:46:12 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fJb1d-0002LM-O3; Fri, 18 May 2018 09:46:09 +0100 From: "Jon Shallow" To: "'Konda, Tirumaleswar Reddy'" , , References: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <02ad01d3ed13$42a0c3b0$c7e24b10$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1C138@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <039101d3edb3$dd8de830$98a9b890$@jpshallow.com> <082d01d3edf3$1b1df3e0$5159dba0$@jpshallow.com> In-Reply-To: Date: Fri, 18 May 2018 09:46:11 +0100 Message-ID: <0ad501d3ee84$ac1c83c0$04558b40$@jpshallow.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0AD6_01D3EE8D.0DE35CC0" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIW1wbd0mEd6XcqqteS3FYBOJVHmAGS49n4AgAfEOkB80nXRAEjJJaOAglYmHgBM8wmLQKEPmRLAn0rT2ajOBg7wA== Content-Language: en-gb Archived-At: Subject: Re: [Dots] DOTS server crash/restart with Observed mitigations/Configuration X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 May 2018 08:46:19 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0AD6_01D3EE8D.0DE35CC0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Tiru =20 See inline [Jon2] =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar Reddy Sent: 17 May 2018 17:05 To: Jon Shallow; mohamed.boucadair@orange.com; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 [Jon1] Agreed the DOTS server cannot sent anything that is unsolicited = due to loss of cryptographic state. However, if the DOTS server can = send back in a response to a client request something that states = =E2=80=9CI restarted recently @ such a time=E2=80=9D, the client will = know whether the missing heartbeats were down to just a flaky network, = or the missing heartbeats were due to a server restart, and so = re-subscribe needed for all the resources that the client wants to = monitor. I do not want the DOTS client to keep on doing re-subscribe = compounding the network flakiness when under attack. =20 [R] The first two sentences contradict each other. How can the server = send any data on the old session ?=20 [Jon2] I actually was thinking that the response was sent after the new = session was established. And I don=E2=80=99t understand the value of sending =E2=80=9CI restarted = recently @such a time=E2=80=9D in the new (D)TLS session., the client = anyways has to resend the list of active mitigations it wishes to = observe in the new session (irrespective of the reason the session is = disconnected). A session could be disconnected because of various other = reasons (e.g. NAT reload). [Jon2] OK, so whenever a new session is started for whatever reason, = there needs to be a resend of active mitigations. However, I have not = found anywhere in the signal / requirements / architecture where this is = suggested (but may have searched on the wrong keywords!) I think that = this needs to be stated somewhere, even though it is obvious if you = think about it. ~Jon2 =20 -Tiru =20 From: Jon Shallow [mailto:supjps-ietf@jpshallow.com]=20 Sent: Thursday, May 17, 2018 8:54 PM To: Konda, Tirumaleswar Reddy ; = mohamed.boucadair@orange.com; dots@ietf.org Subject: RE: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 CAUTION: External email. Do not click links or open attachments unless = you recognize the sender and know the content is safe. _____ =20 Hi Tiru, =20 See inline [Jon1] =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar Reddy Sent: 17 May 2018 16:03 To: Jon Shallow; mohamed.boucadair@orange.com; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi Jon, =20 This scenario is already discussed in Section 4.7. When the DDoS = mitigation is in progress and after the = =E2=80=98missing-hb-allowed=E2=80=99 threshold is reached, the DOTS = client will continue to use the existing (D)TLS session to send = heartbeat requests to the server and at the same time try to establish a = new (D)TLS session with DOTS server.=20 [Jon1] I fully understand that Further, if the server restarts, (D)TLS state is lost on the server and = the server does not have the cryptographic state to send = =E2=80=98re-subscribe=E2=80=99 on the old session.=20 [Jon1] Agreed the DOTS server cannot sent anything that is unsolicited = due to loss of cryptographic state. However, if the DOTS server can = send back in a response to a client request something that states = =E2=80=9CI restarted recently @ such a time=E2=80=9D, the client will = know whether the missing heartbeats were down to just a flaky network, = or the missing heartbeats were due to a server restart, and so = re-subscribe needed for all the resources that the client wants to = monitor. I do not want the DOTS client to keep on doing re-subscribe = compounding the network flakiness when under attack. ~Jon1 =20 -Tiru =20 From: Jon Shallow [mailto:supjps-ietf@jpshallow.com]=20 Sent: Thursday, May 17, 2018 1:21 PM To: Konda, Tirumaleswar Reddy ; = mohamed.boucadair@orange.com; dots@ietf.org Subject: RE: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 CAUTION: External email. Do not click links or open attachments unless = you recognize the sender and know the content is safe. _____ =20 Hi Tiru, =20 It is a corner recovery case. The DOTS client can detect that the DOTS = server has gone away (using heartbeats) and re-subscribe to all the = resources that the DOTS client wants to Observe on detection that the = DOTS server is back =20 However, when mitigating, there is a likelihood that heartbeats will = time out and I am not sure that it is wise to = =E2=80=9Cre-subscribe=E2=80=9D when the connections are re-established = as the network path may still be flaky and adding extra traffic may be = problematic. My suggestion of an epoch time being reported by the DOTS = server was a way of determining whether =E2=80=9Cre-subscribe=E2=80=9D = was required or not. =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar Reddy Sent: 16 May 2018 16:05 To: mohamed.boucadair@orange.com; Jon Shallow; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 I don=E2=80=99t get the problem. If the server restarts, (D)TLS state = will be lost and server will reject heartbeat requests from the client = (either silently or send a fatal alert to the client). DOTS client will = have to follow the steps in = https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19#section-4.7= to re-establish (D)TLS session with the DOTS server.=20 =20 -Tiru =20 From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of = mohamed.boucadair@orange.com Sent: Wednesday, May 16, 2018 7:15 PM To: Jon Shallow ; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 CAUTION: External email. Do not click links or open attachments unless = you recognize the sender and know the content is safe. _____ =20 Re-, =20 Please see inline.=20 =20 Cheers, Med =20 De : Jon Shallow [mailto:supjps-ietf@jpshallow.com]=20 Envoy=C3=A9 : mercredi 16 mai 2018 14:42 =C3=80 : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org Objet : RE: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi Med, =20 See inline. =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of = mohamed.boucadair@orange.com Sent: 16 May 2018 12:55 To: Jon Shallow; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi Jon,=20 =20 Please see inline.=20 =20 Cheers, Med =20 De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow Envoy=C3=A9 : mercredi 16 mai 2018 12:24 =C3=80 : dots@ietf.org Objet : [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi there, =20 For the signal channel, it is easy to maintain a persistent list of = active mitigations. Should the DOTS server (unexpectedly) stop and = restart, then it is easy to rebuild the current active mitigations. =20 [Med] The list of active mitigations is the =E2=80=9Ccore=E2=80=9D state = data to be maintained by a server. If we assume that list can be = reliably rebuilt, then there is no extension needed to the signal = channel to handle this failure case. =20 [Jon] Agreed. This was just me building up the background to the = scenario. =20 However, to rebuild the list of active Observations of the current = mitigations / configuration changes is considerably more difficult as = the DOTS server would also need to maintain a list of client IPs/source = ports etc. along with Tokens and Queries and (D)TLS state so that = unsolicited Observe responses can continue to be sent back to the = clients. I don=E2=80=99t really think that this is a practical ask. =20 [Med] First, this can be considered as deployment-specific. As such in = some deployments, there is no need to support automatic means to detect = state loss at the server side. Second, is it really problematic for the = DDoS mitigation that list is lost by a server? I guess, the answer is no = if we assume the list of mitigations themselves is maintained.=20 =20 [Jon] My concern is that the DOTS clients would not see the change in = mitigation state, or would not see that there is a new signal channel = configuration (if they were being Observed). The DOTS client/server = would be out of sync with what is happening and the DOTS client would = not necessarily know that it has to take some action to get back to the = state before the DOTS server outage. =20 [Med] The dots client has other means to know the mitigation state. The = DOTS client can observe the status locally (and report it to the server) = or send a request to retrieve the status from the server. The out of = synch in observe is not that critical for mitigating DDoS attacks. =20 =20 As the DOTS server restarted, existing (D)TLS sessions used by the DOTS = client will fail. So, the heartbeat mechanism will eventually time out = and I guess that the DOTS client should detect this and re-do all of the = Observe requests (along with making sure that all the active mitigations = are as expected). =20 [Med] Including clients in networks under active attacks? Isn=E2=80=99t = this overloading the server while dealing with ongoing attacks? =20 =20 [Jon] Yes, it would =E2=80=93 hence I did not really want to have to do = this whenever a heartbeat failed, but only do it when the DOTS client = =E2=80=9Cknows=E2=80=9D that the server has had an outage. =20 However in Peace time Heartbeats may not being used. However at Mitigation time heartbeats may fail. =20 Would it make sense to add to the signal channel an extra parameter that = the DOTS server can send to the client in any response in the form of=20 =E2=80=9Clast-restarted=E2=80=9D : seconds-since-epoch Which the client can use to detected the restart. =20 [Med] We used to have an epoch-based approach for a statefull service = (see https://tools.ietf.org/html/rfc6887#section-8.5). The details are = not restricted to just signalling the epoch value but to the logic to = handle it at the client side. Further, there are some aspects to be = taken into account when configuring redundancy servers when an anycast = address is used. If the same initial epoch value is configured, the = client may not detect a backup server is used and hence may not = reinstall state... A tweak is to configure distinct epoch values (e.g., = +/- 24h difference between a server redundancy group).=20 =20 The epoch is justified for 6887 because we wanted to recover state loss, = while in the DOTS case we don=E2=80=99t have the same model given that, = as you rightfully said above, the current active mitigations can be = rebuilt at the server side without involving clients. =20 =20 [Jon] So this method sets epoch time back to 0 whenever there is a = restart,=20 [Med] Yes. The epoch is reset each time the state is lost at the server = side.=20 =20 rather that report on the number of seconds since Jan 1 1970. That I = can handle. However anycast (though redundant servers are currently out = of spec) where 2 or more servers restart and update the start time at = exactly the same time is possible, but unlikely. This could be handled = by the anycast servers communicating and seeing they both have the same = start time so one backs off (in time terms). =20 [Jon] I=E2=80=99m just interested in how to recover Observe loss. [Med] I=E2=80=99m not convinced this is really needed given that active = mitigations are not concerned with this failure scenario. =20 =20 I appreciate in peace time there may not be any DOTS client requests = (or heartbeat) for a long time... =20 I=E2=80=99m open to suggestions. =20 Regards =20 Jon =20 =20 =20 =20 ------=_NextPart_000_0AD6_01D3EE8D.0DE35CC0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Hi Tiru

 

See inline = [Jon2]

 

Regards

 

Jon

 

From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of = Konda, Tirumaleswar Reddy
Sent: 17 May 2018 = 17:05
To: Jon Shallow; mohamed.boucadair@orange.com; = dots@ietf.org
Subject: Re: [Dots] DOTS server crash/restart = with Observed = mitigations/Configuration

 

[Jon1] = Agreed the DOTS server cannot sent anything that is unsolicited due to = loss of cryptographic state.  However, if the DOTS server can send = back in a response to a client request something that states =E2=80=9CI = restarted recently @ such a time=E2=80=9D, the client will know whether = the missing heartbeats were down to just a flaky network, or the missing = heartbeats were due to a server restart, and so re-subscribe needed for = all the resources that the client wants to monitor.  I do not want = the DOTS client to keep on doing re-subscribe compounding the network = flakiness when under attack.

 

[R] The first two sentences = contradict each other. How can the server send any data on the old = session ?

[Jon2] I actually was = thinking that the response was sent after the new session was = established.

And I don=E2=80=99t = understand the value of sending =E2=80=9CI restarted recently @such a = time=E2=80=9D in the new (D)TLS session., the client anyways has to = resend the list of active mitigations it wishes to observe in the new = session (irrespective of the reason the session is disconnected). A session could be disconnected because of = various other reasons (e.g. NAT reload).

[Jon2]=C2=A0 OK, so = whenever a new session is started for whatever reason, there needs to be = a resend of active mitigations.=C2=A0 However, I have not found anywhere = in the signal / requirements / architecture where this is suggested (but = may have searched on the wrong keywords!) I think that this needs to be = stated somewhere, even though it is obvious if you think about = it.

~Jon2

 

-Tiru

 

From: Jon Shallow = [mailto:supjps-ietf@jpshallow.com]
Sent: Thursday, May 17, = 2018 8:54 PM
To: Konda, Tirumaleswar Reddy = <TirumaleswarReddy_Konda@McAfee.com>; = mohamed.boucadair@orange.com; dots@ietf.org
Subject: RE: = [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

CAUTION: External email. = Do not click links or open attachments unless you recognize the sender = and know the content is safe.

Hi Tiru,

 

See inline = [Jon1]

 

Regards

 

Jon

 

From: Dots [mailto: dots-bounces@ietf.org] On = Behalf Of Konda, Tirumaleswar Reddy
Sent: 17 May 2018 = 16:03
To: Jon Shallow; mohamed.boucadair@orange.com= ; dots@ietf.org
Subject: Re: = [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

Hi = Jon,

 

This scenario is already discussed = in Section 4.7. When the DDoS mitigation is in progress and after the = =E2=80=98missing-hb-allowed=E2=80=99 threshold is reached, the DOTS = client will continue to use the existing (D)TLS session to send = heartbeat requests to the server and at the same time try to establish a = new (D)TLS session with DOTS server.

[Jon1] I fully = understand that

Further, if the server = restarts, (D)TLS state is lost on the server and the server does not = have the cryptographic state to send =E2=80=98re-subscribe=E2=80=99 on = the old session.

[Jon1] = Agreed the DOTS server cannot sent anything that is unsolicited due to = loss of cryptographic state.  However, if the DOTS server can send = back in a response to a client request something that states =E2=80=9CI = restarted recently @ such a time=E2=80=9D, the client will know whether = the missing heartbeats were down to just a flaky network, or the missing = heartbeats were due to a server restart, and so re-subscribe needed for = all the resources that the client wants to monitor.  I do not want = the DOTS client to keep on doing re-subscribe compounding the network = flakiness when under attack.

~Jon1

 

-Tiru

 

From: Jon Shallow [mailto:supjps-ietf@jpshallow.co= m]
Sent: Thursday, May 17, 2018 1:21 PM
To: = Konda, Tirumaleswar Reddy <TirumaleswarReddy_Kond= a@McAfee.com>; mohamed.boucadair@orange.com= ; dots@ietf.org
Subject: RE: = [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

CAUTION: External email. = Do not click links or open attachments unless you recognize the sender = and know the content is safe.

Hi Tiru,

 

It is a corner recovery = case.  The DOTS client can detect that the DOTS server has gone = away (using heartbeats) and re-subscribe to all the resources that the = DOTS client wants to Observe on detection that the DOTS server is = back

 

However, when = mitigating, there is a likelihood that heartbeats will time out and I am = not sure that it is wise to =E2=80=9Cre-subscribe=E2=80=9D when the = connections are re-established as the network path may still be flaky = and adding extra traffic may be problematic.  My suggestion of an = epoch time being reported by the DOTS server was a way of determining = whether =E2=80=9Cre-subscribe=E2=80=9D was required or = not.

 

Regards

 

Jon

 

From: Dots [mailto: dots-bounces@ietf.org] On = Behalf Of Konda, Tirumaleswar Reddy
Sent: 16 May 2018 = 16:05
To: mohamed.boucadair@orange.com= ; Jon Shallow; dots@ietf.org
Subject: Re: = [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

I don=E2=80=99t get = the problem. If the server restarts, (D)TLS state will be lost and = server will reject heartbeat requests from the client (either silently = or send a fatal alert to the client). DOTS client will have to follow = the steps in https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19#s= ection-4.7 to re-establish (D)TLS session with the DOTS server. =

 

-Tiru

 

From: Dots [mailto:dots-bounces@ietf.org] = On Behalf Of mohamed.boucadair@orange.com=
Sent: Wednesday, May 16, 2018 7:15 PM
To: Jon = Shallow <supjps-ietf@jpshallow.com&g= t;; dots@ietf.org
Subject: Re: = [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

CAUTION: External email. = Do not click links or open attachments unless you recognize the sender = and know the content is safe.

Re-,

 

Please see inline.

 

Cheers,

Med

 

De : Jon Shallow [mailto:supjps-ietf@jpshallow.co= m]
Envoy=C3=A9 : mercredi 16 mai 2018 = 14:42
=C3=80 : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org
Objet : = RE: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

Hi = Med,

 

See = inline.

 

Regards

 

Jon

 

From: Dots [mailto: dots-bounces@ietf.org] On = Behalf Of mohamed.boucadair@orange.com=
Sent: 16 May 2018 12:55
To: Jon Shallow; dots@ietf.org
Subject: Re: = [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

Hi Jon,

 

Please see inline.

 

Cheers,

Med

 

De : Dots [mailto:dots-bounces@ietf.org] = De la part de Jon Shallow
Envoy=C3=A9 : mercredi = 16 mai 2018 12:24
=C3=80 : dots@ietf.org
Objet : = [Dots] DOTS server crash/restart with Observed = mitigations/Configuration

 

Hi there,

 

For the = signal channel, it is easy to maintain a persistent list of active = mitigations.  Should the DOTS server (unexpectedly) stop and = restart, then it is easy to rebuild the current active = mitigations.

 

[Med] = The list of active mitigations is the =E2=80=9Ccore=E2=80=9D state data = to be maintained by a server. If we assume that list can be reliably = rebuilt, then there is no extension needed to the signal channel to = handle this failure case.

 

[Jon] Agreed.  This = was just me building up the background to the = scenario.

 

However, to rebuild the list of active Observations of = the current mitigations / configuration changes is considerably more = difficult as the DOTS server would also need to maintain a list of = client IPs/source ports etc. along with Tokens and Queries and (D)TLS = state so that unsolicited Observe responses can continue to be sent back = to the clients.  I don=E2=80=99t really think that this is a = practical ask.

 

[Med] = First, this can be considered as deployment-specific. As such in some = deployments, there is no need to support automatic means to detect state = loss at the server side. Second, is it really problematic for the DDoS = mitigation that list is lost by a server? I guess, the answer is no if = we assume the list of mitigations themselves is maintained. =

 

[Jon] My concern is that = the DOTS clients would not see the change in mitigation state, or would = not see that there is a new signal channel configuration (if they were = being Observed). The DOTS client/server would be out of sync with what = is happening and the DOTS client would not necessarily know that it has = to take some action to get back to the state before the DOTS server = outage.

 

[Med] = The dots client has other means to know the mitigation state. The DOTS = client can observe the status locally (and report it to the server) or = send a request to retrieve the status from the server. The out of synch = in observe is not that critical for mitigating DDoS attacks. =  

 

As the DOTS server restarted, existing (D)TLS sessions = used by the DOTS client will fail.  So, the heartbeat mechanism = will eventually time out  and I guess that the DOTS client should = detect this and re-do all of the Observe requests (along with making = sure that all the active mitigations are as expected).

 

[Med] = Including clients in networks under active attacks? Isn=E2=80=99t this = overloading the server while dealing with ongoing attacks? =  

 

[Jon] Yes, it would = =E2=80=93 hence I did not really want to have to do this whenever a = heartbeat failed, but only do it when the DOTS client = =E2=80=9Cknows=E2=80=9D that the server has had an = outage.

 

However in Peace time Heartbeats may not being = used.

However at Mitigation time = heartbeats may fail.

 

Would it = make sense to add to the signal channel an extra parameter that the DOTS = server can send to the client in any response in the form of =

=E2=80=9Clast-restarted=E2=80=9D : = seconds-since-epoch

Which the client = can use to detected the restart.

 

[Med] = We used to have an epoch-based approach for a statefull service (see https://tools.ie= tf.org/html/rfc6887#section-8.5). The details are not restricted to = just signalling the epoch value but to the logic to handle it at the = client side. Further, there are some aspects to be taken into account = when configuring redundancy servers when an anycast address is used. If = the same initial epoch value is configured, the client may not detect a = backup server is used and hence may not reinstall state... A tweak is to = configure distinct epoch values (e.g., +/- 24h difference between a = server redundancy group).

 

The = epoch is justified for 6887 because we wanted to recover state loss, = while in the DOTS case we don=E2=80=99t have the same model given that, = as you rightfully said above, the current active mitigations can be = rebuilt at the server side without involving clients. =  

 

[Jon] So this method = sets epoch time back to 0 whenever there is a restart,

[Med] = Yes. The epoch is reset each time the state is lost at the server side. =

 

rather that report on the number of seconds = since Jan 1 1970.   That I can handle.  However anycast = (though redundant servers are currently out of spec) where 2 or more = servers restart and update the start time at exactly the same time is = possible, but unlikely.  This could be handled by the anycast = servers communicating and seeing they both have the same start time so = one backs off (in time terms).

 

[Jon] I=E2=80=99m just = interested in how to recover Observe loss.

[Med] I=E2=80=99m not convinced this is really needed = given that active mitigations are not concerned with this failure = scenario.  

 

  I appreciate in peace time there may not be any = DOTS client requests (or heartbeat) for a long time...

 

I=E2=80=99m = open to suggestions.

 

Regards

 

Jon

 

 

 

 

------=_NextPart_000_0AD6_01D3EE8D.0DE35CC0-- From nobody Fri May 18 01:57:24 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0D39127735 for ; Fri, 18 May 2018 01:57:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.31 X-Spam-Level: X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vf_IMuC2TL5c for ; Fri, 18 May 2018 01:57:19 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1CF8F1271FD for ; Fri, 18 May 2018 01:57:19 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1526633841; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:x-originating-ip: x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:authentication-results: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:MIME-Version: X-MS-Office365-Filtering-Correlation-Id:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=9 y2aM9aL0KnzZIA2w9YtxUe3uzak5TlEnm1v2J36DX s=; b=iCmeNpJ6I+FPSEayEptIXQ3iVlXcgtCXet5/cknNzuUD sGs5suUUjQNiSGxD5PqT+OjPQSuRg3iY4LNiwJRYnBCtlVTetq oWXi3LxhdfplGqqWg6PJCrJKlxoROfoCOdCT4KlqFbPye6u73f a7x17QaI+4+/Epoa4jvFasPZs2E= Received: from DNVEXAPP1N04.corpzone.internalzone.com (unknown [10.44.48.88]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 2922_4f89_4d6918b1_a9c2_46fe_b2cd_5050320cb4cd; Fri, 18 May 2018 03:57:20 -0500 Received: from DNVEXUSR1N12.corpzone.internalzone.com (10.44.48.85) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 May 2018 02:57:14 -0600 Received: from DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) by DNVEXUSR1N12.corpzone.internalzone.com (10.44.48.85) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 May 2018 02:57:13 -0600 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Fri, 18 May 2018 02:57:13 -0600 Received: from NAM02-SN1-obe.outbound.protection.outlook.com (10.44.176.241) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 May 2018 02:57:11 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB1731.namprd16.prod.outlook.com (10.172.28.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.776.11; Fri, 18 May 2018 08:57:11 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8%9]) with mapi id 15.20.0776.010; Fri, 18 May 2018 08:57:11 +0000 From: "Konda, Tirumaleswar Reddy" To: Jon Shallow , "mohamed.boucadair@orange.com" , "dots@ietf.org" Thread-Topic: [Dots] DOTS server crash/restart with Observed mitigations/Configuration Thread-Index: AdPs/+9TEvk/O5CYS8+qOpb9I1vXhAACuBlAAAIcswAAAjbXAAAByVCQACQmhYAAAPvNsAAO06eAAADXUFAAI4zlgAAADaNQ Date: Fri, 18 May 2018 08:57:11 +0000 Message-ID: References: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <02ad01d3ed13$42a0c3b0$c7e24b10$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1C138@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <039101d3edb3$dd8de830$98a9b890$@jpshallow.com> <082d01d3edf3$1b1df3e0$5159dba0$@jpshallow.com> <0ad501d3ee84$ac1c83c0$04558b40$@jpshallow.com> In-Reply-To: <0ad501d3ee84$ac1c83c0$04558b40$@jpshallow.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB1731; 7:THOYT9C1U8K9B70lpuCTSnpu+aC22adZQ+5+C4HGIn6vBIk+hS3fUSEm7d5n5WWSMc3fsTqyr27v/1ntIA/dHz6wDVZZ2SeDcl+WQt1f7fs3eMZ4mjV9cZ7WZveETF+Q5iy+Ev+Py9MKn+7KuNMSxPXuGIXZFPpo1Mrh6Ra1ZzL41ao8ZYQ/Iq5W9OcG86mFVTImP94iTyOP+CCHaOExZqLg2Ar+tMh7XhNnZzdYBpe0b0BpNGN6Pd6mlaQmspSA x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB1731; x-ms-traffictypediagnostic: BN6PR16MB1731: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(190756311086443)(158342451672863)(18271650672692)(21748063052155)(123452027830198); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3231254)(944501410)(52105095)(3002001)(10201501046)(93006095)(93001095)(149027)(150027)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123558120)(20161123562045)(20161123560045)(6072148)(201708071742011)(7699016); SRVR:BN6PR16MB1731; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB1731; x-forefront-prvs: 0676F530A9 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(39860400002)(376002)(346002)(366004)(396003)(32952001)(199004)(189003)(51444003)(229853002)(186003)(81156014)(81166006)(316002)(110136005)(19609705001)(8676002)(3280700002)(33656002)(7736002)(6506007)(97736004)(3660700001)(14454004)(6436002)(80792005)(93886005)(102836004)(53546011)(55016002)(5890100001)(236005)(2906002)(6306002)(53946003)(9686003)(6246003)(76176011)(25786009)(478600001)(6346003)(966005)(7696005)(5250100002)(9326002)(59450400001)(26005)(2501003)(72206003)(2201001)(53936002)(54896002)(86362001)(105586002)(476003)(3846002)(106356001)(74316002)(6116002)(8936002)(790700001)(99286004)(5660300001)(68736007)(11346002)(446003)(606006)(2900100001)(486006)(66066001)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB1731; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-microsoft-antispam-message-info: bTJXaVdED9CCYbTllMu+q3W/rh/bE2SHAExG7pYFbwGzLVuRW9ai5ScN71k7fHkB/Ja0bv6igtE2o+TxzOF0vfsc3OOqf1PZcnZQmAN1bBc2o+JRzeMcpc7Jbx7OYoJoPIsIAmlxSg3qnEuqWAr6URa7/ZKulIbDgqBwuDdRvAciSTU7iWjZBpt5aDUtazrkRjFodTNBNAnaOQUChPadBg== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BN6PR16MB14253628B33D44ADA7FA7002EA900BN6PR16MB1425namp_" MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: aa67a1f3-26e9-4b37-651c-08d5bc9d57cf X-MS-Exchange-CrossTenant-Network-Message-Id: aa67a1f3-26e9-4b37-651c-08d5bc9d57cf X-MS-Exchange-CrossTenant-originalarrivaltime: 18 May 2018 08:57:11.1265 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB1731 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6288> : inlines <6643> : streams <1787078> : uri <2643241> Archived-At: Subject: Re: [Dots] DOTS server crash/restart with Observed mitigations/Configuration X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 May 2018 08:57:23 -0000 --_000_BN6PR16MB14253628B33D44ADA7FA7002EA900BN6PR16MB1425namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSm9uLA0KDQpQbGVhc2Ugc2VlIGlubGluZSBbVFJdDQoNCkZyb206IERvdHMgW21haWx0bzpk b3RzLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBKb24gU2hhbGxvdw0KU2VudDogRnJp ZGF5LCBNYXkgMTgsIDIwMTggMjoxNiBQTQ0KVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkg PFRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20+OyBtb2hhbWVkLmJvdWNhZGFpckBv cmFuZ2UuY29tOyBkb3RzQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0RvdHNdIERPVFMgc2VydmVy IGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uDQoN Cg0KQ0FVVElPTjogRXh0ZXJuYWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0 dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNv bnRlbnQgaXMgc2FmZS4NCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KSGkg VGlydQ0KDQpTZWUgaW5saW5lIFtKb24yXQ0KDQpSZWdhcmRzDQoNCkpvbg0KDQpGcm9tOiBEb3Rz IFttYWlsdG86IGRvdHMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86ZG90cy1ib3VuY2VzQGlldGYu b3JnPl0gT24gQmVoYWxmIE9mIEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkNClNlbnQ6IDE3IE1h eSAyMDE4IDE3OjA1DQpUbzogSm9uIFNoYWxsb3c7IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5j b208bWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+OyBkb3RzQGlldGYub3JnPG1h aWx0bzpkb3RzQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFz aC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0KDQpbSm9u MV0gQWdyZWVkIHRoZSBET1RTIHNlcnZlciBjYW5ub3Qgc2VudCBhbnl0aGluZyB0aGF0IGlzIHVu c29saWNpdGVkIGR1ZSB0byBsb3NzIG9mIGNyeXB0b2dyYXBoaWMgc3RhdGUuICBIb3dldmVyLCBp ZiB0aGUgRE9UUyBzZXJ2ZXIgY2FuIHNlbmQgYmFjayBpbiBhIHJlc3BvbnNlIHRvIGEgY2xpZW50 IHJlcXVlc3Qgc29tZXRoaW5nIHRoYXQgc3RhdGVzIOKAnEkgcmVzdGFydGVkIHJlY2VudGx5IEAg c3VjaCBhIHRpbWXigJ0sIHRoZSBjbGllbnQgd2lsbCBrbm93IHdoZXRoZXIgdGhlIG1pc3Npbmcg aGVhcnRiZWF0cyB3ZXJlIGRvd24gdG8ganVzdCBhIGZsYWt5IG5ldHdvcmssIG9yIHRoZSBtaXNz aW5nIGhlYXJ0YmVhdHMgd2VyZSBkdWUgdG8gYSBzZXJ2ZXIgcmVzdGFydCwgYW5kIHNvIHJlLXN1 YnNjcmliZSBuZWVkZWQgZm9yIGFsbCB0aGUgcmVzb3VyY2VzIHRoYXQgdGhlIGNsaWVudCB3YW50 cyB0byBtb25pdG9yLiAgSSBkbyBub3Qgd2FudCB0aGUgRE9UUyBjbGllbnQgdG8ga2VlcCBvbiBk b2luZyByZS1zdWJzY3JpYmUgY29tcG91bmRpbmcgdGhlIG5ldHdvcmsgZmxha2luZXNzIHdoZW4g dW5kZXIgYXR0YWNrLg0KDQpbUl0gVGhlIGZpcnN0IHR3byBzZW50ZW5jZXMgY29udHJhZGljdCBl YWNoIG90aGVyLiBIb3cgY2FuIHRoZSBzZXJ2ZXIgc2VuZCBhbnkgZGF0YSBvbiB0aGUgb2xkIHNl c3Npb24gPw0KW0pvbjJdIEkgYWN0dWFsbHkgd2FzIHRoaW5raW5nIHRoYXQgdGhlIHJlc3BvbnNl IHdhcyBzZW50IGFmdGVyIHRoZSBuZXcgc2Vzc2lvbiB3YXMgZXN0YWJsaXNoZWQuDQpBbmQgSSBk b27igJl0IHVuZGVyc3RhbmQgdGhlIHZhbHVlIG9mIHNlbmRpbmcg4oCcSSByZXN0YXJ0ZWQgcmVj ZW50bHkgQHN1Y2ggYSB0aW1l4oCdIGluIHRoZSBuZXcgKEQpVExTIHNlc3Npb24uLCB0aGUgY2xp ZW50IGFueXdheXMgaGFzIHRvIHJlc2VuZCB0aGUgbGlzdCBvZiBhY3RpdmUgbWl0aWdhdGlvbnMg aXQgd2lzaGVzIHRvIG9ic2VydmUgaW4gdGhlIG5ldyBzZXNzaW9uIChpcnJlc3BlY3RpdmUgb2Yg dGhlIHJlYXNvbiB0aGUgc2Vzc2lvbiBpcyBkaXNjb25uZWN0ZWQpLiBBIHNlc3Npb24gY291bGQg YmUgZGlzY29ubmVjdGVkIGJlY2F1c2Ugb2YgdmFyaW91cyBvdGhlciByZWFzb25zIChlLmcuIE5B VCByZWxvYWQpLg0KW0pvbjJdICBPSywgc28gd2hlbmV2ZXIgYSBuZXcgc2Vzc2lvbiBpcyBzdGFy dGVkIGZvciB3aGF0ZXZlciByZWFzb24sIHRoZXJlIG5lZWRzIHRvIGJlIGEgcmVzZW5kIG9mIGFj dGl2ZSBtaXRpZ2F0aW9ucy4NCg0KDQpbVFJdIE5vLCBJIG1lYW50IFRoZSBET1RTIGNsaWVudCBp biB0aGUgbmV3IChEKVRMUyBzZXNzaW9uIGhhcyB0byBzZW5kIEdFVCByZXF1ZXN0IHdpdGggT2Jz ZXJ2ZSBvcHRpb24gdG8gcmVjZWl2ZSB1bnNvbGljaXRlZCBub3RpZmljYXRpb25zIG9mIGF0dGFj ayBtaXRpZ2F0aW9uIHN0YXR1cyBvZiBhY3RpdmUgbWl0aWdhdGlvbiByZXF1ZXN0cyBmcm9tIHRo ZSBET1RTIHNlcnZlci4NCg0KDQoNCi1UaXJ1DQoNCkhvd2V2ZXIsIEkgaGF2ZSBub3QgZm91bmQg YW55d2hlcmUgaW4gdGhlIHNpZ25hbCAvIHJlcXVpcmVtZW50cyAvIGFyY2hpdGVjdHVyZSB3aGVy ZSB0aGlzIGlzIHN1Z2dlc3RlZCAoYnV0IG1heSBoYXZlIHNlYXJjaGVkIG9uIHRoZSB3cm9uZyBr ZXl3b3JkcyEpIEkgdGhpbmsgdGhhdCB0aGlzIG5lZWRzIHRvIGJlIHN0YXRlZCBzb21ld2hlcmUs IGV2ZW4gdGhvdWdoIGl0IGlzIG9idmlvdXMgaWYgeW91IHRoaW5rIGFib3V0IGl0Lg0KfkpvbjIN Cg0KDQotVGlydQ0KDQpGcm9tOiBKb24gU2hhbGxvdyBbbWFpbHRvOnN1cGpwcy1pZXRmQGpwc2hh bGxvdy5jb21dDQpTZW50OiBUaHVyc2RheSwgTWF5IDE3LCAyMDE4IDg6NTQgUE0NClRvOiBLb25k YSwgVGlydW1hbGVzd2FyIFJlZGR5IDxUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29t PG1haWx0bzpUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tPj47IG1vaGFtZWQuYm91 Y2FkYWlyQG9yYW5nZS5jb208bWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+OyBk b3RzQGlldGYub3JnPG1haWx0bzpkb3RzQGlldGYub3JnPg0KU3ViamVjdDogUkU6IFtEb3RzXSBE T1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmln dXJhdGlvbg0KDQoNCkNBVVRJT046IEV4dGVybmFsIGVtYWlsLiBEbyBub3QgY2xpY2sgbGlua3Mg b3Igb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBr bm93IHRoZSBjb250ZW50IGlzIHNhZmUuDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18NCkhpIFRpcnUsDQoNClNlZSBpbmxpbmUgW0pvbjFdDQoNClJlZ2FyZHMNCg0KSm9uDQoN CkZyb206IERvdHMgW21haWx0bzogZG90cy1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpkb3RzLWJv dW5jZXNAaWV0Zi5vcmc+XSBPbiBCZWhhbGYgT2YgS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeQ0K U2VudDogMTcgTWF5IDIwMTggMTY6MDMNClRvOiBKb24gU2hhbGxvdzsgbW9oYW1lZC5ib3VjYWRh aXJAb3JhbmdlLmNvbTxtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT47IGRvdHNA aWV0Zi5vcmc8bWFpbHRvOmRvdHNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0RvdHNdIERPVFMg c2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0 aW9uDQoNCkhpIEpvbiwNCg0KVGhpcyBzY2VuYXJpbyBpcyBhbHJlYWR5IGRpc2N1c3NlZCBpbiBT ZWN0aW9uIDQuNy4gV2hlbiB0aGUgRERvUyBtaXRpZ2F0aW9uIGlzIGluIHByb2dyZXNzIGFuZCBh ZnRlciB0aGUg4oCYbWlzc2luZy1oYi1hbGxvd2Vk4oCZIHRocmVzaG9sZCBpcyByZWFjaGVkLCB0 aGUgRE9UUyBjbGllbnQgd2lsbCBjb250aW51ZSB0byB1c2UgdGhlIGV4aXN0aW5nIChEKVRMUyBz ZXNzaW9uIHRvIHNlbmQgaGVhcnRiZWF0IHJlcXVlc3RzIHRvIHRoZSBzZXJ2ZXIgYW5kIGF0IHRo ZSBzYW1lIHRpbWUgdHJ5IHRvIGVzdGFibGlzaCBhIG5ldyAoRClUTFMgc2Vzc2lvbiB3aXRoIERP VFMgc2VydmVyLg0KW0pvbjFdIEkgZnVsbHkgdW5kZXJzdGFuZCB0aGF0DQpGdXJ0aGVyLCBpZiB0 aGUgc2VydmVyIHJlc3RhcnRzLCAoRClUTFMgc3RhdGUgaXMgbG9zdCBvbiB0aGUgc2VydmVyIGFu ZCB0aGUgc2VydmVyIGRvZXMgbm90IGhhdmUgdGhlIGNyeXB0b2dyYXBoaWMgc3RhdGUgdG8gc2Vu ZCDigJhyZS1zdWJzY3JpYmXigJkgb24gdGhlIG9sZCBzZXNzaW9uLg0KW0pvbjFdIEFncmVlZCB0 aGUgRE9UUyBzZXJ2ZXIgY2Fubm90IHNlbnQgYW55dGhpbmcgdGhhdCBpcyB1bnNvbGljaXRlZCBk dWUgdG8gbG9zcyBvZiBjcnlwdG9ncmFwaGljIHN0YXRlLiAgSG93ZXZlciwgaWYgdGhlIERPVFMg c2VydmVyIGNhbiBzZW5kIGJhY2sgaW4gYSByZXNwb25zZSB0byBhIGNsaWVudCByZXF1ZXN0IHNv bWV0aGluZyB0aGF0IHN0YXRlcyDigJxJIHJlc3RhcnRlZCByZWNlbnRseSBAIHN1Y2ggYSB0aW1l 4oCdLCB0aGUgY2xpZW50IHdpbGwga25vdyB3aGV0aGVyIHRoZSBtaXNzaW5nIGhlYXJ0YmVhdHMg d2VyZSBkb3duIHRvIGp1c3QgYSBmbGFreSBuZXR3b3JrLCBvciB0aGUgbWlzc2luZyBoZWFydGJl YXRzIHdlcmUgZHVlIHRvIGEgc2VydmVyIHJlc3RhcnQsIGFuZCBzbyByZS1zdWJzY3JpYmUgbmVl ZGVkIGZvciBhbGwgdGhlIHJlc291cmNlcyB0aGF0IHRoZSBjbGllbnQgd2FudHMgdG8gbW9uaXRv ci4gIEkgZG8gbm90IHdhbnQgdGhlIERPVFMgY2xpZW50IHRvIGtlZXAgb24gZG9pbmcgcmUtc3Vi c2NyaWJlIGNvbXBvdW5kaW5nIHRoZSBuZXR3b3JrIGZsYWtpbmVzcyB3aGVuIHVuZGVyIGF0dGFj ay4NCn5Kb24xDQoNCi1UaXJ1DQoNCkZyb206IEpvbiBTaGFsbG93IFttYWlsdG86c3VwanBzLWll dGZAanBzaGFsbG93LmNvbV0NClNlbnQ6IFRodXJzZGF5LCBNYXkgMTcsIDIwMTggMToyMSBQTQ0K VG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgPFRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1j QWZlZS5jb208bWFpbHRvOlRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20+PjsgbW9o YW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3Jhbmdl LmNvbT47IGRvdHNAaWV0Zi5vcmc8bWFpbHRvOmRvdHNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSRTog W0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9u cy9Db25maWd1cmF0aW9uDQoNCg0KQ0FVVElPTjogRXh0ZXJuYWwgZW1haWwuIERvIG5vdCBjbGlj ayBsaW5rcyBvciBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5k ZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS4NCg0KDQpfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KSGkgVGlydSwNCg0KSXQgaXMgYSBjb3JuZXIgcmVjb3ZlcnkgY2FzZS4g IFRoZSBET1RTIGNsaWVudCBjYW4gZGV0ZWN0IHRoYXQgdGhlIERPVFMgc2VydmVyIGhhcyBnb25l IGF3YXkgKHVzaW5nIGhlYXJ0YmVhdHMpIGFuZCByZS1zdWJzY3JpYmUgdG8gYWxsIHRoZSByZXNv dXJjZXMgdGhhdCB0aGUgRE9UUyBjbGllbnQgd2FudHMgdG8gT2JzZXJ2ZSBvbiBkZXRlY3Rpb24g dGhhdCB0aGUgRE9UUyBzZXJ2ZXIgaXMgYmFjaw0KDQpIb3dldmVyLCB3aGVuIG1pdGlnYXRpbmcs IHRoZXJlIGlzIGEgbGlrZWxpaG9vZCB0aGF0IGhlYXJ0YmVhdHMgd2lsbCB0aW1lIG91dCBhbmQg SSBhbSBub3Qgc3VyZSB0aGF0IGl0IGlzIHdpc2UgdG8g4oCccmUtc3Vic2NyaWJl4oCdIHdoZW4g dGhlIGNvbm5lY3Rpb25zIGFyZSByZS1lc3RhYmxpc2hlZCBhcyB0aGUgbmV0d29yayBwYXRoIG1h eSBzdGlsbCBiZSBmbGFreSBhbmQgYWRkaW5nIGV4dHJhIHRyYWZmaWMgbWF5IGJlIHByb2JsZW1h dGljLiAgTXkgc3VnZ2VzdGlvbiBvZiBhbiBlcG9jaCB0aW1lIGJlaW5nIHJlcG9ydGVkIGJ5IHRo ZSBET1RTIHNlcnZlciB3YXMgYSB3YXkgb2YgZGV0ZXJtaW5pbmcgd2hldGhlciDigJxyZS1zdWJz Y3JpYmXigJ0gd2FzIHJlcXVpcmVkIG9yIG5vdC4NCg0KUmVnYXJkcw0KDQpKb24NCg0KRnJvbTog RG90cyBbbWFpbHRvOiBkb3RzLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmRvdHMtYm91bmNlc0Bp ZXRmLm9yZz5dIE9uIEJlaGFsZiBPZiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5DQpTZW50OiAx NiBNYXkgMjAxOCAxNjowNQ0KVG86IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208bWFpbHRv Om1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+OyBKb24gU2hhbGxvdzsgZG90c0BpZXRmLm9y ZzxtYWlsdG86ZG90c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbRG90c10gRE9UUyBzZXJ2ZXIg Y3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24NCg0K SSBkb27igJl0IGdldCB0aGUgcHJvYmxlbS4gSWYgdGhlIHNlcnZlciByZXN0YXJ0cywgKEQpVExT IHN0YXRlIHdpbGwgYmUgbG9zdCBhbmQgc2VydmVyIHdpbGwgcmVqZWN0IGhlYXJ0YmVhdCByZXF1 ZXN0cyBmcm9tIHRoZSBjbGllbnQgKGVpdGhlciBzaWxlbnRseSBvciBzZW5kIGEgZmF0YWwgYWxl cnQgdG8gdGhlIGNsaWVudCkuIERPVFMgY2xpZW50IHdpbGwgaGF2ZSB0byBmb2xsb3cgdGhlIHN0 ZXBzIGluIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWRvdHMtc2lnbmFs LWNoYW5uZWwtMTkjc2VjdGlvbi00LjcgdG8gcmUtZXN0YWJsaXNoIChEKVRMUyBzZXNzaW9uIHdp dGggdGhlIERPVFMgc2VydmVyLg0KDQotVGlydQ0KDQpGcm9tOiBEb3RzIFttYWlsdG86ZG90cy1i b3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNv bTxtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT4NClNlbnQ6IFdlZG5lc2RheSwg TWF5IDE2LCAyMDE4IDc6MTUgUE0NClRvOiBKb24gU2hhbGxvdyA8c3VwanBzLWlldGZAanBzaGFs bG93LmNvbTxtYWlsdG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbT4+OyBkb3RzQGlldGYub3Jn PG1haWx0bzpkb3RzQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtEb3RzXSBET1RTIHNlcnZlciBj cmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0KDQoN CkNBVVRJT046IEV4dGVybmFsIGVtYWlsLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3BlbiBhdHRh Y2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250 ZW50IGlzIHNhZmUuDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NClJlLSwN Cg0KUGxlYXNlIHNlZSBpbmxpbmUuDQoNCkNoZWVycywNCk1lZA0KDQpEZSA6IEpvbiBTaGFsbG93 IFttYWlsdG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbV0NCkVudm95w6kgOiBtZXJjcmVkaSAx NiBtYWkgMjAxOCAxNDo0Mg0Kw4AgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOyBkb3RzQGll dGYub3JnPG1haWx0bzpkb3RzQGlldGYub3JnPg0KT2JqZXQgOiBSRTogW0RvdHNdIERPVFMgc2Vy dmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9u DQoNCkhpIE1lZCwNCg0KU2VlIGlubGluZS4NCg0KUmVnYXJkcw0KDQpKb24NCg0KRnJvbTogRG90 cyBbbWFpbHRvOiBkb3RzLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmRvdHMtYm91bmNlc0BpZXRm Lm9yZz5dIE9uIEJlaGFsZiBPZiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPG1haWx0bzpt b2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPg0KU2VudDogMTYgTWF5IDIwMTggMTI6NTUNClRv OiBKb24gU2hhbGxvdzsgZG90c0BpZXRmLm9yZzxtYWlsdG86ZG90c0BpZXRmLm9yZz4NClN1Ympl Y3Q6IFJlOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1p dGlnYXRpb25zL0NvbmZpZ3VyYXRpb24NCg0KSGkgSm9uLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4N Cg0KQ2hlZXJzLA0KTWVkDQoNCkRlIDogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9y Z10gRGUgbGEgcGFydCBkZSBKb24gU2hhbGxvdw0KRW52b3nDqSA6IG1lcmNyZWRpIDE2IG1haSAy MDE4IDEyOjI0DQrDgCA6IGRvdHNAaWV0Zi5vcmc8bWFpbHRvOmRvdHNAaWV0Zi5vcmc+DQpPYmpl dCA6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdh dGlvbnMvQ29uZmlndXJhdGlvbg0KDQpIaSB0aGVyZSwNCg0KRm9yIHRoZSBzaWduYWwgY2hhbm5l bCwgaXQgaXMgZWFzeSB0byBtYWludGFpbiBhIHBlcnNpc3RlbnQgbGlzdCBvZiBhY3RpdmUgbWl0 aWdhdGlvbnMuICBTaG91bGQgdGhlIERPVFMgc2VydmVyICh1bmV4cGVjdGVkbHkpIHN0b3AgYW5k IHJlc3RhcnQsIHRoZW4gaXQgaXMgZWFzeSB0byByZWJ1aWxkIHRoZSBjdXJyZW50IGFjdGl2ZSBt aXRpZ2F0aW9ucy4NCg0KW01lZF0gVGhlIGxpc3Qgb2YgYWN0aXZlIG1pdGlnYXRpb25zIGlzIHRo ZSDigJxjb3Jl4oCdIHN0YXRlIGRhdGEgdG8gYmUgbWFpbnRhaW5lZCBieSBhIHNlcnZlci4gSWYg d2UgYXNzdW1lIHRoYXQgbGlzdCBjYW4gYmUgcmVsaWFibHkgcmVidWlsdCwgdGhlbiB0aGVyZSBp cyBubyBleHRlbnNpb24gbmVlZGVkIHRvIHRoZSBzaWduYWwgY2hhbm5lbCB0byBoYW5kbGUgdGhp cyBmYWlsdXJlIGNhc2UuDQoNCltKb25dIEFncmVlZC4gIFRoaXMgd2FzIGp1c3QgbWUgYnVpbGRp bmcgdXAgdGhlIGJhY2tncm91bmQgdG8gdGhlIHNjZW5hcmlvLg0KDQpIb3dldmVyLCB0byByZWJ1 aWxkIHRoZSBsaXN0IG9mIGFjdGl2ZSBPYnNlcnZhdGlvbnMgb2YgdGhlIGN1cnJlbnQgbWl0aWdh dGlvbnMgLyBjb25maWd1cmF0aW9uIGNoYW5nZXMgaXMgY29uc2lkZXJhYmx5IG1vcmUgZGlmZmlj dWx0IGFzIHRoZSBET1RTIHNlcnZlciB3b3VsZCBhbHNvIG5lZWQgdG8gbWFpbnRhaW4gYSBsaXN0 IG9mIGNsaWVudCBJUHMvc291cmNlIHBvcnRzIGV0Yy4gYWxvbmcgd2l0aCBUb2tlbnMgYW5kIFF1 ZXJpZXMgYW5kIChEKVRMUyBzdGF0ZSBzbyB0aGF0IHVuc29saWNpdGVkIE9ic2VydmUgcmVzcG9u c2VzIGNhbiBjb250aW51ZSB0byBiZSBzZW50IGJhY2sgdG8gdGhlIGNsaWVudHMuICBJIGRvbuKA mXQgcmVhbGx5IHRoaW5rIHRoYXQgdGhpcyBpcyBhIHByYWN0aWNhbCBhc2suDQoNCltNZWRdIEZp cnN0LCB0aGlzIGNhbiBiZSBjb25zaWRlcmVkIGFzIGRlcGxveW1lbnQtc3BlY2lmaWMuIEFzIHN1 Y2ggaW4gc29tZSBkZXBsb3ltZW50cywgdGhlcmUgaXMgbm8gbmVlZCB0byBzdXBwb3J0IGF1dG9t YXRpYyBtZWFucyB0byBkZXRlY3Qgc3RhdGUgbG9zcyBhdCB0aGUgc2VydmVyIHNpZGUuIFNlY29u ZCwgaXMgaXQgcmVhbGx5IHByb2JsZW1hdGljIGZvciB0aGUgRERvUyBtaXRpZ2F0aW9uIHRoYXQg bGlzdCBpcyBsb3N0IGJ5IGEgc2VydmVyPyBJIGd1ZXNzLCB0aGUgYW5zd2VyIGlzIG5vIGlmIHdl IGFzc3VtZSB0aGUgbGlzdCBvZiBtaXRpZ2F0aW9ucyB0aGVtc2VsdmVzIGlzIG1haW50YWluZWQu DQoNCltKb25dIE15IGNvbmNlcm4gaXMgdGhhdCB0aGUgRE9UUyBjbGllbnRzIHdvdWxkIG5vdCBz ZWUgdGhlIGNoYW5nZSBpbiBtaXRpZ2F0aW9uIHN0YXRlLCBvciB3b3VsZCBub3Qgc2VlIHRoYXQg dGhlcmUgaXMgYSBuZXcgc2lnbmFsIGNoYW5uZWwgY29uZmlndXJhdGlvbiAoaWYgdGhleSB3ZXJl IGJlaW5nIE9ic2VydmVkKS4gVGhlIERPVFMgY2xpZW50L3NlcnZlciB3b3VsZCBiZSBvdXQgb2Yg c3luYyB3aXRoIHdoYXQgaXMgaGFwcGVuaW5nIGFuZCB0aGUgRE9UUyBjbGllbnQgd291bGQgbm90 IG5lY2Vzc2FyaWx5IGtub3cgdGhhdCBpdCBoYXMgdG8gdGFrZSBzb21lIGFjdGlvbiB0byBnZXQg YmFjayB0byB0aGUgc3RhdGUgYmVmb3JlIHRoZSBET1RTIHNlcnZlciBvdXRhZ2UuDQoNCltNZWRd IFRoZSBkb3RzIGNsaWVudCBoYXMgb3RoZXIgbWVhbnMgdG8ga25vdyB0aGUgbWl0aWdhdGlvbiBz dGF0ZS4gVGhlIERPVFMgY2xpZW50IGNhbiBvYnNlcnZlIHRoZSBzdGF0dXMgbG9jYWxseSAoYW5k IHJlcG9ydCBpdCB0byB0aGUgc2VydmVyKSBvciBzZW5kIGEgcmVxdWVzdCB0byByZXRyaWV2ZSB0 aGUgc3RhdHVzIGZyb20gdGhlIHNlcnZlci4gVGhlIG91dCBvZiBzeW5jaCBpbiBvYnNlcnZlIGlz IG5vdCB0aGF0IGNyaXRpY2FsIGZvciBtaXRpZ2F0aW5nIEREb1MgYXR0YWNrcy4NCg0KQXMgdGhl IERPVFMgc2VydmVyIHJlc3RhcnRlZCwgZXhpc3RpbmcgKEQpVExTIHNlc3Npb25zIHVzZWQgYnkg dGhlIERPVFMgY2xpZW50IHdpbGwgZmFpbC4gIFNvLCB0aGUgaGVhcnRiZWF0IG1lY2hhbmlzbSB3 aWxsIGV2ZW50dWFsbHkgdGltZSBvdXQgIGFuZCBJIGd1ZXNzIHRoYXQgdGhlIERPVFMgY2xpZW50 IHNob3VsZCBkZXRlY3QgdGhpcyBhbmQgcmUtZG8gYWxsIG9mIHRoZSBPYnNlcnZlIHJlcXVlc3Rz IChhbG9uZyB3aXRoIG1ha2luZyBzdXJlIHRoYXQgYWxsIHRoZSBhY3RpdmUgbWl0aWdhdGlvbnMg YXJlIGFzIGV4cGVjdGVkKS4NCg0KW01lZF0gSW5jbHVkaW5nIGNsaWVudHMgaW4gbmV0d29ya3Mg dW5kZXIgYWN0aXZlIGF0dGFja3M/IElzbuKAmXQgdGhpcyBvdmVybG9hZGluZyB0aGUgc2VydmVy IHdoaWxlIGRlYWxpbmcgd2l0aCBvbmdvaW5nIGF0dGFja3M/DQoNCltKb25dIFllcywgaXQgd291 bGQg4oCTIGhlbmNlIEkgZGlkIG5vdCByZWFsbHkgd2FudCB0byBoYXZlIHRvIGRvIHRoaXMgd2hl bmV2ZXIgYSBoZWFydGJlYXQgZmFpbGVkLCBidXQgb25seSBkbyBpdCB3aGVuIHRoZSBET1RTIGNs aWVudCDigJxrbm93c+KAnSB0aGF0IHRoZSBzZXJ2ZXIgaGFzIGhhZCBhbiBvdXRhZ2UuDQoNCkhv d2V2ZXIgaW4gUGVhY2UgdGltZSBIZWFydGJlYXRzIG1heSBub3QgYmVpbmcgdXNlZC4NCkhvd2V2 ZXIgYXQgTWl0aWdhdGlvbiB0aW1lIGhlYXJ0YmVhdHMgbWF5IGZhaWwuDQoNCldvdWxkIGl0IG1h a2Ugc2Vuc2UgdG8gYWRkIHRvIHRoZSBzaWduYWwgY2hhbm5lbCBhbiBleHRyYSBwYXJhbWV0ZXIg dGhhdCB0aGUgRE9UUyBzZXJ2ZXIgY2FuIHNlbmQgdG8gdGhlIGNsaWVudCBpbiBhbnkgcmVzcG9u c2UgaW4gdGhlIGZvcm0gb2YNCuKAnGxhc3QtcmVzdGFydGVk4oCdIDogc2Vjb25kcy1zaW5jZS1l cG9jaA0KV2hpY2ggdGhlIGNsaWVudCBjYW4gdXNlIHRvIGRldGVjdGVkIHRoZSByZXN0YXJ0Lg0K DQpbTWVkXSBXZSB1c2VkIHRvIGhhdmUgYW4gZXBvY2gtYmFzZWQgYXBwcm9hY2ggZm9yIGEgc3Rh dGVmdWxsIHNlcnZpY2UgKHNlZSBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjg4NyNz ZWN0aW9uLTguNSkuIFRoZSBkZXRhaWxzIGFyZSBub3QgcmVzdHJpY3RlZCB0byBqdXN0IHNpZ25h bGxpbmcgdGhlIGVwb2NoIHZhbHVlIGJ1dCB0byB0aGUgbG9naWMgdG8gaGFuZGxlIGl0IGF0IHRo ZSBjbGllbnQgc2lkZS4gRnVydGhlciwgdGhlcmUgYXJlIHNvbWUgYXNwZWN0cyB0byBiZSB0YWtl biBpbnRvIGFjY291bnQgd2hlbiBjb25maWd1cmluZyByZWR1bmRhbmN5IHNlcnZlcnMgd2hlbiBh biBhbnljYXN0IGFkZHJlc3MgaXMgdXNlZC4gSWYgdGhlIHNhbWUgaW5pdGlhbCBlcG9jaCB2YWx1 ZSBpcyBjb25maWd1cmVkLCB0aGUgY2xpZW50IG1heSBub3QgZGV0ZWN0IGEgYmFja3VwIHNlcnZl ciBpcyB1c2VkIGFuZCBoZW5jZSBtYXkgbm90IHJlaW5zdGFsbCBzdGF0ZS4uLiBBIHR3ZWFrIGlz IHRvIGNvbmZpZ3VyZSBkaXN0aW5jdCBlcG9jaCB2YWx1ZXMgKGUuZy4sICsvLSAyNGggZGlmZmVy ZW5jZSBiZXR3ZWVuIGEgc2VydmVyIHJlZHVuZGFuY3kgZ3JvdXApLg0KDQpUaGUgZXBvY2ggaXMg anVzdGlmaWVkIGZvciA2ODg3IGJlY2F1c2Ugd2Ugd2FudGVkIHRvIHJlY292ZXIgc3RhdGUgbG9z cywgd2hpbGUgaW4gdGhlIERPVFMgY2FzZSB3ZSBkb27igJl0IGhhdmUgdGhlIHNhbWUgbW9kZWwg Z2l2ZW4gdGhhdCwgYXMgeW91IHJpZ2h0ZnVsbHkgc2FpZCBhYm92ZSwgdGhlIGN1cnJlbnQgYWN0 aXZlIG1pdGlnYXRpb25zIGNhbiBiZSByZWJ1aWx0IGF0IHRoZSBzZXJ2ZXIgc2lkZSB3aXRob3V0 IGludm9sdmluZyBjbGllbnRzLg0KDQpbSm9uXSBTbyB0aGlzIG1ldGhvZCBzZXRzIGVwb2NoIHRp bWUgYmFjayB0byAwIHdoZW5ldmVyIHRoZXJlIGlzIGEgcmVzdGFydCwNCltNZWRdIFllcy4gVGhl IGVwb2NoIGlzIHJlc2V0IGVhY2ggdGltZSB0aGUgc3RhdGUgaXMgbG9zdCBhdCB0aGUgc2VydmVy IHNpZGUuDQoNCnJhdGhlciB0aGF0IHJlcG9ydCBvbiB0aGUgbnVtYmVyIG9mIHNlY29uZHMgc2lu Y2UgSmFuIDEgMTk3MC4gICBUaGF0IEkgY2FuIGhhbmRsZS4gIEhvd2V2ZXIgYW55Y2FzdCAodGhv dWdoIHJlZHVuZGFudCBzZXJ2ZXJzIGFyZSBjdXJyZW50bHkgb3V0IG9mIHNwZWMpIHdoZXJlIDIg b3IgbW9yZSBzZXJ2ZXJzIHJlc3RhcnQgYW5kIHVwZGF0ZSB0aGUgc3RhcnQgdGltZSBhdCBleGFj dGx5IHRoZSBzYW1lIHRpbWUgaXMgcG9zc2libGUsIGJ1dCB1bmxpa2VseS4gIFRoaXMgY291bGQg YmUgaGFuZGxlZCBieSB0aGUgYW55Y2FzdCBzZXJ2ZXJzIGNvbW11bmljYXRpbmcgYW5kIHNlZWlu ZyB0aGV5IGJvdGggaGF2ZSB0aGUgc2FtZSBzdGFydCB0aW1lIHNvIG9uZSBiYWNrcyBvZmYgKGlu IHRpbWUgdGVybXMpLg0KDQpbSm9uXSBJ4oCZbSBqdXN0IGludGVyZXN0ZWQgaW4gaG93IHRvIHJl Y292ZXIgT2JzZXJ2ZSBsb3NzLg0KW01lZF0gSeKAmW0gbm90IGNvbnZpbmNlZCB0aGlzIGlzIHJl YWxseSBuZWVkZWQgZ2l2ZW4gdGhhdCBhY3RpdmUgbWl0aWdhdGlvbnMgYXJlIG5vdCBjb25jZXJu ZWQgd2l0aCB0aGlzIGZhaWx1cmUgc2NlbmFyaW8uDQoNCiAgSSBhcHByZWNpYXRlIGluIHBlYWNl IHRpbWUgdGhlcmUgbWF5IG5vdCBiZSBhbnkgRE9UUyBjbGllbnQgcmVxdWVzdHMgKG9yIGhlYXJ0 YmVhdCkgZm9yIGEgbG9uZyB0aW1lLi4uDQoNCknigJltIG9wZW4gdG8gc3VnZ2VzdGlvbnMuDQoN ClJlZ2FyZHMNCg0KSm9uDQoNCg0KDQoNCg== --_000_BN6PR16MB14253628B33D44ADA7FA7002EA900BN6PR16MB1425namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpEZW5nWGlhbjsNCglwYW5vc2UtMToy IDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OiJcQERlbmdYaWFuIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250 LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDMgNSA0IDQg MiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFs LCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0K CWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJ bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoi SFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30N CnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxl LW5hbWU6bXNvbm9ybWFsOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5 OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10 eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9y OndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29u YWw7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgljb2xvcjpibGFjazsNCglmb250LXdl aWdodDpub3JtYWw7DQoJZm9udC1zdHlsZTpub3JtYWw7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7 bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2Vy aWY7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyMg0KCXttc28tc3R5bGUtdHlw ZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciOw0KCWNvbG9yOmJsYWNrOw0K CWZvbnQtd2VpZ2h0Om5vcm1hbDsNCglmb250LXN0eWxlOm5vcm1hbDt9DQpzcGFuLkVtYWlsU3R5 bGUyMw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTI0DQoJe21z by1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm Ow0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjUNCgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2lu ZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyNg0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCnNw YW4uRW1haWxTdHlsZTI3DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5 OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMjgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUzMQ0KCXttc28t c3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7 bXNvLXN0eWxlLW5hbWU6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlv cml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFt aWx5OiJDb3VyaWVyIE5ldyI7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhw b3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6 ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5X b3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0 ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEw MjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNo YXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAv Pg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFu Zz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNl Y3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1s YW5ndWFnZTpaSC1DTiI+SGkgSm9uLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5QbGVhc2Ugc2VlIGlubGluZSBbVFJdPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGEgbmFtZT0iX01haWxFbmRD b21wb3NlIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvYT48L3A+DQo8c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJrOl9NYWls RW5kQ29tcG9zZSI+PC9zcGFuPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6 c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGlu ZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHls ZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHls ZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2Vz QGlldGYub3JnXQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5Kb24gU2hhbGxvdzxicj4NCjxiPlNlbnQ6 PC9iPiBGcmlkYXksIE1heSAxOCwgMjAxOCAyOjE2IFBNPGJyPg0KPGI+VG86PC9iPiBLb25kYSwg VGlydW1hbGVzd2FyIFJlZGR5ICZsdDtUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29t Jmd0OzsgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTsgZG90c0BpZXRmLm9yZzxicj4NCjxi PlN1YmplY3Q6PC9iPiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBP YnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPGRpdj4NCjx0YWJsZSBjbGFzcz0iTXNvTm9ybWFsVGFibGUiIGJvcmRlcj0iMSIgY2VsbHNw YWNpbmc9IjMiIGNlbGxwYWRkaW5nPSIwIiBzdHlsZT0iYmFja2dyb3VuZDojRjNGRjMzO2JvcmRl cjpzb2xpZCAjOUI5QTg3IDEuNXB0Ij4NCjx0Ym9keT4NCjx0cj4NCjx0ZCBzdHlsZT0iYm9yZGVy Om5vbmU7cGFkZGluZzouNzVwdCAuNzVwdCAuNzVwdCAuNzVwdCI+DQo8cD48c3Ryb25nPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5 QjhCM0UiPkNBVVRJT048L3NwYW4+PC9zdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZx dW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzlCOEIzRSI+Ojwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFj ayI+IEV4dGVybmFsIGVtYWlsLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3Blbg0KIGF0dGFjaG1l bnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQg aXMgc2FmZS48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7 LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvdGQ+DQo8L3RyPg0KPC90Ym9k eT4NCjwvdGFibGU+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0eWxl PSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJtc28tZmFyZWFz dC1sYW5ndWFnZTpaSC1DTiI+DQo8aHIgc2l6ZT0iMyIgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50 ZXIiPg0KPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhpIFRpcnU8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNv bG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+U2VlIGlubGlu ZSBbSm9uMl08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0i Y29sb3I6IzFGNDk3RCI+UmVnYXJkczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Kb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4g MGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28tZmFy ZWFzdC1sYW5ndWFnZTpFTi1HQiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1m YXJlYXN0LWxhbmd1YWdlOkVOLUdCIj4gRG90cyBbbWFpbHRvOg0KPGEgaHJlZj0ibWFpbHRvOmRv dHMtYm91bmNlc0BpZXRmLm9yZyI+ZG90cy1ib3VuY2VzQGlldGYub3JnPC9hPl0gPGI+T24gQmVo YWxmIE9mDQo8L2I+S29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeTxicj4NCjxiPlNlbnQ6PC9iPiAx NyBNYXkgMjAxOCAxNzowNTxicj4NCjxiPlRvOjwvYj4gSm9uIFNoYWxsb3c7IDxhIGhyZWY9Im1h aWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFu Z2UuY29tPC9hPjsNCjxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3Jn PC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jl c3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1D TiI+W0pvbjFdIEFncmVlZCB0aGUgRE9UUyBzZXJ2ZXIgY2Fubm90IHNlbnQgYW55dGhpbmcgdGhh dCBpcyB1bnNvbGljaXRlZCBkdWUgdG8gbG9zcyBvZiBjcnlwdG9ncmFwaGljIHN0YXRlLiZuYnNw OyBIb3dldmVyLCBpZiB0aGUgRE9UUyBzZXJ2ZXIgY2FuIHNlbmQgYmFjayBpbiBhIHJlc3BvbnNl IHRvIGEgY2xpZW50IHJlcXVlc3QNCiBzb21ldGhpbmcgdGhhdCBzdGF0ZXMg4oCcSSByZXN0YXJ0 ZWQgcmVjZW50bHkgQCBzdWNoIGEgdGltZeKAnSwgdGhlIGNsaWVudCB3aWxsIGtub3cgd2hldGhl ciB0aGUgbWlzc2luZyBoZWFydGJlYXRzIHdlcmUgZG93biB0byBqdXN0IGEgZmxha3kgbmV0d29y aywgb3IgdGhlIG1pc3NpbmcgaGVhcnRiZWF0cyB3ZXJlIGR1ZSB0byBhIHNlcnZlciByZXN0YXJ0 LCBhbmQgc28gcmUtc3Vic2NyaWJlIG5lZWRlZCBmb3IgYWxsIHRoZSByZXNvdXJjZXMgdGhhdA0K IHRoZSBjbGllbnQgd2FudHMgdG8gbW9uaXRvci4mbmJzcDsgSSBkbyBub3Qgd2FudCB0aGUgRE9U UyBjbGllbnQgdG8ga2VlcCBvbiBkb2luZyByZS1zdWJzY3JpYmUgY29tcG91bmRpbmcgdGhlIG5l dHdvcmsgZmxha2luZXNzIHdoZW4gdW5kZXIgYXR0YWNrLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpa SC1DTiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5bUl0gVGhlIGZpcnN0IHR3 byBzZW50ZW5jZXMgY29udHJhZGljdCBlYWNoIG90aGVyLiBIb3cgY2FuIHRoZSBzZXJ2ZXIgc2Vu ZCBhbnkgZGF0YSBvbiB0aGUgb2xkIHNlc3Npb24gPw0KPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVh c3QtbGFuZ3VhZ2U6WkgtQ04iPltKb24yXSBJIGFjdHVhbGx5IHdhcyB0aGlua2luZyB0aGF0IHRo ZSByZXNwb25zZSB3YXMgc2VudCBhZnRlciB0aGUgbmV3IHNlc3Npb24gd2FzIGVzdGFibGlzaGVk LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+QW5kIEkgZG9u4oCZdCB1bmRlcnN0YW5kIHRo ZSB2YWx1ZSBvZiBzZW5kaW5nIOKAnEkgcmVzdGFydGVkIHJlY2VudGx5IEBzdWNoIGEgdGltZeKA nSBpbiB0aGUgbmV3IChEKVRMUyBzZXNzaW9uLiwgdGhlIGNsaWVudCBhbnl3YXlzIGhhcyB0byBy ZXNlbmQgdGhlIGxpc3Qgb2YgYWN0aXZlIG1pdGlnYXRpb25zIGl0IHdpc2hlcyB0byBvYnNlcnZl IGluDQogdGhlIG5ldyBzZXNzaW9uIChpcnJlc3BlY3RpdmUgb2YgdGhlIHJlYXNvbiB0aGUgc2Vz c2lvbiBpcyBkaXNjb25uZWN0ZWQpLiBBIHNlc3Npb24gY291bGQgYmUgZGlzY29ubmVjdGVkIGJl Y2F1c2Ugb2YgdmFyaW91cyBvdGhlciByZWFzb25zIChlLmcuIE5BVCByZWxvYWQpLjxzcGFuIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFu Z3VhZ2U6WkgtQ04iPltKb24yXSZuYnNwOyBPSywgc28gd2hlbmV2ZXIgYSBuZXcgc2Vzc2lvbiBp cyBzdGFydGVkIGZvciB3aGF0ZXZlciByZWFzb24sIHRoZXJlIG5lZWRzIHRvIGJlIGEgcmVzZW5k IG9mIGFjdGl2ZSBtaXRpZ2F0aW9ucy4mbmJzcDsNCjwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWZh cmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5bVFJdIE5vLCBJIG1lYW50IFRoZSBET1RTIGNs aWVudCBpbiB0aGUgbmV3IChEKVRMUyBzZXNzaW9uIGhhcyB0byBzZW5kIEdFVCByZXF1ZXN0IHdp dGggT2JzZXJ2ZSBvcHRpb24gdG8gcmVjZWl2ZSB1bnNvbGljaXRlZCBub3RpZmljYXRpb25zIG9m IGF0dGFjayBtaXRpZ2F0aW9uIHN0YXR1cyBvZiBhY3RpdmUgbWl0aWdhdGlvbiByZXF1ZXN0cyBm cm9tIHRoZSBET1RTIHNlcnZlci4gPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4tVGlydTxvOnA+PC9vOnA+PC9zcGFuPjwv cHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1 YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1D TiI+SG93ZXZlciwgSSBoYXZlIG5vdCBmb3VuZCBhbnl3aGVyZSBpbiB0aGUgc2lnbmFsIC8gcmVx dWlyZW1lbnRzIC8gYXJjaGl0ZWN0dXJlIHdoZXJlIHRoaXMgaXMgc3VnZ2VzdGVkIChidXQgbWF5 IGhhdmUgc2VhcmNoZWQgb24gdGhlIHdyb25nIGtleXdvcmRzISkgSSB0aGluayB0aGF0IHRoaXMg bmVlZHMgdG8gYmUgc3RhdGVkDQogc29tZXdoZXJlLCBldmVuIHRob3VnaCBpdCBpcyBvYnZpb3Vz IGlmIHlvdSB0aGluayBhYm91dCBpdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFn ZTpaSC1DTiI+fkpvbjI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFy ZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4t VGlydTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVw dDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGlu IDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6WkgtQ04iPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6WkgtQ04iPiBKb24gU2hhbGxvdyBbPGEgaHJlZj0ibWFpbHRvOnN1cGpwcy1pZXRm QGpwc2hhbGxvdy5jb20iPm1haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tPC9hPl0NCjxi cj4NCjxiPlNlbnQ6PC9iPiBUaHVyc2RheSwgTWF5IDE3LCAyMDE4IDg6NTQgUE08YnI+DQo8Yj5U bzo8L2I+IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgJmx0OzxhIGhyZWY9Im1haWx0bzpUaXJ1 bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tIj5UaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBN Y0FmZWUuY29tPC9hPiZndDs7DQo8YSBocmVmPSJtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3Jh bmdlLmNvbSI+bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT47IDxhIGhyZWY9Im1haWx0 bzpkb3RzQGlldGYub3JnIj4NCmRvdHNAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+ IFJFOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGln YXRpb25zL0NvbmZpZ3VyYXRpb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHRh YmxlIGNsYXNzPSJNc29Ob3JtYWxUYWJsZSIgYm9yZGVyPSIxIiBjZWxsc3BhY2luZz0iMyIgY2Vs bHBhZGRpbmc9IjAiIHN0eWxlPSJiYWNrZ3JvdW5kOiNGM0ZGMzM7Ym9yZGVyOnNvbGlkICM5QjlB ODcgMS41cHQiPg0KPHRib2R5Pg0KPHRyPg0KPHRkIHN0eWxlPSJib3JkZXI6bm9uZTtwYWRkaW5n Oi43NXB0IC43NXB0IC43NXB0IC43NXB0Ij4NCjxwPjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzlCOEIzRSI+Q0FVVElP Tjwvc3Bhbj48L3N0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojOUI4QjNFIj46PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj4gRXh0ZXJuYWwg ZW1haWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuDQogYXR0YWNobWVudHMgdW5sZXNzIHlv dSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLjwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0KPC90YWJsZT4N CjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImNlbnRlciIgc3R5bGU9InRleHQtYWxpZ246 Y2VudGVyIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpI LUNOIj4NCjxociBzaXplPSIzIiB3aWR0aD0iMTAwJSIgYWxpZ249ImNlbnRlciI+DQo8L3NwYW4+ PC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBz dHlsZT0iY29sb3I6IzFGNDk3RCI+SGkgVGlydSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+U2VlIGlubGluZSBbSm9uMV08bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3 RCI+UmVnYXJkczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxl PSJjb2xvcjojMUY0OTdEIj5Kb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFn ZTpFTi1HQiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1 YWdlOkVOLUdCIj4gRG90cyBbbWFpbHRvOg0KPGEgaHJlZj0ibWFpbHRvOmRvdHMtYm91bmNlc0Bp ZXRmLm9yZyI+ZG90cy1ib3VuY2VzQGlldGYub3JnPC9hPl0gPGI+T24gQmVoYWxmIE9mDQo8L2I+ S29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeTxicj4NCjxiPlNlbnQ6PC9iPiAxNyBNYXkgMjAxOCAx NjowMzxicj4NCjxiPlRvOjwvYj4gSm9uIFNoYWxsb3c7IDxhIGhyZWY9Im1haWx0bzptb2hhbWVk LmJvdWNhZGFpckBvcmFuZ2UuY29tIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPC9hPjsN CjxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxi PlN1YmplY3Q6PC9iPiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBP YnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkhpIEpvbiw8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFu Z3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+VGhpcyBzY2Vu YXJpbyBpcyBhbHJlYWR5IGRpc2N1c3NlZCBpbiBTZWN0aW9uIDQuNy4gV2hlbiB0aGUgRERvUyBt aXRpZ2F0aW9uIGlzIGluIHByb2dyZXNzIGFuZCBhZnRlciB0aGUg4oCYbWlzc2luZy1oYi1hbGxv d2Vk4oCZIHRocmVzaG9sZCBpcyByZWFjaGVkLCB0aGUgRE9UUyBjbGllbnQgd2lsbCBjb250aW51 ZSB0byB1c2UgdGhlIGV4aXN0aW5nDQogKEQpVExTIHNlc3Npb24gdG8gc2VuZCBoZWFydGJlYXQg cmVxdWVzdHMgdG8gdGhlIHNlcnZlciBhbmQgYXQgdGhlIHNhbWUgdGltZSB0cnkgdG8gZXN0YWJs aXNoIGEgbmV3IChEKVRMUyBzZXNzaW9uIHdpdGggRE9UUyBzZXJ2ZXIuDQo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3 RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+W0pvbjFdIEkgZnVsbHkgdW5kZXJzdGFuZCB0 aGF0PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5GdXJ0aGVyLCBpZiB0aGUgc2VydmVyIHJl c3RhcnRzLCAoRClUTFMgc3RhdGUgaXMgbG9zdCBvbiB0aGUgc2VydmVyIGFuZCB0aGUgc2VydmVy IGRvZXMgbm90IGhhdmUgdGhlIGNyeXB0b2dyYXBoaWMgc3RhdGUgdG8gc2VuZCDigJhyZS1zdWJz Y3JpYmXigJkgb24gdGhlIG9sZCBzZXNzaW9uLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6WkgtQ04iPltKb24xXSBBZ3JlZWQgdGhlIERPVFMgc2VydmVyIGNhbm5vdCBzZW50 IGFueXRoaW5nIHRoYXQgaXMgdW5zb2xpY2l0ZWQgZHVlIHRvIGxvc3Mgb2YgY3J5cHRvZ3JhcGhp YyBzdGF0ZS4mbmJzcDsgSG93ZXZlciwgaWYgdGhlIERPVFMgc2VydmVyIGNhbiBzZW5kIGJhY2sg aW4gYSByZXNwb25zZSB0byBhIGNsaWVudCByZXF1ZXN0DQogc29tZXRoaW5nIHRoYXQgc3RhdGVz IOKAnEkgcmVzdGFydGVkIHJlY2VudGx5IEAgc3VjaCBhIHRpbWXigJ0sIHRoZSBjbGllbnQgd2ls bCBrbm93IHdoZXRoZXIgdGhlIG1pc3NpbmcgaGVhcnRiZWF0cyB3ZXJlIGRvd24gdG8ganVzdCBh IGZsYWt5IG5ldHdvcmssIG9yIHRoZSBtaXNzaW5nIGhlYXJ0YmVhdHMgd2VyZSBkdWUgdG8gYSBz ZXJ2ZXIgcmVzdGFydCwgYW5kIHNvIHJlLXN1YnNjcmliZSBuZWVkZWQgZm9yIGFsbCB0aGUgcmVz b3VyY2VzIHRoYXQNCiB0aGUgY2xpZW50IHdhbnRzIHRvIG1vbml0b3IuJm5ic3A7IEkgZG8gbm90 IHdhbnQgdGhlIERPVFMgY2xpZW50IHRvIGtlZXAgb24gZG9pbmcgcmUtc3Vic2NyaWJlIGNvbXBv dW5kaW5nIHRoZSBuZXR3b3JrIGZsYWtpbmVzcyB3aGVuIHVuZGVyIGF0dGFjay48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFG NDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+fkpvbjE8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3Vh Z2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+LVRpcnU8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZh cmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzow aW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpI LUNOIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpI LUNOIj4gSm9uIFNoYWxsb3cgWzxhIGhyZWY9Im1haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cu Y29tIj5tYWlsdG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbTwvYT5dDQo8YnI+DQo8Yj5TZW50 OjwvYj4gVGh1cnNkYXksIE1heSAxNywgMjAxOCAxOjIxIFBNPGJyPg0KPGI+VG86PC9iPiBLb25k YSwgVGlydW1hbGVzd2FyIFJlZGR5ICZsdDs8YSBocmVmPSJtYWlsdG86VGlydW1hbGVzd2FyUmVk ZHlfS29uZGFATWNBZmVlLmNvbSI+VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbTwv YT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iPm1v aGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208L2E+OyA8YSBocmVmPSJtYWlsdG86ZG90c0BpZXRm Lm9yZyI+DQpkb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSRTogW0RvdHNd IERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25m aWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjx0YWJsZSBjbGFzcz0i TXNvTm9ybWFsVGFibGUiIGJvcmRlcj0iMSIgY2VsbHNwYWNpbmc9IjMiIGNlbGxwYWRkaW5nPSIw IiBzdHlsZT0iYmFja2dyb3VuZDojRjNGRjMzO2JvcmRlcjpzb2xpZCAjOUI5QTg3IDEuNXB0Ij4N Cjx0Ym9keT4NCjx0cj4NCjx0ZCBzdHlsZT0iYm9yZGVyOm5vbmU7cGFkZGluZzouNzVwdCAuNzVw dCAuNzVwdCAuNzVwdCI+DQo8cD48c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPkNBVVRJT048L3NwYW4+PC9z dHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6IzlCOEIzRSI+Ojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7 QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+IEV4dGVybmFsIGVtYWlsLiBEbyBu b3QgY2xpY2sgbGlua3Mgb3Igb3Blbg0KIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXpl IHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS48L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8ZGl2IGNsYXNz PSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNw YW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+DQo8aHIg c2l6ZT0iMyIgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9zcGFuPjwvZGl2Pg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9y OiMxRjQ5N0QiPkhpIFRpcnUsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkl0IGlzIGEgY29ybmVyIHJlY292ZXJ5IGNhc2UuJm5i c3A7IFRoZSBET1RTIGNsaWVudCBjYW4gZGV0ZWN0IHRoYXQgdGhlIERPVFMgc2VydmVyIGhhcyBn b25lIGF3YXkgKHVzaW5nIGhlYXJ0YmVhdHMpIGFuZCByZS1zdWJzY3JpYmUgdG8gYWxsIHRoZSBy ZXNvdXJjZXMgdGhhdCB0aGUgRE9UUyBjbGllbnQgd2FudHMgdG8gT2JzZXJ2ZSBvbiBkZXRlY3Rp b24NCiB0aGF0IHRoZSBET1RTIHNlcnZlciBpcyBiYWNrPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhvd2V2ZXIsIHdoZW4gbWl0 aWdhdGluZywgdGhlcmUgaXMgYSBsaWtlbGlob29kIHRoYXQgaGVhcnRiZWF0cyB3aWxsIHRpbWUg b3V0IGFuZCBJIGFtIG5vdCBzdXJlIHRoYXQgaXQgaXMgd2lzZSB0byDigJxyZS1zdWJzY3JpYmXi gJ0gd2hlbiB0aGUgY29ubmVjdGlvbnMgYXJlIHJlLWVzdGFibGlzaGVkIGFzIHRoZSBuZXR3b3Jr IHBhdGggbWF5IHN0aWxsDQogYmUgZmxha3kgYW5kIGFkZGluZyBleHRyYSB0cmFmZmljIG1heSBi ZSBwcm9ibGVtYXRpYy4mbmJzcDsgTXkgc3VnZ2VzdGlvbiBvZiBhbiBlcG9jaCB0aW1lIGJlaW5n IHJlcG9ydGVkIGJ5IHRoZSBET1RTIHNlcnZlciB3YXMgYSB3YXkgb2YgZGV0ZXJtaW5pbmcgd2hl dGhlciDigJxyZS1zdWJzY3JpYmXigJ0gd2FzIHJlcXVpcmVkIG9yIG5vdC48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+UmVnYXJk czxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjoj MUY0OTdEIj5Kb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNv bGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+ RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdC Ij4gRG90cyBbbWFpbHRvOg0KPGEgaHJlZj0ibWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZyI+ ZG90cy1ib3VuY2VzQGlldGYub3JnPC9hPl0gPGI+T24gQmVoYWxmIE9mDQo8L2I+S29uZGEsIFRp cnVtYWxlc3dhciBSZWRkeTxicj4NCjxiPlNlbnQ6PC9iPiAxNiBNYXkgMjAxOCAxNjowNTxicj4N CjxiPlRvOjwvYj4gPGEgaHJlZj0ibWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20i Pm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208L2E+OyBKb24gU2hhbGxvdzsNCjxhIGhyZWY9 Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6 PC9iPiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBt aXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNv LWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkkgZG9u4oCZdCBnZXQgdGhlIHByb2JsZW0uIElmIHRo ZSBzZXJ2ZXIgcmVzdGFydHMsIChEKVRMUyBzdGF0ZSB3aWxsIGJlIGxvc3QgYW5kIHNlcnZlciB3 aWxsIHJlamVjdCBoZWFydGJlYXQgcmVxdWVzdHMgZnJvbSB0aGUgY2xpZW50IChlaXRoZXIgc2ls ZW50bHkgb3Igc2VuZCBhIGZhdGFsIGFsZXJ0IHRvIHRoZSBjbGllbnQpLiBET1RTIGNsaWVudA0K IHdpbGwgaGF2ZSB0byBmb2xsb3cgdGhlIHN0ZXBzIGluIDxhIGhyZWY9Imh0dHBzOi8vdG9vbHMu aWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkjc2VjdGlvbi00 LjciPg0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwt Y2hhbm5lbC0xOSNzZWN0aW9uLTQuNzwvYT4gdG8gcmUtZXN0YWJsaXNoIChEKVRMUyBzZXNzaW9u IHdpdGggdGhlIERPVFMgc2VydmVyLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPi1UaXJ1PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdl OlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4w cHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0Ux RTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+RnJvbTo8L3Nw YW4+PC9iPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+IERvdHMgWzxh IGhyZWY9Im1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmciPm1haWx0bzpkb3RzLWJvdW5jZXNA aWV0Zi5vcmc8L2E+XQ0KPGI+T24gQmVoYWxmIE9mIDwvYj48YSBocmVmPSJtYWlsdG86bW9oYW1l ZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSI+bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT48 YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBNYXkgMTYsIDIwMTggNzoxNSBQTTxicj4NCjxi PlRvOjwvYj4gSm9uIFNoYWxsb3cgJmx0OzxhIGhyZWY9Im1haWx0bzpzdXBqcHMtaWV0ZkBqcHNo YWxsb3cuY29tIj5zdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tPC9hPiZndDs7DQo8YSBocmVmPSJt YWlsdG86ZG90c0BpZXRmLm9yZyI+ZG90c0BpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0Ojwv Yj4gUmU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0 aWdhdGlvbnMvQ29uZmlndXJhdGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8 dGFibGUgY2xhc3M9Ik1zb05vcm1hbFRhYmxlIiBib3JkZXI9IjEiIGNlbGxzcGFjaW5nPSIzIiBj ZWxscGFkZGluZz0iMCIgc3R5bGU9ImJhY2tncm91bmQ6I0YzRkYzMztib3JkZXI6c29saWQgIzlC OUE4NyAxLjVwdCI+DQo8dGJvZHk+DQo8dHI+DQo8dGQgc3R5bGU9ImJvcmRlcjpub25lO3BhZGRp bmc6Ljc1cHQgLjc1cHQgLjc1cHQgLjc1cHQiPg0KPHA+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojOUI4QjNFIj5DQVVU SU9OPC9zcGFuPjwvc3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPjo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiBFeHRlcm5h bCBlbWFpbC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4NCiBhdHRhY2htZW50cyB1bmxlc3Mg eW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlm Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L3RkPg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxl Pg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVyIiBzdHlsZT0idGV4dC1hbGln bjpjZW50ZXIiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6Wkgt Q04iPg0KPGhyIHNpemU9IjMiIHdpZHRoPSIxMDAlIiBhbGlnbj0iY2VudGVyIj4NCjwvc3Bhbj48 L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOmJsYWNrIj5SZS0sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6Ymxh Y2siPlBsZWFzZSBzZWUgaW5saW5lLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 Y29sb3I6YmxhY2siPkNoZWVycyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPk1lZDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpi bGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5v bmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0 Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0 REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48Yj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPkRl Jm5ic3A7Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxh bmd1YWdlOkZSIj4gSm9uIFNoYWxsb3cgWzxhIGhyZWY9Im1haWx0bzpzdXBqcHMtaWV0ZkBqcHNo YWxsb3cuY29tIj5tYWlsdG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbTwvYT5dDQo8YnI+DQo8 Yj5FbnZvecOpJm5ic3A7OjwvYj4gbWVyY3JlZGkgMTYgbWFpIDIwMTggMTQ6NDI8YnI+DQo8Yj7D gCZuYnNwOzo8L2I+IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE47IDxhIGhyZWY9Im1haWx0bzpk b3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPk9iamV0Jm5ic3A7OjwvYj4g UkU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdh dGlvbnMvQ29uZmlndXJhdGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxl PSJjb2xvcjojMUY0OTdEIj5IaSBNZWQsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlNlZSBpbmxpbmUuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlJlZ2FyZHM8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+Sm9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xp ZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPkZy b206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+ IERvdHMgW21haWx0bzoNCjxhIGhyZWY9Im1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmciPmRv dHMtYm91bmNlc0BpZXRmLm9yZzwvYT5dIDxiPk9uIEJlaGFsZiBPZg0KPC9iPjxhIGhyZWY9Im1h aWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFu Z2UuY29tPC9hPjxicj4NCjxiPlNlbnQ6PC9iPiAxNiBNYXkgMjAxOCAxMjo1NTxicj4NCjxiPlRv OjwvYj4gSm9uIFNoYWxsb3c7IDxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGll dGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNy YXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkhpIEpvbiwNCjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5QbGVhc2Ugc2VlIGlubGlu ZS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5DaGVlcnMs PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj5NZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlk IGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4w cHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gbGFuZz0iRlIi IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90Oyxz YW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOkZSIj5EZSZuYnNwOzo8L3NwYW4+PC9iPjxz cGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtU YWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpGUiI+IERvdHMgWzxh IGhyZWY9Im1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmciPm1haWx0bzpkb3RzLWJvdW5jZXNA aWV0Zi5vcmc8L2E+XQ0KPGI+RGUgbGEgcGFydCBkZTwvYj4gSm9uIFNoYWxsb3c8YnI+DQo8Yj5F bnZvecOpJm5ic3A7OjwvYj4gbWVyY3JlZGkgMTYgbWFpIDIwMTggMTI6MjQ8YnI+DQo8Yj7DgCZu YnNwOzo8L2I+IDxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9h Pjxicj4NCjxiPk9iamV0Jm5ic3A7OjwvYj4gW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3Rh cnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkZSIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1HQiI+SGkgdGhlcmUsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5Gb3IgdGhlIHNp Z25hbCBjaGFubmVsLCBpdCBpcyBlYXN5IHRvIG1haW50YWluIGEgcGVyc2lzdGVudCBsaXN0IG9m IGFjdGl2ZSBtaXRpZ2F0aW9ucy4mbmJzcDsgU2hvdWxkIHRoZSBET1RTIHNlcnZlciAodW5leHBl Y3RlZGx5KSBzdG9wIGFuZCByZXN0YXJ0LCB0aGVuIGl0IGlzIGVhc3kgdG8gcmVidWlsZCB0aGUg Y3VycmVudCBhY3RpdmUgbWl0aWdhdGlvbnMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7Y29sb3I6YmxhY2siPltNZWRdIFRoZSBsaXN0IG9mIGFjdGl2ZSBtaXRpZ2F0aW9u cyBpcyB0aGUg4oCcY29yZeKAnSBzdGF0ZSBkYXRhIHRvIGJlIG1haW50YWluZWQgYnkgYSBzZXJ2 ZXIuIElmIHdlIGFzc3VtZSB0aGF0IGxpc3QgY2FuIGJlIHJlbGlhYmx5IHJlYnVpbHQsIHRoZW4g dGhlcmUgaXMNCiBubyBleHRlbnNpb24gbmVlZGVkIHRvIHRoZSBzaWduYWwgY2hhbm5lbCB0byBo YW5kbGUgdGhpcyBmYWlsdXJlIGNhc2UuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25dIEFncmVlZC4mbmJzcDsgVGhpcyB3 YXMganVzdCBtZSBidWlsZGluZyB1cCB0aGUgYmFja2dyb3VuZCB0byB0aGUgc2NlbmFyaW8uPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t R0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+SG93ZXZlciwgdG8gcmVidWls ZCB0aGUgbGlzdCBvZiBhY3RpdmUgT2JzZXJ2YXRpb25zIG9mIHRoZSBjdXJyZW50IG1pdGlnYXRp b25zIC8gY29uZmlndXJhdGlvbiBjaGFuZ2VzIGlzIGNvbnNpZGVyYWJseSBtb3JlIGRpZmZpY3Vs dCBhcyB0aGUgRE9UUyBzZXJ2ZXIgd291bGQgYWxzbyBuZWVkIHRvIG1haW50YWluIGEgbGlzdCBv ZiBjbGllbnQgSVBzL3NvdXJjZSBwb3J0cyBldGMuDQogYWxvbmcgd2l0aCBUb2tlbnMgYW5kIFF1 ZXJpZXMgYW5kIChEKVRMUyBzdGF0ZSBzbyB0aGF0IHVuc29saWNpdGVkIE9ic2VydmUgcmVzcG9u c2VzIGNhbiBjb250aW51ZSB0byBiZSBzZW50IGJhY2sgdG8gdGhlIGNsaWVudHMuJm5ic3A7IEkg ZG9u4oCZdCByZWFsbHkgdGhpbmsgdGhhdCB0aGlzIGlzIGEgcHJhY3RpY2FsIGFzay48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gRmlyc3Qs IHRoaXMgY2FuIGJlIGNvbnNpZGVyZWQgYXMgZGVwbG95bWVudC1zcGVjaWZpYy4gQXMgc3VjaCBp biBzb21lIGRlcGxveW1lbnRzLCB0aGVyZSBpcyBubyBuZWVkIHRvIHN1cHBvcnQgYXV0b21hdGlj IG1lYW5zIHRvIGRldGVjdCBzdGF0ZSBsb3NzDQogYXQgdGhlIHNlcnZlciBzaWRlLiBTZWNvbmQs IGlzIGl0IHJlYWxseSBwcm9ibGVtYXRpYyBmb3IgdGhlIEREb1MgbWl0aWdhdGlvbiB0aGF0IGxp c3QgaXMgbG9zdCBieSBhIHNlcnZlcj8gSSBndWVzcywgdGhlIGFuc3dlciBpcyBubyBpZiB3ZSBh c3N1bWUgdGhlIGxpc3Qgb2YgbWl0aWdhdGlvbnMgdGhlbXNlbHZlcyBpcyBtYWludGFpbmVkLg0K PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPltKb25dIE15IGNvbmNlcm4gaXMgdGhhdCB0aGUgRE9UUyBjbGllbnRzIHdvdWxkIG5v dCBzZWUgdGhlIGNoYW5nZSBpbiBtaXRpZ2F0aW9uIHN0YXRlLCBvciB3b3VsZCBub3Qgc2VlIHRo YXQgdGhlcmUgaXMgYSBuZXcgc2lnbmFsIGNoYW5uZWwgY29uZmlndXJhdGlvbiAoaWYgdGhleSB3 ZXJlIGJlaW5nIE9ic2VydmVkKS4gVGhlIERPVFMgY2xpZW50L3NlcnZlcg0KIHdvdWxkIGJlIG91 dCBvZiBzeW5jIHdpdGggd2hhdCBpcyBoYXBwZW5pbmcgYW5kIHRoZSBET1RTIGNsaWVudCB3b3Vs ZCBub3QgbmVjZXNzYXJpbHkga25vdyB0aGF0IGl0IGhhcyB0byB0YWtlIHNvbWUgYWN0aW9uIHRv IGdldCBiYWNrIHRvIHRoZSBzdGF0ZSBiZWZvcmUgdGhlIERPVFMgc2VydmVyIG91dGFnZS48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gVGhl IGRvdHMgY2xpZW50IGhhcyBvdGhlciBtZWFucyB0byBrbm93IHRoZSBtaXRpZ2F0aW9uIHN0YXRl LiBUaGUgRE9UUyBjbGllbnQgY2FuIG9ic2VydmUgdGhlIHN0YXR1cyBsb2NhbGx5IChhbmQgcmVw b3J0IGl0IHRvIHRoZSBzZXJ2ZXIpIG9yIHNlbmQgYQ0KIHJlcXVlc3QgdG8gcmV0cmlldmUgdGhl IHN0YXR1cyBmcm9tIHRoZSBzZXJ2ZXIuIFRoZSBvdXQgb2Ygc3luY2ggaW4gb2JzZXJ2ZSBpcyBu b3QgdGhhdCBjcml0aWNhbCBmb3IgbWl0aWdhdGluZyBERG9TIGF0dGFja3MuICZuYnNwOzxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdC IiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkFzIHRoZSBET1RTIHNlcnZlciBy ZXN0YXJ0ZWQsIGV4aXN0aW5nIChEKVRMUyBzZXNzaW9ucyB1c2VkIGJ5IHRoZSBET1RTIGNsaWVu dCB3aWxsIGZhaWwuJm5ic3A7IFNvLCB0aGUgaGVhcnRiZWF0IG1lY2hhbmlzbSB3aWxsIGV2ZW50 dWFsbHkgdGltZSBvdXQgJm5ic3A7YW5kIEkgZ3Vlc3MgdGhhdCB0aGUgRE9UUyBjbGllbnQgc2hv dWxkIGRldGVjdCB0aGlzIGFuZCByZS1kbyBhbGwgb2YgdGhlDQogT2JzZXJ2ZSByZXF1ZXN0cyAo YWxvbmcgd2l0aCBtYWtpbmcgc3VyZSB0aGF0IGFsbCB0aGUgYWN0aXZlIG1pdGlnYXRpb25zIGFy ZSBhcyBleHBlY3RlZCkuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6YmxhY2siPltNZWRdIEluY2x1ZGluZyBjbGllbnRzIGluIG5ldHdvcmtzIHVuZGVyIGFjdGl2 ZSBhdHRhY2tzPyBJc27igJl0IHRoaXMgb3ZlcmxvYWRpbmcgdGhlIHNlcnZlciB3aGlsZSBkZWFs aW5nIHdpdGggb25nb2luZyBhdHRhY2tzPyAmbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+W0pvbl0gWWVzLCBpdCB3b3Vs ZCDigJMgaGVuY2UgSSBkaWQgbm90IHJlYWxseSB3YW50IHRvIGhhdmUgdG8gZG8gdGhpcyB3aGVu ZXZlciBhIGhlYXJ0YmVhdCBmYWlsZWQsIGJ1dCBvbmx5IGRvIGl0IHdoZW4gdGhlIERPVFMgY2xp ZW50IOKAnGtub3dz4oCdIHRoYXQgdGhlIHNlcnZlciBoYXMgaGFkIGFuIG91dGFnZS48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIg c3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5Ib3dldmVyIGluIFBlYWNlIHRpbWUg SGVhcnRiZWF0cyBtYXkgbm90IGJlaW5nIHVzZWQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkhvd2V2ZXIgYXQgTWl0aWdhdGlv biB0aW1lIGhlYXJ0YmVhdHMgbWF5IGZhaWwuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5Xb3VsZCBpdCBt YWtlIHNlbnNlIHRvIGFkZCB0byB0aGUgc2lnbmFsIGNoYW5uZWwgYW4gZXh0cmEgcGFyYW1ldGVy IHRoYXQgdGhlIERPVFMgc2VydmVyIGNhbiBzZW5kIHRvIHRoZSBjbGllbnQgaW4gYW55IHJlc3Bv bnNlIGluIHRoZSBmb3JtIG9mDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+4oCcbGFzdC1yZXN0YXJ0ZWTigJ0gOiBzZWNvbmRz LXNpbmNlLWVwb2NoPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tR0IiPldoaWNoIHRoZSBjbGllbnQgY2FuIHVzZSB0byBkZXRlY3RlZCB0 aGUgcmVzdGFydC48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gV2UgdXNlZCB0byBo YXZlIGFuIGVwb2NoLWJhc2VkIGFwcHJvYWNoIGZvciBhIHN0YXRlZnVsbCBzZXJ2aWNlIChzZWUN CjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2ODg3I3NlY3Rpb24tOC41 Ij5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjg4NyNzZWN0aW9uLTguNTwvYT4pLiBU aGUgZGV0YWlscyBhcmUgbm90IHJlc3RyaWN0ZWQgdG8ganVzdCBzaWduYWxsaW5nIHRoZSBlcG9j aCB2YWx1ZSBidXQgdG8gdGhlIGxvZ2ljIHRvIGhhbmRsZSBpdCBhdCB0aGUgY2xpZW50IHNpZGUu IEZ1cnRoZXIsIHRoZXJlIGFyZSBzb21lIGFzcGVjdHMNCiB0byBiZSB0YWtlbiBpbnRvIGFjY291 bnQgd2hlbiBjb25maWd1cmluZyByZWR1bmRhbmN5IHNlcnZlcnMgd2hlbiBhbiBhbnljYXN0IGFk ZHJlc3MgaXMgdXNlZC4gSWYgdGhlIHNhbWUgaW5pdGlhbCBlcG9jaCB2YWx1ZSBpcyBjb25maWd1 cmVkLCB0aGUgY2xpZW50IG1heSBub3QgZGV0ZWN0IGEgYmFja3VwIHNlcnZlciBpcyB1c2VkIGFu ZCBoZW5jZSBtYXkgbm90IHJlaW5zdGFsbCBzdGF0ZS4uLiBBIHR3ZWFrIGlzIHRvIGNvbmZpZ3Vy ZSBkaXN0aW5jdA0KIGVwb2NoIHZhbHVlcyAoZS5nLiwgJiM0MzsvLSAyNGggZGlmZmVyZW5jZSBi ZXR3ZWVuIGEgc2VydmVyIHJlZHVuZGFuY3kgZ3JvdXApLiA8bzpwPg0KPC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFj ayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5UaGUgZXBvY2ggaXMganVzdGlmaWVkIGZv ciA2ODg3IGJlY2F1c2Ugd2Ugd2FudGVkIHRvIHJlY292ZXIgc3RhdGUgbG9zcywgd2hpbGUgaW4g dGhlIERPVFMgY2FzZSB3ZSBkb27igJl0IGhhdmUgdGhlIHNhbWUgbW9kZWwgZ2l2ZW4gdGhhdCwg YXMgeW91IHJpZ2h0ZnVsbHkNCiBzYWlkIGFib3ZlLCB0aGUgY3VycmVudCBhY3RpdmUgbWl0aWdh dGlvbnMgY2FuIGJlIHJlYnVpbHQgYXQgdGhlIHNlcnZlciBzaWRlIHdpdGhvdXQgaW52b2x2aW5n IGNsaWVudHMuICZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25dIFNvIHRoaXMgbWV0aG9kIHNldHMgZXBvY2ggdGltZSBi YWNrIHRvIDAgd2hlbmV2ZXIgdGhlcmUgaXMgYSByZXN0YXJ0LA0KPC9zcGFuPjxzcGFuIGxhbmc9 IkVOLUdCIiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0g WWVzLiBUaGUgZXBvY2ggaXMgcmVzZXQgZWFjaCB0aW1lIHRoZSBzdGF0ZSBpcyBsb3N0IGF0IHRo ZSBzZXJ2ZXIgc2lkZS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxl PSJjb2xvcjojMUY0OTdEIj5yYXRoZXIgdGhhdCByZXBvcnQgb24gdGhlIG51bWJlciBvZiBzZWNv bmRzIHNpbmNlIEphbiAxIDE5NzAuICZuYnNwOyZuYnNwO1RoYXQgSSBjYW4gaGFuZGxlLiZuYnNw OyBIb3dldmVyIGFueWNhc3QgKHRob3VnaCByZWR1bmRhbnQgc2VydmVycyBhcmUgY3VycmVudGx5 IG91dCBvZiBzcGVjKSB3aGVyZSAyIG9yIG1vcmUgc2VydmVycyByZXN0YXJ0IGFuZCB1cGRhdGUN CiB0aGUgc3RhcnQgdGltZSBhdCBleGFjdGx5IHRoZSBzYW1lIHRpbWUgaXMgcG9zc2libGUsIGJ1 dCB1bmxpa2VseS4mbmJzcDsgVGhpcyBjb3VsZCBiZSBoYW5kbGVkIGJ5IHRoZSBhbnljYXN0IHNl cnZlcnMgY29tbXVuaWNhdGluZyBhbmQgc2VlaW5nIHRoZXkgYm90aCBoYXZlIHRoZSBzYW1lIHN0 YXJ0IHRpbWUgc28gb25lIGJhY2tzIG9mZiAoaW4gdGltZSB0ZXJtcykuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25dIEni gJltIGp1c3QgaW50ZXJlc3RlZCBpbiBob3cgdG8gcmVjb3ZlciBPYnNlcnZlIGxvc3MuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0Ii IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7O2NvbG9yOmJsYWNrIj5bTWVkXSBJ4oCZbSBub3QgY29udmluY2VkIHRoaXMgaXMgcmVhbGx5 IG5lZWRlZCBnaXZlbiB0aGF0IGFjdGl2ZSBtaXRpZ2F0aW9ucyBhcmUgbm90IGNvbmNlcm5lZCB3 aXRoIHRoaXMgZmFpbHVyZSBzY2VuYXJpby4gJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1HQiI+Jm5ic3A7IEkgYXBwcmVjaWF0ZSBpbiBwZWFjZSB0aW1lIHRoZXJl IG1heSBub3QgYmUgYW55IERPVFMgY2xpZW50IHJlcXVlc3RzIChvciBoZWFydGJlYXQpIGZvciBh IGxvbmcgdGltZS4uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+SeKAmW0gb3BlbiB0byBzdWdnZXN0aW9u cy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tR0IiPlJlZ2FyZHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkpvbjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdC Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BN6PR16MB14253628B33D44ADA7FA7002EA900BN6PR16MB1425namp_-- From nobody Sun May 20 20:47:31 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A0A2F1201FA for ; Sun, 20 May 2018 20:47:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n-68ZXz4q4Sk for ; Sun, 20 May 2018 20:47:26 -0700 (PDT) Received: from huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE932120727 for ; Sun, 20 May 2018 20:47:25 -0700 (PDT) Received: from LHREML710-CAH.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id 53DE41F3D56C3 for ; Mon, 21 May 2018 04:47:20 +0100 (IST) Received: from DGGEML423-HUB.china.huawei.com (10.1.199.40) by LHREML710-CAH.china.huawei.com (10.201.108.33) with Microsoft SMTP Server (TLS) id 14.3.382.0; Mon, 21 May 2018 04:47:20 +0100 Received: from DGGEML502-MBX.china.huawei.com ([169.254.2.118]) by dggeml423-hub.china.huawei.com ([10.1.199.40]) with mapi id 14.03.0382.000; Mon, 21 May 2018 11:47:13 +0800 From: "Xialiang (Frank, Network Integration Technology Research Dept)" To: "Konda, Tirumaleswar Reddy" , "Jon Shallow" , "mohamed.boucadair@orange.com" CC: "dots@ietf.org" Thread-Topic: [Dots] DOTS server crash/restart with Observed mitigations/Configuration Thread-Index: AdPs/+9TEvk/O5CYS8+qOpb9I1vXhAACuBlA//+KyQCAABG3AIAAFloAgAEZJICAAHiLgIAABfGAgAALdICAARetgIAAAxOA//sbQuA= Date: Mon, 21 May 2018 03:47:12 +0000 Message-ID: References: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <02ad01d3ed13$42a0c3b0$c7e24b10$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1C138@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <039101d3edb3$dd8de830$98a9b890$@jpshallow.com> <082d01d3edf3$1b1df3e0$5159dba0$@jpshallow.com> <0ad501d3ee84$ac1c83c0$04558b40$@jpshallow.com> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.134.159.76] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F12BD7E036DGGEML502MBXchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Dots] =?utf-8?b?562U5aSNOiAgRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3?= =?utf-8?q?ith_Observed_mitigations/Configuration?= X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 May 2018 03:47:30 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F12BD7E036DGGEML502MBXchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgVGlydSwNCkkgc2hhcmUgdGhlIHNhbWUgY29uY2VybiB3aXRoIEpvbiBhczoNCg0KSWYgZG90 cyBzZXZlciByZXN0YXJ0cywgYW5kIGxvc2VzIGFsbCB0aGUgbWl0aWdhdGlvbiBzdGF0dXMsIHRo ZW4gZG90cyBjbGllbnQgc2hvdWxkIHJlc2VuZCBhbGwgdGhlIGFjdGl2ZSBtaXRpZ2F0aW9uIHN0 YXR1cyB0byBpdC4gVGhlcmUgY2FuIGJlIHR3byB3YXkgZm9yIGl0Og0KDQoxKSAgICAgICBSZXNl bmQgbWl0aWdhdGlvbiByZXF1ZXN0cyBmb3IgYWxsIGFjdGl2ZSBtaXRpZ2F0aW9uOw0KDQoyKSAg ICAgICBEb3RzIGNsaWVudCBzeW5jIGFsbCB0aGUgYWN0aXZlIG1pdGlnYXRpb24gc3RhdHVzIHdp dGggc2VydmVyLg0KDQpJdOKAmXMgbm90IG9ubHkgYWJvdXQgdGhlIG9ic2VydmUgb3B0aW9uLg0K DQpUaGFua3MhDQoNCkIuUi4NCkZyYW5rDQrlj5Hku7bkuro6IERvdHMgW21haWx0bzpkb3RzLWJv dW5jZXNAaWV0Zi5vcmddIOS7o+ihqCBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5DQrlj5HpgIHm l7bpl7Q6IDIwMTjlubQ15pyIMTjml6UgMTY6NTcNCuaUtuS7tuS6ujogSm9uIFNoYWxsb3cgPHN1 cGpwcy1pZXRmQGpwc2hhbGxvdy5jb20+OyBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tOyBk b3RzQGlldGYub3JnDQrkuLvpopg6IFJlOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFy dCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24NCg0KSGkgSm9uLA0KDQpQ bGVhc2Ugc2VlIGlubGluZSBbVFJdDQoNCkZyb206IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNA aWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBKb24gU2hhbGxvdw0KU2VudDogRnJpZGF5LCBNYXkgMTgs IDIwMTggMjoxNiBQTQ0KVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgPFRpcnVtYWxlc3dh clJlZGR5X0tvbmRhQE1jQWZlZS5jb208bWFpbHRvOlRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1j QWZlZS5jb20+PjsgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86bW9oYW1lZC5i b3VjYWRhaXJAb3JhbmdlLmNvbT47IGRvdHNAaWV0Zi5vcmc8bWFpbHRvOmRvdHNAaWV0Zi5vcmc+ DQpTdWJqZWN0OiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNl cnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uDQoNCg0KQ0FVVElPTjogRXh0ZXJuYWwgZW1h aWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVj b2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS4NCg0KDQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KSGkgVGlydQ0KDQpTZWUgaW5saW5lIFtKb24y XQ0KDQpSZWdhcmRzDQoNCkpvbg0KDQpGcm9tOiBEb3RzIFttYWlsdG86IGRvdHMtYm91bmNlc0Bp ZXRmLm9yZzxtYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnPl0gT24gQmVoYWxmIE9mIEtvbmRh LCBUaXJ1bWFsZXN3YXIgUmVkZHkNClNlbnQ6IDE3IE1heSAyMDE4IDE3OjA1DQpUbzogSm9uIFNo YWxsb3c7IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208bWFpbHRvOm1vaGFtZWQuYm91Y2Fk YWlyQG9yYW5nZS5jb20+OyBkb3RzQGlldGYub3JnPG1haWx0bzpkb3RzQGlldGYub3JnPg0KU3Vi amVjdDogUmU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQg bWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0KDQpbSm9uMV0gQWdyZWVkIHRoZSBET1RTIHNlcnZl ciBjYW5ub3Qgc2VudCBhbnl0aGluZyB0aGF0IGlzIHVuc29saWNpdGVkIGR1ZSB0byBsb3NzIG9m IGNyeXB0b2dyYXBoaWMgc3RhdGUuICBIb3dldmVyLCBpZiB0aGUgRE9UUyBzZXJ2ZXIgY2FuIHNl bmQgYmFjayBpbiBhIHJlc3BvbnNlIHRvIGEgY2xpZW50IHJlcXVlc3Qgc29tZXRoaW5nIHRoYXQg c3RhdGVzIOKAnEkgcmVzdGFydGVkIHJlY2VudGx5IEAgc3VjaCBhIHRpbWXigJ0sIHRoZSBjbGll bnQgd2lsbCBrbm93IHdoZXRoZXIgdGhlIG1pc3NpbmcgaGVhcnRiZWF0cyB3ZXJlIGRvd24gdG8g anVzdCBhIGZsYWt5IG5ldHdvcmssIG9yIHRoZSBtaXNzaW5nIGhlYXJ0YmVhdHMgd2VyZSBkdWUg dG8gYSBzZXJ2ZXIgcmVzdGFydCwgYW5kIHNvIHJlLXN1YnNjcmliZSBuZWVkZWQgZm9yIGFsbCB0 aGUgcmVzb3VyY2VzIHRoYXQgdGhlIGNsaWVudCB3YW50cyB0byBtb25pdG9yLiAgSSBkbyBub3Qg d2FudCB0aGUgRE9UUyBjbGllbnQgdG8ga2VlcCBvbiBkb2luZyByZS1zdWJzY3JpYmUgY29tcG91 bmRpbmcgdGhlIG5ldHdvcmsgZmxha2luZXNzIHdoZW4gdW5kZXIgYXR0YWNrLg0KDQpbUl0gVGhl IGZpcnN0IHR3byBzZW50ZW5jZXMgY29udHJhZGljdCBlYWNoIG90aGVyLiBIb3cgY2FuIHRoZSBz ZXJ2ZXIgc2VuZCBhbnkgZGF0YSBvbiB0aGUgb2xkIHNlc3Npb24gPw0KW0pvbjJdIEkgYWN0dWFs bHkgd2FzIHRoaW5raW5nIHRoYXQgdGhlIHJlc3BvbnNlIHdhcyBzZW50IGFmdGVyIHRoZSBuZXcg c2Vzc2lvbiB3YXMgZXN0YWJsaXNoZWQuDQpBbmQgSSBkb27igJl0IHVuZGVyc3RhbmQgdGhlIHZh bHVlIG9mIHNlbmRpbmcg4oCcSSByZXN0YXJ0ZWQgcmVjZW50bHkgQHN1Y2ggYSB0aW1l4oCdIGlu IHRoZSBuZXcgKEQpVExTIHNlc3Npb24uLCB0aGUgY2xpZW50IGFueXdheXMgaGFzIHRvIHJlc2Vu ZCB0aGUgbGlzdCBvZiBhY3RpdmUgbWl0aWdhdGlvbnMgaXQgd2lzaGVzIHRvIG9ic2VydmUgaW4g dGhlIG5ldyBzZXNzaW9uIChpcnJlc3BlY3RpdmUgb2YgdGhlIHJlYXNvbiB0aGUgc2Vzc2lvbiBp cyBkaXNjb25uZWN0ZWQpLiBBIHNlc3Npb24gY291bGQgYmUgZGlzY29ubmVjdGVkIGJlY2F1c2Ug b2YgdmFyaW91cyBvdGhlciByZWFzb25zIChlLmcuIE5BVCByZWxvYWQpLg0KW0pvbjJdICBPSywg c28gd2hlbmV2ZXIgYSBuZXcgc2Vzc2lvbiBpcyBzdGFydGVkIGZvciB3aGF0ZXZlciByZWFzb24s IHRoZXJlIG5lZWRzIHRvIGJlIGEgcmVzZW5kIG9mIGFjdGl2ZSBtaXRpZ2F0aW9ucy4NCg0KDQpb VFJdIE5vLCBJIG1lYW50IFRoZSBET1RTIGNsaWVudCBpbiB0aGUgbmV3IChEKVRMUyBzZXNzaW9u IGhhcyB0byBzZW5kIEdFVCByZXF1ZXN0IHdpdGggT2JzZXJ2ZSBvcHRpb24gdG8gcmVjZWl2ZSB1 bnNvbGljaXRlZCBub3RpZmljYXRpb25zIG9mIGF0dGFjayBtaXRpZ2F0aW9uIHN0YXR1cyBvZiBh Y3RpdmUgbWl0aWdhdGlvbiByZXF1ZXN0cyBmcm9tIHRoZSBET1RTIHNlcnZlci4NCg0KDQoNCi1U aXJ1DQoNCkhvd2V2ZXIsIEkgaGF2ZSBub3QgZm91bmQgYW55d2hlcmUgaW4gdGhlIHNpZ25hbCAv IHJlcXVpcmVtZW50cyAvIGFyY2hpdGVjdHVyZSB3aGVyZSB0aGlzIGlzIHN1Z2dlc3RlZCAoYnV0 IG1heSBoYXZlIHNlYXJjaGVkIG9uIHRoZSB3cm9uZyBrZXl3b3JkcyEpIEkgdGhpbmsgdGhhdCB0 aGlzIG5lZWRzIHRvIGJlIHN0YXRlZCBzb21ld2hlcmUsIGV2ZW4gdGhvdWdoIGl0IGlzIG9idmlv dXMgaWYgeW91IHRoaW5rIGFib3V0IGl0Lg0KfkpvbjINCg0KDQotVGlydQ0KDQpGcm9tOiBKb24g U2hhbGxvdyBbbWFpbHRvOnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb21dDQpTZW50OiBUaHVyc2Rh eSwgTWF5IDE3LCAyMDE4IDg6NTQgUE0NClRvOiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5IDxU aXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tPG1haWx0bzpUaXJ1bWFsZXN3YXJSZWRk eV9Lb25kYUBNY0FmZWUuY29tPj47IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208bWFpbHRv Om1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+OyBkb3RzQGlldGYub3JnPG1haWx0bzpkb3Rz QGlldGYub3JnPg0KU3ViamVjdDogUkU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0 IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0KDQoNCkNBVVRJT046IEV4 dGVybmFsIGVtYWlsLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3BlbiBhdHRhY2htZW50cyB1bmxl c3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUu DQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkhpIFRpcnUsDQoNClNlZSBp bmxpbmUgW0pvbjFdDQoNClJlZ2FyZHMNCg0KSm9uDQoNCkZyb206IERvdHMgW21haWx0bzogZG90 cy1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmc+XSBPbiBCZWhh bGYgT2YgS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeQ0KU2VudDogMTcgTWF5IDIwMTggMTY6MDMN ClRvOiBKb24gU2hhbGxvdzsgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86bW9o YW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT47IGRvdHNAaWV0Zi5vcmc8bWFpbHRvOmRvdHNAaWV0 Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0 aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uDQoNCkhpIEpvbiwNCg0KVGhpcyBz Y2VuYXJpbyBpcyBhbHJlYWR5IGRpc2N1c3NlZCBpbiBTZWN0aW9uIDQuNy4gV2hlbiB0aGUgRERv UyBtaXRpZ2F0aW9uIGlzIGluIHByb2dyZXNzIGFuZCBhZnRlciB0aGUg4oCYbWlzc2luZy1oYi1h bGxvd2Vk4oCZIHRocmVzaG9sZCBpcyByZWFjaGVkLCB0aGUgRE9UUyBjbGllbnQgd2lsbCBjb250 aW51ZSB0byB1c2UgdGhlIGV4aXN0aW5nIChEKVRMUyBzZXNzaW9uIHRvIHNlbmQgaGVhcnRiZWF0 IHJlcXVlc3RzIHRvIHRoZSBzZXJ2ZXIgYW5kIGF0IHRoZSBzYW1lIHRpbWUgdHJ5IHRvIGVzdGFi bGlzaCBhIG5ldyAoRClUTFMgc2Vzc2lvbiB3aXRoIERPVFMgc2VydmVyLg0KW0pvbjFdIEkgZnVs bHkgdW5kZXJzdGFuZCB0aGF0DQpGdXJ0aGVyLCBpZiB0aGUgc2VydmVyIHJlc3RhcnRzLCAoRClU TFMgc3RhdGUgaXMgbG9zdCBvbiB0aGUgc2VydmVyIGFuZCB0aGUgc2VydmVyIGRvZXMgbm90IGhh dmUgdGhlIGNyeXB0b2dyYXBoaWMgc3RhdGUgdG8gc2VuZCDigJhyZS1zdWJzY3JpYmXigJkgb24g dGhlIG9sZCBzZXNzaW9uLg0KW0pvbjFdIEFncmVlZCB0aGUgRE9UUyBzZXJ2ZXIgY2Fubm90IHNl bnQgYW55dGhpbmcgdGhhdCBpcyB1bnNvbGljaXRlZCBkdWUgdG8gbG9zcyBvZiBjcnlwdG9ncmFw aGljIHN0YXRlLiAgSG93ZXZlciwgaWYgdGhlIERPVFMgc2VydmVyIGNhbiBzZW5kIGJhY2sgaW4g YSByZXNwb25zZSB0byBhIGNsaWVudCByZXF1ZXN0IHNvbWV0aGluZyB0aGF0IHN0YXRlcyDigJxJ IHJlc3RhcnRlZCByZWNlbnRseSBAIHN1Y2ggYSB0aW1l4oCdLCB0aGUgY2xpZW50IHdpbGwga25v dyB3aGV0aGVyIHRoZSBtaXNzaW5nIGhlYXJ0YmVhdHMgd2VyZSBkb3duIHRvIGp1c3QgYSBmbGFr eSBuZXR3b3JrLCBvciB0aGUgbWlzc2luZyBoZWFydGJlYXRzIHdlcmUgZHVlIHRvIGEgc2VydmVy IHJlc3RhcnQsIGFuZCBzbyByZS1zdWJzY3JpYmUgbmVlZGVkIGZvciBhbGwgdGhlIHJlc291cmNl cyB0aGF0IHRoZSBjbGllbnQgd2FudHMgdG8gbW9uaXRvci4gIEkgZG8gbm90IHdhbnQgdGhlIERP VFMgY2xpZW50IHRvIGtlZXAgb24gZG9pbmcgcmUtc3Vic2NyaWJlIGNvbXBvdW5kaW5nIHRoZSBu ZXR3b3JrIGZsYWtpbmVzcyB3aGVuIHVuZGVyIGF0dGFjay4NCn5Kb24xDQoNCi1UaXJ1DQoNCkZy b206IEpvbiBTaGFsbG93IFttYWlsdG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbV0NClNlbnQ6 IFRodXJzZGF5LCBNYXkgMTcsIDIwMTggMToyMSBQTQ0KVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIg UmVkZHkgPFRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb208bWFpbHRvOlRpcnVtYWxl c3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20+PjsgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNv bTxtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT47IGRvdHNAaWV0Zi5vcmc8bWFp bHRvOmRvdHNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSRTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNo L3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uDQoNCg0KQ0FV VElPTjogRXh0ZXJuYWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0dGFjaG1l bnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQg aXMgc2FmZS4NCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KSGkgVGlydSwN Cg0KSXQgaXMgYSBjb3JuZXIgcmVjb3ZlcnkgY2FzZS4gIFRoZSBET1RTIGNsaWVudCBjYW4gZGV0 ZWN0IHRoYXQgdGhlIERPVFMgc2VydmVyIGhhcyBnb25lIGF3YXkgKHVzaW5nIGhlYXJ0YmVhdHMp IGFuZCByZS1zdWJzY3JpYmUgdG8gYWxsIHRoZSByZXNvdXJjZXMgdGhhdCB0aGUgRE9UUyBjbGll bnQgd2FudHMgdG8gT2JzZXJ2ZSBvbiBkZXRlY3Rpb24gdGhhdCB0aGUgRE9UUyBzZXJ2ZXIgaXMg YmFjaw0KDQpIb3dldmVyLCB3aGVuIG1pdGlnYXRpbmcsIHRoZXJlIGlzIGEgbGlrZWxpaG9vZCB0 aGF0IGhlYXJ0YmVhdHMgd2lsbCB0aW1lIG91dCBhbmQgSSBhbSBub3Qgc3VyZSB0aGF0IGl0IGlz IHdpc2UgdG8g4oCccmUtc3Vic2NyaWJl4oCdIHdoZW4gdGhlIGNvbm5lY3Rpb25zIGFyZSByZS1l c3RhYmxpc2hlZCBhcyB0aGUgbmV0d29yayBwYXRoIG1heSBzdGlsbCBiZSBmbGFreSBhbmQgYWRk aW5nIGV4dHJhIHRyYWZmaWMgbWF5IGJlIHByb2JsZW1hdGljLiAgTXkgc3VnZ2VzdGlvbiBvZiBh biBlcG9jaCB0aW1lIGJlaW5nIHJlcG9ydGVkIGJ5IHRoZSBET1RTIHNlcnZlciB3YXMgYSB3YXkg b2YgZGV0ZXJtaW5pbmcgd2hldGhlciDigJxyZS1zdWJzY3JpYmXigJ0gd2FzIHJlcXVpcmVkIG9y IG5vdC4NCg0KUmVnYXJkcw0KDQpKb24NCg0KRnJvbTogRG90cyBbbWFpbHRvOiBkb3RzLWJvdW5j ZXNAaWV0Zi5vcmc8bWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZz5dIE9uIEJlaGFsZiBPZiBL b25kYSwgVGlydW1hbGVzd2FyIFJlZGR5DQpTZW50OiAxNiBNYXkgMjAxOCAxNjowNQ0KVG86IG1v aGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208bWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5n ZS5jb20+OyBKb24gU2hhbGxvdzsgZG90c0BpZXRmLm9yZzxtYWlsdG86ZG90c0BpZXRmLm9yZz4N ClN1YmplY3Q6IFJlOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2Vy dmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24NCg0KSSBkb27igJl0IGdldCB0aGUgcHJvYmxl bS4gSWYgdGhlIHNlcnZlciByZXN0YXJ0cywgKEQpVExTIHN0YXRlIHdpbGwgYmUgbG9zdCBhbmQg c2VydmVyIHdpbGwgcmVqZWN0IGhlYXJ0YmVhdCByZXF1ZXN0cyBmcm9tIHRoZSBjbGllbnQgKGVp dGhlciBzaWxlbnRseSBvciBzZW5kIGEgZmF0YWwgYWxlcnQgdG8gdGhlIGNsaWVudCkuIERPVFMg Y2xpZW50IHdpbGwgaGF2ZSB0byBmb2xsb3cgdGhlIHN0ZXBzIGluIGh0dHBzOi8vdG9vbHMuaWV0 Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkjc2VjdGlvbi00Ljcg dG8gcmUtZXN0YWJsaXNoIChEKVRMUyBzZXNzaW9uIHdpdGggdGhlIERPVFMgc2VydmVyLg0KDQot VGlydQ0KDQpGcm9tOiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhh bGYgT2YgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86bW9oYW1lZC5ib3VjYWRh aXJAb3JhbmdlLmNvbT4NClNlbnQ6IFdlZG5lc2RheSwgTWF5IDE2LCAyMDE4IDc6MTUgUE0NClRv OiBKb24gU2hhbGxvdyA8c3VwanBzLWlldGZAanBzaGFsbG93LmNvbTxtYWlsdG86c3VwanBzLWll dGZAanBzaGFsbG93LmNvbT4+OyBkb3RzQGlldGYub3JnPG1haWx0bzpkb3RzQGlldGYub3JnPg0K U3ViamVjdDogUmU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2 ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0KDQoNCkNBVVRJT046IEV4dGVybmFsIGVtYWls LiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29n bml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuDQoNCg0KX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NClJlLSwNCg0KUGxlYXNlIHNlZSBpbmxpbmUuDQoN CkNoZWVycywNCk1lZA0KDQpEZSA6IEpvbiBTaGFsbG93IFttYWlsdG86c3VwanBzLWlldGZAanBz aGFsbG93LmNvbV0NCkVudm95w6kgOiBtZXJjcmVkaSAxNiBtYWkgMjAxOCAxNDo0Mg0Kw4AgOiBC T1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOyBkb3RzQGlldGYub3JnPG1haWx0bzpkb3RzQGlldGYu b3JnPg0KT2JqZXQgOiBSRTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBP YnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uDQoNCkhpIE1lZCwNCg0KU2VlIGlubGlu ZS4NCg0KUmVnYXJkcw0KDQpKb24NCg0KRnJvbTogRG90cyBbbWFpbHRvOiBkb3RzLWJvdW5jZXNA aWV0Zi5vcmc8bWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZz5dIE9uIEJlaGFsZiBPZiBtb2hh bWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2Uu Y29tPg0KU2VudDogMTYgTWF5IDIwMTggMTI6NTUNClRvOiBKb24gU2hhbGxvdzsgZG90c0BpZXRm Lm9yZzxtYWlsdG86ZG90c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbRG90c10gRE9UUyBzZXJ2 ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24N Cg0KSGkgSm9uLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCkRlIDog RG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZSBKb24gU2hh bGxvdw0KRW52b3nDqSA6IG1lcmNyZWRpIDE2IG1haSAyMDE4IDEyOjI0DQrDgCA6IGRvdHNAaWV0 Zi5vcmc8bWFpbHRvOmRvdHNAaWV0Zi5vcmc+DQpPYmpldCA6IFtEb3RzXSBET1RTIHNlcnZlciBj cmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0KDQpI aSB0aGVyZSwNCg0KRm9yIHRoZSBzaWduYWwgY2hhbm5lbCwgaXQgaXMgZWFzeSB0byBtYWludGFp biBhIHBlcnNpc3RlbnQgbGlzdCBvZiBhY3RpdmUgbWl0aWdhdGlvbnMuICBTaG91bGQgdGhlIERP VFMgc2VydmVyICh1bmV4cGVjdGVkbHkpIHN0b3AgYW5kIHJlc3RhcnQsIHRoZW4gaXQgaXMgZWFz eSB0byByZWJ1aWxkIHRoZSBjdXJyZW50IGFjdGl2ZSBtaXRpZ2F0aW9ucy4NCg0KW01lZF0gVGhl IGxpc3Qgb2YgYWN0aXZlIG1pdGlnYXRpb25zIGlzIHRoZSDigJxjb3Jl4oCdIHN0YXRlIGRhdGEg dG8gYmUgbWFpbnRhaW5lZCBieSBhIHNlcnZlci4gSWYgd2UgYXNzdW1lIHRoYXQgbGlzdCBjYW4g YmUgcmVsaWFibHkgcmVidWlsdCwgdGhlbiB0aGVyZSBpcyBubyBleHRlbnNpb24gbmVlZGVkIHRv IHRoZSBzaWduYWwgY2hhbm5lbCB0byBoYW5kbGUgdGhpcyBmYWlsdXJlIGNhc2UuDQoNCltKb25d IEFncmVlZC4gIFRoaXMgd2FzIGp1c3QgbWUgYnVpbGRpbmcgdXAgdGhlIGJhY2tncm91bmQgdG8g dGhlIHNjZW5hcmlvLg0KDQpIb3dldmVyLCB0byByZWJ1aWxkIHRoZSBsaXN0IG9mIGFjdGl2ZSBP YnNlcnZhdGlvbnMgb2YgdGhlIGN1cnJlbnQgbWl0aWdhdGlvbnMgLyBjb25maWd1cmF0aW9uIGNo YW5nZXMgaXMgY29uc2lkZXJhYmx5IG1vcmUgZGlmZmljdWx0IGFzIHRoZSBET1RTIHNlcnZlciB3 b3VsZCBhbHNvIG5lZWQgdG8gbWFpbnRhaW4gYSBsaXN0IG9mIGNsaWVudCBJUHMvc291cmNlIHBv cnRzIGV0Yy4gYWxvbmcgd2l0aCBUb2tlbnMgYW5kIFF1ZXJpZXMgYW5kIChEKVRMUyBzdGF0ZSBz byB0aGF0IHVuc29saWNpdGVkIE9ic2VydmUgcmVzcG9uc2VzIGNhbiBjb250aW51ZSB0byBiZSBz ZW50IGJhY2sgdG8gdGhlIGNsaWVudHMuICBJIGRvbuKAmXQgcmVhbGx5IHRoaW5rIHRoYXQgdGhp cyBpcyBhIHByYWN0aWNhbCBhc2suDQoNCltNZWRdIEZpcnN0LCB0aGlzIGNhbiBiZSBjb25zaWRl cmVkIGFzIGRlcGxveW1lbnQtc3BlY2lmaWMuIEFzIHN1Y2ggaW4gc29tZSBkZXBsb3ltZW50cywg dGhlcmUgaXMgbm8gbmVlZCB0byBzdXBwb3J0IGF1dG9tYXRpYyBtZWFucyB0byBkZXRlY3Qgc3Rh dGUgbG9zcyBhdCB0aGUgc2VydmVyIHNpZGUuIFNlY29uZCwgaXMgaXQgcmVhbGx5IHByb2JsZW1h dGljIGZvciB0aGUgRERvUyBtaXRpZ2F0aW9uIHRoYXQgbGlzdCBpcyBsb3N0IGJ5IGEgc2VydmVy PyBJIGd1ZXNzLCB0aGUgYW5zd2VyIGlzIG5vIGlmIHdlIGFzc3VtZSB0aGUgbGlzdCBvZiBtaXRp Z2F0aW9ucyB0aGVtc2VsdmVzIGlzIG1haW50YWluZWQuDQoNCltKb25dIE15IGNvbmNlcm4gaXMg dGhhdCB0aGUgRE9UUyBjbGllbnRzIHdvdWxkIG5vdCBzZWUgdGhlIGNoYW5nZSBpbiBtaXRpZ2F0 aW9uIHN0YXRlLCBvciB3b3VsZCBub3Qgc2VlIHRoYXQgdGhlcmUgaXMgYSBuZXcgc2lnbmFsIGNo YW5uZWwgY29uZmlndXJhdGlvbiAoaWYgdGhleSB3ZXJlIGJlaW5nIE9ic2VydmVkKS4gVGhlIERP VFMgY2xpZW50L3NlcnZlciB3b3VsZCBiZSBvdXQgb2Ygc3luYyB3aXRoIHdoYXQgaXMgaGFwcGVu aW5nIGFuZCB0aGUgRE9UUyBjbGllbnQgd291bGQgbm90IG5lY2Vzc2FyaWx5IGtub3cgdGhhdCBp dCBoYXMgdG8gdGFrZSBzb21lIGFjdGlvbiB0byBnZXQgYmFjayB0byB0aGUgc3RhdGUgYmVmb3Jl IHRoZSBET1RTIHNlcnZlciBvdXRhZ2UuDQoNCltNZWRdIFRoZSBkb3RzIGNsaWVudCBoYXMgb3Ro ZXIgbWVhbnMgdG8ga25vdyB0aGUgbWl0aWdhdGlvbiBzdGF0ZS4gVGhlIERPVFMgY2xpZW50IGNh biBvYnNlcnZlIHRoZSBzdGF0dXMgbG9jYWxseSAoYW5kIHJlcG9ydCBpdCB0byB0aGUgc2VydmVy KSBvciBzZW5kIGEgcmVxdWVzdCB0byByZXRyaWV2ZSB0aGUgc3RhdHVzIGZyb20gdGhlIHNlcnZl ci4gVGhlIG91dCBvZiBzeW5jaCBpbiBvYnNlcnZlIGlzIG5vdCB0aGF0IGNyaXRpY2FsIGZvciBt aXRpZ2F0aW5nIEREb1MgYXR0YWNrcy4NCg0KQXMgdGhlIERPVFMgc2VydmVyIHJlc3RhcnRlZCwg ZXhpc3RpbmcgKEQpVExTIHNlc3Npb25zIHVzZWQgYnkgdGhlIERPVFMgY2xpZW50IHdpbGwgZmFp bC4gIFNvLCB0aGUgaGVhcnRiZWF0IG1lY2hhbmlzbSB3aWxsIGV2ZW50dWFsbHkgdGltZSBvdXQg IGFuZCBJIGd1ZXNzIHRoYXQgdGhlIERPVFMgY2xpZW50IHNob3VsZCBkZXRlY3QgdGhpcyBhbmQg cmUtZG8gYWxsIG9mIHRoZSBPYnNlcnZlIHJlcXVlc3RzIChhbG9uZyB3aXRoIG1ha2luZyBzdXJl IHRoYXQgYWxsIHRoZSBhY3RpdmUgbWl0aWdhdGlvbnMgYXJlIGFzIGV4cGVjdGVkKS4NCg0KW01l ZF0gSW5jbHVkaW5nIGNsaWVudHMgaW4gbmV0d29ya3MgdW5kZXIgYWN0aXZlIGF0dGFja3M/IElz buKAmXQgdGhpcyBvdmVybG9hZGluZyB0aGUgc2VydmVyIHdoaWxlIGRlYWxpbmcgd2l0aCBvbmdv aW5nIGF0dGFja3M/DQoNCltKb25dIFllcywgaXQgd291bGQg4oCTIGhlbmNlIEkgZGlkIG5vdCBy ZWFsbHkgd2FudCB0byBoYXZlIHRvIGRvIHRoaXMgd2hlbmV2ZXIgYSBoZWFydGJlYXQgZmFpbGVk LCBidXQgb25seSBkbyBpdCB3aGVuIHRoZSBET1RTIGNsaWVudCDigJxrbm93c+KAnSB0aGF0IHRo ZSBzZXJ2ZXIgaGFzIGhhZCBhbiBvdXRhZ2UuDQoNCkhvd2V2ZXIgaW4gUGVhY2UgdGltZSBIZWFy dGJlYXRzIG1heSBub3QgYmVpbmcgdXNlZC4NCkhvd2V2ZXIgYXQgTWl0aWdhdGlvbiB0aW1lIGhl YXJ0YmVhdHMgbWF5IGZhaWwuDQoNCldvdWxkIGl0IG1ha2Ugc2Vuc2UgdG8gYWRkIHRvIHRoZSBz aWduYWwgY2hhbm5lbCBhbiBleHRyYSBwYXJhbWV0ZXIgdGhhdCB0aGUgRE9UUyBzZXJ2ZXIgY2Fu IHNlbmQgdG8gdGhlIGNsaWVudCBpbiBhbnkgcmVzcG9uc2UgaW4gdGhlIGZvcm0gb2YNCuKAnGxh c3QtcmVzdGFydGVk4oCdIDogc2Vjb25kcy1zaW5jZS1lcG9jaA0KV2hpY2ggdGhlIGNsaWVudCBj YW4gdXNlIHRvIGRldGVjdGVkIHRoZSByZXN0YXJ0Lg0KDQpbTWVkXSBXZSB1c2VkIHRvIGhhdmUg YW4gZXBvY2gtYmFzZWQgYXBwcm9hY2ggZm9yIGEgc3RhdGVmdWxsIHNlcnZpY2UgKHNlZSBodHRw czovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjg4NyNzZWN0aW9uLTguNSkuIFRoZSBkZXRhaWxz IGFyZSBub3QgcmVzdHJpY3RlZCB0byBqdXN0IHNpZ25hbGxpbmcgdGhlIGVwb2NoIHZhbHVlIGJ1 dCB0byB0aGUgbG9naWMgdG8gaGFuZGxlIGl0IGF0IHRoZSBjbGllbnQgc2lkZS4gRnVydGhlciwg dGhlcmUgYXJlIHNvbWUgYXNwZWN0cyB0byBiZSB0YWtlbiBpbnRvIGFjY291bnQgd2hlbiBjb25m aWd1cmluZyByZWR1bmRhbmN5IHNlcnZlcnMgd2hlbiBhbiBhbnljYXN0IGFkZHJlc3MgaXMgdXNl ZC4gSWYgdGhlIHNhbWUgaW5pdGlhbCBlcG9jaCB2YWx1ZSBpcyBjb25maWd1cmVkLCB0aGUgY2xp ZW50IG1heSBub3QgZGV0ZWN0IGEgYmFja3VwIHNlcnZlciBpcyB1c2VkIGFuZCBoZW5jZSBtYXkg bm90IHJlaW5zdGFsbCBzdGF0ZS4uLiBBIHR3ZWFrIGlzIHRvIGNvbmZpZ3VyZSBkaXN0aW5jdCBl cG9jaCB2YWx1ZXMgKGUuZy4sICsvLSAyNGggZGlmZmVyZW5jZSBiZXR3ZWVuIGEgc2VydmVyIHJl ZHVuZGFuY3kgZ3JvdXApLg0KDQpUaGUgZXBvY2ggaXMganVzdGlmaWVkIGZvciA2ODg3IGJlY2F1 c2Ugd2Ugd2FudGVkIHRvIHJlY292ZXIgc3RhdGUgbG9zcywgd2hpbGUgaW4gdGhlIERPVFMgY2Fz ZSB3ZSBkb27igJl0IGhhdmUgdGhlIHNhbWUgbW9kZWwgZ2l2ZW4gdGhhdCwgYXMgeW91IHJpZ2h0 ZnVsbHkgc2FpZCBhYm92ZSwgdGhlIGN1cnJlbnQgYWN0aXZlIG1pdGlnYXRpb25zIGNhbiBiZSBy ZWJ1aWx0IGF0IHRoZSBzZXJ2ZXIgc2lkZSB3aXRob3V0IGludm9sdmluZyBjbGllbnRzLg0KDQpb Sm9uXSBTbyB0aGlzIG1ldGhvZCBzZXRzIGVwb2NoIHRpbWUgYmFjayB0byAwIHdoZW5ldmVyIHRo ZXJlIGlzIGEgcmVzdGFydCwNCltNZWRdIFllcy4gVGhlIGVwb2NoIGlzIHJlc2V0IGVhY2ggdGlt ZSB0aGUgc3RhdGUgaXMgbG9zdCBhdCB0aGUgc2VydmVyIHNpZGUuDQoNCnJhdGhlciB0aGF0IHJl cG9ydCBvbiB0aGUgbnVtYmVyIG9mIHNlY29uZHMgc2luY2UgSmFuIDEgMTk3MC4gICBUaGF0IEkg Y2FuIGhhbmRsZS4gIEhvd2V2ZXIgYW55Y2FzdCAodGhvdWdoIHJlZHVuZGFudCBzZXJ2ZXJzIGFy ZSBjdXJyZW50bHkgb3V0IG9mIHNwZWMpIHdoZXJlIDIgb3IgbW9yZSBzZXJ2ZXJzIHJlc3RhcnQg YW5kIHVwZGF0ZSB0aGUgc3RhcnQgdGltZSBhdCBleGFjdGx5IHRoZSBzYW1lIHRpbWUgaXMgcG9z c2libGUsIGJ1dCB1bmxpa2VseS4gIFRoaXMgY291bGQgYmUgaGFuZGxlZCBieSB0aGUgYW55Y2Fz dCBzZXJ2ZXJzIGNvbW11bmljYXRpbmcgYW5kIHNlZWluZyB0aGV5IGJvdGggaGF2ZSB0aGUgc2Ft ZSBzdGFydCB0aW1lIHNvIG9uZSBiYWNrcyBvZmYgKGluIHRpbWUgdGVybXMpLg0KDQpbSm9uXSBJ 4oCZbSBqdXN0IGludGVyZXN0ZWQgaW4gaG93IHRvIHJlY292ZXIgT2JzZXJ2ZSBsb3NzLg0KW01l ZF0gSeKAmW0gbm90IGNvbnZpbmNlZCB0aGlzIGlzIHJlYWxseSBuZWVkZWQgZ2l2ZW4gdGhhdCBh Y3RpdmUgbWl0aWdhdGlvbnMgYXJlIG5vdCBjb25jZXJuZWQgd2l0aCB0aGlzIGZhaWx1cmUgc2Nl bmFyaW8uDQoNCiAgSSBhcHByZWNpYXRlIGluIHBlYWNlIHRpbWUgdGhlcmUgbWF5IG5vdCBiZSBh bnkgRE9UUyBjbGllbnQgcmVxdWVzdHMgKG9yIGhlYXJ0YmVhdCkgZm9yIGEgbG9uZyB0aW1lLi4u DQoNCknigJltIG9wZW4gdG8gc3VnZ2VzdGlvbnMuDQoNClJlZ2FyZHMNCg0KSm9uDQoNCg0KDQoN Cg== --_000_C02846B1344F344EB4FAA6FA7AF481F12BD7E036DGGEML502MBXchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OuWui+S9kzsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eToiXEDlrovkvZMiOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTrlvq7ova/pm4Xpu5E7DQoJcGFub3NlLTE6MiAxMSA1IDMgMiAyIDQg MiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiXEDlvq7ova/pm4Xpu5EiOw0KCXBh bm9zZS0xOjIgMTEgNSAzIDIgMiA0IDIgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 VGFob21hOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCi8qIFN0eWxlIERlZmlu aXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21h cmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6 RU4tVVM7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRl ZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJ Y29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcA0KCXttc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0 OjBjbTsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowY207DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseTrlrovkvZM7fQ0KcHJlDQoJe21zby1zdHls ZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCDpooTorr7moLzlvI8gQ2hhciI7 DQoJbWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBw dDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGku TXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9y aXR5OjM0Ow0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCXRleHQtaW5k ZW50OjIxLjBwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCnNwYW4uSFRNTENoYXIN Cgl7bXNvLXN0eWxlLW5hbWU6IkhUTUwg6aKE6K6+5qC85byPIENoYXIiOw0KCW1zby1zdHlsZS1w cmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCDpooTorr7moLzlvI8iOw0KCWZvbnQt ZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KcC5t c29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFt ZTptc29ub3JtYWw7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1tYXJnaW4tdG9wLWFs dDphdXRvOw0KCW1hcmdpbi1yaWdodDowY207DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87 DQoJbWFyZ2luLWxlZnQ6MGNtOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2lu ZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsN Cglmb250LWZhbWlseToiQ291cmllciBOZXciOw0KCWNvbG9yOmJsYWNrOw0KCWZvbnQtd2VpZ2h0 Om5vcm1hbDsNCglmb250LXN0eWxlOm5vcm1hbDt9DQpzcGFuLkVtYWlsU3R5bGUyMg0KCXttc28t c3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsN Cgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTIzDQoJe21zby1zdHlsZS10eXBlOnBl cnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJY29sb3I6YmxhY2s7DQoJZm9u dC13ZWlnaHQ6bm9ybWFsOw0KCWZvbnQtc3R5bGU6bm9ybWFsO30NCnNwYW4uRW1haWxTdHlsZTI0 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjUNCgl7bXNvLXN0 eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJ Y29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyNg0KCXttc28tc3R5bGUtdHlwZTpwZXJz b25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0 ZXh0O30NCnNwYW4uRW1haWxTdHlsZTI3DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5F bWFpbFN0eWxlMjgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUy OQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTMwDQoJe21zby1zdHls ZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNv bG9yOndpbmRvd3RleHQ7fQ0KcC5IVE1MUHJlZm9ybWF0dGVkLCBsaS5IVE1MUHJlZm9ybWF0dGVk LCBkaXYuSFRNTFByZWZvcm1hdHRlZA0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVmb3JtYXR0 ZWQiOw0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltYXJnaW46 MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVT O30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkhUTUwgUHJl Zm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGlu azoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0Kc3Bh bi5FbWFpbFN0eWxlMzUNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVm YXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30N CkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIu MHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3Jk U2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3Qt aWQ6MjEyNDYxMzE0MDsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0 ZS1pZHM6LTE5ODQ1MjA3MTAgLTEzMTQ2MjY4NTYgNjc2OTg3MTMgNjc2OTg3MTUgNjc2OTg3MDMg Njc2OTg3MTMgNjc2OTg3MTUgNjc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3MTU7fQ0KQGxpc3QgbDA6 bGV2ZWwxDQoJe21zby1sZXZlbC10ZXh0OiIlMVwpIjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MTguMHB0 Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWwyDQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10ZXh0OiIlMlwpIjsNCgltc28t bGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ bWFyZ2luLWxlZnQ6NDIuMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0KQGxpc3QgbDA6bGV2 ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJbWFyZ2lu LWxlZnQ6NjMuMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJ e21zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgltYXJnaW4tbGVmdDo4NC4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTIxLjBwdDt9DQpAbGlzdCBs MDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxl dmVsLXRleHQ6IiU1XCkiOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDoxMDUuMHB0Ow0KCXRleHQtaW5kZW50 Oi0yMS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJv bWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246cmlnaHQ7DQoJbWFyZ2luLWxlZnQ6MTI2LjBwdDsNCgl0ZXh0LWluZGVudDotMjEu MHB0O30NCkBsaXN0IGwwOmxldmVsNw0KCXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MTQ3LjBwdDsNCgl0ZXh0 LWluZGVudDotMjEuMHB0O30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGV4dDoiJThcKSI7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1s ZWZ0OjE2OC4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTIxLjBwdDt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9w Om5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgltYXJnaW4tbGVmdDox ODkuMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowY207 fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowY207fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28g OV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+ DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5 b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9v OnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iWkgt Q04iIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24x Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5IaSBU aXJ1LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjojMUY0OTdEO21zby1mYXJl YXN0LWxhbmd1YWdlOlpILUNOIj5JIHNoYXJlIHRoZSBzYW1lIGNvbmNlcm4gd2l0aCBKb24gYXM6 PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xv cjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5JZiBkb3RzIHNldmVyIHJlc3Rh cnRzLCBhbmQgbG9zZXMgYWxsIHRoZSBtaXRpZ2F0aW9uIHN0YXR1cywgdGhlbiBkb3RzIGNsaWVu dCBzaG91bGQgcmVzZW5kIGFsbCB0aGUgYWN0aXZlIG1pdGlnYXRpb24gc3RhdHVzIHRvIGl0LiBU aGVyZSBjYW4gYmUgdHdvIHdheQ0KIGZvciBpdDo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjE4LjBwdDt0ZXh0LWlu ZGVudDotMTguMHB0O21zby1saXN0OmwwIGxldmVsMSBsZm8xIj4NCjwhW2lmICFzdXBwb3J0TGlz dHNdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjojMUY0 OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdu b3JlIj4xKTxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwv c3Bhbj48IVtlbmRpZl0+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPlJlc2VuZCBtaXRpZ2F0 aW9uIHJlcXVlc3RzIGZvciBhbGwgYWN0aXZlIG1pdGlnYXRpb247PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDoxOC4w cHQ7dGV4dC1pbmRlbnQ6LTE4LjBwdDttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+DQo8IVtpZiAh c3VwcG9ydExpc3RzXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PHNwYW4gc3R5bGU9Im1z by1saXN0Oklnbm9yZSI+Mik8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcg Um9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFu Pjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5Eb3Rz IGNsaWVudCBzeW5jIGFsbCB0aGUgYWN0aXZlIG1pdGlnYXRpb24gc3RhdHVzIHdpdGggc2VydmVy LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0 LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29s b3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+SXTigJlzIG5vdCBvbmx5IGFi b3V0IHRoZSBvYnNlcnZlIG9wdGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29s b3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6Wkgt Q04iPlRoYW5rcyE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6IzFGNDk3RDtt c28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkIuUi48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5n dWFnZTpaSC1DTiI+RnJhbms8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4w cHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OiZxdW90O+W+rui9r+mbhem7kSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0 LWxhbmd1YWdlOlpILUNOIj7lj5Hku7bkuro8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L3Nw YW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v 6ZuF6buRJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPiBEb3Rz IFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXQ0KPC9zcGFuPjxiPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFz dC1sYW5ndWFnZTpaSC1DTiI+5Luj6KGoDQo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2VyaWY7bXNv LWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPktvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHk8YnI+DQo8 L3NwYW4+PGI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O+W+rui9r+mbhem7kSZxdW90 OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj7lj5HpgIHml7bpl7Q8c3Bh biBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZh cmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPiAyMDE4PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFn ZTpaSC1DTiI+5bm0PHNwYW4gbGFuZz0iRU4tVVMiPjU8L3NwYW4+5pyIPHNwYW4gbGFuZz0iRU4t VVMiPjE4PC9zcGFuPuaXpTxzcGFuIGxhbmc9IkVOLVVTIj4NCiAxNjo1Nzxicj4NCjwvc3Bhbj48 Yj7mlLbku7bkuro8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4t VVMiPiBKb24gU2hhbGxvdyAmbHQ7c3VwanBzLWlldGZAanBzaGFsbG93LmNvbSZndDs7IG1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb207IGRvdHNAaWV0Zi5vcmc8YnI+DQo8L3NwYW4+PGI+5Li7 6aKYPHNwYW4gbGFuZz0iRU4tVVMiPjo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIj4gUmU6 IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlv bnMvQ29uZmlndXJhdGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkhpIEpvbiw8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJl YXN0LWxhbmd1YWdlOlpILUNOIj5QbGVhc2Ugc2VlIGlubGluZSBbVFJdPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGEgbmFtZT0iX01haWxFbmRDb21wb3NlIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L2E+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDQuMHB0Ij4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4w cHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5Gcm9t Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFn ZTpaSC1DTiI+IERvdHMgWzxhIGhyZWY9Im1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmciPm1h aWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5Kb24g U2hhbGxvdzxicj4NCjxiPlNlbnQ6PC9iPiBGcmlkYXksIE1heSAxOCwgMjAxOCAyOjE2IFBNPGJy Pg0KPGI+VG86PC9iPiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5ICZsdDs8YSBocmVmPSJtYWls dG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbSI+VGlydW1hbGVzd2FyUmVkZHlf S29uZGFATWNBZmVlLmNvbTwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOm1vaGFtZWQuYm91Y2Fk YWlyQG9yYW5nZS5jb20iPm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208L2E+OyA8YSBocmVm PSJtYWlsdG86ZG90c0BpZXRmLm9yZyI+DQpkb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1Ympl Y3Q6PC9iPiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZl ZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHRhYmxlIGNsYXNzPSJNc29Ob3JtYWxUYWJs ZSIgYm9yZGVyPSIxIiBjZWxsc3BhY2luZz0iMyIgY2VsbHBhZGRpbmc9IjAiIHN0eWxlPSJiYWNr Z3JvdW5kOiNGM0ZGMzM7Ym9yZGVyOnNvbGlkICM5QjlBODcgMS41cHQiPg0KPHRib2R5Pg0KPHRy Pg0KPHRkIHN0eWxlPSJib3JkZXI6bm9uZTtwYWRkaW5nOi43NXB0IC43NXB0IC43NXB0IC43NXB0 Ij4NCjxwPjxzdHJvbmc+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPkNBVVRJT048L3NwYW4+PC9z dHJvbmc+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPjo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJs YWNrIj4NCiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4gYXR0YWNo bWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVu dCBpcyBzYWZlLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZx dW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvdGQ+ DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWdu PSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0 eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+DQo8aHIgc2l6ZT0iMyIgd2lkdGg9IjEw MCUiIGFsaWduPSJjZW50ZXIiPg0KPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhpIFRpcnU8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+U2VlIGlubGluZSBbSm9uMl08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+UmVnYXJkczxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Kb248bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFk ZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFo b21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPkZyb206PC9z cGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6 RU4tR0IiPiBEb3RzIFttYWlsdG86DQo8YSBocmVmPSJtYWlsdG86ZG90cy1ib3VuY2VzQGlldGYu b3JnIj5kb3RzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSA8Yj5PbiBCZWhhbGYgT2YNCjwvYj5Lb25k YSwgVGlydW1hbGVzd2FyIFJlZGR5PGJyPg0KPGI+U2VudDo8L2I+IDE3IE1heSAyMDE4IDE3OjA1 PGJyPg0KPGI+VG86PC9iPiBKb24gU2hhbGxvdzsgPGEgaHJlZj0ibWFpbHRvOm1vaGFtZWQuYm91 Y2FkYWlyQG9yYW5nZS5jb20iPm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208L2E+Ow0KPGEg aHJlZj0ibWFpbHRvOmRvdHNAaWV0Zi5vcmciPmRvdHNAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3Vi amVjdDo8L2I+IFJlOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2Vy dmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+ W0pvbjFdIEFncmVlZCB0aGUgRE9UUyBzZXJ2ZXIgY2Fubm90IHNlbnQgYW55dGhpbmcgdGhhdCBp cyB1bnNvbGljaXRlZCBkdWUgdG8gbG9zcyBvZiBjcnlwdG9ncmFwaGljIHN0YXRlLiZuYnNwOyBI b3dldmVyLCBpZiB0aGUgRE9UUyBzZXJ2ZXIgY2FuIHNlbmQgYmFjayBpbiBhIHJlc3BvbnNlIHRv IGENCiBjbGllbnQgcmVxdWVzdCBzb21ldGhpbmcgdGhhdCBzdGF0ZXMg4oCcSSByZXN0YXJ0ZWQg cmVjZW50bHkgQCBzdWNoIGEgdGltZeKAnSwgdGhlIGNsaWVudCB3aWxsIGtub3cgd2hldGhlciB0 aGUgbWlzc2luZyBoZWFydGJlYXRzIHdlcmUgZG93biB0byBqdXN0IGEgZmxha3kgbmV0d29yaywg b3IgdGhlIG1pc3NpbmcgaGVhcnRiZWF0cyB3ZXJlIGR1ZSB0byBhIHNlcnZlciByZXN0YXJ0LCBh bmQgc28gcmUtc3Vic2NyaWJlIG5lZWRlZCBmb3IgYWxsIHRoZQ0KIHJlc291cmNlcyB0aGF0IHRo ZSBjbGllbnQgd2FudHMgdG8gbW9uaXRvci4mbmJzcDsgSSBkbyBub3Qgd2FudCB0aGUgRE9UUyBj bGllbnQgdG8ga2VlcCBvbiBkb2luZyByZS1zdWJzY3JpYmUgY29tcG91bmRpbmcgdGhlIG5ldHdv cmsgZmxha2luZXNzIHdoZW4gdW5kZXIgYXR0YWNrLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6 WkgtQ04iPltSXSBUaGUgZmlyc3QgdHdvIHNlbnRlbmNlcyBjb250cmFkaWN0IGVhY2ggb3RoZXIu IEhvdyBjYW4gdGhlIHNlcnZlciBzZW5kIGFueSBkYXRhIG9uIHRoZSBvbGQgc2Vzc2lvbiA/DQo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPltK b24yXSBJIGFjdHVhbGx5IHdhcyB0aGlua2luZyB0aGF0IHRoZSByZXNwb25zZSB3YXMgc2VudCBh ZnRlciB0aGUgbmV3IHNlc3Npb24gd2FzIGVzdGFibGlzaGVkLjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZh cmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkFuZCBJIGRvbuKAmXQgdW5kZXJzdGFuZCB0aGUgdmFsdWUg b2Ygc2VuZGluZyDigJxJIHJlc3RhcnRlZCByZWNlbnRseSBAc3VjaCBhIHRpbWXigJ0gaW4gdGhl IG5ldyAoRClUTFMgc2Vzc2lvbi4sIHRoZSBjbGllbnQgYW55d2F5cyBoYXMgdG8gcmVzZW5kIHRo ZSBsaXN0IG9mIGFjdGl2ZSBtaXRpZ2F0aW9ucyBpdCB3aXNoZXMNCiB0byBvYnNlcnZlIGluIHRo ZSBuZXcgc2Vzc2lvbiAoaXJyZXNwZWN0aXZlIG9mIHRoZSByZWFzb24gdGhlIHNlc3Npb24gaXMg ZGlzY29ubmVjdGVkKS4gQSBzZXNzaW9uIGNvdWxkIGJlIGRpc2Nvbm5lY3RlZCBiZWNhdXNlIG9m IHZhcmlvdXMgb3RoZXIgcmVhc29ucyAoZS5nLiBOQVQgcmVsb2FkKS48c3BhbiBzdHlsZT0iY29s b3I6IzFGNDk3RCI+PG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RDttc28tZmFyZWFz dC1sYW5ndWFnZTpaSC1DTiI+W0pvbjJdJm5ic3A7IE9LLCBzbyB3aGVuZXZlciBhIG5ldyBzZXNz aW9uIGlzIHN0YXJ0ZWQgZm9yIHdoYXRldmVyIHJlYXNvbiwgdGhlcmUgbmVlZHMgdG8gYmUgYSBy ZXNlbmQgb2YgYWN0aXZlIG1pdGlnYXRpb25zLiZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNv LWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw cmU+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPltUUl0gTm8sIEkgbWVhbnQgVGhlIERPVFMgY2xpZW50IGluIHRoZSBu ZXcgKEQpVExTIHNlc3Npb24gaGFzIHRvIHNlbmQgR0VUIHJlcXVlc3Qgd2l0aCBPYnNlcnZlIG9w dGlvbiB0byByZWNlaXZlIHVuc29saWNpdGVkIG5vdGlmaWNhdGlvbnMgb2YgYXR0YWNrIG1pdGln YXRpb24gc3RhdHVzIG9mIGFjdGl2ZSBtaXRpZ2F0aW9uIHJlcXVlc3RzIGZyb20gdGhlIERPVFMg c2VydmVyLiA8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+LVRpcnU8bzpwPjwv bzpwPjwvc3Bhbj48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+SG93ZXZlciwgSSBoYXZl IG5vdCBmb3VuZCBhbnl3aGVyZSBpbiB0aGUgc2lnbmFsIC8gcmVxdWlyZW1lbnRzIC8gYXJjaGl0 ZWN0dXJlIHdoZXJlIHRoaXMgaXMgc3VnZ2VzdGVkIChidXQgbWF5IGhhdmUgc2VhcmNoZWQgb24g dGhlIHdyb25nIGtleXdvcmRzISkgSSB0aGluayB0aGF0IHRoaXMNCiBuZWVkcyB0byBiZSBzdGF0 ZWQgc29tZXdoZXJlLCBldmVuIHRob3VnaCBpdCBpcyBvYnZpb3VzIGlmIHlvdSB0aGluayBhYm91 dCBpdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6Wkgt Q04iPn5Kb24yPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+LVRpcnU8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1m YXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6 MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVh c3QtbGFuZ3VhZ2U6WkgtQ04iPkZyb206PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4gSm9uIFNoYWxsb3cgWzxhIGhyZWY9Im1h aWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tIj5tYWlsdG86c3VwanBzLWlldGZAanBzaGFs bG93LmNvbTwvYT5dDQo8YnI+DQo8Yj5TZW50OjwvYj4gVGh1cnNkYXksIE1heSAxNywgMjAxOCA4 OjU0IFBNPGJyPg0KPGI+VG86PC9iPiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5ICZsdDs8YSBo cmVmPSJtYWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbSI+VGlydW1hbGVz d2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbTwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOm1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iPm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208L2E+ OyA8YSBocmVmPSJtYWlsdG86ZG90c0BpZXRmLm9yZyI+DQpkb3RzQGlldGYub3JnPC9hPjxicj4N CjxiPlN1YmplY3Q6PC9iPiBSRTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0 aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHRhYmxlIGNsYXNzPSJNc29O b3JtYWxUYWJsZSIgYm9yZGVyPSIxIiBjZWxsc3BhY2luZz0iMyIgY2VsbHBhZGRpbmc9IjAiIHN0 eWxlPSJiYWNrZ3JvdW5kOiNGM0ZGMzM7Ym9yZGVyOnNvbGlkICM5QjlBODcgMS41cHQiPg0KPHRi b2R5Pg0KPHRyPg0KPHRkIHN0eWxlPSJib3JkZXI6bm9uZTtwYWRkaW5nOi43NXB0IC43NXB0IC43 NXB0IC43NXB0Ij4NCjxwPjxzdHJvbmc+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPkNBVVRJT048 L3NwYW4+PC9zdHJvbmc+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPjo8L3NwYW4+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOmJsYWNrIj4NCiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9w ZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0 aGUgY29udGVudCBpcyBzYWZlLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8ZGl2IGNsYXNzPSJNc29Ob3Jt YWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gbGFuZz0i RU4tR0IiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+DQo8aHIgc2l6ZT0iMyIg d2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi PkhpIFRpcnUsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPlNlZSBpbmxpbmUgW0pvbjFdPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlJlZ2FyZHM8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Sm9u PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERG IDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdC Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0 LWxhbmd1YWdlOkVOLUdCIj4gRG90cyBbbWFpbHRvOg0KPGEgaHJlZj0ibWFpbHRvOmRvdHMtYm91 bmNlc0BpZXRmLm9yZyI+ZG90cy1ib3VuY2VzQGlldGYub3JnPC9hPl0gPGI+T24gQmVoYWxmIE9m DQo8L2I+S29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeTxicj4NCjxiPlNlbnQ6PC9iPiAxNyBNYXkg MjAxOCAxNjowMzxicj4NCjxiPlRvOjwvYj4gSm9uIFNoYWxsb3c7IDxhIGhyZWY9Im1haWx0bzpt b2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29t PC9hPjsNCjxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxi cj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQg d2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5IaSBK b24sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+VGhpcyBzY2VuYXJpbyBpcyBhbHJl YWR5IGRpc2N1c3NlZCBpbiBTZWN0aW9uIDQuNy4gV2hlbiB0aGUgRERvUyBtaXRpZ2F0aW9uIGlz IGluIHByb2dyZXNzIGFuZCBhZnRlciB0aGUg4oCYbWlzc2luZy1oYi1hbGxvd2Vk4oCZIHRocmVz aG9sZCBpcyByZWFjaGVkLCB0aGUgRE9UUyBjbGllbnQgd2lsbCBjb250aW51ZSB0byB1c2UNCiB0 aGUgZXhpc3RpbmcgKEQpVExTIHNlc3Npb24gdG8gc2VuZCBoZWFydGJlYXQgcmVxdWVzdHMgdG8g dGhlIHNlcnZlciBhbmQgYXQgdGhlIHNhbWUgdGltZSB0cnkgdG8gZXN0YWJsaXNoIGEgbmV3IChE KVRMUyBzZXNzaW9uIHdpdGggRE9UUyBzZXJ2ZXIuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMxRjQ5 N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPltKb24xXSBJIGZ1bGx5IHVuZGVyc3RhbmQg dGhhdDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkZ1cnRoZXIsIGlm IHRoZSBzZXJ2ZXIgcmVzdGFydHMsIChEKVRMUyBzdGF0ZSBpcyBsb3N0IG9uIHRoZSBzZXJ2ZXIg YW5kIHRoZSBzZXJ2ZXIgZG9lcyBub3QgaGF2ZSB0aGUgY3J5cHRvZ3JhcGhpYyBzdGF0ZSB0byBz ZW5kIOKAmHJlLXN1YnNjcmliZeKAmSBvbiB0aGUgb2xkIHNlc3Npb24uDQo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImNvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPltKb24xXSBBZ3JlZWQg dGhlIERPVFMgc2VydmVyIGNhbm5vdCBzZW50IGFueXRoaW5nIHRoYXQgaXMgdW5zb2xpY2l0ZWQg ZHVlIHRvIGxvc3Mgb2YgY3J5cHRvZ3JhcGhpYyBzdGF0ZS4mbmJzcDsgSG93ZXZlciwgaWYgdGhl IERPVFMgc2VydmVyIGNhbiBzZW5kIGJhY2sgaW4gYSByZXNwb25zZSB0byBhDQogY2xpZW50IHJl cXVlc3Qgc29tZXRoaW5nIHRoYXQgc3RhdGVzIOKAnEkgcmVzdGFydGVkIHJlY2VudGx5IEAgc3Vj aCBhIHRpbWXigJ0sIHRoZSBjbGllbnQgd2lsbCBrbm93IHdoZXRoZXIgdGhlIG1pc3NpbmcgaGVh cnRiZWF0cyB3ZXJlIGRvd24gdG8ganVzdCBhIGZsYWt5IG5ldHdvcmssIG9yIHRoZSBtaXNzaW5n IGhlYXJ0YmVhdHMgd2VyZSBkdWUgdG8gYSBzZXJ2ZXIgcmVzdGFydCwgYW5kIHNvIHJlLXN1YnNj cmliZSBuZWVkZWQgZm9yIGFsbCB0aGUNCiByZXNvdXJjZXMgdGhhdCB0aGUgY2xpZW50IHdhbnRz IHRvIG1vbml0b3IuJm5ic3A7IEkgZG8gbm90IHdhbnQgdGhlIERPVFMgY2xpZW50IHRvIGtlZXAg b24gZG9pbmcgcmUtc3Vic2NyaWJlIGNvbXBvdW5kaW5nIHRoZSBuZXR3b3JrIGZsYWtpbmVzcyB3 aGVuIHVuZGVyIGF0dGFjay48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6WkgtQ04iPn5Kb24xPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpa SC1DTiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+LVRp cnU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xp ZCBibHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMu MHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkZyb206PC9zcGFuPjwvYj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4gSm9u IFNoYWxsb3cgWzxhIGhyZWY9Im1haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tIj5tYWls dG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbTwvYT5dDQo8YnI+DQo8Yj5TZW50OjwvYj4gVGh1 cnNkYXksIE1heSAxNywgMjAxOCAxOjIxIFBNPGJyPg0KPGI+VG86PC9iPiBLb25kYSwgVGlydW1h bGVzd2FyIFJlZGR5ICZsdDs8YSBocmVmPSJtYWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFA TWNBZmVlLmNvbSI+VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbTwvYT4mZ3Q7Ow0K PGEgaHJlZj0ibWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iPm1vaGFtZWQuYm91 Y2FkYWlyQG9yYW5nZS5jb208L2E+OyA8YSBocmVmPSJtYWlsdG86ZG90c0BpZXRmLm9yZyI+DQpk b3RzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSRTogW0RvdHNdIERPVFMgc2Vy dmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9u PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2 Pg0KPHRhYmxlIGNsYXNzPSJNc29Ob3JtYWxUYWJsZSIgYm9yZGVyPSIxIiBjZWxsc3BhY2luZz0i MyIgY2VsbHBhZGRpbmc9IjAiIHN0eWxlPSJiYWNrZ3JvdW5kOiNGM0ZGMzM7Ym9yZGVyOnNvbGlk ICM5QjlBODcgMS41cHQiPg0KPHRib2R5Pg0KPHRyPg0KPHRkIHN0eWxlPSJib3JkZXI6bm9uZTtw YWRkaW5nOi43NXB0IC43NXB0IC43NXB0IC43NXB0Ij4NCjxwPjxzdHJvbmc+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOiM5QjhCM0UiPkNBVVRJT048L3NwYW4+PC9zdHJvbmc+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhC M0UiPjo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtB cmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj4NCiBFeHRlcm5hbCBlbWFpbC4gRG8g bm90IGNsaWNrIGxpbmtzIG9yIG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUg dGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLjwvc3Bhbj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+ DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWdu OmNlbnRlciI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpa SC1DTiI+DQo8aHIgc2l6ZT0iMyIgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9zcGFu PjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIg c3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhpIFRpcnUsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkl0IGlzIGEgY29ybmVyIHJlY292 ZXJ5IGNhc2UuJm5ic3A7IFRoZSBET1RTIGNsaWVudCBjYW4gZGV0ZWN0IHRoYXQgdGhlIERPVFMg c2VydmVyIGhhcyBnb25lIGF3YXkgKHVzaW5nIGhlYXJ0YmVhdHMpIGFuZCByZS1zdWJzY3JpYmUg dG8gYWxsIHRoZSByZXNvdXJjZXMgdGhhdCB0aGUgRE9UUyBjbGllbnQgd2FudHMgdG8gT2JzZXJ2 ZSBvbiBkZXRlY3Rpb24NCiB0aGF0IHRoZSBET1RTIHNlcnZlciBpcyBiYWNrPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxl PSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhvd2V2 ZXIsIHdoZW4gbWl0aWdhdGluZywgdGhlcmUgaXMgYSBsaWtlbGlob29kIHRoYXQgaGVhcnRiZWF0 cyB3aWxsIHRpbWUgb3V0IGFuZCBJIGFtIG5vdCBzdXJlIHRoYXQgaXQgaXMgd2lzZSB0byDigJxy ZS1zdWJzY3JpYmXigJ0gd2hlbiB0aGUgY29ubmVjdGlvbnMgYXJlIHJlLWVzdGFibGlzaGVkIGFz IHRoZSBuZXR3b3JrIHBhdGggbWF5IHN0aWxsDQogYmUgZmxha3kgYW5kIGFkZGluZyBleHRyYSB0 cmFmZmljIG1heSBiZSBwcm9ibGVtYXRpYy4mbmJzcDsgTXkgc3VnZ2VzdGlvbiBvZiBhbiBlcG9j aCB0aW1lIGJlaW5nIHJlcG9ydGVkIGJ5IHRoZSBET1RTIHNlcnZlciB3YXMgYSB3YXkgb2YgZGV0 ZXJtaW5pbmcgd2hldGhlciDigJxyZS1zdWJzY3JpYmXigJ0gd2FzIHJlcXVpcmVkIG9yIG5vdC48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+UmVnYXJkczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj5Kb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTti b3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNv LWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPkZyb206PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7 LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPiBEb3RzIFttYWlsdG86DQo8 YSBocmVmPSJtYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnIj5kb3RzLWJvdW5jZXNAaWV0Zi5v cmc8L2E+XSA8Yj5PbiBCZWhhbGYgT2YNCjwvYj5Lb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5PGJy Pg0KPGI+U2VudDo8L2I+IDE2IE1heSAyMDE4IDE2OjA1PGJyPg0KPGI+VG86PC9iPiA8YSBocmVm PSJtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSI+bW9oYW1lZC5ib3VjYWRhaXJA b3JhbmdlLmNvbTwvYT47IEpvbiBTaGFsbG93Ow0KPGEgaHJlZj0ibWFpbHRvOmRvdHNAaWV0Zi5v cmciPmRvdHNAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbRG90c10gRE9U UyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3Vy YXRpb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVh c3QtbGFuZ3VhZ2U6WkgtQ04iPkkgZG9u4oCZdCBnZXQgdGhlIHByb2JsZW0uIElmIHRoZSBzZXJ2 ZXIgcmVzdGFydHMsIChEKVRMUyBzdGF0ZSB3aWxsIGJlIGxvc3QgYW5kIHNlcnZlciB3aWxsIHJl amVjdCBoZWFydGJlYXQgcmVxdWVzdHMgZnJvbSB0aGUgY2xpZW50IChlaXRoZXIgc2lsZW50bHkg b3Igc2VuZCBhIGZhdGFsIGFsZXJ0IHRvIHRoZSBjbGllbnQpLg0KIERPVFMgY2xpZW50IHdpbGwg aGF2ZSB0byBmb2xsb3cgdGhlIHN0ZXBzIGluIDxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvaHRtbC9kcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkjc2VjdGlvbi00LjciPg0K aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5l bC0xOSNzZWN0aW9uLTQuNzwvYT4gdG8gcmUtZXN0YWJsaXNoIChEKVRMUyBzZXNzaW9uIHdpdGgg dGhlIERPVFMgc2VydmVyLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1D TiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+LVRpcnU8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBi bHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0 IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkZyb206PC9zcGFuPjwvYj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4gRG90cyBb PGEgaHJlZj0ibWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZyI+bWFpbHRvOmRvdHMtYm91bmNl c0BpZXRmLm9yZzwvYT5dDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPjxhIGhyZWY9Im1haWx0bzptb2hh bWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPC9h Pjxicj4NCjxiPlNlbnQ6PC9iPiBXZWRuZXNkYXksIE1heSAxNiwgMjAxOCA3OjE1IFBNPGJyPg0K PGI+VG86PC9iPiBKb24gU2hhbGxvdyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnN1cGpwcy1pZXRmQGpw c2hhbGxvdy5jb20iPnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb208L2E+Jmd0OzsNCjxhIGhyZWY9 Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6 PC9iPiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBt aXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHRhYmxlIGNsYXNzPSJNc29Ob3JtYWxUYWJsZSIg Ym9yZGVyPSIxIiBjZWxsc3BhY2luZz0iMyIgY2VsbHBhZGRpbmc9IjAiIHN0eWxlPSJiYWNrZ3Jv dW5kOiNGM0ZGMzM7Ym9yZGVyOnNvbGlkICM5QjlBODcgMS41cHQiPg0KPHRib2R5Pg0KPHRyPg0K PHRkIHN0eWxlPSJib3JkZXI6bm9uZTtwYWRkaW5nOi43NXB0IC43NXB0IC43NXB0IC43NXB0Ij4N CjxwPjxzdHJvbmc+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtB cmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPkNBVVRJT048L3NwYW4+PC9zdHJv bmc+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPjo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNr Ij4NCiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4gYXR0YWNobWVu dHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBp cyBzYWZlLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90 O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvdGQ+DQo8 L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJj ZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJt c28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+DQo8aHIgc2l6ZT0iMyIgd2lkdGg9IjEwMCUiIGFs aWduPSJjZW50ZXIiPg0KPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlJlLSw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2si PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+UGxlYXNlIHNlZSBpbmxpbmUuDQo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Q2hlZXJzLDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpi bGFjayI+TWVkPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3Bh ZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNt Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28t ZmFyZWFzdC1sYW5ndWFnZTpGUiI+RGUmbmJzcDs6PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJGUiIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNh bnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPiBKb24gU2hhbGxvdyBbPGEgaHJlZj0i bWFpbHRvOnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb20iPm1haWx0bzpzdXBqcHMtaWV0ZkBqcHNo YWxsb3cuY29tPC9hPl0NCjxicj4NCjxiPkVudm95w6kmbmJzcDs6PC9iPiBtZXJjcmVkaSAxNiBt YWkgMjAxOCAxNDo0Mjxicj4NCjxiPsOAJm5ic3A7OjwvYj4gQk9VQ0FEQUlSIE1vaGFtZWQgSU1U L09MTjsgPGEgaHJlZj0ibWFpbHRvOmRvdHNAaWV0Zi5vcmciPmRvdHNAaWV0Zi5vcmc8L2E+PGJy Pg0KPGI+T2JqZXQmbmJzcDs6PC9iPiBSRTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3Rh cnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkZSIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhpIE1lZCw8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+U2Vl IGlubGluZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0i Y29sb3I6IzFGNDk3RCI+UmVnYXJkczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Kb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20g MGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMt c2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPkZyb206PC9zcGFuPjwvYj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFo b21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPiBEb3RzIFtt YWlsdG86DQo8YSBocmVmPSJtYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnIj5kb3RzLWJvdW5j ZXNAaWV0Zi5vcmc8L2E+XSA8Yj5PbiBCZWhhbGYgT2YNCjwvYj48YSBocmVmPSJtYWlsdG86bW9o YW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSI+bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwv YT48YnI+DQo8Yj5TZW50OjwvYj4gMTYgTWF5IDIwMTggMTI6NTU8YnI+DQo8Yj5Ubzo8L2I+IEpv biBTaGFsbG93OyA8YSBocmVmPSJtYWlsdG86ZG90c0BpZXRmLm9yZyI+ZG90c0BpZXRmLm9yZzwv YT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0 YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5IaSBKb24sDQo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+UGxlYXNlIHNlZSBpbmxpbmUuDQo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Q2hlZXJzLDxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztj b2xvcjpibGFjayI+TWVkPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEu NXB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAw Y20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJp Zjttc28tZmFyZWFzdC1sYW5ndWFnZTpGUiI+RGUmbmJzcDs6PC9zcGFuPjwvYj48c3BhbiBsYW5n PSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1 b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPiBEb3RzIFs8YSBocmVmPSJt YWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnIj5tYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3Jn PC9hPl0NCjxiPkRlIGxhIHBhcnQgZGU8L2I+IEpvbiBTaGFsbG93PGJyPg0KPGI+RW52b3nDqSZu YnNwOzo8L2I+IG1lcmNyZWRpIDE2IG1haSAyMDE4IDEyOjI0PGJyPg0KPGI+w4AmbmJzcDs6PC9i PiA8YSBocmVmPSJtYWlsdG86ZG90c0BpZXRmLm9yZyI+ZG90c0BpZXRmLm9yZzwvYT48YnI+DQo8 Yj5PYmpldCZuYnNwOzo8L2I+IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGgg T2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tR0IiPkhpIHRoZXJlLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+Rm9yIHRoZSBzaWduYWwgY2hh bm5lbCwgaXQgaXMgZWFzeSB0byBtYWludGFpbiBhIHBlcnNpc3RlbnQgbGlzdCBvZiBhY3RpdmUg bWl0aWdhdGlvbnMuJm5ic3A7IFNob3VsZCB0aGUgRE9UUyBzZXJ2ZXIgKHVuZXhwZWN0ZWRseSkg c3RvcCBhbmQgcmVzdGFydCwgdGhlbiBpdCBpcyBlYXN5IHRvIHJlYnVpbGQgdGhlIGN1cnJlbnQg YWN0aXZlIG1pdGlnYXRpb25zLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O2NvbG9yOmJsYWNrIj5bTWVkXSBUaGUgbGlzdCBvZiBhY3RpdmUgbWl0aWdhdGlvbnMgaXMgdGhl IOKAnGNvcmXigJ0gc3RhdGUgZGF0YSB0byBiZSBtYWludGFpbmVkIGJ5IGEgc2VydmVyLiBJZiB3 ZSBhc3N1bWUgdGhhdCBsaXN0IGNhbiBiZSByZWxpYWJseSByZWJ1aWx0LCB0aGVuIHRoZXJlIGlz DQogbm8gZXh0ZW5zaW9uIG5lZWRlZCB0byB0aGUgc2lnbmFsIGNoYW5uZWwgdG8gaGFuZGxlIHRo aXMgZmFpbHVyZSBjYXNlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0Ii IHN0eWxlPSJjb2xvcjojMUY0OTdEIj5bSm9uXSBBZ3JlZWQuJm5ic3A7IFRoaXMgd2FzIGp1c3Qg bWUgYnVpbGRpbmcgdXAgdGhlIGJhY2tncm91bmQgdG8gdGhlIHNjZW5hcmlvLjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHls ZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkhvd2V2ZXIsIHRvIHJlYnVpbGQgdGhlIGxp c3Qgb2YgYWN0aXZlIE9ic2VydmF0aW9ucyBvZiB0aGUgY3VycmVudCBtaXRpZ2F0aW9ucyAvIGNv bmZpZ3VyYXRpb24gY2hhbmdlcyBpcyBjb25zaWRlcmFibHkgbW9yZSBkaWZmaWN1bHQgYXMgdGhl IERPVFMgc2VydmVyIHdvdWxkIGFsc28gbmVlZCB0byBtYWludGFpbiBhIGxpc3Qgb2YgY2xpZW50 IElQcy9zb3VyY2UgcG9ydHMgZXRjLg0KIGFsb25nIHdpdGggVG9rZW5zIGFuZCBRdWVyaWVzIGFu ZCAoRClUTFMgc3RhdGUgc28gdGhhdCB1bnNvbGljaXRlZCBPYnNlcnZlIHJlc3BvbnNlcyBjYW4g Y29udGludWUgdG8gYmUgc2VudCBiYWNrIHRvIHRoZSBjbGllbnRzLiZuYnNwOyBJIGRvbuKAmXQg cmVhbGx5IHRoaW5rIHRoYXQgdGhpcyBpcyBhIHByYWN0aWNhbCBhc2suPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9y OmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPltNZWRdIEZpcnN0LCB0aGlzIGNh biBiZSBjb25zaWRlcmVkIGFzIGRlcGxveW1lbnQtc3BlY2lmaWMuIEFzIHN1Y2ggaW4gc29tZSBk ZXBsb3ltZW50cywgdGhlcmUgaXMgbm8gbmVlZCB0byBzdXBwb3J0IGF1dG9tYXRpYyBtZWFucyB0 byBkZXRlY3Qgc3RhdGUgbG9zcw0KIGF0IHRoZSBzZXJ2ZXIgc2lkZS4gU2Vjb25kLCBpcyBpdCBy ZWFsbHkgcHJvYmxlbWF0aWMgZm9yIHRoZSBERG9TIG1pdGlnYXRpb24gdGhhdCBsaXN0IGlzIGxv c3QgYnkgYSBzZXJ2ZXI/IEkgZ3Vlc3MsIHRoZSBhbnN3ZXIgaXMgbm8gaWYgd2UgYXNzdW1lIHRo ZSBsaXN0IG9mIG1pdGlnYXRpb25zIHRoZW1zZWx2ZXMgaXMgbWFpbnRhaW5lZC4NCjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBz dHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5b Sm9uXSBNeSBjb25jZXJuIGlzIHRoYXQgdGhlIERPVFMgY2xpZW50cyB3b3VsZCBub3Qgc2VlIHRo ZSBjaGFuZ2UgaW4gbWl0aWdhdGlvbiBzdGF0ZSwgb3Igd291bGQgbm90IHNlZSB0aGF0IHRoZXJl IGlzIGEgbmV3IHNpZ25hbCBjaGFubmVsIGNvbmZpZ3VyYXRpb24gKGlmIHRoZXkgd2VyZSBiZWlu ZyBPYnNlcnZlZCkuIFRoZSBET1RTIGNsaWVudC9zZXJ2ZXINCiB3b3VsZCBiZSBvdXQgb2Ygc3lu YyB3aXRoIHdoYXQgaXMgaGFwcGVuaW5nIGFuZCB0aGUgRE9UUyBjbGllbnQgd291bGQgbm90IG5l Y2Vzc2FyaWx5IGtub3cgdGhhdCBpdCBoYXMgdG8gdGFrZSBzb21lIGFjdGlvbiB0byBnZXQgYmFj ayB0byB0aGUgc3RhdGUgYmVmb3JlIHRoZSBET1RTIHNlcnZlciBvdXRhZ2UuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPltNZWRdIFRoZSBkb3RzIGNs aWVudCBoYXMgb3RoZXIgbWVhbnMgdG8ga25vdyB0aGUgbWl0aWdhdGlvbiBzdGF0ZS4gVGhlIERP VFMgY2xpZW50IGNhbiBvYnNlcnZlIHRoZSBzdGF0dXMgbG9jYWxseSAoYW5kIHJlcG9ydCBpdCB0 byB0aGUgc2VydmVyKSBvciBzZW5kIGENCiByZXF1ZXN0IHRvIHJldHJpZXZlIHRoZSBzdGF0dXMg ZnJvbSB0aGUgc2VydmVyLiBUaGUgb3V0IG9mIHN5bmNoIGluIG9ic2VydmUgaXMgbm90IHRoYXQg Y3JpdGljYWwgZm9yIG1pdGlnYXRpbmcgRERvUyBhdHRhY2tzLiAmbmJzcDs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5BcyB0aGUgRE9UUyBzZXJ2ZXIgcmVzdGFydGVk LCBleGlzdGluZyAoRClUTFMgc2Vzc2lvbnMgdXNlZCBieSB0aGUgRE9UUyBjbGllbnQgd2lsbCBm YWlsLiZuYnNwOyBTbywgdGhlIGhlYXJ0YmVhdCBtZWNoYW5pc20gd2lsbCBldmVudHVhbGx5IHRp bWUgb3V0ICZuYnNwO2FuZCBJIGd1ZXNzIHRoYXQgdGhlIERPVFMgY2xpZW50IHNob3VsZCBkZXRl Y3QgdGhpcyBhbmQgcmUtZG8gYWxsIG9mIHRoZQ0KIE9ic2VydmUgcmVxdWVzdHMgKGFsb25nIHdp dGggbWFraW5nIHN1cmUgdGhhdCBhbGwgdGhlIGFjdGl2ZSBtaXRpZ2F0aW9ucyBhcmUgYXMgZXhw ZWN0ZWQpLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNr Ij5bTWVkXSBJbmNsdWRpbmcgY2xpZW50cyBpbiBuZXR3b3JrcyB1bmRlciBhY3RpdmUgYXR0YWNr cz8gSXNu4oCZdCB0aGlzIG92ZXJsb2FkaW5nIHRoZSBzZXJ2ZXIgd2hpbGUgZGVhbGluZyB3aXRo IG9uZ29pbmcgYXR0YWNrcz8gJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25dIFllcywgaXQgd291bGQg4oCTIGhl bmNlIEkgZGlkIG5vdCByZWFsbHkgd2FudCB0byBoYXZlIHRvIGRvIHRoaXMgd2hlbmV2ZXIgYSBo ZWFydGJlYXQgZmFpbGVkLCBidXQgb25seSBkbyBpdCB3aGVuIHRoZSBET1RTIGNsaWVudCDigJxr bm93c+KAnSB0aGF0IHRoZSBzZXJ2ZXIgaGFzIGhhZCBhbiBvdXRhZ2UuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+SG93ZXZlciBpbiBQZWFjZSB0aW1lIEhlYXJ0YmVh dHMgbWF5IG5vdCBiZWluZyB1c2VkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5Ib3dldmVyIGF0IE1pdGlnYXRpb24gdGltZSBo ZWFydGJlYXRzIG1heSBmYWlsLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+V291bGQgaXQgbWFrZSBzZW5z ZSB0byBhZGQgdG8gdGhlIHNpZ25hbCBjaGFubmVsIGFuIGV4dHJhIHBhcmFtZXRlciB0aGF0IHRo ZSBET1RTIHNlcnZlciBjYW4gc2VuZCB0byB0aGUgY2xpZW50IGluIGFueSByZXNwb25zZSBpbiB0 aGUgZm9ybSBvZg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tR0IiPuKAnGxhc3QtcmVzdGFydGVk4oCdIDogc2Vjb25kcy1zaW5jZS1l cG9jaDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIj5XaGljaCB0aGUgY2xpZW50IGNhbiB1c2UgdG8gZGV0ZWN0ZWQgdGhlIHJlc3Rh cnQuPHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNr Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPltNZWRdIFdlIHVzZWQgdG8gaGF2ZSBhbiBl cG9jaC1iYXNlZCBhcHByb2FjaCBmb3IgYSBzdGF0ZWZ1bGwgc2VydmljZSAoc2VlDQo8YSBocmVm PSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjg4NyNzZWN0aW9uLTguNSI+aHR0cHM6 Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzY4ODcjc2VjdGlvbi04LjU8L2E+KS4gVGhlIGRldGFp bHMgYXJlIG5vdCByZXN0cmljdGVkIHRvIGp1c3Qgc2lnbmFsbGluZyB0aGUgZXBvY2ggdmFsdWUg YnV0IHRvIHRoZSBsb2dpYyB0byBoYW5kbGUgaXQgYXQgdGhlIGNsaWVudCBzaWRlLiBGdXJ0aGVy LCB0aGVyZSBhcmUgc29tZSBhc3BlY3RzDQogdG8gYmUgdGFrZW4gaW50byBhY2NvdW50IHdoZW4g Y29uZmlndXJpbmcgcmVkdW5kYW5jeSBzZXJ2ZXJzIHdoZW4gYW4gYW55Y2FzdCBhZGRyZXNzIGlz IHVzZWQuIElmIHRoZSBzYW1lIGluaXRpYWwgZXBvY2ggdmFsdWUgaXMgY29uZmlndXJlZCwgdGhl IGNsaWVudCBtYXkgbm90IGRldGVjdCBhIGJhY2t1cCBzZXJ2ZXIgaXMgdXNlZCBhbmQgaGVuY2Ug bWF5IG5vdCByZWluc3RhbGwgc3RhdGUuLi4gQSB0d2VhayBpcyB0byBjb25maWd1cmUgZGlzdGlu Y3QNCiBlcG9jaCB2YWx1ZXMgKGUuZy4sICYjNDM7Ly0gMjRoIGRpZmZlcmVuY2UgYmV0d2VlbiBh IHNlcnZlciByZWR1bmRhbmN5IGdyb3VwKS4gPG86cD4NCjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90Oztjb2xvcjpibGFjayI+VGhlIGVwb2NoIGlzIGp1c3RpZmllZCBmb3IgNjg4NyBi ZWNhdXNlIHdlIHdhbnRlZCB0byByZWNvdmVyIHN0YXRlIGxvc3MsIHdoaWxlIGluIHRoZSBET1RT IGNhc2Ugd2UgZG9u4oCZdCBoYXZlIHRoZSBzYW1lIG1vZGVsIGdpdmVuIHRoYXQsIGFzIHlvdSBy aWdodGZ1bGx5DQogc2FpZCBhYm92ZSwgdGhlIGN1cnJlbnQgYWN0aXZlIG1pdGlnYXRpb25zIGNh biBiZSByZWJ1aWx0IGF0IHRoZSBzZXJ2ZXIgc2lkZSB3aXRob3V0IGludm9sdmluZyBjbGllbnRz LiAmbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xv cjojMUY0OTdEIj5bSm9uXSBTbyB0aGlzIG1ldGhvZCBzZXRzIGVwb2NoIHRpbWUgYmFjayB0byAw IHdoZW5ldmVyIHRoZXJlIGlzIGEgcmVzdGFydCwNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1HQiIg c3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPltNZWRdIFllcy4gVGhl IGVwb2NoIGlzIHJlc2V0IGVhY2ggdGltZSB0aGUgc3RhdGUgaXMgbG9zdCBhdCB0aGUgc2VydmVy IHNpZGUuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+cmF0aGVyIHRoYXQgcmVwb3J0IG9uIHRoZSBudW1iZXIgb2Ygc2Vjb25kcyBzaW5j ZSBKYW4gMSAxOTcwLiAmbmJzcDsmbmJzcDtUaGF0IEkgY2FuIGhhbmRsZS4mbmJzcDsgSG93ZXZl ciBhbnljYXN0ICh0aG91Z2ggcmVkdW5kYW50IHNlcnZlcnMgYXJlIGN1cnJlbnRseSBvdXQgb2Yg c3BlYykgd2hlcmUgMiBvciBtb3JlIHNlcnZlcnMgcmVzdGFydCBhbmQgdXBkYXRlDQogdGhlIHN0 YXJ0IHRpbWUgYXQgZXhhY3RseSB0aGUgc2FtZSB0aW1lIGlzIHBvc3NpYmxlLCBidXQgdW5saWtl bHkuJm5ic3A7IFRoaXMgY291bGQgYmUgaGFuZGxlZCBieSB0aGUgYW55Y2FzdCBzZXJ2ZXJzIGNv bW11bmljYXRpbmcgYW5kIHNlZWluZyB0aGV5IGJvdGggaGF2ZSB0aGUgc2FtZSBzdGFydCB0aW1l IHNvIG9uZSBiYWNrcyBvZmYgKGluIHRpbWUgdGVybXMpLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5bSm9uXSBJ4oCZbSBqdXN0 IGludGVyZXN0ZWQgaW4gaG93IHRvIHJlY292ZXIgT2JzZXJ2ZSBsb3NzLjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjpibGFjayI+W01lZF0gSeKAmW0gbm90IGNvbnZpbmNlZCB0aGlzIGlzIHJlYWxseSBuZWVkZWQg Z2l2ZW4gdGhhdCBhY3RpdmUgbWl0aWdhdGlvbnMgYXJlIG5vdCBjb25jZXJuZWQgd2l0aCB0aGlz IGZhaWx1cmUgc2NlbmFyaW8uICZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tR0IiPiZuYnNwOyBJIGFwcHJlY2lhdGUgaW4gcGVhY2UgdGltZSB0aGVyZSBtYXkgbm90 IGJlIGFueSBET1RTIGNsaWVudCByZXF1ZXN0cyAob3IgaGVhcnRiZWF0KSBmb3IgYSBsb25nIHRp bWUuLi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPknigJltIG9wZW4gdG8gc3VnZ2VzdGlvbnMuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0Ii PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIj5SZWdhcmRzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5Kb248bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_C02846B1344F344EB4FAA6FA7AF481F12BD7E036DGGEML502MBXchi_-- From nobody Mon May 21 00:54:08 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F086126C83 for ; Mon, 21 May 2018 00:54:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.8 X-Spam-Level: X-Spam-Status: No, score=0.8 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E4NPYLO4QduU for ; Mon, 21 May 2018 00:54:04 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D783126C22 for ; Mon, 21 May 2018 00:54:04 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fKfdp-0004TU-Sc for ietf-supjps-dots@ietf.org; Mon, 21 May 2018 08:54:01 +0100 From: "Jon Shallow" To: Date: Mon, 21 May 2018 08:54:03 +0100 Message-ID: <13c601d3f0d8$e33a7e60$a9af7b20$@jpshallow.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_13C7_01D3F0E1.44FF5B90" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdPw2OMs2S/Cxz++QK2ZFs5FzGjbSg== Content-Language: en-gb Archived-At: Subject: [Dots] CoAP over TCP 7.0.4 release - Alternative address usage X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 May 2018 07:54:06 -0000 This is a multipart message in MIME format. ------=_NextPart_000_13C7_01D3F0E1.44FF5B90 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi there, As "RFC 8323: 5.5 Release messages" defines Alternative addresses to use (for TCP) with 7.04 code with options, should we also be using this within the signal channel as an alternative to the "signal draft 4.6. Redirected Signaling" ? Regards Jon ------=_NextPart_000_13C7_01D3F0E1.44FF5B90 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi = there,

 

As “RFC 8323: 5.5 Release messages” = defines Alternative addresses to use (for TCP) with 7.04 code with = options, should we also be using this within the signal channel as an = alternative to the “signal draft 4.6. Redirected Signaling” = ?

 

Regards

 

Jon =

------=_NextPart_000_13C7_01D3F0E1.44FF5B90-- From nobody Mon May 21 00:54:39 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4885F12E866 for ; Mon, 21 May 2018 00:54:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MUti8DWMJbgK for ; Mon, 21 May 2018 00:54:35 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9AE99126C22 for ; Mon, 21 May 2018 00:54:35 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fKfeM-0004Tg-3y for ietf-supjps-dots@ietf.org; Mon, 21 May 2018 08:54:34 +0100 From: "Jon Shallow" To: Date: Mon, 21 May 2018 08:54:36 +0100 Message-ID: <13d301d3f0d8$f66f7c60$e34e7520$@jpshallow.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_13D4_01D3F0E1.58365560" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdPw2PQOXpzyKiqHQ7+v5FEn8F2Thw== Content-Language: en-gb Archived-At: Subject: [Dots] TLS APLN extension X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 May 2018 07:54:38 -0000 This is a multipart message in MIME format. ------=_NextPart_000_13D4_01D3F0E1.58365560 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi there, As per RFC 8323: 8.2. coaps+tcp URI Scheme ... o If a TLS server does not support the Application-Layer Protocol Negotiation (ALPN) extension [RFC7301] or wishes to accommodate TLS clients that do not support ALPN, it MAY offer a coaps+tcp endpoint on TCP port 5684. This endpoint MAY also be ALPN enabled. A TLS server MAY offer coaps+tcp endpoints on ports other than TCP port 5684, which MUST be ALPN enabled. o For TCP ports other than port 5684, the TLS client MUST use the ALPN extension to advertise the "coap" protocol identifier (see Section 11.7) in the list of protocols in its ClientHello. If the TCP server selects and returns the "coap" protocol identifier using the ALPN extension in its ServerHello, then the connection succeeds. If the TLS server either does not negotiate the ALPN extension or returns a no_application_protocol alert, the TLS client MUST close the connection. Do we need to refer to the requirement for ALPN as we are not hosting on port 5684? Regards Jon ------=_NextPart_000_13D4_01D3F0E1.58365560 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi = there,

 

As per RFC 8323: 8.2.  coaps+tcp URI = Scheme

 

...

 

   = o  If a TLS server does not support the Application-Layer = Protocol

      Negotiation (ALPN) = extension [RFC7301] or wishes to accommodate

      TLS clients that do not = support ALPN, it MAY offer a coaps+tcp

      endpoint on TCP port = 5684.  This endpoint MAY also be ALPN

      enabled.  A TLS = server MAY offer coaps+tcp endpoints on ports

      other than TCP port = 5684, which MUST be ALPN enabled.

 

   = o  For TCP ports other than port 5684, the TLS client MUST use = the

      = ALPN extension to advertise the "coap" protocol identifier = (see

      = Section 11.7) in the list of protocols in its ClientHello.  If = the

      = TCP server selects and returns the "coap" protocol = identifier

      using the ALPN = extension in its ServerHello, then the connection

      succeeds.  If the = TLS server either does not negotiate the ALPN

      extension or returns a = no_application_protocol alert, the TLS

      client MUST close the = connection.

 

Do we need to refer to the requirement for ALPN as we = are not hosting on port 5684?

 

Regards

 

Jon

------=_NextPart_000_13D4_01D3F0E1.58365560-- From nobody Mon May 21 08:10:10 2018 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DDA431273E2; Mon, 21 May 2018 08:10:04 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: rdd@cert.org, dots-chairs@ietf.org, dots@ietf.org, kaduk@mit.edu X-Test-IDTracker: no X-IETF-IDTracker: 6.80.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152691540482.22939.13129111597648764094.idtracker@ietfa.amsl.com> Date: Mon, 21 May 2018 08:10:04 -0700 Archived-At: Subject: [Dots] dots - New Meeting Session Request for IETF 102 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 May 2018 15:10:05 -0000 A new meeting session request has just been submitted by Roman Danyliw, a Chair of the dots working group. --------------------------------------------------------- Working Group Name: DDoS Open Threat Signaling Area Name: Security Area Session Requester: Roman Danyliw Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 80 Conflicts to Avoid: First Priority: mile i2nsf sacm saag Second Priority: opsawg People who must be present: Roman Danyliw Tobias Gondrom Benjamin Kaduk Resources Requested: Special Requests: --------------------------------------------------------- From nobody Tue May 22 00:46:17 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8293D124F57 for ; Tue, 22 May 2018 00:46:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mt-Hyd_0mYPH for ; Tue, 22 May 2018 00:46:13 -0700 (PDT) Received: from orange.com (mta135.mail.business.static.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 677C1126B6E for ; Tue, 22 May 2018 00:46:13 -0700 (PDT) Received: from opfednr00.francetelecom.fr (unknown [xx.xx.xx.64]) by opfednr24.francetelecom.fr (ESMTP service) with ESMTP id 5FEA040716; Tue, 22 May 2018 09:46:11 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.58]) by opfednr00.francetelecom.fr (ESMTP service) with ESMTP id 3D0381A007C; Tue, 22 May 2018 09:46:11 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM33.corporate.adroot.infra.ftgroup ([fe80::3881:fc15:b4b2:9017%19]) with mapi id 14.03.0389.001; Tue, 22 May 2018 09:46:10 +0200 From: To: Jon Shallow , "dots@ietf.org" Thread-Topic: [Dots] CoAP over TCP 7.0.4 release - Alternative address usage Thread-Index: AdPw2OMs2S/Cxz++QK2ZFs5FzGjbSgAxi9eA Date: Tue, 22 May 2018 07:46:10 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF1E272@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <13c601d3f0d8$e33a7e60$a9af7b20$@jpshallow.com> In-Reply-To: <13c601d3f0d8$e33a7e60$a9af7b20$@jpshallow.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93302DF1E272OPEXCLILMA3corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] CoAP over TCP 7.0.4 release - Alternative address usage X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 May 2018 07:46:16 -0000 --_000_787AE7BB302AE849A7480A190F8B93302DF1E272OPEXCLILMA3corp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Jon, The current procedure in 4.6 is generic and allows for clients to fall back= to the nominal server (ttl thing) without another yet explicit signal from= the server. Release messages do not achieve the above features (but only a subset of th= e redirected sign procedure). Cheers, Med De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow Envoy=E9 : lundi 21 mai 2018 09:54 =C0 : dots@ietf.org Objet : [Dots] CoAP over TCP 7.0.4 release - Alternative address usage Hi there, As "RFC 8323: 5.5 Release messages" defines Alternative addresses to use (f= or TCP) with 7.04 code with options, should we also be using this within th= e signal channel as an alternative to the "signal draft 4.6. Redirected Sig= naling" ? Regards Jon --_000_787AE7BB302AE849A7480A190F8B93302DF1E272OPEXCLILMA3corp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi Jon,

 

The current p= rocedure in 4.6 is generic and allows for clients to fall back to the nomin= al server (ttl thing) without another yet explicit signal from the server.

 

Release messa= ges do not achieve the above features (but only a subset of the redirected = sign procedure).

 

Cheers,<= /o:p>

Med

 

De : Dots [mailto:dots-bounces@ietf.= org] De la part de Jon Shallow
Envoy=E9 : lundi 21 mai 2018 09:54
=C0 : dots@ietf.org
Objet : [Dots] CoAP over TCP 7.0.4 release - Alternative addres= s usage

 

Hi there,

 

As “RFC 8323: 5.5 Release= messages” defines Alternative addresses to use (for TCP) with 7.04 c= ode with options, should we also be using this within the signal channel as= an alternative to the “signal draft 4.6. Redirected Signaling” ?

 

Regards

 

Jon

--_000_787AE7BB302AE849A7480A190F8B93302DF1E272OPEXCLILMA3corp_-- From nobody Tue May 22 00:54:45 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92E6D12E858 for ; Tue, 22 May 2018 00:54:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uK9BaP4FC5ec for ; Tue, 22 May 2018 00:54:42 -0700 (PDT) Received: from orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F8AF12E854 for ; Tue, 22 May 2018 00:54:42 -0700 (PDT) Received: from opfednr04.francetelecom.fr (unknown [xx.xx.xx.68]) by opfednr23.francetelecom.fr (ESMTP service) with ESMTP id 92EC3C05F0; Tue, 22 May 2018 09:54:40 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.18]) by opfednr04.francetelecom.fr (ESMTP service) with ESMTP id 7064B4005B; Tue, 22 May 2018 09:54:40 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM34.corporate.adroot.infra.ftgroup ([fe80::cba:56d0:a732:ef5a%19]) with mapi id 14.03.0389.001; Tue, 22 May 2018 09:54:40 +0200 From: To: Jon Shallow , "dots@ietf.org" Thread-Topic: [Dots] TLS APLN extension Thread-Index: AdPw2PQOXpzyKiqHQ7+v5FEn8F2ThwAyFv1g Date: Tue, 22 May 2018 07:54:39 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF1E28F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <13d301d3f0d8$f66f7c60$e34e7520$@jpshallow.com> In-Reply-To: <13d301d3f0d8$f66f7c60$e34e7520$@jpshallow.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93302DF1E28FOPEXCLILMA3corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] TLS APLN extension X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 May 2018 07:54:45 -0000 --_000_787AE7BB302AE849A7480A190F8B93302DF1E28FOPEXCLILMA3corp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Re-, Do we need this given that DOTS is using a dedicated port number? Cheers, Med De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow Envoy=E9 : lundi 21 mai 2018 09:55 =C0 : dots@ietf.org Objet : [Dots] TLS APLN extension Hi there, As per RFC 8323: 8.2. coaps+tcp URI Scheme ... o If a TLS server does not support the Application-Layer Protocol Negotiation (ALPN) extension [RFC7301] or wishes to accommodate TLS clients that do not support ALPN, it MAY offer a coaps+tcp endpoint on TCP port 5684. This endpoint MAY also be ALPN enabled. A TLS server MAY offer coaps+tcp endpoints on ports other than TCP port 5684, which MUST be ALPN enabled. o For TCP ports other than port 5684, the TLS client MUST use the ALPN extension to advertise the "coap" protocol identifier (see Section 11.7) in the list of protocols in its ClientHello. If the TCP server selects and returns the "coap" protocol identifier using the ALPN extension in its ServerHello, then the connection succeeds. If the TLS server either does not negotiate the ALPN extension or returns a no_application_protocol alert, the TLS client MUST close the connection. Do we need to refer to the requirement for ALPN as we are not hosting on po= rt 5684? Regards Jon --_000_787AE7BB302AE849A7480A190F8B93302DF1E28FOPEXCLILMA3corp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Re-,

 

Do we need th= is given that DOTS is using a dedicated port number?

 

Cheers,

Med

 

De : Dots [mailto:dots-bounces@ietf.= org] De la part de Jon Shallow
Envoy=E9 : lundi 21 mai 2018 09:55
=C0 : dots@ietf.org
Objet : [Dots] TLS APLN extension

 

Hi there,

 

As per RFC 8323: 8.2.  coa= ps+tcp URI Scheme

 

...

 

   o  If a TLS s= erver does not support the Application-Layer Protocol

      = Negotiation (ALPN) extension [RFC7301] or wishes to accommodate<= /span>

      = TLS clients that do not support ALPN, it MAY offer a coaps+tcp

      = endpoint on TCP port 5684.  This endpoint MAY also be ALPN<= /span>

      = enabled.  A TLS server MAY offer coaps+tcp endpoints on ports=

      = other than TCP port 5684, which MUST be ALPN enabled.

 

   o  For TCP po= rts other than port 5684, the TLS client MUST use the

      = ALPN extension to advertise the "coap" protocol identifier (see

      = Section 11.7) in the list of protocols in its ClientHello.  If the

      = TCP server selects and returns the "coap" protocol identifier

      = using the ALPN extension in its ServerHello, then the connection=

      = succeeds.  If the TLS server either does not negotiate the ALPN

      = extension or returns a no_application_protocol alert, the TLS

      = client MUST close the connection.

 

Do we need to refer to the requ= irement for ALPN as we are not hosting on port 5684?

 

Regards

 

Jon

--_000_787AE7BB302AE849A7480A190F8B93302DF1E28FOPEXCLILMA3corp_-- From nobody Tue May 22 07:17:28 2018 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 97AD51270A0; Tue, 22 May 2018 07:17:26 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: rdd@cert.org, dots-chairs@ietf.org, dots@ietf.org, kaduk@mit.edu X-Test-IDTracker: no X-IETF-IDTracker: 6.80.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152699864661.31292.296772256932493738.idtracker@ietfa.amsl.com> Date: Tue, 22 May 2018 07:17:26 -0700 Archived-At: Subject: [Dots] dots - Update to a Meeting Session Request for IETF 102 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 May 2018 14:17:27 -0000 An update to a meeting session request has just been submitted by Roman Danyliw, a Chair of the dots working group. --------------------------------------------------------- Working Group Name: DDoS Open Threat Signaling Area Name: Security Area Session Requester: Roman Danyliw Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 80 Conflicts to Avoid: First Priority: mile i2nsf sacm saag ace secdispatch Second Priority: opsawg People who must be present: Roman Danyliw Tobias Gondrom Benjamin Kaduk Resources Requested: Special Requests: --------------------------------------------------------- From nobody Tue May 22 17:35:02 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DABD612D95E for ; Tue, 22 May 2018 17:35:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7Es1Vd-_6k7E for ; Tue, 22 May 2018 17:35:00 -0700 (PDT) Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4365812D94B for ; Tue, 22 May 2018 17:35:00 -0700 (PDT) X-AuditID: 12074424-f1dff700000031db-52-5b04b731dc04 Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id 52.86.12763.237B40B5; Tue, 22 May 2018 20:34:58 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id w4N0YuwB025092; Tue, 22 May 2018 20:34:56 -0400 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w4N0YpGv003925 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 22 May 2018 20:34:54 -0400 Date: Tue, 22 May 2018 19:34:52 -0500 From: Benjamin Kaduk To: mohamed.boucadair@orange.com Cc: Jon Shallow , "dots@ietf.org" Message-ID: <20180523003451.GG10597@kduck.kaduk.org> References: <13d301d3f0d8$f66f7c60$e34e7520$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1E28F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF1E28F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFuphleLIzCtJLcpLzFFi42IR4hRV1jXazhJt8P6PksXaN0dYLQ6/fcpu cXD7TCYHZo8lS34yeZy4Vu/R8uwkWwBzFJdNSmpOZllqkb5dAlfGvjePWAqu8VVcW5bRwNjJ 3cXIySEhYCLx8fQ11i5GLg4hgcVMEncm3mKHcDYyShye/YMZwrnKJHH7VhMjSAuLgKrE7ZM3 2UBsNgEViYbuy8wgtoiAgsS+tn4WEJtZwEdi07z7YHFhATWJKzeusILYvEDr9n4+BzV0MqPE hMtLoRKCEidnPoFq1pHYufUO0AIOIFtaYvk/DoiwvETz1tlgMzkFkiQOfP4FZosKKEvs7TvE PoFRcBaSSbOQTJqFMGkWkkkLGFlWMcqm5Fbp5iZm5hSnJusWJyfm5aUW6Zrr5WaW6KWmlG5i BAU6u4vKDsbuHu9DjAIcjEo8vCvEWKKFWBPLiitzDzFKcjApifIqRQGF+JLyUyozEosz4otK c1KLDzFKcDArifB+usQULcSbklhZlVqUD5OS5mBREufNXcQYLSSQnliSmp2aWpBaBJOV4eBQ kuBN3go0VLAoNT21Ii0zpwQhzcTBCTKcB2i4OkgNb3FBYm5xZjpE/hSjopQ4r+82oIQASCKj NA+uF5SIJLL317xiFAd6RZi3EaSdB5jE4LpfAQ1mAhp8cTkzyOCSRISUVAPjRnmh/kvJy0MK 3Jq/O1551les6Wyw6JyudVWn+8a8naYmJpu6Lx/5VpAgcrgqfPpS9qrlZ2wnWucVKZxX2cnM +Ujo/jrHO/P9btworftX+FuktC1CZNKzy6t0kjj8/ZpvP50f8rEvXH9GJkNwVOsziemHp5Zz bmc8P13VOnebUHVBpUdhhIsSS3FGoqEWc1FxIgArxR/fHwMAAA== Archived-At: Subject: Re: [Dots] TLS APLN extension X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 May 2018 00:35:02 -0000 The dedicated port number is only somewhat relevant, I think -- the main question is whether the coaps+tcp URI scheme is in use. The RFC 8323 requirements only come into play for that URI scheme. -Ben On Tue, May 22, 2018 at 07:54:39AM +0000, mohamed.boucadair@orange.com wrote: > Re-, > > Do we need this given that DOTS is using a dedicated port number? > > Cheers, > Med > > De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow > Envoyé : lundi 21 mai 2018 09:55 > À : dots@ietf.org > Objet : [Dots] TLS APLN extension > > Hi there, > > As per RFC 8323: 8.2. coaps+tcp URI Scheme > > .... > > o If a TLS server does not support the Application-Layer Protocol > Negotiation (ALPN) extension [RFC7301] or wishes to accommodate > TLS clients that do not support ALPN, it MAY offer a coaps+tcp > endpoint on TCP port 5684. This endpoint MAY also be ALPN > enabled. A TLS server MAY offer coaps+tcp endpoints on ports > other than TCP port 5684, which MUST be ALPN enabled. > > o For TCP ports other than port 5684, the TLS client MUST use the > ALPN extension to advertise the "coap" protocol identifier (see > Section 11.7) in the list of protocols in its ClientHello. If the > TCP server selects and returns the "coap" protocol identifier > using the ALPN extension in its ServerHello, then the connection > succeeds. If the TLS server either does not negotiate the ALPN > extension or returns a no_application_protocol alert, the TLS > client MUST close the connection. > > Do we need to refer to the requirement for ALPN as we are not hosting on port 5684? > > Regards > > Jon > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Wed May 23 01:28:22 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4289A12DA0D for ; Wed, 23 May 2018 01:28:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1NiRWnwlF8Bd for ; Wed, 23 May 2018 01:28:16 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E0EDF12DA45 for ; Wed, 23 May 2018 01:28:15 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fLP80-0000Ex-IZ; Wed, 23 May 2018 09:28:12 +0100 From: "Jon Shallow" To: "'Benjamin Kaduk'" , , References: <13d301d3f0d8$f66f7c60$e34e7520$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1E28F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <20180523003451.GG10597@kduck.kaduk.org> In-Reply-To: <20180523003451.GG10597@kduck.kaduk.org> Date: Wed, 23 May 2018 09:28:15 +0100 Message-ID: <15bc01d3f26f$fecf3380$fc6d9a80$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQF7fY0SEnbbzScVHebrKQTjRWAcaAIi09JrAU1FL/Ck0l7HYA== Content-Language: en-gb Archived-At: Subject: Re: [Dots] TLS APLN extension X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 May 2018 08:28:21 -0000 Hi Ben, The DOTS signal spec calls for CoAP secured by running over (D)TLS = (either UDP and/or TCP), and CoAP over TLS is coaps+tcp. So, yes, both coaps = and coaps+tcp have to be supported. For example, I can use the github libcoap coap-client (Pull Request #176 installed) and do "coap-client -c cert.pem coaps+tcp://127.0.0.1:4646/.well-known/dots/v1/config" against my DOTS server and get back binary data (it is CBOR encoded). Regards Jon -----Original Message----- From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Benjamin Kaduk Sent: 23 May 2018 01:35 To: mohamed.boucadair@orange.com Cc: Jon Shallow; dots@ietf.org Subject: Re: [Dots] TLS APLN extension The dedicated port number is only somewhat relevant, I think -- the main question is whether the coaps+tcp URI scheme is in use. The RFC 8323 requirements only come into play for that URI scheme. -Ben On Tue, May 22, 2018 at 07:54:39AM +0000, mohamed.boucadair@orange.com wrote: > Re-, >=20 > Do we need this given that DOTS is using a dedicated port number? >=20 > Cheers, > Med >=20 > De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow > Envoy=E9 : lundi 21 mai 2018 09:55 > =C0 : dots@ietf.org > Objet : [Dots] TLS APLN extension >=20 > Hi there, >=20 > As per RFC 8323: 8.2. coaps+tcp URI Scheme >=20 > .... >=20 > o If a TLS server does not support the Application-Layer Protocol > Negotiation (ALPN) extension [RFC7301] or wishes to accommodate > TLS clients that do not support ALPN, it MAY offer a coaps+tcp > endpoint on TCP port 5684. This endpoint MAY also be ALPN > enabled. A TLS server MAY offer coaps+tcp endpoints on ports > other than TCP port 5684, which MUST be ALPN enabled. >=20 > o For TCP ports other than port 5684, the TLS client MUST use the > ALPN extension to advertise the "coap" protocol identifier (see > Section 11.7) in the list of protocols in its ClientHello. If = the > TCP server selects and returns the "coap" protocol identifier > using the ALPN extension in its ServerHello, then the connection > succeeds. If the TLS server either does not negotiate the ALPN > extension or returns a no_application_protocol alert, the TLS > client MUST close the connection. >=20 > Do we need to refer to the requirement for ALPN as we are not hosting = on port 5684? >=20 > Regards >=20 > Jon > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots _______________________________________________ Dots mailing list Dots@ietf.org https://www.ietf.org/mailman/listinfo/dots From nobody Sun May 27 22:49:31 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A8856126CE8 for ; Sun, 27 May 2018 22:49:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.31 X-Spam-Level: X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XI5TFeL-ceQx for ; Sun, 27 May 2018 22:49:23 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D428126C89 for ; Sun, 27 May 2018 22:49:23 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1527486562; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:MIME-Version:X-MS-Office365-Filtering-Correlation-Id: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=aaPmBB5RbQMbjgLMWeROktzg3YEdPVgXG4tUNe vXG/A=; b=UFejx3Vyk14CrEtJTf3MFWN1lSA2DjCe085zzTYa 9+Vp8FtrtxMhiqqtvSfgXTHGXiiU/q4dbBpsBMpjQlnQA5ZUe6 znDAcX02fM4FXYCbAuMNOE/CywupeF94vyfVAfjQaoWPwfNxw9 yXLRhqNnQsK4jiP3W/YZDJl84g7UvHA= Received: from DNVEXAPP1N05.corpzone.internalzone.com (unknown [10.44.48.89]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 0cbe_560f_4899cfee_cae4_4327_9304_beb7e47c42a9; Mon, 28 May 2018 00:49:21 -0500 Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Sun, 27 May 2018 23:49:04 -0600 Received: from DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Sun, 27 May 2018 23:49:03 -0600 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Sun, 27 May 2018 23:49:03 -0600 Received: from NAM02-BL2-obe.outbound.protection.outlook.com (10.44.176.240) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Sun, 27 May 2018 23:49:03 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB0050.namprd16.prod.outlook.com (10.172.111.136) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.797.11; Mon, 28 May 2018 05:49:00 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::601e:a909:b9fe:31bd]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::601e:a909:b9fe:31bd%8]) with mapi id 15.20.0797.017; Mon, 28 May 2018 05:49:00 +0000 From: "Konda, Tirumaleswar Reddy" To: "Xialiang (Frank, Network Integration Technology Research Dept)" , Jon Shallow , "mohamed.boucadair@orange.com" CC: "dots@ietf.org" Thread-Topic: =?utf-8?B?W0RvdHNdIOetlOWkjTogIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0?= =?utf-8?Q?h_Observed_mitigations/Configuration?= Thread-Index: AQHT8LZ68mZ6kXxXeUypn7PyNr1x4qREqXeA Date: Mon, 28 May 2018 05:48:59 +0000 Message-ID: References: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <02ad01d3ed13$42a0c3b0$c7e24b10$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1C138@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <039101d3edb3$dd8de830$98a9b890$@jpshallow.com> <082d01d3edf3$1b1df3e0$5159dba0$@jpshallow.com> <0ad501d3ee84$ac1c83c0$04558b40$@jpshallow.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB0050; 7:FvlfYAP8ZJrMc9agLJe7Q1Ve1IdCgKaUretGHIbQ894d3YDYRNvcZH4KpqGsr4FhvbWK0fDrptOp9oxGWlxILA6cLTGj5WDgdJ8jbtK2nawVbthbomEVHy1Emc3R/pRvIK5lLGM93SLGezfYoZMC1M0TBRMlkqz0AbzrojOv3srXojNgaWvG6PQac2N5z4um9tjbRPNSB4DugRPXHGl0kRsNUH8P9st+OmByZV9QJR66OLD/DGe6gtuLKur798tn x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB0050; x-ms-traffictypediagnostic: BN6PR16MB0050: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(190756311086443)(158342451672863)(18271650672692)(21748063052155)(123452027830198); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(3231254)(944501410)(52105095)(149027)(150027)(6041310)(20161123558120)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123564045)(6072148)(201708071742011)(7699016); SRVR:BN6PR16MB0050; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB0050; x-forefront-prvs: 06860EDC7B x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(346002)(39380400002)(39840400004)(366004)(396003)(32952001)(51444003)(189003)(199004)(6246003)(72206003)(106356001)(80792005)(2501003)(53936002)(26005)(14454004)(53546011)(224303003)(102836004)(5890100001)(966005)(3660700001)(55016002)(186003)(5250100002)(478600001)(86362001)(97736004)(2900100001)(25786009)(68736007)(33656002)(6306002)(54896002)(9686003)(8936002)(93886005)(81166006)(2906002)(81156014)(316002)(66066001)(5660300001)(9326002)(236005)(486006)(19609705001)(229853002)(7696005)(4326008)(105586002)(790700001)(606006)(6506007)(53946003)(3846002)(76176011)(446003)(6116002)(99286004)(7736002)(59450400001)(110136005)(11346002)(6436002)(476003)(3280700002)(74316002)(85282002)(579004); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB0050; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: cJc9F/UIkeQChE4f/3MU7pxLPLmaaTYH1kd8rRRJdC+UHLzu4UyGME2FH9XyKRh3xOnQRVhNB8MsIYbpHUxB8I89nCxPolME+oNCNajJ1LWrwuti26R4WHRQqhKUAjoO9wbv2a9hv70aoKvnDpEDtLAQq/pBTEOeUh5XDpyxPObVwKYSyJZIXcK0lwlxeDCPxtbCtgaWdSaAU6iy0m5hKA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BN6PR16MB1425D185AC51D4CB5EB33E4FEA6E0BN6PR16MB1425namp_" MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: 028c8aed-cbad-4f5c-8264-08d5c45eb5e2 X-MS-Exchange-CrossTenant-Network-Message-Id: 028c8aed-cbad-4f5c-8264-08d5c45eb5e2 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 May 2018 05:48:59.6377 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB0050 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.3 X-NAI-Spam-Version: 2.3.0.9418 : core <6294> : inlines <6661> : streams <1788016> : uri <2648439> Archived-At: Subject: Re: [Dots] =?utf-8?b?562U5aSNOiAgRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFy?= =?utf-8?q?t_with_Observed_mitigations/Configuration?= X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 May 2018 05:49:29 -0000 --_000_BN6PR16MB1425D185AC51D4CB5EB33E4FEA6E0BN6PR16MB1425namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRnJhbmssDQoNCg0KSSBkb27igJl0IHRoaW5rIEpvbuKAmXMgY29uY2VybiBpcyBsb3Npbmcg dGhlIG1pdGlnYXRpb24gcmVxdWVzdC4gVGhlIG1pdGlnYXRpb24gcmVxdWVzdCBzaG91bGQgYmUg c3RvcmVkIGluIGEgcGVyc2lzdGVudCBzdG9yYWdlIGFuZCB0aGUgRE9UUyBzZXJ2ZXIgY2FuDQoN CnJlYnVpbGQgdGhlIGFjdGl2ZSBtaXRpZ2F0aW9uIHJlcXVlc3QgbGlzdCBhZnRlciByZXN0YXJ0 Lg0KDQpDaGVlcnMsDQotVGlydQ0KDQpGcm9tOiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2VzQGll dGYub3JnXSBPbiBCZWhhbGYgT2YgWGlhbGlhbmcgKEZyYW5rLCBOZXR3b3JrIEludGVncmF0aW9u IFRlY2hub2xvZ3kgUmVzZWFyY2ggRGVwdCkNClNlbnQ6IE1vbmRheSwgTWF5IDIxLCAyMDE4IDk6 MTcgQU0NClRvOiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5IDxUaXJ1bWFsZXN3YXJSZWRkeV9L b25kYUBNY0FmZWUuY29tPjsgSm9uIFNoYWxsb3cgPHN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb20+ OyBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQpDYzogZG90c0BpZXRmLm9yZw0KU3ViamVj dDogW0RvdHNdIOetlOWkjTogRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVk IG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24NCg0KDQpDQVVUSU9OOiBFeHRlcm5hbCBlbWFpbC4g RG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25p emUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLg0KDQoNCl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQpIaSBUaXJ1LA0KSSBzaGFyZSB0aGUgc2FtZSBjb25j ZXJuIHdpdGggSm9uIGFzOg0KDQpJZiBkb3RzIHNldmVyIHJlc3RhcnRzLCBhbmQgbG9zZXMgYWxs IHRoZSBtaXRpZ2F0aW9uIHN0YXR1cywgdGhlbiBkb3RzIGNsaWVudCBzaG91bGQgcmVzZW5kIGFs bCB0aGUgYWN0aXZlIG1pdGlnYXRpb24gc3RhdHVzIHRvIGl0LiBUaGVyZSBjYW4gYmUgdHdvIHdh eSBmb3IgaXQ6DQoNCjEpICAgICAgIFJlc2VuZCBtaXRpZ2F0aW9uIHJlcXVlc3RzIGZvciBhbGwg YWN0aXZlIG1pdGlnYXRpb247DQoNCjIpICAgICAgIERvdHMgY2xpZW50IHN5bmMgYWxsIHRoZSBh Y3RpdmUgbWl0aWdhdGlvbiBzdGF0dXMgd2l0aCBzZXJ2ZXIuDQoNCkl04oCZcyBub3Qgb25seSBh Ym91dCB0aGUgb2JzZXJ2ZSBvcHRpb24uDQoNClRoYW5rcyENCg0KQi5SLg0KRnJhbmsNCuWPkeS7 tuS6ujogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10g5Luj6KGoIEtvbmRhLCBU aXJ1bWFsZXN3YXIgUmVkZHkNCuWPkemAgeaXtumXtDogMjAxOOW5tDXmnIgxOOaXpSAxNjo1Nw0K 5pS25Lu25Lq6OiBKb24gU2hhbGxvdyA8c3VwanBzLWlldGZAanBzaGFsbG93LmNvbT47IG1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb207IGRvdHNAaWV0Zi5vcmcNCuS4u+mimDogUmU6IFtEb3Rz XSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29u ZmlndXJhdGlvbg0KDQpIaSBKb24sDQoNClBsZWFzZSBzZWUgaW5saW5lIFtUUl0NCg0KRnJvbTog RG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEpvbiBTaGFs bG93DQpTZW50OiBGcmlkYXksIE1heSAxOCwgMjAxOCAyOjE2IFBNDQpUbzogS29uZGEsIFRpcnVt YWxlc3dhciBSZWRkeSA8VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbTxtYWlsdG86 VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbT4+OyBtb2hhbWVkLmJvdWNhZGFpckBv cmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPjsgZG90c0BpZXRm Lm9yZzxtYWlsdG86ZG90c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbRG90c10gRE9UUyBzZXJ2 ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24N Cg0KDQpDQVVUSU9OOiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4g YXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUg Y29udGVudCBpcyBzYWZlLg0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpI aSBUaXJ1DQoNClNlZSBpbmxpbmUgW0pvbjJdDQoNClJlZ2FyZHMNCg0KSm9uDQoNCkZyb206IERv dHMgW21haWx0bzogZG90cy1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpkb3RzLWJvdW5jZXNAaWV0 Zi5vcmc+XSBPbiBCZWhhbGYgT2YgS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeQ0KU2VudDogMTcg TWF5IDIwMTggMTc6MDUNClRvOiBKb24gU2hhbGxvdzsgbW9oYW1lZC5ib3VjYWRhaXJAb3Jhbmdl LmNvbTxtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT47IGRvdHNAaWV0Zi5vcmc8 bWFpbHRvOmRvdHNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNy YXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uDQoNCltK b24xXSBBZ3JlZWQgdGhlIERPVFMgc2VydmVyIGNhbm5vdCBzZW50IGFueXRoaW5nIHRoYXQgaXMg dW5zb2xpY2l0ZWQgZHVlIHRvIGxvc3Mgb2YgY3J5cHRvZ3JhcGhpYyBzdGF0ZS4gIEhvd2V2ZXIs IGlmIHRoZSBET1RTIHNlcnZlciBjYW4gc2VuZCBiYWNrIGluIGEgcmVzcG9uc2UgdG8gYSBjbGll bnQgcmVxdWVzdCBzb21ldGhpbmcgdGhhdCBzdGF0ZXMg4oCcSSByZXN0YXJ0ZWQgcmVjZW50bHkg QCBzdWNoIGEgdGltZeKAnSwgdGhlIGNsaWVudCB3aWxsIGtub3cgd2hldGhlciB0aGUgbWlzc2lu ZyBoZWFydGJlYXRzIHdlcmUgZG93biB0byBqdXN0IGEgZmxha3kgbmV0d29yaywgb3IgdGhlIG1p c3NpbmcgaGVhcnRiZWF0cyB3ZXJlIGR1ZSB0byBhIHNlcnZlciByZXN0YXJ0LCBhbmQgc28gcmUt c3Vic2NyaWJlIG5lZWRlZCBmb3IgYWxsIHRoZSByZXNvdXJjZXMgdGhhdCB0aGUgY2xpZW50IHdh bnRzIHRvIG1vbml0b3IuICBJIGRvIG5vdCB3YW50IHRoZSBET1RTIGNsaWVudCB0byBrZWVwIG9u IGRvaW5nIHJlLXN1YnNjcmliZSBjb21wb3VuZGluZyB0aGUgbmV0d29yayBmbGFraW5lc3Mgd2hl biB1bmRlciBhdHRhY2suDQoNCltSXSBUaGUgZmlyc3QgdHdvIHNlbnRlbmNlcyBjb250cmFkaWN0 IGVhY2ggb3RoZXIuIEhvdyBjYW4gdGhlIHNlcnZlciBzZW5kIGFueSBkYXRhIG9uIHRoZSBvbGQg c2Vzc2lvbiA/DQpbSm9uMl0gSSBhY3R1YWxseSB3YXMgdGhpbmtpbmcgdGhhdCB0aGUgcmVzcG9u c2Ugd2FzIHNlbnQgYWZ0ZXIgdGhlIG5ldyBzZXNzaW9uIHdhcyBlc3RhYmxpc2hlZC4NCkFuZCBJ IGRvbuKAmXQgdW5kZXJzdGFuZCB0aGUgdmFsdWUgb2Ygc2VuZGluZyDigJxJIHJlc3RhcnRlZCBy ZWNlbnRseSBAc3VjaCBhIHRpbWXigJ0gaW4gdGhlIG5ldyAoRClUTFMgc2Vzc2lvbi4sIHRoZSBj bGllbnQgYW55d2F5cyBoYXMgdG8gcmVzZW5kIHRoZSBsaXN0IG9mIGFjdGl2ZSBtaXRpZ2F0aW9u cyBpdCB3aXNoZXMgdG8gb2JzZXJ2ZSBpbiB0aGUgbmV3IHNlc3Npb24gKGlycmVzcGVjdGl2ZSBv ZiB0aGUgcmVhc29uIHRoZSBzZXNzaW9uIGlzIGRpc2Nvbm5lY3RlZCkuIEEgc2Vzc2lvbiBjb3Vs ZCBiZSBkaXNjb25uZWN0ZWQgYmVjYXVzZSBvZiB2YXJpb3VzIG90aGVyIHJlYXNvbnMgKGUuZy4g TkFUIHJlbG9hZCkuDQpbSm9uMl0gIE9LLCBzbyB3aGVuZXZlciBhIG5ldyBzZXNzaW9uIGlzIHN0 YXJ0ZWQgZm9yIHdoYXRldmVyIHJlYXNvbiwgdGhlcmUgbmVlZHMgdG8gYmUgYSByZXNlbmQgb2Yg YWN0aXZlIG1pdGlnYXRpb25zLg0KDQoNCltUUl0gTm8sIEkgbWVhbnQgVGhlIERPVFMgY2xpZW50 IGluIHRoZSBuZXcgKEQpVExTIHNlc3Npb24gaGFzIHRvIHNlbmQgR0VUIHJlcXVlc3Qgd2l0aCBP YnNlcnZlIG9wdGlvbiB0byByZWNlaXZlIHVuc29saWNpdGVkIG5vdGlmaWNhdGlvbnMgb2YgYXR0 YWNrIG1pdGlnYXRpb24gc3RhdHVzIG9mIGFjdGl2ZSBtaXRpZ2F0aW9uIHJlcXVlc3RzIGZyb20g dGhlIERPVFMgc2VydmVyLg0KDQoNCg0KLVRpcnUNCg0KSG93ZXZlciwgSSBoYXZlIG5vdCBmb3Vu ZCBhbnl3aGVyZSBpbiB0aGUgc2lnbmFsIC8gcmVxdWlyZW1lbnRzIC8gYXJjaGl0ZWN0dXJlIHdo ZXJlIHRoaXMgaXMgc3VnZ2VzdGVkIChidXQgbWF5IGhhdmUgc2VhcmNoZWQgb24gdGhlIHdyb25n IGtleXdvcmRzISkgSSB0aGluayB0aGF0IHRoaXMgbmVlZHMgdG8gYmUgc3RhdGVkIHNvbWV3aGVy ZSwgZXZlbiB0aG91Z2ggaXQgaXMgb2J2aW91cyBpZiB5b3UgdGhpbmsgYWJvdXQgaXQuDQp+Sm9u Mg0KDQoNCi1UaXJ1DQoNCkZyb206IEpvbiBTaGFsbG93IFttYWlsdG86c3VwanBzLWlldGZAanBz aGFsbG93LmNvbV0NClNlbnQ6IFRodXJzZGF5LCBNYXkgMTcsIDIwMTggODo1NCBQTQ0KVG86IEtv bmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgPFRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5j b208bWFpbHRvOlRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20+PjsgbW9oYW1lZC5i b3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT47 IGRvdHNAaWV0Zi5vcmc8bWFpbHRvOmRvdHNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSRTogW0RvdHNd IERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25m aWd1cmF0aW9uDQoNCg0KQ0FVVElPTjogRXh0ZXJuYWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5r cyBvciBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5k IGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS4NCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KSGkgVGlydSwNCg0KU2VlIGlubGluZSBbSm9uMV0NCg0KUmVnYXJkcw0KDQpKb24N Cg0KRnJvbTogRG90cyBbbWFpbHRvOiBkb3RzLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmRvdHMt Ym91bmNlc0BpZXRmLm9yZz5dIE9uIEJlaGFsZiBPZiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5 DQpTZW50OiAxNyBNYXkgMjAxOCAxNjowMw0KVG86IEpvbiBTaGFsbG93OyBtb2hhbWVkLmJvdWNh ZGFpckBvcmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPjsgZG90 c0BpZXRmLm9yZzxtYWlsdG86ZG90c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbRG90c10gRE9U UyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3Vy YXRpb24NCg0KSGkgSm9uLA0KDQpUaGlzIHNjZW5hcmlvIGlzIGFscmVhZHkgZGlzY3Vzc2VkIGlu IFNlY3Rpb24gNC43LiBXaGVuIHRoZSBERG9TIG1pdGlnYXRpb24gaXMgaW4gcHJvZ3Jlc3MgYW5k IGFmdGVyIHRoZSDigJhtaXNzaW5nLWhiLWFsbG93ZWTigJkgdGhyZXNob2xkIGlzIHJlYWNoZWQs IHRoZSBET1RTIGNsaWVudCB3aWxsIGNvbnRpbnVlIHRvIHVzZSB0aGUgZXhpc3RpbmcgKEQpVExT IHNlc3Npb24gdG8gc2VuZCBoZWFydGJlYXQgcmVxdWVzdHMgdG8gdGhlIHNlcnZlciBhbmQgYXQg dGhlIHNhbWUgdGltZSB0cnkgdG8gZXN0YWJsaXNoIGEgbmV3IChEKVRMUyBzZXNzaW9uIHdpdGgg RE9UUyBzZXJ2ZXIuDQpbSm9uMV0gSSBmdWxseSB1bmRlcnN0YW5kIHRoYXQNCkZ1cnRoZXIsIGlm IHRoZSBzZXJ2ZXIgcmVzdGFydHMsIChEKVRMUyBzdGF0ZSBpcyBsb3N0IG9uIHRoZSBzZXJ2ZXIg YW5kIHRoZSBzZXJ2ZXIgZG9lcyBub3QgaGF2ZSB0aGUgY3J5cHRvZ3JhcGhpYyBzdGF0ZSB0byBz ZW5kIOKAmHJlLXN1YnNjcmliZeKAmSBvbiB0aGUgb2xkIHNlc3Npb24uDQpbSm9uMV0gQWdyZWVk IHRoZSBET1RTIHNlcnZlciBjYW5ub3Qgc2VudCBhbnl0aGluZyB0aGF0IGlzIHVuc29saWNpdGVk IGR1ZSB0byBsb3NzIG9mIGNyeXB0b2dyYXBoaWMgc3RhdGUuICBIb3dldmVyLCBpZiB0aGUgRE9U UyBzZXJ2ZXIgY2FuIHNlbmQgYmFjayBpbiBhIHJlc3BvbnNlIHRvIGEgY2xpZW50IHJlcXVlc3Qg c29tZXRoaW5nIHRoYXQgc3RhdGVzIOKAnEkgcmVzdGFydGVkIHJlY2VudGx5IEAgc3VjaCBhIHRp bWXigJ0sIHRoZSBjbGllbnQgd2lsbCBrbm93IHdoZXRoZXIgdGhlIG1pc3NpbmcgaGVhcnRiZWF0 cyB3ZXJlIGRvd24gdG8ganVzdCBhIGZsYWt5IG5ldHdvcmssIG9yIHRoZSBtaXNzaW5nIGhlYXJ0 YmVhdHMgd2VyZSBkdWUgdG8gYSBzZXJ2ZXIgcmVzdGFydCwgYW5kIHNvIHJlLXN1YnNjcmliZSBu ZWVkZWQgZm9yIGFsbCB0aGUgcmVzb3VyY2VzIHRoYXQgdGhlIGNsaWVudCB3YW50cyB0byBtb25p dG9yLiAgSSBkbyBub3Qgd2FudCB0aGUgRE9UUyBjbGllbnQgdG8ga2VlcCBvbiBkb2luZyByZS1z dWJzY3JpYmUgY29tcG91bmRpbmcgdGhlIG5ldHdvcmsgZmxha2luZXNzIHdoZW4gdW5kZXIgYXR0 YWNrLg0KfkpvbjENCg0KLVRpcnUNCg0KRnJvbTogSm9uIFNoYWxsb3cgW21haWx0bzpzdXBqcHMt aWV0ZkBqcHNoYWxsb3cuY29tXQ0KU2VudDogVGh1cnNkYXksIE1heSAxNywgMjAxOCAxOjIxIFBN DQpUbzogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeSA8VGlydW1hbGVzd2FyUmVkZHlfS29uZGFA TWNBZmVlLmNvbTxtYWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbT4+OyBt b2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFu Z2UuY29tPjsgZG90c0BpZXRmLm9yZzxtYWlsdG86ZG90c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJF OiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRp b25zL0NvbmZpZ3VyYXRpb24NCg0KDQpDQVVUSU9OOiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90IGNs aWNrIGxpbmtzIG9yIG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNl bmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLg0KDQoNCl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQpIaSBUaXJ1LA0KDQpJdCBpcyBhIGNvcm5lciByZWNvdmVyeSBjYXNl LiAgVGhlIERPVFMgY2xpZW50IGNhbiBkZXRlY3QgdGhhdCB0aGUgRE9UUyBzZXJ2ZXIgaGFzIGdv bmUgYXdheSAodXNpbmcgaGVhcnRiZWF0cykgYW5kIHJlLXN1YnNjcmliZSB0byBhbGwgdGhlIHJl c291cmNlcyB0aGF0IHRoZSBET1RTIGNsaWVudCB3YW50cyB0byBPYnNlcnZlIG9uIGRldGVjdGlv biB0aGF0IHRoZSBET1RTIHNlcnZlciBpcyBiYWNrDQoNCkhvd2V2ZXIsIHdoZW4gbWl0aWdhdGlu ZywgdGhlcmUgaXMgYSBsaWtlbGlob29kIHRoYXQgaGVhcnRiZWF0cyB3aWxsIHRpbWUgb3V0IGFu ZCBJIGFtIG5vdCBzdXJlIHRoYXQgaXQgaXMgd2lzZSB0byDigJxyZS1zdWJzY3JpYmXigJ0gd2hl biB0aGUgY29ubmVjdGlvbnMgYXJlIHJlLWVzdGFibGlzaGVkIGFzIHRoZSBuZXR3b3JrIHBhdGgg bWF5IHN0aWxsIGJlIGZsYWt5IGFuZCBhZGRpbmcgZXh0cmEgdHJhZmZpYyBtYXkgYmUgcHJvYmxl bWF0aWMuICBNeSBzdWdnZXN0aW9uIG9mIGFuIGVwb2NoIHRpbWUgYmVpbmcgcmVwb3J0ZWQgYnkg dGhlIERPVFMgc2VydmVyIHdhcyBhIHdheSBvZiBkZXRlcm1pbmluZyB3aGV0aGVyIOKAnHJlLXN1 YnNjcmliZeKAnSB3YXMgcmVxdWlyZWQgb3Igbm90Lg0KDQpSZWdhcmRzDQoNCkpvbg0KDQpGcm9t OiBEb3RzIFttYWlsdG86IGRvdHMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86ZG90cy1ib3VuY2Vz QGlldGYub3JnPl0gT24gQmVoYWxmIE9mIEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkNClNlbnQ6 IDE2IE1heSAyMDE4IDE2OjA1DQpUbzogbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWls dG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT47IEpvbiBTaGFsbG93OyBkb3RzQGlldGYu b3JnPG1haWx0bzpkb3RzQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtEb3RzXSBET1RTIHNlcnZl ciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0K DQpJIGRvbuKAmXQgZ2V0IHRoZSBwcm9ibGVtLiBJZiB0aGUgc2VydmVyIHJlc3RhcnRzLCAoRClU TFMgc3RhdGUgd2lsbCBiZSBsb3N0IGFuZCBzZXJ2ZXIgd2lsbCByZWplY3QgaGVhcnRiZWF0IHJl cXVlc3RzIGZyb20gdGhlIGNsaWVudCAoZWl0aGVyIHNpbGVudGx5IG9yIHNlbmQgYSBmYXRhbCBh bGVydCB0byB0aGUgY2xpZW50KS4gRE9UUyBjbGllbnQgd2lsbCBoYXZlIHRvIGZvbGxvdyB0aGUg c3RlcHMgaW4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWdu YWwtY2hhbm5lbC0xOSNzZWN0aW9uLTQuNyB0byByZS1lc3RhYmxpc2ggKEQpVExTIHNlc3Npb24g d2l0aCB0aGUgRE9UUyBzZXJ2ZXIuDQoNCi1UaXJ1DQoNCkZyb206IERvdHMgW21haWx0bzpkb3Rz LWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2Uu Y29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPg0KU2VudDogV2VkbmVzZGF5 LCBNYXkgMTYsIDIwMTggNzoxNSBQTQ0KVG86IEpvbiBTaGFsbG93IDxzdXBqcHMtaWV0ZkBqcHNo YWxsb3cuY29tPG1haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tPj47IGRvdHNAaWV0Zi5v cmc8bWFpbHRvOmRvdHNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0RvdHNdIERPVFMgc2VydmVy IGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uDQoN Cg0KQ0FVVElPTjogRXh0ZXJuYWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0 dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNv bnRlbnQgaXMgc2FmZS4NCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KUmUt LA0KDQpQbGVhc2Ugc2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCkRlIDogSm9uIFNoYWxs b3cgW21haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tXQ0KRW52b3nDqSA6IG1lcmNyZWRp IDE2IG1haSAyMDE4IDE0OjQyDQrDgCA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE47IGRvdHNA aWV0Zi5vcmc8bWFpbHRvOmRvdHNAaWV0Zi5vcmc+DQpPYmpldCA6IFJFOiBbRG90c10gRE9UUyBz ZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRp b24NCg0KSGkgTWVkLA0KDQpTZWUgaW5saW5lLg0KDQpSZWdhcmRzDQoNCkpvbg0KDQpGcm9tOiBE b3RzIFttYWlsdG86IGRvdHMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86ZG90cy1ib3VuY2VzQGll dGYub3JnPl0gT24gQmVoYWxmIE9mIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208bWFpbHRv Om1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+DQpTZW50OiAxNiBNYXkgMjAxOCAxMjo1NQ0K VG86IEpvbiBTaGFsbG93OyBkb3RzQGlldGYub3JnPG1haWx0bzpkb3RzQGlldGYub3JnPg0KU3Vi amVjdDogUmU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQg bWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0KDQpIaSBKb24sDQoNClBsZWFzZSBzZWUgaW5saW5l Lg0KDQpDaGVlcnMsDQpNZWQNCg0KRGUgOiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYu b3JnXSBEZSBsYSBwYXJ0IGRlIEpvbiBTaGFsbG93DQpFbnZvecOpIDogbWVyY3JlZGkgMTYgbWFp IDIwMTggMTI6MjQNCsOAIDogZG90c0BpZXRmLm9yZzxtYWlsdG86ZG90c0BpZXRmLm9yZz4NCk9i amV0IDogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRp Z2F0aW9ucy9Db25maWd1cmF0aW9uDQoNCkhpIHRoZXJlLA0KDQpGb3IgdGhlIHNpZ25hbCBjaGFu bmVsLCBpdCBpcyBlYXN5IHRvIG1haW50YWluIGEgcGVyc2lzdGVudCBsaXN0IG9mIGFjdGl2ZSBt aXRpZ2F0aW9ucy4gIFNob3VsZCB0aGUgRE9UUyBzZXJ2ZXIgKHVuZXhwZWN0ZWRseSkgc3RvcCBh bmQgcmVzdGFydCwgdGhlbiBpdCBpcyBlYXN5IHRvIHJlYnVpbGQgdGhlIGN1cnJlbnQgYWN0aXZl IG1pdGlnYXRpb25zLg0KDQpbTWVkXSBUaGUgbGlzdCBvZiBhY3RpdmUgbWl0aWdhdGlvbnMgaXMg dGhlIOKAnGNvcmXigJ0gc3RhdGUgZGF0YSB0byBiZSBtYWludGFpbmVkIGJ5IGEgc2VydmVyLiBJ ZiB3ZSBhc3N1bWUgdGhhdCBsaXN0IGNhbiBiZSByZWxpYWJseSByZWJ1aWx0LCB0aGVuIHRoZXJl IGlzIG5vIGV4dGVuc2lvbiBuZWVkZWQgdG8gdGhlIHNpZ25hbCBjaGFubmVsIHRvIGhhbmRsZSB0 aGlzIGZhaWx1cmUgY2FzZS4NCg0KW0pvbl0gQWdyZWVkLiAgVGhpcyB3YXMganVzdCBtZSBidWls ZGluZyB1cCB0aGUgYmFja2dyb3VuZCB0byB0aGUgc2NlbmFyaW8uDQoNCkhvd2V2ZXIsIHRvIHJl YnVpbGQgdGhlIGxpc3Qgb2YgYWN0aXZlIE9ic2VydmF0aW9ucyBvZiB0aGUgY3VycmVudCBtaXRp Z2F0aW9ucyAvIGNvbmZpZ3VyYXRpb24gY2hhbmdlcyBpcyBjb25zaWRlcmFibHkgbW9yZSBkaWZm aWN1bHQgYXMgdGhlIERPVFMgc2VydmVyIHdvdWxkIGFsc28gbmVlZCB0byBtYWludGFpbiBhIGxp c3Qgb2YgY2xpZW50IElQcy9zb3VyY2UgcG9ydHMgZXRjLiBhbG9uZyB3aXRoIFRva2VucyBhbmQg UXVlcmllcyBhbmQgKEQpVExTIHN0YXRlIHNvIHRoYXQgdW5zb2xpY2l0ZWQgT2JzZXJ2ZSByZXNw b25zZXMgY2FuIGNvbnRpbnVlIHRvIGJlIHNlbnQgYmFjayB0byB0aGUgY2xpZW50cy4gIEkgZG9u 4oCZdCByZWFsbHkgdGhpbmsgdGhhdCB0aGlzIGlzIGEgcHJhY3RpY2FsIGFzay4NCg0KW01lZF0g Rmlyc3QsIHRoaXMgY2FuIGJlIGNvbnNpZGVyZWQgYXMgZGVwbG95bWVudC1zcGVjaWZpYy4gQXMg c3VjaCBpbiBzb21lIGRlcGxveW1lbnRzLCB0aGVyZSBpcyBubyBuZWVkIHRvIHN1cHBvcnQgYXV0 b21hdGljIG1lYW5zIHRvIGRldGVjdCBzdGF0ZSBsb3NzIGF0IHRoZSBzZXJ2ZXIgc2lkZS4gU2Vj b25kLCBpcyBpdCByZWFsbHkgcHJvYmxlbWF0aWMgZm9yIHRoZSBERG9TIG1pdGlnYXRpb24gdGhh dCBsaXN0IGlzIGxvc3QgYnkgYSBzZXJ2ZXI/IEkgZ3Vlc3MsIHRoZSBhbnN3ZXIgaXMgbm8gaWYg d2UgYXNzdW1lIHRoZSBsaXN0IG9mIG1pdGlnYXRpb25zIHRoZW1zZWx2ZXMgaXMgbWFpbnRhaW5l ZC4NCg0KW0pvbl0gTXkgY29uY2VybiBpcyB0aGF0IHRoZSBET1RTIGNsaWVudHMgd291bGQgbm90 IHNlZSB0aGUgY2hhbmdlIGluIG1pdGlnYXRpb24gc3RhdGUsIG9yIHdvdWxkIG5vdCBzZWUgdGhh dCB0aGVyZSBpcyBhIG5ldyBzaWduYWwgY2hhbm5lbCBjb25maWd1cmF0aW9uIChpZiB0aGV5IHdl cmUgYmVpbmcgT2JzZXJ2ZWQpLiBUaGUgRE9UUyBjbGllbnQvc2VydmVyIHdvdWxkIGJlIG91dCBv ZiBzeW5jIHdpdGggd2hhdCBpcyBoYXBwZW5pbmcgYW5kIHRoZSBET1RTIGNsaWVudCB3b3VsZCBu b3QgbmVjZXNzYXJpbHkga25vdyB0aGF0IGl0IGhhcyB0byB0YWtlIHNvbWUgYWN0aW9uIHRvIGdl dCBiYWNrIHRvIHRoZSBzdGF0ZSBiZWZvcmUgdGhlIERPVFMgc2VydmVyIG91dGFnZS4NCg0KW01l ZF0gVGhlIGRvdHMgY2xpZW50IGhhcyBvdGhlciBtZWFucyB0byBrbm93IHRoZSBtaXRpZ2F0aW9u IHN0YXRlLiBUaGUgRE9UUyBjbGllbnQgY2FuIG9ic2VydmUgdGhlIHN0YXR1cyBsb2NhbGx5IChh bmQgcmVwb3J0IGl0IHRvIHRoZSBzZXJ2ZXIpIG9yIHNlbmQgYSByZXF1ZXN0IHRvIHJldHJpZXZl IHRoZSBzdGF0dXMgZnJvbSB0aGUgc2VydmVyLiBUaGUgb3V0IG9mIHN5bmNoIGluIG9ic2VydmUg aXMgbm90IHRoYXQgY3JpdGljYWwgZm9yIG1pdGlnYXRpbmcgRERvUyBhdHRhY2tzLg0KDQpBcyB0 aGUgRE9UUyBzZXJ2ZXIgcmVzdGFydGVkLCBleGlzdGluZyAoRClUTFMgc2Vzc2lvbnMgdXNlZCBi eSB0aGUgRE9UUyBjbGllbnQgd2lsbCBmYWlsLiAgU28sIHRoZSBoZWFydGJlYXQgbWVjaGFuaXNt IHdpbGwgZXZlbnR1YWxseSB0aW1lIG91dCAgYW5kIEkgZ3Vlc3MgdGhhdCB0aGUgRE9UUyBjbGll bnQgc2hvdWxkIGRldGVjdCB0aGlzIGFuZCByZS1kbyBhbGwgb2YgdGhlIE9ic2VydmUgcmVxdWVz dHMgKGFsb25nIHdpdGggbWFraW5nIHN1cmUgdGhhdCBhbGwgdGhlIGFjdGl2ZSBtaXRpZ2F0aW9u cyBhcmUgYXMgZXhwZWN0ZWQpLg0KDQpbTWVkXSBJbmNsdWRpbmcgY2xpZW50cyBpbiBuZXR3b3Jr cyB1bmRlciBhY3RpdmUgYXR0YWNrcz8gSXNu4oCZdCB0aGlzIG92ZXJsb2FkaW5nIHRoZSBzZXJ2 ZXIgd2hpbGUgZGVhbGluZyB3aXRoIG9uZ29pbmcgYXR0YWNrcz8NCg0KW0pvbl0gWWVzLCBpdCB3 b3VsZCDigJMgaGVuY2UgSSBkaWQgbm90IHJlYWxseSB3YW50IHRvIGhhdmUgdG8gZG8gdGhpcyB3 aGVuZXZlciBhIGhlYXJ0YmVhdCBmYWlsZWQsIGJ1dCBvbmx5IGRvIGl0IHdoZW4gdGhlIERPVFMg Y2xpZW50IOKAnGtub3dz4oCdIHRoYXQgdGhlIHNlcnZlciBoYXMgaGFkIGFuIG91dGFnZS4NCg0K SG93ZXZlciBpbiBQZWFjZSB0aW1lIEhlYXJ0YmVhdHMgbWF5IG5vdCBiZWluZyB1c2VkLg0KSG93 ZXZlciBhdCBNaXRpZ2F0aW9uIHRpbWUgaGVhcnRiZWF0cyBtYXkgZmFpbC4NCg0KV291bGQgaXQg bWFrZSBzZW5zZSB0byBhZGQgdG8gdGhlIHNpZ25hbCBjaGFubmVsIGFuIGV4dHJhIHBhcmFtZXRl ciB0aGF0IHRoZSBET1RTIHNlcnZlciBjYW4gc2VuZCB0byB0aGUgY2xpZW50IGluIGFueSByZXNw b25zZSBpbiB0aGUgZm9ybSBvZg0K4oCcbGFzdC1yZXN0YXJ0ZWTigJ0gOiBzZWNvbmRzLXNpbmNl LWVwb2NoDQpXaGljaCB0aGUgY2xpZW50IGNhbiB1c2UgdG8gZGV0ZWN0ZWQgdGhlIHJlc3RhcnQu DQoNCltNZWRdIFdlIHVzZWQgdG8gaGF2ZSBhbiBlcG9jaC1iYXNlZCBhcHByb2FjaCBmb3IgYSBz dGF0ZWZ1bGwgc2VydmljZSAoc2VlIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2ODg3 I3NlY3Rpb24tOC41KS4gVGhlIGRldGFpbHMgYXJlIG5vdCByZXN0cmljdGVkIHRvIGp1c3Qgc2ln bmFsbGluZyB0aGUgZXBvY2ggdmFsdWUgYnV0IHRvIHRoZSBsb2dpYyB0byBoYW5kbGUgaXQgYXQg dGhlIGNsaWVudCBzaWRlLiBGdXJ0aGVyLCB0aGVyZSBhcmUgc29tZSBhc3BlY3RzIHRvIGJlIHRh a2VuIGludG8gYWNjb3VudCB3aGVuIGNvbmZpZ3VyaW5nIHJlZHVuZGFuY3kgc2VydmVycyB3aGVu IGFuIGFueWNhc3QgYWRkcmVzcyBpcyB1c2VkLiBJZiB0aGUgc2FtZSBpbml0aWFsIGVwb2NoIHZh bHVlIGlzIGNvbmZpZ3VyZWQsIHRoZSBjbGllbnQgbWF5IG5vdCBkZXRlY3QgYSBiYWNrdXAgc2Vy dmVyIGlzIHVzZWQgYW5kIGhlbmNlIG1heSBub3QgcmVpbnN0YWxsIHN0YXRlLi4uIEEgdHdlYWsg aXMgdG8gY29uZmlndXJlIGRpc3RpbmN0IGVwb2NoIHZhbHVlcyAoZS5nLiwgKy8tIDI0aCBkaWZm ZXJlbmNlIGJldHdlZW4gYSBzZXJ2ZXIgcmVkdW5kYW5jeSBncm91cCkuDQoNClRoZSBlcG9jaCBp cyBqdXN0aWZpZWQgZm9yIDY4ODcgYmVjYXVzZSB3ZSB3YW50ZWQgdG8gcmVjb3ZlciBzdGF0ZSBs b3NzLCB3aGlsZSBpbiB0aGUgRE9UUyBjYXNlIHdlIGRvbuKAmXQgaGF2ZSB0aGUgc2FtZSBtb2Rl bCBnaXZlbiB0aGF0LCBhcyB5b3UgcmlnaHRmdWxseSBzYWlkIGFib3ZlLCB0aGUgY3VycmVudCBh Y3RpdmUgbWl0aWdhdGlvbnMgY2FuIGJlIHJlYnVpbHQgYXQgdGhlIHNlcnZlciBzaWRlIHdpdGhv dXQgaW52b2x2aW5nIGNsaWVudHMuDQoNCltKb25dIFNvIHRoaXMgbWV0aG9kIHNldHMgZXBvY2gg dGltZSBiYWNrIHRvIDAgd2hlbmV2ZXIgdGhlcmUgaXMgYSByZXN0YXJ0LA0KW01lZF0gWWVzLiBU aGUgZXBvY2ggaXMgcmVzZXQgZWFjaCB0aW1lIHRoZSBzdGF0ZSBpcyBsb3N0IGF0IHRoZSBzZXJ2 ZXIgc2lkZS4NCg0KcmF0aGVyIHRoYXQgcmVwb3J0IG9uIHRoZSBudW1iZXIgb2Ygc2Vjb25kcyBz aW5jZSBKYW4gMSAxOTcwLiAgIFRoYXQgSSBjYW4gaGFuZGxlLiAgSG93ZXZlciBhbnljYXN0ICh0 aG91Z2ggcmVkdW5kYW50IHNlcnZlcnMgYXJlIGN1cnJlbnRseSBvdXQgb2Ygc3BlYykgd2hlcmUg MiBvciBtb3JlIHNlcnZlcnMgcmVzdGFydCBhbmQgdXBkYXRlIHRoZSBzdGFydCB0aW1lIGF0IGV4 YWN0bHkgdGhlIHNhbWUgdGltZSBpcyBwb3NzaWJsZSwgYnV0IHVubGlrZWx5LiAgVGhpcyBjb3Vs ZCBiZSBoYW5kbGVkIGJ5IHRoZSBhbnljYXN0IHNlcnZlcnMgY29tbXVuaWNhdGluZyBhbmQgc2Vl aW5nIHRoZXkgYm90aCBoYXZlIHRoZSBzYW1lIHN0YXJ0IHRpbWUgc28gb25lIGJhY2tzIG9mZiAo aW4gdGltZSB0ZXJtcykuDQoNCltKb25dIEnigJltIGp1c3QgaW50ZXJlc3RlZCBpbiBob3cgdG8g cmVjb3ZlciBPYnNlcnZlIGxvc3MuDQpbTWVkXSBJ4oCZbSBub3QgY29udmluY2VkIHRoaXMgaXMg cmVhbGx5IG5lZWRlZCBnaXZlbiB0aGF0IGFjdGl2ZSBtaXRpZ2F0aW9ucyBhcmUgbm90IGNvbmNl cm5lZCB3aXRoIHRoaXMgZmFpbHVyZSBzY2VuYXJpby4NCg0KICBJIGFwcHJlY2lhdGUgaW4gcGVh Y2UgdGltZSB0aGVyZSBtYXkgbm90IGJlIGFueSBET1RTIGNsaWVudCByZXF1ZXN0cyAob3IgaGVh cnRiZWF0KSBmb3IgYSBsb25nIHRpbWUuLi4NCg0KSeKAmW0gb3BlbiB0byBzdWdnZXN0aW9ucy4N Cg0KUmVnYXJkcw0KDQpKb24NCg0KDQoNCg0K --_000_BN6PR16MB1425D185AC51D4CB5EB33E4FEA6E0BN6PR16MB1425namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OlNpbVN1bjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkRlbmdYaWFuOw0K CXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IlxARGVuZ1hpYW4iOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAx IDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3NlLTE6MiAxMSA2 IDQgMyA1IDQgNCAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiXEBTaW1TdW4iOw0K CXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eToiTWljcm9zb2Z0IFlhSGVpIjsNCglwYW5vc2UtMToyIDExIDUgMyAyIDIgNCAyIDIgNDt9DQpA Zm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJcQE1pY3Jvc29mdCBZYUhlaSI7fQ0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiTWljcm9zb2Z0IEpoZW5nSGVpIjsNCglwYW5vc2UtMToyIDExIDYg NCAzIDUgNCA0IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJcQE1pY3Jvc29mdCBK aGVuZ0hlaSI7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29O b3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAx cHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJp ZjsNCgltc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUzt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJs aW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3Jh dGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJ e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9u OnVuZGVybGluZTt9DQpwcmUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1s aW5rOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCnAuTXNvTGlzdFBhcmFn cmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0 eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0K CXRleHQtaW5kZW50OjIxLjBwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCnNwYW4u SFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkhUTUwgUHJlZm9ybWF0dGVk IENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQ cmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KcC5tc29ub3JtYWww LCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3Jt YWw7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0K CW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2lu LWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7fQ0KcC5IVE1MLCBsaS5IVE1MLCBkaXYuSFRNTA0KCXttc28tc3R5bGUtbmFtZToi SFRNTCDpooTorr7moLzlvI8iOw0KCW1zby1zdHlsZS1saW5rOiJIVE1MIOmihOiuvuagvOW8jyBD aGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6 MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0 LWxhbmd1YWdlOkVOLVVTO30NCnNwYW4uSFRNTENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkhUTUwg 6aKE6K6+5qC85byPIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUt bGluazoiSFRNTCDpooTorr7moLzlvI8iOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJ bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjQNCgl7bXNvLXN0 eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJ Y29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyNQ0KCXttc28tc3R5bGUtdHlwZTpw ZXJzb25hbDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciOw0KCWNvbG9yOmJsYWNrOw0KCWZv bnQtd2VpZ2h0Om5vcm1hbDsNCglmb250LXN0eWxlOm5vcm1hbDt9DQpzcGFuLkVtYWlsU3R5bGUy Ng0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTI3DQoJe21zby1zdHls ZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJY29sb3I6Ymxh Y2s7DQoJZm9udC13ZWlnaHQ6bm9ybWFsOw0KCWZvbnQtc3R5bGU6bm9ybWFsO30NCnNwYW4uRW1h aWxTdHlsZTI4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjkN Cgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMt c2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUzMA0KCXttc28tc3R5bGUt dHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xv cjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTMxDQoJe21zby1zdHlsZS10eXBlOnBlcnNv bmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7 fQ0Kc3Bhbi5FbWFpbFN0eWxlMzINCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVt YWlsU3R5bGUzMw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTM0DQoJ e21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMzUNCgl7bXNvLXN0eWxl LXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29s b3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUzNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25h bC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5k b3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0K CWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEu MGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24x DQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGww DQoJe21zby1saXN0LWlkOjIxMjQ2MTMxNDA7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNv LWxpc3QtdGVtcGxhdGUtaWRzOi0xOTg0NTIwNzEwIC0xMzE0NjI2ODU2IDY3Njk4NzEzIDY3Njk4 NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1 O30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtdGV4dDoiJTFcKSI7DQoJbXNvLWxldmVs LXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdp bi1sZWZ0Oi4yNWluOw0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDINCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRleHQ6IiUy XCkiOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgltYXJnaW4tbGVmdDo0Mi4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTIxLjBwdDt9DQpA bGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdo dDsNCgltYXJnaW4tbGVmdDo2My4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTIxLjBwdDt9DQpAbGlzdCBs MDpsZXZlbDQNCgl7bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0Ojg0LjBwdDsNCgl0ZXh0LWluZGVudDotMjEuMHB0 O30NCkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dl cjsNCgltc28tbGV2ZWwtdGV4dDoiJTVcKSI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjEwNS4wcHQ7DQoJ dGV4dC1pbmRlbnQ6LTIxLjBwdDt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgltYXJnaW4tbGVmdDoxLjc1aW47DQoJdGV4dC1p bmRlbnQ6LTIxLjBwdDt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVsLXRhYi1zdG9wOm5v bmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjE0Ny4w cHQ7DQoJdGV4dC1pbmRlbnQ6LTIxLjBwdDt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRleHQ6IiU4XCkiOw0KCW1z by1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN CgltYXJnaW4tbGVmdDoxNjguMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0KQGxpc3QgbDA6 bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZl bC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJbWFy Z2luLWxlZnQ6MTg5LjBwdDsNCgl0ZXh0LWluZGVudDotMjEuMHB0O30NCm9sDQoJe21hcmdpbi1i b3R0b206MGluO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGluO30NCi0tPjwvc3R5bGU+PCEtLVtp ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4 PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8 bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0i MSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5 IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9Ildv cmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVh c3QtbGFuZ3VhZ2U6WkgtQ04iPkhpIEZyYW5rLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHByZT48c3BhbiBzdHlsZT0ibXNvLWZhcmVh c3QtbGFuZ3VhZ2U6WkgtQ04iPkkgZG9u4oCZdCB0aGluayBKb27igJlzIGNvbmNlcm4gaXMgbG9z aW5nIHRoZSBtaXRpZ2F0aW9uIHJlcXVlc3QuIFRoZSBtaXRpZ2F0aW9uIHJlcXVlc3Qgc2hvdWxk IGJlIHN0b3JlZCBpbiBhIHBlcnNpc3RlbnQgc3RvcmFnZSBhbmQgdGhlIERPVFMgc2VydmVyIGNh biA8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0 LWxhbmd1YWdlOlpILUNOIj5yZWJ1aWxkIHRoZSBhY3RpdmUgbWl0aWdhdGlvbiByZXF1ZXN0IGxp c3QgYWZ0ZXIgcmVzdGFydC4gPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O21z by1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5DaGVlcnMsPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxh bmd1YWdlOlpILUNOIj4tVGlydTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxhIG5hbWU9Il9NYWlsRW5kQ29tcG9zZSI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0 LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2E+PC9wPg0KPHNwYW4g c3R5bGU9Im1zby1ib29rbWFyazpfTWFpbEVuZENvbXBvc2UiPjwvc3Bhbj4NCjxkaXYgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGlu IDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpz b2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5G cm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4g RG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFsZiBPZiA8L2I+ WGlhbGlhbmcgKEZyYW5rLCBOZXR3b3JrIEludGVncmF0aW9uIFRlY2hub2xvZ3kgUmVzZWFyY2gg RGVwdCk8YnI+DQo8Yj5TZW50OjwvYj4gTW9uZGF5LCBNYXkgMjEsIDIwMTggOToxNyBBTTxicj4N CjxiPlRvOjwvYj4gS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeSAmbHQ7VGlydW1hbGVzd2FyUmVk ZHlfS29uZGFATWNBZmVlLmNvbSZndDs7IEpvbiBTaGFsbG93ICZsdDtzdXBqcHMtaWV0ZkBqcHNo YWxsb3cuY29tJmd0OzsgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxicj4NCjxiPkNjOjwv Yj4gZG90c0BpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBbRG90c10gPC9zcGFuPjxzcGFu IGxhbmc9IlpILUNOIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7TWljcm9zb2Z0IEpoZW5nSGVp JnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPuetlOWkjTwvc3Bh bj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjogRE9UUyBzZXJ2ZXIg Y3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb248bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHRhYmxlIGNsYXNzPSJNc29Ob3JtYWxUYWJs ZSIgYm9yZGVyPSIxIiBjZWxscGFkZGluZz0iMCIgc3R5bGU9ImJhY2tncm91bmQ6I0YzRkYzMzti b3JkZXI6c29saWQgIzlCOUE4NyAxLjVwdCI+DQo8dGJvZHk+DQo8dHI+DQo8dGQgc3R5bGU9ImJv cmRlcjpub25lO3BhZGRpbmc6Ljc1cHQgLjc1cHQgLjc1cHQgLjc1cHQiPg0KPHA+PHN0cm9uZz48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojOUI4QjNFIj5DQVVUSU9OPC9zcGFuPjwvc3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPjo8L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 YmxhY2siPiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4NCiBhdHRh Y2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250 ZW50IGlzIHNhZmUuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L3RkPg0KPC90cj4NCjwv dGJvZHk+DQo8L3RhYmxlPg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVyIiBz dHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFn ZTpaSC1DTiI+DQo8aHIgc2l6ZT0iMiIgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9z cGFuPjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5I aSBUaXJ1LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3Vh Z2U6WkgtQ04iPkkgc2hhcmUgdGhlIHNhbWUgY29uY2VybiB3aXRoIEpvbiBhczo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNO Ij5JZiBkb3RzIHNldmVyIHJlc3RhcnRzLCBhbmQgbG9zZXMgYWxsIHRoZSBtaXRpZ2F0aW9uIHN0 YXR1cywgdGhlbiBkb3RzIGNsaWVudCBzaG91bGQgcmVzZW5kIGFsbCB0aGUgYWN0aXZlIG1pdGln YXRpb24gc3RhdHVzIHRvIGl0LiBUaGVyZSBjYW4gYmUgdHdvIHdheSBmb3IgaXQ6PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4t bGVmdDouMjVpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzIiPg0K PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6 IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PHNwYW4gc3R5bGU9Im1zby1saXN0 Oklnbm9yZSI+MSk8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bh bj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIGRpcj0iTFRSIj48L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+ UmVzZW5kIG1pdGlnYXRpb24gcmVxdWVzdHMgZm9yIGFsbCBhY3RpdmUgbWl0aWdhdGlvbjs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi4yNWluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZv MiI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtj b2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48c3BhbiBzdHlsZT0ibXNv LWxpc3Q6SWdub3JlIj4yKTxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+ PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gZGlyPSJMVFIiPjwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpI LUNOIj5Eb3RzIGNsaWVudCBzeW5jIGFsbCB0aGUgYWN0aXZlIG1pdGlnYXRpb24gc3RhdHVzIHdp dGggc2VydmVyLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFu Z3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOiMxRjQ5N0Q7bXNvLWZh cmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkl04oCZcyBub3Qgb25seSBhYm91dCB0aGUgb2JzZXJ2ZSBv cHRpb24uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFn ZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFz dC1sYW5ndWFnZTpaSC1DTiI+VGhhbmtzITxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOiMxRjQ5N0Q7 bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9y OiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkIuUi48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dDtjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5GcmFuazxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9w OnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5nPSJaSC1DTiIgc3R5bGU9ImZvbnQtZmFtaWx5OiZx dW90O01pY3Jvc29mdCBZYUhlaSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdl OlpILUNOIj7lj5Hku7bkuro8L3NwYW4+PC9iPjxiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTom cXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFn ZTpaSC1DTiI+Ojwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O01pY3Jv c29mdCBZYUhlaSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4N CiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSA8Yj48c3BhbiBsYW5nPSJaSC1D TiI+5Luj6KGoIDwvc3Bhbj48L2I+S29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeTxicj4NCjxiPjxz cGFuIGxhbmc9IlpILUNOIj7lj5HpgIHml7bpl7Q8L3NwYW4+OjwvYj4gMjAxODxzcGFuIGxhbmc9 IlpILUNOIj7lubQ8L3NwYW4+NTxzcGFuIGxhbmc9IlpILUNOIj7mnIg8L3NwYW4+MTg8c3BhbiBs YW5nPSJaSC1DTiI+5pelPC9zcGFuPiAxNjo1Nzxicj4NCjxiPjxzcGFuIGxhbmc9IlpILUNOIj7m lLbku7bkuro8L3NwYW4+OjwvYj4gSm9uIFNoYWxsb3cgJmx0O3N1cGpwcy1pZXRmQGpwc2hhbGxv dy5jb20mZ3Q7OyBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tOyBkb3RzQGlldGYub3JnPGJy Pg0KPGI+PHNwYW4gbGFuZz0iWkgtQ04iPuS4u+mimDwvc3Bhbj46PC9iPiBSZTogW0RvdHNdIERP VFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1 cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5IaSBKb24sPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0 LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPlBsZWFz ZSBzZWUgaW5saW5lIFtUUl08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNv bGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6 My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9 Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9 Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4gRG90cyBbPGEgaHJlZj0ibWFpbHRvOmRvdHMt Ym91bmNlc0BpZXRmLm9yZyI+bWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZzwvYT5dDQo8Yj5P biBCZWhhbGYgT2YgPC9iPkpvbiBTaGFsbG93PGJyPg0KPGI+U2VudDo8L2I+IEZyaWRheSwgTWF5 IDE4LCAyMDE4IDI6MTYgUE08YnI+DQo8Yj5Ubzo8L2I+IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVk ZHkgJmx0OzxhIGhyZWY9Im1haWx0bzpUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29t Ij5UaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tPC9hPiZndDs7DQo8YSBocmVmPSJt YWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSI+bW9oYW1lZC5ib3VjYWRhaXJAb3Jh bmdlLmNvbTwvYT47IDxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj4NCmRvdHNAaWV0Zi5v cmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gv cmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb248bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHRhYmxlIGNsYXNzPSJNc29Ob3JtYWxUYWJsZSIgYm9y ZGVyPSIxIiBjZWxsc3BhY2luZz0iMyIgY2VsbHBhZGRpbmc9IjAiIHN0eWxlPSJiYWNrZ3JvdW5k OiNGM0ZGMzM7Ym9yZGVyOnNvbGlkICM5QjlBODcgMS41cHQiPg0KPHRib2R5Pg0KPHRyPg0KPHRk IHN0eWxlPSJib3JkZXI6bm9uZTtwYWRkaW5nOi43NXB0IC43NXB0IC43NXB0IC43NXB0Ij4NCjxw PjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzlCOEIzRSI+Q0FVVElPTjwvc3Bhbj48L3N0cm9uZz48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojOUI4QjNFIj46 PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOmJsYWNrIj4gRXh0ZXJuYWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBv cGVuDQogYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25v dyB0aGUgY29udGVudCBpcyBzYWZlLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1 b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC90ZD4N CjwvdHI+DQo8L3Rib2R5Pg0KPC90YWJsZT4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249 ImNlbnRlciIgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4NCjxociBzaXplPSIzIiB3aWR0aD0iMTAw JSIgYWxpZ249ImNlbnRlciI+DQo8L3NwYW4+PC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SGkgVGlydTxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj5TZWUgaW5saW5lIFtKb24yXTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5SZWdhcmRzPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjoj MUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkpvbjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHls ZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxk aXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRk aW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5z LXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNh bnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPiBEb3RzIFttYWlsdG86DQo8YSBo cmVmPSJtYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnIj5kb3RzLWJvdW5jZXNAaWV0Zi5vcmc8 L2E+XSA8Yj5PbiBCZWhhbGYgT2YNCjwvYj5Lb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5PGJyPg0K PGI+U2VudDo8L2I+IDE3IE1heSAyMDE4IDE3OjA1PGJyPg0KPGI+VG86PC9iPiBKb24gU2hhbGxv dzsgPGEgaHJlZj0ibWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iPm1vaGFtZWQu Ym91Y2FkYWlyQG9yYW5nZS5jb208L2E+Ow0KPGEgaHJlZj0ibWFpbHRvOmRvdHNAaWV0Zi5vcmci PmRvdHNAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbRG90c10gRE9UUyBz ZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRp b248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0 LWxhbmd1YWdlOlpILUNOIj5bSm9uMV0gQWdyZWVkIHRoZSBET1RTIHNlcnZlciBjYW5ub3Qgc2Vu dCBhbnl0aGluZyB0aGF0IGlzIHVuc29saWNpdGVkIGR1ZSB0byBsb3NzIG9mIGNyeXB0b2dyYXBo aWMgc3RhdGUuJm5ic3A7IEhvd2V2ZXIsIGlmIHRoZSBET1RTIHNlcnZlciBjYW4gc2VuZCBiYWNr IGluIGEgcmVzcG9uc2UgdG8gYSBjbGllbnQgcmVxdWVzdA0KIHNvbWV0aGluZyB0aGF0IHN0YXRl cyDigJxJIHJlc3RhcnRlZCByZWNlbnRseSBAIHN1Y2ggYSB0aW1l4oCdLCB0aGUgY2xpZW50IHdp bGwga25vdyB3aGV0aGVyIHRoZSBtaXNzaW5nIGhlYXJ0YmVhdHMgd2VyZSBkb3duIHRvIGp1c3Qg YSBmbGFreSBuZXR3b3JrLCBvciB0aGUgbWlzc2luZyBoZWFydGJlYXRzIHdlcmUgZHVlIHRvIGEg c2VydmVyIHJlc3RhcnQsIGFuZCBzbyByZS1zdWJzY3JpYmUgbmVlZGVkIGZvciBhbGwgdGhlIHJl c291cmNlcyB0aGF0DQogdGhlIGNsaWVudCB3YW50cyB0byBtb25pdG9yLiZuYnNwOyBJIGRvIG5v dCB3YW50IHRoZSBET1RTIGNsaWVudCB0byBrZWVwIG9uIGRvaW5nIHJlLXN1YnNjcmliZSBjb21w b3VuZGluZyB0aGUgbmV0d29yayBmbGFraW5lc3Mgd2hlbiB1bmRlciBhdHRhY2suPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJl YXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPltS XSBUaGUgZmlyc3QgdHdvIHNlbnRlbmNlcyBjb250cmFkaWN0IGVhY2ggb3RoZXIuIEhvdyBjYW4g dGhlIHNlcnZlciBzZW5kIGFueSBkYXRhIG9uIHRoZSBvbGQgc2Vzc2lvbiA/DQo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFG NDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+W0pvbjJdIEkgYWN0dWFsbHkgd2FzIHRo aW5raW5nIHRoYXQgdGhlIHJlc3BvbnNlIHdhcyBzZW50IGFmdGVyIHRoZSBuZXcgc2Vzc2lvbiB3 YXMgZXN0YWJsaXNoZWQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5BbmQgSSBkb27igJl0 IHVuZGVyc3RhbmQgdGhlIHZhbHVlIG9mIHNlbmRpbmcg4oCcSSByZXN0YXJ0ZWQgcmVjZW50bHkg QHN1Y2ggYSB0aW1l4oCdIGluIHRoZSBuZXcgKEQpVExTIHNlc3Npb24uLCB0aGUgY2xpZW50IGFu eXdheXMgaGFzIHRvIHJlc2VuZCB0aGUgbGlzdCBvZiBhY3RpdmUgbWl0aWdhdGlvbnMgaXQgd2lz aGVzIHRvIG9ic2VydmUgaW4NCiB0aGUgbmV3IHNlc3Npb24gKGlycmVzcGVjdGl2ZSBvZiB0aGUg cmVhc29uIHRoZSBzZXNzaW9uIGlzIGRpc2Nvbm5lY3RlZCkuIEEgc2Vzc2lvbiBjb3VsZCBiZSBk aXNjb25uZWN0ZWQgYmVjYXVzZSBvZiB2YXJpb3VzIG90aGVyIHJlYXNvbnMgKGUuZy4gTkFUIHJl bG9hZCkuPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RDtt c28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+W0pvbjJdJm5ic3A7IE9LLCBzbyB3aGVuZXZlciBh IG5ldyBzZXNzaW9uIGlzIHN0YXJ0ZWQgZm9yIHdoYXRldmVyIHJlYXNvbiwgdGhlcmUgbmVlZHMg dG8gYmUgYSByZXNlbmQgb2YgYWN0aXZlIG1pdGlnYXRpb25zLiZuYnNwOw0KPC9zcGFuPjxzcGFu IHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdl OlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cHJlPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5bVFJdIE5vLCBJIG1l YW50IFRoZSBET1RTIGNsaWVudCBpbiB0aGUgbmV3IChEKVRMUyBzZXNzaW9uIGhhcyB0byBzZW5k IEdFVCByZXF1ZXN0IHdpdGggT2JzZXJ2ZSBvcHRpb24gdG8gcmVjZWl2ZSB1bnNvbGljaXRlZCBu b3RpZmljYXRpb25zIG9mIGF0dGFjayBtaXRpZ2F0aW9uIHN0YXR1cyBvZiBhY3RpdmUgbWl0aWdh dGlvbiByZXF1ZXN0cyBmcm9tIHRoZSBET1RTIHNlcnZlci4gPG86cD48L286cD48L3NwYW4+PC9w cmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O21zby1mYXJlYXN0LWxhbmd1 YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPi1UaXJ1PG86 cD48L286cD48L3NwYW4+PC9wcmU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEO21zby1mYXJl YXN0LWxhbmd1YWdlOlpILUNOIj5Ib3dldmVyLCBJIGhhdmUgbm90IGZvdW5kIGFueXdoZXJlIGlu IHRoZSBzaWduYWwgLyByZXF1aXJlbWVudHMgLyBhcmNoaXRlY3R1cmUgd2hlcmUgdGhpcyBpcyBz dWdnZXN0ZWQgKGJ1dCBtYXkgaGF2ZSBzZWFyY2hlZCBvbiB0aGUgd3Jvbmcga2V5d29yZHMhKSBJ IHRoaW5rIHRoYXQgdGhpcyBuZWVkcyB0byBiZSBzdGF0ZWQNCiBzb21ld2hlcmUsIGV2ZW4gdGhv dWdoIGl0IGlzIG9idmlvdXMgaWYgeW91IHRoaW5rIGFib3V0IGl0LjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEO21z by1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5+Sm9uMjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1D TiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6WkgtQ04iPi1UaXJ1PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVm dDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxk aXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRk aW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0 eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0 eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+IEpvbiBTaGFsbG93IFs8YSBocmVmPSJt YWlsdG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbSI+bWFpbHRvOnN1cGpwcy1pZXRmQGpwc2hh bGxvdy5jb208L2E+XQ0KPGJyPg0KPGI+U2VudDo8L2I+IFRodXJzZGF5LCBNYXkgMTcsIDIwMTgg ODo1NCBQTTxicj4NCjxiPlRvOjwvYj4gS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeSAmbHQ7PGEg aHJlZj0ibWFpbHRvOlRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20iPlRpcnVtYWxl c3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb208L2E+Jmd0OzsNCjxhIGhyZWY9Im1haWx0bzptb2hh bWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPC9h PjsgPGEgaHJlZj0ibWFpbHRvOmRvdHNAaWV0Zi5vcmciPg0KZG90c0BpZXRmLm9yZzwvYT48YnI+ DQo8Yj5TdWJqZWN0OjwvYj4gUkU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdp dGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxkaXY+DQo8dGFibGUgY2xhc3M9Ik1zb05vcm1hbFRhYmxlIiBib3JkZXI9IjEiIGNl bGxzcGFjaW5nPSIzIiBjZWxscGFkZGluZz0iMCIgc3R5bGU9ImJhY2tncm91bmQ6I0YzRkYzMzti b3JkZXI6c29saWQgIzlCOUE4NyAxLjVwdCI+DQo8dGJvZHk+DQo8dHI+DQo8dGQgc3R5bGU9ImJv cmRlcjpub25lO3BhZGRpbmc6Ljc1cHQgLjc1cHQgLjc1cHQgLjc1cHQiPg0KPHA+PHN0cm9uZz48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojOUI4QjNFIj5DQVVUSU9OPC9zcGFuPjwvc3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPjo8L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 YmxhY2siPiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4NCiBhdHRh Y2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250 ZW50IGlzIHNhZmUuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L3RkPg0KPC90cj4NCjwv dGJvZHk+DQo8L3RhYmxlPg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVyIiBz dHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0ibXNvLWZh cmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPg0KPGhyIHNpemU9IjMiIHdpZHRoPSIxMDAlIiBhbGlnbj0i Y2VudGVyIj4NCjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5IaSBUaXJ1LDxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHls ZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5TZWUg aW5saW5lIFtKb24xXTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj5SZWdhcmRzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkpvbjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0 IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21z by1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWY7 bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPiBEb3RzIFttYWlsdG86DQo8YSBocmVmPSJtYWls dG86ZG90cy1ib3VuY2VzQGlldGYub3JnIj5kb3RzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSA8Yj5P biBCZWhhbGYgT2YNCjwvYj5Lb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5PGJyPg0KPGI+U2VudDo8 L2I+IDE3IE1heSAyMDE4IDE2OjAzPGJyPg0KPGI+VG86PC9iPiBKb24gU2hhbGxvdzsgPGEgaHJl Zj0ibWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iPm1vaGFtZWQuYm91Y2FkYWly QG9yYW5nZS5jb208L2E+Ow0KPGEgaHJlZj0ibWFpbHRvOmRvdHNAaWV0Zi5vcmciPmRvdHNAaWV0 Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jh c2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb248bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+SGkgSm9u LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdl OlpILUNOIj5UaGlzIHNjZW5hcmlvIGlzIGFscmVhZHkgZGlzY3Vzc2VkIGluIFNlY3Rpb24gNC43 LiBXaGVuIHRoZSBERG9TIG1pdGlnYXRpb24gaXMgaW4gcHJvZ3Jlc3MgYW5kIGFmdGVyIHRoZSDi gJhtaXNzaW5nLWhiLWFsbG93ZWTigJkgdGhyZXNob2xkIGlzIHJlYWNoZWQsIHRoZSBET1RTIGNs aWVudCB3aWxsIGNvbnRpbnVlIHRvIHVzZSB0aGUgZXhpc3RpbmcNCiAoRClUTFMgc2Vzc2lvbiB0 byBzZW5kIGhlYXJ0YmVhdCByZXF1ZXN0cyB0byB0aGUgc2VydmVyIGFuZCBhdCB0aGUgc2FtZSB0 aW1lIHRyeSB0byBlc3RhYmxpc2ggYSBuZXcgKEQpVExTIHNlc3Npb24gd2l0aCBET1RTIHNlcnZl ci4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5bSm9uMV0gSSBm dWxseSB1bmRlcnN0YW5kIHRoYXQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkZ1cnRoZXIs IGlmIHRoZSBzZXJ2ZXIgcmVzdGFydHMsIChEKVRMUyBzdGF0ZSBpcyBsb3N0IG9uIHRoZSBzZXJ2 ZXIgYW5kIHRoZSBzZXJ2ZXIgZG9lcyBub3QgaGF2ZSB0aGUgY3J5cHRvZ3JhcGhpYyBzdGF0ZSB0 byBzZW5kIOKAmHJlLXN1YnNjcmliZeKAmSBvbiB0aGUgb2xkIHNlc3Npb24uDQo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFG NDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+W0pvbjFdIEFncmVlZCB0aGUgRE9UUyBz ZXJ2ZXIgY2Fubm90IHNlbnQgYW55dGhpbmcgdGhhdCBpcyB1bnNvbGljaXRlZCBkdWUgdG8gbG9z cyBvZiBjcnlwdG9ncmFwaGljIHN0YXRlLiZuYnNwOyBIb3dldmVyLCBpZiB0aGUgRE9UUyBzZXJ2 ZXIgY2FuIHNlbmQgYmFjayBpbiBhIHJlc3BvbnNlIHRvIGEgY2xpZW50IHJlcXVlc3QNCiBzb21l dGhpbmcgdGhhdCBzdGF0ZXMg4oCcSSByZXN0YXJ0ZWQgcmVjZW50bHkgQCBzdWNoIGEgdGltZeKA nSwgdGhlIGNsaWVudCB3aWxsIGtub3cgd2hldGhlciB0aGUgbWlzc2luZyBoZWFydGJlYXRzIHdl cmUgZG93biB0byBqdXN0IGEgZmxha3kgbmV0d29yaywgb3IgdGhlIG1pc3NpbmcgaGVhcnRiZWF0 cyB3ZXJlIGR1ZSB0byBhIHNlcnZlciByZXN0YXJ0LCBhbmQgc28gcmUtc3Vic2NyaWJlIG5lZWRl ZCBmb3IgYWxsIHRoZSByZXNvdXJjZXMgdGhhdA0KIHRoZSBjbGllbnQgd2FudHMgdG8gbW9uaXRv ci4mbmJzcDsgSSBkbyBub3Qgd2FudCB0aGUgRE9UUyBjbGllbnQgdG8ga2VlcCBvbiBkb2luZyBy ZS1zdWJzY3JpYmUgY29tcG91bmRpbmcgdGhlIG5ldHdvcmsgZmxha2luZXNzIHdoZW4gdW5kZXIg YXR0YWNrLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5+Sm9uMTxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJt c28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpI LUNOIj4tVGlydTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1 ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAw aW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0ibXNvLWZh cmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0ibXNvLWZh cmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPiBKb24gU2hhbGxvdyBbPGEgaHJlZj0ibWFpbHRvOnN1cGpw cy1pZXRmQGpwc2hhbGxvdy5jb20iPm1haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tPC9h Pl0NCjxicj4NCjxiPlNlbnQ6PC9iPiBUaHVyc2RheSwgTWF5IDE3LCAyMDE4IDE6MjEgUE08YnI+ DQo8Yj5Ubzo8L2I+IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgJmx0OzxhIGhyZWY9Im1haWx0 bzpUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tIj5UaXJ1bWFsZXN3YXJSZWRkeV9L b25kYUBNY0FmZWUuY29tPC9hPiZndDs7DQo8YSBocmVmPSJtYWlsdG86bW9oYW1lZC5ib3VjYWRh aXJAb3JhbmdlLmNvbSI+bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT47IDxhIGhyZWY9 Im1haWx0bzpkb3RzQGlldGYub3JnIj4NCmRvdHNAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVj dDo8L2I+IFJFOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVk IG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2 Pg0KPHRhYmxlIGNsYXNzPSJNc29Ob3JtYWxUYWJsZSIgYm9yZGVyPSIxIiBjZWxsc3BhY2luZz0i MyIgY2VsbHBhZGRpbmc9IjAiIHN0eWxlPSJiYWNrZ3JvdW5kOiNGM0ZGMzM7Ym9yZGVyOnNvbGlk ICM5QjlBODcgMS41cHQiPg0KPHRib2R5Pg0KPHRyPg0KPHRkIHN0eWxlPSJib3JkZXI6bm9uZTtw YWRkaW5nOi43NXB0IC43NXB0IC43NXB0IC43NXB0Ij4NCjxwPjxzdHJvbmc+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzlCOEIzRSI+ Q0FVVElPTjwvc3Bhbj48L3N0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJp YWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojOUI4QjNFIj46PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj4gRXh0 ZXJuYWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuDQogYXR0YWNobWVudHMgdW5s ZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZl Ljwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1z ZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0KPC90 YWJsZT4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImNlbnRlciIgc3R5bGU9InRleHQt YWxpZ246Y2VudGVyIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1 YWdlOlpILUNOIj4NCjxociBzaXplPSIzIiB3aWR0aD0iMTAwJSIgYWxpZ249ImNlbnRlciI+DQo8 L3NwYW4+PC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SGkgVGlydSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SXQgaXMgYSBjb3JuZXIg cmVjb3ZlcnkgY2FzZS4mbmJzcDsgVGhlIERPVFMgY2xpZW50IGNhbiBkZXRlY3QgdGhhdCB0aGUg RE9UUyBzZXJ2ZXIgaGFzIGdvbmUgYXdheSAodXNpbmcgaGVhcnRiZWF0cykgYW5kIHJlLXN1YnNj cmliZSB0byBhbGwgdGhlIHJlc291cmNlcyB0aGF0IHRoZSBET1RTIGNsaWVudCB3YW50cyB0byBP YnNlcnZlIG9uIGRldGVjdGlvbg0KIHRoYXQgdGhlIERPVFMgc2VydmVyIGlzIGJhY2s8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIg c3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ SG93ZXZlciwgd2hlbiBtaXRpZ2F0aW5nLCB0aGVyZSBpcyBhIGxpa2VsaWhvb2QgdGhhdCBoZWFy dGJlYXRzIHdpbGwgdGltZSBvdXQgYW5kIEkgYW0gbm90IHN1cmUgdGhhdCBpdCBpcyB3aXNlIHRv IOKAnHJlLXN1YnNjcmliZeKAnSB3aGVuIHRoZSBjb25uZWN0aW9ucyBhcmUgcmUtZXN0YWJsaXNo ZWQgYXMgdGhlIG5ldHdvcmsgcGF0aCBtYXkgc3RpbGwNCiBiZSBmbGFreSBhbmQgYWRkaW5nIGV4 dHJhIHRyYWZmaWMgbWF5IGJlIHByb2JsZW1hdGljLiZuYnNwOyBNeSBzdWdnZXN0aW9uIG9mIGFu IGVwb2NoIHRpbWUgYmVpbmcgcmVwb3J0ZWQgYnkgdGhlIERPVFMgc2VydmVyIHdhcyBhIHdheSBv ZiBkZXRlcm1pbmluZyB3aGV0aGVyIOKAnHJlLXN1YnNjcmliZeKAnSB3YXMgcmVxdWlyZWQgb3Ig bm90LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xv cjojMUY0OTdEIj5SZWdhcmRzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkpvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4g MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0 LWxhbmd1YWdlOkVOLUdCIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVh c3QtbGFuZ3VhZ2U6RU4tR0IiPiBEb3RzIFttYWlsdG86DQo8YSBocmVmPSJtYWlsdG86ZG90cy1i b3VuY2VzQGlldGYub3JnIj5kb3RzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSA8Yj5PbiBCZWhhbGYg T2YNCjwvYj5Lb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5PGJyPg0KPGI+U2VudDo8L2I+IDE2IE1h eSAyMDE4IDE2OjA1PGJyPg0KPGI+VG86PC9iPiA8YSBocmVmPSJtYWlsdG86bW9oYW1lZC5ib3Vj YWRhaXJAb3JhbmdlLmNvbSI+bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT47IEpvbiBT aGFsbG93Ow0KPGEgaHJlZj0ibWFpbHRvOmRvdHNAaWV0Zi5vcmciPmRvdHNAaWV0Zi5vcmc8L2E+ PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFy dCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb248bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+SSBkb27igJl0IGdldCB0 aGUgcHJvYmxlbS4gSWYgdGhlIHNlcnZlciByZXN0YXJ0cywgKEQpVExTIHN0YXRlIHdpbGwgYmUg bG9zdCBhbmQgc2VydmVyIHdpbGwgcmVqZWN0IGhlYXJ0YmVhdCByZXF1ZXN0cyBmcm9tIHRoZSBj bGllbnQgKGVpdGhlciBzaWxlbnRseSBvciBzZW5kIGEgZmF0YWwgYWxlcnQgdG8gdGhlIGNsaWVu dCkuIERPVFMgY2xpZW50DQogd2lsbCBoYXZlIHRvIGZvbGxvdyB0aGUgc3RlcHMgaW4gPGEgaHJl Zj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hh bm5lbC0xOSNzZWN0aW9uLTQuNyI+DQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQt aWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5I3NlY3Rpb24tNC43PC9hPiB0byByZS1lc3RhYmxp c2ggKEQpVExTIHNlc3Npb24gd2l0aCB0aGUgRE9UUyBzZXJ2ZXIuDQo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFu Z3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+LVRpcnU8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNv LWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxk aXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGlu ZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdl OlpILUNOIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdl OlpILUNOIj4gRG90cyBbPGEgaHJlZj0ibWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZyI+bWFp bHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZzwvYT5dDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPjxhIGhy ZWY9Im1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIj5tb2hhbWVkLmJvdWNhZGFp ckBvcmFuZ2UuY29tPC9hPjxicj4NCjxiPlNlbnQ6PC9iPiBXZWRuZXNkYXksIE1heSAxNiwgMjAx OCA3OjE1IFBNPGJyPg0KPGI+VG86PC9iPiBKb24gU2hhbGxvdyAmbHQ7PGEgaHJlZj0ibWFpbHRv OnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb20iPnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb208L2E+ Jmd0OzsNCjxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxi cj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQg d2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPGRpdj4NCjx0YWJsZSBjbGFzcz0iTXNvTm9ybWFsVGFibGUiIGJvcmRlcj0iMSIg Y2VsbHNwYWNpbmc9IjMiIGNlbGxwYWRkaW5nPSIwIiBzdHlsZT0iYmFja2dyb3VuZDojRjNGRjMz O2JvcmRlcjpzb2xpZCAjOUI5QTg3IDEuNXB0Ij4NCjx0Ym9keT4NCjx0cj4NCjx0ZCBzdHlsZT0i Ym9yZGVyOm5vbmU7cGFkZGluZzouNzVwdCAuNzVwdCAuNzVwdCAuNzVwdCI+DQo8cD48c3Ryb25n PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOiM5QjhCM0UiPkNBVVRJT048L3NwYW4+PC9zdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzlCOEIzRSI+Ojwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjpibGFjayI+IEV4dGVybmFsIGVtYWlsLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3Blbg0KIGF0 dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNv bnRlbnQgaXMgc2FmZS48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvdGQ+DQo8L3RyPg0K PC90Ym9keT4NCjwvdGFibGU+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIi IHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJtc28tZmFy ZWFzdC1sYW5ndWFnZTpaSC1DTiI+DQo8aHIgc2l6ZT0iMyIgd2lkdGg9IjEwMCUiIGFsaWduPSJj ZW50ZXIiPg0KPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlJlLSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+UGxlYXNlIHNlZSBpbmxpbmUuDQo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6Ymxh Y2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Q2hlZXJzLDxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+ TWVkPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6 MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFz dC1sYW5ndWFnZTpGUiI+RGUmbmJzcDs6PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2Vy aWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPiBKb24gU2hhbGxvdyBbPGEgaHJlZj0ibWFpbHRv OnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb20iPm1haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cu Y29tPC9hPl0NCjxicj4NCjxiPkVudm95w6kmbmJzcDs6PC9iPiBtZXJjcmVkaSAxNiBtYWkgMjAx OCAxNDo0Mjxicj4NCjxiPsOAJm5ic3A7OjwvYj4gQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTjsg PGEgaHJlZj0ibWFpbHRvOmRvdHNAaWV0Zi5vcmciPmRvdHNAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+ T2JqZXQmbmJzcDs6PC9iPiBSRTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0 aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhpIE1lZCw8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNv bG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+U2VlIGlubGlu ZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+UmVnYXJkczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0Ii IHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Kb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBp biI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1s YW5ndWFnZTpFTi1HQiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0 LWxhbmd1YWdlOkVOLUdCIj4gRG90cyBbbWFpbHRvOg0KPGEgaHJlZj0ibWFpbHRvOmRvdHMtYm91 bmNlc0BpZXRmLm9yZyI+ZG90cy1ib3VuY2VzQGlldGYub3JnPC9hPl0gPGI+T24gQmVoYWxmIE9m DQo8L2I+PGEgaHJlZj0ibWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iPm1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208L2E+PGJyPg0KPGI+U2VudDo8L2I+IDE2IE1heSAyMDE4 IDEyOjU1PGJyPg0KPGI+VG86PC9iPiBKb24gU2hhbGxvdzsgPGEgaHJlZj0ibWFpbHRvOmRvdHNA aWV0Zi5vcmciPmRvdHNAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbRG90 c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0Nv bmZpZ3VyYXRpb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFj ayI+SGkgSm9uLA0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2si PlBsZWFzZSBzZWUgaW5saW5lLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6YmxhY2siPkNoZWVycyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPk1lZDxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFj ayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYg MS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 Yj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPkRlJm5i c3A7Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1 YWdlOkZSIj4gRG90cyBbPGEgaHJlZj0ibWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZyI+bWFp bHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZzwvYT5dDQo8Yj5EZSBsYSBwYXJ0IGRlPC9iPiBKb24g U2hhbGxvdzxicj4NCjxiPkVudm95w6kmbmJzcDs6PC9iPiBtZXJjcmVkaSAxNiBtYWkgMjAxOCAx MjoyNDxicj4NCjxiPsOAJm5ic3A7OjwvYj4gPGEgaHJlZj0ibWFpbHRvOmRvdHNAaWV0Zi5vcmci PmRvdHNAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+T2JqZXQmbmJzcDs6PC9iPiBbRG90c10gRE9UUyBz ZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRp b248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRlIiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5IaSB0aGVyZSw8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiPkZvciB0aGUgc2lnbmFsIGNoYW5uZWwsIGl0IGlzIGVhc3kgdG8gbWFpbnRhaW4gYSBw ZXJzaXN0ZW50IGxpc3Qgb2YgYWN0aXZlIG1pdGlnYXRpb25zLiZuYnNwOyBTaG91bGQgdGhlIERP VFMgc2VydmVyICh1bmV4cGVjdGVkbHkpIHN0b3AgYW5kIHJlc3RhcnQsIHRoZW4gaXQgaXMgZWFz eSB0byByZWJ1aWxkIHRoZSBjdXJyZW50IGFjdGl2ZSBtaXRpZ2F0aW9ucy48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gVGhlIGxpc3Qgb2Yg YWN0aXZlIG1pdGlnYXRpb25zIGlzIHRoZSDigJxjb3Jl4oCdIHN0YXRlIGRhdGEgdG8gYmUgbWFp bnRhaW5lZCBieSBhIHNlcnZlci4gSWYgd2UgYXNzdW1lIHRoYXQgbGlzdCBjYW4gYmUgcmVsaWFi bHkgcmVidWlsdCwgdGhlbiB0aGVyZSBpcw0KIG5vIGV4dGVuc2lvbiBuZWVkZWQgdG8gdGhlIHNp Z25hbCBjaGFubmVsIHRvIGhhbmRsZSB0aGlzIGZhaWx1cmUgY2FzZS48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNv bG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+W0pvbl0gQWdy ZWVkLiZuYnNwOyBUaGlzIHdhcyBqdXN0IG1lIGJ1aWxkaW5nIHVwIHRoZSBiYWNrZ3JvdW5kIHRv IHRoZSBzY2VuYXJpby48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5I b3dldmVyLCB0byByZWJ1aWxkIHRoZSBsaXN0IG9mIGFjdGl2ZSBPYnNlcnZhdGlvbnMgb2YgdGhl IGN1cnJlbnQgbWl0aWdhdGlvbnMgLyBjb25maWd1cmF0aW9uIGNoYW5nZXMgaXMgY29uc2lkZXJh Ymx5IG1vcmUgZGlmZmljdWx0IGFzIHRoZSBET1RTIHNlcnZlciB3b3VsZCBhbHNvIG5lZWQgdG8g bWFpbnRhaW4gYSBsaXN0IG9mIGNsaWVudCBJUHMvc291cmNlIHBvcnRzIGV0Yy4NCiBhbG9uZyB3 aXRoIFRva2VucyBhbmQgUXVlcmllcyBhbmQgKEQpVExTIHN0YXRlIHNvIHRoYXQgdW5zb2xpY2l0 ZWQgT2JzZXJ2ZSByZXNwb25zZXMgY2FuIGNvbnRpbnVlIHRvIGJlIHNlbnQgYmFjayB0byB0aGUg Y2xpZW50cy4mbmJzcDsgSSBkb27igJl0IHJlYWxseSB0aGluayB0aGF0IHRoaXMgaXMgYSBwcmFj dGljYWwgYXNrLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj5bTWVkXSBGaXJzdCwgdGhpcyBjYW4gYmUgY29uc2lkZXJlZCBhcyBkZXBsb3ltZW50LXNw ZWNpZmljLiBBcyBzdWNoIGluIHNvbWUgZGVwbG95bWVudHMsIHRoZXJlIGlzIG5vIG5lZWQgdG8g c3VwcG9ydCBhdXRvbWF0aWMgbWVhbnMgdG8gZGV0ZWN0IHN0YXRlIGxvc3MNCiBhdCB0aGUgc2Vy dmVyIHNpZGUuIFNlY29uZCwgaXMgaXQgcmVhbGx5IHByb2JsZW1hdGljIGZvciB0aGUgRERvUyBt aXRpZ2F0aW9uIHRoYXQgbGlzdCBpcyBsb3N0IGJ5IGEgc2VydmVyPyBJIGd1ZXNzLCB0aGUgYW5z d2VyIGlzIG5vIGlmIHdlIGFzc3VtZSB0aGUgbGlzdCBvZiBtaXRpZ2F0aW9ucyB0aGVtc2VsdmVz IGlzIG1haW50YWluZWQuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdC IiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+W0pvbl0gTXkgY29uY2VybiBpcyB0aGF0IHRoZSBET1RT IGNsaWVudHMgd291bGQgbm90IHNlZSB0aGUgY2hhbmdlIGluIG1pdGlnYXRpb24gc3RhdGUsIG9y IHdvdWxkIG5vdCBzZWUgdGhhdCB0aGVyZSBpcyBhIG5ldyBzaWduYWwgY2hhbm5lbCBjb25maWd1 cmF0aW9uIChpZiB0aGV5IHdlcmUgYmVpbmcgT2JzZXJ2ZWQpLiBUaGUgRE9UUyBjbGllbnQvc2Vy dmVyDQogd291bGQgYmUgb3V0IG9mIHN5bmMgd2l0aCB3aGF0IGlzIGhhcHBlbmluZyBhbmQgdGhl IERPVFMgY2xpZW50IHdvdWxkIG5vdCBuZWNlc3NhcmlseSBrbm93IHRoYXQgaXQgaGFzIHRvIHRh a2Ugc29tZSBhY3Rpb24gdG8gZ2V0IGJhY2sgdG8gdGhlIHN0YXRlIGJlZm9yZSB0aGUgRE9UUyBz ZXJ2ZXIgb3V0YWdlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9y OmJsYWNrIj5bTWVkXSBUaGUgZG90cyBjbGllbnQgaGFzIG90aGVyIG1lYW5zIHRvIGtub3cgdGhl IG1pdGlnYXRpb24gc3RhdGUuIFRoZSBET1RTIGNsaWVudCBjYW4gb2JzZXJ2ZSB0aGUgc3RhdHVz IGxvY2FsbHkgKGFuZCByZXBvcnQgaXQgdG8gdGhlIHNlcnZlcikgb3Igc2VuZCBhDQogcmVxdWVz dCB0byByZXRyaWV2ZSB0aGUgc3RhdHVzIGZyb20gdGhlIHNlcnZlci4gVGhlIG91dCBvZiBzeW5j aCBpbiBvYnNlcnZlIGlzIG5vdCB0aGF0IGNyaXRpY2FsIGZvciBtaXRpZ2F0aW5nIEREb1MgYXR0 YWNrcy4gJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+QXMg dGhlIERPVFMgc2VydmVyIHJlc3RhcnRlZCwgZXhpc3RpbmcgKEQpVExTIHNlc3Npb25zIHVzZWQg YnkgdGhlIERPVFMgY2xpZW50IHdpbGwgZmFpbC4mbmJzcDsgU28sIHRoZSBoZWFydGJlYXQgbWVj aGFuaXNtIHdpbGwgZXZlbnR1YWxseSB0aW1lIG91dCAmbmJzcDthbmQgSSBndWVzcyB0aGF0IHRo ZSBET1RTIGNsaWVudCBzaG91bGQgZGV0ZWN0IHRoaXMgYW5kIHJlLWRvIGFsbCBvZiB0aGUNCiBP YnNlcnZlIHJlcXVlc3RzIChhbG9uZyB3aXRoIG1ha2luZyBzdXJlIHRoYXQgYWxsIHRoZSBhY3Rp dmUgbWl0aWdhdGlvbnMgYXJlIGFzIGV4cGVjdGVkKS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gSW5jbHVkaW5nIGNsaWVudHMgaW4gbmV0 d29ya3MgdW5kZXIgYWN0aXZlIGF0dGFja3M/IElzbuKAmXQgdGhpcyBvdmVybG9hZGluZyB0aGUg c2VydmVyIHdoaWxlIGRlYWxpbmcgd2l0aCBvbmdvaW5nIGF0dGFja3M/ICZuYnNwOzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBz dHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5b Sm9uXSBZZXMsIGl0IHdvdWxkIOKAkyBoZW5jZSBJIGRpZCBub3QgcmVhbGx5IHdhbnQgdG8gaGF2 ZSB0byBkbyB0aGlzIHdoZW5ldmVyIGEgaGVhcnRiZWF0IGZhaWxlZCwgYnV0IG9ubHkgZG8gaXQg d2hlbiB0aGUgRE9UUyBjbGllbnQg4oCca25vd3PigJ0gdGhhdCB0aGUgc2VydmVyIGhhcyBoYWQg YW4gb3V0YWdlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkhvd2V2 ZXIgaW4gUGVhY2UgdGltZSBIZWFydGJlYXRzIG1heSBub3QgYmVpbmcgdXNlZC48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+SG93 ZXZlciBhdCBNaXRpZ2F0aW9uIHRpbWUgaGVhcnRiZWF0cyBtYXkgZmFpbC48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiPldvdWxkIGl0IG1ha2Ugc2Vuc2UgdG8gYWRkIHRvIHRoZSBzaWduYWwgY2hhbm5lbCBh biBleHRyYSBwYXJhbWV0ZXIgdGhhdCB0aGUgRE9UUyBzZXJ2ZXIgY2FuIHNlbmQgdG8gdGhlIGNs aWVudCBpbiBhbnkgcmVzcG9uc2UgaW4gdGhlIGZvcm0gb2YNCjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj7igJxsYXN0LXJlc3Rh cnRlZOKAnSA6IHNlY29uZHMtc2luY2UtZXBvY2g8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+V2hpY2ggdGhlIGNsaWVudCBjYW4g dXNlIHRvIGRldGVjdGVkIHRoZSByZXN0YXJ0LjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86 cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5b TWVkXSBXZSB1c2VkIHRvIGhhdmUgYW4gZXBvY2gtYmFzZWQgYXBwcm9hY2ggZm9yIGEgc3RhdGVm dWxsIHNlcnZpY2UgKHNlZQ0KPGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3Jm YzY4ODcjc2VjdGlvbi04LjUiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2ODg3I3Nl Y3Rpb24tOC41PC9hPikuIFRoZSBkZXRhaWxzIGFyZSBub3QgcmVzdHJpY3RlZCB0byBqdXN0IHNp Z25hbGxpbmcgdGhlIGVwb2NoIHZhbHVlIGJ1dCB0byB0aGUgbG9naWMgdG8gaGFuZGxlIGl0IGF0 IHRoZSBjbGllbnQgc2lkZS4gRnVydGhlciwgdGhlcmUgYXJlIHNvbWUgYXNwZWN0cw0KIHRvIGJl IHRha2VuIGludG8gYWNjb3VudCB3aGVuIGNvbmZpZ3VyaW5nIHJlZHVuZGFuY3kgc2VydmVycyB3 aGVuIGFuIGFueWNhc3QgYWRkcmVzcyBpcyB1c2VkLiBJZiB0aGUgc2FtZSBpbml0aWFsIGVwb2No IHZhbHVlIGlzIGNvbmZpZ3VyZWQsIHRoZSBjbGllbnQgbWF5IG5vdCBkZXRlY3QgYSBiYWNrdXAg c2VydmVyIGlzIHVzZWQgYW5kIGhlbmNlIG1heSBub3QgcmVpbnN0YWxsIHN0YXRlLi4uIEEgdHdl YWsgaXMgdG8gY29uZmlndXJlIGRpc3RpbmN0DQogZXBvY2ggdmFsdWVzIChlLmcuLCAmIzQzOy8t IDI0aCBkaWZmZXJlbmNlIGJldHdlZW4gYSBzZXJ2ZXIgcmVkdW5kYW5jeSBncm91cCkuIDxvOnA+ DQo8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t R0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlRoZSBlcG9j aCBpcyBqdXN0aWZpZWQgZm9yIDY4ODcgYmVjYXVzZSB3ZSB3YW50ZWQgdG8gcmVjb3ZlciBzdGF0 ZSBsb3NzLCB3aGlsZSBpbiB0aGUgRE9UUyBjYXNlIHdlIGRvbuKAmXQgaGF2ZSB0aGUgc2FtZSBt b2RlbCBnaXZlbiB0aGF0LCBhcyB5b3UgcmlnaHRmdWxseQ0KIHNhaWQgYWJvdmUsIHRoZSBjdXJy ZW50IGFjdGl2ZSBtaXRpZ2F0aW9ucyBjYW4gYmUgcmVidWlsdCBhdCB0aGUgc2VydmVyIHNpZGUg d2l0aG91dCBpbnZvbHZpbmcgY2xpZW50cy4gJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+W0pvbl0gU28gdGhpcyBtZXRob2Qg c2V0cyBlcG9jaCB0aW1lIGJhY2sgdG8gMCB3aGVuZXZlciB0aGVyZSBpcyBhIHJlc3RhcnQsDQo8 L3NwYW4+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOmJsYWNrIj5bTWVkXSBZZXMuIFRoZSBlcG9jaCBpcyByZXNldCBlYWNoIHRpbWUgdGhlIHN0 YXRlIGlzIGxvc3QgYXQgdGhlIHNlcnZlciBzaWRlLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPnJhdGhlciB0aGF0IHJlcG9ydCBvbiB0 aGUgbnVtYmVyIG9mIHNlY29uZHMgc2luY2UgSmFuIDEgMTk3MC4gJm5ic3A7Jm5ic3A7VGhhdCBJ IGNhbiBoYW5kbGUuJm5ic3A7IEhvd2V2ZXIgYW55Y2FzdCAodGhvdWdoIHJlZHVuZGFudCBzZXJ2 ZXJzIGFyZSBjdXJyZW50bHkgb3V0IG9mIHNwZWMpIHdoZXJlIDIgb3IgbW9yZSBzZXJ2ZXJzIHJl c3RhcnQgYW5kIHVwZGF0ZQ0KIHRoZSBzdGFydCB0aW1lIGF0IGV4YWN0bHkgdGhlIHNhbWUgdGlt ZSBpcyBwb3NzaWJsZSwgYnV0IHVubGlrZWx5LiZuYnNwOyBUaGlzIGNvdWxkIGJlIGhhbmRsZWQg YnkgdGhlIGFueWNhc3Qgc2VydmVycyBjb21tdW5pY2F0aW5nIGFuZCBzZWVpbmcgdGhleSBib3Ro IGhhdmUgdGhlIHNhbWUgc3RhcnQgdGltZSBzbyBvbmUgYmFja3Mgb2ZmIChpbiB0aW1lIHRlcm1z KS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+W0pvbl0gSeKAmW0ganVzdCBpbnRlcmVzdGVkIGluIGhvdyB0byByZWNvdmVyIE9i c2VydmUgbG9zcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPltNZWRdIEnigJltIG5vdCBjb252aW5j ZWQgdGhpcyBpcyByZWFsbHkgbmVlZGVkIGdpdmVuIHRoYXQgYWN0aXZlIG1pdGlnYXRpb25zIGFy ZSBub3QgY29uY2VybmVkIHdpdGggdGhpcyBmYWlsdXJlIHNjZW5hcmlvLiAmbmJzcDs8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIg c3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj4mbmJzcDsgSSBhcHByZWNpYXRlIGlu IHBlYWNlIHRpbWUgdGhlcmUgbWF5IG5vdCBiZSBhbnkgRE9UUyBjbGllbnQgcmVxdWVzdHMgKG9y IGhlYXJ0YmVhdCkgZm9yIGEgbG9uZyB0aW1lLi4uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5J4oCZbSBv cGVuIHRvIHN1Z2dlc3Rpb25zLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+UmVnYXJkczxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiI+Sm9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0Ii PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_BN6PR16MB1425D185AC51D4CB5EB33E4FEA6E0BN6PR16MB1425namp_-- From nobody Sun May 27 23:03:22 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09D53124239 for ; Sun, 27 May 2018 23:03:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.311 X-Spam-Level: X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KiCvhFyN5oO4 for ; Sun, 27 May 2018 23:03:17 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B55FC12421A for ; Sun, 27 May 2018 23:03:17 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1527487397; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Office365-Filtering-Correlation-Id:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=3W5QMsVlNZBb9dOZ1y7YjuU8vzAXc/l2obFJIK V7geQ=; b=OIgVr+AWn2eI4E86WR6CdFrAH4dWWUaEE8wwz6Re Vvz+XW1v1CJwCjxfJtCxAyM1LCNU7TPItJQ0Vhr+eEqm0O+WIR miIFYDiTcmkSvDEly6jbsydzoMG3hr+SNzoYBKOOTPC4jneAQJ pZt12T/4GEDmUbcnpXV58FRKr7PulvY= Received: from DNVEXAPP1N05.corpzone.internalzone.com (unknown [10.44.48.89]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 0cbe_6b86_80fe391c_f70d_4ec1_91f6_f57927065612; Mon, 28 May 2018 01:03:16 -0500 Received: from DNVEXUSR1N12.corpzone.internalzone.com (10.44.48.85) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 28 May 2018 00:02:47 -0600 Received: from DNVEXUSR1N09.corpzone.internalzone.com (10.44.48.82) by DNVEXUSR1N12.corpzone.internalzone.com (10.44.48.85) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 28 May 2018 00:02:47 -0600 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXUSR1N09.corpzone.internalzone.com (10.44.48.82) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Mon, 28 May 2018 00:02:47 -0600 Received: from NAM03-CO1-obe.outbound.protection.outlook.com (10.44.176.241) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 28 May 2018 00:02:45 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB1540.namprd16.prod.outlook.com (10.172.208.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.797.11; Mon, 28 May 2018 06:02:43 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::601e:a909:b9fe:31bd]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::601e:a909:b9fe:31bd%8]) with mapi id 15.20.0797.017; Mon, 28 May 2018 06:02:43 +0000 From: "Konda, Tirumaleswar Reddy" To: Jon Shallow , 'Benjamin Kaduk' , "mohamed.boucadair@orange.com" , "dots@ietf.org" Thread-Topic: [Dots] TLS APLN extension Thread-Index: AdPw2PQOXpzyKiqHQ7+v5FEn8F2ThwAyFv1gACMjQgAAEIhhgAD2J+BA Date: Mon, 28 May 2018 06:02:43 +0000 Message-ID: References: <13d301d3f0d8$f66f7c60$e34e7520$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1E28F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <20180523003451.GG10597@kduck.kaduk.org> <15bc01d3f26f$fecf3380$fc6d9a80$@jpshallow.com> In-Reply-To: <15bc01d3f26f$fecf3380$fc6d9a80$@jpshallow.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB1540; 7:Bl/vN5OsCipZbZ8hmmOKVqndPKlJ7DNPBx5Kv4n8ylq1o99rgmh9xE8yQf6S2WmvAoN6ZZ4ZB7NZSeMRigm7dSh/AcJdo5zky6pxWd3V+kk8CMOgZUy6vH8tL+7P/6r5BRhFg4VhadXVKbh3v5p+I/7FdwMcY4lR51/Kh+Fku+1MY86fm0HYpWdUaNT4Y5kA0S6Z8hmJCi1fsqlo+s/93cF4EL2cHdOA047dN26FVEwLlpTpwsCM79if064ucNnl x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB1540; x-ms-traffictypediagnostic: BN6PR16MB1540: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(18271650672692)(240460790083961); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(3231254)(944501410)(52105095)(149027)(150027)(6041310)(20161123562045)(20161123560045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(6072148)(201708071742011)(7699016); SRVR:BN6PR16MB1540; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB1540; x-forefront-prvs: 06860EDC7B x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(376002)(39380400002)(39850400004)(346002)(396003)(32952001)(189003)(199004)(57704003)(13464003)(33656002)(7696005)(74316002)(316002)(2900100001)(66066001)(966005)(97736004)(6436002)(2501003)(80792005)(229853002)(5660300001)(305945005)(72206003)(478600001)(9686003)(105586002)(5250100002)(53936002)(99286004)(486006)(2201001)(7736002)(186003)(476003)(93886005)(26005)(86362001)(3846002)(6116002)(106356001)(68736007)(102836004)(8676002)(55016002)(110136005)(6306002)(3660700001)(8936002)(81166006)(76176011)(2906002)(53546011)(6246003)(25786009)(3280700002)(14454004)(2171002)(59450400001)(81156014)(11346002)(446003)(6506007)(217873001)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB1540; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 3OWqcMGWYxmZtmKy+Ab/2Tf5PumKN1GEuJNbqF8XXLHWnM8TqAaYL7uZ9VZh6cnXc9NB1RQzeexxu6rlS9CRteZK0ykb+MNrSmfrnBEGX5foRt1Kb0B2tZsRWPqN/W0DR8Ds21LcJG68UXMM3MfkF3a5DmalFAT9rDsUZPAe3G8k4Lkcw+qF2uH41Zb0EIMiWprFss0EWZ68SpLFLhfu2A== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: 189810dd-5913-4834-d6a8-08d5c460a096 X-MS-Exchange-CrossTenant-Network-Message-Id: 189810dd-5913-4834-d6a8-08d5c460a096 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 May 2018 06:02:43.1062 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB1540 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6294> : inlines <6661> : streams <1788017> : uri <2648445> Archived-At: Subject: Re: [Dots] TLS APLN extension X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 May 2018 06:03:20 -0000 QWx0aG91Z2ggY29hcHMrdGNwIFVSSSBzY2hlbWUgaXMgdXNlZCBieSBET1RTIHNpZ25hbCBjaGFu bmVsLCB3ZSBoYXZlIG5vdCB5ZXQgc2VlbiBhbnkgcmVxdWlyZW1lbnQgd2hlcmUgbXVsdGlwbGUg cHJvdG9jb2xzIHdpbGwgYmUgcnVuIG9uIHRoZSBET1RTIHNlcnZlciBwb3J0IG51bWJlciA0NjQ2 LiANCkkgZG9uJ3Qgc2VlIHRoZSBuZWVkIHRvIGRlZmluZSBhIG5ldyBBTFBOIGZvciBET1RTIHNp Z25hbCBjaGFubmVsLg0KDQpDaGVlcnMNCi1UaXJ1DQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdl LS0tLS0NCj4gRnJvbTogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVo YWxmIE9mIEpvbiBTaGFsbG93DQo+IFNlbnQ6IFdlZG5lc2RheSwgTWF5IDIzLCAyMDE4IDE6NTgg UE0NCj4gVG86ICdCZW5qYW1pbiBLYWR1aycgPGthZHVrQG1pdC5lZHU+OyBtb2hhbWVkLmJvdWNh ZGFpckBvcmFuZ2UuY29tOw0KPiBkb3RzQGlldGYub3JnDQo+IFN1YmplY3Q6IFJlOiBbRG90c10g VExTIEFQTE4gZXh0ZW5zaW9uDQo+IA0KPiANCj4gDQo+IEhpIEJlbiwNCj4gDQo+IFRoZSBET1RT IHNpZ25hbCBzcGVjIGNhbGxzIGZvciBDb0FQIHNlY3VyZWQgYnkgcnVubmluZyBvdmVyIChEKVRM UyAoZWl0aGVyDQo+IFVEUCBhbmQvb3IgVENQKSwgYW5kIENvQVAgb3ZlciBUTFMgaXMgY29hcHMr dGNwLiAgU28sIHllcywgYm90aCBjb2FwcyBhbmQNCj4gY29hcHMrdGNwIGhhdmUgdG8gYmUgc3Vw cG9ydGVkLg0KPiANCj4gRm9yIGV4YW1wbGUsIEkgY2FuIHVzZSB0aGUgZ2l0aHViIGxpYmNvYXAg Y29hcC1jbGllbnQgKFB1bGwgUmVxdWVzdCAjMTc2DQo+IGluc3RhbGxlZCkgYW5kIGRvICJjb2Fw LWNsaWVudCAtYyBjZXJ0LnBlbQ0KPiBjb2Fwcyt0Y3A6Ly8xMjcuMC4wLjE6NDY0Ni8ud2VsbC1r bm93bi9kb3RzL3YxL2NvbmZpZyIgYWdhaW5zdCBteSBET1RTDQo+IHNlcnZlciBhbmQgZ2V0IGJh Y2sgYmluYXJ5IGRhdGEgKGl0IGlzIENCT1IgZW5jb2RlZCkuDQo+IA0KPiBSZWdhcmRzDQo+IA0K PiBKb24NCj4gDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IERvdHMgW21h aWx0bzogZG90cy1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgQmVuamFtaW4gS2FkdWsN Cj4gU2VudDogMjMgTWF5IDIwMTggMDE6MzUNCj4gVG86IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5n ZS5jb20NCj4gQ2M6IEpvbiBTaGFsbG93OyBkb3RzQGlldGYub3JnDQo+IFN1YmplY3Q6IFJlOiBb RG90c10gVExTIEFQTE4gZXh0ZW5zaW9uDQo+IA0KPiBUaGUgZGVkaWNhdGVkIHBvcnQgbnVtYmVy IGlzIG9ubHkgc29tZXdoYXQgcmVsZXZhbnQsIEkgdGhpbmsgLS0gdGhlIG1haW4NCj4gcXVlc3Rp b24gaXMgd2hldGhlciB0aGUgY29hcHMrdGNwIFVSSSBzY2hlbWUgaXMgaW4gdXNlLiAgVGhlIFJG QyA4MzIzDQo+IHJlcXVpcmVtZW50cyBvbmx5IGNvbWUgaW50byBwbGF5IGZvciB0aGF0IFVSSSBz Y2hlbWUuDQo+IA0KPiAtQmVuDQo+IA0KPiBPbiBUdWUsIE1heSAyMiwgMjAxOCBhdCAwNzo1NDoz OUFNICswMDAwLA0KPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+IHdyb3RlOg0KPiA+ IFJlLSwNCj4gPg0KPiA+IERvIHdlIG5lZWQgdGhpcyBnaXZlbiB0aGF0IERPVFMgaXMgdXNpbmcg YSBkZWRpY2F0ZWQgcG9ydCBudW1iZXI/DQo+ID4NCj4gPiBDaGVlcnMsDQo+ID4gTWVkDQo+ID4N Cj4gPiBEZSA6IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIERlIGxhIHBhcnQg ZGUgSm9uIFNoYWxsb3cNCj4gPiBFbnZvecOpIDogbHVuZGkgMjEgbWFpIDIwMTggMDk6NTUgw4Ag OiBkb3RzQGlldGYub3JnIE9iamV0IDogW0RvdHNdIFRMUw0KPiA+IEFQTE4gZXh0ZW5zaW9uDQo+ ID4NCj4gPiBIaSB0aGVyZSwNCj4gPg0KPiA+IEFzIHBlciBSRkMgODMyMzogOC4yLiAgY29hcHMr dGNwIFVSSSBTY2hlbWUNCj4gPg0KPiA+IC4uLi4NCj4gPg0KPiA+ICAgIG8gIElmIGEgVExTIHNl cnZlciBkb2VzIG5vdCBzdXBwb3J0IHRoZSBBcHBsaWNhdGlvbi1MYXllciBQcm90b2NvbA0KPiA+ ICAgICAgIE5lZ290aWF0aW9uIChBTFBOKSBleHRlbnNpb24gW1JGQzczMDFdIG9yIHdpc2hlcyB0 byBhY2NvbW1vZGF0ZQ0KPiA+ICAgICAgIFRMUyBjbGllbnRzIHRoYXQgZG8gbm90IHN1cHBvcnQg QUxQTiwgaXQgTUFZIG9mZmVyIGEgY29hcHMrdGNwDQo+ID4gICAgICAgZW5kcG9pbnQgb24gVENQ IHBvcnQgNTY4NC4gIFRoaXMgZW5kcG9pbnQgTUFZIGFsc28gYmUgQUxQTg0KPiA+ICAgICAgIGVu YWJsZWQuICBBIFRMUyBzZXJ2ZXIgTUFZIG9mZmVyIGNvYXBzK3RjcCBlbmRwb2ludHMgb24gcG9y dHMNCj4gPiAgICAgICBvdGhlciB0aGFuIFRDUCBwb3J0IDU2ODQsIHdoaWNoIE1VU1QgYmUgQUxQ TiBlbmFibGVkLg0KPiA+DQo+ID4gICAgbyAgRm9yIFRDUCBwb3J0cyBvdGhlciB0aGFuIHBvcnQg NTY4NCwgdGhlIFRMUyBjbGllbnQgTVVTVCB1c2UgdGhlDQo+ID4gICAgICAgQUxQTiBleHRlbnNp b24gdG8gYWR2ZXJ0aXNlIHRoZSAiY29hcCIgcHJvdG9jb2wgaWRlbnRpZmllciAoc2VlDQo+ID4g ICAgICAgU2VjdGlvbiAxMS43KSBpbiB0aGUgbGlzdCBvZiBwcm90b2NvbHMgaW4gaXRzIENsaWVu dEhlbGxvLiAgSWYgdGhlDQo+ID4gICAgICAgVENQIHNlcnZlciBzZWxlY3RzIGFuZCByZXR1cm5z IHRoZSAiY29hcCIgcHJvdG9jb2wgaWRlbnRpZmllcg0KPiA+ICAgICAgIHVzaW5nIHRoZSBBTFBO IGV4dGVuc2lvbiBpbiBpdHMgU2VydmVySGVsbG8sIHRoZW4gdGhlIGNvbm5lY3Rpb24NCj4gPiAg ICAgICBzdWNjZWVkcy4gIElmIHRoZSBUTFMgc2VydmVyIGVpdGhlciBkb2VzIG5vdCBuZWdvdGlh dGUgdGhlIEFMUE4NCj4gPiAgICAgICBleHRlbnNpb24gb3IgcmV0dXJucyBhIG5vX2FwcGxpY2F0 aW9uX3Byb3RvY29sIGFsZXJ0LCB0aGUgVExTDQo+ID4gICAgICAgY2xpZW50IE1VU1QgY2xvc2Ug dGhlIGNvbm5lY3Rpb24uDQo+ID4NCj4gPiBEbyB3ZSBuZWVkIHRvIHJlZmVyIHRvIHRoZSByZXF1 aXJlbWVudCBmb3IgQUxQTiBhcyB3ZSBhcmUgbm90IGhvc3RpbmcNCj4gPiBvbg0KPiBwb3J0IDU2 ODQ/DQo+ID4NCj4gPiBSZWdhcmRzDQo+ID4NCj4gPiBKb24NCj4gDQo+ID4gX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiBEb3RzIG1haWxpbmcgbGlz dA0KPiA+IERvdHNAaWV0Zi5vcmcNCj4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL2RvdHMNCj4gDQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQo+IERvdHMgbWFpbGluZyBsaXN0DQo+IERvdHNAaWV0Zi5vcmcNCj4gaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+IA0KPiBfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBEb3RzIG1haWxpbmcgbGlzdA0K PiBEb3RzQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v ZG90cw0K From nobody Mon May 28 01:40:45 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7684812704A for ; Mon, 28 May 2018 01:40:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KCwnE5Qaa0-P for ; Mon, 28 May 2018 01:40:40 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 582A4127078 for ; Mon, 28 May 2018 01:40:40 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fNDhk-0000Gi-Sp; Mon, 28 May 2018 09:40:36 +0100 From: "Jon Shallow" To: "'Konda, Tirumaleswar Reddy'" , "Benjamin Kaduk" , , References: <13d301d3f0d8$f66f7c60$e34e7520$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1E28F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <20180523003451.GG10597@kduck.kaduk.org> <15bc01d3f26f$fecf3380$fc6d9a80$@jpshallow.com> In-Reply-To: Date: Mon, 28 May 2018 09:40:37 +0100 Message-ID: <18b001d3f65f$8d47df20$a7d79d60$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQF7fY0SEnbbzScVHebrKQTjRWAcaAIi09JrAU1FL/ABpTg7WwITkQo3pLx7bWA= Content-Language: en-gb Archived-At: Subject: Re: [Dots] TLS APLN extension X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 May 2018 08:40:43 -0000 Hi Tiru, I agree that it makes no sense to have our own APLN - "coap" is fine as = that is describing the next protocol layer up. However, I did raise the = question in case the DOTS Server needs to respond to a DOTS client that = is correctly following RFC 8323 and expecting to see back a ALPN = response. "If the TLS server either does not negotiate the ALPN extension or returns a no_application_protocol alert, the TLS client MUST close the connection." Regards Jon -----Original Message----- From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of = Konda, Tirumaleswar Reddy Sent: 28 May 2018 07:03 To: Jon Shallow; 'Benjamin Kaduk'; mohamed.boucadair@orange.com; = dots@ietf.org Subject: Re: [Dots] TLS APLN extension Although coaps+tcp URI scheme is used by DOTS signal channel, we have = not yet seen any requirement where multiple protocols will be run on the = DOTS server port number 4646.=20 I don't see the need to define a new ALPN for DOTS signal channel. Cheers -Tiru > -----Original Message----- > From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Jon Shallow > Sent: Wednesday, May 23, 2018 1:58 PM > To: 'Benjamin Kaduk' ; mohamed.boucadair@orange.com; > dots@ietf.org > Subject: Re: [Dots] TLS APLN extension >=20 >=20 >=20 > Hi Ben, >=20 > The DOTS signal spec calls for CoAP secured by running over (D)TLS = (either > UDP and/or TCP), and CoAP over TLS is coaps+tcp. So, yes, both coaps = and > coaps+tcp have to be supported. >=20 > For example, I can use the github libcoap coap-client (Pull Request = #176 > installed) and do "coap-client -c cert.pem > coaps+tcp://127.0.0.1:4646/.well-known/dots/v1/config" against my DOTS > server and get back binary data (it is CBOR encoded). >=20 > Regards >=20 > Jon >=20 > -----Original Message----- > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Benjamin Kaduk > Sent: 23 May 2018 01:35 > To: mohamed.boucadair@orange.com > Cc: Jon Shallow; dots@ietf.org > Subject: Re: [Dots] TLS APLN extension >=20 > The dedicated port number is only somewhat relevant, I think -- the = main > question is whether the coaps+tcp URI scheme is in use. The RFC 8323 > requirements only come into play for that URI scheme. >=20 > -Ben >=20 > On Tue, May 22, 2018 at 07:54:39AM +0000, > mohamed.boucadair@orange.com > wrote: > > Re-, > > > > Do we need this given that DOTS is using a dedicated port number? > > > > Cheers, > > Med > > > > De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow > > Envoy=C3=A9 : lundi 21 mai 2018 09:55 =C3=80 : dots@ietf.org Objet : = [Dots] TLS > > APLN extension > > > > Hi there, > > > > As per RFC 8323: 8.2. coaps+tcp URI Scheme > > > > .... > > > > o If a TLS server does not support the Application-Layer = Protocol > > Negotiation (ALPN) extension [RFC7301] or wishes to = accommodate > > TLS clients that do not support ALPN, it MAY offer a coaps+tcp > > endpoint on TCP port 5684. This endpoint MAY also be ALPN > > enabled. A TLS server MAY offer coaps+tcp endpoints on ports > > other than TCP port 5684, which MUST be ALPN enabled. > > > > o For TCP ports other than port 5684, the TLS client MUST use = the > > ALPN extension to advertise the "coap" protocol identifier = (see > > Section 11.7) in the list of protocols in its ClientHello. If = the > > TCP server selects and returns the "coap" protocol identifier > > using the ALPN extension in its ServerHello, then the = connection > > succeeds. If the TLS server either does not negotiate the = ALPN > > extension or returns a no_application_protocol alert, the TLS > > client MUST close the connection. > > > > Do we need to refer to the requirement for ALPN as we are not = hosting > > on > port 5684? > > > > Regards > > > > Jon >=20 > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots _______________________________________________ Dots mailing list Dots@ietf.org https://www.ietf.org/mailman/listinfo/dots From nobody Mon May 28 01:48:01 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E2926126C22 for ; Mon, 28 May 2018 01:47:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lmNbomdJDi19 for ; Mon, 28 May 2018 01:47:56 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9934212420B for ; Mon, 28 May 2018 01:47:55 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fNDon-0000Gy-Og; Mon, 28 May 2018 09:47:54 +0100 From: "Jon Shallow" To: "'Konda, Tirumaleswar Reddy'" , "Xialiang \(Frank\)" , , References: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <02ad01d3ed13$42a0c3b0$c7e24b10$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1C138@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <039101d3edb3$dd8de830$98a9b890$@jpshallow.com> <082d01d3edf3$1b1df3e0$5159dba0$@jpshallow.com> <0ad501d3ee84$ac1c83c0$04558b40$@jpshallow.com> In-Reply-To: Date: Mon, 28 May 2018 09:47:54 +0100 Message-ID: <18b501d3f660$91bd1e20$b5375a60$@jpshallow.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_18B6_01D3F668.F38ECC90" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIW1wbd0mEd6XcqqteS3FYBOJVHmAGS49n4AgAfEOkB80nXRAEjJJaOAglYmHgBM8wmLQKEPmRLAn0rT2YA/fk+VAFCRzVOAmnIRbkBiKMLF6MWO+2g Content-Language: en-gb Archived-At: Subject: Re: [Dots] =?utf-8?b?562U5aSNOiAgRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFy?= =?utf-8?q?t_with_Observed_mitigations/Configuration?= X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 May 2018 08:48:00 -0000 This is a multipart message in MIME format. ------=_NextPart_000_18B6_01D3F668.F38ECC90 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Tiru / Frank, =20 Agreed =E2=80=93 the DOTS server should maintain mitigation state over a = restart. =20 My plan to get around the loss of Observe is to have the client treat a = loss of connection and new connection established as if the client was = restarted and go through the process of checking what the server is = currently mitigating, update mitigations if appropriate and re-register = all of the Observe requirements by doing the appropriate GETs. =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar Reddy Sent: 28 May 2018 06:49 To: Xialiang (Frank, Network Integration Technology Research Dept); Jon = Shallow; mohamed.boucadair@orange.com Cc: dots@ietf.org Subject: Re: [Dots] =E7=AD=94=E5=A4=8D: DOTS server crash/restart with = Observed mitigations/Configuration =20 Hi Frank, =20 I don=E2=80=99t think Jon=E2=80=99s concern is losing the mitigation = request. The mitigation request should be stored in a persistent storage = and the DOTS server can=20 rebuild the active mitigation request list after restart.=20 =20 Cheers, -Tiru =20 From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Xialiang (Frank, = Network Integration Technology Research Dept) Sent: Monday, May 21, 2018 9:17 AM To: Konda, Tirumaleswar Reddy ; Jon = Shallow ; mohamed.boucadair@orange.com Cc: dots@ietf.org Subject: [Dots] =E7=AD=94=E5=A4=8D: DOTS server crash/restart with = Observed mitigations/Configuration =20 CAUTION: External email. Do not click links or open attachments unless = you recognize the sender and know the content is safe. _____ =20 Hi Tiru, I share the same concern with Jon as: =20 If dots sever restarts, and loses all the mitigation status, then dots = client should resend all the active mitigation status to it. There can = be two way for it: 1) Resend mitigation requests for all active mitigation; 2) Dots client sync all the active mitigation status with server. =20 It=E2=80=99s not only about the observe option. =20 Thanks! =20 B.R. Frank =E5=8F=91=E4=BB=B6=E4=BA=BA: Dots [mailto:dots-bounces@ietf.org] = =E4=BB=A3=E8=A1=A8 Konda, Tirumaleswar Reddy =E5=8F=91=E9=80=81=E6=97=B6=E9=97=B4: 2018=E5=B9=B45=E6=9C=8818=E6=97=A5 = 16:57 =E6=94=B6=E4=BB=B6=E4=BA=BA: Jon Shallow ; = mohamed.boucadair@orange.com; dots@ietf.org =E4=B8=BB=E9=A2=98: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi Jon, =20 Please see inline [TR] =20 From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Jon Shallow Sent: Friday, May 18, 2018 2:16 PM To: Konda, Tirumaleswar Reddy ; = mohamed.boucadair@orange.com; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 CAUTION: External email. Do not click links or open attachments unless = you recognize the sender and know the content is safe. _____ =20 Hi Tiru =20 See inline [Jon2] =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar Reddy Sent: 17 May 2018 17:05 To: Jon Shallow; mohamed.boucadair@orange.com; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 [Jon1] Agreed the DOTS server cannot sent anything that is unsolicited = due to loss of cryptographic state. However, if the DOTS server can = send back in a response to a client request something that states = =E2=80=9CI restarted recently @ such a time=E2=80=9D, the client will = know whether the missing heartbeats were down to just a flaky network, = or the missing heartbeats were due to a server restart, and so = re-subscribe needed for all the resources that the client wants to = monitor. I do not want the DOTS client to keep on doing re-subscribe = compounding the network flakiness when under attack. =20 [R] The first two sentences contradict each other. How can the server = send any data on the old session ?=20 [Jon2] I actually was thinking that the response was sent after the new = session was established. And I don=E2=80=99t understand the value of sending =E2=80=9CI restarted = recently @such a time=E2=80=9D in the new (D)TLS session., the client = anyways has to resend the list of active mitigations it wishes to = observe in the new session (irrespective of the reason the session is = disconnected). A session could be disconnected because of various other = reasons (e.g. NAT reload). [Jon2] OK, so whenever a new session is started for whatever reason, = there needs to be a resend of active mitigations. =20 =20 [TR] No, I meant The DOTS client in the new (D)TLS session has to send = GET request with Observe option to receive unsolicited notifications of = attack mitigation status of active mitigation requests from the DOTS = server.=20 =20 -Tiru =20 However, I have not found anywhere in the signal / requirements / = architecture where this is suggested (but may have searched on the wrong = keywords!) I think that this needs to be stated somewhere, even though = it is obvious if you think about it. ~Jon2 =20 =20 -Tiru =20 From: Jon Shallow [mailto:supjps-ietf@jpshallow.com]=20 Sent: Thursday, May 17, 2018 8:54 PM To: Konda, Tirumaleswar Reddy ; = mohamed.boucadair@orange.com; dots@ietf.org Subject: RE: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 CAUTION: External email. Do not click links or open attachments unless = you recognize the sender and know the content is safe. _____ =20 Hi Tiru, =20 See inline [Jon1] =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar Reddy Sent: 17 May 2018 16:03 To: Jon Shallow; mohamed.boucadair@orange.com; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi Jon, =20 This scenario is already discussed in Section 4.7. When the DDoS = mitigation is in progress and after the = =E2=80=98missing-hb-allowed=E2=80=99 threshold is reached, the DOTS = client will continue to use the existing (D)TLS session to send = heartbeat requests to the server and at the same time try to establish a = new (D)TLS session with DOTS server.=20 [Jon1] I fully understand that Further, if the server restarts, (D)TLS state is lost on the server and = the server does not have the cryptographic state to send = =E2=80=98re-subscribe=E2=80=99 on the old session.=20 [Jon1] Agreed the DOTS server cannot sent anything that is unsolicited = due to loss of cryptographic state. However, if the DOTS server can = send back in a response to a client request something that states = =E2=80=9CI restarted recently @ such a time=E2=80=9D, the client will = know whether the missing heartbeats were down to just a flaky network, = or the missing heartbeats were due to a server restart, and so = re-subscribe needed for all the resources that the client wants to = monitor. I do not want the DOTS client to keep on doing re-subscribe = compounding the network flakiness when under attack. ~Jon1 =20 -Tiru =20 From: Jon Shallow [mailto:supjps-ietf@jpshallow.com]=20 Sent: Thursday, May 17, 2018 1:21 PM To: Konda, Tirumaleswar Reddy ; = mohamed.boucadair@orange.com; dots@ietf.org Subject: RE: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 CAUTION: External email. Do not click links or open attachments unless = you recognize the sender and know the content is safe. _____ =20 Hi Tiru, =20 It is a corner recovery case. The DOTS client can detect that the DOTS = server has gone away (using heartbeats) and re-subscribe to all the = resources that the DOTS client wants to Observe on detection that the = DOTS server is back =20 However, when mitigating, there is a likelihood that heartbeats will = time out and I am not sure that it is wise to = =E2=80=9Cre-subscribe=E2=80=9D when the connections are re-established = as the network path may still be flaky and adding extra traffic may be = problematic. My suggestion of an epoch time being reported by the DOTS = server was a way of determining whether =E2=80=9Cre-subscribe=E2=80=9D = was required or not. =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar Reddy Sent: 16 May 2018 16:05 To: mohamed.boucadair@orange.com; Jon Shallow; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 I don=E2=80=99t get the problem. If the server restarts, (D)TLS state = will be lost and server will reject heartbeat requests from the client = (either silently or send a fatal alert to the client). DOTS client will = have to follow the steps in = https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19#section-4.7= to re-establish (D)TLS session with the DOTS server.=20 =20 -Tiru =20 From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of = mohamed.boucadair@orange.com Sent: Wednesday, May 16, 2018 7:15 PM To: Jon Shallow ; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 CAUTION: External email. Do not click links or open attachments unless = you recognize the sender and know the content is safe. _____ =20 Re-, =20 Please see inline.=20 =20 Cheers, Med =20 De : Jon Shallow [mailto:supjps-ietf@jpshallow.com]=20 Envoy=C3=A9 : mercredi 16 mai 2018 14:42 =C3=80 : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org Objet : RE: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi Med, =20 See inline. =20 Regards =20 Jon =20 From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of = mohamed.boucadair@orange.com Sent: 16 May 2018 12:55 To: Jon Shallow; dots@ietf.org Subject: Re: [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi Jon,=20 =20 Please see inline.=20 =20 Cheers, Med =20 De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow Envoy=C3=A9 : mercredi 16 mai 2018 12:24 =C3=80 : dots@ietf.org Objet : [Dots] DOTS server crash/restart with Observed = mitigations/Configuration =20 Hi there, =20 For the signal channel, it is easy to maintain a persistent list of = active mitigations. Should the DOTS server (unexpectedly) stop and = restart, then it is easy to rebuild the current active mitigations. =20 [Med] The list of active mitigations is the =E2=80=9Ccore=E2=80=9D state = data to be maintained by a server. If we assume that list can be = reliably rebuilt, then there is no extension needed to the signal = channel to handle this failure case. =20 [Jon] Agreed. This was just me building up the background to the = scenario. =20 However, to rebuild the list of active Observations of the current = mitigations / configuration changes is considerably more difficult as = the DOTS server would also need to maintain a list of client IPs/source = ports etc. along with Tokens and Queries and (D)TLS state so that = unsolicited Observe responses can continue to be sent back to the = clients. I don=E2=80=99t really think that this is a practical ask. =20 [Med] First, this can be considered as deployment-specific. As such in = some deployments, there is no need to support automatic means to detect = state loss at the server side. Second, is it really problematic for the = DDoS mitigation that list is lost by a server? I guess, the answer is no = if we assume the list of mitigations themselves is maintained.=20 =20 [Jon] My concern is that the DOTS clients would not see the change in = mitigation state, or would not see that there is a new signal channel = configuration (if they were being Observed). The DOTS client/server = would be out of sync with what is happening and the DOTS client would = not necessarily know that it has to take some action to get back to the = state before the DOTS server outage. =20 [Med] The dots client has other means to know the mitigation state. The = DOTS client can observe the status locally (and report it to the server) = or send a request to retrieve the status from the server. The out of = synch in observe is not that critical for mitigating DDoS attacks. =20 =20 As the DOTS server restarted, existing (D)TLS sessions used by the DOTS = client will fail. So, the heartbeat mechanism will eventually time out = and I guess that the DOTS client should detect this and re-do all of the = Observe requests (along with making sure that all the active mitigations = are as expected). =20 [Med] Including clients in networks under active attacks? Isn=E2=80=99t = this overloading the server while dealing with ongoing attacks? =20 =20 [Jon] Yes, it would =E2=80=93 hence I did not really want to have to do = this whenever a heartbeat failed, but only do it when the DOTS client = =E2=80=9Cknows=E2=80=9D that the server has had an outage. =20 However in Peace time Heartbeats may not being used. However at Mitigation time heartbeats may fail. =20 Would it make sense to add to the signal channel an extra parameter that = the DOTS server can send to the client in any response in the form of=20 =E2=80=9Clast-restarted=E2=80=9D : seconds-since-epoch Which the client can use to detected the restart. =20 [Med] We used to have an epoch-based approach for a statefull service = (see https://tools.ietf.org/html/rfc6887#section-8.5). The details are = not restricted to just signalling the epoch value but to the logic to = handle it at the client side. Further, there are some aspects to be = taken into account when configuring redundancy servers when an anycast = address is used. If the same initial epoch value is configured, the = client may not detect a backup server is used and hence may not = reinstall state... A tweak is to configure distinct epoch values (e.g., = +/- 24h difference between a server redundancy group).=20 =20 The epoch is justified for 6887 because we wanted to recover state loss, = while in the DOTS case we don=E2=80=99t have the same model given that, = as you rightfully said above, the current active mitigations can be = rebuilt at the server side without involving clients. =20 =20 [Jon] So this method sets epoch time back to 0 whenever there is a = restart,=20 [Med] Yes. The epoch is reset each time the state is lost at the server = side.=20 =20 rather that report on the number of seconds since Jan 1 1970. That I = can handle. However anycast (though redundant servers are currently out = of spec) where 2 or more servers restart and update the start time at = exactly the same time is possible, but unlikely. This could be handled = by the anycast servers communicating and seeing they both have the same = start time so one backs off (in time terms). =20 [Jon] I=E2=80=99m just interested in how to recover Observe loss. [Med] I=E2=80=99m not convinced this is really needed given that active = mitigations are not concerned with this failure scenario. =20 =20 I appreciate in peace time there may not be any DOTS client requests = (or heartbeat) for a long time... =20 I=E2=80=99m open to suggestions. =20 Regards =20 Jon =20 =20 =20 =20 ------=_NextPart_000_18B6_01D3F668.F38ECC90 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Hi Tiru / Frank,

 

Agreed =E2=80=93 the = DOTS server should maintain mitigation state over a = restart.

 

My plan to get around = the loss of Observe is to have the client treat a loss of connection and = new connection established as if the client was restarted and go through = the process of checking what the server is currently mitigating, update = mitigations if appropriate and re-register all of the Observe = requirements by doing the appropriate GETs.

 

Regards

 

Jon

 

From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of = Konda, Tirumaleswar Reddy
Sent: 28 May 2018 = 06:49
To: Xialiang (Frank, Network Integration Technology = Research Dept); Jon Shallow; mohamed.boucadair@orange.com
Cc: = dots@ietf.org
Subject: Re: [Dots] =E7=AD=94=E5=A4=8D: DOTS server crash/restart with Observed = mitigations/Configuration

 

Hi = Frank,

 

I don=E2=80=99t =
think Jon=E2=80=99s concern is losing the mitigation request. The =
mitigation request should be stored in a persistent storage and the DOTS =
server can 
rebuild the active mitigation =
request list after restart. <=
/pre>
 
Cheers,
-Tiru
 
From: Dots =
[mailto:dots-bounces@ietf.org] On Behalf Of Xialiang (Frank, =
Network Integration Technology Research Dept)
Sent: Monday, =
May 21, 2018 9:17 AM
To: Konda, Tirumaleswar Reddy =
<TirumaleswarReddy_Konda@McAfee.com>; Jon Shallow =
<supjps-ietf@jpshallow.com>; =
mohamed.boucadair@orange.com
Cc: =
dots@ietf.org
Subject: [Dots] =E7=AD=94=E5=A4=8D: DOTS server =
crash/restart with Observed =
mitigations/Configuration
 
CAUTION: External email. =
Do not click links or open attachments unless you recognize the sender =
and know the content is safe.
Hi =
Tiru,
I =
share the same concern with Jon as:
=
 
If =
dots sever restarts, and loses all the mitigation status, then dots =
client should resend all the active mitigation status to it. There can =
be two way for it:
1)  &nbs=
p;    Resen=
d mitigation requests for all active mitigation;
2)  &nbs=
p;    Dots =
client sync all the active mitigation status with =
server.
=
 
It=E2=
=80=99s not only about the observe option.
=
 
Thank=
s!
=
 
B.R.<=
o:p>
Frank=

=E5=8F=91=E4=BB=B6=E4=BA=BA=
: Dots =
[mailto:dots-bounces@ietf.org] =E4=BB=A3=E8=A1=A8 =
Konda, Tirumaleswar =
Reddy
=E5=8F=91=E9=80=81=E6=97=B6=
=E9=97=B4: 2018=E5=B9=B45=E6=9C=8818=E6=97=A5 =
16:57
=E6=94=B6=E4=BB=B6=E4=BA=BA=
: Jon Shallow =
<supjps-ietf@jpshallow.com>; mohamed.boucadair@orange.com; =
dots@ietf.org
=E4=B8=BB=E9=A2=98=
: Re: [Dots] DOTS server =
crash/restart with Observed =
mitigations/Configuration
 
Hi Jon,
 
Please see inline =
[TR]
 
From: Dots [mailto:dots-bounces@ietf.org] =
On Behalf Of Jon Shallow
Sent: Friday, May 18, 2018 =
2:16 PM
To: Konda, Tirumaleswar Reddy <TirumaleswarReddy_Kond=
a@McAfee.com>; mohamed.boucadair@orange.com=
; dots@ietf.org
Subject: Re: =
[Dots] DOTS server crash/restart with Observed =
mitigations/Configuration
 
CAUTION: External email. =
Do not click links or open attachments unless you recognize the sender =
and know the content is safe.
Hi Tiru
 
See inline =
[Jon2]
 
Regards
 
Jon
 
From: Dots [mailto: dots-bounces@ietf.org] On =
Behalf Of Konda, Tirumaleswar Reddy
Sent: 17 May 2018 =
17:05
To: Jon Shallow; mohamed.boucadair@orange.com=
; dots@ietf.org
Subject: Re: =
[Dots] DOTS server crash/restart with Observed =
mitigations/Configuration
 
[Jon1] =
Agreed the DOTS server cannot sent anything that is unsolicited due to =
loss of cryptographic state.  However, if the DOTS server can send =
back in a response to a client request something that states =E2=80=9CI =
restarted recently @ such a time=E2=80=9D, the client will know whether =
the missing heartbeats were down to just a flaky network, or the missing =
heartbeats were due to a server restart, and so re-subscribe needed for =
all the resources that the client wants to monitor.  I do not want =
the DOTS client to keep on doing re-subscribe compounding the network =
flakiness when under attack.
 
[R] The first two sentences =
contradict each other. How can the server send any data on the old =
session ? 
[Jon2] I actually was =
thinking that the response was sent after the new session was =
established.
And I don=E2=80=99t =
understand the value of sending =E2=80=9CI restarted recently @such a =
time=E2=80=9D in the new (D)TLS session., the client anyways has to =
resend the list of active mitigations it wishes to observe in the new =
session (irrespective of the reason the session is disconnected). A =
session could be disconnected because of various other reasons (e.g. NAT =
reload).
[Jon2]  OK, so =
whenever a new session is started for whatever reason, there needs to be =
a resend of active mitigations.  
 
[TR] No, I meant =
The DOTS client in the new (D)TLS session has to send GET request with =
Observe option to receive unsolicited notifications of attack mitigation =
status of active mitigation requests from the DOTS server. =

 
-Tiru
 
However, I have not =
found anywhere in the signal / requirements / architecture where this is =
suggested (but may have searched on the wrong keywords!) I think that =
this needs to be stated somewhere, even though it is obvious if you =
think about it.
~Jon2
 
 
-Tiru
 
From: Jon Shallow [mailto:supjps-ietf@jpshallow.co=
m] 
Sent: Thursday, May 17, 2018 8:54 PM
To: =
Konda, Tirumaleswar Reddy <TirumaleswarReddy_Kond=
a@McAfee.com>; mohamed.boucadair@orange.com=
; dots@ietf.org
Subject: RE: =
[Dots] DOTS server crash/restart with Observed =
mitigations/Configuration
 
CAUTION: External email. =
Do not click links or open attachments unless you recognize the sender =
and know the content is safe.
Hi Tiru,
 
See inline =
[Jon1]
 
Regards
 
Jon
 
From: Dots [mailto: dots-bounces@ietf.org] On =
Behalf Of Konda, Tirumaleswar Reddy
Sent: 17 May 2018 =
16:03
To: Jon Shallow; mohamed.boucadair@orange.com=
; dots@ietf.org
Subject: Re: =
[Dots] DOTS server crash/restart with Observed =
mitigations/Configuration
 
Hi =
Jon,
 
This scenario is already discussed =
in Section 4.7. When the DDoS mitigation is in progress and after the =
=E2=80=98missing-hb-allowed=E2=80=99 threshold is reached, the DOTS =
client will continue to use the existing (D)TLS session to send =
heartbeat requests to the server and at the same time try to establish a =
new (D)TLS session with DOTS server. 
[Jon1] I fully =
understand that
Further, if the server =
restarts, (D)TLS state is lost on the server and the server does not =
have the cryptographic state to send =E2=80=98re-subscribe=E2=80=99 on =
the old session. 
[Jon1] =
Agreed the DOTS server cannot sent anything that is unsolicited due to =
loss of cryptographic state.  However, if the DOTS server can send =
back in a response to a client request something that states =E2=80=9CI =
restarted recently @ such a time=E2=80=9D, the client will know whether =
the missing heartbeats were down to just a flaky network, or the missing =
heartbeats were due to a server restart, and so re-subscribe needed for =
all the resources that the client wants to monitor.  I do not want =
the DOTS client to keep on doing re-subscribe compounding the network =
flakiness when under attack.
~Jon1
 
-Tiru
 
From: Jon Shallow [mailto:supjps-ietf@jpshallow.co=
m] 
Sent: Thursday, May 17, 2018 1:21 PM
To: =
Konda, Tirumaleswar Reddy <TirumaleswarReddy_Kond=
a@McAfee.com>; mohamed.boucadair@orange.com=
; dots@ietf.org
Subject: RE: =
[Dots] DOTS server crash/restart with Observed =
mitigations/Configuration
 
CAUTION: External email. =
Do not click links or open attachments unless you recognize the sender =
and know the content is safe.
Hi Tiru,
 
It is a corner recovery =
case.  The DOTS client can detect that the DOTS server has gone =
away (using heartbeats) and re-subscribe to all the resources that the =
DOTS client wants to Observe on detection that the DOTS server is =
back
 
However, when =
mitigating, there is a likelihood that heartbeats will time out and I am =
not sure that it is wise to =E2=80=9Cre-subscribe=E2=80=9D when the =
connections are re-established as the network path may still be flaky =
and adding extra traffic may be problematic.  My suggestion of an =
epoch time being reported by the DOTS server was a way of determining =
whether =E2=80=9Cre-subscribe=E2=80=9D was required or =
not.
 
Regards
 
Jon
 
From: Dots [mailto: dots-bounces@ietf.org] On =
Behalf Of Konda, Tirumaleswar Reddy
Sent: 16 May 2018 =
16:05
To: mohamed.boucadair@orange.com=
; Jon Shallow; dots@ietf.org
Subject: Re: =
[Dots] DOTS server crash/restart with Observed =
mitigations/Configuration
 
I don=E2=80=99t get =
the problem. If the server restarts, (D)TLS state will be lost and =
server will reject heartbeat requests from the client (either silently =
or send a fatal alert to the client). DOTS client will have to follow =
the steps in https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19#s=
ection-4.7 to re-establish (D)TLS session with the DOTS server. =

 
-Tiru
 
From: Dots [mailto:dots-bounces@ietf.org] =
On Behalf Of mohamed.boucadair@orange.com=

Sent: Wednesday, May 16, 2018 7:15 PM
To: Jon =
Shallow <supjps-ietf@jpshallow.com&g=
t;; dots@ietf.org
Subject: Re: =
[Dots] DOTS server crash/restart with Observed =
mitigations/Configuration
 
CAUTION: External email. =
Do not click links or open attachments unless you recognize the sender =
and know the content is safe.
Re-,
 
Please see inline. 
 
Cheers,
Med
 
De : Jon Shallow [mailto:supjps-ietf@jpshallow.co=
m] 
Envoy=C3=A9 : mercredi 16 mai 2018 =
14:42
=C3=80 : BOUCADAIR Mohamed IMT/OLN; dots@ietf.org
Objet : =
RE: [Dots] DOTS server crash/restart with Observed =
mitigations/Configuration
 
Hi =
Med,
 
See =
inline.
 
Regards
 
Jon
 
From: Dots [mailto: dots-bounces@ietf.org] On =
Behalf Of mohamed.boucadair@orange.com=

Sent: 16 May 2018 12:55
To: Jon Shallow; dots@ietf.org
Subject: Re: =
[Dots] DOTS server crash/restart with Observed =
mitigations/Configuration
 
Hi Jon, 
 
Please see inline. 
 
Cheers,
Med
 
De : Dots [mailto:dots-bounces@ietf.org] =
De la part de Jon Shallow
Envoy=C3=A9 : mercredi =
16 mai 2018 12:24
=C3=80 : dots@ietf.org
Objet : =
[Dots] DOTS server crash/restart with Observed =
mitigations/Configuration
 
Hi there,
 
For the =
signal channel, it is easy to maintain a persistent list of active =
mitigations.  Should the DOTS server (unexpectedly) stop and =
restart, then it is easy to rebuild the current active =
mitigations.
 
[Med] =
The list of active mitigations is the =E2=80=9Ccore=E2=80=9D state data =
to be maintained by a server. If we assume that list can be reliably =
rebuilt, then there is no extension needed to the signal channel to =
handle this failure case.
 
[Jon] Agreed.  This =
was just me building up the background to the =
scenario.
 
However, to rebuild the list of active Observations of =
the current mitigations / configuration changes is considerably more =
difficult as the DOTS server would also need to maintain a list of =
client IPs/source ports etc. along with Tokens and Queries and (D)TLS =
state so that unsolicited Observe responses can continue to be sent back =
to the clients.  I don=E2=80=99t really think that this is a =
practical ask.
 
[Med] =
First, this can be considered as deployment-specific. As such in some =
deployments, there is no need to support automatic means to detect state =
loss at the server side. Second, is it really problematic for the DDoS =
mitigation that list is lost by a server? I guess, the answer is no if =
we assume the list of mitigations themselves is maintained. =

 
[Jon] My concern is that =
the DOTS clients would not see the change in mitigation state, or would =
not see that there is a new signal channel configuration (if they were =
being Observed). The DOTS client/server would be out of sync with what =
is happening and the DOTS client would not necessarily know that it has =
to take some action to get back to the state before the DOTS server =
outage.
 
[Med] =
The dots client has other means to know the mitigation state. The DOTS =
client can observe the status locally (and report it to the server) or =
send a request to retrieve the status from the server. The out of synch =
in observe is not that critical for mitigating DDoS attacks. =
 
 
As the DOTS server restarted, existing (D)TLS sessions =
used by the DOTS client will fail.  So, the heartbeat mechanism =
will eventually time out  and I guess that the DOTS client should =
detect this and re-do all of the Observe requests (along with making =
sure that all the active mitigations are as expected).
 
[Med] =
Including clients in networks under active attacks? Isn=E2=80=99t this =
overloading the server while dealing with ongoing attacks? =
 
 
[Jon] Yes, it would =
=E2=80=93 hence I did not really want to have to do this whenever a =
heartbeat failed, but only do it when the DOTS client =
=E2=80=9Cknows=E2=80=9D that the server has had an =
outage.
 
However in Peace time Heartbeats may not being =
used.
However at Mitigation time =
heartbeats may fail.
 
Would it =
make sense to add to the signal channel an extra parameter that the DOTS =
server can send to the client in any response in the form of =

=E2=80=9Clast-restarted=E2=80=9D : =
seconds-since-epoch
Which the client =
can use to detected the restart.
 
[Med] =
We used to have an epoch-based approach for a statefull service (see https://tools.ie=
tf.org/html/rfc6887#section-8.5). The details are not restricted to =
just signalling the epoch value but to the logic to handle it at the =
client side. Further, there are some aspects to be taken into account =
when configuring redundancy servers when an anycast address is used. If =
the same initial epoch value is configured, the client may not detect a =
backup server is used and hence may not reinstall state... A tweak is to =
configure distinct epoch values (e.g., +/- 24h difference between a =
server redundancy group). 
 
The =
epoch is justified for 6887 because we wanted to recover state loss, =
while in the DOTS case we don=E2=80=99t have the same model given that, =
as you rightfully said above, the current active mitigations can be =
rebuilt at the server side without involving clients. =
 
 
[Jon] So this method =
sets epoch time back to 0 whenever there is a restart, 
[Med] =
Yes. The epoch is reset each time the state is lost at the server side. =

 
rather that report on the number of seconds =
since Jan 1 1970.   That I can handle.  However anycast =
(though redundant servers are currently out of spec) where 2 or more =
servers restart and update the start time at exactly the same time is =
possible, but unlikely.  This could be handled by the anycast =
servers communicating and seeing they both have the same start time so =
one backs off (in time terms).
 
[Jon] I=E2=80=99m just =
interested in how to recover Observe loss.
[Med] I=E2=80=99m not convinced this is really needed =
given that active mitigations are not concerned with this failure =
scenario.  
 
  I appreciate in peace time there may not be any =
DOTS client requests (or heartbeat) for a long time...
 
I=E2=80=99m =
open to suggestions.
 
Regards
 
Jon
 
 
 
 
------=_NextPart_000_18B6_01D3F668.F38ECC90-- From nobody Mon May 28 02:13:55 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27C89126E01 for ; Mon, 28 May 2018 02:13:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.31 X-Spam-Level: X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tVYROOGCLAmC for ; Mon, 28 May 2018 02:13:47 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 678C0126CD8 for ; Mon, 28 May 2018 02:13:47 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1527498820; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:MIME-Version:X-MS-Office365-Filtering-Correlation-Id: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=nK8AgoD0X39P6xiUAVSZQ0nQ+86sMTuU0xy1iR DnJnA=; b=m0T4Ojj1faA3cntpJQuGdOul63GZLJPtPu7bBSxP XAOHai/c7GWFPm2jmnhfzSQv+uns1kNBU83SrZtFvE6OU8idlA FEaVrBHSk5ZBMfLjzTVIPBIlqrZ64Jg2ielZ9S+3vzQLj1MhId RmVGpLKS54KM7COqzuq76aK9a5IpM6Q= Received: from DNVEXAPP1N05.corpzone.internalzone.com (unknown [10.44.48.89]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 0cc3_7d14_359a8e02_a104_4af0_a37e_1c4ad8eabf94; Mon, 28 May 2018 04:13:39 -0500 Received: from DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 28 May 2018 03:12:56 -0600 Received: from DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) by DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 28 May 2018 03:12:55 -0600 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Mon, 28 May 2018 03:12:55 -0600 Received: from NAM02-CY1-obe.outbound.protection.outlook.com (10.44.176.241) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 28 May 2018 03:12:54 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB0084.namprd16.prod.outlook.com (10.172.111.151) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.797.11; Mon, 28 May 2018 09:12:53 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::601e:a909:b9fe:31bd]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::601e:a909:b9fe:31bd%8]) with mapi id 15.20.0797.017; Mon, 28 May 2018 09:12:53 +0000 From: "Konda, Tirumaleswar Reddy" To: Jon Shallow , "Xialiang (Frank)" , "mohamed.boucadair@orange.com" , "dots@ietf.org" Thread-Topic: =?utf-8?B?W0RvdHNdIOetlOWkjTogIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0?= =?utf-8?Q?h_Observed_mitigations/Configuration?= Thread-Index: AQHT8LZ68mZ6kXxXeUypn7PyNr1x4qREqXeAgAA2PgCAAAU20A== Date: Mon, 28 May 2018 09:12:53 +0000 Message-ID: References: <025d01d3ecff$ef69f2b0$ce3dd810$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1BF79@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <02ad01d3ed13$42a0c3b0$c7e24b10$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1C138@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <039101d3edb3$dd8de830$98a9b890$@jpshallow.com> <082d01d3edf3$1b1df3e0$5159dba0$@jpshallow.com> <0ad501d3ee84$ac1c83c0$04558b40$@jpshallow.com> <18b501d3f660$91bd1e20$b5375a60$@jpshallow.com> In-Reply-To: <18b501d3f660$91bd1e20$b5375a60$@jpshallow.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB0084; 7:THaQfGEyGXn8nIDALI1XhAr0xEseNVtl3nWU9rnRFRHg+M6qxiHph/+zdxCc1x00UOMZf7KS6OM9R5zZVYwVJRa2XJ5E+5F079NNonlFcAgIb+eHrM3lcJj8ewVhlJqsBoxBQ+98mu0qy3yGyRvYnwrNilCWn2QtRoorJ7z3POpfN+DoJIUN6nuRBmydTSTQHw0yiNqseHXSWqjPmgGq8AwtyK9Hw/tbaMCw5JYr+vrpFq3/6oSA2GL4GBIeuYLr x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB0084; x-ms-traffictypediagnostic: BN6PR16MB0084: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(190756311086443)(158342451672863)(50582790962513)(18271650672692)(21748063052155)(123452027830198); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(3231254)(944501410)(52105095)(10201501046)(149027)(150027)(6041310)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123558120)(20161123564045)(6072148)(201708071742011)(7699016); SRVR:BN6PR16MB0084; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB0084; x-forefront-prvs: 06860EDC7B x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(39380400002)(366004)(346002)(376002)(396003)(51444003)(189003)(32952001)(199004)(486006)(2201001)(478600001)(66066001)(72206003)(59450400001)(6506007)(53546011)(110136005)(53946003)(55016002)(102836004)(9686003)(6306002)(54896002)(97736004)(2900100001)(6436002)(236005)(446003)(80792005)(11346002)(74316002)(68736007)(476003)(33656002)(5660300001)(25786009)(53936002)(2906002)(3280700002)(105586002)(106356001)(224303003)(3660700001)(6246003)(8936002)(81156014)(81166006)(7696005)(606006)(93886005)(790700001)(6116002)(99286004)(3846002)(7736002)(19609705001)(86362001)(229853002)(966005)(316002)(14454004)(186003)(5250100002)(26005)(2501003)(5890100001)(76176011)(85282002)(579004); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB0084; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: ul9PccJB77/KHw9HHe8gqYHQ0HLhYNIJNnipAsK7X1ZTiO3Am3BtO1Z9sfDY0Qm7ibtip1QrsSQclISewSkKs8YKjauQjDKZWpvUO6wJJkieztG5o0/oUG+5HLmjrwsjeDbIszlRhKWxrsA84TGvmRyIhhUt05AjIsQ1rnmUqnZprGXGUaPuW7bf28XNSRsYqUNhL8RebgN7s8rGGx3phA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BN6PR16MB14257DA03660C3F5697BFFDBEA6E0BN6PR16MB1425namp_" MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: 6fb6576f-c896-470e-1d79-08d5c47b318b X-MS-Exchange-CrossTenant-Network-Message-Id: 6fb6576f-c896-470e-1d79-08d5c47b318b X-MS-Exchange-CrossTenant-originalarrivaltime: 28 May 2018 09:12:53.1827 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB0084 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.3 X-NAI-Spam-Version: 2.3.0.9418 : core <6294> : inlines <6661> : streams <1788030> : uri <2648523> Archived-At: Subject: Re: [Dots] =?utf-8?b?562U5aSNOiAgRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFy?= =?utf-8?q?t_with_Observed_mitigations/Configuration?= X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 May 2018 09:13:53 -0000 --_000_BN6PR16MB14257DA03660C3F5697BFFDBEA6E0BN6PR16MB1425namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RnJvbTogSm9uIFNoYWxsb3cgW21haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tXQ0KU2Vu dDogTW9uZGF5LCBNYXkgMjgsIDIwMTggMjoxOCBQTQ0KVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIg UmVkZHkgPFRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20+OyBYaWFsaWFuZyAoRnJh bmspIDxmcmFuay54aWFsaWFuZ0BodWF3ZWkuY29tPjsgbW9oYW1lZC5ib3VjYWRhaXJAb3Jhbmdl LmNvbTsgZG90c0BpZXRmLm9yZw0KU3ViamVjdDogUkU6IFtEb3RzXSDnrZTlpI06IERPVFMgc2Vy dmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9u DQoNCg0KQ0FVVElPTjogRXh0ZXJuYWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVu IGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhl IGNvbnRlbnQgaXMgc2FmZS4NCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K SGkgVGlydSAvIEZyYW5rLA0KDQpBZ3JlZWQg4oCTIHRoZSBET1RTIHNlcnZlciBzaG91bGQgbWFp bnRhaW4gbWl0aWdhdGlvbiBzdGF0ZSBvdmVyIGEgcmVzdGFydC4NCg0KTXkgcGxhbiB0byBnZXQg YXJvdW5kIHRoZSBsb3NzIG9mIE9ic2VydmUgaXMgdG8gaGF2ZSB0aGUgY2xpZW50IHRyZWF0IGEg bG9zcyBvZiBjb25uZWN0aW9uIGFuZCBuZXcgY29ubmVjdGlvbiBlc3RhYmxpc2hlZCBhcyBpZiB0 aGUgY2xpZW50IHdhcyByZXN0YXJ0ZWQgYW5kIGdvIHRocm91Z2ggdGhlIHByb2Nlc3Mgb2YgY2hl Y2tpbmcgd2hhdCB0aGUgc2VydmVyIGlzIGN1cnJlbnRseSBtaXRpZ2F0aW5nLCB1cGRhdGUgbWl0 aWdhdGlvbnMgaWYgYXBwcm9wcmlhdGUgYW5kIHJlLXJlZ2lzdGVyIGFsbCBvZiB0aGUgT2JzZXJ2 ZSByZXF1aXJlbWVudHMgYnkgZG9pbmcgdGhlIGFwcHJvcHJpYXRlIEdFVHMuDQoNCltUUl0gU291 bmRzIGxpa2UgdGhlIHJpZ2h0IHBsYW4gdG8gbWUuDQoNCi1UaXJ1DQoNClJlZ2FyZHMNCg0KSm9u DQoNCkZyb206IERvdHMgW21haWx0bzogZG90cy1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpkb3Rz LWJvdW5jZXNAaWV0Zi5vcmc+XSBPbiBCZWhhbGYgT2YgS29uZGEsIFRpcnVtYWxlc3dhciBSZWRk eQ0KU2VudDogMjggTWF5IDIwMTggMDY6NDkNClRvOiBYaWFsaWFuZyAoRnJhbmssIE5ldHdvcmsg SW50ZWdyYXRpb24gVGVjaG5vbG9neSBSZXNlYXJjaCBEZXB0KTsgSm9uIFNoYWxsb3c7IG1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208bWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5j b20+DQpDYzogZG90c0BpZXRmLm9yZzxtYWlsdG86ZG90c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJl OiBbRG90c10g562U5aSNOiBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQg bWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0KDQpIaSBGcmFuaywNCg0KDQpJIGRvbuKAmXQgdGhp bmsgSm9u4oCZcyBjb25jZXJuIGlzIGxvc2luZyB0aGUgbWl0aWdhdGlvbiByZXF1ZXN0LiBUaGUg bWl0aWdhdGlvbiByZXF1ZXN0IHNob3VsZCBiZSBzdG9yZWQgaW4gYSBwZXJzaXN0ZW50IHN0b3Jh Z2UgYW5kIHRoZSBET1RTIHNlcnZlciBjYW4NCg0KcmVidWlsZCB0aGUgYWN0aXZlIG1pdGlnYXRp b24gcmVxdWVzdCBsaXN0IGFmdGVyIHJlc3RhcnQuDQoNCkNoZWVycywNCi1UaXJ1DQoNCkZyb206 IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBYaWFsaWFu ZyAoRnJhbmssIE5ldHdvcmsgSW50ZWdyYXRpb24gVGVjaG5vbG9neSBSZXNlYXJjaCBEZXB0KQ0K U2VudDogTW9uZGF5LCBNYXkgMjEsIDIwMTggOToxNyBBTQ0KVG86IEtvbmRhLCBUaXJ1bWFsZXN3 YXIgUmVkZHkgPFRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb208bWFpbHRvOlRpcnVt YWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20+PjsgSm9uIFNoYWxsb3cgPHN1cGpwcy1pZXRm QGpwc2hhbGxvdy5jb208bWFpbHRvOnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb20+PjsgbW9oYW1l ZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNv bT4NCkNjOiBkb3RzQGlldGYub3JnPG1haWx0bzpkb3RzQGlldGYub3JnPg0KU3ViamVjdDogW0Rv dHNdIOetlOWkjTogRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGln YXRpb25zL0NvbmZpZ3VyYXRpb24NCg0KDQpDQVVUSU9OOiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90 IGNsaWNrIGxpbmtzIG9yIG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhl IHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLg0KDQoNCl9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQpIaSBUaXJ1LA0KSSBzaGFyZSB0aGUgc2FtZSBjb25jZXJuIHdp dGggSm9uIGFzOg0KDQpJZiBkb3RzIHNldmVyIHJlc3RhcnRzLCBhbmQgbG9zZXMgYWxsIHRoZSBt aXRpZ2F0aW9uIHN0YXR1cywgdGhlbiBkb3RzIGNsaWVudCBzaG91bGQgcmVzZW5kIGFsbCB0aGUg YWN0aXZlIG1pdGlnYXRpb24gc3RhdHVzIHRvIGl0LiBUaGVyZSBjYW4gYmUgdHdvIHdheSBmb3Ig aXQ6DQoNCjEpICAgICAgIFJlc2VuZCBtaXRpZ2F0aW9uIHJlcXVlc3RzIGZvciBhbGwgYWN0aXZl IG1pdGlnYXRpb247DQoNCjIpICAgICAgIERvdHMgY2xpZW50IHN5bmMgYWxsIHRoZSBhY3RpdmUg bWl0aWdhdGlvbiBzdGF0dXMgd2l0aCBzZXJ2ZXIuDQoNCkl04oCZcyBub3Qgb25seSBhYm91dCB0 aGUgb2JzZXJ2ZSBvcHRpb24uDQoNClRoYW5rcyENCg0KQi5SLg0KRnJhbmsNCuWPkeS7tuS6ujog RG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10g5Luj6KGoIEtvbmRhLCBUaXJ1bWFs ZXN3YXIgUmVkZHkNCuWPkemAgeaXtumXtDogMjAxOOW5tDXmnIgxOOaXpSAxNjo1Nw0K5pS25Lu2 5Lq6OiBKb24gU2hhbGxvdyA8c3VwanBzLWlldGZAanBzaGFsbG93LmNvbTxtYWlsdG86c3VwanBz LWlldGZAanBzaGFsbG93LmNvbT4+OyBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPG1haWx0 bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPjsgZG90c0BpZXRmLm9yZzxtYWlsdG86ZG90 c0BpZXRmLm9yZz4NCuS4u+mimDogUmU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0 IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0KDQpIaSBKb24sDQoNClBs ZWFzZSBzZWUgaW5saW5lIFtUUl0NCg0KRnJvbTogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0Bp ZXRmLm9yZ10gT24gQmVoYWxmIE9mIEpvbiBTaGFsbG93DQpTZW50OiBGcmlkYXksIE1heSAxOCwg MjAxOCAyOjE2IFBNDQpUbzogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeSA8VGlydW1hbGVzd2Fy UmVkZHlfS29uZGFATWNBZmVlLmNvbTxtYWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNB ZmVlLmNvbT4+OyBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJv dWNhZGFpckBvcmFuZ2UuY29tPjsgZG90c0BpZXRmLm9yZzxtYWlsdG86ZG90c0BpZXRmLm9yZz4N ClN1YmplY3Q6IFJlOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2Vy dmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24NCg0KDQpDQVVUSU9OOiBFeHRlcm5hbCBlbWFp bC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNv Z25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLg0KDQoNCl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQpIaSBUaXJ1DQoNClNlZSBpbmxpbmUgW0pvbjJd DQoNClJlZ2FyZHMNCg0KSm9uDQoNCkZyb206IERvdHMgW21haWx0bzogZG90cy1ib3VuY2VzQGll dGYub3JnPG1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmc+XSBPbiBCZWhhbGYgT2YgS29uZGEs IFRpcnVtYWxlc3dhciBSZWRkeQ0KU2VudDogMTcgTWF5IDIwMTggMTc6MDUNClRvOiBKb24gU2hh bGxvdzsgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86bW9oYW1lZC5ib3VjYWRh aXJAb3JhbmdlLmNvbT47IGRvdHNAaWV0Zi5vcmc8bWFpbHRvOmRvdHNAaWV0Zi5vcmc+DQpTdWJq ZWN0OiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBt aXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uDQoNCltKb24xXSBBZ3JlZWQgdGhlIERPVFMgc2VydmVy IGNhbm5vdCBzZW50IGFueXRoaW5nIHRoYXQgaXMgdW5zb2xpY2l0ZWQgZHVlIHRvIGxvc3Mgb2Yg Y3J5cHRvZ3JhcGhpYyBzdGF0ZS4gIEhvd2V2ZXIsIGlmIHRoZSBET1RTIHNlcnZlciBjYW4gc2Vu ZCBiYWNrIGluIGEgcmVzcG9uc2UgdG8gYSBjbGllbnQgcmVxdWVzdCBzb21ldGhpbmcgdGhhdCBz dGF0ZXMg4oCcSSByZXN0YXJ0ZWQgcmVjZW50bHkgQCBzdWNoIGEgdGltZeKAnSwgdGhlIGNsaWVu dCB3aWxsIGtub3cgd2hldGhlciB0aGUgbWlzc2luZyBoZWFydGJlYXRzIHdlcmUgZG93biB0byBq dXN0IGEgZmxha3kgbmV0d29yaywgb3IgdGhlIG1pc3NpbmcgaGVhcnRiZWF0cyB3ZXJlIGR1ZSB0 byBhIHNlcnZlciByZXN0YXJ0LCBhbmQgc28gcmUtc3Vic2NyaWJlIG5lZWRlZCBmb3IgYWxsIHRo ZSByZXNvdXJjZXMgdGhhdCB0aGUgY2xpZW50IHdhbnRzIHRvIG1vbml0b3IuICBJIGRvIG5vdCB3 YW50IHRoZSBET1RTIGNsaWVudCB0byBrZWVwIG9uIGRvaW5nIHJlLXN1YnNjcmliZSBjb21wb3Vu ZGluZyB0aGUgbmV0d29yayBmbGFraW5lc3Mgd2hlbiB1bmRlciBhdHRhY2suDQoNCltSXSBUaGUg Zmlyc3QgdHdvIHNlbnRlbmNlcyBjb250cmFkaWN0IGVhY2ggb3RoZXIuIEhvdyBjYW4gdGhlIHNl cnZlciBzZW5kIGFueSBkYXRhIG9uIHRoZSBvbGQgc2Vzc2lvbiA/DQpbSm9uMl0gSSBhY3R1YWxs eSB3YXMgdGhpbmtpbmcgdGhhdCB0aGUgcmVzcG9uc2Ugd2FzIHNlbnQgYWZ0ZXIgdGhlIG5ldyBz ZXNzaW9uIHdhcyBlc3RhYmxpc2hlZC4NCkFuZCBJIGRvbuKAmXQgdW5kZXJzdGFuZCB0aGUgdmFs dWUgb2Ygc2VuZGluZyDigJxJIHJlc3RhcnRlZCByZWNlbnRseSBAc3VjaCBhIHRpbWXigJ0gaW4g dGhlIG5ldyAoRClUTFMgc2Vzc2lvbi4sIHRoZSBjbGllbnQgYW55d2F5cyBoYXMgdG8gcmVzZW5k IHRoZSBsaXN0IG9mIGFjdGl2ZSBtaXRpZ2F0aW9ucyBpdCB3aXNoZXMgdG8gb2JzZXJ2ZSBpbiB0 aGUgbmV3IHNlc3Npb24gKGlycmVzcGVjdGl2ZSBvZiB0aGUgcmVhc29uIHRoZSBzZXNzaW9uIGlz IGRpc2Nvbm5lY3RlZCkuIEEgc2Vzc2lvbiBjb3VsZCBiZSBkaXNjb25uZWN0ZWQgYmVjYXVzZSBv ZiB2YXJpb3VzIG90aGVyIHJlYXNvbnMgKGUuZy4gTkFUIHJlbG9hZCkuDQpbSm9uMl0gIE9LLCBz byB3aGVuZXZlciBhIG5ldyBzZXNzaW9uIGlzIHN0YXJ0ZWQgZm9yIHdoYXRldmVyIHJlYXNvbiwg dGhlcmUgbmVlZHMgdG8gYmUgYSByZXNlbmQgb2YgYWN0aXZlIG1pdGlnYXRpb25zLg0KDQoNCltU Ul0gTm8sIEkgbWVhbnQgVGhlIERPVFMgY2xpZW50IGluIHRoZSBuZXcgKEQpVExTIHNlc3Npb24g aGFzIHRvIHNlbmQgR0VUIHJlcXVlc3Qgd2l0aCBPYnNlcnZlIG9wdGlvbiB0byByZWNlaXZlIHVu c29saWNpdGVkIG5vdGlmaWNhdGlvbnMgb2YgYXR0YWNrIG1pdGlnYXRpb24gc3RhdHVzIG9mIGFj dGl2ZSBtaXRpZ2F0aW9uIHJlcXVlc3RzIGZyb20gdGhlIERPVFMgc2VydmVyLg0KDQoNCg0KLVRp cnUNCg0KSG93ZXZlciwgSSBoYXZlIG5vdCBmb3VuZCBhbnl3aGVyZSBpbiB0aGUgc2lnbmFsIC8g cmVxdWlyZW1lbnRzIC8gYXJjaGl0ZWN0dXJlIHdoZXJlIHRoaXMgaXMgc3VnZ2VzdGVkIChidXQg bWF5IGhhdmUgc2VhcmNoZWQgb24gdGhlIHdyb25nIGtleXdvcmRzISkgSSB0aGluayB0aGF0IHRo aXMgbmVlZHMgdG8gYmUgc3RhdGVkIHNvbWV3aGVyZSwgZXZlbiB0aG91Z2ggaXQgaXMgb2J2aW91 cyBpZiB5b3UgdGhpbmsgYWJvdXQgaXQuDQp+Sm9uMg0KDQoNCi1UaXJ1DQoNCkZyb206IEpvbiBT aGFsbG93IFttYWlsdG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbV0NClNlbnQ6IFRodXJzZGF5 LCBNYXkgMTcsIDIwMTggODo1NCBQTQ0KVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgPFRp cnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb208bWFpbHRvOlRpcnVtYWxlc3dhclJlZGR5 X0tvbmRhQE1jQWZlZS5jb20+PjsgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86 bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT47IGRvdHNAaWV0Zi5vcmc8bWFpbHRvOmRvdHNA aWV0Zi5vcmc+DQpTdWJqZWN0OiBSRTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQg d2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uDQoNCg0KQ0FVVElPTjogRXh0 ZXJuYWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0dGFjaG1lbnRzIHVubGVz cyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS4N Cg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KSGkgVGlydSwNCg0KU2VlIGlu bGluZSBbSm9uMV0NCg0KUmVnYXJkcw0KDQpKb24NCg0KRnJvbTogRG90cyBbbWFpbHRvOiBkb3Rz LWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZz5dIE9uIEJlaGFs ZiBPZiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5DQpTZW50OiAxNyBNYXkgMjAxOCAxNjowMw0K VG86IEpvbiBTaGFsbG93OyBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPG1haWx0bzptb2hh bWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPjsgZG90c0BpZXRmLm9yZzxtYWlsdG86ZG90c0BpZXRm Lm9yZz4NClN1YmplY3Q6IFJlOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRo IE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24NCg0KSGkgSm9uLA0KDQpUaGlzIHNj ZW5hcmlvIGlzIGFscmVhZHkgZGlzY3Vzc2VkIGluIFNlY3Rpb24gNC43LiBXaGVuIHRoZSBERG9T IG1pdGlnYXRpb24gaXMgaW4gcHJvZ3Jlc3MgYW5kIGFmdGVyIHRoZSDigJhtaXNzaW5nLWhiLWFs bG93ZWTigJkgdGhyZXNob2xkIGlzIHJlYWNoZWQsIHRoZSBET1RTIGNsaWVudCB3aWxsIGNvbnRp bnVlIHRvIHVzZSB0aGUgZXhpc3RpbmcgKEQpVExTIHNlc3Npb24gdG8gc2VuZCBoZWFydGJlYXQg cmVxdWVzdHMgdG8gdGhlIHNlcnZlciBhbmQgYXQgdGhlIHNhbWUgdGltZSB0cnkgdG8gZXN0YWJs aXNoIGEgbmV3IChEKVRMUyBzZXNzaW9uIHdpdGggRE9UUyBzZXJ2ZXIuDQpbSm9uMV0gSSBmdWxs eSB1bmRlcnN0YW5kIHRoYXQNCkZ1cnRoZXIsIGlmIHRoZSBzZXJ2ZXIgcmVzdGFydHMsIChEKVRM UyBzdGF0ZSBpcyBsb3N0IG9uIHRoZSBzZXJ2ZXIgYW5kIHRoZSBzZXJ2ZXIgZG9lcyBub3QgaGF2 ZSB0aGUgY3J5cHRvZ3JhcGhpYyBzdGF0ZSB0byBzZW5kIOKAmHJlLXN1YnNjcmliZeKAmSBvbiB0 aGUgb2xkIHNlc3Npb24uDQpbSm9uMV0gQWdyZWVkIHRoZSBET1RTIHNlcnZlciBjYW5ub3Qgc2Vu dCBhbnl0aGluZyB0aGF0IGlzIHVuc29saWNpdGVkIGR1ZSB0byBsb3NzIG9mIGNyeXB0b2dyYXBo aWMgc3RhdGUuICBIb3dldmVyLCBpZiB0aGUgRE9UUyBzZXJ2ZXIgY2FuIHNlbmQgYmFjayBpbiBh IHJlc3BvbnNlIHRvIGEgY2xpZW50IHJlcXVlc3Qgc29tZXRoaW5nIHRoYXQgc3RhdGVzIOKAnEkg cmVzdGFydGVkIHJlY2VudGx5IEAgc3VjaCBhIHRpbWXigJ0sIHRoZSBjbGllbnQgd2lsbCBrbm93 IHdoZXRoZXIgdGhlIG1pc3NpbmcgaGVhcnRiZWF0cyB3ZXJlIGRvd24gdG8ganVzdCBhIGZsYWt5 IG5ldHdvcmssIG9yIHRoZSBtaXNzaW5nIGhlYXJ0YmVhdHMgd2VyZSBkdWUgdG8gYSBzZXJ2ZXIg cmVzdGFydCwgYW5kIHNvIHJlLXN1YnNjcmliZSBuZWVkZWQgZm9yIGFsbCB0aGUgcmVzb3VyY2Vz IHRoYXQgdGhlIGNsaWVudCB3YW50cyB0byBtb25pdG9yLiAgSSBkbyBub3Qgd2FudCB0aGUgRE9U UyBjbGllbnQgdG8ga2VlcCBvbiBkb2luZyByZS1zdWJzY3JpYmUgY29tcG91bmRpbmcgdGhlIG5l dHdvcmsgZmxha2luZXNzIHdoZW4gdW5kZXIgYXR0YWNrLg0KfkpvbjENCg0KLVRpcnUNCg0KRnJv bTogSm9uIFNoYWxsb3cgW21haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tXQ0KU2VudDog VGh1cnNkYXksIE1heSAxNywgMjAxOCAxOjIxIFBNDQpUbzogS29uZGEsIFRpcnVtYWxlc3dhciBS ZWRkeSA8VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbTxtYWlsdG86VGlydW1hbGVz d2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbT4+OyBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29t PG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPjsgZG90c0BpZXRmLm9yZzxtYWls dG86ZG90c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJFOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gv cmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24NCg0KDQpDQVVU SU9OOiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4gYXR0YWNobWVu dHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBp cyBzYWZlLg0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpIaSBUaXJ1LA0K DQpJdCBpcyBhIGNvcm5lciByZWNvdmVyeSBjYXNlLiAgVGhlIERPVFMgY2xpZW50IGNhbiBkZXRl Y3QgdGhhdCB0aGUgRE9UUyBzZXJ2ZXIgaGFzIGdvbmUgYXdheSAodXNpbmcgaGVhcnRiZWF0cykg YW5kIHJlLXN1YnNjcmliZSB0byBhbGwgdGhlIHJlc291cmNlcyB0aGF0IHRoZSBET1RTIGNsaWVu dCB3YW50cyB0byBPYnNlcnZlIG9uIGRldGVjdGlvbiB0aGF0IHRoZSBET1RTIHNlcnZlciBpcyBi YWNrDQoNCkhvd2V2ZXIsIHdoZW4gbWl0aWdhdGluZywgdGhlcmUgaXMgYSBsaWtlbGlob29kIHRo YXQgaGVhcnRiZWF0cyB3aWxsIHRpbWUgb3V0IGFuZCBJIGFtIG5vdCBzdXJlIHRoYXQgaXQgaXMg d2lzZSB0byDigJxyZS1zdWJzY3JpYmXigJ0gd2hlbiB0aGUgY29ubmVjdGlvbnMgYXJlIHJlLWVz dGFibGlzaGVkIGFzIHRoZSBuZXR3b3JrIHBhdGggbWF5IHN0aWxsIGJlIGZsYWt5IGFuZCBhZGRp bmcgZXh0cmEgdHJhZmZpYyBtYXkgYmUgcHJvYmxlbWF0aWMuICBNeSBzdWdnZXN0aW9uIG9mIGFu IGVwb2NoIHRpbWUgYmVpbmcgcmVwb3J0ZWQgYnkgdGhlIERPVFMgc2VydmVyIHdhcyBhIHdheSBv ZiBkZXRlcm1pbmluZyB3aGV0aGVyIOKAnHJlLXN1YnNjcmliZeKAnSB3YXMgcmVxdWlyZWQgb3Ig bm90Lg0KDQpSZWdhcmRzDQoNCkpvbg0KDQpGcm9tOiBEb3RzIFttYWlsdG86IGRvdHMtYm91bmNl c0BpZXRmLm9yZzxtYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnPl0gT24gQmVoYWxmIE9mIEtv bmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkNClNlbnQ6IDE2IE1heSAyMDE4IDE2OjA1DQpUbzogbW9o YW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3Jhbmdl LmNvbT47IEpvbiBTaGFsbG93OyBkb3RzQGlldGYub3JnPG1haWx0bzpkb3RzQGlldGYub3JnPg0K U3ViamVjdDogUmU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2 ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0KDQpJIGRvbuKAmXQgZ2V0IHRoZSBwcm9ibGVt LiBJZiB0aGUgc2VydmVyIHJlc3RhcnRzLCAoRClUTFMgc3RhdGUgd2lsbCBiZSBsb3N0IGFuZCBz ZXJ2ZXIgd2lsbCByZWplY3QgaGVhcnRiZWF0IHJlcXVlc3RzIGZyb20gdGhlIGNsaWVudCAoZWl0 aGVyIHNpbGVudGx5IG9yIHNlbmQgYSBmYXRhbCBhbGVydCB0byB0aGUgY2xpZW50KS4gRE9UUyBj bGllbnQgd2lsbCBoYXZlIHRvIGZvbGxvdyB0aGUgc3RlcHMgaW4gaHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOSNzZWN0aW9uLTQuNyB0 byByZS1lc3RhYmxpc2ggKEQpVExTIHNlc3Npb24gd2l0aCB0aGUgRE9UUyBzZXJ2ZXIuDQoNCi1U aXJ1DQoNCkZyb206IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFs ZiBPZiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFp ckBvcmFuZ2UuY29tPg0KU2VudDogV2VkbmVzZGF5LCBNYXkgMTYsIDIwMTggNzoxNSBQTQ0KVG86 IEpvbiBTaGFsbG93IDxzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tPG1haWx0bzpzdXBqcHMtaWV0 ZkBqcHNoYWxsb3cuY29tPj47IGRvdHNAaWV0Zi5vcmc8bWFpbHRvOmRvdHNAaWV0Zi5vcmc+DQpT dWJqZWN0OiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZl ZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uDQoNCg0KQ0FVVElPTjogRXh0ZXJuYWwgZW1haWwu IERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2du aXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS4NCg0KDQpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXw0KUmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4NCg0K Q2hlZXJzLA0KTWVkDQoNCkRlIDogSm9uIFNoYWxsb3cgW21haWx0bzpzdXBqcHMtaWV0ZkBqcHNo YWxsb3cuY29tXQ0KRW52b3nDqSA6IG1lcmNyZWRpIDE2IG1haSAyMDE4IDE0OjQyDQrDgCA6IEJP VUNBREFJUiBNb2hhbWVkIElNVC9PTE47IGRvdHNAaWV0Zi5vcmc8bWFpbHRvOmRvdHNAaWV0Zi5v cmc+DQpPYmpldCA6IFJFOiBbRG90c10gRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9i c2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb24NCg0KSGkgTWVkLA0KDQpTZWUgaW5saW5l Lg0KDQpSZWdhcmRzDQoNCkpvbg0KDQpGcm9tOiBEb3RzIFttYWlsdG86IGRvdHMtYm91bmNlc0Bp ZXRmLm9yZzxtYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnPl0gT24gQmVoYWxmIE9mIG1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208bWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5j b20+DQpTZW50OiAxNiBNYXkgMjAxOCAxMjo1NQ0KVG86IEpvbiBTaGFsbG93OyBkb3RzQGlldGYu b3JnPG1haWx0bzpkb3RzQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtEb3RzXSBET1RTIHNlcnZl ciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbg0K DQpIaSBKb24sDQoNClBsZWFzZSBzZWUgaW5saW5lLg0KDQpDaGVlcnMsDQpNZWQNCg0KRGUgOiBE b3RzIFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBEZSBsYSBwYXJ0IGRlIEpvbiBTaGFs bG93DQpFbnZvecOpIDogbWVyY3JlZGkgMTYgbWFpIDIwMTggMTI6MjQNCsOAIDogZG90c0BpZXRm Lm9yZzxtYWlsdG86ZG90c0BpZXRmLm9yZz4NCk9iamV0IDogW0RvdHNdIERPVFMgc2VydmVyIGNy YXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uDQoNCkhp IHRoZXJlLA0KDQpGb3IgdGhlIHNpZ25hbCBjaGFubmVsLCBpdCBpcyBlYXN5IHRvIG1haW50YWlu IGEgcGVyc2lzdGVudCBsaXN0IG9mIGFjdGl2ZSBtaXRpZ2F0aW9ucy4gIFNob3VsZCB0aGUgRE9U UyBzZXJ2ZXIgKHVuZXhwZWN0ZWRseSkgc3RvcCBhbmQgcmVzdGFydCwgdGhlbiBpdCBpcyBlYXN5 IHRvIHJlYnVpbGQgdGhlIGN1cnJlbnQgYWN0aXZlIG1pdGlnYXRpb25zLg0KDQpbTWVkXSBUaGUg bGlzdCBvZiBhY3RpdmUgbWl0aWdhdGlvbnMgaXMgdGhlIOKAnGNvcmXigJ0gc3RhdGUgZGF0YSB0 byBiZSBtYWludGFpbmVkIGJ5IGEgc2VydmVyLiBJZiB3ZSBhc3N1bWUgdGhhdCBsaXN0IGNhbiBi ZSByZWxpYWJseSByZWJ1aWx0LCB0aGVuIHRoZXJlIGlzIG5vIGV4dGVuc2lvbiBuZWVkZWQgdG8g dGhlIHNpZ25hbCBjaGFubmVsIHRvIGhhbmRsZSB0aGlzIGZhaWx1cmUgY2FzZS4NCg0KW0pvbl0g QWdyZWVkLiAgVGhpcyB3YXMganVzdCBtZSBidWlsZGluZyB1cCB0aGUgYmFja2dyb3VuZCB0byB0 aGUgc2NlbmFyaW8uDQoNCkhvd2V2ZXIsIHRvIHJlYnVpbGQgdGhlIGxpc3Qgb2YgYWN0aXZlIE9i c2VydmF0aW9ucyBvZiB0aGUgY3VycmVudCBtaXRpZ2F0aW9ucyAvIGNvbmZpZ3VyYXRpb24gY2hh bmdlcyBpcyBjb25zaWRlcmFibHkgbW9yZSBkaWZmaWN1bHQgYXMgdGhlIERPVFMgc2VydmVyIHdv dWxkIGFsc28gbmVlZCB0byBtYWludGFpbiBhIGxpc3Qgb2YgY2xpZW50IElQcy9zb3VyY2UgcG9y dHMgZXRjLiBhbG9uZyB3aXRoIFRva2VucyBhbmQgUXVlcmllcyBhbmQgKEQpVExTIHN0YXRlIHNv IHRoYXQgdW5zb2xpY2l0ZWQgT2JzZXJ2ZSByZXNwb25zZXMgY2FuIGNvbnRpbnVlIHRvIGJlIHNl bnQgYmFjayB0byB0aGUgY2xpZW50cy4gIEkgZG9u4oCZdCByZWFsbHkgdGhpbmsgdGhhdCB0aGlz IGlzIGEgcHJhY3RpY2FsIGFzay4NCg0KW01lZF0gRmlyc3QsIHRoaXMgY2FuIGJlIGNvbnNpZGVy ZWQgYXMgZGVwbG95bWVudC1zcGVjaWZpYy4gQXMgc3VjaCBpbiBzb21lIGRlcGxveW1lbnRzLCB0 aGVyZSBpcyBubyBuZWVkIHRvIHN1cHBvcnQgYXV0b21hdGljIG1lYW5zIHRvIGRldGVjdCBzdGF0 ZSBsb3NzIGF0IHRoZSBzZXJ2ZXIgc2lkZS4gU2Vjb25kLCBpcyBpdCByZWFsbHkgcHJvYmxlbWF0 aWMgZm9yIHRoZSBERG9TIG1pdGlnYXRpb24gdGhhdCBsaXN0IGlzIGxvc3QgYnkgYSBzZXJ2ZXI/ IEkgZ3Vlc3MsIHRoZSBhbnN3ZXIgaXMgbm8gaWYgd2UgYXNzdW1lIHRoZSBsaXN0IG9mIG1pdGln YXRpb25zIHRoZW1zZWx2ZXMgaXMgbWFpbnRhaW5lZC4NCg0KW0pvbl0gTXkgY29uY2VybiBpcyB0 aGF0IHRoZSBET1RTIGNsaWVudHMgd291bGQgbm90IHNlZSB0aGUgY2hhbmdlIGluIG1pdGlnYXRp b24gc3RhdGUsIG9yIHdvdWxkIG5vdCBzZWUgdGhhdCB0aGVyZSBpcyBhIG5ldyBzaWduYWwgY2hh bm5lbCBjb25maWd1cmF0aW9uIChpZiB0aGV5IHdlcmUgYmVpbmcgT2JzZXJ2ZWQpLiBUaGUgRE9U UyBjbGllbnQvc2VydmVyIHdvdWxkIGJlIG91dCBvZiBzeW5jIHdpdGggd2hhdCBpcyBoYXBwZW5p bmcgYW5kIHRoZSBET1RTIGNsaWVudCB3b3VsZCBub3QgbmVjZXNzYXJpbHkga25vdyB0aGF0IGl0 IGhhcyB0byB0YWtlIHNvbWUgYWN0aW9uIHRvIGdldCBiYWNrIHRvIHRoZSBzdGF0ZSBiZWZvcmUg dGhlIERPVFMgc2VydmVyIG91dGFnZS4NCg0KW01lZF0gVGhlIGRvdHMgY2xpZW50IGhhcyBvdGhl ciBtZWFucyB0byBrbm93IHRoZSBtaXRpZ2F0aW9uIHN0YXRlLiBUaGUgRE9UUyBjbGllbnQgY2Fu IG9ic2VydmUgdGhlIHN0YXR1cyBsb2NhbGx5IChhbmQgcmVwb3J0IGl0IHRvIHRoZSBzZXJ2ZXIp IG9yIHNlbmQgYSByZXF1ZXN0IHRvIHJldHJpZXZlIHRoZSBzdGF0dXMgZnJvbSB0aGUgc2VydmVy LiBUaGUgb3V0IG9mIHN5bmNoIGluIG9ic2VydmUgaXMgbm90IHRoYXQgY3JpdGljYWwgZm9yIG1p dGlnYXRpbmcgRERvUyBhdHRhY2tzLg0KDQpBcyB0aGUgRE9UUyBzZXJ2ZXIgcmVzdGFydGVkLCBl eGlzdGluZyAoRClUTFMgc2Vzc2lvbnMgdXNlZCBieSB0aGUgRE9UUyBjbGllbnQgd2lsbCBmYWls LiAgU28sIHRoZSBoZWFydGJlYXQgbWVjaGFuaXNtIHdpbGwgZXZlbnR1YWxseSB0aW1lIG91dCAg YW5kIEkgZ3Vlc3MgdGhhdCB0aGUgRE9UUyBjbGllbnQgc2hvdWxkIGRldGVjdCB0aGlzIGFuZCBy ZS1kbyBhbGwgb2YgdGhlIE9ic2VydmUgcmVxdWVzdHMgKGFsb25nIHdpdGggbWFraW5nIHN1cmUg dGhhdCBhbGwgdGhlIGFjdGl2ZSBtaXRpZ2F0aW9ucyBhcmUgYXMgZXhwZWN0ZWQpLg0KDQpbTWVk XSBJbmNsdWRpbmcgY2xpZW50cyBpbiBuZXR3b3JrcyB1bmRlciBhY3RpdmUgYXR0YWNrcz8gSXNu 4oCZdCB0aGlzIG92ZXJsb2FkaW5nIHRoZSBzZXJ2ZXIgd2hpbGUgZGVhbGluZyB3aXRoIG9uZ29p bmcgYXR0YWNrcz8NCg0KW0pvbl0gWWVzLCBpdCB3b3VsZCDigJMgaGVuY2UgSSBkaWQgbm90IHJl YWxseSB3YW50IHRvIGhhdmUgdG8gZG8gdGhpcyB3aGVuZXZlciBhIGhlYXJ0YmVhdCBmYWlsZWQs IGJ1dCBvbmx5IGRvIGl0IHdoZW4gdGhlIERPVFMgY2xpZW50IOKAnGtub3dz4oCdIHRoYXQgdGhl IHNlcnZlciBoYXMgaGFkIGFuIG91dGFnZS4NCg0KSG93ZXZlciBpbiBQZWFjZSB0aW1lIEhlYXJ0 YmVhdHMgbWF5IG5vdCBiZWluZyB1c2VkLg0KSG93ZXZlciBhdCBNaXRpZ2F0aW9uIHRpbWUgaGVh cnRiZWF0cyBtYXkgZmFpbC4NCg0KV291bGQgaXQgbWFrZSBzZW5zZSB0byBhZGQgdG8gdGhlIHNp Z25hbCBjaGFubmVsIGFuIGV4dHJhIHBhcmFtZXRlciB0aGF0IHRoZSBET1RTIHNlcnZlciBjYW4g c2VuZCB0byB0aGUgY2xpZW50IGluIGFueSByZXNwb25zZSBpbiB0aGUgZm9ybSBvZg0K4oCcbGFz dC1yZXN0YXJ0ZWTigJ0gOiBzZWNvbmRzLXNpbmNlLWVwb2NoDQpXaGljaCB0aGUgY2xpZW50IGNh biB1c2UgdG8gZGV0ZWN0ZWQgdGhlIHJlc3RhcnQuDQoNCltNZWRdIFdlIHVzZWQgdG8gaGF2ZSBh biBlcG9jaC1iYXNlZCBhcHByb2FjaCBmb3IgYSBzdGF0ZWZ1bGwgc2VydmljZSAoc2VlIGh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2ODg3I3NlY3Rpb24tOC41KS4gVGhlIGRldGFpbHMg YXJlIG5vdCByZXN0cmljdGVkIHRvIGp1c3Qgc2lnbmFsbGluZyB0aGUgZXBvY2ggdmFsdWUgYnV0 IHRvIHRoZSBsb2dpYyB0byBoYW5kbGUgaXQgYXQgdGhlIGNsaWVudCBzaWRlLiBGdXJ0aGVyLCB0 aGVyZSBhcmUgc29tZSBhc3BlY3RzIHRvIGJlIHRha2VuIGludG8gYWNjb3VudCB3aGVuIGNvbmZp Z3VyaW5nIHJlZHVuZGFuY3kgc2VydmVycyB3aGVuIGFuIGFueWNhc3QgYWRkcmVzcyBpcyB1c2Vk LiBJZiB0aGUgc2FtZSBpbml0aWFsIGVwb2NoIHZhbHVlIGlzIGNvbmZpZ3VyZWQsIHRoZSBjbGll bnQgbWF5IG5vdCBkZXRlY3QgYSBiYWNrdXAgc2VydmVyIGlzIHVzZWQgYW5kIGhlbmNlIG1heSBu b3QgcmVpbnN0YWxsIHN0YXRlLi4uIEEgdHdlYWsgaXMgdG8gY29uZmlndXJlIGRpc3RpbmN0IGVw b2NoIHZhbHVlcyAoZS5nLiwgKy8tIDI0aCBkaWZmZXJlbmNlIGJldHdlZW4gYSBzZXJ2ZXIgcmVk dW5kYW5jeSBncm91cCkuDQoNClRoZSBlcG9jaCBpcyBqdXN0aWZpZWQgZm9yIDY4ODcgYmVjYXVz ZSB3ZSB3YW50ZWQgdG8gcmVjb3ZlciBzdGF0ZSBsb3NzLCB3aGlsZSBpbiB0aGUgRE9UUyBjYXNl IHdlIGRvbuKAmXQgaGF2ZSB0aGUgc2FtZSBtb2RlbCBnaXZlbiB0aGF0LCBhcyB5b3UgcmlnaHRm dWxseSBzYWlkIGFib3ZlLCB0aGUgY3VycmVudCBhY3RpdmUgbWl0aWdhdGlvbnMgY2FuIGJlIHJl YnVpbHQgYXQgdGhlIHNlcnZlciBzaWRlIHdpdGhvdXQgaW52b2x2aW5nIGNsaWVudHMuDQoNCltK b25dIFNvIHRoaXMgbWV0aG9kIHNldHMgZXBvY2ggdGltZSBiYWNrIHRvIDAgd2hlbmV2ZXIgdGhl cmUgaXMgYSByZXN0YXJ0LA0KW01lZF0gWWVzLiBUaGUgZXBvY2ggaXMgcmVzZXQgZWFjaCB0aW1l IHRoZSBzdGF0ZSBpcyBsb3N0IGF0IHRoZSBzZXJ2ZXIgc2lkZS4NCg0KcmF0aGVyIHRoYXQgcmVw b3J0IG9uIHRoZSBudW1iZXIgb2Ygc2Vjb25kcyBzaW5jZSBKYW4gMSAxOTcwLiAgIFRoYXQgSSBj YW4gaGFuZGxlLiAgSG93ZXZlciBhbnljYXN0ICh0aG91Z2ggcmVkdW5kYW50IHNlcnZlcnMgYXJl IGN1cnJlbnRseSBvdXQgb2Ygc3BlYykgd2hlcmUgMiBvciBtb3JlIHNlcnZlcnMgcmVzdGFydCBh bmQgdXBkYXRlIHRoZSBzdGFydCB0aW1lIGF0IGV4YWN0bHkgdGhlIHNhbWUgdGltZSBpcyBwb3Nz aWJsZSwgYnV0IHVubGlrZWx5LiAgVGhpcyBjb3VsZCBiZSBoYW5kbGVkIGJ5IHRoZSBhbnljYXN0 IHNlcnZlcnMgY29tbXVuaWNhdGluZyBhbmQgc2VlaW5nIHRoZXkgYm90aCBoYXZlIHRoZSBzYW1l IHN0YXJ0IHRpbWUgc28gb25lIGJhY2tzIG9mZiAoaW4gdGltZSB0ZXJtcykuDQoNCltKb25dIEni gJltIGp1c3QgaW50ZXJlc3RlZCBpbiBob3cgdG8gcmVjb3ZlciBPYnNlcnZlIGxvc3MuDQpbTWVk XSBJ4oCZbSBub3QgY29udmluY2VkIHRoaXMgaXMgcmVhbGx5IG5lZWRlZCBnaXZlbiB0aGF0IGFj dGl2ZSBtaXRpZ2F0aW9ucyBhcmUgbm90IGNvbmNlcm5lZCB3aXRoIHRoaXMgZmFpbHVyZSBzY2Vu YXJpby4NCg0KICBJIGFwcHJlY2lhdGUgaW4gcGVhY2UgdGltZSB0aGVyZSBtYXkgbm90IGJlIGFu eSBET1RTIGNsaWVudCByZXF1ZXN0cyAob3IgaGVhcnRiZWF0KSBmb3IgYSBsb25nIHRpbWUuLi4N Cg0KSeKAmW0gb3BlbiB0byBzdWdnZXN0aW9ucy4NCg0KUmVnYXJkcw0KDQpKb24NCg0KDQoNCg0K --_000_BN6PR16MB14257DA03660C3F5697BFFDBEA6E0BN6PR16MB1425namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpEZW5nWGlhbjsNCglwYW5vc2UtMToy IDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OiJcQERlbmdYaWFuIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250 LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDMgNSA0IDQg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Ik1pY3Jvc29mdCBZYUhlaSI7DQoJcGFu b3NlLTE6MiAxMSA1IDMgMiAyIDQgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToi XEBNaWNyb3NvZnQgWWFIZWkiO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Ik1pY3Jvc29m dCBKaGVuZ0hlaSI7DQoJcGFub3NlLTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiXEBNaWNyb3NvZnQgSmhlbmdIZWkiO30NCkBmb250LWZhY2UNCgl7 Zm9udC1mYW1pbHk6Ik1TIFVJIEdvdGhpYyI7DQoJcGFub3NlLTE6MiAxMSA2IDAgNyAyIDUgOCAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiXEBNUyBVSSBHb3RoaWMiO30NCi8qIFN0 eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9y bWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTox MS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJbXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6RU4tVVM7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30N CmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJl DQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3Jt YXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9u dC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgltc28t ZmFyZWFzdC1sYW5ndWFnZTpFTi1VUzt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQ YXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsN CgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCgl0ZXh0LWluZGVudDoyMS4w cHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJp ZjsNCgltc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUzt9DQpzcGFuLkhUTUxQcmVmb3JtYXR0ZWRD aGFyDQoJe21zby1zdHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIjsNCglm b250LWZhbWlseToiQ291cmllciBOZXciO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwg ZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1zdHlsZS1w cmlvcml0eTo5OTsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGlu Ow0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250 LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4u SFRNTENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkhUTUwg6aKE6K6+5qC85byPIENoYXIiOw0KCW1z by1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCDpooTorr7moLzlvI8i Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4t VVM7fQ0KcC5IVE1MLCBsaS5IVE1MLCBkaXYuSFRNTA0KCXttc28tc3R5bGUtbmFtZToiSFRNTCDp ooTorr7moLzlvI8iOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoi SFRNTCDpooTorr7moLzlvI8gQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjsNCgltc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUzt9DQpzcGFuLkVtYWlsU3R5bGUyNA0K CXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTI1DQoJe21zby1zdHls ZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJY29sb3I6Ymxh Y2s7DQoJZm9udC13ZWlnaHQ6bm9ybWFsOw0KCWZvbnQtc3R5bGU6bm9ybWFsO30NCnNwYW4uRW1h aWxTdHlsZTI2DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjcNCgl7 bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCglj b2xvcjpibGFjazsNCglmb250LXdlaWdodDpub3JtYWw7DQoJZm9udC1zdHlsZTpub3JtYWw7fQ0K c3Bhbi5FbWFpbFN0eWxlMjgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWls U3R5bGUyOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTMwDQoJe21z by1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm Ow0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMzENCgl7bXNvLXN0eWxlLXR5 cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6 IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUzMg0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30N CnNwYW4uRW1haWxTdHlsZTMzDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMzQNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUzNQ0KCXtt c28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJp ZjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTM2DQoJe21zby1zdHlsZS10eXBl OnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndp bmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMzcNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7 DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQpz cGFuLkVtYWlsU3R5bGU0MA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250 LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29D aHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4w cHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjox LjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNl Y3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRl ZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+ PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8 bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48 IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGlu az0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48Yj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkZyb206PC9z cGFuPjwvYj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPiBKb24gU2hh bGxvdyBbbWFpbHRvOnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb21dDQo8YnI+DQo8Yj5TZW50Ojwv Yj4gTW9uZGF5LCBNYXkgMjgsIDIwMTggMjoxOCBQTTxicj4NCjxiPlRvOjwvYj4gS29uZGEsIFRp cnVtYWxlc3dhciBSZWRkeSAmbHQ7VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbSZn dDs7IFhpYWxpYW5nIChGcmFuaykgJmx0O2ZyYW5rLnhpYWxpYW5nQGh1YXdlaS5jb20mZ3Q7OyBt b2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tOyBkb3RzQGlldGYub3JnPGJyPg0KPGI+U3ViamVj dDo8L2I+IFJFOiBbRG90c10gPC9zcGFuPjxzcGFuIGxhbmc9IlpILUNOIiBzdHlsZT0iZm9udC1m YW1pbHk6JnF1b3Q7TWljcm9zb2Z0IEpoZW5nSGVpJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVh c3QtbGFuZ3VhZ2U6WkgtQ04iPuetlOWkjTwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6WkgtQ04iPjogRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVk IG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8dGFibGUgY2xhc3M9 Ik1zb05vcm1hbFRhYmxlIiBib3JkZXI9IjEiIGNlbGxwYWRkaW5nPSIwIiBzdHlsZT0iYmFja2dy b3VuZDojRjNGRjMzO2JvcmRlcjpzb2xpZCAjOUI5QTg3IDEuNXB0Ij4NCjx0Ym9keT4NCjx0cj4N Cjx0ZCBzdHlsZT0iYm9yZGVyOm5vbmU7cGFkZGluZzouNzVwdCAuNzVwdCAuNzVwdCAuNzVwdCI+ DQo8cD48c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPkNBVVRJT048L3NwYW4+PC9zdHJvbmc+PHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzlCOEIz RSI+Ojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjpibGFjayI+IEV4dGVybmFsIGVtYWlsLiBEbyBub3QgY2xpY2sgbGlua3Mg b3Igb3Blbg0KIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5k IGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv dGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFs aWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gbGFuZz0iRU4tR0Ii IHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+DQo8aHIgc2l6ZT0iMiIgd2lkdGg9 IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhpIFRp cnUgLyBGcmFuayw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHls ZT0iY29sb3I6IzFGNDk3RCI+QWdyZWVkIOKAkyB0aGUgRE9UUyBzZXJ2ZXIgc2hvdWxkIG1haW50 YWluIG1pdGlnYXRpb24gc3RhdGUgb3ZlciBhIHJlc3RhcnQuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjoj MUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPk15IHBsYW4gdG8gZ2V0 IGFyb3VuZCB0aGUgbG9zcyBvZiBPYnNlcnZlIGlzIHRvIGhhdmUgdGhlIGNsaWVudCB0cmVhdCBh IGxvc3Mgb2YgY29ubmVjdGlvbiBhbmQgbmV3IGNvbm5lY3Rpb24gZXN0YWJsaXNoZWQgYXMgaWYg dGhlIGNsaWVudCB3YXMgcmVzdGFydGVkIGFuZCBnbyB0aHJvdWdoIHRoZSBwcm9jZXNzIG9mIGNo ZWNraW5nIHdoYXQNCiB0aGUgc2VydmVyIGlzIGN1cnJlbnRseSBtaXRpZ2F0aW5nLCB1cGRhdGUg bWl0aWdhdGlvbnMgaWYgYXBwcm9wcmlhdGUgYW5kIHJlLXJlZ2lzdGVyIGFsbCBvZiB0aGUgT2Jz ZXJ2ZSByZXF1aXJlbWVudHMgYnkgZG9pbmcgdGhlIGFwcHJvcHJpYXRlIEdFVHMuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIj5bVFJdIFNvdW5kcyBsaWtlIHRoZSByaWdodCBwbGFuIHRvIG1lLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiI+LVRpcnU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij5SZWdhcmRzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPkpvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdl OkVOLUdCIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3Vh Z2U6RU4tR0IiPiBEb3RzIFttYWlsdG86DQo8YSBocmVmPSJtYWlsdG86ZG90cy1ib3VuY2VzQGll dGYub3JnIj5kb3RzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSA8Yj5PbiBCZWhhbGYgT2YNCjwvYj5L b25kYSwgVGlydW1hbGVzd2FyIFJlZGR5PGJyPg0KPGI+U2VudDo8L2I+IDI4IE1heSAyMDE4IDA2 OjQ5PGJyPg0KPGI+VG86PC9iPiBYaWFsaWFuZyAoRnJhbmssIE5ldHdvcmsgSW50ZWdyYXRpb24g VGVjaG5vbG9neSBSZXNlYXJjaCBEZXB0KTsgSm9uIFNoYWxsb3c7DQo8YSBocmVmPSJtYWlsdG86 bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSI+bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNv bTwvYT48YnI+DQo8Yj5DYzo8L2I+IDxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3Rz QGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0RvdHNdIDwvc3Bhbj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 TVMgVUkgR290aGljJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0Ii PuetlOWkjTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+ OiBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0DQogd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9D b25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFu Z3VhZ2U6WkgtQ04iPkhpIEZyYW5rLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHByZT48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFu Z3VhZ2U6WkgtQ04iPkkgZG9u4oCZdCB0aGluayBKb27igJlzIGNvbmNlcm4gaXMgbG9zaW5nIHRo ZSBtaXRpZ2F0aW9uIHJlcXVlc3QuIFRoZSBtaXRpZ2F0aW9uIHJlcXVlc3Qgc2hvdWxkIGJlIHN0 b3JlZCBpbiBhIHBlcnNpc3RlbnQgc3RvcmFnZSBhbmQgdGhlIERPVFMgc2VydmVyIGNhbiA8bzpw PjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1 YWdlOlpILUNOIj5yZWJ1aWxkIHRoZSBhY3RpdmUgbWl0aWdhdGlvbiByZXF1ZXN0IGxpc3QgYWZ0 ZXIgcmVzdGFydC4gPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O21zby1mYXJl YXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5DaGVlcnMsPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdl OlpILUNOIj4tVGlydTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQg Ymx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxl PSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBw dCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0ibXNv LWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0ibXNv LWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPiBEb3RzIFs8YSBocmVmPSJtYWlsdG86ZG90cy1ib3Vu Y2VzQGlldGYub3JnIj5tYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnPC9hPl0NCjxiPk9uIEJl aGFsZiBPZiA8L2I+WGlhbGlhbmcgKEZyYW5rLCBOZXR3b3JrIEludGVncmF0aW9uIFRlY2hub2xv Z3kgUmVzZWFyY2ggRGVwdCk8YnI+DQo8Yj5TZW50OjwvYj4gTW9uZGF5LCBNYXkgMjEsIDIwMTgg OToxNyBBTTxicj4NCjxiPlRvOjwvYj4gS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeSAmbHQ7PGEg aHJlZj0ibWFpbHRvOlRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20iPlRpcnVtYWxl c3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb208L2E+Jmd0OzsgSm9uIFNoYWxsb3cgJmx0OzxhIGhy ZWY9Im1haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tIj5zdXBqcHMtaWV0ZkBqcHNoYWxs b3cuY29tPC9hPiZndDs7DQo8YSBocmVmPSJtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3Jhbmdl LmNvbSI+bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT48YnI+DQo8Yj5DYzo8L2I+IDxh IGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1 YmplY3Q6PC9iPiBbRG90c10gPC9zcGFuPjxzcGFuIGxhbmc9IlpILUNOIiBzdHlsZT0iZm9udC1m YW1pbHk6JnF1b3Q7TWljcm9zb2Z0IEpoZW5nSGVpJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVh c3QtbGFuZ3VhZ2U6WkgtQ04iPuetlOWkjTwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6WkgtQ04iPjogRE9UUyBzZXJ2ZXIgY3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVk IG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2 Pg0KPHRhYmxlIGNsYXNzPSJNc29Ob3JtYWxUYWJsZSIgYm9yZGVyPSIxIiBjZWxscGFkZGluZz0i MCIgc3R5bGU9ImJhY2tncm91bmQ6I0YzRkYzMztib3JkZXI6c29saWQgIzlCOUE4NyAxLjVwdCI+ DQo8dGJvZHk+DQo8dHI+DQo8dGQgc3R5bGU9ImJvcmRlcjpub25lO3BhZGRpbmc6Ljc1cHQgLjc1 cHQgLjc1cHQgLjc1cHQiPg0KPHA+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1 b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojOUI4QjNFIj5DQVVUSU9OPC9zcGFuPjwv c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiM5QjhCM0UiPjo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90 O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiBFeHRlcm5hbCBlbWFpbC4gRG8g bm90IGNsaWNrIGxpbmtzIG9yIG9wZW4NCiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6 ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuPC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L3RkPg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPGRpdiBjbGFz cz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVyIiBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxz cGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+DQo8aHIgc2l6ZT0iMiIgd2lk dGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjojMUY0OTdE O21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5IaSBUaXJ1LDxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Nv bG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkkgc2hhcmUgdGhlIHNhbWUg Y29uY2VybiB3aXRoIEpvbiBhczo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjojMUY0OTdEO21zby1m YXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjojMUY0 OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5JZiBkb3RzIHNldmVyIHJlc3RhcnRzLCBh bmQgbG9zZXMgYWxsIHRoZSBtaXRpZ2F0aW9uIHN0YXR1cywgdGhlbiBkb3RzIGNsaWVudCBzaG91 bGQgcmVzZW5kIGFsbCB0aGUgYWN0aXZlIG1pdGlnYXRpb24gc3RhdHVzIHRvIGl0LiBUaGVyZSBj YW4gYmUgdHdvIHdheSBmb3IgaXQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDouMjVpbjt0ZXh0LWluZGVudDotLjI1 aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVh c3QtbGFuZ3VhZ2U6WkgtQ04iPjEpPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmO2NvbG9yOiMxRjQ5 N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOw0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOiMx RjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPlJlc2VuZCBtaXRpZ2F0aW9uIHJlcXVl c3RzIGZvciBhbGwgYWN0aXZlIG1pdGlnYXRpb247PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDouMjVpbjt0ZXh0LWlu ZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOiMxRjQ5N0Q7 bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjIpPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmO2Nv bG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkRvdHMgY2xpZW50IHN5 bmMgYWxsIHRoZSBhY3RpdmUgbWl0aWdhdGlvbiBzdGF0dXMgd2l0aCBzZXJ2ZXIuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQ7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1D TiI+SXTigJlzIG5vdCBvbmx5IGFib3V0IHRoZSBvYnNlcnZlIG9wdGlvbi48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5U aGFua3MhPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFn ZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFz dC1sYW5ndWFnZTpaSC1DTiI+Qi5SLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOiMxRjQ5N0Q7bXNv LWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkZyYW5rPG86cD48L286cD48L3NwYW4+PC9wPg0KPGRp dj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBw dDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxz cGFuIGxhbmc9IlpILUNOIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7TWljcm9zb2Z0IFlhSGVp JnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPuWPkeS7tuS6ujwv c3Bhbj48L2I+PGI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O01pY3Jvc29mdCBZYUhl aSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj46PC9zcGFuPjwv Yj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7TWljcm9zb2Z0IFlhSGVpJnF1b3Q7LHNh bnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPg0KIERvdHMgWzxhIGhyZWY9Im1h aWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmciPm1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmc8 L2E+XSA8L3NwYW4+DQo8Yj48c3BhbiBsYW5nPSJaSC1DTiIgc3R5bGU9ImZvbnQtZmFtaWx5OiZx dW90O01pY3Jvc29mdCBZYUhlaSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdl OlpILUNOIj7ku6PooagNCjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90 O01pY3Jvc29mdCBZYUhlaSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOlpI LUNOIj5Lb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5PGJyPg0KPC9zcGFuPjxiPjxzcGFuIGxhbmc9 IlpILUNOIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7TWljcm9zb2Z0IFlhSGVpJnF1b3Q7LHNh bnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPuWPkemAgeaXtumXtDwvc3Bhbj48 L2I+PGI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O01pY3Jvc29mdCBZYUhlaSZxdW90 OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj46PC9zcGFuPjwvYj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7TWljcm9zb2Z0IFlhSGVpJnF1b3Q7LHNhbnMtc2Vy aWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPg0KIDIwMTg8L3NwYW4+PHNwYW4gbGFuZz0i WkgtQ04iIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVvdDssc2Fu cy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+5bm0PC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTomcXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVvdDssc2Fucy1zZXJpZjttc28t ZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+NTwvc3Bhbj48c3BhbiBsYW5nPSJaSC1DTiIgc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O01pY3Jvc29mdCBZYUhlaSZxdW90OyxzYW5zLXNlcmlmO21zby1m YXJlYXN0LWxhbmd1YWdlOlpILUNOIj7mnIg8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O01pY3Jvc29mdCBZYUhlaSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1 YWdlOlpILUNOIj4xODwvc3Bhbj48c3BhbiBsYW5nPSJaSC1DTiIgc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O01pY3Jvc29mdCBZYUhlaSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1 YWdlOlpILUNOIj7ml6U8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O01pY3Jv c29mdCBZYUhlaSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4N CiAxNjo1Nzxicj4NCjwvc3Bhbj48Yj48c3BhbiBsYW5nPSJaSC1DTiIgc3R5bGU9ImZvbnQtZmFt aWx5OiZxdW90O01pY3Jvc29mdCBZYUhlaSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxh bmd1YWdlOlpILUNOIj7mlLbku7bkuro8L3NwYW4+PC9iPjxiPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTomcXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1s YW5ndWFnZTpaSC1DTiI+Ojwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90 O01pY3Jvc29mdCBZYUhlaSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOlpI LUNOIj4NCiBKb24gU2hhbGxvdyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnN1cGpwcy1pZXRmQGpwc2hh bGxvdy5jb20iPnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb208L2E+Jmd0OzsNCjxhIGhyZWY9Im1h aWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFu Z2UuY29tPC9hPjsgPGEgaHJlZj0ibWFpbHRvOmRvdHNAaWV0Zi5vcmciPg0KZG90c0BpZXRmLm9y ZzwvYT48YnI+DQo8L3NwYW4+PGI+PHNwYW4gbGFuZz0iWkgtQ04iIHN0eWxlPSJmb250LWZhbWls eTomcXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5n dWFnZTpaSC1DTiI+5Li76aKYPC9zcGFuPjwvYj48Yj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 JnF1b3Q7TWljcm9zb2Z0IFlhSGVpJnF1b3Q7LHNhbnMtc2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3Vh Z2U6WkgtQ04iPjo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtNaWNy b3NvZnQgWWFIZWkmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+ DQogUmU6IFtEb3RzXSBET1RTIHNlcnZlciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0 aWdhdGlvbnMvQ29uZmlndXJhdGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+SGkg Sm9uLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1 YWdlOlpILUNOIj5QbGVhc2Ugc2VlIGlubGluZSBbVFJdPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpI LUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQi Pg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFF MSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+RnJvbTo8L3NwYW4+ PC9iPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+IERvdHMgWzxhIGhy ZWY9Im1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmciPm1haWx0bzpkb3RzLWJvdW5jZXNAaWV0 Zi5vcmc8L2E+XQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5Kb24gU2hhbGxvdzxicj4NCjxiPlNlbnQ6 PC9iPiBGcmlkYXksIE1heSAxOCwgMjAxOCAyOjE2IFBNPGJyPg0KPGI+VG86PC9iPiBLb25kYSwg VGlydW1hbGVzd2FyIFJlZGR5ICZsdDs8YSBocmVmPSJtYWlsdG86VGlydW1hbGVzd2FyUmVkZHlf S29uZGFATWNBZmVlLmNvbSI+VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbTwvYT4m Z3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iPm1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208L2E+OyA8YSBocmVmPSJtYWlsdG86ZG90c0BpZXRmLm9y ZyI+DQpkb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0RvdHNdIERP VFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1 cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjx0YWJsZSBjbGFzcz0iTXNv Tm9ybWFsVGFibGUiIGJvcmRlcj0iMSIgY2VsbHNwYWNpbmc9IjMiIGNlbGxwYWRkaW5nPSIwIiBz dHlsZT0iYmFja2dyb3VuZDojRjNGRjMzO2JvcmRlcjpzb2xpZCAjOUI5QTg3IDEuNXB0Ij4NCjx0 Ym9keT4NCjx0cj4NCjx0ZCBzdHlsZT0iYm9yZGVyOm5vbmU7cGFkZGluZzouNzVwdCAuNzVwdCAu NzVwdCAuNzVwdCI+DQo8cD48c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtB cmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPkNBVVRJT048L3NwYW4+PC9zdHJv bmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7 Y29sb3I6IzlCOEIzRSI+Ojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJp YWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+IEV4dGVybmFsIGVtYWlsLiBEbyBub3Qg Y2xpY2sgbGlua3Mgb3Igb3Blbg0KIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRo ZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS48L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8ZGl2IGNsYXNzPSJN c29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4g bGFuZz0iRU4tR0IiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+DQo8aHIgc2l6 ZT0iMyIgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9zcGFuPjwvZGl2Pg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPkhpIFRpcnU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBz dHlsZT0iY29sb3I6IzFGNDk3RCI+U2VlIGlubGluZSBbSm9uMl08bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9y OiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+UmVnYXJkczxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdC IiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij5Kb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNC NUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtU YWhvbWEmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+RnJvbTo8 L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj4gRG90 cyBbbWFpbHRvOg0KPGEgaHJlZj0ibWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZyI+ZG90cy1i b3VuY2VzQGlldGYub3JnPC9hPl0gPGI+T24gQmVoYWxmIE9mDQo8L2I+S29uZGEsIFRpcnVtYWxl c3dhciBSZWRkeTxicj4NCjxiPlNlbnQ6PC9iPiAxNyBNYXkgMjAxOCAxNzowNTxicj4NCjxiPlRv OjwvYj4gSm9uIFNoYWxsb3c7IDxhIGhyZWY9Im1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFu Z2UuY29tIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPC9hPjsNCjxhIGhyZWY9Im1haWx0 bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBS ZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0 aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFG NDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+W0pvbjFdIEFncmVlZCB0aGUgRE9UUyBz ZXJ2ZXIgY2Fubm90IHNlbnQgYW55dGhpbmcgdGhhdCBpcyB1bnNvbGljaXRlZCBkdWUgdG8gbG9z cyBvZiBjcnlwdG9ncmFwaGljIHN0YXRlLiZuYnNwOyBIb3dldmVyLCBpZiB0aGUgRE9UUyBzZXJ2 ZXIgY2FuIHNlbmQgYmFjayBpbiBhIHJlc3BvbnNlIHRvIGEgY2xpZW50IHJlcXVlc3QNCiBzb21l dGhpbmcgdGhhdCBzdGF0ZXMg4oCcSSByZXN0YXJ0ZWQgcmVjZW50bHkgQCBzdWNoIGEgdGltZeKA nSwgdGhlIGNsaWVudCB3aWxsIGtub3cgd2hldGhlciB0aGUgbWlzc2luZyBoZWFydGJlYXRzIHdl cmUgZG93biB0byBqdXN0IGEgZmxha3kgbmV0d29yaywgb3IgdGhlIG1pc3NpbmcgaGVhcnRiZWF0 cyB3ZXJlIGR1ZSB0byBhIHNlcnZlciByZXN0YXJ0LCBhbmQgc28gcmUtc3Vic2NyaWJlIG5lZWRl ZCBmb3IgYWxsIHRoZSByZXNvdXJjZXMgdGhhdA0KIHRoZSBjbGllbnQgd2FudHMgdG8gbW9uaXRv ci4mbmJzcDsgSSBkbyBub3Qgd2FudCB0aGUgRE9UUyBjbGllbnQgdG8ga2VlcCBvbiBkb2luZyBy ZS1zdWJzY3JpYmUgY29tcG91bmRpbmcgdGhlIG5ldHdvcmsgZmxha2luZXNzIHdoZW4gdW5kZXIg YXR0YWNrLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxh bmd1YWdlOlpILUNOIj5bUl0gVGhlIGZpcnN0IHR3byBzZW50ZW5jZXMgY29udHJhZGljdCBlYWNo IG90aGVyLiBIb3cgY2FuIHRoZSBzZXJ2ZXIgc2VuZCBhbnkgZGF0YSBvbiB0aGUgb2xkIHNlc3Np b24gPw0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImNvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPltKb24yXSBJ IGFjdHVhbGx5IHdhcyB0aGlua2luZyB0aGF0IHRoZSByZXNwb25zZSB3YXMgc2VudCBhZnRlciB0 aGUgbmV3IHNlc3Npb24gd2FzIGVzdGFibGlzaGVkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1D TiI+QW5kIEkgZG9u4oCZdCB1bmRlcnN0YW5kIHRoZSB2YWx1ZSBvZiBzZW5kaW5nIOKAnEkgcmVz dGFydGVkIHJlY2VudGx5IEBzdWNoIGEgdGltZeKAnSBpbiB0aGUgbmV3IChEKVRMUyBzZXNzaW9u LiwgdGhlIGNsaWVudCBhbnl3YXlzIGhhcyB0byByZXNlbmQgdGhlIGxpc3Qgb2YgYWN0aXZlIG1p dGlnYXRpb25zIGl0IHdpc2hlcyB0byBvYnNlcnZlIGluDQogdGhlIG5ldyBzZXNzaW9uIChpcnJl c3BlY3RpdmUgb2YgdGhlIHJlYXNvbiB0aGUgc2Vzc2lvbiBpcyBkaXNjb25uZWN0ZWQpLiBBIHNl c3Npb24gY291bGQgYmUgZGlzY29ubmVjdGVkIGJlY2F1c2Ugb2YgdmFyaW91cyBvdGhlciByZWFz b25zIChlLmcuIE5BVCByZWxvYWQpLjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPjwv bzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPltKb24yXSZuYnNwOyBP Sywgc28gd2hlbmV2ZXIgYSBuZXcgc2Vzc2lvbiBpcyBzdGFydGVkIGZvciB3aGF0ZXZlciByZWFz b24sIHRoZXJlIG5lZWRzIHRvIGJlIGEgcmVzZW5kIG9mIGFjdGl2ZSBtaXRpZ2F0aW9ucy4mbmJz cDsNCjwvc3Bhbj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28t ZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHBy ZT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1D TiI+W1RSXSBObywgSSBtZWFudCBUaGUgRE9UUyBjbGllbnQgaW4gdGhlIG5ldyAoRClUTFMgc2Vz c2lvbiBoYXMgdG8gc2VuZCBHRVQgcmVxdWVzdCB3aXRoIE9ic2VydmUgb3B0aW9uIHRvIHJlY2Vp dmUgdW5zb2xpY2l0ZWQgbm90aWZpY2F0aW9ucyBvZiBhdHRhY2sgbWl0aWdhdGlvbiBzdGF0dXMg b2YgYWN0aXZlIG1pdGlnYXRpb24gcmVxdWVzdHMgZnJvbSB0aGUgRE9UUyBzZXJ2ZXIuIDxvOnA+ PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtt c28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wcmU+ DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O21zby1mYXJlYXN0LWxhbmd1YWdl OlpILUNOIj4tVGlydTxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6 IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+SG93ZXZlciwgSSBoYXZlIG5vdCBm b3VuZCBhbnl3aGVyZSBpbiB0aGUgc2lnbmFsIC8gcmVxdWlyZW1lbnRzIC8gYXJjaGl0ZWN0dXJl IHdoZXJlIHRoaXMgaXMgc3VnZ2VzdGVkIChidXQgbWF5IGhhdmUgc2VhcmNoZWQgb24gdGhlIHdy b25nIGtleXdvcmRzISkgSSB0aGluayB0aGF0IHRoaXMgbmVlZHMgdG8gYmUgc3RhdGVkDQogc29t ZXdoZXJlLCBldmVuIHRob3VnaCBpdCBpcyBvYnZpb3VzIGlmIHlvdSB0aGluayBhYm91dCBpdC48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+fkpvbjI8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVh c3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4tVGlydTxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFn ZTpaSC1DTiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVy Om5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQu MHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNF MUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48Yj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPkZyb206PC9z cGFuPjwvYj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPiBKb24gU2hh bGxvdyBbPGEgaHJlZj0ibWFpbHRvOnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb20iPm1haWx0bzpz dXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tPC9hPl0NCjxicj4NCjxiPlNlbnQ6PC9iPiBUaHVyc2Rh eSwgTWF5IDE3LCAyMDE4IDg6NTQgUE08YnI+DQo8Yj5Ubzo8L2I+IEtvbmRhLCBUaXJ1bWFsZXN3 YXIgUmVkZHkgJmx0OzxhIGhyZWY9Im1haWx0bzpUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0Fm ZWUuY29tIj5UaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tPC9hPiZndDs7DQo8YSBo cmVmPSJtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSI+bW9oYW1lZC5ib3VjYWRh aXJAb3JhbmdlLmNvbTwvYT47IDxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj4NCmRvdHNA aWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJFOiBbRG90c10gRE9UUyBzZXJ2ZXIg Y3Jhc2gvcmVzdGFydCB3aXRoIE9ic2VydmVkIG1pdGlnYXRpb25zL0NvbmZpZ3VyYXRpb248bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHRhYmxlIGNsYXNzPSJNc29Ob3JtYWxUYWJs ZSIgYm9yZGVyPSIxIiBjZWxsc3BhY2luZz0iMyIgY2VsbHBhZGRpbmc9IjAiIHN0eWxlPSJiYWNr Z3JvdW5kOiNGM0ZGMzM7Ym9yZGVyOnNvbGlkICM5QjlBODcgMS41cHQiPg0KPHRib2R5Pg0KPHRy Pg0KPHRkIHN0eWxlPSJib3JkZXI6bm9uZTtwYWRkaW5nOi43NXB0IC43NXB0IC43NXB0IC43NXB0 Ij4NCjxwPjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzlCOEIzRSI+Q0FVVElPTjwvc3Bhbj48L3N0cm9uZz48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojOUI4 QjNFIj46PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOmJsYWNrIj4gRXh0ZXJuYWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5r cyBvciBvcGVuDQogYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBh bmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0KPC90YWJsZT4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIg YWxpZ249ImNlbnRlciIgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBsYW5nPSJFTi1H QiIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4NCjxociBzaXplPSIzIiB3aWR0 aD0iMTAwJSIgYWxpZ249ImNlbnRlciI+DQo8L3NwYW4+PC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SGkg VGlydSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29s b3I6IzFGNDk3RCI+U2VlIGlubGluZSBbSm9uMV08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+UmVnYXJkczxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0i Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Kb248bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4w cHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVv dDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+RnJvbTo8L3NwYW4+PC9i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZx dW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj4gRG90cyBbbWFpbHRv Og0KPGEgaHJlZj0ibWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZyI+ZG90cy1ib3VuY2VzQGll dGYub3JnPC9hPl0gPGI+T24gQmVoYWxmIE9mDQo8L2I+S29uZGEsIFRpcnVtYWxlc3dhciBSZWRk eTxicj4NCjxiPlNlbnQ6PC9iPiAxNyBNYXkgMjAxOCAxNjowMzxicj4NCjxiPlRvOjwvYj4gSm9u IFNoYWxsb3c7IDxhIGhyZWY9Im1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIj5t b2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPC9hPjsNCjxhIGhyZWY9Im1haWx0bzpkb3RzQGll dGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0RvdHNd IERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25m aWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3Vh Z2U6WkgtQ04iPkhpIEpvbiw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28t ZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+VGhpcyBzY2VuYXJpbyBpcyBhbHJlYWR5IGRpc2N1c3Nl ZCBpbiBTZWN0aW9uIDQuNy4gV2hlbiB0aGUgRERvUyBtaXRpZ2F0aW9uIGlzIGluIHByb2dyZXNz IGFuZCBhZnRlciB0aGUg4oCYbWlzc2luZy1oYi1hbGxvd2Vk4oCZIHRocmVzaG9sZCBpcyByZWFj aGVkLCB0aGUgRE9UUyBjbGllbnQgd2lsbCBjb250aW51ZSB0byB1c2UgdGhlIGV4aXN0aW5nDQog KEQpVExTIHNlc3Npb24gdG8gc2VuZCBoZWFydGJlYXQgcmVxdWVzdHMgdG8gdGhlIHNlcnZlciBh bmQgYXQgdGhlIHNhbWUgdGltZSB0cnkgdG8gZXN0YWJsaXNoIGEgbmV3IChEKVRMUyBzZXNzaW9u IHdpdGggRE9UUyBzZXJ2ZXIuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpa SC1DTiI+W0pvbjFdIEkgZnVsbHkgdW5kZXJzdGFuZCB0aGF0PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdl OlpILUNOIj5GdXJ0aGVyLCBpZiB0aGUgc2VydmVyIHJlc3RhcnRzLCAoRClUTFMgc3RhdGUgaXMg bG9zdCBvbiB0aGUgc2VydmVyIGFuZCB0aGUgc2VydmVyIGRvZXMgbm90IGhhdmUgdGhlIGNyeXB0 b2dyYXBoaWMgc3RhdGUgdG8gc2VuZCDigJhyZS1zdWJzY3JpYmXigJkgb24gdGhlIG9sZCBzZXNz aW9uLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImNvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPltKb24xXSBB Z3JlZWQgdGhlIERPVFMgc2VydmVyIGNhbm5vdCBzZW50IGFueXRoaW5nIHRoYXQgaXMgdW5zb2xp Y2l0ZWQgZHVlIHRvIGxvc3Mgb2YgY3J5cHRvZ3JhcGhpYyBzdGF0ZS4mbmJzcDsgSG93ZXZlciwg aWYgdGhlIERPVFMgc2VydmVyIGNhbiBzZW5kIGJhY2sgaW4gYSByZXNwb25zZSB0byBhIGNsaWVu dCByZXF1ZXN0DQogc29tZXRoaW5nIHRoYXQgc3RhdGVzIOKAnEkgcmVzdGFydGVkIHJlY2VudGx5 IEAgc3VjaCBhIHRpbWXigJ0sIHRoZSBjbGllbnQgd2lsbCBrbm93IHdoZXRoZXIgdGhlIG1pc3Np bmcgaGVhcnRiZWF0cyB3ZXJlIGRvd24gdG8ganVzdCBhIGZsYWt5IG5ldHdvcmssIG9yIHRoZSBt aXNzaW5nIGhlYXJ0YmVhdHMgd2VyZSBkdWUgdG8gYSBzZXJ2ZXIgcmVzdGFydCwgYW5kIHNvIHJl LXN1YnNjcmliZSBuZWVkZWQgZm9yIGFsbCB0aGUgcmVzb3VyY2VzIHRoYXQNCiB0aGUgY2xpZW50 IHdhbnRzIHRvIG1vbml0b3IuJm5ic3A7IEkgZG8gbm90IHdhbnQgdGhlIERPVFMgY2xpZW50IHRv IGtlZXAgb24gZG9pbmcgcmUtc3Vic2NyaWJlIGNvbXBvdW5kaW5nIHRoZSBuZXR3b3JrIGZsYWtp bmVzcyB3aGVuIHVuZGVyIGF0dGFjay48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFn ZTpaSC1DTiI+fkpvbjE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFy ZWFzdC1sYW5ndWFnZTpaSC1DTiI+LVRpcnU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2 Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0 O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNw YW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj5Gcm9tOjwvc3Bhbj48L2I+PHNw YW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj4gSm9uIFNoYWxsb3cgWzxhIGhy ZWY9Im1haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tIj5tYWlsdG86c3VwanBzLWlldGZA anBzaGFsbG93LmNvbTwvYT5dDQo8YnI+DQo8Yj5TZW50OjwvYj4gVGh1cnNkYXksIE1heSAxNywg MjAxOCAxOjIxIFBNPGJyPg0KPGI+VG86PC9iPiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5ICZs dDs8YSBocmVmPSJtYWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbSI+VGly dW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbTwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRv Om1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iPm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5j b208L2E+OyA8YSBocmVmPSJtYWlsdG86ZG90c0BpZXRmLm9yZyI+DQpkb3RzQGlldGYub3JnPC9h Pjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSRTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3Rh cnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPGRpdj4NCjx0YWJsZSBjbGFzcz0iTXNvTm9ybWFsVGFibGUiIGJvcmRlcj0i MSIgY2VsbHNwYWNpbmc9IjMiIGNlbGxwYWRkaW5nPSIwIiBzdHlsZT0iYmFja2dyb3VuZDojRjNG RjMzO2JvcmRlcjpzb2xpZCAjOUI5QTg3IDEuNXB0Ij4NCjx0Ym9keT4NCjx0cj4NCjx0ZCBzdHls ZT0iYm9yZGVyOm5vbmU7cGFkZGluZzouNzVwdCAuNzVwdCAuNzVwdCAuNzVwdCI+DQo8cD48c3Ry b25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiM5QjhCM0UiPkNBVVRJT048L3NwYW4+PC9zdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzlCOEIzRSI+Ojwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjpibGFjayI+IEV4dGVybmFsIGVtYWlsLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3Blbg0K IGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhl IGNvbnRlbnQgaXMgc2FmZS48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0Fy aWFsJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvdGQ+DQo8L3Ry Pg0KPC90Ym9keT4NCjwvdGFibGU+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50 ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJt c28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+DQo8aHIgc2l6ZT0iMyIgd2lkdGg9IjEwMCUiIGFs aWduPSJjZW50ZXIiPg0KPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhpIFRpcnUsPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0Ii IHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi Pkl0IGlzIGEgY29ybmVyIHJlY292ZXJ5IGNhc2UuJm5ic3A7IFRoZSBET1RTIGNsaWVudCBjYW4g ZGV0ZWN0IHRoYXQgdGhlIERPVFMgc2VydmVyIGhhcyBnb25lIGF3YXkgKHVzaW5nIGhlYXJ0YmVh dHMpIGFuZCByZS1zdWJzY3JpYmUgdG8gYWxsIHRoZSByZXNvdXJjZXMgdGhhdCB0aGUgRE9UUyBj bGllbnQgd2FudHMgdG8gT2JzZXJ2ZSBvbiBkZXRlY3Rpb24NCiB0aGF0IHRoZSBET1RTIHNlcnZl ciBpcyBiYWNrPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPkhvd2V2ZXIsIHdoZW4gbWl0aWdhdGluZywgdGhlcmUgaXMgYSBsaWtl bGlob29kIHRoYXQgaGVhcnRiZWF0cyB3aWxsIHRpbWUgb3V0IGFuZCBJIGFtIG5vdCBzdXJlIHRo YXQgaXQgaXMgd2lzZSB0byDigJxyZS1zdWJzY3JpYmXigJ0gd2hlbiB0aGUgY29ubmVjdGlvbnMg YXJlIHJlLWVzdGFibGlzaGVkIGFzIHRoZSBuZXR3b3JrIHBhdGggbWF5IHN0aWxsDQogYmUgZmxh a3kgYW5kIGFkZGluZyBleHRyYSB0cmFmZmljIG1heSBiZSBwcm9ibGVtYXRpYy4mbmJzcDsgTXkg c3VnZ2VzdGlvbiBvZiBhbiBlcG9jaCB0aW1lIGJlaW5nIHJlcG9ydGVkIGJ5IHRoZSBET1RTIHNl cnZlciB3YXMgYSB3YXkgb2YgZGV0ZXJtaW5pbmcgd2hldGhlciDigJxyZS1zdWJzY3JpYmXigJ0g d2FzIHJlcXVpcmVkIG9yIG5vdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+UmVnYXJkczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Kb248bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGlu ZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1z ZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5z LXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj4gRG90cyBbbWFpbHRvOg0KPGEgaHJl Zj0ibWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZyI+ZG90cy1ib3VuY2VzQGlldGYub3JnPC9h Pl0gPGI+T24gQmVoYWxmIE9mDQo8L2I+S29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeTxicj4NCjxi PlNlbnQ6PC9iPiAxNiBNYXkgMjAxOCAxNjowNTxicj4NCjxiPlRvOjwvYj4gPGEgaHJlZj0ibWFp bHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iPm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5n ZS5jb208L2E+OyBKb24gU2hhbGxvdzsNCjxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5k b3RzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0RvdHNdIERPVFMgc2Vy dmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9u PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04i PkkgZG9u4oCZdCBnZXQgdGhlIHByb2JsZW0uIElmIHRoZSBzZXJ2ZXIgcmVzdGFydHMsIChEKVRM UyBzdGF0ZSB3aWxsIGJlIGxvc3QgYW5kIHNlcnZlciB3aWxsIHJlamVjdCBoZWFydGJlYXQgcmVx dWVzdHMgZnJvbSB0aGUgY2xpZW50IChlaXRoZXIgc2lsZW50bHkgb3Igc2VuZCBhIGZhdGFsIGFs ZXJ0IHRvIHRoZSBjbGllbnQpLiBET1RTIGNsaWVudA0KIHdpbGwgaGF2ZSB0byBmb2xsb3cgdGhl IHN0ZXBzIGluIDxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRm LWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkjc2VjdGlvbi00LjciPg0KaHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOSNzZWN0aW9uLTQuNzwv YT4gdG8gcmUtZXN0YWJsaXNoIChEKVRMUyBzZXNzaW9uIHdpdGggdGhlIERPVFMgc2VydmVyLg0K PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6 WkgtQ04iPi1UaXJ1PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOlpILUNOIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBi bHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0 IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJtc28t ZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJtc28t ZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+IERvdHMgWzxhIGhyZWY9Im1haWx0bzpkb3RzLWJvdW5j ZXNAaWV0Zi5vcmciPm1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XQ0KPGI+T24gQmVo YWxmIE9mIDwvYj48YSBocmVmPSJtYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSI+ bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTwvYT48YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVz ZGF5LCBNYXkgMTYsIDIwMTggNzoxNSBQTTxicj4NCjxiPlRvOjwvYj4gSm9uIFNoYWxsb3cgJmx0 OzxhIGhyZWY9Im1haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tIj5zdXBqcHMtaWV0ZkBq cHNoYWxsb3cuY29tPC9hPiZndDs7DQo8YSBocmVmPSJtYWlsdG86ZG90c0BpZXRmLm9yZyI+ZG90 c0BpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtEb3RzXSBET1RTIHNlcnZl ciBjcmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8dGFibGUgY2xhc3M9Ik1zb05vcm1hbFRh YmxlIiBib3JkZXI9IjEiIGNlbGxzcGFjaW5nPSIzIiBjZWxscGFkZGluZz0iMCIgc3R5bGU9ImJh Y2tncm91bmQ6I0YzRkYzMztib3JkZXI6c29saWQgIzlCOUE4NyAxLjVwdCI+DQo8dGJvZHk+DQo8 dHI+DQo8dGQgc3R5bGU9ImJvcmRlcjpub25lO3BhZGRpbmc6Ljc1cHQgLjc1cHQgLjc1cHQgLjc1 cHQiPg0KPHA+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojOUI4QjNFIj5DQVVUSU9OPC9zcGFuPjwvc3Ryb25nPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5 QjhCM0UiPjo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiBFeHRlcm5hbCBlbWFpbC4gRG8gbm90IGNsaWNrIGxp bmtzIG9yIG9wZW4NCiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVy IGFuZCBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L3RkPg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFs IiBhbGlnbj0iY2VudGVyIiBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIGxhbmc9IkZS IiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPg0KPGhyIHNpemU9IjMiIHdpZHRo PSIxMDAlIiBhbGlnbj0iY2VudGVyIj4NCjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5SZS0sPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPlBsZWFzZSBzZWUgaW5saW5lLg0K PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkNoZWVycyw8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPk1lZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1 ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAw aW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5nPSJGUiIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMt c2VyaWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlIiPkRlJm5ic3A7Ojwvc3Bhbj48L2I+PHNwYW4g bGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9t YSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxhbmd1YWdlOkZSIj4gSm9uIFNoYWxsb3cg WzxhIGhyZWY9Im1haWx0bzpzdXBqcHMtaWV0ZkBqcHNoYWxsb3cuY29tIj5tYWlsdG86c3VwanBz LWlldGZAanBzaGFsbG93LmNvbTwvYT5dDQo8YnI+DQo8Yj5FbnZvecOpJm5ic3A7OjwvYj4gbWVy Y3JlZGkgMTYgbWFpIDIwMTggMTQ6NDI8YnI+DQo8Yj7DgCZuYnNwOzo8L2I+IEJPVUNBREFJUiBN b2hhbWVkIElNVC9PTE47IDxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYu b3JnPC9hPjxicj4NCjxiPk9iamV0Jm5ic3A7OjwvYj4gUkU6IFtEb3RzXSBET1RTIHNlcnZlciBj cmFzaC9yZXN0YXJ0IHdpdGggT2JzZXJ2ZWQgbWl0aWdhdGlvbnMvQ29uZmlndXJhdGlvbjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJGUiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5IaSBNZWQs PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPlNlZSBpbmxpbmUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlJlZ2FyZHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Sm9uPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6 My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2Vy aWY7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tR0IiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1z ZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+IERvdHMgW21haWx0bzoNCjxhIGhyZWY9 Im1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmciPmRvdHMtYm91bmNlc0BpZXRmLm9yZzwvYT5d IDxiPk9uIEJlaGFsZiBPZg0KPC9iPjxhIGhyZWY9Im1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBv cmFuZ2UuY29tIj5tb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPC9hPjxicj4NCjxiPlNlbnQ6 PC9iPiAxNiBNYXkgMjAxOCAxMjo1NTxicj4NCjxiPlRvOjwvYj4gSm9uIFNoYWxsb3c7IDxhIGhy ZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1Ympl Y3Q6PC9iPiBSZTogW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZl ZCBtaXRpZ2F0aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJG UiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDs7Y29sb3I6YmxhY2siPkhpIEpvbiwNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIi IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7O2NvbG9yOmJsYWNrIj5QbGVhc2Ugc2VlIGlubGluZS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5DaGVlcnMsPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5NZWQ8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJG UiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4g MGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRv cDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmO21zby1mYXJlYXN0LWxh bmd1YWdlOkZSIj5EZSZuYnNwOzo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkZSIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZjtt c28tZmFyZWFzdC1sYW5ndWFnZTpGUiI+IERvdHMgWzxhIGhyZWY9Im1haWx0bzpkb3RzLWJvdW5j ZXNAaWV0Zi5vcmciPm1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XQ0KPGI+RGUgbGEg cGFydCBkZTwvYj4gSm9uIFNoYWxsb3c8YnI+DQo8Yj5FbnZvecOpJm5ic3A7OjwvYj4gbWVyY3Jl ZGkgMTYgbWFpIDIwMTggMTI6MjQ8YnI+DQo8Yj7DgCZuYnNwOzo8L2I+IDxhIGhyZWY9Im1haWx0 bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4NCjxiPk9iamV0Jm5ic3A7Ojwv Yj4gW0RvdHNdIERPVFMgc2VydmVyIGNyYXNoL3Jlc3RhcnQgd2l0aCBPYnNlcnZlZCBtaXRpZ2F0 aW9ucy9Db25maWd1cmF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+SGkgdGhl cmUsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5Gb3IgdGhlIHNpZ25hbCBjaGFubmVsLCBpdCBpcyBlYXN5 IHRvIG1haW50YWluIGEgcGVyc2lzdGVudCBsaXN0IG9mIGFjdGl2ZSBtaXRpZ2F0aW9ucy4mbmJz cDsgU2hvdWxkIHRoZSBET1RTIHNlcnZlciAodW5leHBlY3RlZGx5KSBzdG9wIGFuZCByZXN0YXJ0 LCB0aGVuIGl0IGlzIGVhc3kgdG8gcmVidWlsZCB0aGUgY3VycmVudCBhY3RpdmUgbWl0aWdhdGlv bnMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPltN ZWRdIFRoZSBsaXN0IG9mIGFjdGl2ZSBtaXRpZ2F0aW9ucyBpcyB0aGUg4oCcY29yZeKAnSBzdGF0 ZSBkYXRhIHRvIGJlIG1haW50YWluZWQgYnkgYSBzZXJ2ZXIuIElmIHdlIGFzc3VtZSB0aGF0IGxp c3QgY2FuIGJlIHJlbGlhYmx5IHJlYnVpbHQsIHRoZW4gdGhlcmUgaXMNCiBubyBleHRlbnNpb24g bmVlZGVkIHRvIHRoZSBzaWduYWwgY2hhbm5lbCB0byBoYW5kbGUgdGhpcyBmYWlsdXJlIGNhc2Uu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPltKb25dIEFncmVlZC4mbmJzcDsgVGhpcyB3YXMganVzdCBtZSBidWlsZGluZyB1cCB0 aGUgYmFja2dyb3VuZCB0byB0aGUgc2NlbmFyaW8uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiI+SG93ZXZlciwgdG8gcmVidWlsZCB0aGUgbGlzdCBvZiBhY3RpdmUgT2Jz ZXJ2YXRpb25zIG9mIHRoZSBjdXJyZW50IG1pdGlnYXRpb25zIC8gY29uZmlndXJhdGlvbiBjaGFu Z2VzIGlzIGNvbnNpZGVyYWJseSBtb3JlIGRpZmZpY3VsdCBhcyB0aGUgRE9UUyBzZXJ2ZXIgd291 bGQgYWxzbyBuZWVkIHRvIG1haW50YWluIGEgbGlzdCBvZiBjbGllbnQgSVBzL3NvdXJjZSBwb3J0 cyBldGMuDQogYWxvbmcgd2l0aCBUb2tlbnMgYW5kIFF1ZXJpZXMgYW5kIChEKVRMUyBzdGF0ZSBz byB0aGF0IHVuc29saWNpdGVkIE9ic2VydmUgcmVzcG9uc2VzIGNhbiBjb250aW51ZSB0byBiZSBz ZW50IGJhY2sgdG8gdGhlIGNsaWVudHMuJm5ic3A7IEkgZG9u4oCZdCByZWFsbHkgdGhpbmsgdGhh dCB0aGlzIGlzIGEgcHJhY3RpY2FsIGFzay48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gRmlyc3QsIHRoaXMgY2FuIGJlIGNvbnNpZGVyZWQg YXMgZGVwbG95bWVudC1zcGVjaWZpYy4gQXMgc3VjaCBpbiBzb21lIGRlcGxveW1lbnRzLCB0aGVy ZSBpcyBubyBuZWVkIHRvIHN1cHBvcnQgYXV0b21hdGljIG1lYW5zIHRvIGRldGVjdCBzdGF0ZSBs b3NzDQogYXQgdGhlIHNlcnZlciBzaWRlLiBTZWNvbmQsIGlzIGl0IHJlYWxseSBwcm9ibGVtYXRp YyBmb3IgdGhlIEREb1MgbWl0aWdhdGlvbiB0aGF0IGxpc3QgaXMgbG9zdCBieSBhIHNlcnZlcj8g SSBndWVzcywgdGhlIGFuc3dlciBpcyBubyBpZiB3ZSBhc3N1bWUgdGhlIGxpc3Qgb2YgbWl0aWdh dGlvbnMgdGhlbXNlbHZlcyBpcyBtYWludGFpbmVkLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25dIE15IGNvbmNlcm4g aXMgdGhhdCB0aGUgRE9UUyBjbGllbnRzIHdvdWxkIG5vdCBzZWUgdGhlIGNoYW5nZSBpbiBtaXRp Z2F0aW9uIHN0YXRlLCBvciB3b3VsZCBub3Qgc2VlIHRoYXQgdGhlcmUgaXMgYSBuZXcgc2lnbmFs IGNoYW5uZWwgY29uZmlndXJhdGlvbiAoaWYgdGhleSB3ZXJlIGJlaW5nIE9ic2VydmVkKS4gVGhl IERPVFMgY2xpZW50L3NlcnZlcg0KIHdvdWxkIGJlIG91dCBvZiBzeW5jIHdpdGggd2hhdCBpcyBo YXBwZW5pbmcgYW5kIHRoZSBET1RTIGNsaWVudCB3b3VsZCBub3QgbmVjZXNzYXJpbHkga25vdyB0 aGF0IGl0IGhhcyB0byB0YWtlIHNvbWUgYWN0aW9uIHRvIGdldCBiYWNrIHRvIHRoZSBzdGF0ZSBi ZWZvcmUgdGhlIERPVFMgc2VydmVyIG91dGFnZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gVGhlIGRvdHMgY2xpZW50IGhhcyBvdGhlciBt ZWFucyB0byBrbm93IHRoZSBtaXRpZ2F0aW9uIHN0YXRlLiBUaGUgRE9UUyBjbGllbnQgY2FuIG9i c2VydmUgdGhlIHN0YXR1cyBsb2NhbGx5IChhbmQgcmVwb3J0IGl0IHRvIHRoZSBzZXJ2ZXIpIG9y IHNlbmQgYQ0KIHJlcXVlc3QgdG8gcmV0cmlldmUgdGhlIHN0YXR1cyBmcm9tIHRoZSBzZXJ2ZXIu IFRoZSBvdXQgb2Ygc3luY2ggaW4gb2JzZXJ2ZSBpcyBub3QgdGhhdCBjcml0aWNhbCBmb3IgbWl0 aWdhdGluZyBERG9TIGF0dGFja3MuICZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tR0IiPkFzIHRoZSBET1RTIHNlcnZlciByZXN0YXJ0ZWQsIGV4aXN0aW5nIChEKVRM UyBzZXNzaW9ucyB1c2VkIGJ5IHRoZSBET1RTIGNsaWVudCB3aWxsIGZhaWwuJm5ic3A7IFNvLCB0 aGUgaGVhcnRiZWF0IG1lY2hhbmlzbSB3aWxsIGV2ZW50dWFsbHkgdGltZSBvdXQgJm5ic3A7YW5k IEkgZ3Vlc3MgdGhhdCB0aGUgRE9UUyBjbGllbnQgc2hvdWxkIGRldGVjdCB0aGlzIGFuZCByZS1k byBhbGwgb2YgdGhlDQogT2JzZXJ2ZSByZXF1ZXN0cyAoYWxvbmcgd2l0aCBtYWtpbmcgc3VyZSB0 aGF0IGFsbCB0aGUgYWN0aXZlIG1pdGlnYXRpb25zIGFyZSBhcyBleHBlY3RlZCkuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPltNZWRdIEluY2x1ZGlu ZyBjbGllbnRzIGluIG5ldHdvcmtzIHVuZGVyIGFjdGl2ZSBhdHRhY2tzPyBJc27igJl0IHRoaXMg b3ZlcmxvYWRpbmcgdGhlIHNlcnZlciB3aGlsZSBkZWFsaW5nIHdpdGggb25nb2luZyBhdHRhY2tz PyAmbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0i Y29sb3I6IzFGNDk3RCI+W0pvbl0gWWVzLCBpdCB3b3VsZCDigJMgaGVuY2UgSSBkaWQgbm90IHJl YWxseSB3YW50IHRvIGhhdmUgdG8gZG8gdGhpcyB3aGVuZXZlciBhIGhlYXJ0YmVhdCBmYWlsZWQs IGJ1dCBvbmx5IGRvIGl0IHdoZW4gdGhlIERPVFMgY2xpZW50IOKAnGtub3dz4oCdIHRoYXQgdGhl IHNlcnZlciBoYXMgaGFkIGFuIG91dGFnZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIj5Ib3dldmVyIGluIFBlYWNlIHRpbWUgSGVhcnRiZWF0cyBtYXkgbm90IGJlaW5n IHVzZWQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tR0IiPkhvd2V2ZXIgYXQgTWl0aWdhdGlvbiB0aW1lIGhlYXJ0YmVhdHMgbWF5IGZh aWwuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5Xb3VsZCBpdCBtYWtlIHNlbnNlIHRvIGFkZCB0byB0aGUg c2lnbmFsIGNoYW5uZWwgYW4gZXh0cmEgcGFyYW1ldGVyIHRoYXQgdGhlIERPVFMgc2VydmVyIGNh biBzZW5kIHRvIHRoZSBjbGllbnQgaW4gYW55IHJlc3BvbnNlIGluIHRoZSBmb3JtIG9mDQo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiI+4oCcbGFzdC1yZXN0YXJ0ZWTigJ0gOiBzZWNvbmRzLXNpbmNlLWVwb2NoPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPldoaWNo IHRoZSBjbGllbnQgY2FuIHVzZSB0byBkZXRlY3RlZCB0aGUgcmVzdGFydC48c3BhbiBzdHlsZT0i Y29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjpibGFjayI+W01lZF0gV2UgdXNlZCB0byBoYXZlIGFuIGVwb2NoLWJhc2VkIGFwcHJv YWNoIGZvciBhIHN0YXRlZnVsbCBzZXJ2aWNlIChzZWUNCjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMu aWV0Zi5vcmcvaHRtbC9yZmM2ODg3I3NlY3Rpb24tOC41Ij5odHRwczovL3Rvb2xzLmlldGYub3Jn L2h0bWwvcmZjNjg4NyNzZWN0aW9uLTguNTwvYT4pLiBUaGUgZGV0YWlscyBhcmUgbm90IHJlc3Ry aWN0ZWQgdG8ganVzdCBzaWduYWxsaW5nIHRoZSBlcG9jaCB2YWx1ZSBidXQgdG8gdGhlIGxvZ2lj IHRvIGhhbmRsZSBpdCBhdCB0aGUgY2xpZW50IHNpZGUuIEZ1cnRoZXIsIHRoZXJlIGFyZSBzb21l IGFzcGVjdHMNCiB0byBiZSB0YWtlbiBpbnRvIGFjY291bnQgd2hlbiBjb25maWd1cmluZyByZWR1 bmRhbmN5IHNlcnZlcnMgd2hlbiBhbiBhbnljYXN0IGFkZHJlc3MgaXMgdXNlZC4gSWYgdGhlIHNh bWUgaW5pdGlhbCBlcG9jaCB2YWx1ZSBpcyBjb25maWd1cmVkLCB0aGUgY2xpZW50IG1heSBub3Qg ZGV0ZWN0IGEgYmFja3VwIHNlcnZlciBpcyB1c2VkIGFuZCBoZW5jZSBtYXkgbm90IHJlaW5zdGFs bCBzdGF0ZS4uLiBBIHR3ZWFrIGlzIHRvIGNvbmZpZ3VyZSBkaXN0aW5jdA0KIGVwb2NoIHZhbHVl cyAoZS5nLiwgJiM0MzsvLSAyNGggZGlmZmVyZW5jZSBiZXR3ZWVuIGEgc2VydmVyIHJlZHVuZGFu Y3kgZ3JvdXApLiA8bzpwPg0KPC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9y OmJsYWNrIj5UaGUgZXBvY2ggaXMganVzdGlmaWVkIGZvciA2ODg3IGJlY2F1c2Ugd2Ugd2FudGVk IHRvIHJlY292ZXIgc3RhdGUgbG9zcywgd2hpbGUgaW4gdGhlIERPVFMgY2FzZSB3ZSBkb27igJl0 IGhhdmUgdGhlIHNhbWUgbW9kZWwgZ2l2ZW4gdGhhdCwgYXMgeW91IHJpZ2h0ZnVsbHkNCiBzYWlk IGFib3ZlLCB0aGUgY3VycmVudCBhY3RpdmUgbWl0aWdhdGlvbnMgY2FuIGJlIHJlYnVpbHQgYXQg dGhlIHNlcnZlciBzaWRlIHdpdGhvdXQgaW52b2x2aW5nIGNsaWVudHMuICZuYnNwOzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25d IFNvIHRoaXMgbWV0aG9kIHNldHMgZXBvY2ggdGltZSBiYWNrIHRvIDAgd2hlbmV2ZXIgdGhlcmUg aXMgYSByZXN0YXJ0LA0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iY29sb3I6Ymxh Y2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gWWVzLiBUaGUgZXBvY2ggaXMgcmVzZXQg ZWFjaCB0aW1lIHRoZSBzdGF0ZSBpcyBsb3N0IGF0IHRoZSBzZXJ2ZXIgc2lkZS4NCjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5yYXRoZXIg dGhhdCByZXBvcnQgb24gdGhlIG51bWJlciBvZiBzZWNvbmRzIHNpbmNlIEphbiAxIDE5NzAuICZu YnNwOyZuYnNwO1RoYXQgSSBjYW4gaGFuZGxlLiZuYnNwOyBIb3dldmVyIGFueWNhc3QgKHRob3Vn aCByZWR1bmRhbnQgc2VydmVycyBhcmUgY3VycmVudGx5IG91dCBvZiBzcGVjKSB3aGVyZSAyIG9y IG1vcmUgc2VydmVycyByZXN0YXJ0IGFuZCB1cGRhdGUNCiB0aGUgc3RhcnQgdGltZSBhdCBleGFj dGx5IHRoZSBzYW1lIHRpbWUgaXMgcG9zc2libGUsIGJ1dCB1bmxpa2VseS4mbmJzcDsgVGhpcyBj b3VsZCBiZSBoYW5kbGVkIGJ5IHRoZSBhbnljYXN0IHNlcnZlcnMgY29tbXVuaWNhdGluZyBhbmQg c2VlaW5nIHRoZXkgYm90aCBoYXZlIHRoZSBzYW1lIHN0YXJ0IHRpbWUgc28gb25lIGJhY2tzIG9m ZiAoaW4gdGltZSB0ZXJtcykuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPltKb25dIEnigJltIGp1c3QgaW50ZXJlc3RlZCBpbiBo b3cgdG8gcmVjb3ZlciBPYnNlcnZlIGxvc3MuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5bTWVkXSBJ 4oCZbSBub3QgY29udmluY2VkIHRoaXMgaXMgcmVhbGx5IG5lZWRlZCBnaXZlbiB0aGF0IGFjdGl2 ZSBtaXRpZ2F0aW9ucyBhcmUgbm90IGNvbmNlcm5lZCB3aXRoIHRoaXMgZmFpbHVyZSBzY2VuYXJp by4gJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+Jm5ic3A7 IEkgYXBwcmVjaWF0ZSBpbiBwZWFjZSB0aW1lIHRoZXJlIG1heSBub3QgYmUgYW55IERPVFMgY2xp ZW50IHJlcXVlc3RzIChvciBoZWFydGJlYXQpIGZvciBhIGxvbmcgdGltZS4uLjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiI+SeKAmW0gb3BlbiB0byBzdWdnZXN0aW9ucy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPlJl Z2FyZHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkpvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t R0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i b2R5Pg0KPC9odG1sPg0K --_000_BN6PR16MB14257DA03660C3F5697BFFDBEA6E0BN6PR16MB1425namp_-- From nobody Mon May 28 02:49:47 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 690CB127078 for ; Mon, 28 May 2018 02:49:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.311 X-Spam-Level: X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pqPUmJaBRw2X for ; Mon, 28 May 2018 02:49:43 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 099121270A0 for ; Mon, 28 May 2018 02:49:42 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1527500971; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Office365-Filtering-Correlation-Id:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=afxWeIwdIQ54rNRlNRYSDnz2Y49kVrW1gMh/Jf 11Chs=; b=FbMmxubDaygbXwijGgBu1Hx42ZRJInvlbO64MZuU MWWk0pjBWNXMEPJ/xUCxku63ilGRBqU5At/96a1LPc7+5Q6fLx l5cuBonjjs12osIPnWWlyq2gntGM4bw/Vrt7hFcCz/l1HBjrIO JFoWR9F8ieWJLMUkbQtZttqCOXb5CGM= Received: from DNVEXAPP1N05.corpzone.internalzone.com (unknown [10.44.48.89]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 0cb3_14f9_5254498a_6ef3_45e3_a836_0f3406df9008; Mon, 28 May 2018 04:49:30 -0500 Received: from DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 28 May 2018 03:49:02 -0600 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Mon, 28 May 2018 03:49:01 -0600 Received: from NAM01-BN3-obe.outbound.protection.outlook.com (10.44.176.241) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 28 May 2018 03:49:01 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB1506.namprd16.prod.outlook.com (10.172.208.8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.797.11; Mon, 28 May 2018 09:48:58 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::601e:a909:b9fe:31bd]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::601e:a909:b9fe:31bd%8]) with mapi id 15.20.0797.017; Mon, 28 May 2018 09:48:58 +0000 From: "Konda, Tirumaleswar Reddy" To: Jon Shallow , Benjamin Kaduk , "mohamed.boucadair@orange.com" , "dots@ietf.org" Thread-Topic: [Dots] TLS APLN extension Thread-Index: AdPw2PQOXpzyKiqHQ7+v5FEn8F2ThwAyFv1gACMjQgAAEIhhgAD2J+BAAAW7tYAAASl3AA== Date: Mon, 28 May 2018 09:48:58 +0000 Message-ID: References: <13d301d3f0d8$f66f7c60$e34e7520$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1E28F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <20180523003451.GG10597@kduck.kaduk.org> <15bc01d3f26f$fecf3380$fc6d9a80$@jpshallow.com> <18b001d3f65f$8d47df20$a7d79d60$@jpshallow.com> In-Reply-To: <18b001d3f65f$8d47df20$a7d79d60$@jpshallow.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB1506; 7:eu73Jj0ib26zc1TM0f3YWRWmOInhdb6KboZmYBBzHFVk2bNo/R8sxUIdFPKCCjTVqwQDxxVg2DKd87/ej3X8WHH0e2ey6WI4sp8gSrVakBr8VHJ3rXZuPSIpDTo1vHjSgaOZnm4VGhYp4MVN9SgyJ1pXPxdCtRDzMtOs3Oy7YcoW2i4R7X86QrY7kuO95dXst9+zEdIB34MO2MvTGUcM9LNQJxA/871sW3V0xxCeagZQyaf0KP0H3olTql3aslr+ x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB1506; x-ms-traffictypediagnostic: BN6PR16MB1506: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(18271650672692)(240460790083961)(123452027830198); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(10201501046)(3231254)(944501410)(52105095)(149027)(150027)(6041310)(20161123558120)(20161123564045)(20161123560045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011)(7699016); SRVR:BN6PR16MB1506; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB1506; x-forefront-prvs: 06860EDC7B x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39840400004)(346002)(39380400002)(396003)(376002)(366004)(199004)(189003)(32952001)(13464003)(57704003)(105586002)(93886005)(3660700001)(110136005)(106356001)(2906002)(3280700002)(3846002)(316002)(6116002)(11346002)(476003)(486006)(53936002)(446003)(6246003)(2171002)(97736004)(6436002)(229853002)(66066001)(9686003)(6306002)(2900100001)(14454004)(5660300001)(305945005)(74316002)(7736002)(72206003)(966005)(81166006)(81156014)(8676002)(8936002)(55016002)(80792005)(25786009)(478600001)(33656002)(2201001)(186003)(86362001)(6506007)(2501003)(102836004)(26005)(59450400001)(53546011)(76176011)(7696005)(68736007)(99286004)(5250100002)(217873001)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB1506; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: K88axq7y//0YyIY2pWbgEFTJx9C+I4wbMj6lTV2rhhpWZjXQYx0RuLotoW2QLSD6YMt5RLiG71etUeljjpAYkyBxtfsr1jDRzUeq+khymSzWgqEI0ct3yj5fEhvv6EH+848Kpo616VI0Etru+4xHGMMRsBavCHS3O0ySAMMxmG+fldr8wtNplYfpOpNL4cfNyF4apAWG8OP3yZFQtR6bhQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: fca22019-37c0-47a8-8886-08d5c4803c46 X-MS-Exchange-CrossTenant-Network-Message-Id: fca22019-37c0-47a8-8886-08d5c4803c46 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 May 2018 09:48:58.7187 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB1506 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6294> : inlines <6661> : streams <1788032> : uri <2648535> Archived-At: Subject: Re: [Dots] TLS APLN extension X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 May 2018 09:49:46 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBKb24gU2hhbGxvdyBbbWFpbHRv OnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb21dDQo+IFNlbnQ6IE1vbmRheSwgTWF5IDI4LCAyMDE4 IDI6MTEgUE0NCj4gVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgPFRpcnVtYWxlc3dhclJl ZGR5X0tvbmRhQE1jQWZlZS5jb20+Ow0KPiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47 IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb207DQo+IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVj dDogUkU6IFtEb3RzXSBUTFMgQVBMTiBleHRlbnNpb24NCj4gDQo+IA0KPiANCj4gSGkgVGlydSwN Cj4gDQo+IEkgYWdyZWUgdGhhdCBpdCBtYWtlcyBubyBzZW5zZSB0byBoYXZlIG91ciBvd24gQVBM TiAtICJjb2FwIiBpcyBmaW5lIGFzIHRoYXQgaXMNCj4gZGVzY3JpYmluZyB0aGUgbmV4dCBwcm90 b2NvbCBsYXllciB1cC4gIEhvd2V2ZXIsIEkgZGlkIHJhaXNlIHRoZSBxdWVzdGlvbiBpbiBjYXNl DQo+IHRoZSBET1RTIFNlcnZlciBuZWVkcyB0byByZXNwb25kIHRvIGEgRE9UUyBjbGllbnQgdGhh dCBpcyBjb3JyZWN0bHkgZm9sbG93aW5nDQo+IFJGQyA4MzIzIGFuZCBleHBlY3RpbmcgdG8gc2Vl IGJhY2sgYSBBTFBOIHJlc3BvbnNlLg0KDQpUaGUgRE9UUyBzZXJ2ZXIgd2lsbCBub3QgYmUgcnVu bmluZyBvbiA1Njg0LiBJZiB0aGUgRE9UUyBzZXJ2ZXIgaXMgY29ycmVjdGx5IGZvbGxvd2luZyBS RkM4MzIzLCBpdCBzaG91bGQgcmVzcG9uZCB3aXRoIA0KQUxQTiByZXNwb25zZSAiY29hcCIuIA0K DQotVGlydQ0KDQo+IA0KPiAiSWYgdGhlIFRMUyBzZXJ2ZXIgZWl0aGVyIGRvZXMgbm90IG5lZ290 aWF0ZSB0aGUgQUxQTiBleHRlbnNpb24gb3IgcmV0dXJucyBhDQo+IG5vX2FwcGxpY2F0aW9uX3By b3RvY29sIGFsZXJ0LCB0aGUgVExTIGNsaWVudCBNVVNUIGNsb3NlIHRoZSBjb25uZWN0aW9uLiIN Cj4gDQo+IFJlZ2FyZHMNCj4gDQo+IEpvbg0KPiANCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0t LS0NCj4gRnJvbTogRG90cyBbbWFpbHRvOmlldGYtc3VwanBzLWRvdHMtYm91bmNlc0BpZXRmLm9y Z10gT24gQmVoYWxmIE9mIEtvbmRhLA0KPiBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4gU2VudDogMjgg TWF5IDIwMTggMDc6MDMNCj4gVG86IEpvbiBTaGFsbG93OyAnQmVuamFtaW4gS2FkdWsnOyBtb2hh bWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tOw0KPiBkb3RzQGlldGYub3JnDQo+IFN1YmplY3Q6IFJl OiBbRG90c10gVExTIEFQTE4gZXh0ZW5zaW9uDQo+IA0KPiBBbHRob3VnaCBjb2Fwcyt0Y3AgVVJJ IHNjaGVtZSBpcyB1c2VkIGJ5IERPVFMgc2lnbmFsIGNoYW5uZWwsIHdlIGhhdmUgbm90DQo+IHll dCBzZWVuIGFueSByZXF1aXJlbWVudCB3aGVyZSBtdWx0aXBsZSBwcm90b2NvbHMgd2lsbCBiZSBy dW4gb24gdGhlIERPVFMNCj4gc2VydmVyIHBvcnQgbnVtYmVyIDQ2NDYuDQo+IEkgZG9uJ3Qgc2Vl IHRoZSBuZWVkIHRvIGRlZmluZSBhIG5ldyBBTFBOIGZvciBET1RTIHNpZ25hbCBjaGFubmVsLg0K PiANCj4gQ2hlZXJzDQo+IC1UaXJ1DQo+IA0KPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0t DQo+ID4gRnJvbTogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxm IE9mIEpvbiBTaGFsbG93DQo+ID4gU2VudDogV2VkbmVzZGF5LCBNYXkgMjMsIDIwMTggMTo1OCBQ TQ0KPiA+IFRvOiAnQmVuamFtaW4gS2FkdWsnIDxrYWR1a0BtaXQuZWR1PjsgbW9oYW1lZC5ib3Vj YWRhaXJAb3JhbmdlLmNvbTsNCj4gPiBkb3RzQGlldGYub3JnDQo+ID4gU3ViamVjdDogUmU6IFtE b3RzXSBUTFMgQVBMTiBleHRlbnNpb24NCj4gPg0KPiA+DQo+ID4NCj4gPiBIaSBCZW4sDQo+ID4N Cj4gPiBUaGUgRE9UUyBzaWduYWwgc3BlYyBjYWxscyBmb3IgQ29BUCBzZWN1cmVkIGJ5IHJ1bm5p bmcgb3ZlciAoRClUTFMNCj4gPiAoZWl0aGVyIFVEUCBhbmQvb3IgVENQKSwgYW5kIENvQVAgb3Zl ciBUTFMgaXMgY29hcHMrdGNwLiAgU28sIHllcywNCj4gPiBib3RoIGNvYXBzIGFuZA0KPiA+IGNv YXBzK3RjcCBoYXZlIHRvIGJlIHN1cHBvcnRlZC4NCj4gPg0KPiA+IEZvciBleGFtcGxlLCBJIGNh biB1c2UgdGhlIGdpdGh1YiBsaWJjb2FwIGNvYXAtY2xpZW50IChQdWxsIFJlcXVlc3QNCj4gPiAj MTc2DQo+ID4gaW5zdGFsbGVkKSBhbmQgZG8gImNvYXAtY2xpZW50IC1jIGNlcnQucGVtDQo+ID4g Y29hcHMrdGNwOi8vMTI3LjAuMC4xOjQ2NDYvLndlbGwta25vd24vZG90cy92MS9jb25maWciIGFn YWluc3QgbXkgRE9UUw0KPiA+IHNlcnZlciBhbmQgZ2V0IGJhY2sgYmluYXJ5IGRhdGEgKGl0IGlz IENCT1IgZW5jb2RlZCkuDQo+ID4NCj4gPiBSZWdhcmRzDQo+ID4NCj4gPiBKb24NCj4gPg0KPiA+ IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gRnJvbTogRG90cyBbbWFpbHRvOiBkb3Rz LWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBCZW5qYW1pbiBLYWR1aw0KPiA+IFNlbnQ6 IDIzIE1heSAyMDE4IDAxOjM1DQo+ID4gVG86IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20N Cj4gPiBDYzogSm9uIFNoYWxsb3c7IGRvdHNAaWV0Zi5vcmcNCj4gPiBTdWJqZWN0OiBSZTogW0Rv dHNdIFRMUyBBUExOIGV4dGVuc2lvbg0KPiA+DQo+ID4gVGhlIGRlZGljYXRlZCBwb3J0IG51bWJl ciBpcyBvbmx5IHNvbWV3aGF0IHJlbGV2YW50LCBJIHRoaW5rIC0tIHRoZQ0KPiA+IG1haW4gcXVl c3Rpb24gaXMgd2hldGhlciB0aGUgY29hcHMrdGNwIFVSSSBzY2hlbWUgaXMgaW4gdXNlLiAgVGhl IFJGQw0KPiA+IDgzMjMgcmVxdWlyZW1lbnRzIG9ubHkgY29tZSBpbnRvIHBsYXkgZm9yIHRoYXQg VVJJIHNjaGVtZS4NCj4gPg0KPiA+IC1CZW4NCj4gPg0KPiA+IE9uIFR1ZSwgTWF5IDIyLCAyMDE4 IGF0IDA3OjU0OjM5QU0gKzAwMDAsDQo+IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4g PiB3cm90ZToNCj4gPiA+IFJlLSwNCj4gPiA+DQo+ID4gPiBEbyB3ZSBuZWVkIHRoaXMgZ2l2ZW4g dGhhdCBET1RTIGlzIHVzaW5nIGEgZGVkaWNhdGVkIHBvcnQgbnVtYmVyPw0KPiA+ID4NCj4gPiA+ IENoZWVycywNCj4gPiA+IE1lZA0KPiA+ID4NCj4gPiA+IERlIDogRG90cyBbbWFpbHRvOmRvdHMt Ym91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZSBKb24gU2hhbGxvdw0KPiA+ID4gRW52b3nD qSA6IGx1bmRpIDIxIG1haSAyMDE4IDA5OjU1IMOAIDogZG90c0BpZXRmLm9yZyBPYmpldCA6IFtE b3RzXQ0KPiA+ID4gVExTIEFQTE4gZXh0ZW5zaW9uDQo+ID4gPg0KPiA+ID4gSGkgdGhlcmUsDQo+ ID4gPg0KPiA+ID4gQXMgcGVyIFJGQyA4MzIzOiA4LjIuICBjb2Fwcyt0Y3AgVVJJIFNjaGVtZQ0K PiA+ID4NCj4gPiA+IC4uLi4NCj4gPiA+DQo+ID4gPiAgICBvICBJZiBhIFRMUyBzZXJ2ZXIgZG9l cyBub3Qgc3VwcG9ydCB0aGUgQXBwbGljYXRpb24tTGF5ZXIgUHJvdG9jb2wNCj4gPiA+ICAgICAg IE5lZ290aWF0aW9uIChBTFBOKSBleHRlbnNpb24gW1JGQzczMDFdIG9yIHdpc2hlcyB0byBhY2Nv bW1vZGF0ZQ0KPiA+ID4gICAgICAgVExTIGNsaWVudHMgdGhhdCBkbyBub3Qgc3VwcG9ydCBBTFBO LCBpdCBNQVkgb2ZmZXIgYSBjb2Fwcyt0Y3ANCj4gPiA+ICAgICAgIGVuZHBvaW50IG9uIFRDUCBw b3J0IDU2ODQuICBUaGlzIGVuZHBvaW50IE1BWSBhbHNvIGJlIEFMUE4NCj4gPiA+ICAgICAgIGVu YWJsZWQuICBBIFRMUyBzZXJ2ZXIgTUFZIG9mZmVyIGNvYXBzK3RjcCBlbmRwb2ludHMgb24gcG9y dHMNCj4gPiA+ICAgICAgIG90aGVyIHRoYW4gVENQIHBvcnQgNTY4NCwgd2hpY2ggTVVTVCBiZSBB TFBOIGVuYWJsZWQuDQo+ID4gPg0KPiA+ID4gICAgbyAgRm9yIFRDUCBwb3J0cyBvdGhlciB0aGFu IHBvcnQgNTY4NCwgdGhlIFRMUyBjbGllbnQgTVVTVCB1c2UgdGhlDQo+ID4gPiAgICAgICBBTFBO IGV4dGVuc2lvbiB0byBhZHZlcnRpc2UgdGhlICJjb2FwIiBwcm90b2NvbCBpZGVudGlmaWVyIChz ZWUNCj4gPiA+ICAgICAgIFNlY3Rpb24gMTEuNykgaW4gdGhlIGxpc3Qgb2YgcHJvdG9jb2xzIGlu IGl0cyBDbGllbnRIZWxsby4gIElmIHRoZQ0KPiA+ID4gICAgICAgVENQIHNlcnZlciBzZWxlY3Rz IGFuZCByZXR1cm5zIHRoZSAiY29hcCIgcHJvdG9jb2wgaWRlbnRpZmllcg0KPiA+ID4gICAgICAg dXNpbmcgdGhlIEFMUE4gZXh0ZW5zaW9uIGluIGl0cyBTZXJ2ZXJIZWxsbywgdGhlbiB0aGUgY29u bmVjdGlvbg0KPiA+ID4gICAgICAgc3VjY2VlZHMuICBJZiB0aGUgVExTIHNlcnZlciBlaXRoZXIg ZG9lcyBub3QgbmVnb3RpYXRlIHRoZSBBTFBODQo+ID4gPiAgICAgICBleHRlbnNpb24gb3IgcmV0 dXJucyBhIG5vX2FwcGxpY2F0aW9uX3Byb3RvY29sIGFsZXJ0LCB0aGUgVExTDQo+ID4gPiAgICAg ICBjbGllbnQgTVVTVCBjbG9zZSB0aGUgY29ubmVjdGlvbi4NCj4gPiA+DQo+ID4gPiBEbyB3ZSBu ZWVkIHRvIHJlZmVyIHRvIHRoZSByZXF1aXJlbWVudCBmb3IgQUxQTiBhcyB3ZSBhcmUgbm90DQo+ ID4gPiBob3N0aW5nIG9uDQo+ID4gcG9ydCA1Njg0Pw0KPiA+ID4NCj4gPiA+IFJlZ2FyZHMNCj4g PiA+DQo+ID4gPiBKb24NCj4gPg0KPiA+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCj4gPiA+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiBEb3RzQGll dGYub3JnDQo+ID4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMN Cj4gPg0KPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQo+ID4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiBEb3RzQGlldGYub3JnDQo+ID4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4NCj4gPiBfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+IERvdHMgbWFpbGluZyBsaXN0 DQo+ID4gRG90c0BpZXRmLm9yZw0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vZG90cw0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXw0KPiBEb3RzIG1haWxpbmcgbGlzdA0KPiBEb3RzQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KDQo= From nobody Mon May 28 03:01:00 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4254512762F for ; Mon, 28 May 2018 03:00:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6c5yYhPGDUMf for ; Mon, 28 May 2018 03:00:48 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D48212751F for ; Mon, 28 May 2018 03:00:48 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fNExK-0000Jt-6P; Mon, 28 May 2018 11:00:46 +0100 From: "Jon Shallow" To: "'Konda, Tirumaleswar Reddy'" , "Benjamin Kaduk" , , References: <13d301d3f0d8$f66f7c60$e34e7520$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1E28F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <20180523003451.GG10597@kduck.kaduk.org> <15bc01d3f26f$fecf3380$fc6d9a80$@jpshallow.com> <18b001d3f65f$8d47df20$a7d79d60$@jpshallow.com> In-Reply-To: Date: Mon, 28 May 2018 11:00:46 +0100 Message-ID: <18d701d3f66a$bfd2dcf0$3f7896d0$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQF7fY0SEnbbzScVHebrKQTjRWAcaAIi09JrAU1FL/ABpTg7WwITkQo3AlFTTtUCAn+wp6SZ8sJA Content-Language: en-gb Archived-At: Subject: Re: [Dots] TLS APLN extension X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 May 2018 10:00:56 -0000 Hi Tiru, I agree the DOTS server has to send back a "coap" if it receives a ALPN = request over TCP. Do we need to state this in the Draft? Regards Jon -----Original Message----- From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar Reddy Sent: 28 May 2018 10:49 To: Jon Shallow; Benjamin Kaduk; mohamed.boucadair@orange.com; = dots@ietf.org Subject: Re: [Dots] TLS APLN extension > -----Original Message----- > From: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > Sent: Monday, May 28, 2018 2:11 PM > To: Konda, Tirumaleswar Reddy ; > Benjamin Kaduk ; mohamed.boucadair@orange.com; > dots@ietf.org > Subject: RE: [Dots] TLS APLN extension >=20 >=20 >=20 > Hi Tiru, >=20 > I agree that it makes no sense to have our own ALPN - "coap" is fine = as that is > describing the next protocol layer up. However, I did raise the = question in case > the DOTS Server needs to respond to a DOTS client that is correctly = following > RFC 8323 and expecting to see back a ALPN response. The DOTS server will not be running on 5684. If the DOTS server is = correctly following RFC8323, it should respond with=20 ALPN response "coap".=20 -Tiru >=20 > "If the TLS server either does not negotiate the ALPN extension or = returns a > no_application_protocol alert, the TLS client MUST close the = connection." >=20 > Regards >=20 > Jon >=20 > -----Original Message----- > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, > Tirumaleswar Reddy > Sent: 28 May 2018 07:03 > To: Jon Shallow; 'Benjamin Kaduk'; mohamed.boucadair@orange.com; > dots@ietf.org > Subject: Re: [Dots] TLS APLN extension >=20 > Although coaps+tcp URI scheme is used by DOTS signal channel, we have = not > yet seen any requirement where multiple protocols will be run on the = DOTS > server port number 4646. > I don't see the need to define a new ALPN for DOTS signal channel. >=20 > Cheers > -Tiru >=20 > > -----Original Message----- > > From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Jon Shallow > > Sent: Wednesday, May 23, 2018 1:58 PM > > To: 'Benjamin Kaduk' ; mohamed.boucadair@orange.com; > > dots@ietf.org > > Subject: Re: [Dots] TLS APLN extension > > > > > > > > Hi Ben, > > > > The DOTS signal spec calls for CoAP secured by running over (D)TLS > > (either UDP and/or TCP), and CoAP over TLS is coaps+tcp. So, yes, > > both coaps and > > coaps+tcp have to be supported. > > > > For example, I can use the github libcoap coap-client (Pull Request > > #176 > > installed) and do "coap-client -c cert.pem > > coaps+tcp://127.0.0.1:4646/.well-known/dots/v1/config" against my = DOTS > > server and get back binary data (it is CBOR encoded). > > > > Regards > > > > Jon > > > > -----Original Message----- > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Benjamin = Kaduk > > Sent: 23 May 2018 01:35 > > To: mohamed.boucadair@orange.com > > Cc: Jon Shallow; dots@ietf.org > > Subject: Re: [Dots] TLS APLN extension > > > > The dedicated port number is only somewhat relevant, I think -- the > > main question is whether the coaps+tcp URI scheme is in use. The = RFC > > 8323 requirements only come into play for that URI scheme. > > > > -Ben > > > > On Tue, May 22, 2018 at 07:54:39AM +0000, > mohamed.boucadair@orange.com > > wrote: > > > Re-, > > > > > > Do we need this given that DOTS is using a dedicated port number? > > > > > > Cheers, > > > Med > > > > > > De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow > > > Envoy=C3=A9 : lundi 21 mai 2018 09:55 =C3=80 : dots@ietf.org Objet = : [Dots] > > > TLS APLN extension > > > > > > Hi there, > > > > > > As per RFC 8323: 8.2. coaps+tcp URI Scheme > > > > > > .... > > > > > > o If a TLS server does not support the Application-Layer = Protocol > > > Negotiation (ALPN) extension [RFC7301] or wishes to = accommodate > > > TLS clients that do not support ALPN, it MAY offer a = coaps+tcp > > > endpoint on TCP port 5684. This endpoint MAY also be ALPN > > > enabled. A TLS server MAY offer coaps+tcp endpoints on = ports > > > other than TCP port 5684, which MUST be ALPN enabled. > > > > > > o For TCP ports other than port 5684, the TLS client MUST use = the > > > ALPN extension to advertise the "coap" protocol identifier = (see > > > Section 11.7) in the list of protocols in its ClientHello. = If the > > > TCP server selects and returns the "coap" protocol = identifier > > > using the ALPN extension in its ServerHello, then the = connection > > > succeeds. If the TLS server either does not negotiate the = ALPN > > > extension or returns a no_application_protocol alert, the = TLS > > > client MUST close the connection. > > > > > > Do we need to refer to the requirement for ALPN as we are not > > > hosting on > > port 5684? > > > > > > Regards > > > > > > Jon > > > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots _______________________________________________ Dots mailing list Dots@ietf.org https://www.ietf.org/mailman/listinfo/dots From nobody Mon May 28 06:28:30 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2DAAF127078 for ; Mon, 28 May 2018 06:28:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.311 X-Spam-Level: X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N4CH-DycmfkU for ; Mon, 28 May 2018 06:28:26 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E5DFA124E15 for ; Mon, 28 May 2018 06:28:25 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1527514100; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Office365-Filtering-Correlation-Id:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=q +BJGE/+80CAnW2WAnNtmTJvgf9U/6F8acl48+2FiJ k=; b=PBxhXkqFv9VK9qZBISP/3Tqxfo7ycuSEyERqfMc2ya+r Yq3qSLwBtJSXDD7O07wPFAxMPDo3eb+RcnFWBvauDyn4+V/TG5 ui41+/BA+2qG8NXfPueLRASv/8QwUTHeEsd50KyfeumaLancai XuIh16UMZNJZiNMbNAEBoOW2kqM= Received: from DNVEXAPP1N05.corpzone.internalzone.com (unknown [10.44.48.89]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 0cbe_8dfb_d03eb9ab_7e82_4aaa_ac1f_50572c33c3cc; Mon, 28 May 2018 08:28:19 -0500 Received: from DNVEXUSR1N11.corpzone.internalzone.com (10.44.48.84) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 28 May 2018 07:28:14 -0600 Received: from DNVEXUSR1N10.corpzone.internalzone.com (10.44.48.83) by DNVEXUSR1N11.corpzone.internalzone.com (10.44.48.84) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 28 May 2018 07:28:14 -0600 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXUSR1N10.corpzone.internalzone.com (10.44.48.83) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Mon, 28 May 2018 07:28:14 -0600 Received: from NAM01-BY2-obe.outbound.protection.outlook.com (10.44.176.242) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 28 May 2018 07:28:11 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB1777.namprd16.prod.outlook.com (10.172.28.141) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.797.11; Mon, 28 May 2018 13:28:12 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::601e:a909:b9fe:31bd]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::601e:a909:b9fe:31bd%8]) with mapi id 15.20.0797.017; Mon, 28 May 2018 13:28:12 +0000 From: "Konda, Tirumaleswar Reddy" To: Jon Shallow , Benjamin Kaduk , "mohamed.boucadair@orange.com" , "dots@ietf.org" Thread-Topic: [Dots] TLS APLN extension Thread-Index: AdPw2PQOXpzyKiqHQ7+v5FEn8F2ThwAyFv1gACMjQgAAEIhhgAD2J+BAAAW7tYAAASl3AAABoyIAAABIZbA= Date: Mon, 28 May 2018 13:28:12 +0000 Message-ID: References: <13d301d3f0d8$f66f7c60$e34e7520$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1E28F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <20180523003451.GG10597@kduck.kaduk.org> <15bc01d3f26f$fecf3380$fc6d9a80$@jpshallow.com> <18b001d3f65f$8d47df20$a7d79d60$@jpshallow.com> <18d701d3f66a$bfd2dcf0$3f7896d0$@jpshallow.com> In-Reply-To: <18d701d3f66a$bfd2dcf0$3f7896d0$@jpshallow.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [122.171.30.86] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB1777; 7:F3LU0RHVqpL+mGqy59z2R7TkpNYVDf+D8tXxBzsmVGh/kOUBrSG2XQ0lM0/2VzfGC/vxHin8w7QOUHY2aEmJfAvK+ojiIv7Rwd1AEp/oBaOOPn5hDjrBuLybE3lSROxSg5ID8JppltJzQExgSIHB2DYSplwHzedf77vx8P2m+xLEGHOegr4hjXVG8PTAWoGStiK3AlZDzuStOaEPnJKzYdDzze8V1QSged0A8xsqy6AeuNF2s+KC344C8jjF4/UY x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB1777; x-ms-traffictypediagnostic: BN6PR16MB1777: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(18271650672692)(240460790083961)(123452027830198); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(3231254)(944501410)(52105095)(93006095)(93001095)(10201501046)(149027)(150027)(6041310)(20161123560045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(6072148)(201708071742011)(7699016); SRVR:BN6PR16MB1777; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB1777; x-forefront-prvs: 06860EDC7B x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(39860400002)(366004)(346002)(39380400002)(376002)(189003)(199004)(57704003)(13464003)(32952001)(476003)(74316002)(9686003)(3846002)(93886005)(486006)(53936002)(6116002)(33656002)(446003)(3280700002)(3660700001)(966005)(2906002)(97736004)(7736002)(53546011)(2501003)(186003)(55016002)(5890100001)(102836004)(110136005)(8936002)(5250100002)(2201001)(86362001)(76176011)(6436002)(68736007)(6506007)(26005)(6306002)(59450400001)(6246003)(81156014)(80792005)(2171002)(8676002)(105586002)(81166006)(7696005)(66066001)(305945005)(106356001)(11346002)(478600001)(2900100001)(5660300001)(99286004)(229853002)(14454004)(25786009)(72206003)(316002)(217873001)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB1777; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: GWpwu6XBHm5PqnM/l1ltiBQYYfP/wxHha70ZYF8fQuQaoc/NrtbwnhPEfYVkMkB/aaipu76eCFV/dZRde+ShbH0tj9rq03IgLv1JJtfVMbev9/yrprYefu3sPcblAUkn64+3MdDMNuX3+4owpvpMGXQi1l15Sj9Eg3pfhOGPYC1dYi7qWJvKBx0mwbYOEtkVaNA3yP/QNiKMTKmPSRET1Q== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: fcc7c3af-af68-49c2-2f5c-08d5c49edc51 X-MS-Exchange-CrossTenant-Network-Message-Id: fcc7c3af-af68-49c2-2f5c-08d5c49edc51 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 May 2018 13:28:12.1571 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB1777 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6295> : inlines <6661> : streams <1788047> : uri <2648627> Archived-At: Subject: Re: [Dots] TLS APLN extension X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 May 2018 13:28:28 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBKb24gU2hhbGxvdyBbbWFpbHRv OnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb21dDQo+IFNlbnQ6IE1vbmRheSwgTWF5IDI4LCAyMDE4 IDM6MzEgUE0NCj4gVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgPFRpcnVtYWxlc3dhclJl ZGR5X0tvbmRhQE1jQWZlZS5jb20+Ow0KPiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47 IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb207DQo+IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVj dDogUkU6IFtEb3RzXSBUTFMgQVBMTiBleHRlbnNpb24NCj4gDQo+IFRoaXMgZW1haWwgb3JpZ2lu YXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8gbm90IGNsaWNrIGxpbmtz IG9yDQo+IG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBh bmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLg0KPiANCj4gSGkgVGlydSwNCj4gDQo+IEkgYWdy ZWUgdGhlIERPVFMgc2VydmVyIGhhcyB0byBzZW5kIGJhY2sgYSAiY29hcCIgaWYgaXQgcmVjZWl2 ZXMgYSBBTFBOIHJlcXVlc3QNCj4gb3ZlciBUQ1AuICBEbyB3ZSBuZWVkIHRvIHN0YXRlIHRoaXMg aW4gdGhlIERyYWZ0Pw0KDQpObywgYnV0IEkgdGhpbmsgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9o dG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOSNzZWN0aW9uLTMgbmVlZHMgdG8g cG9pbnQgdG8gYm90aCANClJGQzcyNTIgYW5kIFJGQzgzMjMuDQoNCkNoZWVycywNCi1UaXJ1DQoN Cj4gDQo+IFJlZ2FyZHMNCj4gDQo+IEpvbg0KPiANCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0t LS0NCj4gRnJvbTogRG90cyBbbWFpbHRvOiBkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFs ZiBPZiBLb25kYSwgVGlydW1hbGVzd2FyDQo+IFJlZGR5DQo+IFNlbnQ6IDI4IE1heSAyMDE4IDEw OjQ5DQo+IFRvOiBKb24gU2hhbGxvdzsgQmVuamFtaW4gS2FkdWs7IG1vaGFtZWQuYm91Y2FkYWly QG9yYW5nZS5jb207DQo+IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtEb3RzXSBUTFMg QVBMTiBleHRlbnNpb24NCj4gDQo+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiBG cm9tOiBKb24gU2hhbGxvdyBbbWFpbHRvOnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb21dDQo+ID4g U2VudDogTW9uZGF5LCBNYXkgMjgsIDIwMTggMjoxMSBQTQ0KPiA+IFRvOiBLb25kYSwgVGlydW1h bGVzd2FyIFJlZGR5IDxUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tPjsNCj4gPiBC ZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5j b207DQo+ID4gZG90c0BpZXRmLm9yZw0KPiA+IFN1YmplY3Q6IFJFOiBbRG90c10gVExTIEFQTE4g ZXh0ZW5zaW9uDQo+ID4NCj4gPg0KPiA+DQo+ID4gSGkgVGlydSwNCj4gPg0KPiA+IEkgYWdyZWUg dGhhdCBpdCBtYWtlcyBubyBzZW5zZSB0byBoYXZlIG91ciBvd24gQUxQTiAtICJjb2FwIiBpcyBm aW5lDQo+ID4gYXMgdGhhdCBpcyBkZXNjcmliaW5nIHRoZSBuZXh0IHByb3RvY29sIGxheWVyIHVw LiAgSG93ZXZlciwgSSBkaWQNCj4gPiByYWlzZSB0aGUgcXVlc3Rpb24gaW4gY2FzZSB0aGUgRE9U UyBTZXJ2ZXIgbmVlZHMgdG8gcmVzcG9uZCB0byBhIERPVFMNCj4gPiBjbGllbnQgdGhhdCBpcyBj b3JyZWN0bHkgZm9sbG93aW5nIFJGQyA4MzIzIGFuZCBleHBlY3RpbmcgdG8gc2VlIGJhY2sgYSBB TFBODQo+IHJlc3BvbnNlLg0KPiANCj4gVGhlIERPVFMgc2VydmVyIHdpbGwgbm90IGJlIHJ1bm5p bmcgb24gNTY4NC4gSWYgdGhlIERPVFMgc2VydmVyIGlzIGNvcnJlY3RseQ0KPiBmb2xsb3dpbmcg UkZDODMyMywgaXQgc2hvdWxkIHJlc3BvbmQgd2l0aCBBTFBOIHJlc3BvbnNlICJjb2FwIi4NCj4g DQo+IC1UaXJ1DQo+IA0KPiA+DQo+ID4gIklmIHRoZSBUTFMgc2VydmVyIGVpdGhlciBkb2VzIG5v dCBuZWdvdGlhdGUgdGhlIEFMUE4gZXh0ZW5zaW9uIG9yDQo+ID4gcmV0dXJucyBhIG5vX2FwcGxp Y2F0aW9uX3Byb3RvY29sIGFsZXJ0LCB0aGUgVExTIGNsaWVudCBNVVNUIGNsb3NlIHRoZQ0KPiBj b25uZWN0aW9uLiINCj4gPg0KPiA+IFJlZ2FyZHMNCj4gPg0KPiA+IEpvbg0KPiA+DQo+ID4gLS0t LS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiBGcm9tOiBEb3RzIFttYWlsdG86IGRvdHMtYm91 bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEtvbmRhLA0KPiA+IFRpcnVtYWxlc3dhciBSZWRk eQ0KPiA+IFNlbnQ6IDI4IE1heSAyMDE4IDA3OjAzDQo+ID4gVG86IEpvbiBTaGFsbG93OyAnQmVu amFtaW4gS2FkdWsnOyBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tOw0KPiA+IGRvdHNAaWV0 Zi5vcmcNCj4gPiBTdWJqZWN0OiBSZTogW0RvdHNdIFRMUyBBUExOIGV4dGVuc2lvbg0KPiA+DQo+ ID4gQWx0aG91Z2ggY29hcHMrdGNwIFVSSSBzY2hlbWUgaXMgdXNlZCBieSBET1RTIHNpZ25hbCBj aGFubmVsLCB3ZSBoYXZlDQo+ID4gbm90IHlldCBzZWVuIGFueSByZXF1aXJlbWVudCB3aGVyZSBt dWx0aXBsZSBwcm90b2NvbHMgd2lsbCBiZSBydW4gb24NCj4gPiB0aGUgRE9UUyBzZXJ2ZXIgcG9y dCBudW1iZXIgNDY0Ni4NCj4gPiBJIGRvbid0IHNlZSB0aGUgbmVlZCB0byBkZWZpbmUgYSBuZXcg QUxQTiBmb3IgRE9UUyBzaWduYWwgY2hhbm5lbC4NCj4gPg0KPiA+IENoZWVycw0KPiA+IC1UaXJ1 DQo+ID4NCj4gPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gPiBGcm9tOiBEb3Rz IFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgSm9uIFNoYWxsb3cN Cj4gPiA+IFNlbnQ6IFdlZG5lc2RheSwgTWF5IDIzLCAyMDE4IDE6NTggUE0NCj4gPiA+IFRvOiAn QmVuamFtaW4gS2FkdWsnIDxrYWR1a0BtaXQuZWR1PjsgbW9oYW1lZC5ib3VjYWRhaXJAb3Jhbmdl LmNvbTsNCj4gPiA+IGRvdHNAaWV0Zi5vcmcNCj4gPiA+IFN1YmplY3Q6IFJlOiBbRG90c10gVExT IEFQTE4gZXh0ZW5zaW9uDQo+ID4gPg0KPiA+ID4NCj4gPiA+DQo+ID4gPiBIaSBCZW4sDQo+ID4g Pg0KPiA+ID4gVGhlIERPVFMgc2lnbmFsIHNwZWMgY2FsbHMgZm9yIENvQVAgc2VjdXJlZCBieSBy dW5uaW5nIG92ZXIgKEQpVExTDQo+ID4gPiAoZWl0aGVyIFVEUCBhbmQvb3IgVENQKSwgYW5kIENv QVAgb3ZlciBUTFMgaXMgY29hcHMrdGNwLiAgU28sIHllcywNCj4gPiA+IGJvdGggY29hcHMgYW5k DQo+ID4gPiBjb2Fwcyt0Y3AgaGF2ZSB0byBiZSBzdXBwb3J0ZWQuDQo+ID4gPg0KPiA+ID4gRm9y IGV4YW1wbGUsIEkgY2FuIHVzZSB0aGUgZ2l0aHViIGxpYmNvYXAgY29hcC1jbGllbnQgKFB1bGwg UmVxdWVzdA0KPiA+ID4gIzE3Ng0KPiA+ID4gaW5zdGFsbGVkKSBhbmQgZG8gImNvYXAtY2xpZW50 IC1jIGNlcnQucGVtDQo+ID4gPiBjb2Fwcyt0Y3A6Ly8xMjcuMC4wLjE6NDY0Ni8ud2VsbC1rbm93 bi9kb3RzL3YxL2NvbmZpZyIgYWdhaW5zdCBteQ0KPiA+ID4gY29hcHMrRE9UUw0KPiA+ID4gc2Vy dmVyIGFuZCBnZXQgYmFjayBiaW5hcnkgZGF0YSAoaXQgaXMgQ0JPUiBlbmNvZGVkKS4NCj4gPiA+ DQo+ID4gPiBSZWdhcmRzDQo+ID4gPg0KPiA+ID4gSm9uDQo+ID4gPg0KPiA+ID4gLS0tLS1Pcmln aW5hbCBNZXNzYWdlLS0tLS0NCj4gPiA+IEZyb206IERvdHMgW21haWx0bzogZG90cy1ib3VuY2Vz QGlldGYub3JnXSBPbiBCZWhhbGYgT2YgQmVuamFtaW4NCj4gPiA+IEthZHVrDQo+ID4gPiBTZW50 OiAyMyBNYXkgMjAxOCAwMTozNQ0KPiA+ID4gVG86IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5j b20NCj4gPiA+IENjOiBKb24gU2hhbGxvdzsgZG90c0BpZXRmLm9yZw0KPiA+ID4gU3ViamVjdDog UmU6IFtEb3RzXSBUTFMgQVBMTiBleHRlbnNpb24NCj4gPiA+DQo+ID4gPiBUaGUgZGVkaWNhdGVk IHBvcnQgbnVtYmVyIGlzIG9ubHkgc29tZXdoYXQgcmVsZXZhbnQsIEkgdGhpbmsgLS0gdGhlDQo+ ID4gPiBtYWluIHF1ZXN0aW9uIGlzIHdoZXRoZXIgdGhlIGNvYXBzK3RjcCBVUkkgc2NoZW1lIGlz IGluIHVzZS4gIFRoZQ0KPiA+ID4gUkZDDQo+ID4gPiA4MzIzIHJlcXVpcmVtZW50cyBvbmx5IGNv bWUgaW50byBwbGF5IGZvciB0aGF0IFVSSSBzY2hlbWUuDQo+ID4gPg0KPiA+ID4gLUJlbg0KPiA+ ID4NCj4gPiA+IE9uIFR1ZSwgTWF5IDIyLCAyMDE4IGF0IDA3OjU0OjM5QU0gKzAwMDAsDQo+ID4g bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbQ0KPiA+ID4gd3JvdGU6DQo+ID4gPiA+IFJlLSwN Cj4gPiA+ID4NCj4gPiA+ID4gRG8gd2UgbmVlZCB0aGlzIGdpdmVuIHRoYXQgRE9UUyBpcyB1c2lu ZyBhIGRlZGljYXRlZCBwb3J0IG51bWJlcj8NCj4gPiA+ID4NCj4gPiA+ID4gQ2hlZXJzLA0KPiA+ ID4gPiBNZWQNCj4gPiA+ID4NCj4gPiA+ID4gRGUgOiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2Vz QGlldGYub3JnXSBEZSBsYSBwYXJ0IGRlIEpvbiBTaGFsbG93DQo+ID4gPiA+IEVudm95w6kgOiBs dW5kaSAyMSBtYWkgMjAxOCAwOTo1NSDDgCA6IGRvdHNAaWV0Zi5vcmcgT2JqZXQgOiBbRG90c10N Cj4gPiA+ID4gVExTIEFQTE4gZXh0ZW5zaW9uDQo+ID4gPiA+DQo+ID4gPiA+IEhpIHRoZXJlLA0K PiA+ID4gPg0KPiA+ID4gPiBBcyBwZXIgUkZDIDgzMjM6IDguMi4gIGNvYXBzK3RjcCBVUkkgU2No ZW1lDQo+ID4gPiA+DQo+ID4gPiA+IC4uLi4NCj4gPiA+ID4NCj4gPiA+ID4gICAgbyAgSWYgYSBU TFMgc2VydmVyIGRvZXMgbm90IHN1cHBvcnQgdGhlIEFwcGxpY2F0aW9uLUxheWVyIFByb3RvY29s DQo+ID4gPiA+ICAgICAgIE5lZ290aWF0aW9uIChBTFBOKSBleHRlbnNpb24gW1JGQzczMDFdIG9y IHdpc2hlcyB0byBhY2NvbW1vZGF0ZQ0KPiA+ID4gPiAgICAgICBUTFMgY2xpZW50cyB0aGF0IGRv IG5vdCBzdXBwb3J0IEFMUE4sIGl0IE1BWSBvZmZlciBhIGNvYXBzK3RjcA0KPiA+ID4gPiAgICAg ICBlbmRwb2ludCBvbiBUQ1AgcG9ydCA1Njg0LiAgVGhpcyBlbmRwb2ludCBNQVkgYWxzbyBiZSBB TFBODQo+ID4gPiA+ICAgICAgIGVuYWJsZWQuICBBIFRMUyBzZXJ2ZXIgTUFZIG9mZmVyIGNvYXBz K3RjcCBlbmRwb2ludHMgb24gcG9ydHMNCj4gPiA+ID4gICAgICAgb3RoZXIgdGhhbiBUQ1AgcG9y dCA1Njg0LCB3aGljaCBNVVNUIGJlIEFMUE4gZW5hYmxlZC4NCj4gPiA+ID4NCj4gPiA+ID4gICAg byAgRm9yIFRDUCBwb3J0cyBvdGhlciB0aGFuIHBvcnQgNTY4NCwgdGhlIFRMUyBjbGllbnQgTVVT VCB1c2UgdGhlDQo+ID4gPiA+ICAgICAgIEFMUE4gZXh0ZW5zaW9uIHRvIGFkdmVydGlzZSB0aGUg ImNvYXAiIHByb3RvY29sIGlkZW50aWZpZXIgKHNlZQ0KPiA+ID4gPiAgICAgICBTZWN0aW9uIDEx LjcpIGluIHRoZSBsaXN0IG9mIHByb3RvY29scyBpbiBpdHMgQ2xpZW50SGVsbG8uICBJZiB0aGUN Cj4gPiA+ID4gICAgICAgVENQIHNlcnZlciBzZWxlY3RzIGFuZCByZXR1cm5zIHRoZSAiY29hcCIg cHJvdG9jb2wgaWRlbnRpZmllcg0KPiA+ID4gPiAgICAgICB1c2luZyB0aGUgQUxQTiBleHRlbnNp b24gaW4gaXRzIFNlcnZlckhlbGxvLCB0aGVuIHRoZSBjb25uZWN0aW9uDQo+ID4gPiA+ICAgICAg IHN1Y2NlZWRzLiAgSWYgdGhlIFRMUyBzZXJ2ZXIgZWl0aGVyIGRvZXMgbm90IG5lZ290aWF0ZSB0 aGUgQUxQTg0KPiA+ID4gPiAgICAgICBleHRlbnNpb24gb3IgcmV0dXJucyBhIG5vX2FwcGxpY2F0 aW9uX3Byb3RvY29sIGFsZXJ0LCB0aGUgVExTDQo+ID4gPiA+ICAgICAgIGNsaWVudCBNVVNUIGNs b3NlIHRoZSBjb25uZWN0aW9uLg0KPiA+ID4gPg0KPiA+ID4gPiBEbyB3ZSBuZWVkIHRvIHJlZmVy IHRvIHRoZSByZXF1aXJlbWVudCBmb3IgQUxQTiBhcyB3ZSBhcmUgbm90DQo+ID4gPiA+IGhvc3Rp bmcgb24NCj4gPiA+IHBvcnQgNTY4ND8NCj4gPiA+ID4NCj4gPiA+ID4gUmVnYXJkcw0KPiA+ID4g Pg0KPiA+ID4gPiBKb24NCj4gPiA+DQo+ID4gPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fDQo+ID4gPiA+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiA+ IERvdHNAaWV0Zi5vcmcNCj4gPiA+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9kb3RzDQo+ID4gPg0KPiA+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCj4gPiA+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiBEb3RzQGlldGYu b3JnDQo+ID4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4g PiA+DQo+ID4gPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xw0KPiA+ID4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiA+IERvdHNAaWV0Zi5vcmcNCj4gPiA+IGh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+IF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gRG90cyBtYWlsaW5nIGxp c3QNCj4gPiBEb3RzQGlldGYub3JnDQo+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9kb3RzDQo+IA0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXw0KPiBEb3RzIG1haWxpbmcgbGlzdA0KPiBEb3RzQGlldGYub3JnDQo+IGh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KDQo= From nobody Mon May 28 07:44:37 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CDA1012D882 for ; Mon, 28 May 2018 07:44:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pr35isvG4Bk5 for ; Mon, 28 May 2018 07:44:33 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5724D12D873 for ; Mon, 28 May 2018 07:44:33 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fNJNu-0000VA-4Z; Mon, 28 May 2018 15:44:30 +0100 From: "Jon Shallow" To: "'Konda, Tirumaleswar Reddy'" , "Benjamin Kaduk" , , References: <13d301d3f0d8$f66f7c60$e34e7520$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1E28F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <20180523003451.GG10597@kduck.kaduk.org> <15bc01d3f26f$fecf3380$fc6d9a80$@jpshallow.com> <18b001d3f65f$8d47df20$a7d79d60$@jpshallow.com> <18d701d3f66a$bfd2dcf0$3f7896d0$@jpshallow.com> In-Reply-To: Date: Mon, 28 May 2018 15:44:30 +0100 Message-ID: <192201d3f692$62c4a930$284dfb90$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQF7fY0SEnbbzScVHebrKQTjRWAcaAIi09JrAU1FL/ABpTg7WwITkQo3AlFTTtUCAn+wpwGSMkFzAlhh1J+keu73kA== Content-Language: en-gb Archived-At: Subject: Re: [Dots] TLS APLN extension X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 May 2018 14:44:36 -0000 -----Original Message----- From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar Reddy Sent: 28 May 2018 14:28 To: Jon Shallow; Benjamin Kaduk; mohamed.boucadair@orange.com; = dots@ietf.org Subject: Re: [Dots] TLS APLN extension > -----Original Message----- > From: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > Sent: Monday, May 28, 2018 3:31 PM > To: Konda, Tirumaleswar Reddy ; > Benjamin Kaduk ; mohamed.boucadair@orange.com; > dots@ietf.org > Subject: RE: [Dots] TLS APLN extension >=20 > This email originated from outside of the organization. Do not click = links or > open attachments unless you recognize the sender and know the content = is safe. >=20 > Hi Tiru, >=20 > I agree the DOTS server has to send back a "coap" if it receives a = ALPN request > over TCP. Do we need to state this in the Draft? No, but I think = https://tools.ietf.org/html/draft-ietf-dots-signal-channel-19#section-3 = needs to point to both=20 RFC7252 and RFC8323. [Jon] Agreed. Are you able to do this with some suitable wrapper text? ~Jon Cheers, -Tiru >=20 > Regards >=20 > Jon >=20 > -----Original Message----- > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar > Reddy > Sent: 28 May 2018 10:49 > To: Jon Shallow; Benjamin Kaduk; mohamed.boucadair@orange.com; > dots@ietf.org > Subject: Re: [Dots] TLS APLN extension >=20 > > -----Original Message----- > > From: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > Sent: Monday, May 28, 2018 2:11 PM > > To: Konda, Tirumaleswar Reddy ; > > Benjamin Kaduk ; mohamed.boucadair@orange.com; > > dots@ietf.org > > Subject: RE: [Dots] TLS APLN extension > > > > > > > > Hi Tiru, > > > > I agree that it makes no sense to have our own ALPN - "coap" is fine > > as that is describing the next protocol layer up. However, I did > > raise the question in case the DOTS Server needs to respond to a = DOTS > > client that is correctly following RFC 8323 and expecting to see = back a ALPN > response. >=20 > The DOTS server will not be running on 5684. If the DOTS server is = correctly > following RFC8323, it should respond with ALPN response "coap". >=20 > -Tiru >=20 > > > > "If the TLS server either does not negotiate the ALPN extension or > > returns a no_application_protocol alert, the TLS client MUST close = the > connection." > > > > Regards > > > > Jon > > > > -----Original Message----- > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, > > Tirumaleswar Reddy > > Sent: 28 May 2018 07:03 > > To: Jon Shallow; 'Benjamin Kaduk'; mohamed.boucadair@orange.com; > > dots@ietf.org > > Subject: Re: [Dots] TLS APLN extension > > > > Although coaps+tcp URI scheme is used by DOTS signal channel, we = have > > not yet seen any requirement where multiple protocols will be run on > > the DOTS server port number 4646. > > I don't see the need to define a new ALPN for DOTS signal channel. > > > > Cheers > > -Tiru > > > > > -----Original Message----- > > > From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Jon Shallow > > > Sent: Wednesday, May 23, 2018 1:58 PM > > > To: 'Benjamin Kaduk' ; = mohamed.boucadair@orange.com; > > > dots@ietf.org > > > Subject: Re: [Dots] TLS APLN extension > > > > > > > > > > > > Hi Ben, > > > > > > The DOTS signal spec calls for CoAP secured by running over (D)TLS > > > (either UDP and/or TCP), and CoAP over TLS is coaps+tcp. So, yes, > > > both coaps and > > > coaps+tcp have to be supported. > > > > > > For example, I can use the github libcoap coap-client (Pull = Request > > > #176 > > > installed) and do "coap-client -c cert.pem > > > coaps+tcp://127.0.0.1:4646/.well-known/dots/v1/config" against my > > > coaps+DOTS > > > server and get back binary data (it is CBOR encoded). > > > > > > Regards > > > > > > Jon > > > > > > -----Original Message----- > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Benjamin > > > Kaduk > > > Sent: 23 May 2018 01:35 > > > To: mohamed.boucadair@orange.com > > > Cc: Jon Shallow; dots@ietf.org > > > Subject: Re: [Dots] TLS APLN extension > > > > > > The dedicated port number is only somewhat relevant, I think -- = the > > > main question is whether the coaps+tcp URI scheme is in use. The > > > RFC > > > 8323 requirements only come into play for that URI scheme. > > > > > > -Ben > > > > > > On Tue, May 22, 2018 at 07:54:39AM +0000, > > mohamed.boucadair@orange.com > > > wrote: > > > > Re-, > > > > > > > > Do we need this given that DOTS is using a dedicated port = number? > > > > > > > > Cheers, > > > > Med > > > > > > > > De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon = Shallow > > > > Envoy=C3=A9 : lundi 21 mai 2018 09:55 =C3=80 : dots@ietf.org = Objet : [Dots] > > > > TLS APLN extension > > > > > > > > Hi there, > > > > > > > > As per RFC 8323: 8.2. coaps+tcp URI Scheme > > > > > > > > .... > > > > > > > > o If a TLS server does not support the Application-Layer = Protocol > > > > Negotiation (ALPN) extension [RFC7301] or wishes to = accommodate > > > > TLS clients that do not support ALPN, it MAY offer a = coaps+tcp > > > > endpoint on TCP port 5684. This endpoint MAY also be ALPN > > > > enabled. A TLS server MAY offer coaps+tcp endpoints on = ports > > > > other than TCP port 5684, which MUST be ALPN enabled. > > > > > > > > o For TCP ports other than port 5684, the TLS client MUST = use the > > > > ALPN extension to advertise the "coap" protocol identifier = (see > > > > Section 11.7) in the list of protocols in its ClientHello. = If the > > > > TCP server selects and returns the "coap" protocol = identifier > > > > using the ALPN extension in its ServerHello, then the = connection > > > > succeeds. If the TLS server either does not negotiate the = ALPN > > > > extension or returns a no_application_protocol alert, the = TLS > > > > client MUST close the connection. > > > > > > > > Do we need to refer to the requirement for ALPN as we are not > > > > hosting on > > > port 5684? > > > > > > > > Regards > > > > > > > > Jon > > > > > > > _______________________________________________ > > > > Dots mailing list > > > > Dots@ietf.org > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots _______________________________________________ Dots mailing list Dots@ietf.org https://www.ietf.org/mailman/listinfo/dots From nobody Tue May 29 00:09:50 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D44D12E878 for ; Tue, 29 May 2018 00:09:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.31 X-Spam-Level: X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iVHpoYXIcfmZ for ; Tue, 29 May 2018 00:09:46 -0700 (PDT) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CEC9012E888 for ; Tue, 29 May 2018 00:09:45 -0700 (PDT) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1527577774; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Office365-Filtering-Correlation-Id:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=i DGLjQBNJoBFKVKX7AwuH0h7EpwjqY9KrjIpPzRJgv Y=; b=b7eQe7Gee3cUqS9GMKfZvr35JORQNxQ94dBADDN4w35i ybwEpuz4FOYGqrsonshKlQr7SorWGwwfLr/MvMDcqHJnh6Yt8J xZY7+8Vmuai9L/m3aUOjdP6Yw9o+HsEuIBt1IBAU3nzcD0hPxp cNtf2AGFTGMFECvF33um5SRQDWE= Received: from DNVEXAPP1N05.corpzone.internalzone.com (DNVEXAPP1N05.corpzone.internalzone.com [10.44.48.89]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 4a35_a7c9_13eb4f6d_fad1_4790_aea7_a0503ade69ff; Tue, 29 May 2018 02:09:34 -0500 Received: from DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Tue, 29 May 2018 01:09:19 -0600 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Tue, 29 May 2018 01:09:19 -0600 Received: from NAM02-CY1-obe.outbound.protection.outlook.com (10.44.176.243) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Tue, 29 May 2018 01:09:19 -0600 Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB1537.namprd16.prod.outlook.com (10.172.208.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.797.11; Tue, 29 May 2018 07:09:17 +0000 Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::601e:a909:b9fe:31bd]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::601e:a909:b9fe:31bd%8]) with mapi id 15.20.0797.018; Tue, 29 May 2018 07:09:17 +0000 From: "Konda, Tirumaleswar Reddy" To: Jon Shallow , Benjamin Kaduk , "mohamed.boucadair@orange.com" , "dots@ietf.org" Thread-Topic: [Dots] TLS APLN extension Thread-Index: AdPw2PQOXpzyKiqHQ7+v5FEn8F2ThwAyFv1gACMjQgAAEIhhgAD2J+BAAAW7tYAAASl3AAABoyIAAABIZbAACaBhAAAiXQEg Date: Tue, 29 May 2018 07:09:16 +0000 Message-ID: References: <13d301d3f0d8$f66f7c60$e34e7520$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1E28F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <20180523003451.GG10597@kduck.kaduk.org> <15bc01d3f26f$fecf3380$fc6d9a80$@jpshallow.com> <18b001d3f65f$8d47df20$a7d79d60$@jpshallow.com> <18d701d3f66a$bfd2dcf0$3f7896d0$@jpshallow.com> <192201d3f692$62c4a930$284dfb90$@jpshallow.com> In-Reply-To: <192201d3f692$62c4a930$284dfb90$@jpshallow.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.300.84 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR16MB1537; 7:T5Jgvs3/waUSnLGcau9U6f8JERg6/pipN6mA+lxeNLf1vGYbAPQiGObD0go3SFFa/864DQSC6MUp7iWaDRvQTzWP+pEu68yBuxe8cRxZl5i+K0he/igzbtMGPE7+IQXp/Tcg25U171w5T1VGX8Blf1laWSGt3cJMwMaAl859jH0mgMyeVy4hG0aDQaMkjDuvFfIpazhrlNVU3cT3YErIBNANJ+XH/3g+T9M2yhl6fPPAcabSRZ1vmibNeSFWhKUN x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB1537; x-ms-traffictypediagnostic: BN6PR16MB1537: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(18271650672692)(240460790083961)(123452027830198); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(3231254)(944501410)(52105095)(10201501046)(149027)(150027)(6041310)(20161123558120)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123564045)(6072148)(201708071742011)(7699016); SRVR:BN6PR16MB1537; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB1537; x-forefront-prvs: 0687389FB0 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(39860400002)(366004)(396003)(376002)(346002)(32952001)(189003)(199004)(57704003)(13464003)(6246003)(2171002)(3280700002)(316002)(3660700001)(2201001)(186003)(26005)(7736002)(2906002)(53546011)(6506007)(74316002)(102836004)(305945005)(5890100001)(5250100002)(86362001)(5660300001)(93886005)(6436002)(110136005)(2501003)(33656002)(99286004)(72206003)(6116002)(3846002)(966005)(59450400001)(76176011)(7696005)(53936002)(446003)(97736004)(11346002)(478600001)(2900100001)(6306002)(476003)(80792005)(8676002)(81156014)(81166006)(8936002)(106356001)(229853002)(14454004)(25786009)(55016002)(486006)(66066001)(68736007)(105586002)(9686003)(85282002)(217873001); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB1537; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: XERxw9D83tXu6qljoDd2seYlDr6ge5v/pWPpw9byw5isJte6IqKXjbMtVw2Uh30m1gEvHEGGHnX9NE/1gfFMx5Y1KefnUhpshveXgLhvuuBv+L2/U1ITo7uU2FfzP1nJOBFHviS70ukT7KHIWwsAWf9s4yJQi0oH9XfTwu6uELmXtHofydm+o+lLDI0943kLw1p3rhdSixxAsIiGH5IKwA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: 90858fcb-0bf3-4c40-2985-08d5c53317ab X-MS-Exchange-CrossTenant-Network-Message-Id: 90858fcb-0bf3-4c40-2985-08d5c53317ab X-MS-Exchange-CrossTenant-originalarrivaltime: 29 May 2018 07:09:17.0921 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB1537 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6295> : inlines <6663> : streams <1788117> : uri <2649017> Archived-At: Subject: Re: [Dots] TLS APLN extension X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 May 2018 07:09:49 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBKb24gU2hhbGxvdyBbbWFpbHRv OnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb21dDQo+IFNlbnQ6IE1vbmRheSwgTWF5IDI4LCAyMDE4 IDg6MTUgUE0NCj4gVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgPFRpcnVtYWxlc3dhclJl ZGR5X0tvbmRhQE1jQWZlZS5jb20+Ow0KPiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47 IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb207DQo+IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVj dDogUkU6IFtEb3RzXSBUTFMgQVBMTiBleHRlbnNpb24NCj4gDQo+IFRoaXMgZW1haWwgb3JpZ2lu YXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8gbm90IGNsaWNrIGxpbmtz IG9yDQo+IG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBh bmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLg0KPiANCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdl LS0tLS0NCj4gRnJvbTogRG90cyBbbWFpbHRvOiBkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJl aGFsZiBPZiBLb25kYSwgVGlydW1hbGVzd2FyDQo+IFJlZGR5DQo+IFNlbnQ6IDI4IE1heSAyMDE4 IDE0OjI4DQo+IFRvOiBKb24gU2hhbGxvdzsgQmVuamFtaW4gS2FkdWs7IG1vaGFtZWQuYm91Y2Fk YWlyQG9yYW5nZS5jb207DQo+IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtEb3RzXSBU TFMgQVBMTiBleHRlbnNpb24NCj4gDQo+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4g PiBGcm9tOiBKb24gU2hhbGxvdyBbbWFpbHRvOnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb21dDQo+ ID4gU2VudDogTW9uZGF5LCBNYXkgMjgsIDIwMTggMzozMSBQTQ0KPiA+IFRvOiBLb25kYSwgVGly dW1hbGVzd2FyIFJlZGR5IDxUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tPjsNCj4g PiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5n ZS5jb207DQo+ID4gZG90c0BpZXRmLm9yZw0KPiA+IFN1YmplY3Q6IFJFOiBbRG90c10gVExTIEFQ TE4gZXh0ZW5zaW9uDQo+ID4NCj4gPiBUaGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRl IG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdCBjbGljaw0KPiA+IGxpbmtzIG9yIG9wZW4gYXR0 YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUNCj4g Y29udGVudCBpcyBzYWZlLg0KPiA+DQo+ID4gSGkgVGlydSwNCj4gPg0KPiA+IEkgYWdyZWUgdGhl IERPVFMgc2VydmVyIGhhcyB0byBzZW5kIGJhY2sgYSAiY29hcCIgaWYgaXQgcmVjZWl2ZXMgYQ0K PiA+IEFMUE4gcmVxdWVzdCBvdmVyIFRDUC4gIERvIHdlIG5lZWQgdG8gc3RhdGUgdGhpcyBpbiB0 aGUgRHJhZnQ/DQo+IA0KPiBObywgYnV0IEkgdGhpbmsgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9o dG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0NCj4gMTkjc2VjdGlvbi0zIG5lZWRz IHRvIHBvaW50IHRvIGJvdGgNCj4gUkZDNzI1MiBhbmQgUkZDODMyMy4NCj4gDQo+IFtKb25dIEFn cmVlZC4gIEFyZSB5b3UgYWJsZSB0byBkbyB0aGlzIHdpdGggc29tZSBzdWl0YWJsZSB3cmFwcGVy IHRleHQ/DQoNClByb3Bvc2VkIHRleHQ6DQpET1RTIHNpZ25hbCBjaGFubmVsIHVzZXMgdGhlICJj b2FwcyIgVVJJIHNjaGVtZSBkZWZpbmVkIGluIFNlY3Rpb24gNiBvZiBSRkM3MjUyIGFuZCAiY29h cHMrdGNwIiBVUkkgc2NoZW1lIGRlZmluZWQgaW4gDQpzZWN0aW9uIDguMiBvZiBSRkMgODMyMyB0 byBpZGVudGlmeSBET1RTIHNlcnZlciByZXNvdXJjZXMgYWNjZXNzaWJsZSB1c2luZyBDb0FQIG92 ZXIgVURQIHNlY3VyZWQgd2l0aCBEVExTIGFuZA0KQ29BUCBvdmVyIFRDUCBzZWN1cmVkIHdpdGgg VExTLg0KDQotVGlydQ0KDQo+IH5Kb24NCj4gDQo+IENoZWVycywNCj4gLVRpcnUNCj4gDQo+ID4N Cj4gPiBSZWdhcmRzDQo+ID4NCj4gPiBKb24NCj4gPg0KPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tDQo+ID4gRnJvbTogRG90cyBbbWFpbHRvOiBkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIE9u IEJlaGFsZiBPZiBLb25kYSwNCj4gPiBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4gPiBTZW50OiAyOCBN YXkgMjAxOCAxMDo0OQ0KPiA+IFRvOiBKb24gU2hhbGxvdzsgQmVuamFtaW4gS2FkdWs7IG1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb207DQo+ID4gZG90c0BpZXRmLm9yZw0KPiA+IFN1YmplY3Q6 IFJlOiBbRG90c10gVExTIEFQTE4gZXh0ZW5zaW9uDQo+ID4NCj4gPiA+IC0tLS0tT3JpZ2luYWwg TWVzc2FnZS0tLS0tDQo+ID4gPiBGcm9tOiBKb24gU2hhbGxvdyBbbWFpbHRvOnN1cGpwcy1pZXRm QGpwc2hhbGxvdy5jb21dDQo+ID4gPiBTZW50OiBNb25kYXksIE1heSAyOCwgMjAxOCAyOjExIFBN DQo+ID4gPiBUbzogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA8VGlydW1hbGVzd2FyUmVk ZHlfS29uZGFATWNBZmVlLmNvbT47DQo+ID4gPiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVk dT47IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb207DQo+ID4gPiBkb3RzQGlldGYub3JnDQo+ ID4gPiBTdWJqZWN0OiBSRTogW0RvdHNdIFRMUyBBUExOIGV4dGVuc2lvbg0KPiA+ID4NCj4gPiA+ DQo+ID4gPg0KPiA+ID4gSGkgVGlydSwNCj4gPiA+DQo+ID4gPiBJIGFncmVlIHRoYXQgaXQgbWFr ZXMgbm8gc2Vuc2UgdG8gaGF2ZSBvdXIgb3duIEFMUE4gLSAiY29hcCIgaXMgZmluZQ0KPiA+ID4g YXMgdGhhdCBpcyBkZXNjcmliaW5nIHRoZSBuZXh0IHByb3RvY29sIGxheWVyIHVwLiAgSG93ZXZl ciwgSSBkaWQNCj4gPiA+IHJhaXNlIHRoZSBxdWVzdGlvbiBpbiBjYXNlIHRoZSBET1RTIFNlcnZl ciBuZWVkcyB0byByZXNwb25kIHRvIGENCj4gPiA+IERPVFMgY2xpZW50IHRoYXQgaXMgY29ycmVj dGx5IGZvbGxvd2luZyBSRkMgODMyMyBhbmQgZXhwZWN0aW5nIHRvDQo+ID4gPiBzZWUgYmFjayBh IEFMUE4NCj4gPiByZXNwb25zZS4NCj4gPg0KPiA+IFRoZSBET1RTIHNlcnZlciB3aWxsIG5vdCBi ZSBydW5uaW5nIG9uIDU2ODQuIElmIHRoZSBET1RTIHNlcnZlciBpcw0KPiA+IGNvcnJlY3RseSBm b2xsb3dpbmcgUkZDODMyMywgaXQgc2hvdWxkIHJlc3BvbmQgd2l0aCBBTFBOIHJlc3BvbnNlICJj b2FwIi4NCj4gPg0KPiA+IC1UaXJ1DQo+ID4NCj4gPiA+DQo+ID4gPiAiSWYgdGhlIFRMUyBzZXJ2 ZXIgZWl0aGVyIGRvZXMgbm90IG5lZ290aWF0ZSB0aGUgQUxQTiBleHRlbnNpb24gb3INCj4gPiA+ IHJldHVybnMgYSBub19hcHBsaWNhdGlvbl9wcm90b2NvbCBhbGVydCwgdGhlIFRMUyBjbGllbnQg TVVTVCBjbG9zZQ0KPiA+ID4gdGhlDQo+ID4gY29ubmVjdGlvbi4iDQo+ID4gPg0KPiA+ID4gUmVn YXJkcw0KPiA+ID4NCj4gPiA+IEpvbg0KPiA+ID4NCj4gPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tDQo+ID4gPiBGcm9tOiBEb3RzIFttYWlsdG86IGRvdHMtYm91bmNlc0BpZXRmLm9yZ10g T24gQmVoYWxmIE9mIEtvbmRhLA0KPiA+ID4gVGlydW1hbGVzd2FyIFJlZGR5DQo+ID4gPiBTZW50 OiAyOCBNYXkgMjAxOCAwNzowMw0KPiA+ID4gVG86IEpvbiBTaGFsbG93OyAnQmVuamFtaW4gS2Fk dWsnOyBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tOw0KPiA+ID4gZG90c0BpZXRmLm9yZw0K PiA+ID4gU3ViamVjdDogUmU6IFtEb3RzXSBUTFMgQVBMTiBleHRlbnNpb24NCj4gPiA+DQo+ID4g PiBBbHRob3VnaCBjb2Fwcyt0Y3AgVVJJIHNjaGVtZSBpcyB1c2VkIGJ5IERPVFMgc2lnbmFsIGNo YW5uZWwsIHdlDQo+ID4gPiBoYXZlIG5vdCB5ZXQgc2VlbiBhbnkgcmVxdWlyZW1lbnQgd2hlcmUg bXVsdGlwbGUgcHJvdG9jb2xzIHdpbGwgYmUNCj4gPiA+IHJ1biBvbiB0aGUgRE9UUyBzZXJ2ZXIg cG9ydCBudW1iZXIgNDY0Ni4NCj4gPiA+IEkgZG9uJ3Qgc2VlIHRoZSBuZWVkIHRvIGRlZmluZSBh IG5ldyBBTFBOIGZvciBET1RTIHNpZ25hbCBjaGFubmVsLg0KPiA+ID4NCj4gPiA+IENoZWVycw0K PiA+ID4gLVRpcnUNCj4gPiA+DQo+ID4gPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ ID4gPiA+IEZyb206IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFs ZiBPZiBKb24gU2hhbGxvdw0KPiA+ID4gPiBTZW50OiBXZWRuZXNkYXksIE1heSAyMywgMjAxOCAx OjU4IFBNDQo+ID4gPiA+IFRvOiAnQmVuamFtaW4gS2FkdWsnIDxrYWR1a0BtaXQuZWR1PjsNCj4g PiA+ID4gbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTsgZG90c0BpZXRmLm9yZw0KPiA+ID4g PiBTdWJqZWN0OiBSZTogW0RvdHNdIFRMUyBBUExOIGV4dGVuc2lvbg0KPiA+ID4gPg0KPiA+ID4g Pg0KPiA+ID4gPg0KPiA+ID4gPiBIaSBCZW4sDQo+ID4gPiA+DQo+ID4gPiA+IFRoZSBET1RTIHNp Z25hbCBzcGVjIGNhbGxzIGZvciBDb0FQIHNlY3VyZWQgYnkgcnVubmluZyBvdmVyIChEKVRMUw0K PiA+ID4gPiAoZWl0aGVyIFVEUCBhbmQvb3IgVENQKSwgYW5kIENvQVAgb3ZlciBUTFMgaXMgY29h cHMrdGNwLiAgU28sIHllcywNCj4gPiA+ID4gYm90aCBjb2FwcyBhbmQNCj4gPiA+ID4gY29hcHMr dGNwIGhhdmUgdG8gYmUgc3VwcG9ydGVkLg0KPiA+ID4gPg0KPiA+ID4gPiBGb3IgZXhhbXBsZSwg SSBjYW4gdXNlIHRoZSBnaXRodWIgbGliY29hcCBjb2FwLWNsaWVudCAoUHVsbA0KPiA+ID4gPiBS ZXF1ZXN0DQo+ID4gPiA+ICMxNzYNCj4gPiA+ID4gaW5zdGFsbGVkKSBhbmQgZG8gImNvYXAtY2xp ZW50IC1jIGNlcnQucGVtDQo+ID4gPiA+IGNvYXBzK3RjcDovLzEyNy4wLjAuMTo0NjQ2Ly53ZWxs LWtub3duL2RvdHMvdjEvY29uZmlnIiBhZ2FpbnN0IG15DQo+ID4gPiA+IGNvYXBzK0RPVFMNCj4g PiA+ID4gc2VydmVyIGFuZCBnZXQgYmFjayBiaW5hcnkgZGF0YSAoaXQgaXMgQ0JPUiBlbmNvZGVk KS4NCj4gPiA+ID4NCj4gPiA+ID4gUmVnYXJkcw0KPiA+ID4gPg0KPiA+ID4gPiBKb24NCj4gPiA+ ID4NCj4gPiA+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiA+ID4gRnJvbTogRG90 cyBbbWFpbHRvOiBkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBCZW5qYW1pbg0K PiA+ID4gPiBLYWR1aw0KPiA+ID4gPiBTZW50OiAyMyBNYXkgMjAxOCAwMTozNQ0KPiA+ID4gPiBU bzogbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbQ0KPiA+ID4gPiBDYzogSm9uIFNoYWxsb3c7 IGRvdHNAaWV0Zi5vcmcNCj4gPiA+ID4gU3ViamVjdDogUmU6IFtEb3RzXSBUTFMgQVBMTiBleHRl bnNpb24NCj4gPiA+ID4NCj4gPiA+ID4gVGhlIGRlZGljYXRlZCBwb3J0IG51bWJlciBpcyBvbmx5 IHNvbWV3aGF0IHJlbGV2YW50LCBJIHRoaW5rIC0tDQo+ID4gPiA+IHRoZSBtYWluIHF1ZXN0aW9u IGlzIHdoZXRoZXIgdGhlIGNvYXBzK3RjcCBVUkkgc2NoZW1lIGlzIGluIHVzZS4NCj4gPiA+ID4g VGhlIFJGQw0KPiA+ID4gPiA4MzIzIHJlcXVpcmVtZW50cyBvbmx5IGNvbWUgaW50byBwbGF5IGZv ciB0aGF0IFVSSSBzY2hlbWUuDQo+ID4gPiA+DQo+ID4gPiA+IC1CZW4NCj4gPiA+ID4NCj4gPiA+ ID4gT24gVHVlLCBNYXkgMjIsIDIwMTggYXQgMDc6NTQ6MzlBTSArMDAwMCwNCj4gPiA+IG1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gPiA+ID4gd3JvdGU6DQo+ID4gPiA+ID4gUmUtLA0K PiA+ID4gPiA+DQo+ID4gPiA+ID4gRG8gd2UgbmVlZCB0aGlzIGdpdmVuIHRoYXQgRE9UUyBpcyB1 c2luZyBhIGRlZGljYXRlZCBwb3J0IG51bWJlcj8NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IENoZWVy cywNCj4gPiA+ID4gPiBNZWQNCj4gPiA+ID4gPg0KPiA+ID4gPiA+IERlIDogRG90cyBbbWFpbHRv OmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZSBKb24NCj4gPiA+ID4gPiBTaGFs bG93IEVudm95w6kgOiBsdW5kaSAyMSBtYWkgMjAxOCAwOTo1NSDDgCA6IGRvdHNAaWV0Zi5vcmcg T2JqZXQNCj4gPiA+ID4gPiA6IFtEb3RzXSBUTFMgQVBMTiBleHRlbnNpb24NCj4gPiA+ID4gPg0K PiA+ID4gPiA+IEhpIHRoZXJlLA0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gQXMgcGVyIFJGQyA4MzIz OiA4LjIuICBjb2Fwcyt0Y3AgVVJJIFNjaGVtZQ0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gLi4uLg0K PiA+ID4gPiA+DQo+ID4gPiA+ID4gICAgbyAgSWYgYSBUTFMgc2VydmVyIGRvZXMgbm90IHN1cHBv cnQgdGhlIEFwcGxpY2F0aW9uLUxheWVyIFByb3RvY29sDQo+ID4gPiA+ID4gICAgICAgTmVnb3Rp YXRpb24gKEFMUE4pIGV4dGVuc2lvbiBbUkZDNzMwMV0gb3Igd2lzaGVzIHRvIGFjY29tbW9kYXRl DQo+ID4gPiA+ID4gICAgICAgVExTIGNsaWVudHMgdGhhdCBkbyBub3Qgc3VwcG9ydCBBTFBOLCBp dCBNQVkgb2ZmZXIgYSBjb2Fwcyt0Y3ANCj4gPiA+ID4gPiAgICAgICBlbmRwb2ludCBvbiBUQ1Ag cG9ydCA1Njg0LiAgVGhpcyBlbmRwb2ludCBNQVkgYWxzbyBiZSBBTFBODQo+ID4gPiA+ID4gICAg ICAgZW5hYmxlZC4gIEEgVExTIHNlcnZlciBNQVkgb2ZmZXIgY29hcHMrdGNwIGVuZHBvaW50cyBv biBwb3J0cw0KPiA+ID4gPiA+ICAgICAgIG90aGVyIHRoYW4gVENQIHBvcnQgNTY4NCwgd2hpY2gg TVVTVCBiZSBBTFBOIGVuYWJsZWQuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiAgICBvICBGb3IgVENQ IHBvcnRzIG90aGVyIHRoYW4gcG9ydCA1Njg0LCB0aGUgVExTIGNsaWVudCBNVVNUIHVzZSB0aGUN Cj4gPiA+ID4gPiAgICAgICBBTFBOIGV4dGVuc2lvbiB0byBhZHZlcnRpc2UgdGhlICJjb2FwIiBw cm90b2NvbCBpZGVudGlmaWVyIChzZWUNCj4gPiA+ID4gPiAgICAgICBTZWN0aW9uIDExLjcpIGlu IHRoZSBsaXN0IG9mIHByb3RvY29scyBpbiBpdHMgQ2xpZW50SGVsbG8uICBJZiB0aGUNCj4gPiA+ ID4gPiAgICAgICBUQ1Agc2VydmVyIHNlbGVjdHMgYW5kIHJldHVybnMgdGhlICJjb2FwIiBwcm90 b2NvbCBpZGVudGlmaWVyDQo+ID4gPiA+ID4gICAgICAgdXNpbmcgdGhlIEFMUE4gZXh0ZW5zaW9u IGluIGl0cyBTZXJ2ZXJIZWxsbywgdGhlbiB0aGUgY29ubmVjdGlvbg0KPiA+ID4gPiA+ICAgICAg IHN1Y2NlZWRzLiAgSWYgdGhlIFRMUyBzZXJ2ZXIgZWl0aGVyIGRvZXMgbm90IG5lZ290aWF0ZSB0 aGUgQUxQTg0KPiA+ID4gPiA+ICAgICAgIGV4dGVuc2lvbiBvciByZXR1cm5zIGEgbm9fYXBwbGlj YXRpb25fcHJvdG9jb2wgYWxlcnQsIHRoZSBUTFMNCj4gPiA+ID4gPiAgICAgICBjbGllbnQgTVVT VCBjbG9zZSB0aGUgY29ubmVjdGlvbi4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IERvIHdlIG5lZWQg dG8gcmVmZXIgdG8gdGhlIHJlcXVpcmVtZW50IGZvciBBTFBOIGFzIHdlIGFyZSBub3QNCj4gPiA+ ID4gPiBob3N0aW5nIG9uDQo+ID4gPiA+IHBvcnQgNTY4ND8NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ IFJlZ2FyZHMNCj4gPiA+ID4gPg0KPiA+ID4gPiA+IEpvbg0KPiA+ID4gPg0KPiA+ID4gPiA+IF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gPiA+ID4g RG90cyBtYWlsaW5nIGxpc3QNCj4gPiA+ID4gPiBEb3RzQGlldGYub3JnDQo+ID4gPiA+ID4gaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4gPiA+DQo+ID4gPiA+ IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gPiA+ IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiA+IERvdHNAaWV0Zi5vcmcNCj4gPiA+ID4gaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4gPiA+DQo+ID4gPiA+IF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gPiA+IERv dHMgbWFpbGluZyBsaXN0DQo+ID4gPiA+IERvdHNAaWV0Zi5vcmcNCj4gPiA+ID4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4gPiBfX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ID4gRG90cyBtYWlsaW5nIGxpc3QN Cj4gPiA+IERvdHNAaWV0Zi5vcmcNCj4gPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vZG90cw0KPiA+DQo+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCj4gPiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+IERvdHNAaWV0Zi5vcmcN Cj4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gDQo+IF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IERvdHMgbWFp bGluZyBsaXN0DQo+IERvdHNAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9kb3RzDQoNCg== From nobody Tue May 29 00:42:57 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8820D12DA03 for ; Tue, 29 May 2018 00:42:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id giFfwhUe7CAB for ; Tue, 29 May 2018 00:42:52 -0700 (PDT) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C8DD12D869 for ; Tue, 29 May 2018 00:42:52 -0700 (PDT) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.90_1) (envelope-from ) id 1fNZHN-00017y-1D; Tue, 29 May 2018 08:42:49 +0100 From: "Jon Shallow" To: "'Konda, Tirumaleswar Reddy'" , "Benjamin Kaduk" , , References: <13d301d3f0d8$f66f7c60$e34e7520$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1E28F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <20180523003451.GG10597@kduck.kaduk.org> <15bc01d3f26f$fecf3380$fc6d9a80$@jpshallow.com> <18b001d3f65f$8d47df20$a7d79d60$@jpshallow.com> <18d701d3f66a$bfd2dcf0$3f7896d0$@jpshallow.com> <192201d3f692$62c4a930$284dfb90$@jpshallow.com> In-Reply-To: Date: Tue, 29 May 2018 08:42:49 +0100 Message-ID: <196a01d3f720$a44ab550$ece01ff0$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQF7fY0SEnbbzScVHebrKQTjRWAcaAIi09JrAU1FL/ABpTg7WwITkQo3AlFTTtUCAn+wpwGSMkFzAlhh1J8AmoNr6AJ1YtACpGOMeTA= Content-Language: en-gb Archived-At: Subject: Re: [Dots] TLS APLN extension X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 May 2018 07:42:56 -0000 Hi Tiru, Suggested text looks good to me. Regards Jon -----Original Message----- From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar Reddy Sent: 29 May 2018 08:09 To: Jon Shallow; Benjamin Kaduk; mohamed.boucadair@orange.com; = dots@ietf.org Subject: Re: [Dots] TLS APLN extension > -----Original Message----- > From: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > Sent: Monday, May 28, 2018 8:15 PM > To: Konda, Tirumaleswar Reddy ; > Benjamin Kaduk ; mohamed.boucadair@orange.com; > dots@ietf.org > Subject: RE: [Dots] TLS APLN extension >=20 > This email originated from outside of the organization. Do not click = links or > open attachments unless you recognize the sender and know the content = is safe. >=20 > -----Original Message----- > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, = Tirumaleswar > Reddy > Sent: 28 May 2018 14:28 > To: Jon Shallow; Benjamin Kaduk; mohamed.boucadair@orange.com; > dots@ietf.org > Subject: Re: [Dots] TLS APLN extension >=20 > > -----Original Message----- > > From: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > Sent: Monday, May 28, 2018 3:31 PM > > To: Konda, Tirumaleswar Reddy ; > > Benjamin Kaduk ; mohamed.boucadair@orange.com; > > dots@ietf.org > > Subject: RE: [Dots] TLS APLN extension > > > > This email originated from outside of the organization. Do not click > > links or open attachments unless you recognize the sender and know = the > content is safe. > > > > Hi Tiru, > > > > I agree the DOTS server has to send back a "coap" if it receives a > > ALPN request over TCP. Do we need to state this in the Draft? >=20 > No, but I think = https://tools.ietf.org/html/draft-ietf-dots-signal-channel- > 19#section-3 needs to point to both > RFC7252 and RFC8323. >=20 > [Jon] Agreed. Are you able to do this with some suitable wrapper = text? Proposed text: DOTS signal channel uses the "coaps" URI scheme defined in Section 6 of = RFC7252 and "coaps+tcp" URI scheme defined in=20 section 8.2 of RFC 8323 to identify DOTS server resources accessible = using CoAP over UDP secured with DTLS and CoAP over TCP secured with TLS. -Tiru > ~Jon >=20 > Cheers, > -Tiru >=20 > > > > Regards > > > > Jon > > > > -----Original Message----- > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, > > Tirumaleswar Reddy > > Sent: 28 May 2018 10:49 > > To: Jon Shallow; Benjamin Kaduk; mohamed.boucadair@orange.com; > > dots@ietf.org > > Subject: Re: [Dots] TLS APLN extension > > > > > -----Original Message----- > > > From: Jon Shallow [mailto:supjps-ietf@jpshallow.com] > > > Sent: Monday, May 28, 2018 2:11 PM > > > To: Konda, Tirumaleswar Reddy > ; > > > Benjamin Kaduk ; mohamed.boucadair@orange.com; > > > dots@ietf.org > > > Subject: RE: [Dots] TLS APLN extension > > > > > > > > > > > > Hi Tiru, > > > > > > I agree that it makes no sense to have our own ALPN - "coap" is = fine > > > as that is describing the next protocol layer up. However, I did > > > raise the question in case the DOTS Server needs to respond to a > > > DOTS client that is correctly following RFC 8323 and expecting to > > > see back a ALPN > > response. > > > > The DOTS server will not be running on 5684. If the DOTS server is > > correctly following RFC8323, it should respond with ALPN response = "coap". > > > > -Tiru > > > > > > > > "If the TLS server either does not negotiate the ALPN extension or > > > returns a no_application_protocol alert, the TLS client MUST close > > > the > > connection." > > > > > > Regards > > > > > > Jon > > > > > > -----Original Message----- > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, > > > Tirumaleswar Reddy > > > Sent: 28 May 2018 07:03 > > > To: Jon Shallow; 'Benjamin Kaduk'; mohamed.boucadair@orange.com; > > > dots@ietf.org > > > Subject: Re: [Dots] TLS APLN extension > > > > > > Although coaps+tcp URI scheme is used by DOTS signal channel, we > > > have not yet seen any requirement where multiple protocols will be > > > run on the DOTS server port number 4646. > > > I don't see the need to define a new ALPN for DOTS signal channel. > > > > > > Cheers > > > -Tiru > > > > > > > -----Original Message----- > > > > From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Jon = Shallow > > > > Sent: Wednesday, May 23, 2018 1:58 PM > > > > To: 'Benjamin Kaduk' ; > > > > mohamed.boucadair@orange.com; dots@ietf.org > > > > Subject: Re: [Dots] TLS APLN extension > > > > > > > > > > > > > > > > Hi Ben, > > > > > > > > The DOTS signal spec calls for CoAP secured by running over = (D)TLS > > > > (either UDP and/or TCP), and CoAP over TLS is coaps+tcp. So, = yes, > > > > both coaps and > > > > coaps+tcp have to be supported. > > > > > > > > For example, I can use the github libcoap coap-client (Pull > > > > Request > > > > #176 > > > > installed) and do "coap-client -c cert.pem > > > > coaps+tcp://127.0.0.1:4646/.well-known/dots/v1/config" against = my > > > > coaps+DOTS > > > > server and get back binary data (it is CBOR encoded). > > > > > > > > Regards > > > > > > > > Jon > > > > > > > > -----Original Message----- > > > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Benjamin > > > > Kaduk > > > > Sent: 23 May 2018 01:35 > > > > To: mohamed.boucadair@orange.com > > > > Cc: Jon Shallow; dots@ietf.org > > > > Subject: Re: [Dots] TLS APLN extension > > > > > > > > The dedicated port number is only somewhat relevant, I think -- > > > > the main question is whether the coaps+tcp URI scheme is in use. > > > > The RFC > > > > 8323 requirements only come into play for that URI scheme. > > > > > > > > -Ben > > > > > > > > On Tue, May 22, 2018 at 07:54:39AM +0000, > > > mohamed.boucadair@orange.com > > > > wrote: > > > > > Re-, > > > > > > > > > > Do we need this given that DOTS is using a dedicated port = number? > > > > > > > > > > Cheers, > > > > > Med > > > > > > > > > > De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon > > > > > Shallow Envoy=C3=A9 : lundi 21 mai 2018 09:55 =C3=80 : = dots@ietf.org Objet > > > > > : [Dots] TLS APLN extension > > > > > > > > > > Hi there, > > > > > > > > > > As per RFC 8323: 8.2. coaps+tcp URI Scheme > > > > > > > > > > .... > > > > > > > > > > o If a TLS server does not support the Application-Layer = Protocol > > > > > Negotiation (ALPN) extension [RFC7301] or wishes to = accommodate > > > > > TLS clients that do not support ALPN, it MAY offer a = coaps+tcp > > > > > endpoint on TCP port 5684. This endpoint MAY also be = ALPN > > > > > enabled. A TLS server MAY offer coaps+tcp endpoints on = ports > > > > > other than TCP port 5684, which MUST be ALPN enabled. > > > > > > > > > > o For TCP ports other than port 5684, the TLS client MUST = use the > > > > > ALPN extension to advertise the "coap" protocol = identifier (see > > > > > Section 11.7) in the list of protocols in its = ClientHello. If the > > > > > TCP server selects and returns the "coap" protocol = identifier > > > > > using the ALPN extension in its ServerHello, then the = connection > > > > > succeeds. If the TLS server either does not negotiate = the ALPN > > > > > extension or returns a no_application_protocol alert, = the TLS > > > > > client MUST close the connection. > > > > > > > > > > Do we need to refer to the requirement for ALPN as we are not > > > > > hosting on > > > > port 5684? > > > > > > > > > > Regards > > > > > > > > > > Jon > > > > > > > > > _______________________________________________ > > > > > Dots mailing list > > > > > Dots@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > _______________________________________________ > > > > Dots mailing list > > > > Dots@ietf.org > > > > https://www.ietf.org/mailman/listinfo/dots > > > > > > > > _______________________________________________ > > > > Dots mailing list > > > > Dots@ietf.org > > > > https://www.ietf.org/mailman/listinfo/dots > > > _______________________________________________ > > > Dots mailing list > > > Dots@ietf.org > > > https://www.ietf.org/mailman/listinfo/dots > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots _______________________________________________ Dots mailing list Dots@ietf.org https://www.ietf.org/mailman/listinfo/dots From nobody Tue May 29 02:33:17 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 619981275AB for ; Tue, 29 May 2018 02:33:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1hrTxogHxZeG for ; Tue, 29 May 2018 02:33:12 -0700 (PDT) Received: from orange.com (mta136.mail.business.static.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 10CB1124BE8 for ; Tue, 29 May 2018 02:33:12 -0700 (PDT) Received: from opfednr04.francetelecom.fr (unknown [xx.xx.xx.68]) by opfednr24.francetelecom.fr (ESMTP service) with ESMTP id 9BE3B404E9; Tue, 29 May 2018 11:33:10 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.62]) by opfednr04.francetelecom.fr (ESMTP service) with ESMTP id 6D0FC40074; Tue, 29 May 2018 11:33:10 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM5E.corporate.adroot.infra.ftgroup ([fe80::6958:931c:a396:f51e%19]) with mapi id 14.03.0382.000; Tue, 29 May 2018 11:33:10 +0200 From: To: "Konda, Tirumaleswar Reddy" , "kaname nishizuka" CC: "dots@ietf.org" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt Thread-Index: AQHT0NF/5sqjFXD5eEKW2iVIpIKRtqP6A2IAgCG5zoCACDXkgIAAAhwAgAAFAwCAAxeuAIAAL3EAgAL6OICAAC9rAIAAC0wAgAS5xwCAAc8UgIAAxkKAgABEsoCAAAn6UIAACZ8QgAAHNfCAAAi+0IAABecAgAAHAQCAAsWtAIAAPxQAgBF938A= Date: Tue, 29 May 2018 09:33:09 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF21E3F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DF17C57@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <8ae47725-4db3-e02a-7846-d2f4d5d9b739@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BCA8@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BD67@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BDCD@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <2c400e78-4482-2b61-5289-6b149294b78f@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BE20@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <3327b0b6-bbb4-429c-b2c2-6a63c3cd27be@nttv6.jp> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.2] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 May 2018 09:33:16 -0000 SGkgYWxsLA0KDQpJdCBzZWVtcyB0aGF0IHRoaXMgZGlzY3Vzc2lvbiBoYXMgY29udmVyZ2VkLg0K DQpJIHVwZGF0ZWQgdGhlIGRyYWZ0IGFzIGZvbGxvd3MgdG8gcmVmbGVjdCB0aGUgb3V0Y29tZSBv ZiB0aGUgZGlzY3Vzc2lvbjoNCg0KT0xEOiANCiAgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0 aW5nIHdpdGggYW4gZXhpc3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0DQogICBmcm9tIGEgZGlmZmVy ZW50IERPVFMgY2xpZW50LCBhbmQgdGhlIERPVFMgc2VydmVyIGRlY2lkZXMgdG8gbWFpbnRhaW4N CiAgIHRoZSBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QsIHRoZSBET1RTIHNlcnZlciBy ZXR1cm5zIDQuMDkNCiAgIChDb25mbGljdCkgW1JGQzgxMzJdIHRvIHRoZSByZXF1ZXN0aW5nIERP VFMgY2xpZW50LiAgVGhlIHJlc3BvbnNlDQogICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24g Zm9yIGEgRE9UUyBjbGllbnQgdG8gcmVjb2duaXplIHRoZSBzb3VyY2UNCiAgIG9mIHRoZSBjb25m bGljdCBhcyBkZXNjcmliZWQgYmVsb3c6DQoNCk5FVzoNCiAgIElmIHRoZSByZXF1ZXN0IGlzIGNv bmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0DQogICBmcm9tIGEg ZGlmZmVyZW50IERPVFMgY2xpZW50LCB0aGUgRE9UUyBzZXJ2ZXIgbWF5IHJldHVybiAyLjAxDQog ICAoQ3JlYXRlZCkgb3IgNC4wOSAoQ29uZmxpY3QpIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMgY2xp ZW50LiAgSWYgdGhlDQogICBET1RTIHNlcnZlciBkZWNpZGVzIHRvIG1haW50YWluIHRoZSBuZXcg bWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9UUw0KICAgc2VydmVyIHJldHVybnMgMi4wMSAoQ3Jl YXRlZCkgdG8gdGhlIHJlcXVlc3RpbmcgRE9UUyBjbGllbnQuICBJZiB0aGUNCiAgIERPVFMgc2Vy dmVyIGRlY2lkZXMgdG8gcmVqZWN0IHRoZSBuZXcgbWl0aWdhdGlvbiByZXF1ZXN0LCB0aGUgRE9U Uw0KICAgc2VydmVyIHJldHVybnMgNC4wOSAoQ29uZmxpY3QpIHRvIHRoZSByZXF1ZXN0aW5nIERP VFMgY2xpZW50LiAgRm9yDQogICBib3RoIDIuMDEgKENyZWF0ZWQpIGFuZCA0LjA5IChDb25mbGlj dCkgcmVzcG9uc2VzLCB0aGUgcmVzcG9uc2UNCiAgIGluY2x1ZGVzIGVub3VnaCBpbmZvcm1hdGlv biBmb3IgYSBET1RTIGNsaWVudCB0byByZWNvZ25pemUgdGhlIHNvdXJjZQ0KICAgb2YgdGhlIGNv bmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxvdzoNCg0KQ2hlZXJzLA0KTWVkDQoNCj4gLS0tLS1NZXNz YWdlIGQnb3JpZ2luZS0tLS0tDQo+IERlwqA6IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgW21h aWx0bzpUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tXQ0KPiBFbnZvecOpwqA6IHZl bmRyZWRpIDE4IG1haSAyMDE4IDA4OjI0DQo+IMOAwqA6IGthbmFtZSBuaXNoaXp1a2E7IEJPVUNB REFJUiBNb2hhbWVkIElNVC9PTE4NCj4gQ2PCoDogZG90c0BpZXRmLm9yZw0KPiBPYmpldMKgOiBS RTogW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50 eHQNCj4gDQo+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiBGcm9tOiBrYW5hbWUg bmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50dHY2LmpwXQ0KPiA+IFNlbnQ6IEZyaWRheSwgTWF5 IDE4LCAyMDE4IDg6MDYgQU0NCj4gPiBUbzogbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTsg S29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA+IDxUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBN Y0FmZWUuY29tPg0KPiA+IENjOiBkb3RzQGlldGYub3JnDQo+ID4gU3ViamVjdDogUmU6IFtEb3Rz XSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMTkudHh0DQo+ID4N Cj4gPiBUaGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRp b24uIERvIG5vdCBjbGljayBsaW5rcw0KPiBvcg0KPiA+IG9wZW4gYXR0YWNobWVudHMgdW5sZXNz IHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcw0KPiA+IHNh ZmUuDQo+ID4NCj4gPiBSZS0sDQo+ID4NCj4gPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPg0KPiA+ IHRoYW5rcywNCj4gPiBLYW5hbWUNCj4gPg0KPiA+DQo+ID4gT24gMjAxOC8wNS8xNiAxNzoxNSwg bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPiA+IFJlLSwNCj4gPiA+DQo+ ID4gPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPiA+DQo+ID4gPiBDaGVlcnMsDQo+ID4gPiBNZWQN Cj4gPiA+DQo+ID4gPj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gPj4gRGXCoDog RG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZSBrYW5hbWUN Cj4gPiA+PiBuaXNoaXp1a2EgRW52b3nDqcKgOiBtZXJjcmVkaSAxNiBtYWkgMjAxOCAwOTo1MSDD gMKgOiBCT1VDQURBSVIgTW9oYW1lZA0KPiA+ID4+IElNVC9PTE47IEtvbmRhLCBUaXJ1bWFsZXN3 YXIgUmVkZHkgQ2PCoDogZG90c0BpZXRmLm9yZyBPYmpldMKgOiBSZToNCj4gPiA+PiBbRG90c10g SS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTE5LnR4dA0KPiA+ID4+ DQo+ID4gPj4gUmUsDQo+ID4gPj4NCj4gPiA+PiBJIHNlZSwgYnV0IEkgZGlkbid0IGZlZWwgIkZv ciBleGFtcGxlOiIgaXMgcmVmbGVjdGluZyBteSBjb21tZW50Lg0KPiA+ID4gW01lZF0gSSB3YXMg cmVmZXJyaW5nIHRoaXMgdGhpcyBjb21tZW50IHlvdSBtYWRlICJJdCBzaG91bGQgYmUgbGVmdCBh cw0KPiA+IGltcGxlbWVudGF0aW9uLSBhbmQgZGVwbG95bWVudC1zcGVjaWZpYyIuDQo+ID4gPg0K PiA+ID4gQW55d2F5LCBsZXQncyByZW1vdmUgIkZvciBleGFtcGxlOiIuDQo+ID4gPg0KPiA+ID4+ IFNob3VsZCB3ZSBuZWVkIHRvIHVzZSBzdWNjZXNzICgyLjAxIG9yIDIuMDQpIGluIHRoZSBmaXJz dCBzZW50ZW5jZSBsaWtlDQo+IHRoaXM/DQo+ID4gPj4NCj4gPiA+PiAgIMKgwqAgSWYgdGhlIHJl cXVlc3QgaXMgY29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QN Cj4gPiA+PiAgIMKgwqAgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwgdGhlIERPVFMgc2Vy dmVyIG1heSByZXR1cm4gc3VjY2Vzcw0KPiA+ID4+ICgyLjAxIG9yDQo+ID4gPj4gMi4wNCkNCj4g PiA+PiAgIMKgwqAgb3LCoCBDb25mbGljdCg0LjA5KSB0byB0aGUgcmVxdWVzdGluZyBET1RTIGNs aWVudC4NCj4gPiA+Pg0KPiA+ID4gW01lZF0gSSBkb24ndCB0aGluayBzby4gVGhlIHRleHQgaXMg YWJvdXQgYSByZXF1ZXN0IHdpdGggYSBuZXcgY3VpZC9taWQuDQo+ID4gPg0KPiA+IFtrYW5hbWVd IE9LLCB0aGUgdGV4dCBpcyBhYm91dCBhIHJlcXVlc3Qgd2l0aCBhIG5ldyBjdWlkL21pZC4NCj4g PiBIb3dldmVyLCBJJ2QgbGlrZSB0byBwb2ludCBpdCBvdXQgdGhhdCB0aGUgY2hlY2tpbmcgb2Yg Y29uZmxpY3Qgc2hvdWxkIGJlDQo+IGRvbmUNCj4gPiBhdCB0aGUgYXJyaXZhbCBvZiBhIG5ldyBQ VVQgcmVxdWVzdCB3aXRoIGJvdGggYSBuZXcgY3VpZC9taWQgY2FzZSBhbmQgdGhlDQo+ID4gc2Ft ZSBtaWQodXBkYXRlIG9mIHRoZSBtaXRpZ2F0aW9uIHJlcXVlc3QpIGNhc2UuDQo+IA0KPiAyLjA0 IGlzIGRpc2N1c3NlZCBiZWZvcmUgdGhlIHRleHQgZXhwbGFpbmluZyBjb25mbGljdHMgd2l0aCBh biBleGlzdGluZw0KPiBtaXRpZ2F0aW9uIHJlcXVlc3QgZnJvbSBhIGRpZmZlcmVudCBjbGllbnQu DQo+IDxzbmlwIGZyb20gU2VjdGlvbiA0LjQuMT4NCj4gICAgSWYgdGhlIERPVFMgc2VydmVyIGZp bmRzIHRoZSAnbWlkJyBwYXJhbWV0ZXIgdmFsdWUgY29udmV5ZWQgaW4gdGhlDQo+ICAgIFBVVCBy ZXF1ZXN0IGluIGl0cyBjb25maWd1cmF0aW9uIGRhdGEgYm91bmQgdG8gdGhhdCBET1RTIGNsaWVu dCwgaXQNCj4gICAgTUFZIHVwZGF0ZSB0aGUgbWl0aWdhdGlvbiByZXF1ZXN0LCBhbmQgYSAyLjA0 IChDaGFuZ2VkKSByZXNwb25zZSBpcw0KPiAgICByZXR1cm5lZCB0byBpbmRpY2F0ZSBhIHN1Y2Nl c3NmdWwgdXBkYXRlIG9mIHRoZSBtaXRpZ2F0aW9uIHJlcXVlc3QuDQo+IDwvc25pcD4NCj4gDQo+ IC1UaXJ1DQo+IA0KPiA+DQo+ID4NCj4gPg0KPiA+DQo+ID4gPj4gcmVnYXJkcywNCj4gPiA+PiBL YW5hbWUNCj4gPiA+Pg0KPiA+ID4+DQo+ID4gPj4gT24gMjAxOC8wNS8xNiAxNjozMywgbW9oYW1l ZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPiA+Pj4gUmUtLA0KPiA+ID4+Pg0KPiA+ ID4+PiAiRm9yIGV4YW1wbGUiIGlzIHRoZXJlIHRvIGFjY29tbW9kYXRlIGEgY29tbWVudCBmcm9t IEthbmFtZSB3aG8NCj4gPiA+Pj4gd2FudGVkIHRoZQ0KPiA+ID4+IGJlaGF2aW9yIHRvIGJlIGFs c28gaW1wbGVtZW50YXRpb24vZGVwbG95bWVudC4NCj4gPiA+Pj4gQ2hlZXJzLA0KPiA+ID4+PiBN ZWQNCj4gPiA+Pj4NCj4gPiA+Pj4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+ID4+ Pj4gRGXCoDogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA+ID4+Pj4gW21haWx0bzpUaXJ1 bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tXQ0KPiA+ID4+Pj4gRW52b3nDqcKgOiBtZXJj cmVkaSAxNiBtYWkgMjAxOCAwOTowNCDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZA0KPiA+IElNVC9P TE47DQo+ID4gPj4+PiBrYW5hbWUgbmlzaGl6dWthIENjwqA6IGRvdHNAaWV0Zi5vcmcgT2JqZXTC oDogUkU6IFtEb3RzXSBJLUQgQWN0aW9uOg0KPiA+ID4+Pj4gZHJhZnQtaWV0Zi1kb3RzLXNpZ25h bC1jaGFubmVsLTE5LnR4dA0KPiA+ID4+Pj4NCj4gPiA+Pj4+IEhpIE1lZCwNCj4gPiA+Pj4+DQo+ ID4gPj4+PiBQbGVhc2Ugc2VlIGlubGluZQ0KPiA+ID4+Pj4NCj4gPiA+Pj4+PiAtLS0tLU9yaWdp bmFsIE1lc3NhZ2UtLS0tLQ0KPiA+ID4+Pj4+IEZyb206IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5n ZS5jb20NCj4gPiA+Pj4+PiBbbWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb21dDQo+ ID4gPj4+Pj4gU2VudDogV2VkbmVzZGF5LCBNYXkgMTYsIDIwMTggMTI6MjYgUE0NCj4gPiA+Pj4+ PiBUbzogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA+ID4+Pj4+IDxUaXJ1bWFsZXN3YXJS ZWRkeV9Lb25kYUBNY0FmZWUuY29tPjsNCj4gPiA+Pj4+PiBrYW5hbWUgbmlzaGl6dWthIDxrYW5h bWVAbnR0djYuanA+DQo+ID4gPj4+Pj4gQ2M6IGRvdHNAaWV0Zi5vcmcNCj4gPiA+Pj4+PiBTdWJq ZWN0OiBSRTogW0RvdHNdIEktRCBBY3Rpb246DQo+ID4gPj4+Pj4gZHJhZnQtaWV0Zi1kb3RzLXNp Z25hbC1jaGFubmVsLTE5LnR4dA0KPiA+ID4+Pj4+DQo+ID4gPj4+Pj4gVGhpcyBlbWFpbCBvcmln aW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3QNCj4gPiA+Pj4+ PiBjbGljaw0KPiA+ID4+IGxpbmtzDQo+ID4gPj4+PiBvcg0KPiA+ID4+Pj4+IG9wZW4gYXR0YWNo bWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUNCj4gPiA+ Pj4+PiBjb250ZW50IGlzIHNhZmUuDQo+ID4gPj4+Pj4NCj4gPiA+Pj4+PiBIaSBUaXJ1LA0KPiA+ ID4+Pj4+DQo+ID4gPj4+Pj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+ID4gPj4+Pj4NCj4gPiA+Pj4+ PiBDaGVlcnMsDQo+ID4gPj4+Pj4gTWVkDQo+ID4gPj4+Pj4NCj4gPiA+Pj4+Pj4gLS0tLS1NZXNz YWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gPj4+Pj4+IERlwqA6IEtvbmRhLCBUaXJ1bWFsZXN3YXIg UmVkZHkNCj4gPiA+Pj4+Pj4gW21haWx0bzpUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUu Y29tXQ0KPiA+ID4+Pj4+PiBFbnZvecOpwqA6IG1lcmNyZWRpIDE2IG1haSAyMDE4IDA4OjExIMOA wqA6IEJPVUNBREFJUiBNb2hhbWVkDQo+ID4gPj4+Pj4+IElNVC9PTE47IGthbmFtZSBuaXNoaXp1 a2EgQ2PCoDogZG90c0BpZXRmLm9yZyBPYmpldMKgOiBSRTogW0RvdHNdDQo+ID4gPj4+Pj4+IEkt RCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPiA+Pj4+ Pj4NCj4gPiA+Pj4+Pj4gSSBwcm9wb3NlIHRvIHVwZGF0ZSB0aGUgdGV4dCBhcyBmb2xsb3dzIHRv IG1ha2UgaXQgbW9yZSBjbGVhcjoNCj4gPiA+Pj4+Pj4NCj4gPiA+Pj4+Pj4gSWYgdGhlIHJlcXVl c3QgaXMgY29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QNCj4g PiA+Pj4+Pj4gZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwgdGhlIERPVFMgc2VydmVyIG1h eSBlaXRoZXIgZGVjaWRlDQo+ID4gPj4+Pj4+IHRvIG1haW50YWluIHRoZSBjb25mbGljdGluZyBy ZXF1ZXN0IG9yIHJlamVjdCB0aGUgY29uZmxpY3RpbmcNCj4gbWl0aWdhdGlvbg0KPiA+IHJlcXVl c3QuDQo+ID4gPj4+Pj4+IElmIHRoZSBET1RTIHNlcnZlciBkZWNpZGVzIHRvIG1haW50YWluIHRo ZSBjb25mbGljdGluZyBtaXRpZ2F0aW9uDQo+ID4gPj4+Pj4+IHJlcXVlc3QsDQo+ID4gPj4+Pj4g W01lZF0gSSBndWVzcyAiY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0IiBwb2ludHMgdG8g dGhlIG5ldw0KPiA+IHJlcXVlc3QuDQo+ID4gPj4+Pj4NCj4gPiA+Pj4+PiAgICB0aGUgRE9UUyBz ZXJ2ZXIgcmV0dXJucyAyLjAxIChDcmVhdGVkKSB0bw0KPiA+ID4+Pj4+PiB0aGUgcmVxdWVzdGlu ZyBET1RTIGNsaWVudC4gSWYgdGhlIERPVFMgc2VydmVyIGRlY2lkZXMgdG8gcmVqZWN0DQo+ID4g Pj4+Pj4+IHRoZSBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QsIHRoZSBET1RTIHNlcnZl ciByZXR1cm5zIDQuMDkNCj4gPiA+Pj4+Pj4gKENvbmZsaWN0KSBbUkZDODEzMl0gdG8gdGhlIHJl cXVlc3RpbmcgRE9UUyBjbGllbnQNCj4gPiA+Pj4+PiBbTWVkXSBJZGVtIGFzIGFib3ZlLg0KPiA+ ID4+Pj4+DQo+ID4gPj4+Pj4NCj4gPiA+Pj4+Pj4gRm9yIGJvdGggMi4wMSAoQ3JlYXRlZCkgYW5k IDQuMDkgKENvbmZsaWN0KSByZXNwb25zZXMsDQo+ID4gPj4+Pj4gW01lZF0gSSBsaWtlIHRoaXMu DQo+ID4gPj4+Pj4NCj4gPiA+Pj4+PiAgICB0aGUgcmVzcG9uc2UgbWVzc2FnZQ0KPiA+ID4+Pj4+ PiBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQgdG8gcmVjb2du aXplIHRoZQ0KPiA+ID4+Pj4+PiBzb3VyY2Ugb2YgdGhlIGNvbmZsaWN0IGFzIGRlc2NyaWJlZCBi ZWxvdzoNCj4gPiA+Pj4+PiBbTWVkXSBXaGF0IGFib3V0Pw0KPiA+ID4+Pj4+DQo+ID4gPj4+Pj4g TkVXOg0KPiA+ID4+Pj4+DQo+ID4gPj4+Pj4gICAgICBJZiB0aGUgcmVxdWVzdCBpcyBjb25mbGlj dGluZyB3aXRoIGFuIGV4aXN0aW5nIG1pdGlnYXRpb24NCj4gcmVxdWVzdA0KPiA+ID4+Pj4+ICAg ICAgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwgdGhlIERPVFMgc2VydmVyIG1heSByZXR1 cm4gMi4wMQ0KPiA+ID4+Pj4+ICAgICAgKENyZWF0ZWQpIG9yIDQuMDkgKENvbmZsaWN0KSB0byB0 aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4gIEZvcg0KPiA+ID4+Pj4+ICAgICAgZXhhbXBsZToN Cj4gPiA+Pj4+Pg0KPiA+ID4+Pj4+ICAgICAgbyAgSWYgdGhlIERPVFMgc2VydmVyIGRlY2lkZXMg dG8gbWFpbnRhaW4gdGhlIG5ldyBtaXRpZ2F0aW9uDQo+ID4gcmVxdWVzdCwNCj4gPiA+Pj4+PiAg ICAgICAgIHRoZSBET1RTIHNlcnZlciByZXR1cm5zIDIuMDEgKENyZWF0ZWQpIHRvIHRoZSByZXF1 ZXN0aW5nIERPVFMNCj4gPiA+Pj4+PiAgICAgICAgIGNsaWVudC4NCj4gPiA+Pj4+Pg0KPiA+ID4+ Pj4+ICAgICAgbyAgSWYgdGhlIERPVFMgc2VydmVyIGRlY2lkZXMgdG8gcmVqZWN0IHRoZSBuZXcg bWl0aWdhdGlvbg0KPiByZXF1ZXN0LA0KPiA+ID4+Pj4+ICAgICAgICAgdGhlIERPVFMgc2VydmVy IHJldHVybnMgNC4wOSAoQ29uZmxpY3QpIHRvIHRoZSByZXF1ZXN0aW5nDQo+IERPVFMNCj4gPiA+ Pj4+PiAgICAgICAgIGNsaWVudC4NCj4gPiA+Pj4+Pg0KPiA+ID4+Pj4+ICAgICAgRm9yIGJvdGgg Mi4wMSAoQ3JlYXRlZCkgYW5kIDQuMDkgKENvbmZsaWN0KSByZXNwb25zZXMsIHRoZQ0KPiByZXNw b25zZQ0KPiA+ID4+Pj4+ICAgICAgaW5jbHVkZXMgZW5vdWdoIGluZm9ybWF0aW9uIGZvciBhIERP VFMgY2xpZW50IHRvIHJlY29nbml6ZSB0aGUNCj4gPiBzb3VyY2UNCj4gPiA+Pj4+PiAgICAgIG9m IHRoZSBjb25mbGljdCBhcyBkZXNjcmliZWQgYmVsb3c6DQo+ID4gPj4+PiBQcm9wb3NlZCB0ZXh0 IGxvb2tzIGdvb2QuIE5pdDogSSBkb24ndCBzZWUgdGhlIG5lZWQgZm9yICJGb3IgZXhhbXBsZSIu DQo+ID4gPj4+Pg0KPiA+ID4+Pj4gQ2hlZXJzLA0KPiA+ID4+Pj4gLVRpcnUNCj4gPiA+Pj4+DQo+ ID4gPj4+Pj4+IC1UaXJ1DQo+ID4gPj4+Pj4+DQo+ID4gPj4+Pj4+PiAtLS0tLU9yaWdpbmFsIE1l c3NhZ2UtLS0tLQ0KPiA+ID4+Pj4+Pj4gRnJvbTogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0Bp ZXRmLm9yZ10gT24gQmVoYWxmIE9mDQo+ID4gPj4+Pj4+PiBtb2hhbWVkLmJvdWNhZGFpckBvcmFu Z2UuY29tDQo+ID4gPj4+Pj4+PiBTZW50OiBXZWRuZXNkYXksIE1heSAxNiwgMjAxOCAxMDo1MiBB TQ0KPiA+ID4+Pj4+Pj4gVG86IGthbmFtZSBuaXNoaXp1a2EgPGthbmFtZUBudHR2Ni5qcD4NCj4g PiA+Pj4+Pj4+IENjOiBkb3RzQGlldGYub3JnDQo+ID4gPj4+Pj4+PiBTdWJqZWN0OiBSZTogW0Rv dHNdIEktRCBBY3Rpb246DQo+ID4gPj4+Pj4+PiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5u ZWwtMTkudHh0DQo+ID4gPj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4gVGhpcyBlbWFpbCBvcmlnaW5hdGVk IGZyb20gb3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3QNCj4gPiA+Pj4+Pj4+IGNs aWNrIGxpbmtzDQo+ID4gPj4+Pj4+IG9yDQo+ID4gPj4+Pj4+PiBvcGVuIGF0dGFjaG1lbnRzIHVu bGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlDQo+ID4gPj4+Pj4+PiBj b250ZW50IGlzIHNhZmUuDQo+ID4gPj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4gSGkgS2FuYW1lLA0KPiA+ ID4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+IFRoYW5rIHlvdSBmb3IgQUNraW5nLiBJIHdpbGwgaW1wbGVt ZW50IHRoaXMgY2hhbmdlLg0KPiA+ID4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+IENoZWVycywNCj4gPiA+ Pj4+Pj4+IE1lZA0KPiA+ID4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmln aW5lLS0tLS0NCj4gPiA+Pj4+Pj4+PiBEZcKgOiBrYW5hbWUgbmlzaGl6dWthIFttYWlsdG86a2Fu YW1lQG50dHY2LmpwXSBFbnZvecOpwqA6DQo+ID4gPj4+Pj4+Pj4gbWVyY3JlZGkNCj4gPiA+Pj4+ Pj4+PiAxNiBtYWkgMjAxOCAwMzoxNiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOIENj wqA6DQo+ID4gPj4+Pj4gZG90c0BpZXRmLm9yZw0KPiA+ID4+Pj4+Pj4gT2JqZXQNCj4gPiA+Pj4+ Pj4+PiA6IFJlOiBbRG90c10gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFu bmVsLTE5LnR4dA0KPiA+ID4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4gSGkgTWVkLA0KPiA+ID4+Pj4+ Pj4+DQo+ID4gPj4+Pj4+Pj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+ID4gPj4+Pj4+Pj4NCj4gPiA+ Pj4+Pj4+PiB0aGFua3MsDQo+ID4gPj4+Pj4+Pj4ga2FuYW1lDQo+ID4gPj4+Pj4+Pj4NCj4gPiA+ Pj4+Pj4+PiBPbiAyMDE4LzA1LzE1IDIyOjI2LCBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29t IHdyb3RlOg0KPiA+ID4+Pj4+Pj4+PiBIaSBLYW5hbWUsDQo+ID4gPj4+Pj4+Pj4+DQo+ID4gPj4+ Pj4+Pj4+IFBsZWFzZSBzZWUgaW5saW5lLg0KPiA+ID4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+PiBD aGVlcnMsDQo+ID4gPj4+Pj4+Pj4+IE1lZA0KPiA+ID4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4g LS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gPj4+Pj4+Pj4+PiBEZcKgOiBrYW5hbWUg bmlzaGl6dWthIFttYWlsdG86a2FuYW1lQG50dHY2LmpwXSBFbnZvecOpwqA6IGx1bmRpDQo+ID4g Pj4+Pj4+Pj4+PiAxNCBtYWkgMjAxOCAxMTo0OSDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQv T0xOIENjwqA6DQo+ID4gPj4+Pj4+Pj4+PiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFJlOiBbRG90 c10gSS1EIEFjdGlvbjoNCj4gPiA+Pj4+Pj4+Pj4+IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hh bm5lbC0xOS50eHQNCj4gPiA+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+PiBIaSBNZWQsDQo+ID4g Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+ID4gPj4+Pj4+ Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4gdGhhbmtzLA0KPiA+ID4+Pj4+Pj4+Pj4gS2FuYW1lDQo+ID4g Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4gT24gMjAxOC8wNS8xMSAxODozOSwgbW9oYW1lZC5i b3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPiA+Pj4+Pj4+Pj4+PiBSZS0sDQo+ID4gPj4+ Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+PiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPiA+Pj4+Pj4+ Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+IENoZWVycywNCj4gPiA+Pj4+Pj4+Pj4+PiBNZWQNCj4gPiA+ Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0g RGXCoDoga2FuYW1lIG5pc2hpenVrYQ0KPiA+ID4+Pj4+Pj4+Pj4+PiBbbWFpbHRvOmthbmFtZUBu dHR2Ni5qcF0gRW52b3nDqcKgOg0KPiA+ID4+Pj4+Pj4+Pj4+PiB2ZW5kcmVkaQ0KPiA+ID4+Pj4+ Pj4+Pj4+PiAxMSBtYWkgMjAxOCAxMDo1OSDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xO IENjwqA6DQo+ID4gPj4+Pj4+Pj4+Pj4+IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDogUmU6IFtEb3Rz XSBJLUQgQWN0aW9uOg0KPiA+ID4+Pj4+Pj4+Pj4+PiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNo YW5uZWwtMTkudHh0DQo+ID4gPj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+IEhpIE1lZCwN Cj4gPiA+Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+Pj4gICAgICA+IElmIHRoZSBzZXJ2ZXIg ZGVjaWRlcyBub3QgdG8gbWFpbnRhaW4gdGhlDQo+ID4gPj4+Pj4+Pj4+Pj4+IGNvbmZsaWN0aW5n IHJlcXVlc3QsIHRoZW4NCj4gPiA+Pj4+Pj4+Pj4+IHRoZQ0KPiA+ID4+Pj4+Pj4+Pj4+PiBwcmVz ZW50IHJlcXVlc3Qgd2lsbCBiZSBwcm9jZXNzZWQgYXMgbm9ybWFsOiB0aGF0IGlzIDIuMDENCj4g PiA+Pj4+Pj4+Pj4+Pj4gd2lsbCBiZQ0KPiA+ID4+Pj4+Pj4+IHJldHVybmVkDQo+ID4gPj4+Pj4+ Pj4+PiB0bw0KPiA+ID4+Pj4+Pj4+Pj4+PiBhY2sgc3VjY2Vzc2Z1bCBoYW5kbGluZy4gQSBub3Rp ZmljYXRpb24gd2lsbCBiZSBzZW50IHRvIHRoZQ0KPiA+ID4+Pj4+Pj4+Pj4+PiBjbGllbnQgb3du ZXINCj4gPiA+Pj4+Pj4+Pj4+IG9mDQo+ID4gPj4+Pj4+Pj4+Pj4+IHRoZSBjb25mbGljdGluZyBy ZXF1ZXN0IHRvIG5vdGlmeSB3aXRoZHJhd2FsIChzZWN0aW9uIDQuNC4yKS4NCj4gPiA+Pj4+Pj4+ Pj4+Pj4gSW4gdGhhdCBjYXNlLCB0aGUgc3RhdHVzIGNvZGUgaXMgJzcnIChBdHRhY2sgbWl0aWdh dGlvbiBpcw0KPiA+ID4+Pj4+Pj4+Pj4+PiB3aXRoZHJhd24pDQo+ID4gPj4+Pj4+Pj4+Pj4gW01l ZF0gWWVzLCB0aGF0IHN0YXR1cyB3aWxsIGJlIHNlbnQgdG8gdGhlIG93bmVyIG9mIHRoZQ0KPiA+ ID4+Pj4+Pj4+Pj4+IChleGlzdGluZykNCj4gPiA+Pj4+Pj4+PiByZXF1ZXN0Lg0KPiA+ID4+Pj4+ Pj4+Pj4+PiBNeSBvcmlnaW5hbCBxdWVzdGlvbiBpcyB3aGVuIHRoZSBzdGF0dXMgY29kZSAnOCcg KEF0dGFjaw0KPiA+ID4+Pj4+Pj4+Pj4+PiBtaXRpZ2F0aW9uIGlzDQo+ID4gPj4+Pj4+Pj4+Pj4+ IHJlamVjdGVkKSB3aWxsIGJlIHVzZWQuDQo+ID4gPj4+Pj4+Pj4+Pj4gW01lZF0gSSBnb3QgdGhh dC4NCj4gPiA+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+PiBJbiB0aGUgdGV4dCBpbiB0aGUg ZHJhZnQsICJ0aGUgY29uZmxpY3RpbmcgbWl0aWdhdGlvbg0KPiA+ID4+Pj4+Pj4+Pj4+PiByZXF1 ZXN0IiBpcw0KPiA+ID4+Pj4+Pj4+Pj4gYW1iaWd1b3VzDQo+ID4gPj4+Pj4+Pj4+Pj4+IHdoZXRo ZXIgaXQgaXMgYWxyZWFkeSBleGlzdGluZyByZXF1ZXN0IG9yIHRoZSByZXF1ZXN0IHRoYXQNCj4g PiA+Pj4+Pj4+Pj4+Pj4ganVzdCBoYXMNCj4gPiA+Pj4+Pj4+Pj4+IGFycml2ZWQuDQo+ID4gPj4+ Pj4+Pj4+Pj4gW01lZF0gSXQgaXMgcmVsYXRlZCB0byB0aGUgYWxyZWFkeSBleGlzdGluZyByZXF1 ZXN0Lg0KPiA+ID4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+IFNheSwgdGhlIGV4aXN0aW5n IHJlcXVlc3QgaXMgKEEpLCB0aGVuIGEgbWl0aWdhdGlvbiByZXF1ZXN0DQo+ID4gPj4+Pj4+Pj4+ Pj4+IChCKSBhcnJpdmVkDQo+ID4gPj4+Pj4+Pj4+PiB3aGljaA0KPiA+ID4+Pj4+Pj4+Pj4+PiBh cmUgY29uZmxpY3Rpbmcgd2l0aCBBLg0KPiA+ID4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+ PiBJZiBCIGlzIHNlbGVjdGVkLg0KPiA+ID4+Pj4+Pj4+Pj4+PiAoQSkgd2lsbCBnZXQgbm90aWZp Y2F0aW9uIHdpdGggdGhlIHdpdGhkcmF3YWwgY29kZSAnNycNCj4gPiA+Pj4+Pj4+Pj4+Pj4gKEIp IHdpbGwgZ2V0IDIuMDENCj4gPiA+Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+PiBbTWVkXSBZ ZXMuIFRoZSBjdXJyZW50IHRleHQgZG9lcyBjYWxscyBvdXQgeW91ciBzdGVwICgxKSBpbg0KPiA+ ID4+Pj4gNC40LjIuDQo+ID4gPj4+Pj4+Pj4+Pj4gWW91cg0KPiA+ID4+Pj4+Pj4+Pj4gc3RlcCAo MikgaXMgbm90IGNhbGxlZCBleHBsaWNpdCBpbiB0aGUgdGV4dCBiZWNhdXNlIHRoZXJlIGlzDQo+ ID4gPj4+Pj4+Pj4+PiBubyBjb25mdXNpb24gYWJvdXQgd2hpY2ggY29kZSB0byByZXR1cm4gd2hl biBhIHJlcXVlc3QgaXMNCj4gPiA+Pj4+Pj4+Pj4+IGFjY2VwdGVkIHRvIGJlDQo+ID4gPj4+Pj4+ PiBob25vcmVkLg0KPiA+ID4+Pj4+Pj4+Pj4+IFRoZSB0ZXh0IGZvY3VzZXMgb24gY2FzZXMgd2hp Y2ggcmVxdWlyZXMgc3BlY2lmaWMgaGFuZGxpbmc6DQo+ID4gPj4+Pj4+Pj4+Pj4gLSBpbmFjdGl2 ZSByZXF1ZXN0IGJlY2F1c2Ugb2YgYSBjb25mbGljdA0KPiA+ID4+Pj4+Pj4+Pj4+IC0gbXVsdGlw bGUgYWN0aXZlIGNvbmZsaWN0aW5nIHJlcXVlc3RzDQo+ID4gPj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+ Pj4+Pj4+Pj4gZWxzZSBJZiBCIGlzIG5vdCBzZWxlY3RlZC4NCj4gPiA+Pj4+Pj4+Pj4+Pj4gKEIp IHdpbGwgZ2V0IDQuMDkNCj4gPiA+Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+PiBbTWVkXSBJ biB0aGlzIGNhc2UsIHRoZSByZXNvdXJjZSBpcyBub3QgY3JlYXRlZCBhbmQgYXMgc3VjaA0KPiA+ ID4+Pj4+Pj4+Pj4+IGNhc2UNCj4gPiA+Pj4+Pj4+PiByZXR1cm5pbmcNCj4gPiA+Pj4+Pj4+Pj4+ IG5vdGlmaWNhdGlvbiBzdGF0dXMgY29kZSBvZiA4IGlzIG5vdCBwb3NzaWJsZSBhcyB5b3Ugcmln aHRmdWwNCj4gPiA+Pj4+Pj4+Pj4+IHBvaW50ZWQNCj4gPiA+Pj4+Pj4gb3V0Lg0KPiA+ID4+Pj4+ Pj4+Pj4+IFRoaXMgaXMgd2h5IHdlIHN1Z2dlc3RlZCB0byByZXR1cm4gMi4wMSBmb3IgdGhpcyBj YXNlIHRvbyBzbw0KPiA+ID4+Pj4+Pj4+Pj4+IHRoYXQgYW4NCj4gPiA+Pj4+Pj4+PiB1cGRhdGUN Cj4gPiA+Pj4+Pj4+Pj4+IG9mIHRoZSBzdGF0dXMgY2FuIGJlIHNlbnQgdG8gdGhlIGNsaWVudCB1 cG9uIGNoYW5nZS4NCj4gPiA+Pj4+Pj4+Pj4+IEkgZG9uJ3QgdGhpbmsgaXQgaXMgbmVlZGVkIHRv IG9ibGlnYXRlIHJldHVybmluZyBvZiAyLjAxLg0KPiA+ID4+Pj4+Pj4+Pj4gSWYgaXQgaXMgb2J2 aW91cyB0aGF0IHRoZSBET1RTIHNlcnZlciBuZWVkIG5vdCB0byBjcmVhdGUNCj4gPiA+Pj4+Pj4+ Pj4+IHJlc291cmNlIG9mIHRoZSBjb25mbGljdGluZyByZXF1ZXN0LCBpdCBtYXkgcmV0dXJuIDQu MDkuDQo+ID4gPj4+Pj4+Pj4+PiBTbywgcmV0dXJuaW5nIG9mIDQuMDkgc2hvdWxkIGJlIGFsbG93 ZWQgaW4gdGhpcyBjYXNlLg0KPiA+ID4+Pj4+Pj4+Pj4gSXQgc2hvdWxkIGJlIGxlZnQgYXMgaW1w bGVtZW50YXRpb24tIGFuZCBkZXBsb3ltZW50LXNwZWNpZmljLg0KPiA+ID4+Pj4+Pj4+Pj4NCj4g PiA+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+IFtNZWRdIERvIHlvdSBtZWFuIHRoYXQgdGhlIHRl eHQgc2hvdWxkIGJlIG1vZGlmaWVkIHRvIGFsbG93DQo+ID4gPj4+Pj4+Pj4+IGZvciBib3RoDQo+ ID4gPj4+Pj4+Pj4+IDIuMDENCj4gPiA+Pj4+Pj4+PiBvciA0LjA5IHRvIGJlIHJldHVybmVkIGRl cGVuZGluZyBvbiBzb21lIGxvY2FsIHBvbGljeT8NCj4gPiA+Pj4+Pj4+Pj4gZS5nLiwNCj4gPiA+ Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4gT0xEOg0KPiA+ID4+Pj4+Pj4+PiAgICAgICBJZiB0aGUg cmVxdWVzdCBpcyBjb25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nDQo+ID4gPj4+Pj4+Pj4+IG1p dGlnYXRpb24NCj4gPiA+Pj4+IHJlcXVlc3QNCj4gPiA+Pj4+Pj4+Pj4gICAgICAgZnJvbSBhIGRp ZmZlcmVudCBET1RTIGNsaWVudCwgYW5kIHRoZSBET1RTIHNlcnZlcg0KPiA+ID4+Pj4+Pj4+PiBk ZWNpZGVzIHRvDQo+ID4gPj4+Pj4+IG1haW50YWluDQo+ID4gPj4+Pj4+Pj4+ICAgICAgIHRoZSBj b25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3QsIHRoZSBET1RTIHNlcnZlcg0KPiA+ID4+Pj4+ Pj4+PiByZXR1cm5zDQo+ID4gPj4+PiA0LjA5DQo+ID4gPj4+Pj4+Pj4+ICAgICAgIChDb25mbGlj dCkgW1JGQzgxMzJdIHRvIHRoZSByZXF1ZXN0aW5nIERPVFMgY2xpZW50LiBUaGUNCj4gPiA+Pj4+ IHJlc3BvbnNlDQo+ID4gPj4+Pj4+Pj4+ICAgICAgIGluY2x1ZGVzIGVub3VnaCBpbmZvcm1hdGlv biBmb3IgYSBET1RTIGNsaWVudCB0bw0KPiA+ID4+Pj4+Pj4+PiByZWNvZ25pemUgdGhlDQo+ID4g Pj4+Pj4+IHNvdXJjZQ0KPiA+ID4+Pj4+Pj4+PiAgICAgICBvZiB0aGUgY29uZmxpY3QgYXMgZGVz Y3JpYmVkIGJlbG93Og0KPiA+ID4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+PiBORVc6DQo+ID4gPj4+ Pj4+Pj4+ICAgICAgIElmIHRoZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3Rp bmcNCj4gPiA+Pj4+Pj4+Pj4gbWl0aWdhdGlvbg0KPiA+ID4+Pj4gcmVxdWVzdA0KPiA+ID4+Pj4+ Pj4+PiAgICAgICBmcm9tIGEgZGlmZmVyZW50IERPVFMgY2xpZW50LCB0aGUgRE9UUyBzZXJ2ZXIg bWF5IHJldHVybg0KPiA+ID4+Pj4+Pj4+PiAyLjAxDQo+ID4gPj4+Pj4+IChDcmVhdGVkKQ0KPiA+ ID4+Pj4+Pj4+PiAgICAgICBvciA0LjA5IChDb25mbGljdCkgdG8gdGhlIHJlcXVlc3RpbmcgRE9U UyBjbGllbnQuIFRoZQ0KPiByZXNwb25zZQ0KPiA+ID4+Pj4+Pj4+PiAgICAgICBpbmNsdWRlcyBl bm91Z2ggaW5mb3JtYXRpb24gZm9yIGEgRE9UUyBjbGllbnQgdG8NCj4gPiA+Pj4+Pj4+Pj4gcmVj b2duaXplIHRoZQ0KPiA+ID4+Pj4+PiBzb3VyY2UNCj4gPiA+Pj4+Pj4+Pj4gICAgICAgb2YgdGhl IGNvbmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxvdzoNCj4gPiA+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+ PiBZZXMsIGl0IHdvcmtzIGZvciBtZS4NCj4gPiA+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+DQo+ID4g Pj4+Pj4+Pj4+Pj4+IFRpcnUgc2FpZDoNCj4gPiA+Pj4+Pj4+Pj4+Pj4gICAgICA+IEluIHRoaXMg Y2FzZSwgdGhlIHJlc291cmNlIHNob3VsZCBiZSBjcmVhdGVkIGFuZCB0aGUNCj4gPiA+Pj4+Pj4+ Pj4+Pj4gc2VydmVyIHNob3VsZA0KPiA+ID4+Pj4+Pj4+Pj4gcmV0dXJuDQo+ID4gPj4+Pj4+Pj4+ Pj4+IHN1Y2Nlc3MgKDIuMDEgb3IgMi4wNCkgcmVzcG9uc2UgY29kZSBhbG9uZyB3aXRoIHRoZQ0K PiA+ID4+Pj4+Pj4+Pj4+PiBjb25mbGljdC0NCj4gPiA+Pj4+Pj4+PiBpbmZvcm1hdGlvbi4NCj4g PiA+Pj4+Pj4+Pj4+Pj4gSW4gdGhpcyBzaXR1YXRpb24sIChCKSB3aWxsIGdldCAyLjAxIG9yIDIu MDQgYWxvbmcgd2l0aCB0aGUNCj4gPiA+Pj4+Pj4+Pj4+Pj4gcmVqZWN0ZWQNCj4gPiA+Pj4+Pj4+ PiBjb2RlDQo+ID4gPj4+Pj4+Pj4+PiAnOCcNCj4gPiA+Pj4+Pj4+Pj4+Pj4gKFdoaWNoIG1pdGln YXRpb24gcmVxdWVzdCB3aWxsIGJlIHNlbGVjdGVkIGJ5IHRoZSBET1RTDQo+ID4gPj4+Pj4+Pj4+ Pj4+IHNlcnZlciBpcw0KPiA+ID4+Pj4+Pj4+Pj4+PiBpbXBsZW1lbnRhdGlvbi0gYW5kIGRlcGxv eW1lbnQtc3BlY2lmaWMuKQ0KPiA+ID4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+PiBUaGFu a3MsDQo+ID4gPj4+Pj4+Pj4+Pj4+IEthbmFtZQ0KPiA+ID4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+ Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+PiBPbiAyMDE4LzA1LzExIDE1OjA5LCBtb2hhbWVkLmJv dWNhZGFpckBvcmFuZ2UuY29tDQo+ID4gd3JvdGU6DQo+ID4gPj4+Pj4+Pj4+Pj4+PiBIaSBLYW5h bWUsDQo+ID4gPj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gSWYgdGhlIHNlcnZlciBk ZWNpZGVzIG5vdCB0byBtYWludGFpbiB0aGUgY29uZmxpY3RpbmcNCj4gPiA+Pj4+Pj4+Pj4+Pj4+ IHJlcXVlc3QsIHRoZW4gdGhlDQo+ID4gPj4+Pj4+Pj4+Pj4+IHByZXNlbnQgcmVxdWVzdCB3aWxs IGJlIHByb2Nlc3NlZCBhcyBub3JtYWw6IHRoYXQgaXMgMi4wMQ0KPiA+ID4+Pj4+Pj4+Pj4+PiB3 aWxsIGJlDQo+ID4gPj4+Pj4+Pj4gcmV0dXJuZWQNCj4gPiA+Pj4+Pj4+Pj4+IHRvDQo+ID4gPj4+ Pj4+Pj4+Pj4+IGFjayBzdWNjZXNzZnVsIGhhbmRsaW5nLiBBIG5vdGlmaWNhdGlvbiB3aWxsIGJl IHNlbnQgdG8gdGhlDQo+ID4gPj4+Pj4+Pj4+Pj4+IGNsaWVudCBvd25lcg0KPiA+ID4+Pj4+Pj4+ Pj4gb2YNCj4gPiA+Pj4+Pj4+Pj4+Pj4gdGhlIGNvbmZsaWN0aW5nIHJlcXVlc3QgdG8gbm90aWZ5 IHdpdGhkcmF3YWwgKHNlY3Rpb24gNC40LjIpLg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gVGhlIHRleHQg Zm9jdXNlcyBvbiB0aGUgY2FzZSAiLCBhbmQgdGhlIERPVFMgc2VydmVyDQo+ID4gPj4+Pj4+Pj4+ Pj4+PiBkZWNpZGVzIHRvIG1haW50YWluDQo+ID4gPj4+Pj4+Pj4+PiB0aGUNCj4gPiA+Pj4+Pj4+ Pj4+Pj4gY29uZmxpY3RpbmcgbWl0aWdhdGlvbiByZXF1ZXN0IiBiZWNhdXNlIHRoaXMgaXMgdGhl IG9uZQ0KPiA+ID4+Pj4+Pj4+Pj4+PiB3aGljaCByZXF1aXJlcyBhZGRpdGlvbmFsIHNwZWNpZmlj YXRpb24gdnMuIG5vcm1hbCByZXF1ZXN0DQo+ID4gPj4+Pj4+Pj4+Pj4+IHRoYXQgaXMgYWNjZXB0 ZWQgYnkgYQ0KPiA+ID4+Pj4+Pj4+IHNlcnZlci4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+IENoZWVycywN Cj4gPiA+Pj4+Pj4+Pj4+Pj4+IE1lZA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+ Pj4+PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0gRGXCoDoga2FuYW1lIG5pc2hpenVrYQ0K PiA+ID4+Pj4+Pj4+Pj4+Pj4+IFttYWlsdG86a2FuYW1lQG50dHY2LmpwXSBFbnZvecOpwqA6DQo+ ID4gPj4+Pj4+Pj4+Pj4+Pj4gbWVyY3JlZGkgOSBtYWkgMjAxOCAxMDo0MSDDgMKgOiBCT1VDQURB SVIgTW9oYW1lZA0KPiA+IElNVC9PTE4NCj4gPiA+Pj4+PiBDY8KgOg0KPiA+ID4+Pj4+Pj4+Pj4+ Pj4+IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDogUmU6IFtEb3RzXSBJLUQgQWN0aW9uOg0KPiA+ID4+ Pj4+Pj4+Pj4+Pj4+IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0xOS50eHQNCj4gPiA+ Pj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+IEhpIE1lZCwNCj4gPiA+Pj4+Pj4+Pj4+ Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+IEknbSBPSyB3aXRoIHRoaXMgY2hhbmdlLg0KPiA+ID4+ Pj4+Pj4+Pj4+Pj4+IEhvd2V2ZXIsIHRvIGJlIHByZWNpc2UsIEknZCBsaWtlIHRvIHN1Z2dlc3Qg dG8gc3RhdGUNCj4gPiA+Pj4+Pj4+Pj4+Pj4+PiBhYm91dCB0aGUgY2FzZQ0KPiA+ID4+Pj4+Pj4+ IHRoZQ0KPiA+ID4+Pj4+Pj4+Pj4+PiBET1RTDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4gc2VydmVyIGRl Y2lkZXMgTk9UIHRvIG1haW50YWluIGl0Lg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+ Pj4+Pj4+Pj4gTkVXLTI6DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4gICAgICAgwqDCoCBJZiB0aGUgcmVx dWVzdCBpcyBjb25mbGljdGluZyB3aXRoIGFuIGV4aXN0aW5nDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4g bWl0aWdhdGlvbg0KPiA+ID4+Pj4+Pj4+IHJlcXVlc3QNCj4gPiA+Pj4+Pj4+Pj4+Pj4+PiAgICAg ICDCoMKgIGZyb20gYSBkaWZmZXJlbnQgRE9UUyBjbGllbnQsIGFuZCB0aGUgRE9UUw0KPiA+ID4+ Pj4+Pj4+Pj4+Pj4+IHNlcnZlciBkZWNpZGVzIHRvDQo+ID4gPj4+Pj4+Pj4+PiBtYWludGFpbg0K PiA+ID4+Pj4+Pj4+Pj4+Pj4+ICAgICAgIMKgwqAgdGhlIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24g cmVxdWVzdCwgdGhlIERPVFMNCj4gPiA+Pj4+Pj4+Pj4+Pj4+PiBzZXJ2ZXIgcmV0dXJucw0KPiA+ ID4+Pj4+Pj4+IDIuMDENCj4gPiA+Pj4+Pj4+Pj4+Pj4+PiAgICAgICDCoMKgIChDcmVhdGVkKSB0 byB0aGUgcmVxdWVzdGluZyBET1RTIGNsaWVudC4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+PiAgICAgICDC oMKgIE90aGVyd2lzZSwgdGhlIERPVFMgc2VydmVyIHJldHVybnMgNC4wOQ0KPiA+ID4+Pj4+Pj4+ Pj4+Pj4+IChDb25mbGljdCkNCj4gPiA+Pj4+Pj4gW1JGQzgxMzJdLg0KPiA+ID4+Pj4+Pj4+Pj4+ Pj4+ICAgICAgIMKgwqAgVGhlIHJlc3BvbnNlIGluY2x1ZGVzIGVub3VnaCBpbmZvcm1hdGlvbiBm b3IgYQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+IERPVFMgY2xpZW50DQo+ID4gPj4+Pj4+IHRvDQo+ID4g Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgwqDCoCByZWNvZ25pemUgdGhlIHNvdXJjZSBvZiB0aGUgY29u ZmxpY3QgYXMNCj4gPiA+Pj4+Pj4+Pj4+Pj4+PiBkZXNjcmliZWQNCj4gPiA+Pj4+IGJlbG93Og0K PiA+ID4+Pj4+Pj4+Pj4+Pj4+IHRoYW5rcywNCj4gPiA+Pj4+Pj4+Pj4+Pj4+PiBLYW5hbWUNCj4g PiA+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+IE9uIDIwMTgvMDUvMDkgMTQ6NTEs IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gPiB3cm90ZToNCj4gPiA+Pj4+Pj4+Pj4+ Pj4+Pj4gSGkgS2FuYW1lLA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+ PiBBZnRlciB0aGlua2luZyBhYm91dCB0aGlzLCBJIGRvIHRoaW5rIHRoYXQgeW91IGhhdmUgYQ0K PiA+ID4+Pj4+Pj4+Pj4+Pj4+PiB2YWxpZCBwb2ludC4gSQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+IHN1 Z2dlc3QgdG8gbWFrZSB0byBtYWtlIHRoaXMgY2hhbmdlIChtYXJrZWQgd2l0aCBeXl5eKQ0KPiA+ ID4+Pj4+Pj4+Pj4+Pj4+PiBPTEQ6DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIElmIHRo ZSByZXF1ZXN0IGlzIGNvbmZsaWN0aW5nIHdpdGggYW4gZXhpc3RpbmcNCj4gPiA+Pj4+Pj4+Pj4+ Pj4+Pj4gbWl0aWdhdGlvbg0KPiA+ID4+Pj4+Pj4+IHJlcXVlc3QNCj4gPiA+Pj4+Pj4+Pj4+Pj4+ Pj4gICAgICAgICAgZnJvbSBhIGRpZmZlcmVudCBET1RTIGNsaWVudCwgYW5kIHRoZSBET1RTDQo+ ID4gPj4+Pj4+Pj4+Pj4+Pj4+IHNlcnZlciBkZWNpZGVzIHRvDQo+ID4gPj4+Pj4+Pj4+Pj4+IG1h aW50YWluDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIHRoZSBjb25mbGljdGluZyBtaXRp Z2F0aW9uIHJlcXVlc3QsIHRoZSBET1RTDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+IHNlcnZlciByZXR1 cm5zDQo+ID4gPj4+Pj4+Pj4gNC4wOQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAoQ29u ZmxpY3QpIFtSRkM4MTMyXSB0byB0aGUgcmVxdWVzdGluZyBET1RTDQo+IGNsaWVudC4NCj4gPiA+ Pj4+Pj4+Pj4+Pj4+Pj4gVGhlDQo+ID4gPj4+Pj4+Pj4gcmVzcG9uc2UNCj4gPiA+Pj4+Pj4+Pj4+ Pj4+Pj4gICAgICAgICAgaW5jbHVkZXMgZW5vdWdoIGluZm9ybWF0aW9uIGZvciBhIERPVFMgY2xp ZW50DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+IHRvIHJlY29nbml6ZSB0aGUNCj4gPiA+Pj4+Pj4+Pj4+ Pj4gc291cmNlDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgIG9mIHRoZSBjb25mbGljdCBh cyBkZXNjcmliZWQgYmVsb3c6DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+ Pj4+IE5FVzoNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgSWYgdGhlIHJlcXVlc3QgaXMg Y29uZmxpY3Rpbmcgd2l0aCBhbiBleGlzdGluZw0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+PiBtaXRpZ2F0 aW9uDQo+ID4gPj4+Pj4+Pj4gcmVxdWVzdA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBm cm9tIGEgZGlmZmVyZW50IERPVFMgY2xpZW50LCBhbmQgdGhlIERPVFMNCj4gPiA+Pj4+Pj4+Pj4+ Pj4+Pj4gc2VydmVyIGRlY2lkZXMgdG8NCj4gPiA+Pj4+Pj4+Pj4+Pj4gbWFpbnRhaW4NCj4gPiA+ Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgdGhlIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24gcmVxdWVz dCwgdGhlIERPVFMNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4gc2VydmVyIHJldHVybnMNCj4gPiA+Pj4+ Pj4+PiAyLjAxDQo+ID4gPj4+Pj4+Pj4gXl5eXg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAg ICAoQ3JlYXRlZCkgdG8gdGhlIHJlcXVlc3RpbmcgRE9UUyBjbGllbnQuICBUaGUNCj4gPiA+Pj4+ IHJlc3BvbnNlXg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBeXl5eXl5eXg0KPiA+ID4+ Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRpb24gZm9yIGEg RE9UUyBjbGllbnQNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4gdG8gcmVjb2duaXplIHRoZQ0KPiA+ID4+ Pj4+Pj4+Pj4+PiBzb3VyY2UNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgb2YgdGhlIGNv bmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxvdzoNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+ Pj4+Pj4+Pj4+Pj4gQ2hlZXJzLA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+PiBNZWQNCj4gPiA+Pj4+Pj4+ Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0t LSBEZcKgOiBEb3RzDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+PiBbbWFpbHRvOmRvdHMtYm91bmNlc0Bp ZXRmLm9yZ10gRGUgbGEgcGFydCBkZQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4gbW9oYW1lZC5ib3Vj YWRhaXJAb3JhbmdlLmNvbSBFbnZvecOpwqA6IGx1bmRpIDcgbWFpDQo+ID4gMjAxOA0KPiA+ID4+ Pj4+Pj4gMDg6MzgNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+IMOAwqA6IGthbmFtZSBuaXNoaXp1a2E7 IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDogUmU6IFtEb3RzXQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4g SS1EDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+PiBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwt Y2hhbm5lbC0xOS50eHQNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+ PiBSZS0sDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4gQWdyZWUg dGhhdCB0aGUgY29kZXMgYXJlIG5vdCB0aGUgc2FtZSwgYnV0IGFsdGVybmF0aXZlcw0KPiA+ID4+ Pj4+Pj4+Pj4+Pj4+Pj4gb25lcyBhcw0KPiA+ID4+Pj4+Pj4+Pj4+PiBzdW1tYXJpemVkDQo+ID4g Pj4+Pj4+Pj4+Pj4+Pj4+PiBoZXJlOg0KPiA+ID4+Pj4+DQo+ID4gaHR0cHM6Ly9tYWlsYXJjaGl2 ZS5pZXRmLm9yZy9hcmNoL21zZy9kb3RzL2hBM01MS2xrWEZpbXBBbjVLU1lUYXlhVmtqQS4NCj4g PiA+Pj4+Pj4+Pj4+Pj4+Pj4+IENoZWVycywNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+IE1lZA0KPiA+ ID4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiAtLS0tLU1lc3NhZ2UgZCdv cmlnaW5lLS0tLS0gRGXCoDoga2FuYW1lIG5pc2hpenVrYQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ IFttYWlsdG86a2FuYW1lQG50dHY2LmpwXSBFbnZvecOpwqA6DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+ Pj4gbHVuZGkgNyBtYWkgMjAxOCAwODoyMCDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZA0KPiA+IElN VC9PTE47DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gZG90c0BpZXRmLm9yZyBPYmpldMKgOiBSZTog W0RvdHNdIEktRCBBY3Rpb246DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gZHJhZnQtaWV0Zi1kb3Rz LXNpZ25hbC1jaGFubmVsLQ0KPiA+ID4+Pj4+Pj4+IDE5LnR4dA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+ Pj4+IEhpIE1lZCwNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ IEkndmUgcmVhZCB0aGUgdGhyZWFkLg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IGFuZCB0aGUgY29k ZSAnOCcgb2YgdGhlIHRocmVhZCBpcyBkaWZmZXJlbnQgZnJvbSB0aGUNCj4gPiA+Pj4+Pj4+Pj4+ Pj4+Pj4+PiBjb2RlICc4JyBvZg0KPiA+ID4+Pj4+Pj4+IHRoZQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+ Pj4gY3VycmVudA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IGRyYWZ0Lg0KPiA+ID4+Pj4+Pj4+Pj4+ Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gdGhleSdkIGJlZW4gZGlzY3Vzc2luZyB0aGUg Nyw4IGFuZCA5IGJhc2VkIG9uIHRoaXMNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiBkZWZpbml0aW9u LA0KPiA+ID4+Pj4+Pj4+IHJpZ2h0Pw0KPiA+ID4+Pj4+Pj4+Pj4gaHR0cHM6Ly9tYWlsYXJjaGl2 ZS5pZXRmLm9yZy9hcmNoL21zZy9kb3RzLzd6bGp6TjhueWNaWDdFN2doZw0KPiA+ID4+Pj4+Pj4+ Pj4gazENCj4gPiA+Pj4+Pj4+Pj4+IHV4MzINCj4gPiA+Pj4+Pj4+Pj4+IE1rTQ0KPiA+ID4+Pj4+ Pj4+Pj4+Pj4+Pj4+ID09DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gNyB8IERPVFMgU2VydmVyIGhh cyBkZXRlY3RlZCBjb25mbGljdGluZyBtaXRpZ2F0aW9uDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4g cmVxdWVzdHMgZnJvbQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+IGRpZmZlcmVudA0KPiA+ID4+Pj4+Pj4+ Pj4+Pj4+Pj4+IERPVFMgY2xpZW50cy7CoCBUaGlzIG1pdGlnYXRpb24gcmVxdWVzdCBpcyBjdXJy ZW50bHkNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiBpbmFjdGl2ZSB1bnRpbA0KPiA+ID4+Pj4+Pj4+ Pj4gdGhlDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gY29uZmxpY3RzIGFyZSByZXNvbHZlZC4gQW5v dGhlciBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMNCj4gPiA+Pj4+IGFjdGl2ZS4NCj4gPiA+Pj4+Pj4+ Pj4+Pj4+Pj4+PiA4IHwgRE9UUyBTZXJ2ZXIgaGFzIGRldGVjdGVkIGNvbmZsaWN0aW5nIG1pdGln YXRpb24NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiByZXF1ZXN0cyBmcm9tDQo+ID4gPj4+Pj4+Pj4+ Pj4+Pj4gZGlmZmVyZW50DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gRE9UUyBjbGllbnRzLsKgIFRo aXMgbWl0aWdhdGlvbiByZXF1ZXN0IGlzIGN1cnJlbnRseQ0KPiBhY3RpdmUuDQo+ID4gPj4+Pj4+ Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiA5IHwgRE9UUyBTZXJ2ZXIgaGFzIGRl dGVjdGVkIGNvbmZsaWN0aW5nIG1pdGlnYXRpb24NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiByZXF1 ZXN0cyBmcm9tDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4gZGlmZmVyZW50DQo+ID4gPj4+Pj4+Pj4+Pj4+ Pj4+Pj4gRE9UUyBjbGllbnRzLsKgIEFsbCBjb25mbGljdGluZyBtaXRpZ2F0aW9uIHJlcXVlc3Rz IGFyZQ0KPiA+ID4+Pj4+PiBpbmFjdGl2ZS4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiA9PQ0KPiA+ ID4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gS2FuYW1lDQo+ID4gPj4+ Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+ Pj4+IE9uIDIwMTgvMDUvMDcgMTU6MTIsDQo+ID4gbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNv bQ0KPiA+ID4+Pj4+IHdyb3RlOg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBIaSBLYW5hbWUsDQo+ ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFBsZWFzZSBjaGVj aw0KPiA+ID4+Pj4+Pj4+Pj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9k b3RzL3pfY1pSOV91MjczSHpDOW8wSQ0KPiA+ID4+Pj4+Pj4+Pj4geTkNCj4gPiA+Pj4+Pj4+Pj4+ IEZlUVoNCj4gPiA+Pj4+Pj4+Pj4+IDBKbw0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4gYWJvdXQNCj4g PiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiB0aGUgcmF0aW9uYWxlIGZvciBhbGxvd2luZyB0byByZXR1cm4g Y29kZSAnOCcgZXZlbiBpbg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+IGENCj4gPiA+Pj4+Pj4+PiBu b3RpZmljYXRpb24NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+IG1lc3NhZ2UuDQo+ID4gPj4+Pj4+Pj4+ Pj4+Pj4+Pj4gVGhlIGludGVudCB3YXMgdG8gaGF2ZSBjb2RlICc4JyBhcyBhIHRyYW5zaXRpb24g c3RhdGUuDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+IENoZWVycywNCj4gPiA+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4gTWVkDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+ PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0gRGXCoDoga2FuYW1lIG5pc2hpenVrYQ0KPiA+ ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gW21haWx0bzprYW5hbWVAbnR0djYuanBdIEVudm95w6nCoDog bWVyY3JlZGkgMiBtYWkNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IDIwMTgNCj4gPiA+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4+IDAyOjQ5IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE47DQo+ID4g ZG90c0BpZXRmLm9yZw0KPiA+ID4+Pj4+Pj4gT2JqZXTCoDoNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+IFJlOiBbRG90c10gSS1EIEFjdGlvbjoNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IGRyYWZ0 LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0NCj4gPiA+Pj4+Pj4+Pj4+IDE5LnR4dA0KPiA+ID4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gSGksDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4gSSdkIGxpa2UgdG8gYXNrIG9uZSBjbGFyaWZpY2F0aW9uIHF1ZXN0aW9u IGFib3V0DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBzdGF0dXMgY29kZQ0KPiA+ID4+Pj4+PiA4 Og0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICDCoMKgIG/CoCBBIG5vdGlmaWNhdGlv biBtZXNzYWdlIHdpdGggJ3N0YXR1cycNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IGNvZGUgc2V0 IHRvICc4DQo+ID4gPj4+Pj4+Pj4+PiAoQXR0YWNrDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAg ICAgICAgIMKgwqDCoMKgwqAgbWl0aWdhdGlvbiBpcyByZWplY3RlZCknIGFuZA0KPiA+ID4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4gJ2NvbmZsaWN0LQ0KPiA+ID4+Pj4gc3RhdHVzJw0KPiA+ID4+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4gc2V0IHRvDQo+ID4gPj4+Pj4+Pj4+PiAnMScNCj4gPiA+Pj4+Pj4+Pj4+Pj4g aXMNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+IHNlbnQNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAg ICAgICAgwqDCoMKgwqDCoCB0byBhIERPVFMgY2xpZW50IHRvIGluZGljYXRlIHRoYXQgdGhpcw0K PiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gbWl0aWdhdGlvbg0KPiA+ID4+Pj4+Pj4+Pj4gcmVxdWVz dA0KPiA+ID4+Pj4+Pj4+Pj4+PiBpcw0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICDC oMKgwqDCoMKgIHJlamVjdGVkIGJlY2F1c2UgYSBjb25mbGljdCBpcyBkZXRlY3RlZC4NCj4gPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBJZiBhIG1pdGlnYXRp b24gcmVxdWVzdCBpcyByZWplY3RlZCBkdWUgdG8gYQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4g Y29uZmxpY3QsIGl0IGlzDQo+ID4gPj4+Pj4+Pj4+PiByZWplY3RlZA0KPiA+ID4+Pj4+Pj4+Pj4+ Pj4+IGF0DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBQVVQoNC4wOShDb25mbGljdCkpLCBzbyBu byByZXNvdXJjZSB3aWxsIGJlIGNyZWF0ZWQuDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBTbyBp dCBsb29rcyB0aGVyZSBpcyBubyBjaGFuY2UgdG8gcmV0dXJuICc4IChBdHRhY2sNCj4gPiA+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4+IG1pdGlnYXRpb24gaXMNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+PiByZWpl Y3RlZCknLg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gdGhhbmtzLA0KPiA+ID4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4gS2FuYW1lDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4gT24gMjAxOC8wNC8xMCAyMjo0NywNCj4gPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFu Z2UuY29tDQo+ID4gPj4+Pj4+PiB3cm90ZToNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBSZS0s DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBUaGlz IHZlcnNpb24gYWRkcmVzc2VzIHRoZSBjb21tZW50cyByYWlzZWQgZHVyaW5nDQo+ID4gPj4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4gdGhlIFdHTEMsIGluDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4gcGFydGlj dWxhcjoNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAtIChDbGFyaWZpY2F0aW9uKSBJbmRpY2F0 ZSB0aGF0IG9ubHkgb25lIGhvcC1saW1pdA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IGlzIGlu Y2x1ZGVkDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gLSBTcGVjaWZ5IHRoZSBsb29wIGRpYWdu b3N0aWMgcGF5bG9hZA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IC0gKENsYXJpZmljYXRpb24p IEluZGljYXRlIGV4cGxpY2l0bHkgdGhhdCBHRVQNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBt ZXNzYWdlcyB3aXRoDQo+ID4gPj4+Pj4+Pj4gJ3NpZCcNCj4gPiA+Pj4+Pj4+Pj4+Pj4gYXJlDQo+ ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBhbGxvd2VkDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4g LSBVcGRhdGUgdGhlIHJlZGlyZWN0IGJlaGF2aW9yLg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gQ2hlZXJzLA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+IE1lZA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLSBEZcKgOiBEb3RzDQo+ID4gPj4+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4+IFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBEZSBsYSBwYXJ0IGRl DQo+ID4gPj4+Pj4+Pj4gaW50ZXJuZXQtDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IGRyYWZ0 c0BpZXRmLm9yZw0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBFbnZvecOpwqA6IG1hcmRpIDEw IGF2cmlsIDIwMTggMTU6NDAgw4DCoDoNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gaS1kLWFu bm91bmNlQGlldGYub3JnIENjwqA6IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDoNCj4gPiA+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4gW0RvdHNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtZG90cy1zaWduYWwt Y2hhbm5lbC0NCj4gPiA+Pj4+Pj4+PiAxOS50eHQNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4g QSBOZXcgSW50ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9uLWxpbmUNCj4gPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gSW50ZXJuZXQtDQo+ID4gPj4+Pj4+Pj4+PiBEcmFmdHMNCj4g PiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gZGlyZWN0b3JpZXMuDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4+IFRoaXMgZHJhZnQgaXMgYSB3b3JrIGl0ZW0gb2YgdGhlIEREb1MgT3BlbiBUaHJlYXQN Cj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gU2lnbmFsaW5nIFdHDQo+ID4gPj4+Pj4+Pj4gb2YN Cj4gPiA+Pj4+Pj4+Pj4+Pj4gdGhlDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBJRVRGLg0KPiA+ ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgVGl0bGUgICAgICAgICAgIDog RGlzdHJpYnV0ZWQgRGVuaWFsLQ0KPiBvZi0NCj4gPiA+Pj4+Pj4gU2VydmljZQ0KPiA+ID4+Pj4+ Pj4+IE9wZW4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+PiBUaHJlYXQNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+IFNpZ25hbGluZw0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAoRE9UUykgU2lnbmFsIENo YW5uZWwgU3BlY2lmaWNhdGlvbg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAg ICAgICAgQXV0aG9ycyAgICAgICAgIDogVGlydW1hbGVzd2FyIFJlZGR5DQo+ID4gPj4+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNb2hhbWVkIEJv dWNhZGFpcg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgUHJhc2hhbnRoIFBhdGlsDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBbmRyZXcgTW9ydGVuc2VuDQo+ID4gPj4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBOaWsg VGVhZ3VlDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IAlGaWxlbmFtZSAgICAgICAgOiBkcmFm dC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtDQo+ID4gPj4+PiAxOS50eHQNCj4gPiA+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4gCVBhZ2VzICAgICAgICAgICA6IDg2DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4+IAlEYXRlICAgICAgICAgICAgOiAyMDE4LTA0LTEwDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IEFic3RyYWN0Og0KPiA+ID4+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgIFRoaXMgZG9jdW1lbnQgc3BlY2lmaWVzIHRoZSBET1RT IHNpZ25hbA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBjaGFubmVsLCBhDQo+ID4gPj4+Pj4+ Pj4+PiBwcm90b2NvbA0KPiA+ID4+Pj4+Pj4+Pj4+PiBmb3INCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4gICAgICAgICAgICBzaWduYWxpbmcgdGhlIG5lZWQgZm9yIHByb3RlY3Rpb24NCj4gPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gYWdhaW5zdCBEaXN0cmlidXRlZA0KPiA+ID4+Pj4+Pj4+Pj4+ PiBEZW5pYWwtDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4gb2YtDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+ICAgICAgICAgICAgU2VydmljZSAoRERvUykgYXR0YWNrcyB0byBhIHNlcnZlcg0KPiA+ID4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBjYXBhYmxlIG9mIGVuYWJsaW5nDQo+ID4gPj4+Pj4+Pj4+Pj4+ IG5ldHdvcmsNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICB0cmFmZmljIG1p dGlnYXRpb24gb24gYmVoYWxmIG9mIHRoZQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiByZXF1 ZXN0aW5nDQo+ID4gPj4+Pj4+IGNsaWVudC4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAg ICAgICAgICBBIGNvbXBhbmlvbiBkb2N1bWVudCBkZWZpbmVzIHRoZSBET1RTDQo+ID4gPj4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4+IGRhdGEgY2hhbm5lbCwgYQ0KPiA+ID4+Pj4+Pj4+Pj4+PiBzZXBhcmF0 ZQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgIHJlbGlhYmxlIGNvbW11bmlj YXRpb24gbGF5ZXIgZm9yIERPVFMNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gbWFuYWdlbWVu dCBhbmQNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+IGNvbmZpZ3VyYXRpb24NCj4gPiA+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICBwdXJwb3Nlcy4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gRWRpdG9yaWFsIE5vdGUgKFRvIGJlIHJlbW92 ZWQgYnkgUkZDIEVkaXRvcikNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4NCj4gPiA+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICBQbGVhc2UgdXBkYXRlIHRoZXNlIHN0YXRlbWVudHMg d2l0aCB0aGUNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gUkZDIG51bWJlciB0bw0KPiA+ID4+ Pj4+Pj4+IGJlDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4gYXNzaWduZWQNCj4gPiA+Pj4+Pj4+Pj4+Pj4+ Pj4+PiB0bw0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgIHRoaXMgZG9jdW1l bnQ6DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ ICAgICAgICAgICAgbyAgIlRoaXMgdmVyc2lvbiBvZiB0aGlzIFlBTkcgbW9kdWxlIGlzDQo+ID4g Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IHBhcnQgb2YgUkZDDQo+ID4gPj4+Pj4+Pj4+PiBYWFhYOyIN Cj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICBvICAiUkZDIFhYWFg6IERpc3Ry aWJ1dGVkDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IERlbmlhbC1vZi1TZXJ2aWNlIE9wZW4N Cj4gPiA+Pj4+Pj4+PiBUaHJlYXQNCj4gPiA+Pj4+Pj4+Pj4+Pj4+PiBTaWduYWxpbmcNCj4gPiA+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gICAgICAgICAgICAgICAoRE9UUykgU2lnbmFsIENoYW5uZWwN Cj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gU3BlY2lmaWNhdGlvbiI7DQo+ID4gPj4+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgbyAgInwg W1JGQ1hYWFhdIHwiDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+ICAgICAgICAgICAgbyAgcmVmZXJlbmNlOiBSRkMgWFhYWA0KPiA+ID4+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4+Pg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAgICAgICAgICAgIFBsZWFz ZSB1cGRhdGUgVEJEIHN0YXRlbWVudHMgd2l0aCB0aGUNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4gcG9ydCBudW1iZXIgdG8NCj4gPiA+Pj4+Pj4+PiBiZQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+IGFz c2lnbmVkDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+PiB0bw0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ PiAgICAgICAgICAgIERPVFMgU2lnbmFsIENoYW5uZWwgUHJvdG9jb2wuDQo+ID4gPj4+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ICAgICAgICAgICAgQWxzbywg cGxlYXNlIHVwZGF0ZSB0aGUgInJldmlzaW9uIiBkYXRlDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+IG9mIHRoZSBZQU5HDQo+ID4gPj4+Pj4+Pj4+PiBtb2R1bGUuDQo+ID4gPj4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+IFRoZSBJRVRGIGRhdGF0cmFja2VyIHN0YXR1cyBwYWdlIGZvciB0aGlzIGRyYWZ0 IGlzOg0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9kcmFmdC1pZXRmLWRvdHMtcw0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBpZw0K PiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBuYWwtDQo+ID4gPj4+Pj4+Pj4gY2hhbm5lbC8NCj4g PiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gVGhlcmUgYXJlIGFsc28gaHRtbGl6ZWQgdmVyc2lvbnMg YXZhaWxhYmxlIGF0Og0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBodHRwczovL3Rvb2xzLmll dGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+PiAtYw0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBoYW5uDQo+ID4gPj4+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+IGVsLTE5DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IGh0dHBzOi8vZGF0YXRy YWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtaWV0Zi1kDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+ Pj4+Pj4+IG90DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IHMtc2kNCj4gPiA+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4gZ25hbC0NCj4gPiA+Pj4+Pj4+Pj4+Pj4gY2hhbm5lbC0NCj4gPiA+Pj4+Pj4+ Pj4+Pj4+Pj4+IDE5DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IEEgZGlmZiBmcm9tIHRoZSBw cmV2aW91cyB2ZXJzaW9uIGlzIGF2YWlsYWJsZSBhdDoNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtZG90cy0NCj4g PiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gc2kNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gZ25h bA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiAtDQo+ID4gPj4+Pj4+Pj4gY2hhbm5lbC0NCj4g PiA+Pj4+Pj4+Pj4+IDE5DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IFBsZWFzZSBub3RlIHRo YXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcw0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+PiBmcm9tIHRoZSB0aW1lDQo+ID4gPj4+Pj4+Pj4gb2YNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+IHN1Ym1pc3Npb24NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gdW50aWwgdGhlIGh0bWxp emVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZQ0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4+ Pj4+PiBhdA0KPiA+ID4+Pj4+Pj4+Pj4+PiB0b29scy5pZXRmLm9yZy4NCj4gPiA+Pj4+Pj4+Pj4+ Pj4+Pj4+Pj4+Pj4gSW50ZXJuZXQtRHJhZnRzIGFyZSBhbHNvIGF2YWlsYWJsZSBieSBhbm9ueW1v dXMNCj4gPiBGVFAgYXQ6DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+IGZ0cDovL2Z0cC5pZXRm Lm9yZy9pbnRlcm5ldC1kcmFmdHMvDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4gPj4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gRG90cyBtYWls aW5nIGxpc3QNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+ID4+ Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2RvdHMNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pg0KPiA+IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gRG90 cyBtYWlsaW5nIGxpc3QNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBEb3RzQGlldGYub3JnDQo+ ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9kb3RzDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+Pj4+DQo+ID4gX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gRG90 cyBtYWlsaW5nIGxpc3QNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+ ID4+Pj4+Pj4+Pj4+Pj4+Pj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2RvdHMNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+PiBEb3RzIG1haWxpbmcgbGlz dA0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+Pj4gRG90c0BpZXRmLm9yZw0KPiA+ID4+Pj4+Pj4+Pj4+Pj4+ Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4gPj4+Pj4+ Pj4+Pj4+Pj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQo+ID4gPj4+Pj4+Pj4+Pj4+Pj4+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPj4+Pj4+Pj4+Pj4+ Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPiA+Pj4+Pj4+Pj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4gPj4+Pj4+Pj4+Pj4+PiBfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ID4+Pj4+Pj4+Pj4+Pj4gRG90 cyBtYWlsaW5nIGxpc3QNCj4gPiA+Pj4+Pj4+Pj4+Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPiA+Pj4+ Pj4+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+ ID4+Pj4+Pj4+Pj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fDQo+ID4gPj4+Pj4+Pj4+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiA+Pj4+Pj4+Pj4+PiBE b3RzQGlldGYub3JnDQo+ID4gPj4+Pj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9kb3RzDQo+ID4gPj4+Pj4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXw0KPiA+ID4+Pj4+Pj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiA+ Pj4+Pj4+IERvdHNAaWV0Zi5vcmcNCj4gPiA+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vZG90cw0KPiA+ID4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXw0KPiA+ID4+PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+ID4+PiBE b3RzQGlldGYub3JnDQo+ID4gPj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vZG90cw0KPiA+ID4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fDQo+ID4gPj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiA+PiBEb3RzQGlldGYub3JnDQo+ ID4gPj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4gPiBf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ID4gRG90 cyBtYWlsaW5nIGxpc3QNCj4gPiA+IERvdHNAaWV0Zi5vcmcNCj4gPiA+IGh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KDQo= From nobody Tue May 29 02:38:28 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4397012D965 for ; Tue, 29 May 2018 02:38:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mgUAARRiD-LA for ; Tue, 29 May 2018 02:38:19 -0700 (PDT) Received: from orange.com (mta136.mail.business.static.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F401612EA42 for ; Tue, 29 May 2018 02:38:18 -0700 (PDT) Received: from opfednr04.francetelecom.fr (unknown [xx.xx.xx.68]) by opfednr25.francetelecom.fr (ESMTP service) with ESMTP id CD7BB1806AE; Tue, 29 May 2018 11:38:17 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.2]) by opfednr04.francetelecom.fr (ESMTP service) with ESMTP id AB23A400B8; Tue, 29 May 2018 11:38:17 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM21.corporate.adroot.infra.ftgroup ([fe80::e92a:c932:907e:8f06%19]) with mapi id 14.03.0389.001; Tue, 29 May 2018 11:38:17 +0200 From: To: Jon Shallow , "'Konda, Tirumaleswar Reddy'" , Benjamin Kaduk , "dots@ietf.org" Thread-Topic: [Dots] TLS APLN extension Thread-Index: AQF7fY0SEnbbzScVHebrKQTjRWAcaAIi09JrAU1FL/ABpTg7WwITkQo3AlFTTtUCAn+wpwGSMkFzAlhh1J8AmoNr6AJ1YtACpGOMeTCAAB8ZgA== Date: Tue, 29 May 2018 09:38:16 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF21E64@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <13d301d3f0d8$f66f7c60$e34e7520$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1E28F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <20180523003451.GG10597@kduck.kaduk.org> <15bc01d3f26f$fecf3380$fc6d9a80$@jpshallow.com> <18b001d3f65f$8d47df20$a7d79d60$@jpshallow.com> <18d701d3f66a$bfd2dcf0$3f7896d0$@jpshallow.com> <192201d3f692$62c4a930$284dfb90$@jpshallow.com> <196a01d3f720$a44ab550$ece01ff0$@jpshallow.com> In-Reply-To: <196a01d3f720$a44ab550$ece01ff0$@jpshallow.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.2] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] TLS APLN extension X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 May 2018 09:38:22 -0000 UmUtLA0KDQpJIHVwZGF0ZWQgdGhlIGRyYWZ0IGFjY29yZGluZ2x5LiANCg0KQ2hlZXJzLA0KTWVk DQoNCj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+IERlwqA6IEpvbiBTaGFsbG93IFtt YWlsdG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbV0NCj4gRW52b3nDqcKgOiBtYXJkaSAyOSBt YWkgMjAxOCAwOTo0Mw0KPiDDgMKgOiAnS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeSc7IEJlbmph bWluIEthZHVrOyBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xOOw0KPiBkb3RzQGlldGYub3JnDQo+ IE9iamV0wqA6IFJFOiBbRG90c10gVExTIEFQTE4gZXh0ZW5zaW9uDQo+IA0KPiBIaSBUaXJ1LA0K PiANCj4gU3VnZ2VzdGVkIHRleHQgbG9va3MgZ29vZCB0byBtZS4NCj4gDQo+IFJlZ2FyZHMNCj4g DQo+IEpvbg0KPiANCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogRG90cyBb bWFpbHRvOiBkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBLb25kYSwgVGlydW1h bGVzd2FyDQo+IFJlZGR5DQo+IFNlbnQ6IDI5IE1heSAyMDE4IDA4OjA5DQo+IFRvOiBKb24gU2hh bGxvdzsgQmVuamFtaW4gS2FkdWs7IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb207IGRvdHNA aWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtEb3RzXSBUTFMgQVBMTiBleHRlbnNpb24NCj4gDQo+ ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiBGcm9tOiBKb24gU2hhbGxvdyBbbWFp bHRvOnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb21dDQo+ID4gU2VudDogTW9uZGF5LCBNYXkgMjgs IDIwMTggODoxNSBQTQ0KPiA+IFRvOiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5IDxUaXJ1bWFs ZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tPjsNCj4gPiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtA bWl0LmVkdT47IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb207DQo+ID4gZG90c0BpZXRmLm9y Zw0KPiA+IFN1YmplY3Q6IFJFOiBbRG90c10gVExTIEFQTE4gZXh0ZW5zaW9uDQo+ID4NCj4gPiBU aGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERv IG5vdCBjbGljayBsaW5rcw0KPiBvcg0KPiA+IG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSBy ZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcw0KPiBzYWZlLg0KPiA+ DQo+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiBGcm9tOiBEb3RzIFttYWlsdG86 IGRvdHMtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEtvbmRhLCBUaXJ1bWFsZXN3YXIN Cj4gPiBSZWRkeQ0KPiA+IFNlbnQ6IDI4IE1heSAyMDE4IDE0OjI4DQo+ID4gVG86IEpvbiBTaGFs bG93OyBCZW5qYW1pbiBLYWR1azsgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTsNCj4gPiBk b3RzQGlldGYub3JnDQo+ID4gU3ViamVjdDogUmU6IFtEb3RzXSBUTFMgQVBMTiBleHRlbnNpb24N Cj4gPg0KPiA+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiA+IEZyb206IEpvbiBT aGFsbG93IFttYWlsdG86c3VwanBzLWlldGZAanBzaGFsbG93LmNvbV0NCj4gPiA+IFNlbnQ6IE1v bmRheSwgTWF5IDI4LCAyMDE4IDM6MzEgUE0NCj4gPiA+IFRvOiBLb25kYSwgVGlydW1hbGVzd2Fy IFJlZGR5IDxUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tPjsNCj4gPiA+IEJlbmph bWluIEthZHVrIDxrYWR1a0BtaXQuZWR1PjsgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTsN Cj4gPiA+IGRvdHNAaWV0Zi5vcmcNCj4gPiA+IFN1YmplY3Q6IFJFOiBbRG90c10gVExTIEFQTE4g ZXh0ZW5zaW9uDQo+ID4gPg0KPiA+ID4gVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lk ZSBvZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sNCj4gPiA+IGxpbmtzIG9yIG9wZW4g YXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUN Cj4gPiBjb250ZW50IGlzIHNhZmUuDQo+ID4gPg0KPiA+ID4gSGkgVGlydSwNCj4gPiA+DQo+ID4g PiBJIGFncmVlIHRoZSBET1RTIHNlcnZlciBoYXMgdG8gc2VuZCBiYWNrIGEgImNvYXAiIGlmIGl0 IHJlY2VpdmVzIGENCj4gPiA+IEFMUE4gcmVxdWVzdCBvdmVyIFRDUC4gIERvIHdlIG5lZWQgdG8g c3RhdGUgdGhpcyBpbiB0aGUgRHJhZnQ/DQo+ID4NCj4gPiBObywgYnV0IEkgdGhpbmsgaHR0cHM6 Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0NCj4g PiAxOSNzZWN0aW9uLTMgbmVlZHMgdG8gcG9pbnQgdG8gYm90aA0KPiA+IFJGQzcyNTIgYW5kIFJG QzgzMjMuDQo+ID4NCj4gPiBbSm9uXSBBZ3JlZWQuICBBcmUgeW91IGFibGUgdG8gZG8gdGhpcyB3 aXRoIHNvbWUgc3VpdGFibGUgd3JhcHBlciB0ZXh0Pw0KPiANCj4gUHJvcG9zZWQgdGV4dDoNCj4g RE9UUyBzaWduYWwgY2hhbm5lbCB1c2VzIHRoZSAiY29hcHMiIFVSSSBzY2hlbWUgZGVmaW5lZCBp biBTZWN0aW9uIDYgb2YNCj4gUkZDNzI1MiBhbmQgImNvYXBzK3RjcCIgVVJJIHNjaGVtZSBkZWZp bmVkIGluDQo+IHNlY3Rpb24gOC4yIG9mIFJGQyA4MzIzIHRvIGlkZW50aWZ5IERPVFMgc2VydmVy IHJlc291cmNlcyBhY2Nlc3NpYmxlIHVzaW5nDQo+IENvQVAgb3ZlciBVRFAgc2VjdXJlZCB3aXRo IERUTFMgYW5kDQo+IENvQVAgb3ZlciBUQ1Agc2VjdXJlZCB3aXRoIFRMUy4NCj4gDQo+IC1UaXJ1 DQo+IA0KPiA+IH5Kb24NCj4gPg0KPiA+IENoZWVycywNCj4gPiAtVGlydQ0KPiA+DQo+ID4gPg0K PiA+ID4gUmVnYXJkcw0KPiA+ID4NCj4gPiA+IEpvbg0KPiA+ID4NCj4gPiA+IC0tLS0tT3JpZ2lu YWwgTWVzc2FnZS0tLS0tDQo+ID4gPiBGcm9tOiBEb3RzIFttYWlsdG86IGRvdHMtYm91bmNlc0Bp ZXRmLm9yZ10gT24gQmVoYWxmIE9mIEtvbmRhLA0KPiA+ID4gVGlydW1hbGVzd2FyIFJlZGR5DQo+ ID4gPiBTZW50OiAyOCBNYXkgMjAxOCAxMDo0OQ0KPiA+ID4gVG86IEpvbiBTaGFsbG93OyBCZW5q YW1pbiBLYWR1azsgbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTsNCj4gPiA+IGRvdHNAaWV0 Zi5vcmcNCj4gPiA+IFN1YmplY3Q6IFJlOiBbRG90c10gVExTIEFQTE4gZXh0ZW5zaW9uDQo+ID4g Pg0KPiA+ID4gPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+ID4gPiBGcm9tOiBKb24g U2hhbGxvdyBbbWFpbHRvOnN1cGpwcy1pZXRmQGpwc2hhbGxvdy5jb21dDQo+ID4gPiA+IFNlbnQ6 IE1vbmRheSwgTWF5IDI4LCAyMDE4IDI6MTEgUE0NCj4gPiA+ID4gVG86IEtvbmRhLCBUaXJ1bWFs ZXN3YXIgUmVkZHkNCj4gPiA8VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbT47DQo+ ID4gPiA+IEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQuZWR1PjsgbW9oYW1lZC5ib3VjYWRhaXJA b3JhbmdlLmNvbTsNCj4gPiA+ID4gZG90c0BpZXRmLm9yZw0KPiA+ID4gPiBTdWJqZWN0OiBSRTog W0RvdHNdIFRMUyBBUExOIGV4dGVuc2lvbg0KPiA+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPg0KPiA+ ID4gPiBIaSBUaXJ1LA0KPiA+ID4gPg0KPiA+ID4gPiBJIGFncmVlIHRoYXQgaXQgbWFrZXMgbm8g c2Vuc2UgdG8gaGF2ZSBvdXIgb3duIEFMUE4gLSAiY29hcCIgaXMgZmluZQ0KPiA+ID4gPiBhcyB0 aGF0IGlzIGRlc2NyaWJpbmcgdGhlIG5leHQgcHJvdG9jb2wgbGF5ZXIgdXAuICBIb3dldmVyLCBJ IGRpZA0KPiA+ID4gPiByYWlzZSB0aGUgcXVlc3Rpb24gaW4gY2FzZSB0aGUgRE9UUyBTZXJ2ZXIg bmVlZHMgdG8gcmVzcG9uZCB0byBhDQo+ID4gPiA+IERPVFMgY2xpZW50IHRoYXQgaXMgY29ycmVj dGx5IGZvbGxvd2luZyBSRkMgODMyMyBhbmQgZXhwZWN0aW5nIHRvDQo+ID4gPiA+IHNlZSBiYWNr IGEgQUxQTg0KPiA+ID4gcmVzcG9uc2UuDQo+ID4gPg0KPiA+ID4gVGhlIERPVFMgc2VydmVyIHdp bGwgbm90IGJlIHJ1bm5pbmcgb24gNTY4NC4gSWYgdGhlIERPVFMgc2VydmVyIGlzDQo+ID4gPiBj b3JyZWN0bHkgZm9sbG93aW5nIFJGQzgzMjMsIGl0IHNob3VsZCByZXNwb25kIHdpdGggQUxQTiBy ZXNwb25zZSAiY29hcCIuDQo+ID4gPg0KPiA+ID4gLVRpcnUNCj4gPiA+DQo+ID4gPiA+DQo+ID4g PiA+ICJJZiB0aGUgVExTIHNlcnZlciBlaXRoZXIgZG9lcyBub3QgbmVnb3RpYXRlIHRoZSBBTFBO IGV4dGVuc2lvbiBvcg0KPiA+ID4gPiByZXR1cm5zIGEgbm9fYXBwbGljYXRpb25fcHJvdG9jb2wg YWxlcnQsIHRoZSBUTFMgY2xpZW50IE1VU1QgY2xvc2UNCj4gPiA+ID4gdGhlDQo+ID4gPiBjb25u ZWN0aW9uLiINCj4gPiA+ID4NCj4gPiA+ID4gUmVnYXJkcw0KPiA+ID4gPg0KPiA+ID4gPiBKb24N Cj4gPiA+ID4NCj4gPiA+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiA+ID4gRnJv bTogRG90cyBbbWFpbHRvOiBkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBLb25k YSwNCj4gPiA+ID4gVGlydW1hbGVzd2FyIFJlZGR5DQo+ID4gPiA+IFNlbnQ6IDI4IE1heSAyMDE4 IDA3OjAzDQo+ID4gPiA+IFRvOiBKb24gU2hhbGxvdzsgJ0JlbmphbWluIEthZHVrJzsgbW9oYW1l ZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTsNCj4gPiA+ID4gZG90c0BpZXRmLm9yZw0KPiA+ID4gPiBT dWJqZWN0OiBSZTogW0RvdHNdIFRMUyBBUExOIGV4dGVuc2lvbg0KPiA+ID4gPg0KPiA+ID4gPiBB bHRob3VnaCBjb2Fwcyt0Y3AgVVJJIHNjaGVtZSBpcyB1c2VkIGJ5IERPVFMgc2lnbmFsIGNoYW5u ZWwsIHdlDQo+ID4gPiA+IGhhdmUgbm90IHlldCBzZWVuIGFueSByZXF1aXJlbWVudCB3aGVyZSBt dWx0aXBsZSBwcm90b2NvbHMgd2lsbCBiZQ0KPiA+ID4gPiBydW4gb24gdGhlIERPVFMgc2VydmVy IHBvcnQgbnVtYmVyIDQ2NDYuDQo+ID4gPiA+IEkgZG9uJ3Qgc2VlIHRoZSBuZWVkIHRvIGRlZmlu ZSBhIG5ldyBBTFBOIGZvciBET1RTIHNpZ25hbCBjaGFubmVsLg0KPiA+ID4gPg0KPiA+ID4gPiBD aGVlcnMNCj4gPiA+ID4gLVRpcnUNCj4gPiA+ID4NCj4gPiA+ID4gPiAtLS0tLU9yaWdpbmFsIE1l c3NhZ2UtLS0tLQ0KPiA+ID4gPiA+IEZyb206IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0 Zi5vcmddIE9uIEJlaGFsZiBPZiBKb24gU2hhbGxvdw0KPiA+ID4gPiA+IFNlbnQ6IFdlZG5lc2Rh eSwgTWF5IDIzLCAyMDE4IDE6NTggUE0NCj4gPiA+ID4gPiBUbzogJ0JlbmphbWluIEthZHVrJyA8 a2FkdWtAbWl0LmVkdT47DQo+ID4gPiA+ID4gbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTsg ZG90c0BpZXRmLm9yZw0KPiA+ID4gPiA+IFN1YmplY3Q6IFJlOiBbRG90c10gVExTIEFQTE4gZXh0 ZW5zaW9uDQo+ID4gPiA+ID4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gSGkgQmVu LA0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gVGhlIERPVFMgc2lnbmFsIHNwZWMgY2FsbHMgZm9yIENv QVAgc2VjdXJlZCBieSBydW5uaW5nIG92ZXIgKEQpVExTDQo+ID4gPiA+ID4gKGVpdGhlciBVRFAg YW5kL29yIFRDUCksIGFuZCBDb0FQIG92ZXIgVExTIGlzIGNvYXBzK3RjcC4gIFNvLCB5ZXMsDQo+ ID4gPiA+ID4gYm90aCBjb2FwcyBhbmQNCj4gPiA+ID4gPiBjb2Fwcyt0Y3AgaGF2ZSB0byBiZSBz dXBwb3J0ZWQuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBGb3IgZXhhbXBsZSwgSSBjYW4gdXNlIHRo ZSBnaXRodWIgbGliY29hcCBjb2FwLWNsaWVudCAoUHVsbA0KPiA+ID4gPiA+IFJlcXVlc3QNCj4g PiA+ID4gPiAjMTc2DQo+ID4gPiA+ID4gaW5zdGFsbGVkKSBhbmQgZG8gImNvYXAtY2xpZW50IC1j IGNlcnQucGVtDQo+ID4gPiA+ID4gY29hcHMrdGNwOi8vMTI3LjAuMC4xOjQ2NDYvLndlbGwta25v d24vZG90cy92MS9jb25maWciIGFnYWluc3QgbXkNCj4gPiA+ID4gPiBjb2FwcytET1RTDQo+ID4g PiA+ID4gc2VydmVyIGFuZCBnZXQgYmFjayBiaW5hcnkgZGF0YSAoaXQgaXMgQ0JPUiBlbmNvZGVk KS4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFJlZ2FyZHMNCj4gPiA+ID4gPg0KPiA+ID4gPiA+IEpv bg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiA+ ID4gPiBGcm9tOiBEb3RzIFttYWlsdG86IGRvdHMtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxm IE9mIEJlbmphbWluDQo+ID4gPiA+ID4gS2FkdWsNCj4gPiA+ID4gPiBTZW50OiAyMyBNYXkgMjAx OCAwMTozNQ0KPiA+ID4gPiA+IFRvOiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4g PiA+ID4gQ2M6IEpvbiBTaGFsbG93OyBkb3RzQGlldGYub3JnDQo+ID4gPiA+ID4gU3ViamVjdDog UmU6IFtEb3RzXSBUTFMgQVBMTiBleHRlbnNpb24NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFRoZSBk ZWRpY2F0ZWQgcG9ydCBudW1iZXIgaXMgb25seSBzb21ld2hhdCByZWxldmFudCwgSSB0aGluayAt LQ0KPiA+ID4gPiA+IHRoZSBtYWluIHF1ZXN0aW9uIGlzIHdoZXRoZXIgdGhlIGNvYXBzK3RjcCBV Ukkgc2NoZW1lIGlzIGluIHVzZS4NCj4gPiA+ID4gPiBUaGUgUkZDDQo+ID4gPiA+ID4gODMyMyBy ZXF1aXJlbWVudHMgb25seSBjb21lIGludG8gcGxheSBmb3IgdGhhdCBVUkkgc2NoZW1lLg0KPiA+ ID4gPiA+DQo+ID4gPiA+ID4gLUJlbg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gT24gVHVlLCBNYXkg MjIsIDIwMTggYXQgMDc6NTQ6MzlBTSArMDAwMCwNCj4gPiA+ID4gbW9oYW1lZC5ib3VjYWRhaXJA b3JhbmdlLmNvbQ0KPiA+ID4gPiA+IHdyb3RlOg0KPiA+ID4gPiA+ID4gUmUtLA0KPiA+ID4gPiA+ ID4NCj4gPiA+ID4gPiA+IERvIHdlIG5lZWQgdGhpcyBnaXZlbiB0aGF0IERPVFMgaXMgdXNpbmcg YSBkZWRpY2F0ZWQgcG9ydCBudW1iZXI/DQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gQ2hlZXJz LA0KPiA+ID4gPiA+ID4gTWVkDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gRGUgOiBEb3RzIFtt YWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBEZSBsYSBwYXJ0IGRlIEpvbg0KPiA+ID4gPiA+ ID4gU2hhbGxvdyBFbnZvecOpIDogbHVuZGkgMjEgbWFpIDIwMTggMDk6NTUgw4AgOiBkb3RzQGll dGYub3JnIE9iamV0DQo+ID4gPiA+ID4gPiA6IFtEb3RzXSBUTFMgQVBMTiBleHRlbnNpb24NCj4g PiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBIaSB0aGVyZSwNCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4g PiBBcyBwZXIgUkZDIDgzMjM6IDguMi4gIGNvYXBzK3RjcCBVUkkgU2NoZW1lDQo+ID4gPiA+ID4g Pg0KPiA+ID4gPiA+ID4gLi4uLg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ICAgIG8gIElmIGEg VExTIHNlcnZlciBkb2VzIG5vdCBzdXBwb3J0IHRoZSBBcHBsaWNhdGlvbi1MYXllcg0KPiBQcm90 b2NvbA0KPiA+ID4gPiA+ID4gICAgICAgTmVnb3RpYXRpb24gKEFMUE4pIGV4dGVuc2lvbiBbUkZD NzMwMV0gb3Igd2lzaGVzIHRvDQo+IGFjY29tbW9kYXRlDQo+ID4gPiA+ID4gPiAgICAgICBUTFMg Y2xpZW50cyB0aGF0IGRvIG5vdCBzdXBwb3J0IEFMUE4sIGl0IE1BWSBvZmZlciBhDQo+IGNvYXBz K3RjcA0KPiA+ID4gPiA+ID4gICAgICAgZW5kcG9pbnQgb24gVENQIHBvcnQgNTY4NC4gIFRoaXMg ZW5kcG9pbnQgTUFZIGFsc28gYmUgQUxQTg0KPiA+ID4gPiA+ID4gICAgICAgZW5hYmxlZC4gIEEg VExTIHNlcnZlciBNQVkgb2ZmZXIgY29hcHMrdGNwIGVuZHBvaW50cyBvbiBwb3J0cw0KPiA+ID4g PiA+ID4gICAgICAgb3RoZXIgdGhhbiBUQ1AgcG9ydCA1Njg0LCB3aGljaCBNVVNUIGJlIEFMUE4g ZW5hYmxlZC4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiAgICBvICBGb3IgVENQIHBvcnRzIG90 aGVyIHRoYW4gcG9ydCA1Njg0LCB0aGUgVExTIGNsaWVudCBNVVNUIHVzZQ0KPiB0aGUNCj4gPiA+ ID4gPiA+ICAgICAgIEFMUE4gZXh0ZW5zaW9uIHRvIGFkdmVydGlzZSB0aGUgImNvYXAiIHByb3Rv Y29sIGlkZW50aWZpZXINCj4gKHNlZQ0KPiA+ID4gPiA+ID4gICAgICAgU2VjdGlvbiAxMS43KSBp biB0aGUgbGlzdCBvZiBwcm90b2NvbHMgaW4gaXRzIENsaWVudEhlbGxvLg0KPiBJZiB0aGUNCj4g PiA+ID4gPiA+ICAgICAgIFRDUCBzZXJ2ZXIgc2VsZWN0cyBhbmQgcmV0dXJucyB0aGUgImNvYXAi IHByb3RvY29sIGlkZW50aWZpZXINCj4gPiA+ID4gPiA+ICAgICAgIHVzaW5nIHRoZSBBTFBOIGV4 dGVuc2lvbiBpbiBpdHMgU2VydmVySGVsbG8sIHRoZW4gdGhlDQo+IGNvbm5lY3Rpb24NCj4gPiA+ ID4gPiA+ICAgICAgIHN1Y2NlZWRzLiAgSWYgdGhlIFRMUyBzZXJ2ZXIgZWl0aGVyIGRvZXMgbm90 IG5lZ290aWF0ZSB0aGUNCj4gQUxQTg0KPiA+ID4gPiA+ID4gICAgICAgZXh0ZW5zaW9uIG9yIHJl dHVybnMgYSBub19hcHBsaWNhdGlvbl9wcm90b2NvbCBhbGVydCwgdGhlIFRMUw0KPiA+ID4gPiA+ ID4gICAgICAgY2xpZW50IE1VU1QgY2xvc2UgdGhlIGNvbm5lY3Rpb24uDQo+ID4gPiA+ID4gPg0K PiA+ID4gPiA+ID4gRG8gd2UgbmVlZCB0byByZWZlciB0byB0aGUgcmVxdWlyZW1lbnQgZm9yIEFM UE4gYXMgd2UgYXJlIG5vdA0KPiA+ID4gPiA+ID4gaG9zdGluZyBvbg0KPiA+ID4gPiA+IHBvcnQg NTY4ND8NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBSZWdhcmRzDQo+ID4gPiA+ID4gPg0KPiA+ ID4gPiA+ID4gSm9uDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gPiA+ID4gPiBEb3RzIG1haWxpbmcgbGlz dA0KPiA+ID4gPiA+ID4gRG90c0BpZXRmLm9yZw0KPiA+ID4gPiA+ID4gaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ID4gPiA+IERvdHMg bWFpbGluZyBsaXN0DQo+ID4gPiA+ID4gRG90c0BpZXRmLm9yZw0KPiA+ID4gPiA+IGh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+ID4gPiA+DQo+ID4gPiA+ID4g X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiA+ID4g PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+ID4gPiA+IERvdHNAaWV0Zi5vcmcNCj4gPiA+ID4gPiBo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPiA+ID4gX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiA+ID4gRG90cyBt YWlsaW5nIGxpc3QNCj4gPiA+ID4gRG90c0BpZXRmLm9yZw0KPiA+ID4gPiBodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPiA+DQo+ID4gPiBfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ID4gRG90cyBtYWlsaW5nIGxp c3QNCj4gPiA+IERvdHNAaWV0Zi5vcmcNCj4gPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vZG90cw0KPiA+DQo+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCj4gPiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+IERvdHNAaWV0Zi5v cmcNCj4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gDQo+ IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IERvdHMg bWFpbGluZyBsaXN0DQo+IERvdHNAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9kb3RzDQoNCg== From nobody Tue May 29 04:42:37 2018 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F588126D05; Tue, 29 May 2018 04:42:31 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dots@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.80.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152759415118.25475.16371732041889198307@ietfa.amsl.com> Date: Tue, 29 May 2018 04:42:31 -0700 Archived-At: Subject: [Dots] I-D Action: draft-ietf-dots-signal-channel-20.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 May 2018 11:42:32 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling WG of the IETF. Title : Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification Authors : Tirumaleswar Reddy Mohamed Boucadair Prashanth Patil Andrew Mortensen Nik Teague Filename : draft-ietf-dots-signal-channel-20.txt Pages : 86 Date : 2018-05-29 Abstract: This document specifies the DOTS signal channel, a protocol for signaling the need for protection against Distributed Denial-of- Service (DDoS) attacks to a server capable of enabling network traffic mitigation on behalf of the requesting client. A companion document defines the DOTS data channel, a separate reliable communication layer for DOTS management and configuration purposes. Editorial Note (To be removed by RFC Editor) Please update these statements with the RFC number to be assigned to this document: o "This version of this YANG module is part of RFC XXXX;" o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification"; o "| [RFCXXXX] |" o reference: RFC XXXX Please update TBD statements with the port number to be assigned to DOTS Signal Channel Protocol. Also, please update the "revision" date of the YANG module. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-signal-channel/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dots-signal-channel-20 https://datatracker.ietf.org/doc/html/draft-ietf-dots-signal-channel-20 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-signal-channel-20 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue May 29 04:51:02 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EAAF612D95A for ; Tue, 29 May 2018 04:50:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4zaaCTujPgjn for ; Tue, 29 May 2018 04:50:58 -0700 (PDT) Received: from orange.com (mta136.mail.business.static.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A958124BE8 for ; Tue, 29 May 2018 04:50:58 -0700 (PDT) Received: from opfednr01.francetelecom.fr (unknown [xx.xx.xx.65]) by opfednr20.francetelecom.fr (ESMTP service) with ESMTP id 16D2440443 for ; Tue, 29 May 2018 13:50:57 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.60]) by opfednr01.francetelecom.fr (ESMTP service) with ESMTP id F2C461A009B for ; Tue, 29 May 2018 13:50:56 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM7F.corporate.adroot.infra.ftgroup ([fe80::c1d7:e278:e357:11ad%19]) with mapi id 14.03.0389.001; Tue, 29 May 2018 13:50:56 +0200 From: To: "dots@ietf.org" Thread-Topic: I-D Action: draft-ietf-dots-signal-channel-20.txt Thread-Index: AQHT90I4O5i5X0dB90W+wWXWdvqLoKRGlkig Date: Tue, 29 May 2018 11:50:55 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302DF21F8D@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <152759415118.25475.16371732041889198307@ietfa.amsl.com> In-Reply-To: <152759415118.25475.16371732041889198307@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.2] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-20.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 May 2018 11:51:00 -0000 Re-, The main changes in this version are as follows: - add an explicit sentence to remind which uri schemes are used.=20 - allow for returning both 2.01 and 4.09 when handling a conflicting reques= t.=20 I consider those comments as part of the WGLC comments.=20 Cheers, Med > -----Message d'origine----- > De=A0: I-D-Announce [mailto:i-d-announce-bounces@ietf.org] De la part de > internet-drafts@ietf.org > Envoy=E9=A0: mardi 29 mai 2018 13:43 > =C0=A0: i-d-announce@ietf.org > Cc=A0: dots@ietf.org > Objet=A0: I-D Action: draft-ietf-dots-signal-channel-20.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the DDoS Open Threat Signaling WG of the IET= F. >=20 > Title : Distributed Denial-of-Service Open Threat Signa= ling > (DOTS) Signal Channel Specification > Authors : Tirumaleswar Reddy > Mohamed Boucadair > Prashanth Patil > Andrew Mortensen > Nik Teague > Filename : draft-ietf-dots-signal-channel-20.txt > Pages : 86 > Date : 2018-05-29 >=20 > Abstract: > This document specifies the DOTS signal channel, a protocol for > signaling the need for protection against Distributed Denial-of- > Service (DDoS) attacks to a server capable of enabling network > traffic mitigation on behalf of the requesting client. >=20 > A companion document defines the DOTS data channel, a separate > reliable communication layer for DOTS management and configuration > purposes. >=20 > Editorial Note (To be removed by RFC Editor) >=20 > Please update these statements with the RFC number to be assigned to > this document: >=20 > o "This version of this YANG module is part of RFC XXXX;" >=20 > o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling > (DOTS) Signal Channel Specification"; >=20 > o "| [RFCXXXX] |" >=20 > o reference: RFC XXXX >=20 > Please update TBD statements with the port number to be assigned to > DOTS Signal Channel Protocol. >=20 > Also, please update the "revision" date of the YANG module. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-dots-signal-channel/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-dots-signal-channel-20 > https://datatracker.ietf.org/doc/html/draft-ietf-dots-signal-channel-20 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-dots-signal-channel-20 >=20 >=20 > Please note that it may take a couple of minutes from the time of submiss= ion > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > I-D-Announce mailing list > I-D-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/i-d-announce > Internet-Draft directories: http://www.ietf.org/shadow.html > or ftp://ftp.ietf.org/ietf/1shadow-sites.txt From nobody Thu May 31 00:14:59 2018 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F6EC12EA24 for ; Thu, 31 May 2018 00:14:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8Va85AaybLbG for ; Thu, 31 May 2018 00:14:52 -0700 (PDT) Received: from guri.nttv6.jp (guri.nttv6.jp [IPv6:2402:c800:ff06:136::140]) by ietfa.amsl.com (Postfix) with ESMTP id 090A912EAD7 for ; Thu, 31 May 2018 00:14:51 -0700 (PDT) Received: from z.nttv6.jp (z.nttv6.jp [192.168.8.15]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id 7F33D25F68D; Thu, 31 May 2018 16:14:50 +0900 (JST) Received: from MacBook-Pro-17.local (fujiko.nttv6.jp [115.69.228.141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id 3F9EA75907E; Thu, 31 May 2018 16:14:50 +0900 (JST) To: mohamed.boucadair@orange.com, "Konda, Tirumaleswar Reddy" Cc: "dots@ietf.org" References: <152336759324.13436.2718962831054268683@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DF1B493@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <8ae47725-4db3-e02a-7846-d2f4d5d9b739@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BCA8@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BD67@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302DF1BDCD@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <2c400e78-4482-2b61-5289-6b149294b78f@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF1BE20@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <3327b0b6-bbb4-429c-b2c2-6a63c3cd27be@nttv6.jp> <787AE7BB302AE849A7480A190F8B93302DF21E3F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: kaname nishizuka Message-ID: Date: Thu, 31 May 2018 16:14:49 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DF21E3F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 May 2018 07:14:56 -0000 Hi Med, Looks good to me. Thanks for updating it. regards, kaname On 2018/05/29 18:33, mohamed.boucadair@orange.com wrote: > Hi all, > > It seems that this discussion has converged. > > I updated the draft as follows to reflect the outcome of the discussion: > > OLD: > If the request is conflicting with an existing mitigation request > from a different DOTS client, and the DOTS server decides to maintain > the conflicting mitigation request, the DOTS server returns 4.09 > (Conflict) [RFC8132] to the requesting DOTS client. The response > includes enough information for a DOTS client to recognize the source > of the conflict as described below: > > NEW: > If the request is conflicting with an existing mitigation request > from a different DOTS client, the DOTS server may return 2.01 > (Created) or 4.09 (Conflict) to the requesting DOTS client. If the > DOTS server decides to maintain the new mitigation request, the DOTS > server returns 2.01 (Created) to the requesting DOTS client. If the > DOTS server decides to reject the new mitigation request, the DOTS > server returns 4.09 (Conflict) to the requesting DOTS client. For > both 2.01 (Created) and 4.09 (Conflict) responses, the response > includes enough information for a DOTS client to recognize the source > of the conflict as described below: > > Cheers, > Med > >> -----Message d'origine----- >> De : Konda, Tirumaleswar Reddy [mailto:TirumaleswarReddy_Konda@McAfee.com] >> Envoyé : vendredi 18 mai 2018 08:24 >> À : kaname nishizuka; BOUCADAIR Mohamed IMT/OLN >> Cc : dots@ietf.org >> Objet : RE: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >> >>> -----Original Message----- >>> From: kaname nishizuka [mailto:kaname@nttv6.jp] >>> Sent: Friday, May 18, 2018 8:06 AM >>> To: mohamed.boucadair@orange.com; Konda, Tirumaleswar Reddy >>> >>> Cc: dots@ietf.org >>> Subject: Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>> >>> This email originated from outside of the organization. Do not click links >> or >>> open attachments unless you recognize the sender and know the content is >>> safe. >>> >>> Re-, >>> >>> Please see inline. >>> >>> thanks, >>> Kaname >>> >>> >>> On 2018/05/16 17:15, mohamed.boucadair@orange.com wrote: >>>> Re-, >>>> >>>> Please see inline. >>>> >>>> Cheers, >>>> Med >>>> >>>>> -----Message d'origine----- >>>>> De : Dots [mailto:dots-bounces@ietf.org] De la part de kaname >>>>> nishizuka Envoyé : mercredi 16 mai 2018 09:51 À : BOUCADAIR Mohamed >>>>> IMT/OLN; Konda, Tirumaleswar Reddy Cc : dots@ietf.org Objet : Re: >>>>> [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>> >>>>> Re, >>>>> >>>>> I see, but I didn't feel "For example:" is reflecting my comment. >>>> [Med] I was referring this this comment you made "It should be left as >>> implementation- and deployment-specific". >>>> Anyway, let's remove "For example:". >>>> >>>>> Should we need to use success (2.01 or 2.04) in the first sentence like >> this? >>>>>    If the request is conflicting with an existing mitigation request >>>>>    from a different DOTS client, the DOTS server may return success >>>>> (2.01 or >>>>> 2.04) >>>>>    or  Conflict(4.09) to the requesting DOTS client. >>>>> >>>> [Med] I don't think so. The text is about a request with a new cuid/mid. >>>> >>> [kaname] OK, the text is about a request with a new cuid/mid. >>> However, I'd like to point it out that the checking of conflict should be >> done >>> at the arrival of a new PUT request with both a new cuid/mid case and the >>> same mid(update of the mitigation request) case. >> 2.04 is discussed before the text explaining conflicts with an existing >> mitigation request from a different client. >> >> If the DOTS server finds the 'mid' parameter value conveyed in the >> PUT request in its configuration data bound to that DOTS client, it >> MAY update the mitigation request, and a 2.04 (Changed) response is >> returned to indicate a successful update of the mitigation request. >> >> >> -Tiru >> >>> >>> >>> >>>>> regards, >>>>> Kaname >>>>> >>>>> >>>>> On 2018/05/16 16:33, mohamed.boucadair@orange.com wrote: >>>>>> Re-, >>>>>> >>>>>> "For example" is there to accommodate a comment from Kaname who >>>>>> wanted the >>>>> behavior to be also implementation/deployment. >>>>>> Cheers, >>>>>> Med >>>>>> >>>>>>> -----Message d'origine----- >>>>>>> De : Konda, Tirumaleswar Reddy >>>>>>> [mailto:TirumaleswarReddy_Konda@McAfee.com] >>>>>>> Envoyé : mercredi 16 mai 2018 09:04 À : BOUCADAIR Mohamed >>> IMT/OLN; >>>>>>> kaname nishizuka Cc : dots@ietf.org Objet : RE: [Dots] I-D Action: >>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>> >>>>>>> Hi Med, >>>>>>> >>>>>>> Please see inline >>>>>>> >>>>>>>> -----Original Message----- >>>>>>>> From: mohamed.boucadair@orange.com >>>>>>>> [mailto:mohamed.boucadair@orange.com] >>>>>>>> Sent: Wednesday, May 16, 2018 12:26 PM >>>>>>>> To: Konda, Tirumaleswar Reddy >>>>>>>> ; >>>>>>>> kaname nishizuka >>>>>>>> Cc: dots@ietf.org >>>>>>>> Subject: RE: [Dots] I-D Action: >>>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>>> >>>>>>>> This email originated from outside of the organization. Do not >>>>>>>> click >>>>> links >>>>>>> or >>>>>>>> open attachments unless you recognize the sender and know the >>>>>>>> content is safe. >>>>>>>> >>>>>>>> Hi Tiru, >>>>>>>> >>>>>>>> Please see inline. >>>>>>>> >>>>>>>> Cheers, >>>>>>>> Med >>>>>>>> >>>>>>>>> -----Message d'origine----- >>>>>>>>> De : Konda, Tirumaleswar Reddy >>>>>>>>> [mailto:TirumaleswarReddy_Konda@McAfee.com] >>>>>>>>> Envoyé : mercredi 16 mai 2018 08:11 À : BOUCADAIR Mohamed >>>>>>>>> IMT/OLN; kaname nishizuka Cc : dots@ietf.org Objet : RE: [Dots] >>>>>>>>> I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>>>>> >>>>>>>>> I propose to update the text as follows to make it more clear: >>>>>>>>> >>>>>>>>> If the request is conflicting with an existing mitigation request >>>>>>>>> from a different DOTS client, the DOTS server may either decide >>>>>>>>> to maintain the conflicting request or reject the conflicting >> mitigation >>> request. >>>>>>>>> If the DOTS server decides to maintain the conflicting mitigation >>>>>>>>> request, >>>>>>>> [Med] I guess "conflicting mitigation request" points to the new >>> request. >>>>>>>> the DOTS server returns 2.01 (Created) to >>>>>>>>> the requesting DOTS client. If the DOTS server decides to reject >>>>>>>>> the conflicting mitigation request, the DOTS server returns 4.09 >>>>>>>>> (Conflict) [RFC8132] to the requesting DOTS client >>>>>>>> [Med] Idem as above. >>>>>>>> >>>>>>>> >>>>>>>>> For both 2.01 (Created) and 4.09 (Conflict) responses, >>>>>>>> [Med] I like this. >>>>>>>> >>>>>>>> the response message >>>>>>>>> includes enough information for a DOTS client to recognize the >>>>>>>>> source of the conflict as described below: >>>>>>>> [Med] What about? >>>>>>>> >>>>>>>> NEW: >>>>>>>> >>>>>>>> If the request is conflicting with an existing mitigation >> request >>>>>>>> from a different DOTS client, the DOTS server may return 2.01 >>>>>>>> (Created) or 4.09 (Conflict) to the requesting DOTS client. For >>>>>>>> example: >>>>>>>> >>>>>>>> o If the DOTS server decides to maintain the new mitigation >>> request, >>>>>>>> the DOTS server returns 2.01 (Created) to the requesting DOTS >>>>>>>> client. >>>>>>>> >>>>>>>> o If the DOTS server decides to reject the new mitigation >> request, >>>>>>>> the DOTS server returns 4.09 (Conflict) to the requesting >> DOTS >>>>>>>> client. >>>>>>>> >>>>>>>> For both 2.01 (Created) and 4.09 (Conflict) responses, the >> response >>>>>>>> includes enough information for a DOTS client to recognize the >>> source >>>>>>>> of the conflict as described below: >>>>>>> Proposed text looks good. Nit: I don't see the need for "For example". >>>>>>> >>>>>>> Cheers, >>>>>>> -Tiru >>>>>>> >>>>>>>>> -Tiru >>>>>>>>> >>>>>>>>>> -----Original Message----- >>>>>>>>>> From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of >>>>>>>>>> mohamed.boucadair@orange.com >>>>>>>>>> Sent: Wednesday, May 16, 2018 10:52 AM >>>>>>>>>> To: kaname nishizuka >>>>>>>>>> Cc: dots@ietf.org >>>>>>>>>> Subject: Re: [Dots] I-D Action: >>>>>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>>>>> >>>>>>>>>> This email originated from outside of the organization. Do not >>>>>>>>>> click links >>>>>>>>> or >>>>>>>>>> open attachments unless you recognize the sender and know the >>>>>>>>>> content is safe. >>>>>>>>>> >>>>>>>>>> Hi Kaname, >>>>>>>>>> >>>>>>>>>> Thank you for ACking. I will implement this change. >>>>>>>>>> >>>>>>>>>> Cheers, >>>>>>>>>> Med >>>>>>>>>> >>>>>>>>>>> -----Message d'origine----- >>>>>>>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] Envoyé : >>>>>>>>>>> mercredi >>>>>>>>>>> 16 mai 2018 03:16 À : BOUCADAIR Mohamed IMT/OLN Cc : >>>>>>>> dots@ietf.org >>>>>>>>>> Objet >>>>>>>>>>> : Re: [Dots] I-D Action: draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>> >>>>>>>>>>> Hi Med, >>>>>>>>>>> >>>>>>>>>>> Please see inline. >>>>>>>>>>> >>>>>>>>>>> thanks, >>>>>>>>>>> kaname >>>>>>>>>>> >>>>>>>>>>> On 2018/05/15 22:26, mohamed.boucadair@orange.com wrote: >>>>>>>>>>>> Hi Kaname, >>>>>>>>>>>> >>>>>>>>>>>> Please see inline. >>>>>>>>>>>> >>>>>>>>>>>> Cheers, >>>>>>>>>>>> Med >>>>>>>>>>>> >>>>>>>>>>>>> -----Message d'origine----- >>>>>>>>>>>>> De : kaname nishizuka [mailto:kaname@nttv6.jp] Envoyé : lundi >>>>>>>>>>>>> 14 mai 2018 11:49 À : BOUCADAIR Mohamed IMT/OLN Cc : >>>>>>>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>>>> >>>>>>>>>>>>> Hi Med, >>>>>>>>>>>>> >>>>>>>>>>>>> Please see inline. >>>>>>>>>>>>> >>>>>>>>>>>>> thanks, >>>>>>>>>>>>> Kaname >>>>>>>>>>>>> >>>>>>>>>>>>> On 2018/05/11 18:39, mohamed.boucadair@orange.com wrote: >>>>>>>>>>>>>> Re-, >>>>>>>>>>>>>> >>>>>>>>>>>>>> Please see inline. >>>>>>>>>>>>>> >>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>> Med >>>>>>>>>>>>>> >>>>>>>>>>>>>>> -----Message d'origine----- De : kaname nishizuka >>>>>>>>>>>>>>> [mailto:kaname@nttv6.jp] Envoyé : >>>>>>>>>>>>>>> vendredi >>>>>>>>>>>>>>> 11 mai 2018 10:59 À : BOUCADAIR Mohamed IMT/OLN Cc : >>>>>>>>>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>>>>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Hi Med, >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> > If the server decides not to maintain the >>>>>>>>>>>>>>> conflicting request, then >>>>>>>>>>>>> the >>>>>>>>>>>>>>> present request will be processed as normal: that is 2.01 >>>>>>>>>>>>>>> will be >>>>>>>>>>> returned >>>>>>>>>>>>> to >>>>>>>>>>>>>>> ack successful handling. A notification will be sent to the >>>>>>>>>>>>>>> client owner >>>>>>>>>>>>> of >>>>>>>>>>>>>>> the conflicting request to notify withdrawal (section 4.4.2). >>>>>>>>>>>>>>> In that case, the status code is '7' (Attack mitigation is >>>>>>>>>>>>>>> withdrawn) >>>>>>>>>>>>>> [Med] Yes, that status will be sent to the owner of the >>>>>>>>>>>>>> (existing) >>>>>>>>>>> request. >>>>>>>>>>>>>>> My original question is when the status code '8' (Attack >>>>>>>>>>>>>>> mitigation is >>>>>>>>>>>>>>> rejected) will be used. >>>>>>>>>>>>>> [Med] I got that. >>>>>>>>>>>>>> >>>>>>>>>>>>>>> In the text in the draft, "the conflicting mitigation >>>>>>>>>>>>>>> request" is >>>>>>>>>>>>> ambiguous >>>>>>>>>>>>>>> whether it is already existing request or the request that >>>>>>>>>>>>>>> just has >>>>>>>>>>>>> arrived. >>>>>>>>>>>>>> [Med] It is related to the already existing request. >>>>>>>>>>>>>> >>>>>>>>>>>>>>> Say, the existing request is (A), then a mitigation request >>>>>>>>>>>>>>> (B) arrived >>>>>>>>>>>>> which >>>>>>>>>>>>>>> are conflicting with A. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> If B is selected. >>>>>>>>>>>>>>> (A) will get notification with the withdrawal code '7' >>>>>>>>>>>>>>> (B) will get 2.01 >>>>>>>>>>>>>>> >>>>>>>>>>>>>> [Med] Yes. The current text does calls out your step (1) in >>>>>>> 4.4.2. >>>>>>>>>>>>>> Your >>>>>>>>>>>>> step (2) is not called explicit in the text because there is >>>>>>>>>>>>> no confusion about which code to return when a request is >>>>>>>>>>>>> accepted to be >>>>>>>>>> honored. >>>>>>>>>>>>>> The text focuses on cases which requires specific handling: >>>>>>>>>>>>>> - inactive request because of a conflict >>>>>>>>>>>>>> - multiple active conflicting requests >>>>>>>>>>>>>> >>>>>>>>>>>>>>> else If B is not selected. >>>>>>>>>>>>>>> (B) will get 4.09 >>>>>>>>>>>>>>> >>>>>>>>>>>>>> [Med] In this case, the resource is not created and as such >>>>>>>>>>>>>> case >>>>>>>>>>> returning >>>>>>>>>>>>> notification status code of 8 is not possible as you rightful >>>>>>>>>>>>> pointed >>>>>>>>> out. >>>>>>>>>>>>>> This is why we suggested to return 2.01 for this case too so >>>>>>>>>>>>>> that an >>>>>>>>>>> update >>>>>>>>>>>>> of the status can be sent to the client upon change. >>>>>>>>>>>>> I don't think it is needed to obligate returning of 2.01. >>>>>>>>>>>>> If it is obvious that the DOTS server need not to create >>>>>>>>>>>>> resource of the conflicting request, it may return 4.09. >>>>>>>>>>>>> So, returning of 4.09 should be allowed in this case. >>>>>>>>>>>>> It should be left as implementation- and deployment-specific. >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>> [Med] Do you mean that the text should be modified to allow >>>>>>>>>>>> for both >>>>>>>>>>>> 2.01 >>>>>>>>>>> or 4.09 to be returned depending on some local policy? >>>>>>>>>>>> e.g., >>>>>>>>>>>> >>>>>>>>>>>> OLD: >>>>>>>>>>>> If the request is conflicting with an existing >>>>>>>>>>>> mitigation >>>>>>> request >>>>>>>>>>>> from a different DOTS client, and the DOTS server >>>>>>>>>>>> decides to >>>>>>>>> maintain >>>>>>>>>>>> the conflicting mitigation request, the DOTS server >>>>>>>>>>>> returns >>>>>>> 4.09 >>>>>>>>>>>> (Conflict) [RFC8132] to the requesting DOTS client. The >>>>>>> response >>>>>>>>>>>> includes enough information for a DOTS client to >>>>>>>>>>>> recognize the >>>>>>>>> source >>>>>>>>>>>> of the conflict as described below: >>>>>>>>>>>> >>>>>>>>>>>> NEW: >>>>>>>>>>>> If the request is conflicting with an existing >>>>>>>>>>>> mitigation >>>>>>> request >>>>>>>>>>>> from a different DOTS client, the DOTS server may return >>>>>>>>>>>> 2.01 >>>>>>>>> (Created) >>>>>>>>>>>> or 4.09 (Conflict) to the requesting DOTS client. The >> response >>>>>>>>>>>> includes enough information for a DOTS client to >>>>>>>>>>>> recognize the >>>>>>>>> source >>>>>>>>>>>> of the conflict as described below: >>>>>>>>>>>> >>>>>>>>>>> Yes, it works for me. >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>>>>>> Tiru said: >>>>>>>>>>>>>>> > In this case, the resource should be created and the >>>>>>>>>>>>>>> server should >>>>>>>>>>>>> return >>>>>>>>>>>>>>> success (2.01 or 2.04) response code along with the >>>>>>>>>>>>>>> conflict- >>>>>>>>>>> information. >>>>>>>>>>>>>>> In this situation, (B) will get 2.01 or 2.04 along with the >>>>>>>>>>>>>>> rejected >>>>>>>>>>> code >>>>>>>>>>>>> '8' >>>>>>>>>>>>>>> (Which mitigation request will be selected by the DOTS >>>>>>>>>>>>>>> server is >>>>>>>>>>>>>>> implementation- and deployment-specific.) >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Thanks, >>>>>>>>>>>>>>> Kaname >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> On 2018/05/11 15:09, mohamed.boucadair@orange.com >>> wrote: >>>>>>>>>>>>>>>> Hi Kaname, >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> If the server decides not to maintain the conflicting >>>>>>>>>>>>>>>> request, then the >>>>>>>>>>>>>>> present request will be processed as normal: that is 2.01 >>>>>>>>>>>>>>> will be >>>>>>>>>>> returned >>>>>>>>>>>>> to >>>>>>>>>>>>>>> ack successful handling. A notification will be sent to the >>>>>>>>>>>>>>> client owner >>>>>>>>>>>>> of >>>>>>>>>>>>>>> the conflicting request to notify withdrawal (section 4.4.2). >>>>>>>>>>>>>>>> The text focuses on the case ", and the DOTS server >>>>>>>>>>>>>>>> decides to maintain >>>>>>>>>>>>> the >>>>>>>>>>>>>>> conflicting mitigation request" because this is the one >>>>>>>>>>>>>>> which requires additional specification vs. normal request >>>>>>>>>>>>>>> that is accepted by a >>>>>>>>>>> server. >>>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>>> Med >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> -----Message d'origine----- De : kaname nishizuka >>>>>>>>>>>>>>>>> [mailto:kaname@nttv6.jp] Envoyé : >>>>>>>>>>>>>>>>> mercredi 9 mai 2018 10:41 À : BOUCADAIR Mohamed >>> IMT/OLN >>>>>>>> Cc : >>>>>>>>>>>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>>>>>>>>>>> draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Hi Med, >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> I'm OK with this change. >>>>>>>>>>>>>>>>> However, to be precise, I'd like to suggest to state >>>>>>>>>>>>>>>>> about the case >>>>>>>>>>> the >>>>>>>>>>>>>>> DOTS >>>>>>>>>>>>>>>>> server decides NOT to maintain it. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> NEW-2: >>>>>>>>>>>>>>>>>    If the request is conflicting with an existing >>>>>>>>>>>>>>>>> mitigation >>>>>>>>>>> request >>>>>>>>>>>>>>>>>    from a different DOTS client, and the DOTS >>>>>>>>>>>>>>>>> server decides to >>>>>>>>>>>>> maintain >>>>>>>>>>>>>>>>>    the conflicting mitigation request, the DOTS >>>>>>>>>>>>>>>>> server returns >>>>>>>>>>> 2.01 >>>>>>>>>>>>>>>>>    (Created) to the requesting DOTS client. >>>>>>>>>>>>>>>>>    Otherwise, the DOTS server returns 4.09 >>>>>>>>>>>>>>>>> (Conflict) >>>>>>>>> [RFC8132]. >>>>>>>>>>>>>>>>>    The response includes enough information for a >>>>>>>>>>>>>>>>> DOTS client >>>>>>>>> to >>>>>>>>>>>>>>>>>    recognize the source of the conflict as >>>>>>>>>>>>>>>>> described >>>>>>> below: >>>>>>>>>>>>>>>>> thanks, >>>>>>>>>>>>>>>>> Kaname >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> On 2018/05/09 14:51, mohamed.boucadair@orange.com >>> wrote: >>>>>>>>>>>>>>>>>> Hi Kaname, >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> After thinking about this, I do think that you have a >>>>>>>>>>>>>>>>>> valid point. I >>>>>>>>>>>>>>>>> suggest to make to make this change (marked with ^^^^) >>>>>>>>>>>>>>>>>> OLD: >>>>>>>>>>>>>>>>>> If the request is conflicting with an existing >>>>>>>>>>>>>>>>>> mitigation >>>>>>>>>>> request >>>>>>>>>>>>>>>>>> from a different DOTS client, and the DOTS >>>>>>>>>>>>>>>>>> server decides to >>>>>>>>>>>>>>> maintain >>>>>>>>>>>>>>>>>> the conflicting mitigation request, the DOTS >>>>>>>>>>>>>>>>>> server returns >>>>>>>>>>> 4.09 >>>>>>>>>>>>>>>>>> (Conflict) [RFC8132] to the requesting DOTS >> client. >>>>>>>>>>>>>>>>>> The >>>>>>>>>>> response >>>>>>>>>>>>>>>>>> includes enough information for a DOTS client >>>>>>>>>>>>>>>>>> to recognize the >>>>>>>>>>>>>>> source >>>>>>>>>>>>>>>>>> of the conflict as described below: >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> NEW: >>>>>>>>>>>>>>>>>> If the request is conflicting with an existing >>>>>>>>>>>>>>>>>> mitigation >>>>>>>>>>> request >>>>>>>>>>>>>>>>>> from a different DOTS client, and the DOTS >>>>>>>>>>>>>>>>>> server decides to >>>>>>>>>>>>>>> maintain >>>>>>>>>>>>>>>>>> the conflicting mitigation request, the DOTS >>>>>>>>>>>>>>>>>> server returns >>>>>>>>>>> 2.01 >>>>>>>>>>> ^^^^ >>>>>>>>>>>>>>>>>> (Created) to the requesting DOTS client. The >>>>>>> response^ >>>>>>>>>>>>>>>>>> ^^^^^^^^ >>>>>>>>>>>>>>>>>> includes enough information for a DOTS client >>>>>>>>>>>>>>>>>> to recognize the >>>>>>>>>>>>>>> source >>>>>>>>>>>>>>>>>> of the conflict as described below: >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>>>>> Med >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> -----Message d'origine----- De : Dots >>>>>>>>>>>>>>>>>>> [mailto:dots-bounces@ietf.org] De la part de >>>>>>>>>>>>>>>>>>> mohamed.boucadair@orange.com Envoyé : lundi 7 mai >>> 2018 >>>>>>>>>> 08:38 >>>>>>>>>>>>>>>>>>> À : kaname nishizuka; dots@ietf.org Objet : Re: [Dots] >>>>>>>>>>>>>>>>>>> I-D >>>>>>>>>>>>>>>>>>> Action: draft-ietf-dots-signal-channel-19.txt >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Re-, >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Agree that the codes are not the same, but alternatives >>>>>>>>>>>>>>>>>>> ones as >>>>>>>>>>>>>>> summarized >>>>>>>>>>>>>>>>>>> here: >>> https://mailarchive.ietf.org/arch/msg/dots/hA3MLKlkXFimpAn5KSYTayaVkjA. >>>>>>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>>>>>> Med >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> -----Message d'origine----- De : kaname nishizuka >>>>>>>>>>>>>>>>>>>> [mailto:kaname@nttv6.jp] Envoyé : >>>>>>>>>>>>>>>>>>>> lundi 7 mai 2018 08:20 À : BOUCADAIR Mohamed >>> IMT/OLN; >>>>>>>>>>>>>>>>>>>> dots@ietf.org Objet : Re: [Dots] I-D Action: >>>>>>>>>>>>>>>>>>>> draft-ietf-dots-signal-channel- >>>>>>>>>>> 19.txt >>>>>>>>>>>>>>>>>>>> Hi Med, >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> I've read the thread. >>>>>>>>>>>>>>>>>>>> and the code '8' of the thread is different from the >>>>>>>>>>>>>>>>>>>> code '8' of >>>>>>>>>>> the >>>>>>>>>>>>>>>>>>> current >>>>>>>>>>>>>>>>>>>> draft. >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> they'd been discussing the 7,8 and 9 based on this >>>>>>>>>>>>>>>>>>>> definition, >>>>>>>>>>> right? >>>>>>>>>>>>> https://mailarchive.ietf.org/arch/msg/dots/7zljzN8nycZX7E7ghg >>>>>>>>>>>>> k1 >>>>>>>>>>>>> ux32 >>>>>>>>>>>>> MkM >>>>>>>>>>>>>>>>>>>> == >>>>>>>>>>>>>>>>>>>> 7 | DOTS Server has detected conflicting mitigation >>>>>>>>>>>>>>>>>>>> requests from >>>>>>>>>>>>>>>>> different >>>>>>>>>>>>>>>>>>>> DOTS clients.  This mitigation request is currently >>>>>>>>>>>>>>>>>>>> inactive until >>>>>>>>>>>>> the >>>>>>>>>>>>>>>>>>>> conflicts are resolved. Another mitigation request is >>>>>>> active. >>>>>>>>>>>>>>>>>>>> 8 | DOTS Server has detected conflicting mitigation >>>>>>>>>>>>>>>>>>>> requests from >>>>>>>>>>>>>>>>> different >>>>>>>>>>>>>>>>>>>> DOTS clients.  This mitigation request is currently >> active. >>>>>>>>>>>>>>>>>>>> 9 | DOTS Server has detected conflicting mitigation >>>>>>>>>>>>>>>>>>>> requests from >>>>>>>>>>>>>>>>> different >>>>>>>>>>>>>>>>>>>> DOTS clients.  All conflicting mitigation requests are >>>>>>>>> inactive. >>>>>>>>>>>>>>>>>>>> == >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> Kaname >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> On 2018/05/07 15:12, >>> mohamed.boucadair@orange.com >>>>>>>> wrote: >>>>>>>>>>>>>>>>>>>>> Hi Kaname, >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Please check >>>>>>>>>>>>> https://mailarchive.ietf.org/arch/msg/dots/z_cZR9_u273HzC9o0I >>>>>>>>>>>>> y9 >>>>>>>>>>>>> FeQZ >>>>>>>>>>>>> 0Jo >>>>>>>>>>>>>>>>>>> about >>>>>>>>>>>>>>>>>>>> the rationale for allowing to return code '8' even in >>>>>>>>>>>>>>>>>>>> a >>>>>>>>>>> notification >>>>>>>>>>>>>>>>>>> message. >>>>>>>>>>>>>>>>>>>> The intent was to have code '8' as a transition state. >>>>>>>>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>>>>>>>> Med >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> -----Message d'origine----- De : kaname nishizuka >>>>>>>>>>>>>>>>>>>>>> [mailto:kaname@nttv6.jp] Envoyé : mercredi 2 mai >>>>>>>>>>>>>>>>>>>>>> 2018 >>>>>>>>>>>>>>>>>>>>>> 02:49 À : BOUCADAIR Mohamed IMT/OLN; >>> dots@ietf.org >>>>>>>>>> Objet : >>>>>>>>>>>>>>>>>>>>>> Re: [Dots] I-D Action: >>>>>>>>>>>>>>>>>>>>>> draft-ietf-dots-signal-channel- >>>>>>>>>>>>> 19.txt >>>>>>>>>>>>>>>>>>>>>> Hi, >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> I'd like to ask one clarification question about >>>>>>>>>>>>>>>>>>>>>> status code >>>>>>>>> 8: >>>>>>>>>>>>>>>>>>>>>>    o  A notification message with 'status' >>>>>>>>>>>>>>>>>>>>>> code set to '8 >>>>>>>>>>>>> (Attack >>>>>>>>>>>>>>>>>>>>>>       mitigation is rejected)' and >>>>>>>>>>>>>>>>>>>>>> 'conflict- >>>>>>> status' >>>>>>>>>>>>>>>>>>>>>> set to >>>>>>>>>>>>> '1' >>>>>>>>>>>>>>> is >>>>>>>>>>>>>>>>>>> sent >>>>>>>>>>>>>>>>>>>>>>       to a DOTS client to indicate that this >>>>>>>>>>>>>>>>>>>>>> mitigation >>>>>>>>>>>>> request >>>>>>>>>>>>>>> is >>>>>>>>>>>>>>>>>>>>>>       rejected because a conflict is detected. >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> If a mitigation request is rejected due to a >>>>>>>>>>>>>>>>>>>>>> conflict, it is >>>>>>>>>>>>> rejected >>>>>>>>>>>>>>>>> at >>>>>>>>>>>>>>>>>>>>>> PUT(4.09(Conflict)), so no resource will be created. >>>>>>>>>>>>>>>>>>>>>> So it looks there is no chance to return '8 (Attack >>>>>>>>>>>>>>>>>>>>>> mitigation is >>>>>>>>>>>>>>>>>>>> rejected)'. >>>>>>>>>>>>>>>>>>>>>> thanks, >>>>>>>>>>>>>>>>>>>>>> Kaname >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> On 2018/04/10 22:47, >>> mohamed.boucadair@orange.com >>>>>>>>>> wrote: >>>>>>>>>>>>>>>>>>>>>>> Re-, >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> This version addresses the comments raised during >>>>>>>>>>>>>>>>>>>>>>> the WGLC, in >>>>>>>>>>>>>>>>>>>> particular: >>>>>>>>>>>>>>>>>>>>>>> - (Clarification) Indicate that only one hop-limit >>>>>>>>>>>>>>>>>>>>>>> is included >>>>>>>>>>>>>>>>>>>>>>> - Specify the loop diagnostic payload >>>>>>>>>>>>>>>>>>>>>>> - (Clarification) Indicate explicitly that GET >>>>>>>>>>>>>>>>>>>>>>> messages with >>>>>>>>>>> 'sid' >>>>>>>>>>>>>>> are >>>>>>>>>>>>>>>>>>>>>> allowed >>>>>>>>>>>>>>>>>>>>>>> - Update the redirect behavior. >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>>>>>>>>>> Med >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> -----Message d'origine----- De : Dots >>>>>>>>>>>>>>>>>>>>>>>> [mailto:dots-bounces@ietf.org] De la part de >>>>>>>>>>> internet- >>>>>>>>>>>>>>>>>>>>>>>> drafts@ietf.org >>>>>>>>>>>>>>>>>>>>>>>> Envoyé : mardi 10 avril 2018 15:40 À : >>>>>>>>>>>>>>>>>>>>>>>> i-d-announce@ietf.org Cc : dots@ietf.org Objet : >>>>>>>>>>>>>>>>>>>>>>>> [Dots] I-D Action: draft-ietf-dots-signal-channel- >>>>>>>>>>> 19.txt >>>>>>>>>>>>>>>>>>>>>>>> A New Internet-Draft is available from the on-line >>>>>>>>>>>>>>>>>>>>>>>> Internet- >>>>>>>>>>>>> Drafts >>>>>>>>>>>>>>>>>>>>>>>> directories. >>>>>>>>>>>>>>>>>>>>>>>> This draft is a work item of the DDoS Open Threat >>>>>>>>>>>>>>>>>>>>>>>> Signaling WG >>>>>>>>>>> of >>>>>>>>>>>>>>> the >>>>>>>>>>>>>>>>>>>>>> IETF. >>>>>>>>>>>>>>>>>>>>>>>> Title : Distributed Denial- >> of- >>>>>>>>> Service >>>>>>>>>>> Open >>>>>>>>>>>>>>>>> Threat >>>>>>>>>>>>>>>>>>>>>> Signaling >>>>>>>>>>>>>>>>>>>>>>>> (DOTS) Signal Channel Specification >>>>>>>>>>>>>>>>>>>>>>>> Authors : Tirumaleswar Reddy >>>>>>>>>>>>>>>>>>>>>>>> Mohamed Boucadair >>>>>>>>>>>>>>>>>>>>>>>> Prashanth Patil >>>>>>>>>>>>>>>>>>>>>>>> Andrew Mortensen >>>>>>>>>>>>>>>>>>>>>>>> Nik Teague >>>>>>>>>>>>>>>>>>>>>>>> Filename : draft-ietf-dots-signal-channel- >>>>>>> 19.txt >>>>>>>>>>>>>>>>>>>>>>>> Pages : 86 >>>>>>>>>>>>>>>>>>>>>>>> Date : 2018-04-10 >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> Abstract: >>>>>>>>>>>>>>>>>>>>>>>> This document specifies the DOTS signal >>>>>>>>>>>>>>>>>>>>>>>> channel, a >>>>>>>>>>>>> protocol >>>>>>>>>>>>>>> for >>>>>>>>>>>>>>>>>>>>>>>> signaling the need for protection >>>>>>>>>>>>>>>>>>>>>>>> against Distributed >>>>>>>>>>>>>>> Denial- >>>>>>>>>>>>>>>>> of- >>>>>>>>>>>>>>>>>>>>>>>> Service (DDoS) attacks to a server >>>>>>>>>>>>>>>>>>>>>>>> capable of enabling >>>>>>>>>>>>>>> network >>>>>>>>>>>>>>>>>>>>>>>> traffic mitigation on behalf of the >>>>>>>>>>>>>>>>>>>>>>>> requesting >>>>>>>>> client. >>>>>>>>>>>>>>>>>>>>>>>> A companion document defines the DOTS >>>>>>>>>>>>>>>>>>>>>>>> data channel, a >>>>>>>>>>>>>>> separate >>>>>>>>>>>>>>>>>>>>>>>> reliable communication layer for DOTS >>>>>>>>>>>>>>>>>>>>>>>> management and >>>>>>>>>>>>>>>>>>> configuration >>>>>>>>>>>>>>>>>>>>>>>> purposes. >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> Editorial Note (To be removed by RFC Editor) >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> Please update these statements with the >>>>>>>>>>>>>>>>>>>>>>>> RFC number to >>>>>>>>>>> be >>>>>>>>>>>>>>>>> assigned >>>>>>>>>>>>>>>>>>>> to >>>>>>>>>>>>>>>>>>>>>>>> this document: >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> o "This version of this YANG module is >>>>>>>>>>>>>>>>>>>>>>>> part of RFC >>>>>>>>>>>>> XXXX;" >>>>>>>>>>>>>>>>>>>>>>>> o "RFC XXXX: Distributed >>>>>>>>>>>>>>>>>>>>>>>> Denial-of-Service Open >>>>>>>>>>> Threat >>>>>>>>>>>>>>>>> Signaling >>>>>>>>>>>>>>>>>>>>>>>> (DOTS) Signal Channel >>>>>>>>>>>>>>>>>>>>>>>> Specification"; >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> o "| [RFCXXXX] |" >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> o reference: RFC XXXX >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> Please update TBD statements with the >>>>>>>>>>>>>>>>>>>>>>>> port number to >>>>>>>>>>> be >>>>>>>>>>>>>>>>> assigned >>>>>>>>>>>>>>>>>>> to >>>>>>>>>>>>>>>>>>>>>>>> DOTS Signal Channel Protocol. >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> Also, please update the "revision" date >>>>>>>>>>>>>>>>>>>>>>>> of the YANG >>>>>>>>>>>>> module. >>>>>>>>>>>>>>>>>>>>>>>> The IETF datatracker status page for this draft is: >>>>>>>>>>>>>>>>>>>>>>>> https://datatracker.ietf.org/doc/draft-ietf-dots-s >>>>>>>>>>>>>>>>>>>>>>>> ig >>>>>>>>>>>>>>>>>>>>>>>> nal- >>>>>>>>>>> channel/ >>>>>>>>>>>>>>>>>>>>>>>> There are also htmlized versions available at: >>>>>>>>>>>>>>>>>>>>>>>> https://tools.ietf.org/html/draft-ietf-dots-signal >>>>>>>>>>>>>>>>>>>>>>>> -c >>>>>>>>>>>>>>>>>>>>>>>> hann >>>>>>>>>>>>>>>>>>>>>>>> el-19 >>>>>>>>>>>>>>>>>>>>>>>> https://datatracker.ietf.org/doc/html/draft-ietf-d >>>>>>>>>>>>>>>>>>>>>>>> ot >>>>>>>>>>>>>>>>>>>>>>>> s-si >>>>>>>>>>>>>>>>>>>>>>>> gnal- >>>>>>>>>>>>>>> channel- >>>>>>>>>>>>>>>>>>> 19 >>>>>>>>>>>>>>>>>>>>>>>> A diff from the previous version is available at: >>>>>>>>>>>>>>>>>>>>>>>> https://www.ietf.org/rfcdiff?url2=draft-ietf-dots- >>>>>>>>>>>>>>>>>>>>>>>> si >>>>>>>>>>>>>>>>>>>>>>>> gnal >>>>>>>>>>>>>>>>>>>>>>>> - >>>>>>>>>>> channel- >>>>>>>>>>>>> 19 >>>>>>>>>>>>>>>>>>>>>>>> Please note that it may take a couple of minutes >>>>>>>>>>>>>>>>>>>>>>>> from the time >>>>>>>>>>> of >>>>>>>>>>>>>>>>>>>>>> submission >>>>>>>>>>>>>>>>>>>>>>>> until the htmlized version and diff are available >>>>>>>>>>>>>>>>>>>>>>>> at >>>>>>>>>>>>>>> tools.ietf.org. >>>>>>>>>>>>>>>>>>>>>>>> Internet-Drafts are also available by anonymous >>> FTP at: >>>>>>>>>>>>>>>>>>>>>>>> ftp://ftp.ietf.org/internet-drafts/ >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>> _______________________________________________ >>>>>>>>>>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>> _______________________________________________ >>>>>>>>>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>> _______________________________________________ >>>>>>>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>> Dots mailing list >>>>>>>>>>>>>> Dots@ietf.org >>>>>>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>>>>>> _______________________________________________ >>>>>>>>>> Dots mailing list >>>>>>>>>> Dots@ietf.org >>>>>>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>>> _______________________________________________ >>>>>> Dots mailing list >>>>>> Dots@ietf.org >>>>>> https://www.ietf.org/mailman/listinfo/dots >>>>> _______________________________________________ >>>>> Dots mailing list >>>>> Dots@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/dots >>>> _______________________________________________ >>>> Dots mailing list >>>> Dots@ietf.org >>>> https://www.ietf.org/mailman/listinfo/dots